last executing test programs: 2.795360772s ago: executing program 0 (id=6542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xf, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e85000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x50}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="070017000800"], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) 2.775827846s ago: executing program 1 (id=6544): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x4b, &(0x7f00000001c0)={&(0x7f0000002540)=@newtfilter={0x134, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2}, {0xfff1, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x108, 0x2, [@TCA_BPF_ACT={0x104}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.61919853s ago: executing program 1 (id=6547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r7, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r8}}], 0x20, 0x4c004}], 0x1, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 2.504235554s ago: executing program 3 (id=6549): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x10, 0x5b, "c1cc9e3672b9b820bc2b7d49"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10}, 0x18) writev(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.408869283s ago: executing program 1 (id=6550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) 2.3944302s ago: executing program 2 (id=6551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r5, &(0x7f0000000380), 0x0}, 0x20) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0xfffff000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.205284273s ago: executing program 1 (id=6553): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x20080c5}, 0x0) 2.155934075s ago: executing program 0 (id=6554): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.154017791s ago: executing program 2 (id=6555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r3, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2.078689262s ago: executing program 0 (id=6556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x672}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffc, 0xff, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x9]}}, {{0x1c, 0x1, {0xfd, 0xff, 0x0, 0x9, 0x1, 0x7, 0x99, 0x5}}, {0xe, 0x2, [0x5, 0x0, 0x6000, 0x6, 0xf2d8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.011083997s ago: executing program 2 (id=6558): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.795973707s ago: executing program 0 (id=6561): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002f80)={{0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2, &(0x7f0000000d00)={@align=0x2, {0x0, 0x8, 0x3, 0x9}}, 0xf, &(0x7f0000000d40), &(0x7f0000000f00)=0x1}, {[0x0, 0x86f1, 0x4, 0x1]}, 0x8001, 0x1000, &(0x7f0000001f80)=""/4096}) sendmsg$nl_generic(r1, 0x0, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b708000064f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c) 1.748896763s ago: executing program 4 (id=6562): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x2, 0xa, 0xffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x70, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x94}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5800}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffffffffffccb, 0x2, 0xe4}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4804) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91109a000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.543748663s ago: executing program 3 (id=6563): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @local}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.534289125s ago: executing program 0 (id=6564): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xb1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000900)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000015000000000000640001000006020202220202010882848b0600000024"], 0x36) nanosleep(0x0, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000e80)=ANY=[], 0x339) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x21, '\x00', 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001a00), 0x0) recvmsg$kcm(r2, 0x0, 0x40000002) syz_emit_ethernet(0x256, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000003dc0), 0x0, &(0x7f0000003e00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000003ec0)=@abs, 0x6e, &(0x7f0000005440)=[{&(0x7f0000004000)=""/1, 0x1}, {&(0x7f0000005040)=""/42, 0x2a}, {0x0}, {&(0x7f0000005180)=""/159, 0x9f}, {&(0x7f0000005240)=""/138, 0x8a}, {&(0x7f0000005300)=""/170, 0xaa}, {&(0x7f00000053c0)=""/75, 0x4b}], 0x7}}, {{0x0, 0x0, &(0x7f0000005a00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000005840)=""/190, 0xbe}, {&(0x7f0000005900)=""/228, 0xe4}], 0x5, &(0x7f0000005a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/70, 0x46}], 0x1}}, {{0x0, 0x0, &(0x7f0000007380)=[{0x0}, {&(0x7f0000005e80)=""/154, 0x9a}, {0x0}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007180)=""/170, 0xaa}, {&(0x7f0000007240)=""/100, 0x64}, {&(0x7f00000072c0)=""/133, 0x85}], 0x7}}], 0x5, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080a1100000008021100000020000000000001000107828496"], 0x27) 1.533965738s ago: executing program 4 (id=6565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r5, &(0x7f0000000380), 0x0}, 0x20) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad13", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.263306663s ago: executing program 1 (id=6566): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.184547487s ago: executing program 2 (id=6567): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 917.461662ms ago: executing program 1 (id=6568): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0xb, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000200}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = accept(r5, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4804) getsockname$l2tp6(r6, 0x0, &(0x7f0000000180)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880043054803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 917.143176ms ago: executing program 2 (id=6569): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x4b, &(0x7f00000001c0)={&(0x7f0000002540)=@newtfilter={0x134, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2}, {0xfff1, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x108, 0x2, [@TCA_BPF_ACT={0x104}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x0) 914.823156ms ago: executing program 4 (id=6570): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, 0x0, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x4b, &(0x7f00000001c0)={&(0x7f0000002540)=@newtfilter={0x134, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2}, {0xfff1, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x108, 0x2, [@TCA_BPF_ACT={0x104}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x0) 856.908817ms ago: executing program 2 (id=6571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r3}, &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000"], 0x1e8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xdbe}, &(0x7f0000000100)=0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xa4}}, 0x4) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000004100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 853.198836ms ago: executing program 3 (id=6572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r7, 0x8}, &(0x7f00000000c0)=0x8) r8 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 775.572218ms ago: executing program 4 (id=6573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000098", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "8a0d98976fa77c52154820c0bade20c6cc80e4d6896979f863007b9caf4e0fee", "cb3c292d34c34ace42f5a7d38a8da2838809a1a8d73bf14ff8bff111c7afbd81", "f7c893d41751a78a5431f9f71ecec3e8a3c2e552d432efb39a2f1ca28b1f91df", "31e10dc5b71519bfa16623871e1af24fd6e471ab0d203770f70bad15c7f6bb0a", "cf61dc6f215ca0b22abd5c938b2acff2ed2dc6f6851f9fe77fb382ae8bd5fbb6", "7b8601e788761d2872fdd753", 0x3, 0x6, 0x3, 0x5, 0x101}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r7, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x9}, {0x0, 0x9}, {0xf, 0x16}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88be}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="aa00000000000000000020e50000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x4}, @ldst={0x0, 0x1, 0x0, 0xa, 0x5, 0xffffffffffffffe0, 0x8}], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 644.175636ms ago: executing program 3 (id=6574): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002f80)={{0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2, &(0x7f0000000d00)={@align=0x2, {0x0, 0x8, 0x3, 0x9}}, 0xf, &(0x7f0000000d40), &(0x7f0000000f00)=0x1}, {[0x0, 0x86f1, 0x4, 0x1]}, 0x8001, 0x1000, &(0x7f0000001f80)=""/4096}) sendmsg$nl_generic(r1, 