last executing test programs: 4.786132087s ago: executing program 1 (id=3118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000000806010100b7000000000000020000020500010007000000090002"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="02000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x11, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.448372634s ago: executing program 3 (id=3128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 2.43202367s ago: executing program 1 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c00030006000000000000b40800010063707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.198985761s ago: executing program 1 (id=3132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) close(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.197244036s ago: executing program 3 (id=3133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x9, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.056290366s ago: executing program 3 (id=3134): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0", 0x79}], 0x1}}], 0x2, 0x2090) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x3, 0x28}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000000)=0x10) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x1000, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c00006dab00"/16, @ANYRES32=0x0, @ANYBLOB="ac141410ac1414aa00000000140000000000000000000000070000004404f74100000000"], 0x38}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.055726845s ago: executing program 4 (id=3135): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x42, "4ffd0de6ba668021e0a2216be98bda8b71d3837e38181c26a2dd3ab8116f2156dd197045a54203e4b1942500a9a1ec38f6096740100dfaf152819836dd22cb630dba"}, &(0x7f0000000180)=0x4a) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x5, 0x8, 0xa12}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 1.908407479s ago: executing program 2 (id=3136): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x8}, {r2, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 1.864363002s ago: executing program 1 (id=3137): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r2) shutdown(r1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.64393588s ago: executing program 2 (id=3138): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, @jmp={0x5, 0x1, 0xd, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) 1.461897624s ago: executing program 2 (id=3139): r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000000580)="e923", 0x2, 0x854, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) 1.459219082s ago: executing program 0 (id=3140): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c000280060012"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x10008, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, r4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa508c888da3da3d9}]}}]}, 0x64}}, 0x4000010) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 1.232800344s ago: executing program 2 (id=3141): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 1.220454178s ago: executing program 0 (id=3142): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000440)={@multicast2, @loopback}) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000810) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000)=[{r0, 0x7014}], 0x1, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffb00000000000000000000004000000bb7f1affc600feff0000000a9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x7000000, 0x4}, 0x94) 1.070511195s ago: executing program 4 (id=3143): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x9}, 0x94) 984.647832ms ago: executing program 2 (id=3144): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000680)) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f0000000600)=[{&(0x7f0000000080)="67d54d09e33ff501287d4c508875fc9648e2e0fc67ae7d", 0x17}, {&(0x7f00000000c0)="00843d048f369937", 0x8}, {&(0x7f0000000100)="85551f710cfc3f25cfc824f37fa0c2423cbb2812c510f98fc56534847894b1e3a9bee835d615304fd558a5215f11b1acbae2f53816a01aaf1a2a9a7030ed6b0216bcf3be899f3ad261825f2cc19522f1db5fb6cff3f1151106841f160a18340872fa0c773234b6f85c0fe22175b1d48903a3bbcbce9b", 0x76}, {&(0x7f0000000200)="b53916f8052e92b6b54480f8067f7b17956eb42204b4f683309cace9b6b30ea3804d938e923f3642d619b1cc157409bb60c55982ec65b9acf9cade18e32ee40d008a2cedf819e3637ca849a876a8011a3d7f8c588a15a1808dc1f60ea66078050e293f5986143a0d9adbebb6a56f2b5d8b0de5358105e54e2ed1907b8466bc4a80a1d53f0ea6802e12f870c214a98e1424cb4bb77205aedb6427612e7e5d", 0x9e}, {&(0x7f00000002c0)="3d1ff1b9e661981e9773b5a263679d63d7eaa6e2e3e0f65fe56ed4bf615b59b5f527f111b27bf422fac94f05fdb5144bd8545776e530f51ba91557ee756092587e71f0f8b5e18ed85f1036eb7adfb2d1d6d9ab41f814697bd3ad57dae6e65ad8aa0823a93d5af9575b9a556872ebe6ebec9c9375cfd842247353b2195593b1a7c013f0353a47abd46e8f5322", 0x8c}, {&(0x7f0000000400)="ca2724b0c0a4cfe0133611ed8f65ec11230302b2a93a48a2585f13f12b88720fab9896f51a590f53a610c45b2de3bd4cfd5a2d9b4c55c63a0ad63ece6b5768b26819b31fab467b95abb363560848c3ec0391a35c64f1389eac420ddeda9517690463960d55aec030483c92e0f20115902ae1be0940124080", 0x78}], 0x6, 0x9, 0x0, 0x4, 0x5, 0x4af1, 0x5, 0xff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="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", 0x13c}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffff87) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0xf5, &(0x7f0000000480)=""/6, &(0x7f0000000580)=0x6) socket$nl_generic(0x10, 0x3, 0x10) 894.372091ms ago: executing program 4 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x28}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 809.874491ms ago: executing program 4 (id=3146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x586c1225dc506f2f, 0xfc, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 702.832944ms ago: executing program 3 (id=3147): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 585.709977ms ago: executing program 3 (id=3148): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r1, 0x8}, {r2, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 584.988329ms ago: executing program 4 (id=3149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe7ff007b80ea824f, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xffff, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 583.521041ms ago: executing program 1 (id=3150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40c0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff1, 0x8}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x10, 0xd, 0x2, 0x8}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 547.113536ms ago: executing program 0 (id=3151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x62, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x0, @in6=@mcast1, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x17c}}, 0x80c4) 320.08857ms ago: executing program 0 (id=3152): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c000280060012"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x10008, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, r4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa508c888da3da3d9}]}}]}, 0x64}}, 0x4000010) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 315.371698ms ago: executing program 2 (id=3153): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r3, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r3, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000c00)="002000011a2b3c4d00080000000200010100000005f5e1000040000000000000", 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x42, "4ffd0de6ba668021e0a2216be98bda8b71d3837e38181c26a2dd3ab8116f2156dd197045a54203e4b1942500a9a1ec38f6096740100dfaf152819836dd22cb630dba"}, &(0x7f0000000180)=0x4a) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x5, 0x8, 0xa12}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5, 0x4, 0xfc}]}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 304.390085ms ago: executing program 3 (id=3154): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES8=r0], 0x18, 0xc1}, 0xc410) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) close(r2) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x80000000004, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in=@rand_addr=0x64010101, 0x200, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}]}]}, 0x13c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x96}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r6, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 170.463346ms ago: executing program 0 (id=3155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 142.202322ms ago: executing program 4 (id=3156): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bd"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x20008044) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800070127bd351af6f168a5255500000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x20004000) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @remote, 0xfffffffc}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r6, 0x80}, 0x8) 111.147631ms ago: executing program 1 (id=3157): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0", 0x79}], 0x1}}], 0x2, 0x2090) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x3, 0x28}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000000)=0x10) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x1000, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c00006dab00"/16, @ANYRES32=0x0, @ANYBLOB="ac141410ac1414aa00000000140000000000000000000000070000004404f74100000000"], 0x38}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 0 (id=3158): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): entered promiscuous mode [ 138.772186][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 138.786644][ T7262] bridge0: entered promiscuous mode [ 138.803144][ T7267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.308'. [ 138.917283][ T7269] bridge0: port 3(team0) entered disabled state [ 138.924614][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.932307][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.089300][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.108842][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.211923][ T7269] vlan3: left promiscuous mode [ 139.216962][ T7269] bridge0: left promiscuous mode [ 139.229332][ T6582] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.288007][ T3370] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.321879][ T3370] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.367212][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.066755][ T3370] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.277821][ T7325] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 140.338661][ T7328] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 140.375045][ T7328] bridge0: port 3(team0) entered disabled state [ 140.382263][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.389943][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.427176][ T7325] block nbd3: not configured, cannot reconfigure [ 140.452002][ T7328] bridge0: port 3(team0) entered blocking state [ 140.458434][ T7328] bridge0: port 3(team0) entered forwarding state [ 140.465734][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.472935][ T7328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.480460][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.487667][ T7328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.550033][ T7328] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 140.642904][ T7328] netlink: 5 bytes leftover after parsing attributes in process `syz.2.324'. [ 140.658417][ T7329] syzkaller0: entered promiscuous mode [ 140.663988][ T7329] syzkaller0: entered allmulticast mode [ 140.678159][ T7329] sctp: [Deprecated]: syz.0.325 (pid 7329) Use of int in maxseg socket option. [ 140.678159][ T7329] Use struct sctp_assoc_value instead [ 142.019711][ T7365] bond1: option primary_reselect: invalid value (6) [ 142.041475][ T7365] bond1 (unregistering): Released all slaves [ 142.077781][ T7387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'. [ 142.970257][ T7412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.350'. [ 143.637253][ T7426] netlink: 144 bytes leftover after parsing attributes in process `syz.4.356'. [ 144.089799][ T7444] netlink: 'syz.0.362': attribute type 1 has an invalid length. [ 144.180544][ T7444] bond1: entered promiscuous mode [ 144.186174][ T7444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.267544][ T7448] ipvlan0: entered allmulticast mode [ 144.292671][ T7448] bond1: entered allmulticast mode [ 144.332567][ T7444] ipvlan1: entered allmulticast mode [ 144.704388][ T7468] netlink: 144 bytes leftover after parsing attributes in process `syz.0.369'. [ 145.316212][ T7494] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 145.414004][ T7494] bond2: entered promiscuous mode [ 145.419967][ T7494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.436442][ T7500] ipvlan2: entered allmulticast mode [ 145.442303][ T7500] bond2: entered allmulticast mode [ 145.458219][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 145.472350][ T7494] ipvlan3: entered allmulticast mode [ 145.582096][ T7502] vlan2: entered promiscuous mode [ 145.589869][ T7502] bridge0: entered promiscuous mode [ 145.654906][ T7510] virt_wifi0: left promiscuous mode [ 146.126256][ T7525] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 146.468972][ T7539] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 146.602335][ T7539] bond1: entered promiscuous mode [ 146.630706][ T7539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.715940][ T7543] ipvlan0: entered allmulticast mode [ 146.740783][ T7543] bond1: entered allmulticast mode [ 146.784877][ T7545] ipvlan1: entered allmulticast mode [ 146.917048][ T7551] netlink: 44 bytes leftover after parsing attributes in process `syz.3.395'. [ 146.996201][ T7551] netlink: 'syz.3.395': attribute type 2 has an invalid length. [ 148.079016][ T7585] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 148.125276][ T7585] bond3: entered promiscuous mode [ 148.132177][ T7585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.201715][ T7585] ipvlan2: entered allmulticast mode [ 148.207242][ T7585] bond3: entered allmulticast mode [ 148.298170][ T7585] ipvlan3: entered allmulticast mode [ 148.411426][ T7591] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 148.658525][ T7600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.693478][ T7600] bond1: (slave bond2): making interface the new active one [ 148.726392][ T7600] bond1: (slave bond2): Enslaving as an active interface with an up link [ 149.294277][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 149.369527][ T7625] vlan0: entered promiscuous mode [ 149.382239][ T7625] bridge0: entered promiscuous mode [ 149.403569][ T7630] 0ªî{X¹¦: left allmulticast mode [ 149.426264][ T7630] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 149.433791][ T7630] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 149.444752][ T7630] bridge1: left promiscuous mode [ 149.450299][ T7630] bridge1: left allmulticast mode [ 149.455514][ T7630] bridge2: left promiscuous mode [ 149.460949][ T7630] bridge2: left allmulticast mode [ 149.473666][ T7630] bond1: left promiscuous mode [ 149.480222][ T7630] ipvlan0: left allmulticast mode [ 149.487214][ T7630] ipvlan1: left allmulticast mode [ 149.492542][ T7630] bond1: left allmulticast mode [ 149.499330][ T7630] bond2: left promiscuous mode [ 149.507043][ T7630] ipvlan2: left allmulticast mode [ 149.512346][ T7630] ipvlan3: left allmulticast mode [ 149.519819][ T7630] bond2: left allmulticast mode [ 149.536768][ T1048] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.548683][ T1048] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.558775][ T6582] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.723232][ T7642] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 149.769707][ T7642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.780739][ T7642] bond3: (slave bond4): making interface the new active one [ 149.790675][ T7642] bond3: (slave bond4): Enslaving as an active interface with an up link [ 150.051670][ T7653] netlink: 'syz.0.426': attribute type 3 has an invalid length. [ 151.197345][ T7682] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 151.381231][ T7689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.474648][ T7682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.495707][ T7682] bond4: (slave bond5): making interface the new active one [ 151.505772][ T7682] bond4: (slave bond5): Enslaving as an active interface with an up link [ 151.784852][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 153.246277][ T7766] netlink: 144 bytes leftover after