0x0, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b708000064f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c) 367.07258ms ago: executing program 4 (id=6575): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0xb, 0x4, 0xc5) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x10000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@remote, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x2000000, 0x7c, 0x8, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000100)={@local, @multicast2, 0x1, "1215887e7ed31b5ada3ebfdf5b8bfe0c3b47ccb5331eee55df4f57cf11608e44", 0x6, 0x2bfd, 0x9, 0x7}, 0x3c) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$nl_generic(r2, 0x0, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x18, r5}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) 311.113791ms ago: executing program 3 (id=6576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0xccd6}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xfffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x14}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1e}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7ea273e14374"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x81) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000300180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040800}, 0x4150) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032dbd7000fddbdf25010000000000000008410000004c00180000000462726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x2, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r12}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffe}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "d80e000000000000f5328c"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) 210.415432ms ago: executing program 4 (id=6577): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)="4e813cbfba79", 0x6, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000014c0)='dctcp', 0xfc56) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80), 0x0, 0x0, 0x0, 0x200008c0}], 0x1, 0x44840) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004004}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x4040004) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000100)={{0xfffffffeffffffff, 0x7, 0x9, 0x6, 0x10000}, [{0x80, 0x4, 0xa, 0xc}, {0x9, 0x7fffffff, 0x6, 0x8}]}) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 64.621575ms ago: executing program 3 (id=6578): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=6579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.5009'. [ 650.900921][T22023] syzkaller0: mtu less than device minimum [ 650.982584][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5010'. [ 651.286200][T22039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5012'. [ 651.329530][T22039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5012'. [ 651.902433][T22049] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5018'. [ 651.920024][T22044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.983200][T22044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.267447][T22064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5020'. [ 652.319240][T22065] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5021'. [ 652.349418][T22065] syzkaller0: mtu less than device minimum [ 652.556692][T22078] tc_dump_action: action bad kind [ 652.879395][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 653.269044][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 653.300569][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 653.612257][T22109] syzkaller0: entered promiscuous mode [ 653.635626][T22109] syzkaller0: entered allmulticast mode [ 653.733690][T22114] nbd: device at index 64 is going down [ 654.050342][T22121] syzkaller0: entered promiscuous mode [ 654.077302][T22121] syzkaller0: entered allmulticast mode [ 654.100038][T22128] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 654.121972][ T6244] udevd[6244]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 654.320231][T22134] syzkaller0: left promiscuous mode [ 654.332346][T22134] syzkaller0: left allmulticast mode [ 654.341666][T22134] tipc: Resetting bearer [ 654.756862][ T6244] udevd[6244]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 654.891179][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 655.145542][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 655.198253][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 655.211206][T22178] gretap1: entered promiscuous mode [ 655.643709][T22195] __nla_validate_parse: 8 callbacks suppressed [ 655.643744][T22195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5057'. [ 655.898890][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5060'. [ 656.071706][T22216] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 656.295418][T22220] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5061'. [ 656.374668][T22222] syzkaller0: mtu less than device minimum [ 656.661428][T22237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5067'. [ 656.901222][T22255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5071'. [ 656.921639][T22255] nbd: device at index 64 is going down [ 657.426530][T22268] syzkaller0: entered promiscuous mode [ 657.432067][T22268] syzkaller0: entered allmulticast mode [ 657.440879][T22268] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 657.480080][T22268] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5076'. [ 657.581568][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5075'. [ 658.023868][T22289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5082'. [ 658.257726][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5086'. [ 660.415652][T22302] bond12: left allmulticast mode [ 660.420845][T22302] bond12: left promiscuous mode [ 660.510870][T22305] vlan0: entered promiscuous mode [ 660.517568][T22305] veth0: entered promiscuous mode [ 660.544250][ T3321] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.566691][ T3321] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 42363 - 0 [ 660.578115][ T3321] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 660.598672][T22334] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 660.646930][T22335] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5090'. [ 660.679729][T22336] syzkaller0: mtu less than device minimum [ 660.705209][ T6114] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.724696][ T6114] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 42363 - 0 [ 660.743467][ T6114] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 660.777839][ T6114] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.801426][ T6114] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 42363 - 0 [ 660.826474][ T6114] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 660.846785][T22343] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 660.865053][T22341] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5091'. [ 660.884393][ T818] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.897240][ T818] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 42363 - 0 [ 660.914281][ T818] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 660.922881][T22341] syzkaller0: mtu less than device minimum [ 661.001147][T22346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5094'. [ 661.979105][T22322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.083014][T22359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5096'. [ 662.289422][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5100'. [ 662.676127][ T5904] udevd[5904]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 662.821335][T22386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.029986][T22399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5105'. [ 663.290825][T22404] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 663.307979][T22406] syzkaller0: entered promiscuous mode [ 663.318581][T22406] syzkaller0: entered allmulticast mode [ 663.340717][T22406] tipc: Resetting bearer [ 663.358777][T22404] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5108'. [ 663.375453][T22410] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 663.443531][T22404] syzkaller0: mtu less than device minimum [ 663.454860][T22406] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5109'. [ 663.479073][T22414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5111'. [ 663.486144][T22406] syzkaller0: mtu less than device minimum [ 663.658041][T22421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5113'. [ 663.743802][ T6244] udevd[6244]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 663.772925][T22426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.805120][ T6244] udevd[6244]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 663.900517][T22430] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.446029][T22444] syzkaller0: entered promiscuous mode [ 664.463285][T22444] syzkaller0: entered allmulticast mode [ 665.273328][T22446] tipc: Resetting bearer [ 665.316574][T22446] bond19: left allmulticast mode [ 665.331428][T22446] ip6gretap2: left allmulticast mode [ 665.336845][T22446] bond19: left promiscuous mode [ 665.341718][T22446] ip6gretap2: left promiscuous mode [ 665.634619][ T1114] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.752671][T22470] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 667.775147][T22471] __nla_validate_parse: 4 callbacks suppressed [ 667.775166][T22471] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5122'. [ 667.815209][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.863460][T11033] syz1: Port: 1 Link DOWN [ 667.865269][T22472] syzkaller0: mtu less than device minimum [ 667.973727][T22481] syzkaller0: left promiscuous mode [ 667.993559][T22481] syzkaller0: left allmulticast mode [ 668.025864][ T3348] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.039352][T22491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5125'. [ 668.094076][ T6110] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.730423][T22522] gretap2: entered promiscuous mode [ 669.131620][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5137'. [ 669.400022][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5144'. [ 669.878737][T22584] tls_set_device_offload_rx: netdev not found [ 669.910652][T22584] netlink: 'syz.0.5150': attribute type 7 has an invalid length. [ 669.930577][T22584] netlink: 'syz.0.5150': attribute type 3 has an invalid length. [ 669.952481][T22584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5150'. [ 670.445321][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'. [ 670.865537][T22624] syzkaller0: left promiscuous mode [ 670.882490][T22624] syzkaller0: left allmulticast mode [ 670.904928][T22624] tipc: Resetting bearer [ 671.349800][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5159'. [ 671.632194][T22646] syzkaller0: entered promiscuous mode [ 671.643866][T22646] syzkaller0: entered allmulticast mode [ 671.927329][T22659] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 671.981821][T22659] syzkaller0: entered promiscuous mode [ 671.994565][T22659] syzkaller0: entered allmulticast mode [ 672.232900][T22662] syzkaller0: left promiscuous mode [ 672.255291][T22662] syzkaller0: left allmulticast mode [ 672.281032][T22670] syzkaller0: entered promiscuous mode [ 672.288921][T22670] syzkaller0: entered allmulticast mode [ 672.328640][T22669] syzkaller0: left promiscuous mode [ 672.340464][T22669] syzkaller0: left allmulticast mode [ 672.589732][T22681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5172'. [ 672.601759][T22678] netlink: 'syz.1.5171': attribute type 1 has an invalid length. [ 672.652906][T22685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5172'. [ 672.724265][T22681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5172'. [ 672.826640][T22685] bridge0: left promiscuous mode [ 672.853264][T22685] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 672.867938][T22685] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 672.876646][T22685] bridge0: port 1(wlan1) entered disabled state [ 672.958997][T22688] tc action pedit offset must be on 32 bit boundaries [ 673.111741][T22695] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5175'. [ 673.137376][T22695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5175'. [ 673.180334][T22704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5180'. [ 673.238413][T22700] pimreg: entered allmulticast mode [ 673.270065][T22700] pimreg: left allmulticast mode [ 673.331967][T22703] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5179'. [ 673.354440][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5179'. [ 673.399714][T22703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5179'. [ 676.633962][T22729] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.641449][T22729] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.811906][T22729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.265597][T22729] tipc: Resetting bearer [ 677.544113][T11033] lo speed is unknown, defaulting to 1000 [ 677.545653][ T6112] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.558691][T11033] syz0: Port: 1 Link DOWN [ 677.574129][ T6112] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.586761][ T6112] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 677.664436][ T1114] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.701754][ T1114] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.749372][ T1114] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 677.809417][T11033] lo speed is unknown, defaulting to 1000 [ 677.844149][ T3321] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.887752][ T3321] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.937148][ T3321] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 677.966220][ T3321] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.987034][ T3321] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.003725][ T3321] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 678.051488][T22780] tipc: Resetting bearer [ 678.085933][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5194'. [ 678.099008][T22780] netlink: 'syz.3.5196': attribute type 13 has an invalid length. [ 678.108230][T22780] netlink: 'syz.3.5196': attribute type 17 has an invalid length. [ 678.198932][T22773] 8021q: adding VLAN 0 to HW filter on device bond14 [ 678.376539][T22780] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.410980][T22780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.567880][T22780] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 678.607182][T22787] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 678.652401][T22773] bond14: entered promiscuous mode [ 678.678746][T22773] bond14: entered allmulticast mode [ 678.706830][T22773] dummy0: entered allmulticast mode [ 678.859181][T11032] syz1: Port: 1 Link ACTIVE [ 678.876141][T22800] syzkaller0: entered promiscuous mode [ 678.926334][T22800] syzkaller0: entered allmulticast mode [ 679.233470][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5201'. [ 679.352213][T22831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5204'. [ 679.406630][T22833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5202'. [ 679.427647][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5203'. [ 679.613508][T22840] syzkaller0: entered promiscuous mode [ 679.644915][T22840] syzkaller0: entered allmulticast mode [ 679.674191][T22840] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 679.772184][T22840] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5205'. [ 679.953697][T22857] netlink: 'syz.1.5209': attribute type 4 has an invalid length. [ 680.019764][T11026] lo speed is unknown, defaulting to 1000 [ 680.053902][T11026] syz0: Port: 1 Link ACTIVE [ 680.078868][T11026] lo speed is unknown, defaulting to 1000 [ 680.103702][T22867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5211'. [ 680.119793][T22867] wg0: Caught tx_queue_len zero misconfig [ 680.195721][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 680.201812][T19330] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 680.443854][T22877] syzkaller0: entered promiscuous mode [ 680.451996][T22888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5214'. [ 680.480098][T22877] syzkaller0: entered allmulticast mode [ 680.622786][T22896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5216'. [ 680.970270][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5217'. [ 681.102236][T22921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5219'. [ 683.367679][T22941] syzkaller0: entered promiscuous mode [ 683.390009][T22941] syzkaller0: entered allmulticast mode [ 683.426242][T22941] tipc: Resetting bearer [ 683.636289][T22951] pimreg: entered allmulticast mode [ 683.656245][T22953] nbd: nbd64 already in use [ 683.753210][T22951] pimreg: left allmulticast mode [ 683.903630][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 684.457958][T22981] tipc: Enabling of bearer rejected, already enabled [ 684.482422][T22981] syzkaller0: mtu less than device minimum [ 684.698658][T22989] syzkaller0: left promiscuous mode [ 684.708118][T22989] syzkaller0: left allmulticast mode [ 684.763778][T22991] __nla_validate_parse: 8 callbacks suppressed [ 684.763798][T22991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5237'. [ 684.803678][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5237'. [ 684.885415][T22994] tc action pedit offset must be on 32 bit boundaries [ 684.895111][T22998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5240'. [ 685.159060][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 685.220397][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 685.249697][T23010] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5242'. [ 685.272279][T23010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5242'. [ 