parsing attributes in process `syz.1.462'. [ 153.312516][ T7773] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 153.793212][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 153.880223][ T7790] netlink: 300 bytes leftover after parsing attributes in process `syz.2.470'. [ 153.980055][ T7797] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 154.003854][ T7797] team0: Port device dummy0 added [ 154.040565][ T5282] veth0_macvtap: left promiscuous mode [ 154.154564][ T7801] netlink: 'syz.3.474': attribute type 93 has an invalid length. [ 154.176617][ T7802] batadv_slave_0: entered allmulticast mode [ 154.201602][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 154.231160][ T7802] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 154.516436][ T7813] netlink: 104 bytes leftover after parsing attributes in process `syz.3.476'. [ 154.556325][ T7806] veth3: entered promiscuous mode [ 154.570918][ T7806] veth3: entered allmulticast mode [ 154.594612][ T7806] team0: Device veth3 is up. Set it down before adding it as a team port [ 155.014586][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 155.037099][ T7838] netlink: 300 bytes leftover after parsing attributes in process `syz.3.484'. [ 155.190731][ T7844] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 155.246895][ T7844] netlink: 104 bytes leftover after parsing attributes in process `syz.1.486'. [ 155.250460][ T7848] netlink: 'syz.3.487': attribute type 62 has an invalid length. [ 155.442694][ T7855] netlink: 'syz.2.490': attribute type 3 has an invalid length. [ 155.466038][ T7854] netlink: 104 bytes leftover after parsing attributes in process `syz.4.489'. [ 155.665379][ T7864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.859994][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 155.898142][ T7866] Set syz1 is full, maxelem 2076 reached [ 156.349369][ T7893] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 156.427113][ T7893] netlink: 104 bytes leftover after parsing attributes in process `syz.0.498'. [ 156.594934][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'. [ 156.688392][ T7908] netlink: 104 bytes leftover after parsing attributes in process `syz.1.502'. [ 157.235903][ T7932] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 157.321385][ T7932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.512'. [ 161.053048][ T8042] __nla_validate_parse: 4 callbacks suppressed [ 161.053069][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 161.884649][ T8087] netlink: 87 bytes leftover after parsing attributes in process `syz.4.558'. [ 161.958207][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 162.520376][ T3292] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.605635][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'. [ 162.833033][ T8129] xt_time: unknown flags 0xf4 [ 162.933165][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 163.248581][ T8147] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 163.248581][ T8147] Please contact the netfilter-devel mailing list or update your nftables rules. [ 163.921486][ T8172] netlink: 27 bytes leftover after parsing attributes in process `syz.1.583'. [ 164.081327][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 165.402774][ T8235] netlink: 'syz.4.598': attribute type 58 has an invalid length. [ 165.426792][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.598'. [ 165.906426][ T8244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.601'. [ 165.971263][ T8245] netlink: 104 bytes leftover after parsing attributes in process `syz.4.600'. [ 166.337869][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 166.431050][ T8260] netlink: 300 bytes leftover after parsing attributes in process `syz.0.606'. [ 167.945830][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 168.003291][ T8332] netlink: 300 bytes leftover after parsing attributes in process `syz.3.621'. [ 168.039995][ T8334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.618'. [ 168.319238][ T8348] netlink: 104 bytes leftover after parsing attributes in process `syz.3.626'. [ 169.535424][ T8410] netlink: 104 bytes leftover after parsing attributes in process `syz.0.639'. [ 169.780818][ T8416] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 169.898078][ T8416] bond6: entered promiscuous mode [ 169.912054][ T8416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.950781][ T8420] ipvlan4: entered allmulticast mode [ 169.966658][ T8420] bond6: entered allmulticast mode [ 169.999548][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 170.056896][ T8423] ipvlan5: entered allmulticast mode [ 170.398874][ T8437] netlink: 104 bytes leftover after parsing attributes in process `syz.1.651'. [ 170.409907][ T8438] netlink: 80 bytes leftover after parsing attributes in process `syz.0.649'. [ 171.194878][ T8461] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 171.427394][ T8461] bond2: entered promiscuous mode [ 171.455358][ T8461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.481435][ T8468] __nla_validate_parse: 2 callbacks suppressed [ 171.481452][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.657'. [ 171.533904][ T8463] ipvlan2: entered allmulticast mode [ 171.545152][ T8463] bond2: entered allmulticast mode [ 171.593303][ T8464] ipvlan3: entered allmulticast mode [ 171.767074][ T8472] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 171.847789][ T8478] netlink: 104 bytes leftover after parsing attributes in process `syz.0.663'. [ 171.867930][ T8474] netlink: 104 bytes leftover after parsing attributes in process `syz.4.661'. [ 172.110915][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 172.454722][ T8503] netlink: 144 bytes leftover after parsing attributes in process `syz.4.672'. [ 172.992242][ T8515] netlink: 104 bytes leftover after parsing attributes in process `syz.1.677'. [ 173.247379][ T8522] netlink: 60 bytes leftover after parsing attributes in process `syz.4.680'. [ 173.283643][ T8522] netlink: 60 bytes leftover after parsing attributes in process `syz.4.680'. [ 173.466286][ T8530] netlink: 144 bytes leftover after parsing attributes in process `syz.4.684'. [ 173.883959][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 173.927967][ T8554] tap0: tun_chr_ioctl cmd 1074025676 [ 173.933775][ T8554] tap0: owner set to 0 [ 174.295766][ T8576] xt_hashlimit: size too large, truncated to 1048576 [ 174.818001][ T8598] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 177.011761][ T8705] netlink: 'syz.1.742': attribute type 3 has an invalid length. [ 177.021577][ T8705] netlink: 'syz.1.742': attribute type 3 has an invalid length. [ 177.112618][ T8709] __nla_validate_parse: 8 callbacks suppressed [ 177.112638][ T8709] netlink: 144 bytes leftover after parsing attributes in process `syz.1.744'. [ 178.131597][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 178.252082][ T8759] netlink: 300 bytes leftover after parsing attributes in process `syz.2.757'. [ 178.462802][ T8767] team0: Device vlan2 is already an upper device of the team interface [ 178.653237][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.214432][ T8799] netlink: 3 bytes leftover after parsing attributes in process `syz.0.772'. [ 179.250404][ T8799] 0ªX¹¦À: renamed from batadv0 [ 179.273470][ T8799] 0ªX¹¦À: entered allmulticast mode [ 179.297926][ T8799] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 179.310965][ T8799] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 180.621064][ T8864] netlink: 104 bytes leftover after parsing attributes in process `syz.1.792'. [ 180.958412][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 181.264171][ T8880] raw_sendmsg: syz.3.802 forgot to set AF_INET. Fix it! [ 181.613398][ T8901] netlink: 104 bytes leftover after parsing attributes in process `syz.4.806'. [ 181.834287][ T8906] Set syz1 is full, maxelem 2076 reached [ 182.712270][ T8930] netlink: 144 bytes leftover after parsing attributes in process `syz.0.818'. [ 183.357828][ T8968] netlink: 104 bytes leftover after parsing attributes in process `syz.3.824'. [ 183.934450][ T8986] Set syz1 is full, maxelem 2076 reached [ 184.951414][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 186.308149][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.763699][ T9089] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 187.125825][ T9097] netlink: 144 bytes leftover after parsing attributes in process `syz.1.864'. [ 188.014786][ T9127] netlink: 144 bytes leftover after parsing attributes in process `syz.3.875'. [ 188.333222][ T9135] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.878'. [ 188.464084][ T9139] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.613929][ T9146] netlink: 144 bytes leftover after parsing attributes in process `syz.4.880'. [ 189.050103][ T9163] netlink: 144 bytes leftover after parsing attributes in process `syz.4.887'. [ 189.795707][ T9188] netlink: 144 bytes leftover after parsing attributes in process `syz.4.894'. [ 190.261806][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 190.334491][ T9205] netlink: 300 bytes leftover after parsing attributes in process `syz.4.901'. [ 191.343670][ T9250] xt_hashlimit: size too large, truncated to 1048576 [ 191.681738][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 192.025738][ T9269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.131049][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.922'. [ 192.409890][ T9287] xt_hashlimit: size too large, truncated to 1048576 [ 192.920202][ T9308] lo: entered allmulticast mode [ 192.932998][ T9308] lo: left allmulticast mode [ 194.170186][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.570975][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 195.614082][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 195.626681][ T149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.652993][ T149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.690096][ T3370] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.794713][ T9397] openvswitch: netlink: IP tunnel TTL not specified. [ 195.812482][ T9397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.878535][ T9401] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.880426][ T9449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.978'. [ 197.697701][ T9486] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 198.124334][ T9504] syzkaller1: entered promiscuous mode [ 198.134571][ T9504] syzkaller1: entered allmulticast mode [ 198.703613][ T9525] syzkaller1: entered promiscuous mode [ 198.715288][ T9525] syzkaller1: entered allmulticast mode [ 199.274907][ T9547] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1014'. [ 200.660577][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 200.753734][ T9613] syzkaller1: entered promiscuous mode [ 200.759521][ T9613] syzkaller1: entered allmulticast mode [ 202.572004][ T9669] bond0: (slave vlan2): Opening slave failed [ 202.743128][ T9678] netlink: 'syz.3.1058': attribute type 8 has an invalid length. [ 202.765665][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 203.999436][ T9716] sch_tbf: burst 959 is lower than device syzkaller0 mtu (1500) ! [ 204.265495][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1076'. [ 204.504605][ T9739] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1081'. [ 204.520667][ T9739] IPVS: fo: FWM 3 0x00000003 - no destination available [ 205.468116][ T9770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1087'. [ 205.488501][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'. [ 205.518968][ T9770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1087'. [ 205.570112][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'. [ 205.768204][ T9780] syzkaller1: entered promiscuous mode [ 205.777979][ T9780] syzkaller1: entered allmulticast mode [ 205.788665][ T9783] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1093'. [ 206.658545][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 206.704752][ T9825] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1106'. [ 207.078925][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 207.147788][ T9840] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1110'. [ 207.819613][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 207.976017][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 208.003013][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 209.873258][ T9943] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 210.160882][ T9952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1144'. [ 210.529537][ T9965] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 210.819980][ T9977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1155'. [ 210.943639][ T9979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1156'. [ 210.969490][ T9979] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 210.988411][ T9979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1156'. [ 211.289044][ T9996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'. [ 211.621632][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 211.991512][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 212.080422][T10017] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1170'. [ 212.520589][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 212.542602][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 212.555948][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 214.988206][T10139] netlink: 'syz.2.1199': attribute type 4 has an invalid length. [ 215.193872][T10149] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 216.266449][T10179] __nla_validate_parse: 8 callbacks suppressed [ 216.266468][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 216.351095][T10179] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1209'. [ 216.592666][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 218.426921][T10250] syzkaller0: entered promiscuous mode [ 218.432560][T10250] syzkaller0: entered allmulticast mode [ 218.788336][T10268] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1241'. [ 220.384257][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 220.394187][T10302] netlink: 'syz.1.1252': attribute type 12 has an invalid length. [ 220.580627][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 220.607874][T10302] netlink: 'syz.1.1252': attribute type 12 has an invalid length. [ 220.843445][T10316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1256'. [ 220.859179][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 220.911971][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1259'. [ 221.621788][T10352] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 221.671833][T10352] bond2: entered promiscuous mode [ 221.678486][T10352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.726653][T10352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.733579][T10352] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 221.743973][T10352] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 221.755662][T10352] bond2: (slave ip6gre1): making interface the new active one [ 221.763269][T10352] ip6gre1: entered promiscuous mode [ 221.774795][T10352] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 222.091255][T10367] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1274'. [ 222.137620][T10367] IPVS: fo: FWM 3 0x00000003 - no destination available [ 222.724826][T10398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1282'. [ 225.002778][T10362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.022004][T10384] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 225.298227][T10410] syz_tun: entered promiscuous mode [ 225.333700][T10410] syz_tun: entered allmulticast mode [ 225.359017][T10410] team0: Port device syz_tun added [ 225.580380][T10416] syzkaller1: entered promiscuous mode [ 225.587033][T10416] syzkaller1: entered allmulticast mode [ 226.170379][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 226.246085][T10443] erspan0: entered promiscuous mode [ 226.284551][T10443] macvtap1: entered promiscuous mode [ 226.291412][T10443] macvtap1: entered allmulticast mode [ 226.306639][T10443] erspan0: entered allmulticast mode [ 226.662996][T10449] erspan0: left allmulticast mode [ 226.684799][T10449] erspan0: left promiscuous mode [ 226.720480][T10449] macvtap1: left promiscuous mode [ 226.744840][T10449] macvtap1: left allmulticast mode [ 231.673957][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 232.613684][T10638] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1343'. [ 232.695830][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 232.821676][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 232.898260][T10657] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1348'. [ 233.731479][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 233.754815][T10688] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1357'. [ 234.075840][T10699] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 234.256303][T10699] bond3: entered promiscuous mode [ 234.273882][T10699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.324621][T10707] gretap0: entered promiscuous mode [ 234.373645][T10709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.380859][T10709] bond3: (slave ipip1): The slave device specified does not support setting the MAC address [ 234.391024][T10709] bond3: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 234.414416][T10709] bond3: (slave ipip1): making interface the new active one [ 234.429778][T10709] ipip1: entered promiscuous mode [ 234.444424][T10709] bond3: (slave ipip1): Enslaving as an active interface with an up link [ 234.597972][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 234.644547][T10720] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1365'. [ 234.922150][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 235.253663][T10736] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 235.697317][T10755] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 237.030121][T10796] __nla_validate_parse: 5 callbacks suppressed [ 237.030138][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 237.269189][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 237.340201][T10806] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1397'. [ 237.891983][T10818] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 238.353342][T10818] bond4 (unregistering): Released all slaves [ 239.327476][T10857] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1408'. [ 240.942803][T10900] pim6reg1: entered promiscuous mode [ 240.967428][T10900] pim6reg1: entered allmulticast mode [ 241.280886][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 241.354410][T10913] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1421'. [ 243.202444][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 243.258792][T10977] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1435'. [ 243.567259][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 244.837607][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 244.862166][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 244.962061][T11037] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1449'. [ 247.701352][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 247.815687][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 247.831748][T11101] gtp0: entered promiscuous mode [ 247.837450][T11101] gtp0: entered allmulticast mode [ 247.845522][T11101] team0: Device gtp0 is of different type [ 247.998426][T11111] netlink: 'syz.1.1467': attribute type 11 has an invalid length. [ 249.510138][T11170] bridge0: port 3(syz_tun) entered blocking state [ 249.517741][T11170] bridge0: port 3(syz_tun) entered disabled state [ 249.528949][T11170] syz_tun: entered allmulticast mode [ 249.540179][T11170] syz_tun: entered promiscuous mode [ 251.070878][T11229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1488'. [ 252.210673][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 252.519917][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 255.610734][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.031629][T11371] tipc: Failed to remove unknown binding: 66,0,0/0:3843739236/3843739238 [ 256.057773][T11371] tipc: Failed to remove unknown binding: 66,0,0/0:3843739236/3843739237 [ 256.429038][T11393] syz_tun: left promiscuous mode [ 256.445923][T11393] syz_tun: left allmulticast mode [ 256.466438][T11393] team0: Port device syz_tun removed [ 256.504082][T11393] bond0: (slave bridge0): Releasing backup interface [ 256.519942][T11393] bridge0: port 3(team0) entered disabled state [ 256.526919][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.560496][T11393] team0: left allmulticast mode [ 256.567157][T11393] team_slave_0: left allmulticast mode [ 256.572967][T11393] team_slave_1: left allmulticast mode [ 256.581997][T11393] team0: left promiscuous mode [ 256.588291][T11393] team_slave_0: left promiscuous mode [ 256.594202][T11393] team_slave_1: left promiscuous mode [ 256.601171][T11393] bridge0: port 3(team0) entered disabled state [ 256.626732][T11393] bridge_slave_0: left allmulticast mode [ 256.632513][T11393] bridge_slave_0: left promiscuous mode [ 256.641812][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.682608][T11393] bridge_slave_1: left allmulticast mode [ 256.693594][T11393] bridge_slave_1: left promiscuous mode [ 256.705072][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.727450][T11393] bond0: (slave bond_slave_0): Releasing backup interface [ 256.756053][T11393] bond0: (slave bond_slave_1): Releasing backup interface [ 256.797301][T11393] team0: Port device team_slave_0 removed [ 256.844596][T11393] team0: Port device team_slave_1 removed [ 256.861631][T11393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.887207][T11393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.903534][T11393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.923876][T11393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.951282][T11393] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.034049][T11396] team0: No ports can be present during mode change [ 258.757711][T11465] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 258.780819][T11465] batman_adv: batadv0: Adding interface: gretap1 [ 258.818118][T11465] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.876796][T11465] batman_adv: batadv0: Interface activated: gretap1 [ 259.500110][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 263.088484][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 263.142396][T11560] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1579'. [ 263.758242][T11583] syzkaller0: entered promiscuous mode [ 263.772553][T11583] syzkaller0: entered allmulticast mode [ 263.787141][T11586] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 263.888066][T11586] bond4: (slave gretap1): making interface the new active one [ 263.898133][T11586] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 264.759854][T11616] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 265.013212][T11623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1603'. [ 265.397415][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 265.469355][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1606'. [ 267.837490][T11716] syzkaller0: entered promiscuous mode [ 267.858231][T11716] syzkaller0: entered allmulticast mode [ 268.455108][T11739] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 268.576361][T11742] syzkaller0: entered promiscuous mode [ 268.585975][T11742] syzkaller0: entered allmulticast mode [ 268.612505][T11746] syzkaller0: entered promiscuous mode [ 268.618271][T11746] syzkaller0: entered allmulticast mode [ 269.121139][T11759] tipc: Started in network mode [ 269.133322][T11759] tipc: Node identity 72b3ec6b0fb2, cluster identity 4711 [ 269.149985][T11759] tipc: Enabled bearer , priority 0 [ 269.289396][T11759] syzkaller0: entered promiscuous mode [ 269.306585][T11759] syzkaller0: entered allmulticast mode [ 269.317898][T11759] tipc: Resetting bearer [ 269.385741][T11756] tipc: Resetting bearer [ 271.353596][T11756] tipc: Disabling bearer [ 271.414690][ T7284] tipc: Node number set to 2097278059 [ 271.471697][T11799] tipc: Started in network mode [ 271.496583][T11799] tipc: Node identity eefd8a9c9ada, cluster identity 4711 [ 271.524919][T11799] tipc: Enabled bearer , priority 0 [ 271.607573][T11800] syzkaller0: entered promiscuous mode [ 271.613311][T11800] syzkaller0: entered allmulticast mode [ 271.619759][T11800] tipc: Resetting bearer [ 271.631180][T11798] tipc: Resetting bearer [ 273.230111][T11798] tipc: Disabling bearer [ 273.328466][ T6747] tipc: Node number set to 1948748444 [ 273.746999][T11859] syzkaller0: entered promiscuous mode [ 273.752639][T11859] syzkaller0: entered allmulticast mode [ 274.538388][T11895] syzkaller0: entered promiscuous mode [ 274.546129][T11895] syzkaller0: entered allmulticast mode [ 277.057322][T11918] syzkaller0: entered promiscuous mode [ 277.090149][T11918] syzkaller0: entered allmulticast mode [ 277.235329][T11925] syzkaller0: entered promiscuous mode [ 277.241566][T11925] syzkaller0: entered allmulticast mode [ 277.993560][T11965] syzkaller1: entered promiscuous mode [ 277.999325][T11965] syzkaller1: entered allmulticast mode [ 278.224947][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 279.091376][T11987] syzkaller0: entered promiscuous mode [ 279.099565][T11987] syzkaller0: entered allmulticast mode [ 280.320686][T11937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.512756][T12002] syzkaller0: entered promiscuous mode [ 280.530119][T12002] syzkaller0: entered allmulticast mode [ 280.722810][T12011] syzkaller0: entered promiscuous mode [ 280.732963][T12011] syzkaller0: entered allmulticast mode [ 280.957804][T12020] syzkaller0: entered promiscuous mode [ 280.970058][T12020] syzkaller0: entered allmulticast mode [ 281.000423][T12020] tipc: Started in network mode [ 281.020447][T12020] tipc: Node identity 6a9cc6f4a2e6, cluster identity 4711 [ 281.056265][T12020] tipc: Enabled bearer , priority 0 [ 281.073334][T12022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 281.087001][T12019] tipc: Resetting bearer [ 281.122807][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'. [ 281.167732][T12019] tipc: Disabling bearer [ 281.462506][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'. [ 281.611063][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'. [ 281.645758][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'. [ 281.873223][T12052] syzkaller0: entered promiscuous mode [ 281.891857][T12052] syzkaller0: entered allmulticast mode [ 282.544012][T12081] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1719'. [ 284.603624][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 286.507182][T12136] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 286.546797][T12138] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 286.683454][T12142] tipc: Enabled bearer , priority 0 [ 286.714341][T12144] syzkaller0: entered promiscuous mode [ 286.721298][T12144] syzkaller0: entered allmulticast mode [ 286.763835][T12141] tipc: Disabling bearer [ 287.002148][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 287.170274][T12162] syzkaller0: entered promiscuous mode [ 287.198178][T12162] syzkaller0: entered allmulticast mode [ 287.414136][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 287.771825][T12182] syzkaller0: entered promiscuous mode [ 287.795479][T12182] syzkaller0: entered allmulticast mode [ 287.977947][T12187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1745'. [ 287.994199][T12187] IPVS: fo: FWM 3 0x00000003 - no destination available [ 288.320101][T12199] syzkaller0: entered promiscuous mode [ 288.325848][T12199] syzkaller0: entered allmulticast mode [ 288.670372][T12208] netlink: 'syz.2.1753': attribute type 1 has an invalid length. [ 288.721277][T12208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.766048][T12208] bond4: (slave veth3): Enslaving as an active interface with a down link [ 288.808436][T12208] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 288.847761][T12208] bond4: (slave batadv1): making interface the new active one [ 288.891211][T12208] batadv1: entered promiscuous mode [ 288.937175][T12208] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 289.023587][T12221] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1757'. [ 289.049411][T12218] bond4 (unregistering): (slave veth3): Releasing active interface [ 289.093645][T12218] bond4 (unregistering): (slave batadv1): Releasing active interface [ 289.125828][T12218] bond4 (unregistering): Released all slaves [ 289.780795][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'. [ 289.890882][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 292.048166][T12231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.265869][T12266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1770'. [ 292.282615][T12268] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 292.353119][T12272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1769'. [ 292.393531][T12272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.507360][T12268] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.558085][T12268] bond5: (slave geneve2): making interface the new active one [ 292.602500][T12268] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 292.626577][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 292.650284][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 292.679750][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 293.281697][T12300] syzkaller0: entered promiscuous mode [ 293.298130][T12300] syzkaller0: entered allmulticast mode [ 293.728218][T12311] syzkaller0: entered promiscuous mode [ 293.749919][T12311] syzkaller0: entered allmulticast mode [ 293.840999][T12316] syzkaller0: entered promiscuous mode [ 293.861121][T12316] syzkaller0: entered allmulticast mode [ 293.873747][T12317] syzkaller0: entered promiscuous mode [ 293.888515][T12317] syzkaller0: entered allmulticast mode [ 294.090785][T12322] syzkaller0: entered promiscuous mode [ 294.096611][T12322] syzkaller0: entered allmulticast mode [ 294.415393][T12346] syzkaller0: entered promiscuous mode [ 294.424451][T12346] syzkaller0: entered allmulticast mode [ 294.438348][T12346] tipc: Enabled bearer , priority 0 [ 294.471504][T12343] tipc: Resetting bearer [ 294.517769][T12343] tipc: Disabling bearer [ 294.800666][T12354] syzkaller0: entered promiscuous mode [ 294.811382][T12354] syzkaller0: entered allmulticast mode [ 295.218753][T12367] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1798'. [ 295.236835][T12367] syzkaller0: entered promiscuous mode [ 295.242444][T12367] syzkaller0: entered allmulticast mode [ 295.294341][T12366] syzkaller0: entered promiscuous mode [ 295.300073][T12366] syzkaller0: entered allmulticast mode [ 295.310302][T12369] syzkaller0: entered promiscuous mode [ 295.319714][T12369] syzkaller0: entered allmulticast mode [ 296.133963][T12386] syzkaller0: entered promiscuous mode [ 296.144097][T12386] syzkaller0: entered allmulticast mode [ 299.163701][T12457] syzkaller0: entered promiscuous mode [ 299.175888][T12457] syzkaller0: entered allmulticast mode [ 299.317620][T12461] syzkaller0: entered promiscuous mode [ 299.328688][T12461] syzkaller0: entered allmulticast mode [ 299.418988][T12463] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1821'. [ 299.985199][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1828'. [ 300.945396][T12505] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1835'. [ 301.840556][T12538] netlink: 'syz.3.1842': attribute type 4 has an invalid length. [ 301.851668][ T48] nci: nci_rx_work: unknown MT 0x6 [ 301.867764][T12538] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1842'. [ 301.879677][T12538] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 302.050543][T12540] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1843'. [ 302.312727][T12547] syzkaller0: entered promiscuous mode [ 302.323796][T12547] syzkaller0: entered allmulticast mode [ 302.392309][T12552] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1848'. [ 302.415044][T12552] IPVS: fo: FWM 3 0x00000003 - no destination available [ 303.912184][T12585] syzkaller0: entered promiscuous mode [ 303.918304][T12585] syzkaller0: entered allmulticast mode [ 304.759861][T12534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.909276][T12599] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1859'. [ 305.137260][T12605] syzkaller0: entered promiscuous mode [ 305.159370][T12605] syzkaller0: entered allmulticast mode [ 306.004470][T12635] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1870'. [ 306.994252][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1878'. [ 307.017728][T12676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1878'. [ 307.040419][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1878'. [ 307.067695][T12676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1878'. [ 307.270287][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 308.315160][T12720] bridge0: port 1(vlan0) entered blocking state [ 308.328284][T12720] bridge0: port 1(vlan0) entered disabled state [ 308.340670][T12720] vlan0: entered allmulticast mode [ 308.351754][T12720] geneve0: entered allmulticast mode [ 308.368160][T12720] vlan0: entered promiscuous mode [ 308.379955][T12720] geneve0: entered promiscuous mode [ 308.624907][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 308.638616][T12728] tipc: Started in network mode [ 308.645313][T12728] tipc: Node identity , cluster identity 4711 [ 