685.308998][T23011] syzkaller0: left promiscuous mode [ 685.324138][T23011] syzkaller0: left allmulticast mode [ 685.330509][T23011] tipc: Resetting bearer [ 685.356445][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5243'. [ 685.400305][T23017] syzkaller0: entered promiscuous mode [ 685.415318][T23017] syzkaller0: entered allmulticast mode [ 685.472289][T23017] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 685.549048][T23021] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5244'. [ 685.617646][T23017] syzkaller0: mtu less than device minimum [ 685.783232][T23033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5248'. [ 685.862784][T23036] syzkaller0: left promiscuous mode [ 685.876473][T23036] syzkaller0: left allmulticast mode [ 686.342534][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 686.379196][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 686.528326][T23065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5257'. [ 686.572689][T23067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5258'. [ 687.275847][T23077] netlink: 'syz.3.5259': attribute type 1 has an invalid length. [ 687.299230][T23077] netlink: 'syz.3.5259': attribute type 2 has an invalid length. [ 687.375572][T23082] syzkaller0: entered promiscuous mode [ 687.386635][T23082] syzkaller0: entered allmulticast mode [ 687.402989][T23082] tipc: Resetting bearer [ 687.421713][T23084] syzkaller0: left promiscuous mode [ 687.445526][T23084] syzkaller0: left allmulticast mode [ 687.463102][T23082] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 687.514948][T23091] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 687.533831][T23082] syzkaller0: mtu less than device minimum [ 687.770031][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 688.378832][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 689.518444][T23156] tipc: Enabling of bearer rejected, failed to enable media [ 689.553120][T23156] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 689.569886][T23156] syzkaller0: mtu less than device minimum [ 689.657473][T23166] syzkaller0: entered promiscuous mode [ 689.663105][T23166] syzkaller0: entered allmulticast mode [ 689.765219][T23173] __nla_validate_parse: 5 callbacks suppressed [ 689.765237][T23173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5284'. [ 689.982801][T23179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5285'. [ 689.999252][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5286'. [ 690.050365][T23185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5286'. [ 690.118227][T23185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5286'. [ 690.373002][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 690.479995][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 690.559004][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 690.619687][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 690.967941][T23213] tipc: Enabling of bearer rejected, failed to enable media [ 690.991474][T23213] syzkaller0: entered promiscuous mode [ 691.012859][T23213] syzkaller0: entered allmulticast mode [ 691.045569][T23213] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 691.164306][T23219] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5293'. [ 691.210966][T23226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5297'. [ 691.295634][T23231] syzkaller0: entered promiscuous mode [ 691.301270][T23231] syzkaller0: entered allmulticast mode [ 691.543059][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 691.584976][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 691.650876][T23239] syzkaller0: entered promiscuous mode [ 691.661753][T23239] syzkaller0: entered allmulticast mode [ 691.800332][T23248] syzkaller0: entered promiscuous mode [ 691.809255][T23248] syzkaller0: entered allmulticast mode [ 691.827685][T23248] tipc: Enabled bearer , priority 0 [ 691.847696][T23248] tipc: Resetting bearer [ 692.038606][T23247] tipc: Resetting bearer [ 692.183027][T23247] tipc: Disabling bearer [ 694.428986][T23266] syzkaller0: left promiscuous mode [ 694.445778][T23266] syzkaller0: left allmulticast mode [ 694.761395][T23284] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5314'. [ 694.785255][T23283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5313'. [ 694.858850][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'. [ 695.210400][T23298] syzkaller0: entered promiscuous mode [ 695.224169][T23298] syzkaller0: entered allmulticast mode [ 695.253540][T23298] tipc: Enabled bearer , priority 0 [ 695.292541][T23306] xt_cgroup: invalid path, errno=-2 [ 695.306006][T23298] tipc: Resetting bearer [ 695.810501][T23297] tipc: Resetting bearer [ 695.969018][T23297] tipc: Disabling bearer [ 696.147041][T23318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5324'. [ 696.304330][T23317] syzkaller0: entered promiscuous mode [ 696.329089][T23317] syzkaller0: entered allmulticast mode [ 696.703696][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 699.622708][T23346] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 699.666486][T23355] syzkaller0: entered promiscuous mode [ 699.675861][T23355] syzkaller0: entered allmulticast mode [ 699.979894][T23387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5340'. [ 700.050536][T23390] syzkaller0: mtu less than device minimum [ 700.059726][T23394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5341'. [ 700.095077][T23393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5343'. [ 700.127500][T23393] nbd: device at index 64 is going down [ 700.290064][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 700.346920][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 700.440529][T23404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5347'. [ 700.470452][T23404] tipc: Invalid UDP bearer configuration [ 700.470505][T23404] tipc: Enabling of bearer rejected, failed to enable media [ 700.679069][T23409] syzkaller0: entered promiscuous mode [ 700.684953][T23409] syzkaller0: entered allmulticast mode [ 700.716009][T23404] bond24: Removing last arp target with arp_interval on [ 701.095776][T23427] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5351'. [ 701.111326][T23427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5351'. [ 701.132284][T23427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5351'. [ 703.369426][T23425] pimreg: entered allmulticast mode [ 703.375230][T23425] pimreg: left allmulticast mode [ 704.187074][T23475] syzkaller0: entered promiscuous mode [ 704.217073][T23475] syzkaller0: entered allmulticast mode [ 704.636069][T23490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5373'. [ 705.299077][T23501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5375'. [ 705.540633][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 706.894144][T23497] syzkaller0: left promiscuous mode [ 706.899829][T23497] syzkaller0: left allmulticast mode [ 706.906317][T23497] tipc: Resetting bearer [ 707.100012][T23513] syzkaller0: entered promiscuous mode [ 707.106155][T23513] syzkaller0: entered allmulticast mode [ 707.289161][T23522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5383'. [ 707.414378][T23524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5384'. [ 707.488164][T23530] syzkaller0: entered promiscuous mode [ 707.501845][T23530] syzkaller0: entered allmulticast mode [ 707.547140][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5387'. [ 707.622543][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 707.769069][T23540] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5390'. [ 707.995107][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 708.374778][T23570] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 708.426456][T23572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5400'. [ 708.431708][T23574] syzkaller0: left promiscuous mode [ 708.450316][T23574] syzkaller0: left allmulticast mode [ 708.474100][T23570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.676139][T23581] tipc: Enabling of bearer rejected, already enabled [ 708.721769][T23579] macvlan0: entered allmulticast mode [ 708.768611][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 708.801912][T23581] syzkaller0: mtu less than device minimum [ 709.003578][T23590] syzkaller0: entered promiscuous mode [ 709.020683][T23590] syzkaller0: entered allmulticast mode [ 710.031874][T23620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5412'. [ 710.122498][T23619] syzkaller0: entered promiscuous mode [ 710.155343][T23619] syzkaller0: entered allmulticast mode [ 710.205303][T23619] tipc: Enabling of bearer rejected, already enabled [ 710.251945][T23628] ip6gre1: entered promiscuous mode [ 710.258656][T23628] ip6gre1: entered allmulticast mode [ 710.269855][ T3348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.300261][T23628] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.310526][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.311545][ T3348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.347500][T23622] syzkaller0: mtu less than device minimum [ 710.389770][T23630] syzkaller0: entered promiscuous mode [ 710.410106][T23630] syzkaller0: entered allmulticast mode [ 710.454265][T22764] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.473765][T23630] tipc: Enabled bearer , priority 0 [ 710.487924][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 710.538359][T23630] tipc: Resetting bearer [ 710.552673][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 710.591310][T23629] tipc: Resetting bearer [ 710.605010][T11026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.662582][T23629] tipc: Disabling bearer [ 710.761711][T23641] lo speed is unknown, defaulting to 1000 [ 711.061898][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5424'. [ 711.234110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.244347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.252482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.260652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.450163][T23665] netlink: 'syz.4.5428': attribute type 17 has an invalid length. [ 711.468273][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5428'. [ 711.487676][T23665] bond0: option all_slaves_active: invalid value (183) [ 711.678570][T23669] tipc: Enabling of bearer rejected, already enabled [ 711.710500][T23669] syzkaller0: mtu less than device minimum [ 711.951027][T23654] lo speed is unknown, defaulting to 1000 [ 711.968694][T23654] lo speed is unknown, defaulting to 1000 [ 711.985530][T23654] lo speed is unknown, defaulting to 1000 [ 712.010404][T23654] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 712.043962][T23654] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 712.082864][T23654] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 712.130447][T23654] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 712.278578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.288324][T23654] lo speed is unknown, defaulting to 1000 [ 712.294736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.345574][T23654] lo speed is unknown, defaulting to 1000 [ 712.353686][T23654] lo speed is unknown, defaulting to 1000 [ 712.386338][T23654] lo speed is unknown, defaulting to 1000 [ 712.395175][T23654] lo speed is unknown, defaulting to 1000 [ 712.402813][T23654] lo speed is unknown, defaulting to 1000 [ 712.740001][T23703] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 712.761721][T23699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5438'. [ 712.803370][T23701] syzkaller0: entered promiscuous mode [ 712.817415][T23701] syzkaller0: entered allmulticast mode [ 713.081445][T23711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5443'. [ 713.167489][ T1114] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 713.200328][T23712] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 713.532449][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 713.641183][T23734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5449'. [ 713.671326][T23728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5447'. [ 713.898726][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 713.913056][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5450'. [ 714.239608][T23751] syzkaller0: entered promiscuous mode [ 714.249006][T23751] syzkaller0: entered allmulticast mode [ 714.300755][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5454'. [ 714.354461][ C0] net_ratelimit: 1 callbacks suppressed [ 714.354481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.368293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.570899][T23763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5458'. [ 714.742589][T23777] pimreg: entered allmulticast mode [ 714.751408][T23777] pimreg: left allmulticast mode [ 714.756731][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 714.776740][T23778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5462'. [ 715.394700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.409797][T23812] tipc: Enabling of bearer rejected, already enabled [ 715.473381][T23805] syzkaller0: entered promiscuous mode [ 715.500165][T23805] syzkaller0: entered allmulticast mode [ 715.513106][T23805] tipc: Resetting bearer [ 715.555624][T23813] netlink: 'syz.1.5471': attribute type 1 has an invalid length. [ 715.576492][T23805] syzkaller0: mtu less than device minimum [ 715.592935][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 715.666522][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 715.741751][T23813] bond21: entered promiscuous mode [ 715.747573][T23813] 8021q: adding VLAN 0 to HW filter on device bond21 [ 715.775376][T23829] bond21: (slave bridge5): making interface the new active one [ 715.783164][T23829] bridge5: entered promiscuous mode [ 715.791859][T23829] bond21: (slave bridge5): Enslaving as an active interface with an up link [ 715.801893][T23822] bond21: entered allmulticast mode [ 715.814084][T23822] bridge5: entered allmulticast mode [ 715.948070][T23833] netlink: 'syz.3.5475': attribute type 16 has an invalid length. [ 715.964939][T23833] netlink: 'syz.3.5475': attribute type 17 has an invalid length. [ 716.141650][T23833] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 716.436154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.444390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.698849][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 716.751827][T23850] batman_adv: batadv0: Adding interface: gretap3 [ 716.758789][T23850] batman_adv: batadv0: Interface activated: gretap3 [ 716.952201][T23867] tipc: Enabling of bearer rejected, already enabled [ 716.993403][T23867] syzkaller0: mtu less than device minimum [ 717.008629][T23869] __nla_validate_parse: 7 callbacks suppressed [ 717.008645][T23869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5483'. [ 717.326915][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 717.394881][T23879] ip_tables: iptables: counters copy to user failed while replacing table [ 717.474229][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 717.497864][T23888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5488'. [ 717.555075][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 717.707212][T22517] block device autoloading is deprecated and will be removed. [ 717.856894][T23914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5492'. [ 718.133326][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 718.237120][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 718.458697][T23938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5498'. [ 718.572123][T23945] syzkaller0: left promiscuous mode [ 718.584254][T23945] syzkaller0: left allmulticast mode [ 718.590321][T23945] tipc: Resetting bearer [ 718.751297][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5502'. [ 718.966252][T23965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5505'. [ 719.212092][T23971] lo speed is unknown, defaulting to 1000 [ 719.268995][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5507'. [ 719.456712][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 719.502714][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 719.531038][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 719.731589][T23992] pimreg: entered allmulticast mode [ 719.757736][T23992] pimreg: left allmulticast mode [ 719.787607][T24001] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5510'. [ 719.798420][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5520'. [ 719.880576][T24003] syzkaller0: entered promiscuous mode [ 719.895276][T24003] syzkaller0: entered allmulticast mode [ 720.104962][T24012] tipc: Enabled bearer , priority 0 [ 720.125825][T24012] syzkaller0: entered promiscuous mode [ 720.141060][T24012] syzkaller0: entered allmulticast mode [ 720.164959][T24012] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 720.233732][T24012] tipc: Resetting bearer [ 720.257069][T24010] tipc: Resetting bearer [ 720.301343][T24010] tipc: Disabling bearer [ 720.395716][T23971] lo speed is unknown, defaulting to 1000 [ 721.057486][T24032] 8021q: adding VLAN 0 to HW filter on device bond19 [ 721.129023][T24038] syzkaller0: mtu less than device minimum [ 721.907975][T24067] veth1_macvtap: entered promiscuous mode [ 721.952754][T24067] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 721.981254][T24077] bridge0: left promiscuous mode [ 722.002667][T24071] bond16: left allmulticast mode [ 722.024359][T24071] bond16: left promiscuous mode [ 722.036560][T24071] bridge0: port 1(bond16) entered disabled state [ 722.079881][T24083] __nla_validate_parse: 8 callbacks suppressed [ 722.079901][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5530'. [ 722.111533][T24084] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 722.210300][T24087] tipc: Enabling