308.651676][T12728] tipc: Failed to obtain node identity [ 308.657751][T12728] tipc: Enabling of bearer rejected, failed to enable media [ 308.931195][T12732] batman_adv: batadv0: Adding interface: gretap1 [ 308.954177][T12732] batman_adv: batadv0: The MTU of interface gretap1 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.984977][T12732] batman_adv: batadv0: Interface activated: gretap1 [ 309.234967][T12744] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1894'. [ 309.769479][T12756] syzkaller0: entered promiscuous mode [ 309.796540][T12756] syzkaller0: entered allmulticast mode [ 309.854592][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.035362][T12765] syzkaller0: entered promiscuous mode [ 310.042141][T12765] syzkaller0: entered allmulticast mode [ 310.303664][T12773] syzkaller0: entered promiscuous mode [ 310.310137][T12773] syzkaller0: entered allmulticast mode [ 310.840849][T12795] syzkaller0: entered promiscuous mode [ 310.854840][T12795] syzkaller0: entered allmulticast mode [ 311.168394][T12801] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 311.176398][T12801] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1913'. [ 311.193909][T12801] netlink: 'syz.0.1913': attribute type 2 has an invalid length. [ 311.200323][T12797] syzkaller0: entered promiscuous mode [ 311.224465][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 311.229012][T12797] syzkaller0: entered allmulticast mode [ 313.317740][T12825] syzkaller0: entered promiscuous mode [ 313.323514][T12825] syzkaller0: entered allmulticast mode [ 313.330255][T12827] tipc: Started in network mode [ 313.335372][T12827] tipc: Node identity , cluster identity 4711 [ 313.341665][T12827] tipc: Failed to obtain node identity [ 313.347420][T12827] tipc: Enabling of bearer rejected, failed to enable media [ 313.618132][T12860] sctp: [Deprecated]: syz.3.1925 (pid 12860) Use of int in max_burst socket option deprecated. [ 313.618132][T12860] Use struct sctp_assoc_value instead [ 314.443072][T12881] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1932'. [ 314.614699][T12883] syzkaller0: entered promiscuous mode [ 314.643213][T12883] syzkaller0: entered allmulticast mode [ 314.950950][T12903] rdma_rxe: rxe_newlink: failed to add lo [ 315.010141][T12898] lo speed is unknown, defaulting to 1000 [ 315.018252][T12894] syzkaller0: entered promiscuous mode [ 315.037543][T12894] syzkaller0: entered allmulticast mode [ 315.047541][ T149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.082441][T12900] syzkaller0: entered promiscuous mode [ 315.095774][T12900] syzkaller0: entered allmulticast mode [ 315.108034][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.144036][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.165805][T12898] lo speed is unknown, defaulting to 1000 [ 315.272414][T12898] lo speed is unknown, defaulting to 1000 [ 315.308222][T12912] syzkaller0: entered promiscuous mode [ 315.333430][T12912] syzkaller0: entered allmulticast mode [ 315.456094][T12922] netlink: 'syz.0.1944': attribute type 13 has an invalid length. [ 315.464215][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 315.475163][T12922] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 315.605110][T12926] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1945'. [ 315.640847][T12926] IPVS: fo: FWM 3 0x00000003 - no destination available [ 315.862719][T12898] infiniband syz0: set active [ 315.872296][ T9] lo speed is unknown, defaulting to 1000 [ 315.881755][T12898] infiniband syz0: added lo [ 315.894291][T12898] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 315.900365][T12898] infiniband syz0: Couldn't open port 1 [ 315.915256][T12898] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 315.930586][T12898] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 315.948152][T12898] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 315.992631][T12898] RDS/IB: syz0: added [ 315.997762][T12898] smc: adding ib device syz0 with port count 1 [ 316.004280][T12898] smc: ib device syz0 port 1 has no pnetid [ 316.013105][ T5823] lo speed is unknown, defaulting to 1000 [ 316.027459][T12898] lo speed is unknown, defaulting to 1000 [ 316.330289][T12939] syzkaller0: entered promiscuous mode [ 316.339416][T12939] syzkaller0: entered allmulticast mode [ 316.436158][T12898] lo speed is unknown, defaulting to 1000 [ 316.689731][T12947] syzkaller0: entered promiscuous mode [ 316.707103][T12947] syzkaller0: entered allmulticast mode [ 316.768876][T12953] syzkaller0: entered promiscuous mode [ 316.774469][T12953] syzkaller0: entered allmulticast mode [ 316.888399][T12898] lo speed is unknown, defaulting to 1000 [ 317.052043][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210274][T12966] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1957'. [ 317.269440][T12966] IPVS: fo: FWM 3 0x00000003 - no destination available [ 317.506937][T12898] lo speed is unknown, defaulting to 1000 [ 317.892636][T12981] syzkaller0: entered promiscuous mode [ 317.900984][T12981] syzkaller0: entered allmulticast mode [ 318.036035][T12898] lo speed is unknown, defaulting to 1000 [ 318.324914][T12992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1964'. [ 318.435925][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 318.609055][ T54] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 318.641215][T13004] syzkaller0: entered promiscuous mode [ 318.646956][T13004] syzkaller0: entered allmulticast mode [ 318.859934][T13013] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1970'. [ 321.425808][T12998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.690736][T13055] syzkaller0: entered promiscuous mode [ 321.720596][T13055] syzkaller0: entered allmulticast mode [ 321.744793][T13065] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1983'. [ 321.771093][T13052] syzkaller0: entered promiscuous mode [ 321.791302][T13052] syzkaller0: entered allmulticast mode [ 321.850585][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.859049][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.873383][T13057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.933480][T13073] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 322.140192][T13057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.149309][T13057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.162026][T13057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.175146][T13057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.192187][T13057] veth1_vlan: left promiscuous mode [ 322.198750][T13057] veth0_vlan: left promiscuous mode [ 322.205420][T13057] veth0_vlan: entered promiscuous mode [ 322.213285][T13057] veth1_vlan: entered promiscuous mode [ 322.223684][T13057] veth1_macvtap: left promiscuous mode [ 322.230464][T13057] veth0_macvtap: left promiscuous mode [ 322.237514][T13057] veth0_macvtap: entered promiscuous mode [ 322.244736][T13057] veth1_macvtap: entered promiscuous mode [ 322.256984][T13057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.265683][T13057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.275182][T13057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.284324][T13057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.300668][T13057] bridge0: port 4(vlan2) entered blocking state [ 322.307069][T13057] bridge0: port 4(vlan2) entered forwarding state [ 322.320554][T13057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.328836][T13057] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 322.348539][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.355722][ T7230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.375250][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.382416][ T7230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.426354][ T7230] bridge0: port 3(team0) entered blocking state [ 322.432809][ T7230] bridge0: port 3(team0) entered forwarding state [ 322.651436][T13073] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.741430][T13074] bond7: (slave veth5): Enslaving as an active interface with a down link [ 322.777753][T13075] bond7: (slave veth7): Enslaving as an active interface with a down link [ 322.798688][T13076] bond7: entered allmulticast mode [ 322.857416][ T149] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.093076][T13102] syzkaller0: entered promiscuous mode [ 323.149180][T13102] syzkaller0: entered allmulticast mode [ 324.987334][T13120] tipc: Enabling of bearer rejected, failed to enable media [ 324.998998][ T48] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.077596][ T54] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.227562][T13137] tipc: Started in network mode [ 325.243145][T13137] tipc: Node identity eaa8474ff44d, cluster identity 4711 [ 325.257220][T13137] tipc: Enabled bearer , priority 0 [ 325.280356][T13137] syzkaller0: entered promiscuous mode [ 325.286271][T13137] syzkaller0: entered allmulticast mode [ 325.301500][T13141] tipc: Started in network mode [ 325.309338][T13141] tipc: Node identity ee6257bf28a3, cluster identity 4711 [ 325.317087][T13141] tipc: Enabled bearer , priority 0 [ 325.338891][T13140] syzkaller0: entered promiscuous mode [ 325.348592][T13140] syzkaller0: entered allmulticast mode [ 325.360228][T13141] syzkaller0: entered promiscuous mode [ 325.365753][T13141] syzkaller0: entered allmulticast mode [ 325.402131][T13137] tipc: Resetting bearer [ 325.421728][T13136] tipc: Resetting bearer [ 325.436149][T13136] tipc: Disabling bearer [ 325.450411][T13141] tipc: Resetting bearer [ 325.465942][T13139] tipc: Resetting bearer [ 325.493826][T13139] tipc: Disabling bearer [ 325.541445][T13147] syzkaller0: entered promiscuous mode [ 325.553489][T13147] syzkaller0: entered allmulticast mode [ 326.067755][T13156] syzkaller0: entered promiscuous mode [ 326.080208][T13156] syzkaller0: entered allmulticast mode [ 326.225329][T13157] syzkaller0: entered promiscuous mode [ 326.234046][T13157] syzkaller0: entered allmulticast mode [ 329.210551][T13185] 0ªî{X¹¦: left allmulticast mode [ 329.436973][T13185] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 329.480233][T13187] syzkaller0: entered promiscuous mode [ 329.488570][T13187] syzkaller0: entered allmulticast mode [ 329.518595][T13188] tipc: Enabled bearer , priority 0 [ 329.551842][T13196] tipc: Resetting bearer [ 329.573206][T13174] tipc: Resetting bearer [ 329.650440][T13174] tipc: Disabling bearer [ 329.658283][T13209] siw: device registration error -23 [ 331.852444][T13217] tipc: Enabled bearer , priority 0 [ 331.861586][T13221] syzkaller0: entered promiscuous mode [ 331.867307][T13221] syzkaller0: entered allmulticast mode [ 331.919777][T13231] tipc: Resetting bearer [ 331.933833][T13216] tipc: Resetting bearer [ 332.027450][T13216] tipc: Disabling bearer [ 332.241186][T13264] tipc: Enabled bearer , priority 0 [ 332.266204][T13264] syzkaller0: entered promiscuous mode [ 332.284972][T13264] syzkaller0: entered allmulticast mode [ 332.386662][T13264] tipc: Resetting bearer [ 332.396044][T13268] lo speed is unknown, defaulting to 1000 [ 332.403161][T13270] syzkaller0: entered promiscuous mode [ 332.420662][T13270] syzkaller0: entered allmulticast mode [ 332.441192][T13263] tipc: Resetting bearer [ 332.491268][T13263] tipc: Disabling bearer [ 333.152473][T13277] bridge0: port 3(syz_tun) entered blocking state [ 333.159099][T13277] bridge0: port 3(syz_tun) entered forwarding state [ 333.171190][T13277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.180286][T13277] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.190900][T13277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.452371][T13277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.468694][T13277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.487378][T13277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.502520][T13277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.519187][T13277] veth1_vlan: left promiscuous mode [ 333.525852][T13277] veth0_vlan: left promiscuous mode [ 333.533684][T13277] veth0_vlan: entered promiscuous mode [ 333.552380][T13277] veth1_vlan: entered promiscuous mode [ 333.577842][T13277] veth1_macvtap: left promiscuous mode [ 333.594502][T13277] veth0_macvtap: left promiscuous mode [ 333.601670][T13277] veth0_macvtap: entered promiscuous mode [ 333.609511][T13277] veth1_macvtap: entered promiscuous mode [ 333.635099][T13277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.650615][T13277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.660923][T13277] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.670424][T13277] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 333.679933][T13277] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 333.703915][T13277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.758736][T13277] 8021q: adding VLAN 0 to HW filter on device eth0 [ 333.769755][T13277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 333.783354][T13277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 333.789652][T13293] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2025'. [ 333.800399][T13277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 333.811067][T13279] syzkaller0: entered promiscuous mode [ 333.818096][T13279] syzkaller0: entered allmulticast mode [ 333.851700][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.858918][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.871026][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.878255][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.040416][T13286] bridge0: port 4(wlan1) entered blocking state [ 334.047663][T13286] bridge0: port 4(wlan1) entered disabled state [ 334.054205][T13286] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 334.069107][T13286] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 334.079811][T13293] 0·: renamed from hsr0 (while UP) [ 334.114150][T13293] 0·: entered allmulticast mode [ 334.137024][T13293] hsr_slave_0: entered allmulticast mode [ 334.154623][T13293] hsr_slave_1: entered allmulticast mode [ 334.170731][T13293] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 334.327932][T13302] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2028'. [ 334.380359][ T6582] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.432701][ T6582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.447753][T13304] IPVS: fo: FWM 3 0x00000003 - no destination available [ 334.481254][ T6582] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.497065][ T6582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.535036][ T6582] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.543769][ T6582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.572381][ T6582] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.594047][ T6582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.834660][T13308] tipc: Enabled bearer , priority 0 [ 334.861709][T13311] syzkaller0: entered promiscuous mode [ 334.876537][T13311] syzkaller0: entered allmulticast mode [ 334.895667][T13315] syzkaller0: entered promiscuous mode [ 334.906590][T13315] syzkaller0: entered allmulticast mode [ 334.954743][T13308] tipc: Resetting bearer [ 335.049588][T13306] tipc: Resetting bearer [ 335.117300][T13306] tipc: Disabling bearer [ 335.310333][T13328] syzkaller0: entered promiscuous mode [ 335.328701][T13328] syzkaller0: entered allmulticast mode [ 335.352649][T13328] 0: reclassify loop, rule prio 0, protocol 700 [ 335.431626][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 335.840538][T13359] sctp: [Deprecated]: syz.2.2039 (pid 13359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.840538][T13359] Use struct sctp_sack_info instead [ 336.089411][T13364] syzkaller0: entered promiscuous mode [ 336.106603][T13364] syzkaller0: entered allmulticast mode [ 336.134734][T13364] 0: reclassify loop, rule prio 0, protocol 800 [ 336.135824][T13366] syzkaller0: entered promiscuous mode [ 336.153821][T13366] syzkaller0: entered allmulticast mode [ 336.442513][T13369] syzkaller0: entered promiscuous mode [ 336.462107][T13369] syzkaller0: entered allmulticast mode [ 336.849936][T13386] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2046'. [ 339.738201][T13469] netlink: 'syz.3.2066': attribute type 1 has an invalid length. [ 339.941761][T13469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.136392][T13480] bond6: entered promiscuous mode [ 340.144464][T13480] bond6: entered allmulticast mode [ 340.205068][T13483] syzkaller0: entered promiscuous mode [ 340.239056][T13483] syzkaller0: entered allmulticast mode [ 340.309875][T13486] block nbd0: not configured, cannot reconfigure [ 340.405782][T13491] syzkaller0: entered promiscuous mode [ 340.413744][T13491] syzkaller0: entered allmulticast mode [ 340.580607][ T7230] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 340.704101][T13506] syzkaller0: entered promiscuous mode [ 340.710528][T13506] syzkaller0: entered allmulticast mode [ 340.720741][T13506] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 341.323912][T13514] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 341.947094][T13531] syzkaller0: entered promiscuous mode [ 341.952878][T13531] syzkaller0: entered allmulticast mode [ 341.964384][T13531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 343.358445][T13488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.590417][T13539] syzkaller0: entered promiscuous mode [ 343.604670][T13539] syzkaller0: entered allmulticast mode [ 343.988812][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 344.056219][ T5641] block nbd0: Receive control failed (result -107) [ 344.713679][ T7230] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 345.147195][T13598] syzkaller0: entered promiscuous mode [ 345.157807][T13598] syzkaller0: entered allmulticast mode [ 345.588182][T13608] syzkaller0: entered promiscuous mode [ 345.593940][T13608] syzkaller0: entered allmulticast mode [ 347.476854][T13580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.701338][T13617] syzkaller0: entered promiscuous mode [ 347.708088][T13621] openvswitch: netlink: Message has 13072 unknown bytes. [ 347.718491][T13621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.722716][T13617] syzkaller0: entered allmulticast mode [ 348.157094][T13638] tipc: Enabled bearer , priority 0 [ 348.179600][T13638] syzkaller0: entered promiscuous mode [ 348.195888][T13638] syzkaller0: entered allmulticast mode [ 348.240084][T13638] tipc: Resetting bearer [ 348.265772][T13636] tipc: Resetting bearer [ 348.322070][T13636] tipc: Disabling bearer [ 349.556509][T13671] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2116'. [ 349.975695][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'. [ 352.190970][T13658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.409286][T13689] tipc: Enabled bearer , priority 0 [ 352.438140][T13689] syzkaller0: entered promiscuous mode [ 352.459251][T13689] syzkaller0: entered allmulticast mode [ 352.489900][T13689] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 352.570343][T13689] tipc: Resetting bearer [ 352.585521][T13687] tipc: Resetting bearer [ 352.615289][T13687] tipc: Disabling bearer [ 352.725842][T13712] ipt_REJECT: TCP_RESET invalid for non-tcp [ 352.811725][T13706] batman_adv: batadv0: Adding interface: gretap2 [ 352.832707][T13706] batman_adv: batadv0: Interface activated: gretap2 [ 353.055932][ T190] lo speed is unknown, defaulting to 1000 [ 353.139729][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'. [ 353.298552][T13733] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 353.559452][T13743] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2136'. [ 354.066888][T13758] syzkaller0: entered promiscuous mode [ 354.089669][T13758] syzkaller0: entered allmulticast mode [ 354.145520][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'. [ 354.274121][T13764] sctp: [Deprecated]: syz.3.2144 (pid 13764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.274121][T13764] Use struct sctp_sack_info instead [ 355.414624][T13782] netlink: 'syz.2.2149': attribute type 1 has an invalid length. [ 355.431191][T13782] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2149'. [ 355.570885][T13786] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 355.976197][T13796] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2153'. [ 356.307796][T13804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2155'. [ 356.438553][T13810] batman_adv: batadv0: Adding interface: ip6gretap1 [ 356.445348][T13810] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.527063][T13810] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 356.592635][T13818] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2161'. [ 356.612426][T13819] syzkaller0: entered promiscuous mode [ 356.625526][T13819] syzkaller0: entered allmulticast mode [ 356.655761][T13819] tipc: Enabled bearer , priority 0 [ 356.688520][T13819] tipc: Resetting bearer [ 356.716009][T13817] tipc: Resetting bearer [ 356.762439][T13817] tipc: Disabling bearer [ 357.317148][T13842] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 357.421879][T13847] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2169'. [ 357.426381][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2172'. [ 357.909147][T13867] syzkaller0: entered promiscuous mode [ 357.914981][T13867] syzkaller0: entered allmulticast mode [ 357.933868][T13867] tipc: Enabled bearer , priority 0 [ 357.950714][T13867] tipc: Resetting bearer [ 358.050349][T13866] tipc: Resetting bearer [ 358.106360][T13866] tipc: Disabling bearer [ 358.338033][T13872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'. [ 358.388413][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 358.432490][T13872] block nbd1: server does not support multiple connections per device. [ 358.466591][T13872] block nbd1: shutting down sockets [ 358.719576][T13888] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2185'. [ 358.842785][T13895] netlink: 'syz.4.2185': attribute type 11 has an invalid length. [ 358.887696][T13895] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2185'. [ 359.360740][T13914] syzkaller0: entered promiscuous mode [ 359.376100][T13914] syzkaller0: entered allmulticast mode [ 359.649694][T13918] tipc: Enabling of bearer rejected, failed to enable media [ 360.854820][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 362.907624][T13927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.920462][T13942] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.2198'. [ 362.942114][T13942] netlink: 'syz.2.2198': attribute type 1 has an invalid length. [ 362.967556][T13956] netlink: 'syz.4.2202': attribute type 12 has an invalid length. [ 363.193985][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 363.233412][T13966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2207'. [ 363.283173][T13971] x_tables: duplicate underflow at hook 2 [ 363.300307][T13971] xt_NFQUEUE: number of total queues is 0 [ 363.311202][T13971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2204'. [ 363.541765][T13987] netdevsim netdevsim0: Direct firmware load for .® failed with error -2 [ 363.560603][T13987] netdevsim netdevsim0: Falling back to sysfs fallback for: .® [ 363.789251][T13996] syzkaller0: entered promiscuous mode [ 363.795040][T13996] syzkaller0: entered allmulticast mode [ 363.807037][T13996] tipc: Enabled bearer , priority 0 [ 363.816926][T13995] tipc: Resetting bearer [ 363.836692][T13995] tipc: Disabling bearer [ 364.245023][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 365.607137][T14038] tipc: Started in network mode [ 365.625363][T14038] tipc: Node identity 7f000001, cluster identity 4711 [ 365.645156][T14038] tipc: Enabled bearer , priority 10 [ 365.890478][T14045] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 366.273696][T14052] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2225'. [ 366.287294][T14038] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 366.296995][T14038] tipc: Enabled bearer , priority 10 [ 366.776398][T14067] syzkaller0: entered promiscuous mode [ 366.794059][T14067] syzkaller0: entered allmulticast mode [ 366.846975][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_2 [ 366.853161][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_4 [ 366.858101][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_6 [ 366.862973][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_8 [ 366.867893][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_10 [ 366.872846][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_12 [ 366.877857][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_14 [ 366.882821][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_16 [ 366.887838][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_18 [ 366.892802][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_20 [ 366.897831][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_22 [ 366.902825][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_24 [ 366.907848][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_26 [ 366.912813][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_28 [ 366.917832][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_30 [ 366.922790][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_32 [ 366.927816][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_34 [ 366.932783][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_36 [ 366.937790][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_38 [ 366.942773][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_40 [ 366.947795][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_42 [ 366.952764][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_44 [ 366.957771][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_46 [ 366.962734][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_48 [ 366.967741][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_50 [ 366.972700][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_52 [ 366.977703][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_54 [ 366.982674][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_56 [ 366.987723][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_58 [ 366.992685][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_60 [ 366.997693][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_62 [ 367.002696][T14067] simple: bas]£ª9oÏ‚>âüÑQ/ic_64 [ 367.007694][T14067] TC_ACT_REPEAT abuse ? [ 367.427236][ T7277] tipc: Node number set to 2130706433 [ 367.705978][T14100] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2235'. [ 367.769501][T14099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.893944][T14102] team0: Device xfrm0 is of different type [ 367.931891][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 369.974348][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 370.040441][T14178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.257631][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'. [ 370.468744][T14175] syzkaller1: entered promiscuous mode [ 370.491604][T14175] syzkaller1: entered allmulticast mode [ 370.552118][T14201] lo speed is unknown, defaulting to 1000 [ 370.737910][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'. [ 371.210903][T14208] bridge0: port 3(syz_tun) entered disabled state [ 371.324069][T14208] syz_tun (unregistering): left allmulticast mode [ 371.332185][T14208] syz_tun (unregistering): left promiscuous mode [ 371.343045][T14208] bridge0: port 3(syz_tun) entered disabled state [ 371.663990][T14219] netlink: 'syz.3.2256': attribute type 3 has an invalid length. [ 371.672491][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'. [ 371.858338][T14236] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 371.939802][T14235] sctp: [Deprecated]: syz.1.2262 (pid 14235) Use of int in max_burst socket option deprecated. [ 371.939802][T14235] Use struct sctp_assoc_value instead [ 372.759879][T14260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2265'. [ 373.664128][T14284] lo speed is unknown, defaulting to 1000 [ 373.711299][T14294] Set syz1 is full, maxelem 2076 reached [ 374.147941][T14309] batadv0: entered promiscuous mode [ 374.159540][T14309] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 374.187951][T14310] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2272'. [ 374.339968][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 376.515032][T14359] netlink: 'syz.4.2278': attribute type 13 has an invalid length. [ 376.565886][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2278'. [ 376.581780][T14359] bond0: (slave bond_slave_0): Releasing backup interface [ 376.600105][T14293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.609361][T14298] netlink: 'syz.0.2270': attribute type 10 has an invalid length. [ 376.639384][T14359] bond_slave_0: entered promiscuous mode [ 376.656589][T14359] bond_slave_0: entered allmulticast mode [ 376.824926][T14363] syzkaller0: entered promiscuous mode [ 376.830572][T14363] syzkaller0: entered allmulticast mode [ 376.881146][T14363] tipc: Enabled bearer , priority 0 [ 376.909986][T14364] block nbd0: reconnected socket [ 376.916405][T14363] tipc: Resetting bearer [ 376.938284][ T5641] block nbd0: Receive control failed (result -32) [ 376.951866][T14362] tipc: Resetting bearer [ 377.033134][T14362] tipc: Disabling bearer [ 377.342837][T14381] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2282'. [ 377.440011][T14380] block nbd1: server does not support multiple connections per device. [ 377.459626][T14380] block nbd1: shutting down sockets [ 377.515716][T14380] syzkaller0: entered promiscuous mode [ 377.545866][T14380] syzkaller0: entered allmulticast mode [ 377.665670][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2281'. [ 377.727376][T14389] syzkaller1: entered promiscuous mode [ 377.759582][T14389] syzkaller1: entered allmulticast mode [ 378.295643][T14411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2290'. [ 378.325554][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2290'. [ 378.489314][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557633][T14424] syzkaller0: entered promiscuous mode [ 378.571654][T14424] syzkaller0: entered allmulticast mode [ 378.594588][T14424] tipc: Enabled bearer , priority 0 [ 378.620707][T14424] tipc: Resetting bearer [ 378.647592][T14423] tipc: Resetting bearer [ 378.704535][T14423] tipc: Disabling bearer [ 378.874007][T14431] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2295'. [ 379.070110][T14439] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2297'. [ 379.407739][T14452] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2298'. [ 379.510956][T14459] rdma_rxe: rxe_newlink: failed to add lo [ 379.526258][T14459] rdma_rxe: rxe_newlink: failed to add lo [ 379.526360][T14457] netlink: 'syz.4.2300': attribute type 4 has an invalid length. [ 379.582213][T14461] ipvlan1: left allmulticast mode [ 379.598369][T14461] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 381.013906][T14527] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 381.200848][T14527] netlink: 'syz.1.2308': attribute type 3 has an invalid length. [ 381.235992][T14527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2308'. [ 383.082204][T14488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.388921][T14615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.398891][T14615] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.523221][T14615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.583978][T14615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.629031][T14615] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 383.668275][T14615] batman_adv: batadv0: Interface activated: ip6gretap1 [ 383.765544][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.044338][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 385.314029][T14690] tipc: Enabled bearer , priority 0 [ 385.377849][T14691] tipc: Resetting bearer [ 385.561362][T14689] tipc: Disabling bearer [ 385.610058][T14698] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2325'. [ 387.208761][T14753] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2332'. [ 387.606609][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 387.689024][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 388.980871][T14710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.634365][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 389.683364][T14794] x_tables: duplicate entry at hook 1 [ 389.894201][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 390.021595][T14800] syzkaller0: entered promiscuous mode [ 390.037751][T14800] syzkaller0: entered allmulticast mode [ 390.074216][T14800] tipc: Enabled bearer , priority 0 [ 390.081561][T14802] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 390.169760][T14811] tipc: Resetting bearer [ 390.409848][T14798] tipc: Resetting bearer [ 390.702972][T14798] tipc: Disabling bearer [ 391.082133][T14828] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 391.155840][T14841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.245336][T14841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.273889][ T5282] veth0_vlan: left promiscuous mode [ 391.366829][ T7277] veth0_vlan: entered promiscuous mode [ 391.528833][T14853] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2347'. [ 391.735492][T14862] syzkaller0: entered promiscuous mode [ 391.759061][T14862] syzkaller0: entered allmulticast mode [ 391.793059][T14862] tipc: Enabled bearer , priority 0 [ 391.852667][T14861] tipc: Resetting bearer [ 391.925837][T14861] tipc: Disabling bearer [ 391.984766][T14871] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2348'. [ 