of bearer rejected, already enabled [ 722.435764][T24093] macsec0: left promiscuous mode [ 722.468978][T24093] bond3: left promiscuous mode [ 722.491913][T24093] bond3: left allmulticast mode [ 722.519646][T24093] gretap1: left allmulticast mode [ 722.560951][T24093] bond6: left allmulticast mode [ 722.583389][T24093] tipc: Resetting bearer [ 722.607391][T24107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5536'. [ 722.631589][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5537'. [ 722.661893][T24093] syzkaller0: left promiscuous mode [ 722.698338][T24093] syzkaller0: left allmulticast mode [ 722.745575][T24093] bond9: left promiscuous mode [ 722.788281][T24093] bond14: left promiscuous mode [ 722.793400][T24093] veth0_to_bond: left promiscuous mode [ 722.804641][T24093] bond14: left allmulticast mode [ 722.809791][T24093] veth0_to_bond: left allmulticast mode [ 722.817311][T24093] bond17: left promiscuous mode [ 722.822281][T24093] bridge3: left promiscuous mode [ 722.828097][T24093] vlan6: left allmulticast mode [ 722.833050][T24093] bond17: left allmulticast mode [ 722.838538][T24093] bridge3: left allmulticast mode [ 722.844167][T24093] bond18: left promiscuous mode [ 722.849222][T24093] bond18: left allmulticast mode [ 722.868462][T24093] veth11: left allmulticast mode [ 722.886630][T24093] ip6tnl1: left allmulticast mode [ 722.892730][T24093] bond19: left allmulticast mode [ 722.900403][T24093] macvlan2: left promiscuous mode [ 722.908731][T24093] macvlan2: left allmulticast mode [ 722.928640][T24093] ip6gre1: left promiscuous mode [ 722.950472][T24093] ip6gre1: left allmulticast mode [ 722.978295][T24093] bond21: left promiscuous mode [ 722.986040][T24093] bridge5: left promiscuous mode [ 722.991314][T24093] bond21: left allmulticast mode [ 723.003699][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 723.016854][T24093] bridge5: left allmulticast mode [ 723.057277][T22764] lo speed is unknown, defaulting to 1000 [ 723.066977][T24098] syzkaller0: entered promiscuous mode [ 723.072909][T24098] syzkaller0: entered allmulticast mode [ 723.073423][T22764] syz0: Port: 1 Link DOWN [ 723.123652][T22764] lo speed is unknown, defaulting to 1000 [ 723.650814][T24130] lo speed is unknown, defaulting to 1000 [ 724.617821][T24147] syzkaller0: left promiscuous mode [ 724.648461][T24147] syzkaller0: left allmulticast mode [ 724.715492][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5547'. [ 724.772096][T24159] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5548'. [ 724.782942][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5548'. [ 724.861504][T24166] team_slave_1: Caught tx_queue_len zero misconfig [ 724.946567][T24167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5549'. [ 725.239779][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5550'. [ 725.265019][T24184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5551'. [ 725.333595][T24187] netlink: 'syz.3.5552': attribute type 1 has an invalid length. [ 725.351521][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 725.399470][T24184] syzkaller1: entered promiscuous mode [ 725.413487][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 725.436677][T24184] syzkaller1: entered allmulticast mode [ 725.453522][T24130] lo speed is unknown, defaulting to 1000 [ 725.466019][T24177] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 725.507298][T24177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5551'. [ 725.954288][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 727.850884][T24200] tipc: Resetting bearer [ 727.861734][T24200] bond18: left promiscuous mode [ 727.866984][T24200] bridge9: left promiscuous mode [ 727.872365][T24200] macvtap1: left allmulticast mode [ 727.878013][T24200] macvtap2: left allmulticast mode [ 727.883787][T24200] macvlan2: left promiscuous mode [ 727.889944][T24200] macvlan2: left allmulticast mode [ 727.981137][T11028] syz1: Port: 1 Link DOWN [ 728.078857][T24234] __nla_validate_parse: 1 callbacks suppressed [ 728.078877][T24234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5562'. [ 728.267969][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5563'. [ 728.320110][T24253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5564'. [ 728.362170][T24252] syzkaller0: entered promiscuous mode [ 728.382667][T24252] syzkaller0: entered allmulticast mode [ 728.421016][T24252] tipc: Resetting bearer [ 728.548225][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 728.583753][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 728.640345][T24258] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.5578'. [ 728.722036][T24265] netlink: 'syz.0.5578': attribute type 11 has an invalid length. [ 728.738719][T24265] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5578'. [ 728.739777][T24264] syzkaller0: entered promiscuous mode [ 728.761511][T24264] syzkaller0: entered allmulticast mode [ 728.900448][T24273] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5572'. [ 728.998228][ T1114] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 729.040391][T24275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.252587][T24290] syzkaller0: entered promiscuous mode [ 729.258784][T24290] syzkaller0: entered allmulticast mode [ 730.053505][T24327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5587'. [ 730.130552][T24330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5588'. [ 730.144373][T24330] nbd: nbd64 already in use [ 730.397091][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 730.541082][T24345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5589'. [ 730.553117][T24342] syzkaller0: left promiscuous mode [ 730.568479][T24342] syzkaller0: left allmulticast mode [ 730.693280][ T30] audit: type=1804 audit(1785905261.431:15): pid=24353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5592" name="/newroot/1025/cgroup.controllers" dev="tmpfs" ino=5282 res=1 errno=0 [ 730.771556][ T30] audit: type=1800 audit(1785905261.461:16): pid=24353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5592" name="cgroup.controllers" dev="tmpfs" ino=5282 res=0 errno=0 [ 730.800752][T24355] tipc: Enabling of bearer rejected, already enabled [ 730.827279][T24355] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 730.888824][T24355] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5595'. [ 730.915609][T24355] syzkaller0: mtu less than device minimum [ 730.994062][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 731.282344][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 731.323486][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 731.957953][T24404] IPVS: Error connecting to the multicast addr [ 731.992763][ T3348] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 732.025581][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 732.078241][T24403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.267870][T24423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.363533][T24423] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 732.691889][T24436] tipc: Enabling of bearer rejected, already enabled [ 732.787784][T24442] syzkaller0: entered promiscuous mode [ 732.793384][T24442] syzkaller0: entered allmulticast mode [ 732.801575][T24442] tipc: Enabling of bearer rejected, already enabled [ 732.846257][T24442] syzkaller0: mtu less than device minimum [ 733.013598][T24445] syzkaller0: entered promiscuous mode [ 733.051774][T24445] syzkaller0: entered allmulticast mode [ 733.083256][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 733.220924][T24466] syzkaller0: left promiscuous mode [ 733.226444][T24466] syzkaller0: left allmulticast mode [ 733.366667][T24475] netlink: 'syz.1.5618': attribute type 16 has an invalid length. [ 733.380257][T24475] netlink: 'syz.1.5618': attribute type 17 has an invalid length. [ 733.401361][T24475] gretap0: left promiscuous mode [ 733.490055][T24475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.519047][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 733.552988][T24475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.762717][T24461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.792525][T24475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.843876][T24475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 733.854874][T24475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.869694][T24475] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 733.887343][T22762] lo speed is unknown, defaulting to 1000 [ 733.897449][ T818] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.904619][ T818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.906444][T22762] syz0: Port: 1 Link ACTIVE [ 733.987541][ T818] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.994778][ T818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.066636][T24487] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 734.120997][T24485] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 734.174891][T24504] netlink: 'syz.3.5623': attribute type 30 has an invalid length. [ 734.191043][T11131] lo speed is unknown, defaulting to 1000 [ 734.226799][T24505] __nla_validate_parse: 5 callbacks suppressed [ 734.226816][T24505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5625'. [ 734.258916][T11131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 734.325738][T24504] bond20: option arp_missed_max: invalid value (0) [ 734.334433][T11131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 734.371317][T24504] bond20: option arp_missed_max: allowed values 1 - 255 [ 734.399755][T24504] bond20 (unregistering): Released all slaves [ 734.478529][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 734.878576][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 734.892261][T24529] syzkaller0: entered promiscuous mode [ 734.908183][T24529] syzkaller0: entered allmulticast mode [ 734.992437][T24531] netlink: 5408 bytes leftover after parsing attributes in process `syz.4.5629'. [ 735.013629][T24531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.313753][T24541] lo speed is unknown, defaulting to 1000 [ 735.327640][T24546] syzkaller0: left promiscuous mode [ 735.337792][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5637'. [ 735.344787][T24546] syzkaller0: left allmulticast mode [ 735.363220][T24546] tipc: Resetting bearer [ 735.578679][T24558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5641'. [ 735.600209][ T6112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 735.608614][ T6112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 735.627114][T24557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5640'. [ 735.879913][T24570] §: renamed from sit0 [ 736.104279][ T5626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 736.201855][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 736.240524][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 736.287909][T24576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5644'. [ 736.600354][T24587] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 737.056556][T24541] lo speed is unknown, defaulting to 1000 [ 737.087487][T24592] siw: device registration error -23 [ 737.227619][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 737.248752][T19330] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 737.375619][T24602] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5649'. [ 737.601865][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5651'. [ 737.631934][T24611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.693129][T24618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5654'. [ 737.837518][T24615] syzkaller0: entered promiscuous mode [ 737.856967][T24615] syzkaller0: entered allmulticast mode [ 737.863659][T24615] tipc: Resetting bearer [ 738.100630][T24632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5657'. [ 738.166786][T24635] syzkaller0: entered promiscuous mode [ 738.187532][T24635] syzkaller0: entered allmulticast mode [ 738.229539][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 738.849145][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 739.031506][T24657] syzkaller0: left promiscuous mode [ 739.044170][T24657] syzkaller0: left allmulticast mode [ 739.149168][T24665] netlink: 'syz.0.5665': attribute type 1 has an invalid length. [ 739.318504][T24665] bond15: option mode: invalid value (7) [ 739.358973][T24665] bond15 (unregistering): Released all slaves [ 739.530013][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 739.571624][T24691] RDS: rds_bind could not find a transport for 24bd:7000:fcff:ffff:2e00:1100::, load rds_tcp or rds_rdma? [ 739.715518][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 740.817349][T24720] syzkaller0: left promiscuous mode [ 740.830379][T24720] syzkaller0: left allmulticast mode [ 740.841230][T24720] tipc: Resetting bearer [ 740.967382][T24725] syzkaller0: entered promiscuous mode [ 740.994157][T24725] syzkaller0: entered allmulticast mode [ 741.006167][T24725] tipc: Resetting bearer [ 741.302342][T24729] __nla_validate_parse: 1 callbacks suppressed [ 741.302365][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5682'. [ 741.452485][T24742] netlink: 'syz.2.5684': attribute type 29 has an invalid length. [ 741.462996][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5684'. [ 741.534180][T24743] netlink: 'syz.2.5684': attribute type 29 has an invalid length. [ 741.542093][T24743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5684'. [ 742.869096][T24695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.073300][T24747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5686'. [ 743.210236][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5688'. [ 743.234182][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 744.662357][T24800] Unknown options in mask 6 [ 744.678896][T24800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5694'. [ 744.712735][T24800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5694'. [ 744.756593][T24800] netlink: 'syz.3.5694': attribute type 1 has an invalid length. [ 744.803049][T24800] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5694'. [ 744.831378][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5696'. [ 745.122971][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5700'. [ 746.151515][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 746.874042][T24880] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 747.270309][T24898] __nla_validate_parse: 2 callbacks suppressed [ 747.270328][T24898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5716'. [ 747.402454][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5716'. [ 747.412405][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5716'. [ 747.427057][T24904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5716'. [ 747.617945][T24903] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 747.910419][T24910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5718'. [ 748.010952][T24912] bond25: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 748.014549][T24910] block nbd2: server does not support multiple connections per device. [ 748.030009][T24910] block nbd2: shutting down sockets [ 748.165795][T24929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5722'. [ 748.181359][T24912] bond25 (unregistering): Released all slaves [ 748.210742][T24933] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5723'. [ 748.354875][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 748.447865][T24931] syzkaller0: entered promiscuous mode [ 748.478519][T24931] syzkaller0: entered allmulticast mode [ 748.510380][T24926] tipc: Enabled bearer , priority 0 [ 748.935983][T24943] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5721'. [ 748.984897][T24919] tipc: Resetting bearer [ 749.085793][T24952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5724'. [ 749.143126][T24917] tipc: Resetting bearer [ 749.235319][T24917] tipc: Disabling bearer [ 749.532513][T24974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5731'. [ 749.580856][T24968] syzkaller0: entered promiscuous mode [ 749.609539][T24968] syzkaller0: entered allmulticast mode [ 749.690670][T24969] Unknown options in mask 6 [ 749.772616][T24977] netlink: 'syz.1.5729': attribute type 1 has an invalid length. [ 749.876606][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 749.903167][T24992] syzkaller0: entered promiscuous mode [ 749.939811][T24992] syzkaller0: entered allmulticast mode [ 749.953371][T24987] tipc: Enabled bearer , priority 0 [ 749.982507][T24983] tipc: Resetting bearer [ 750.027599][T24982] tipc: Resetting bearer [ 750.092655][T24982] tipc: Disabling bearer [ 750.217164][T24999] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.231512][T24999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.298120][T24999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 750.312275][T24999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.340443][T24999] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 750.580757][T25019] tipc: Enabling of bearer rejected, already enabled [ 750.631885][T25019] syzkaller0: entered promiscuous mode [ 750.664020][T25019] syzkaller0: entered allmulticast mode [ 750.692846][T25019] syzkaller0: mtu less than device minimum [ 751.833579][T25082] tipc: Enabled bearer , priority 0 [ 751.936268][T25082] syzkaller0: entered promiscuous mode [ 751.981074][T25082] syzkaller0: entered allmulticast mode [ 752.041091][T25082] tipc: Resetting bearer [ 752.104326][T25079] tipc: Resetting bearer [ 752.177405][T25079] tipc: Disabling bearer [ 752.218798][T25099] netlink: 'syz.3.5761': attribute type 2 has an invalid length. [ 752.252071][T25102] syzkaller0: entered promiscuous mode [ 752.273017][T25102] syzkaller0: entered allmulticast mode [ 752.436117][T25099] __nla_validate_parse: 12 callbacks suppressed [ 752.436137][T25099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5761'. [ 752.575192][T25117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5763'. [ 752.968470][T25130] tipc: Enabling of bearer rejected, already enabled [ 753.006938][T25131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5768'. [ 753.022578][T25130] syzkaller0: mtu less than device minimum [ 753.102030][T25143] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5771'. [ 753.111630][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 753.115244][T25131] block nbd2: server does not support multiple connections per device. [ 753.144636][T25143] syzkaller0: mtu less than device minimum [ 753.170371][T25131] block nbd2: shutting down sockets [ 753.416955][T25153] syzkaller0: entered promiscuous mode [ 753.423376][T25153] syzkaller0: entered allmulticast mode [ 753.436029][T25151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5772'. [ 753.460161][T25151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5772'. [ 753.532462][T25154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5774'. [ 754.085881][T25186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5782'. [ 754.242193][T25189] tipc: Enabled bearer , priority 0 [ 754.266642][T25189] syzkaller0: entered promiscuous mode [ 754.287324][T25189] syzkaller0: entered allmulticast mode [ 754.357171][T25189] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5784'. [ 754.390920][T25189] tipc: Resetting bearer [ 754.415086][T25187] tipc: Resetting bearer [ 754.496548][T25187] tipc: Disabling bearer [ 754.560762][T25200] batman_adv: batadv0: Adding interface: ip6gretap0 [ 754.583814][T25200] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.665420][T25200] batman_adv: batadv0: Not using interface ip6gretap0 (retrying later): interface not active [ 755.594317][T25206] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 756.322878][T25258] tipc: Enabling of bearer rejected, already enabled [ 756.346764][T25258] syzkaller0: mtu less than device minimum [ 756.443464][T25264] sctp: [Deprecated]: syz.1.5803 (pid 25264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.443464][T25264] Use struct sctp_sack_info instead [ 757.261438][T25282] xt_addrtype: ipv6 does not support BROADCAST matching [ 757.283391][T25279] bond25: option updelay: invalid value (18446744073709518847) [ 757.308887][T25279] bond25: option updelay: allowed values 0 - 2147483647 [ 757.339395][T25279] bond25 (unregistering): Released all slaves [ 757.483487][T25289] __nla_validate_parse: 5 callbacks suppressed [ 757.483504][T25289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5811'. [ 757.572691][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5813'. [ 757.699898][T25305] tipc: Enabled bearer , priority 0 [ 757.707779][T25305] syzkaller0: entered promiscuous mode [ 757.713419][T25305] syzkaller0: entered allmulticast mode [ 757.733329][T25309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5815'. [ 757.756538][T25305] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5814'. [ 757.860789][T25309] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 757.899976][T25305] tipc: Resetting bearer [ 757.922466][T25312] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5815'. [ 757.994151][T25304] tipc: Resetting bearer [ 758.048905][T25311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5816'. [ 758.065704][T25304] tipc: Disabling bearer [ 758.261310][T25327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5821'. [ 758.300226][T25329] syzkaller0: entered promiscuous mode [ 758.311514][T25329] syzkaller0: entered allmulticast mode [ 758.415666][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5824'. [ 758.440895][T25341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5825'. [ 758.457360][T25341] nbd: device at index 64 is going down [ 758.583064][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 758.623251][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5826'. [ 758.633361][T25350] netlink: 'syz.4.5826': attribute type 13 has an invalid length. [ 758.691376][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 758.821119][T25350] tipc: Resetting bearer [ 758.831560][T25358] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 758.848522][T25358] IPVS: nq: FWM 3 0x00000003 - no destination available [ 759.164418][T25375] syzkaller0: left promiscuous mode [ 759.174709][T25375] syzkaller0: left allmulticast mode [ 759.186096][T25372] tipc: Enabled bearer , priority 0 [ 759.215962][T25372] syzkaller0: entered promiscuous mode [ 759.221534][T25372] syzkaller0: entered allmulticast mode [ 759.248221][T25372] tipc: Resetting bearer [ 759.288999][T25370] tipc: Resetting bearer [ 759.401493][T25370] tipc: Disabling bearer [ 759.493278][T25390] tipc: Enabling of bearer rejected, already enabled [ 759.512224][T25390] syzkaller0: entered promiscuous mode [ 759.526097][T25390] syzkaller0: entered allmulticast mode [ 759.562756][T25390] syzkaller0: mtu less than device minimum [ 760.023082][T22968] udevd[22968]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 760.066150][T25420] bridge10: entered promiscuous mode [ 760.073994][T25417] block nbd2: server does not support multiple connections per device. [ 760.082674][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 760.112065][T25417] block nbd2: shutting down sockets [ 760.112470][T25420] bridge10: entered allmulticast mode [ 760.626381][T25446] tipc: Enabled bearer , priority 0 [ 760.666711][T25446] syzkaller0: entered promiscuous mode [ 760.683119][T25446] syzkaller0: entered allmulticast mode [ 760.703733][T25450] netlink: 'syz.0.5852': attribute type 210 has an invalid length. [ 760.721937][T25446] tipc: Resetting bearer [ 760.923721][T25445] tipc: Resetting bearer [ 760.965522][T25445] tipc: Disabling bearer [ 761.148258][T25463] syzkaller1: entered promiscuous mode [ 761.168470][T25463] syzkaller1: entered allmulticast mode [ 761.332257][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 761.612403][T25477] can: request_module (can-proto-0) failed. [ 761.727780][T25483] batman_adv: batadv0: Adding interface: dummy0 [ 761.739359][T25483] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.773138][T25483] batman_adv: batadv0: Interface activated: dummy0 [ 761.854553][T25483] batadv0: mtu less than device minimum [ 761.879590][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.893717][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.905470][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.917292][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.929131][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.940965][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.952782][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.966258][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 761.977990][T25483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 762.160168][T25506] tipc: Enabled bearer , priority 0 [ 762.170556][T25506] syzkaller0: entered promiscuous mode [ 762.176630][T25506] syzkaller0: entered allmulticast mode [ 762.596084][T25509] __nla_validate_parse: 18 callbacks suppressed [ 762.596105][T25509] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5866'. [ 762.633138][T25512] tipc: Resetting bearer [ 762.677259][T25505] tipc: Resetting bearer [ 762.789120][T25505] tipc: Disabling bearer [ 762.837353][T25521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5871'. [ 763.120168][T25529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5873'. [ 763.205254][T25536] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 763.225047][T25529] block nbd2: server does not support multiple connections per device. [ 763.245093][T25529] block nbd2: shutting down sockets [ 763.357905][T25544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5875'. [ 763.706859][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5882'. [ 764.071186][T25569] tipc: Enabling of bearer rejected, already enabled [ 764.114109][T25571] syzkaller0: Caught tx_queue_len zero misconfig [ 764.143238][T25573] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5884'. [ 764.356030][T25581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5887'. [ 764.365319][T25581] netlink: 'syz.4.5887': attribute type 7 has an invalid length. [ 764.373170][T25581] netlink: 'syz.4.5887': attribute type 8 has an invalid length. [ 764.393274][T25581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5887'. [ 764.443315][T25581] veth1: entered promiscuous mode [ 764.452250][T25583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5888'. [ 764.467814][T25581] erspan0: entered promiscuous mode [ 764.475049][T25581] debugfs: 'hsr0' already exists in 'hsr' [ 764.480893][T25581] Cannot create hsr debugfs directory [ 764.487975][T25581] hsr0: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 764.498372][T25581] hsr0: Slave B (