392.543341][T14881] syzkaller0: entered promiscuous mode [ 392.561519][T14881] syzkaller0: entered allmulticast mode [ 393.417253][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 393.432628][T14902] macvtap1: entered promiscuous mode [ 393.489102][T14902] bridge0: entered promiscuous mode [ 394.007994][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 394.295065][T14922] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 394.473505][T14922] bond4 (unregistering): Released all slaves [ 394.709673][T14945] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2360'. [ 395.069215][T14959] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 395.126674][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.733196][T14976] syzkaller0: entered promiscuous mode [ 395.766903][T14976] syzkaller0: entered allmulticast mode [ 395.821651][T14981] tipc: Enabled bearer , priority 0 [ 395.866974][T14976] tipc: Resetting bearer [ 395.892299][T14975] tipc: Resetting bearer [ 396.002684][T14975] tipc: Disabling bearer [ 396.139665][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2367'. [ 396.508013][T15006] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 397.801813][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'. [ 397.871303][T15057] Set syz1 is full, maxelem 2076 reached [ 398.357662][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2381'. [ 398.709398][T15087] netlink: 'syz.0.2382': attribute type 3 has an invalid length. [ 398.760851][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'. [ 398.844915][T15085] smbdirect: ib_dev[syz1] removed [ 398.895134][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 399.018969][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2385'. [ 399.195838][T15089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.379171][T15098] ip6gre1: entered promiscuous mode [ 399.410987][T15098] ip6gre1: entered allmulticast mode [ 399.534484][T15103] netlink: 'syz.4.2385': attribute type 6 has an invalid length. [ 399.625037][T15103] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2385'. [ 399.679878][T15113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.704499][T15119] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2386'. [ 399.894206][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.470680][T15147] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 400.489374][T15147] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2394'. [ 400.515552][T15147] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 400.583264][T15148] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 400.608885][T15148] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2394'. [ 401.079727][T15176] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2399'. [ 403.132828][T15226] block nbd1: not configured, cannot reconfigure [ 403.180836][T15232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.403754][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2406'. [ 403.551685][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 403.642228][T15244] ip6tnl0: Caught tx_queue_len zero misconfig [ 404.348050][T15259] macvlan0: entered promiscuous mode [ 404.377768][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 404.554048][T15261] vlan1: entered promiscuous mode [ 404.660978][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 405.396954][T15264] batadv_slave_0: left allmulticast mode [ 405.503387][T15264] 0·: left allmulticast mode [ 405.513021][T15264] hsr_slave_0: left allmulticast mode [ 405.527647][T15264] hsr_slave_1: left allmulticast mode [ 405.659365][T15264] bridge1: left promiscuous mode [ 405.690063][T15264] bridge1: left allmulticast mode [ 405.942788][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2413'. [ 406.236081][T15291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2413'. [ 406.284523][T15264] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 406.353857][T15264] macvtap1: left promiscuous mode [ 406.445906][T15264] vlan1: left promiscuous mode [ 406.526359][T15274] vlan0 (unregistering): left allmulticast mode [ 406.546241][T15274] geneve0 (unregistering): left allmulticast mode [ 406.563022][T15274] vlan0 (unregistering): left promiscuous mode [ 406.592869][T15274] geneve0 (unregistering): left promiscuous mode [ 406.622555][T15274] bridge0: port 1(vlan0) entered disabled state [ 406.915136][T15287] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 406.939261][T12123] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.020640][T12123] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.051028][T12123] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.063359][T15332] netlink: 'syz.3.2417': attribute type 4 has an invalid length. [ 407.084002][T12123] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.099785][T15334] netlink: 'syz.3.2417': attribute type 4 has an invalid length. [ 407.126408][T15330] vlan0: entered promiscuous mode [ 407.151337][T15330] 0ªî{X¹¦: entered promiscuous mode [ 407.166710][ T6582] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.196837][ T6582] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.521185][T15333] pimreg: entered allmulticast mode [ 407.684431][T15355] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2420'. [ 407.795092][T15331] pimreg: left allmulticast mode [ 408.476627][T15346] netlink: 'syz.4.2421': attribute type 4 has an invalid length. [ 408.517272][T15346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2421'. [ 408.560271][T15346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2421'. [ 408.599212][T15346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2421'. [ 408.984118][T15387] netlink: 'syz.2.2430': attribute type 93 has an invalid length. [ 409.858882][T15421] tipc: Enabled bearer , priority 0 [ 409.901000][T15421] syzkaller0: entered promiscuous mode [ 409.934465][T15421] syzkaller0: entered allmulticast mode [ 409.999877][T15421] tipc: Resetting bearer [ 410.616736][T15420] tipc: Resetting bearer [ 410.735981][T15420] tipc: Disabling bearer [ 411.147192][T15464] syzkaller0: entered promiscuous mode [ 411.162878][T15464] syzkaller0: entered allmulticast mode [ 411.480695][T15470] syzkaller0: entered promiscuous mode [ 411.510325][T15470] syzkaller0: entered allmulticast mode [ 411.563056][T15474] tipc: Enabled bearer , priority 0 [ 411.653779][T15469] tipc: Resetting bearer [ 411.763816][T15469] tipc: Disabling bearer [ 412.483021][T15499] bridge_slave_0: left allmulticast mode [ 412.537467][T15499] bridge_slave_0: left promiscuous mode [ 412.594705][T15499] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.143098][T15531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.405357][T15538] syzkaller0: entered promiscuous mode [ 413.421482][T15538] syzkaller0: entered allmulticast mode [ 413.611662][T15542] syzkaller0: entered promiscuous mode [ 413.628429][T15542] syzkaller0: entered allmulticast mode [ 415.203492][T15597] syzkaller0: entered promiscuous mode [ 415.224511][T15597] syzkaller0: entered allmulticast mode [ 416.463645][T15645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 417.221948][T15665] syzkaller0: entered promiscuous mode [ 417.249106][T15665] syzkaller0: entered allmulticast mode [ 417.343518][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 417.462953][T15670] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2490'. [ 418.122893][T15696] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2497'. [ 418.371291][T15704] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 418.389939][T15704] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2500'. [ 418.407164][T15704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2500'. [ 418.774397][T15719] lo: Caught tx_queue_len zero misconfig [ 421.143282][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 421.228090][T15788] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2517'. [ 421.475813][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 423.122276][T15859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2540'. [ 423.976751][T15893] syz_tun: left allmulticast mode [ 423.990210][T15893] syz_tun: left promiscuous mode [ 424.002990][T15893] bridge0: port 3(syz_tun) entered disabled state [ 424.933048][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2559'. [ 425.168824][T15931] sctp: [Deprecated]: syz.0.2561 (pid 15931) Use of int in max_burst socket option deprecated. [ 425.168824][T15931] Use struct sctp_assoc_value instead [ 426.078717][T15961] Set syz1 is full, maxelem 2076 reached [ 426.342120][T15978] ieee802154 phy0 wpan0: encryption failed: -90 [ 427.136263][T16004] team0: No ports can be present during mode change [ 427.351671][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 427.632317][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 427.666264][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 428.518899][T16048] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2604'. [ 428.572523][T16048] IPVS: fo: FWM 3 0x00000003 - no destination available [ 429.310499][T16068] syzkaller0: entered promiscuous mode [ 429.334791][T16068] syzkaller0: entered allmulticast mode [ 429.854338][T16085] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2617'. [ 430.141762][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 430.173886][T16095] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2622'. [ 430.709534][T16117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2631'. [ 430.950684][T16121] netlink: 'syz.4.2633': attribute type 10 has an invalid length. [ 430.991525][T16121] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 431.012862][T16121] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:d056:f3ff:fe27:c357 error=-28 [ 431.159378][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 431.218430][T16126] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2635'. [ 431.464144][T16133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2638'. [ 431.522927][T16133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2638'. [ 431.570787][T16133] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2638'. [ 432.070257][T16121] infiniband syz1: set down [ 432.094299][T16121] infiniband syz1: added bridge_slave_1 [ 432.113520][T16121] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 432.129137][T16121] infiniband syz1: Couldn't open port 1 [ 432.171460][T16121] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 432.208752][T16121] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 432.276509][T16121] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 432.368680][T16121] RDS/IB: syz1: added [ 432.386575][T16121] smc: adding ib device syz1 with port count 1 [ 432.407742][T16121] smc: ib device syz1 port 1 has no pnetid [ 433.743206][T16192] syzkaller0: entered promiscuous mode [ 433.760197][T16192] syzkaller0: entered allmulticast mode [ 433.785132][T16192] tipc: Enabled bearer , priority 0 [ 433.886694][T16192] tipc: Resetting bearer [ 433.929937][T16191] tipc: Resetting bearer [ 434.020548][T16191] tipc: Disabling bearer [ 434.919231][T16220] __nla_validate_parse: 2 callbacks suppressed [ 434.919267][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2662'. [ 434.977204][T16220] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2662'. [ 434.988768][T16221] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2661'. [ 435.592160][T16245] syzkaller0: entered promiscuous mode [ 435.604794][T16245] syzkaller0: entered allmulticast mode [ 435.625470][T16245] tipc: Enabled bearer , priority 0 [ 435.660656][T16245] tipc: Resetting bearer [ 435.682949][T16243] tipc: Resetting bearer [ 435.717226][T16243] tipc: Disabling bearer [ 436.237317][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 436.266207][T16255] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2674'. [ 436.555851][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 436.612070][T16264] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2677'. [ 436.726071][T16266] syzkaller0: entered promiscuous mode [ 436.752265][T16266] syzkaller0: entered allmulticast mode [ 436.791325][T16266] tipc: Enabled bearer , priority 0 [ 436.891889][T16276] tipc: Resetting bearer [ 436.982509][T16265] tipc: Resetting bearer [ 437.041817][T16265] tipc: Disabling bearer [ 437.369437][T16292] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2688'. [ 437.392039][T16292] IPVS: fo: FWM 3 0x00000003 - no destination available [ 438.539443][T16332] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2701'. [ 438.644648][T16307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.192996][T16353] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2710'. [ 439.930157][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.072436][T16384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2723'. [ 440.511976][T16402] tipc: Enabled bearer , priority 0 [ 440.524242][T16402] tipc: Resetting bearer [ 440.609061][T16401] tipc: Disabling bearer [ 441.741041][T16440] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2741'. [ 442.946564][T16455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.591754][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'. [ 443.628370][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2758'. [ 444.045740][T16507] lo speed is unknown, defaulting to 1000 [ 444.803378][T16527] bridge0: port 1(wlan1) entered blocking state [ 444.838073][T16527] bridge0: port 1(wlan1) entered disabled state [ 444.868445][T16527] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 444.885454][T16527] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 444.921614][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2770'. [ 445.144929][T16530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.183787][T16535] bond3: (slave batadv1): Opening slave failed [ 446.738234][T16580] netlink: 'syz.3.2779': attribute type 10 has an invalid length. [ 446.995513][T16580] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.043409][T16580] bond0: (slave team0): Enslaving as an active interface with an up link [ 448.209545][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2787'. [ 449.569595][T16667] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2802'. [ 450.158871][T16681] xt_hashlimit: size too large, truncated to 1048576 [ 450.349365][T16685] bridge1: entered promiscuous mode [ 450.363981][T16685] bridge1: entered allmulticast mode [ 450.912004][T16701] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 453.308055][T16701] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 453.588034][T16715] xt_hashlimit: size too large, truncated to 1048576 [ 453.817961][T16721] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2814'. [ 454.428972][T16741] syzkaller1: entered promiscuous mode [ 454.447683][T16741] syzkaller1: entered allmulticast mode [ 456.062794][T16790] lo speed is unknown, defaulting to 1000 [ 456.487621][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 456.730057][T16809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.777433][T16809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.292888][T16820] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 459.295029][T16821] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 459.755601][T16855] Set syz1 is full, maxelem 2076 reached [ 461.442054][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 461.452540][T16894] netlink: 'syz.0.2845': attribute type 1 has an invalid length. [ 461.860945][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2847'. [ 462.459647][T16902] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.936856][T16902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.983853][T16902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.476888][T16902] bond3: left promiscuous mode [ 463.489161][T16902] ipvlan2: left allmulticast mode [ 463.497685][T16902] ipvlan3: left allmulticast mode [ 463.508754][T16902] bond3: left allmulticast mode [ 463.683024][T16902] gretap0: left promiscuous mode [ 463.713534][T16902] batman_adv: batadv0: Interface deactivated: gretap1 [ 463.804181][T16902] bond6: left promiscuous mode [ 463.814871][T16902] bond6: left allmulticast mode [ 463.819980][T16902] batman_adv: batadv0: Interface deactivated: gretap2 [ 463.836630][ T7230] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.846171][ T7230] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.122428][T16926] syzkaller0: entered promiscuous mode [ 464.128331][T16926] syzkaller0: entered allmulticast mode [ 464.298520][T16932] syzkaller0: entered promiscuous mode [ 464.304120][T16932] syzkaller0: entered allmulticast mode [ 464.386575][T14688] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.418821][T14688] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.432210][T14688] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.442413][T14688] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.452770][T14688] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.461492][T14688] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.611367][T16950] syzkaller0: entered promiscuous mode [ 464.634222][T16950] syzkaller0: entered allmulticast mode [ 464.931987][T16969] syzkaller0: entered promiscuous mode [ 464.937955][T16969] syzkaller0: entered allmulticast mode [ 466.241322][T17004] bond0: entered promiscuous mode [ 466.246681][T17004] bond_slave_0: entered promiscuous mode [ 466.252464][T17004] bond_slave_1: entered promiscuous mode [ 466.258598][T17004] team0: entered promiscuous mode [ 466.263674][T17004] team_slave_0: entered promiscuous mode [ 466.269598][T17004] team_slave_1: entered promiscuous mode [ 466.275379][T17004] dummy0: entered promiscuous mode [ 466.284703][T17004] batadv0: entered promiscuous mode [ 466.291316][T17004] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 466.301587][T17004] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 466.314262][T17004] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 466.328050][T17004] bond0: left promiscuous mode [ 466.332972][T17004] bond_slave_0: left promiscuous mode [ 466.338555][T17004] bond_slave_1: left promiscuous mode [ 466.344072][T17004] team0: left promiscuous mode [ 466.350018][T17004] team_slave_0: left promiscuous mode [ 466.357898][T17004] team_slave_1: left promiscuous mode [ 466.363505][T17004] dummy0: left promiscuous mode [ 466.369588][T17004] batadv0: left promiscuous mode [ 466.386904][T17005] netlink: 'syz.3.2870': attribute type 2 has an invalid length. [ 466.400796][T17005] bond0: entered promiscuous mode [ 466.405969][T17005] bond_slave_0: entered promiscuous mode [ 466.412451][T17005] bond_slave_1: entered promiscuous mode [ 466.418637][T17005] team0: entered promiscuous mode [ 466.423750][T17005] team_slave_0: entered promiscuous mode [ 466.429842][T17005] team_slave_1: entered promiscuous mode [ 466.435679][T17005] dummy0: entered promiscuous mode [ 466.443646][T17005] batadv0: entered promiscuous mode [ 466.450134][T17005] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 466.460247][T17005] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 466.470896][T17005] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 466.481476][T17005] bond0: left promiscuous mode [ 466.486311][T17005] bond_slave_0: left promiscuous mode [ 466.492690][T17005] bond_slave_1: left promiscuous mode [ 466.498338][T17005] team0: left promiscuous mode [ 466.503239][T17005] team_slave_0: left promiscuous mode [ 466.508924][T17005] team_slave_1: left promiscuous mode [ 466.514490][T17005] dummy0: left promiscuous mode [ 466.520825][T17005] batadv0: left promiscuous mode [ 466.622649][T17008] netlink: 'syz.3.2871': attribute type 4 has an invalid length. [ 466.633142][T17008] netlink: 'syz.3.2871': attribute type 4 has an invalid length. [ 467.781714][T16961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.280259][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 468.798961][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'. [ 468.909055][T17071] syzkaller0: entered promiscuous mode [ 468.923937][T17071] syzkaller0: entered allmulticast mode [ 468.988933][T17071] tipc: Enabled bearer , priority 0 [ 469.017806][T17070] tipc: Resetting bearer [ 469.096242][T17070] tipc: Disabling bearer [ 469.173634][T17075] tipc: Enabled bearer , priority 0 [ 469.228541][T17074] tipc: Disabling bearer [ 469.572853][T17086] syzkaller0: entered promiscuous mode [ 469.581419][T17086] syzkaller0: entered allmulticast mode [ 470.010794][T17096] lo speed is unknown, defaulting to 1000 [ 470.670880][T17113] syzkaller0: entered promiscuous mode [ 470.692937][T17113] syzkaller0: entered allmulticast mode [ 470.715588][T17113] tipc: Enabled bearer , priority 0 [ 470.735204][T17112] tipc: Resetting bearer [ 470.799508][T17112] tipc: Disabling bearer [ 471.216442][T17132] syzkaller0: entered promiscuous mode [ 471.235105][T17132] syzkaller0: entered allmulticast mode [ 471.586935][T17144] netlink: 'syz.3.2910': attribute type 12 has an invalid length. [ 471.851739][T17148] syzkaller0: entered promiscuous mode [ 471.865459][T17148] syzkaller0: entered allmulticast mode [ 472.065022][T17152] netlink: 'syz.3.2914': attribute type 13 has an invalid length. [ 472.640399][T17186] team0 (unregistering): Port device team_slave_0 removed [ 472.651853][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2922'. [ 472.687400][T17186] team0 (unregistering): Port device team_slave_1 removed [ 472.704609][T17188] openvswitch: netlink: Missing key (keys=40, expected=100) [ 473.324856][T17199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2927'. [ 473.573760][T17205] sctp: [Deprecated]: syz.0.2929 (pid 17205) Use of int in max_burst socket option deprecated. [ 473.573760][T17205] Use struct sctp_assoc_value instead [ 473.613060][T17207] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2930'. [ 473.662487][T17207] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2930'. [ 473.696624][T17207] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 473.718452][T17207] 1ªî{X¹¦: entered allmulticast mode [ 473.743972][T17207] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 473.841543][T17210] team0: No ports can be present during mode change [ 473.926299][T17212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2931'. [ 474.083489][T17217] syzkaller0: entered promiscuous mode [ 474.106629][T17217] syzkaller0: entered allmulticast mode [ 474.118127][T17217] TC_ACT_REPEAT abuse ? [ 474.268566][T17223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2936'. [ 474.429773][T17229] syzkaller0: entered promiscuous mode [ 474.450891][T17229] syzkaller0: entered allmulticast mode [ 474.597565][T17238] sctp: [Deprecated]: syz.1.2941 (pid 17238) Use of int in max_burst socket option deprecated. [ 474.597565][T17238] Use struct sctp_assoc_value instead [ 474.655614][T17245] tipc: Enabled bearer , priority 0 [ 474.675333][T17245] syzkaller0: entered promiscuous mode [ 474.681241][T17245] syzkaller0: entered allmulticast mode [ 474.795979][T17250] tipc: Resetting bearer [ 474.830613][T17248] tipc: Enabled bearer , priority 0 [ 474.841841][T17244] tipc: Resetting bearer [ 474.870629][T17244] tipc: Disabling bearer [ 474.911227][T17248] syzkaller0: entered promiscuous mode [ 474.916879][T17248] syzkaller0: entered allmulticast mode [ 474.923049][T17248] tipc: Resetting bearer [ 475.011180][T17247] tipc: Resetting bearer [ 475.075604][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2948'. [ 477.005450][T17247] tipc: Disabling bearer [ 477.027881][ T5730] tipc: Node number set to 3334559679 [ 477.232128][T17295] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2955'. [ 477.332434][T17289] syzkaller0: entered promiscuous mode [ 477.346566][T17289] syzkaller0: entered allmulticast mode [ 477.597350][T17297] syzkaller0: entered promiscuous mode [ 477.604129][T17297] syzkaller0: entered allmulticast mode [ 477.622622][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'. [ 482.280030][T17414] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2976'. [ 482.321383][T17416] syzkaller0: entered promiscuous mode [ 482.347862][T17416] syzkaller0: entered allmulticast mode [ 482.530479][T17425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2979'. [ 482.570130][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 482.589724][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2979'. [ 482.641258][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 482.650660][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2979'. [ 482.661268][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.686749][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.720209][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.406235][T17452] syzkaller0: entered promiscuous mode [ 483.414177][T17452] syzkaller0: entered allmulticast mode [ 483.465070][T17454] syzkaller0: entered promiscuous mode [ 483.477928][T17454] syzkaller0: entered allmulticast mode [ 483.498992][T17454] 0: reclassify loop, rule prio 0, protocol 800 [ 483.664237][T17463] sctp: [Deprecated]: syz.3.2988 (pid 17463) Use of int in max_burst socket option deprecated. [ 483.664237][T17463] Use struct sctp_assoc_value instead [ 483.795524][T17462] tc action pedit 'at' offset -2147483648 out of bounds [ 483.923734][T17475] netlink: 'syz.2.2992': attribute type 13 has an invalid length. [ 484.408054][T17490] lo speed is unknown, defaulting to 1000 [ 484.806103][T17508] lo: Caught tx_queue_len zero misconfig [ 485.008061][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3003'. [ 485.488758][ T5641] block nbd1: Receive control failed (result -32) [ 485.490237][T14872] block nbd1: Receive control failed (result -32) [ 485.809371][T17531] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3008'. [ 486.131748][T17539] tipc: Enabled bearer , priority 0 [ 486.164785][T17539] syzkaller0: entered promiscuous mode [ 486.179696][T17539] syzkaller0: entered allmulticast mode [ 486.220599][T17539] tipc: Resetting bearer [ 486.241875][T17537] tipc: Resetting bearer [ 486.308787][T17537] tipc: Disabling bearer [ 486.766282][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 486.818745][T17546] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3013'. [ 486.964395][T17555] SET target dimension over the limit! [ 487.246362][T17574] netlink: 'syz.2.3021': attribute type 12 has an invalid length. [ 487.599296][T17589] __nla_validate_parse: 2 callbacks suppressed [ 487.599314][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3023'. [ 488.180123][T17601] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3024'. [ 488.666499][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 488.720369][T17621] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3028'. [ 488.873241][T17622] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3027'. [ 488.883652][T17637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3030'. [ 488.985298][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 489.318752][T17658] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3036'. [ 489.338727][T17657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3035'. [ 489.350213][T17657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3035'. [ 489.382627][T17657] geneve2: entered promiscuous mode [ 489.585212][T17668] tipc: Failed to remove unknown binding: 66,0,0/0:1439533530/1439533532 [ 489.595818][T17668] tipc: Failed to remove unknown binding: 66,0,0/0:1439533530/1439533531 [ 489.772711][T17675] sctp: [Deprecated]: syz.2.3039 (pid 17675) Use of int in max_burst socket option deprecated. [ 489.772711][T17675] Use struct sctp_assoc_value instead [ 489.897873][T17677] tipc: Enabling of bearer rejected, already enabled [ 490.334844][T17703] ±ÿ: renamed from lo [ 491.053878][T17728] bridge_slave_1: Caught tx_queue_len zero misconfig [ 491.212128][T17728] netlink: 'syz.2.3049': attribute type 1 has an invalid length. [ 491.305127][T17735] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 491.358205][T17735] netlink: 'syz.1.3051': attribute type 3 has an invalid length. [ 491.580483][T17740] syzkaller0: entered promiscuous mode [ 491.597616][T17740] syzkaller0: entered allmulticast mode [ 491.627301][T17740] tipc: Enabled bearer , priority 0 [ 491.642995][T17740] tipc: Resetting bearer [ 491.671319][T17739] tipc: Resetting bearer [ 491.714069][T17739] tipc: Disabling bearer [ 492.032942][T17748] netlink: 'syz.2.3057': attribute type 11 has an invalid length. [ 492.064563][T17748] netlink: 'syz.2.3057': attribute type 4 has an invalid length. [ 492.208672][T17742] No such timeout policy "syz1" [ 492.234123][T17742] netlink: zone id is out of range [ 492.239546][T17742] netlink: zone id is out of range [ 492.244845][T17742] netlink: zone id is out of range [ 492.251594][T17742] netlink: zone id is out of range [ 492.263724][T17742] netlink: zone id is out of range [ 492.279168][T17742] netlink: zone id is out of range [ 492.292952][T17742] netlink: zone id is out of range [ 492.306103][T17742] netlink: zone id is out of range [ 492.313277][T17742] netlink: zone id is out of range [ 492.318766][T17742] netlink: zone id is out of range [ 492.816986][T17771] netlink: 'syz.1.3063': attribute type 1 has an invalid length. [ 492.826528][T17771] __nla_validate_parse: 8 callbacks suppressed [ 492.826544][T17771] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3063'. [ 492.860332][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'. [ 493.031834][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'. [ 493.071448][T17778] netlink: 'syz.4.3066': attribute type 61 has an invalid length. [ 493.083348][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3064'. [ 493.246035][T17779] IPVS: Scheduler module ip_vs_sip not found [ 493.325740][T17778] bond0: (slave bridge0): Releasing backup interface [ 493.347264][T17781] nbd2: detected capacity change from 0 to 127 [ 493.403497][T17778] bridge_slave_0: left allmulticast mode [ 493.409928][T17778] bridge_slave_0: left promiscuous mode [ 493.415829][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.438075][T17778] bridge_slave_1: left promiscuous mode [ 493.444131][T17778] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.478546][T17778] bond0: (slave bond_slave_1): Releasing backup interface [ 493.590189][T17796] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 493.621357][T17796] bond7: entered promiscuous mode [ 493.628923][T17796] bond7: entered allmulticast mode [ 493.634481][T17796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 493.779312][T14872] block nbd2: Receive control failed (result -104) [ 493.801326][T17801] block nbd3: server does not support multiple connections per device. [ 493.827346][T17801] block nbd3: shutting down sockets [ 493.999465][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'. [ 494.701275][T17828] veth0_macvtap: Caught tx_queue_len zero misconfig [ 495.090984][T17837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.102363][T17837] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.129266][T17837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.221496][T17837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.251134][T17837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.281389][T17846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 495.316949][T17837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.355277][T17837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.465549][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.472810][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.730137][ T1663] block nbd2: Connection timed out, retrying (0/1 alive) [ 496.740076][ T1663] block nbd2: Connection timed out, retrying (0/1 alive) [ 496.747931][ T1663] block nbd2: Connection timed out, retrying (0/1 alive) [ 496.755074][ T1663] block nbd2: Connection timed out, retrying (0/1 alive) [ 496.763229][ T11] block nbd2: Dead connection, failed to find a fallback [ 496.768945][T17876] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3087'. [ 496.787135][ T11] block nbd2: shutting down sockets [ 496.793566][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.805084][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 496.813423][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.823258][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 496.831082][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.841060][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 496.848916][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.858564][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 496.870384][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.881795][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 496.889789][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 496.897695][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 496.906328][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 496.917862][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.927513][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 496.940190][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 496.949783][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 496.957835][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.967606][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.978132][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.988167][ T5628] ldm_validate_partition_table(): Disk read failed. [ 496.998402][ T5628] Dev nbd2: unable to read RDB block 0 [ 497.005960][ T5628] nbd2: unable to read partition table [ 497.053746][ T5628] ldm_validate_partition_table(): Disk read failed. [ 497.099923][ T5628] Dev nbd2: unable to read RDB block 0 [ 497.118348][ T5628] nbd2: unable to read partition table [ 497.131106][T17883] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 497.789370][T17912] netlink: 'syz.3.3099': attribute type 13 has an invalid length. [ 497.806699][T17912] netlink: 'syz.3.3099': attribute type 17 has an invalid length. [ 497.982326][T17922] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3102'. [ 498.080571][T17911] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.515463][T17943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3107'. [ 498.771009][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.889205][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.190840][T17912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.213486][T17912] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.254546][T17912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.349645][T17912] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.356931][T17912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.402392][T17912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.426257][T17912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.468948][T17912] net_ratelimit: 15 callbacks suppressed [ 499.468968][T17912] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 499.503369][T17915] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.754013][T17932] syzkaller0: entered promiscuous mode [ 499.767024][T17932] syzkaller0: entered allmulticast mode [ 500.341319][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'. [ 500.735829][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'. [ 500.848515][T18014] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3123'. [ 501.382019][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.916195][T18027] netlink: 'syz.4.3126': attribute type 49 has an invalid length. [ 502.054890][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052cf5000: rx timeout, send abort [ 502.441161][T17999] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 502.482560][T18024] ipvlan0: left allmulticast mode [ 502.535569][T18024] bond1: left allmulticast mode [ 502.551677][T18024] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 502.555061][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052cf4c00: rx timeout, send abort [ 502.570215][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052cf5000: abort rx timeout. Force session deactivation [ 503.066761][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052cf4c00: abort rx timeout. Force session deactivation [ 503.353025][T18075] netlink: 'syz.1.3137': attribute type 16 has an invalid length. [ 503.379263][T18075] netlink: 'syz.1.3137': attribute type 17 has an invalid length. [ 503.464566][T18075] batadv0: left promiscuous mode [ 503.527464][T18075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.612631][T18075] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 503.634014][T18086] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3140'. [ 504.059127][T18102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3144'. [ 504.224902][T18106] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3144'. [ 504.566801][T18113] tipc: Enabled bearer , priority 0 [ 504.584512][T18113] tipc: Resetting bearer [ 504.682604][T18112] tipc: Disabling bearer [ 504.743898][T18124] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3152'. [ 505.155828][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3158'. [ 505.287204][T18152] [ 505.289576][T18152] ====================================================== [ 505.296628][T18152] WARNING: possible circular locking dependency detected [ 505.303686][T18152] syzkaller #0 Not tainted [ 505.308131][T18152] ------------------------------------------------------ [ 505.315170][T18152] syz.0.3158/18152 is trying to acquire lock: [ 505.321261][T18152] ffff888076f0d018 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 505.330203][T18152] [ 505.330203][T18152] but task is already holding lock: [ 505.337579][T18152] ffff888029e05008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 505.347104][T18152] [ 505.347104][T18152] which lock already depends on the new lock. [ 505.347104][T18152] [ 505.357524][T18152] [ 505.357524][T18152] the existing dependency chain (in reverse order) is: [ 505.366555][T18152] [ 505.366555][T18152] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 505.374396][T18152] __mutex_lock+0x19d/0x1550 [ 505.379627][T18152] elevator_change+0x1af/0x480 [ 505.384964][T18152] elevator_set_none+0xb5/0x140 [ 505.390372][T18152] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 505.396793][T18152] nbd_start_device+0x189/0xb30 [ 505.402238][T18152] nbd_genl_connect+0x1597/0x1c10 [ 505.407824][T18152] genl_family_rcv_msg_doit+0x233/0x340 [ 505.413965][T18152] genl_rcv_msg+0x614/0x7a0 [ 505.419081][T18152] netlink_rcv_skb+0x226/0x4a0 [ 505.424383][T18152] genl_rcv+0x28/0x40 [ 505.428916][T18152] netlink_unicast+0x7bb/0x940 [ 505.434241][T18152] netlink_sendmsg+0x813/0xb40 [ 505.439556][T18152] sock_sendmsg_nosec+0x13a/0x180 [ 505.445241][T18152] ____sys_sendmsg+0x54e/0x850 [ 505.450547][T18152] ___sys_sendmsg+0x2a5/0x360 [ 505.455774][T18152] __x64_sys_sendmsg+0x1b1/0x290 [ 505.461253][T18152] do_syscall_64+0x174/0x580 [ 505.466445][T18152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.472881][T18152] [ 505.472881][T18152] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 505.481519][T18152] blk_alloc_queue+0x544/0x690 [ 505.486875][T18152] __blk_mq_alloc_disk+0x194/0x390 [ 505.492626][T18152] nbd_dev_add+0x494/0xb60 [ 505.497606][T18152] nbd_init+0x15f/0x1e0 [ 505.502398][T18152] do_one_initcall+0x250/0x870 [ 505.507709][T18152] do_initcall_level+0x10a/0x1a0 [ 505.513220][T18152] do_initcalls+0x59/0xa0 [ 505.518101][T18152] kernel_init_freeable+0x29d/0x3e0 [ 505.523863][T18152] kernel_init+0x1d/0x1d0 [ 505.528837][T18152] ret_from_fork+0x514/0xb70 [ 505.533983][T18152] ret_from_fork_asm+0x1a/0x30 [ 505.539281][T18152] [ 505.539281][T18152] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 505.546519][T18152] fs_reclaim_acquire+0x71/0x100 [ 505.552010][T18152] __kmalloc_cache_node_noprof+0x66/0x630 [ 505.558291][T18152] create_worker+0x112/0x7b0 [ 505.563425][T18152] workqueue_prepare_cpu+0xe4/0x170 [ 505.569175][T18152] cpuhp_invoke_callback+0x434/0x810 [ 505.575106][T18152] _cpu_up+0x2ce/0x5b0 [ 505.579730][T18152] cpu_up+0x1d2/0x220 [ 505.584286][T18152] cpuhp_bringup_mask+0xb2/0x1a0 [ 505.589856][T18152] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 505.596245][T18152] bringup_nonboot_cpus+0x17/0x30 [ 505.601839][T18152] smp_init+0x32/0x110 [ 505.606535][T18152] kernel_init_freeable+0x27f/0x3e0 [ 505.612289][T18152] kernel_init+0x1d/0x1d0 [ 505.617160][T18152] ret_from_fork+0x514/0xb70 [ 505.622326][T18152] ret_from_fork_asm+0x1a/0x30 [ 505.627635][T18152] [ 505.627635][T18152] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 505.635514][T18152] cpus_read_lock+0x42/0x160 [ 505.640656][T18152] static_key_slow_inc+0x12/0x30 [ 505.646149][T18152] nbd_genl_reconfigure+0x1301/0x1e80 [ 505.652048][T18152] genl_family_rcv_msg_doit+0x233/0x340 [ 505.658131][T18152] genl_rcv_msg+0x614/0x7a0 [ 505.663180][T18152] netlink_rcv_skb+0x226/0x4a0 [ 505.668482][T18152] genl_rcv+0x28/0x40 [ 505.673005][T18152] netlink_unicast+0x7bb/0x940 [ 505.678300][T18152] netlink_sendmsg+0x813/0xb40 [ 505.683598][T18152] sock_sendmsg_nosec+0x13a/0x180 [ 505.689168][T18152] ____sys_sendmsg+0x54e/0x850 [ 505.694470][T18152] ___sys_sendmsg+0x2a5/0x360 [ 505.699723][T18152] __x64_sys_sendmsg+0x1b1/0x290 [ 505.705194][T18152] do_syscall_64+0x174/0x580 [ 505.710312][T18152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.716731][T18152] [ 505.716731][T18152] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 505.724463][T18152] __mutex_lock+0x19d/0x1550 [ 505.729594][T18152] nbd_queue_rq+0x373/0x1150 [ 505.734717][T18152] blk_mq_dispatch_rq_list+0x499/0x1990 [ 505.740854][T18152] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 505.747722][T18152] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 505.754248][T18152] blk_mq_run_work_fn+0x16c/0x300 [ 505.759800][T18152] process_scheduled_works+0xa8e/0x14e0 [ 505.765872][T18152] worker_thread+0xa47/0xfb0 [ 505.770994][T18152] kthread+0x388/0x470 [ 505.775603][T18152] ret_from_fork+0x514/0xb70 [ 505.780734][T18152] ret_from_fork_asm+0x1a/0x30 [ 505.786025][T18152] [ 505.786025][T18152] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 505.793240][T18152] __mutex_lock+0x19d/0x1550 [ 505.798369][T18152] nbd_queue_rq+0xc1/0x1150 [ 505.803401][T18152] blk_mq_dispatch_rq_list+0x499/0x1990 [ 505.809485][T18152] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 505.816359][T18152] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 505.822874][T18152] blk_mq_run_work_fn+0x16c/0x300 [ 505.828446][T18152] process_scheduled_works+0xa8e/0x14e0 [ 505.834558][T18152] worker_thread+0xa47/0xfb0 [ 505.839675][T18152] kthread+0x388/0x470 [ 505.844281][T18152] ret_from_fork+0x514/0xb70 [ 505.849407][T18152] ret_from_fork_asm+0x1a/0x30 [ 505.854846][T18152] [ 505.854846][T18152] -> #0 (set->srcu){.+.+}-{0:0}: [ 505.861977][T18152] __lock_acquire+0x1520/0x2cf0 [ 505.867364][T18152] lock_sync+0x9d/0x120 [ 505.872093][T18152] __synchronize_srcu+0xc9/0x2f0 [ 505.877562][T18152] elevator_switch+0x1e8/0x7b0 [ 505.882859][T18152] elevator_change+0x2fa/0x480 [ 505.888213][T18152] elevator_set_default+0x375/0x440 [ 505.893964][T18152] blk_register_queue+0x3f3/0x4e0 [ 505.899528][T18152] __add_disk+0x6cb/0xe30 [ 505.904462][T18152] add_disk_fwnode+0x100/0x3a0 [ 505.909756][T18152] nbd_dev_add+0x733/0xb60 [ 505.914695][T18152] nbd_genl_connect+0x992/0x1c10 [ 505.920240][T18152] genl_family_rcv_msg_doit+0x233/0x340 [ 505.926311][T18152] genl_rcv_msg+0x614/0x7a0 [ 505.931351][T18152] netlink_rcv_skb+0x226/0x4a0 [ 505.936642][T18152] genl_rcv+0x28/0x40 [ 505.941153][T18152] netlink_unicast+0x7bb/0x940 [ 505.946444][T18152] netlink_sendmsg+0x813/0xb40 [ 505.951741][T18152] sock_sendmsg_nosec+0x13a/0x180 [ 505.957300][T18152] ____sys_sendmsg+0x54e/0x850 [ 505.962590][T18152] ___sys_sendmsg+0x2a5/0x360 [ 505.967810][T18152] __x64_sys_sendmsg+0x1b1/0x290 [ 505.973285][T18152] do_syscall_64+0x174/0x580 [ 505.978410][T18152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.984832][T18152] [ 505.984832][T18152] other info that might help us debug this: [ 505.984832][T18152] [ 505.995061][T18152] Chain exists of: [ 505.995061][T18152] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 505.995061][T18152] [ 506.008723][T18152] Possible unsafe locking scenario: [ 506.008723][T18152] [ 506.016237][T18152] CPU0 CPU1 [ 506.021622][T18152] ---- ---- [ 506.026995][T18152] lock(&q->elevator_lock); [ 506.031598][T18152] lock(&q->q_usage_counter(io)#50); [ 506.039504][T18152] lock(&q->elevator_lock); [ 506.046626][T18152] sync(set->srcu); [ 506.050544][T18152] [ 506.050544][T18152] *** DEADLOCK *** [ 506.050544][T18152] [ 506.058687][T18152] 6 locks held by syz.0.3158/18152: [ 506.063902][T18152] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 506.072301][T18152] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 506.081286][T18152] #2: ffff8880528979c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 506.091680][T18152] #3: ffff888029e05090 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 506.101523][T18152] #4: ffff888029e04b18 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 506.112446][T18152] #5: ffff888029e05008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 506.122300][T18152] [ 506.122300][T18152] stack backtrace: [ 506.128210][T18152] CPU: 0 UID: 0 PID: 18152 Comm: syz.0.3158 Not tainted syzkaller #0 PREEMPT(full) [ 506.128238][T18152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.128263][T18152] Call Trace: [ 506.128270][T18152] [ 506.128278][T18152] dump_stack_lvl+0xe8/0x150 [ 506.128306][T18152] print_circular_bug+0x2e1/0x300 [ 506.128327][T18152] check_noncircular+0x12e/0x150 [ 506.128347][T18152] __lock_acquire+0x1520/0x2cf0 [ 506.128373][T18152] ? check_noncircular+0xda/0x150 [ 506.128393][T18152] ? lockdep_unlock+0x5d/0xd0 [ 506.128414][T18152] ? __lock_acquire+0x13e8/0x2cf0 [ 506.128440][T18152] ? __lock_acquire+0x13e8/0x2cf0 [ 506.128466][T18152] ? __synchronize_srcu+0xb5/0x2f0 [ 506.128490][T18152] lock_sync+0x9d/0x120 [ 506.128526][T18152] ? __synchronize_srcu+0xb5/0x2f0 [ 506.128551][T18152] __synchronize_srcu+0xc9/0x2f0 [ 506.128576][T18152] ? __pfx___synchronize_srcu+0x10/0x10 [ 506.128609][T18152] ? do_raw_spin_lock+0x12b/0x2f0 [ 506.128630][T18152] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 506.128654][T18152] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 506.128675][T18152] ? synchronize_srcu+0x20a/0x260 [ 506.128696][T18152] elevator_switch+0x1e8/0x7b0 [ 506.128716][T18152] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 506.128732][T18152] elevator_change+0x2fa/0x480 [ 506.128753][T18152] ? do_raw_spin_unlock+0xf5/0x210 [ 506.128771][T18152] elevator_set_default+0x375/0x440 [ 506.128794][T18152] ? __pfx_elevator_set_default+0x10/0x10 [ 506.128819][T18152] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 506.128895][T18152] ? blk_crypto_sysfs_register+0x11c/0x170 [ 506.128954][T18152] blk_register_queue+0x3f3/0x4e0 [ 506.128972][T18152] __add_disk+0x6cb/0xe30 [ 506.128991][T18152] add_disk_fwnode+0x100/0x3a0 [ 506.129009][T18152] nbd_dev_add+0x733/0xb60 [ 506.129026][T18152] ? __pfx_nbd_dev_add+0x10/0x10 [ 506.129048][T18152] ? bpf_lsm_capable+0x9/0x20 [ 506.129068][T18152] ? security_capable+0x7e/0x2c0 [ 506.129102][T18152] ? radix_tree_lookup+0x25c/0x290 [ 506.129162][T18152] nbd_genl_connect+0x992/0x1c10 [ 506.129181][T18152] ? __pfx_nbd_genl_connect+0x10/0x10 [ 506.129196][T18152] ? rcu_is_watching+0x15/0xb0 [ 506.129210][T18152] ? trace_kmalloc+0x2a/0xf0 [ 506.129230][T18152] ? __kmalloc_noprof+0x396/0x720 [ 506.129250][T18152] ? __nla_parse+0x40/0x60 [ 506.129324][T18152] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 506.129340][T18152] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 506.129359][T18152] genl_family_rcv_msg_doit+0x233/0x340 [ 506.129377][T18152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 506.129396][T18152] ? __lock_acquire+0x683/0x2cf0 [ 506.129422][T18152] genl_rcv_msg+0x614/0x7a0 [ 506.129449][T18152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.129473][T18152] ? __pfx_nbd_genl_connect+0x10/0x10 [ 506.129494][T18152] netlink_rcv_skb+0x226/0x4a0 [ 506.129514][T18152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.129539][T18152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.129565][T18152] ? down_read+0x2be/0x330 [ 506.129589][T18152] genl_rcv+0x28/0x40 [ 506.129612][T18152] netlink_unicast+0x7bb/0x940 [ 506.129634][T18152] netlink_sendmsg+0x813/0xb40 [ 506.129664][T18152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.129686][T18152] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.129724][T18152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.129743][T18152] sock_sendmsg_nosec+0x13a/0x180 [ 506.129770][T18152] ____sys_sendmsg+0x54e/0x850 [ 506.129791][T18152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.129813][T18152] ? import_iovec+0x73/0xa0 [ 506.129829][T18152] ___sys_sendmsg+0x2a5/0x360 [ 506.129847][T18152] ? __lock_acquire+0x683/0x2cf0 [ 506.129871][T18152] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.129892][T18152] ? futex_wait+0x2a2/0x390 [ 506.129922][T18152] ? __fget_files+0x2a/0x420 [ 506.129944][T18152] ? __fget_files+0x3a2/0x420 [ 506.129970][T18152] __x64_sys_sendmsg+0x1b1/0x290 [ 506.129990][T18152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.130017][T18152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.130033][T18152] do_syscall_64+0x174/0x580 [ 506.130055][T18152] ? trace_irq_disable+0x3b/0x140 [ 506.130076][T18152] ? clear_bhb_loop+0x40/0x90 [ 506.130099][T18152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.130115][T18152] RIP: 0033:0x7fe15699e019 [ 506.130134][T18152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.130150][T18152] RSP: 002b:00007fe1577cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.130166][T18152] RAX: ffffffffffffffda RBX: 00007fe156c26090 RCX: 00007fe15699e019 [ 506.130178][T18152] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 506.130188][T18152] RBP: 00007fe156a3500c R08: 0000000000000000 R09: 0000000000000000 [ 506.130198][T18152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.130208][T18152] R13: 00007fe156c26128 R14: 00007fe156c26090 R15: 00007ffd57034bd8 [ 506.130226][T18152] [ 507.020410][ T5628] udevd[5628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 507.042968][ T5628] udevd[5628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory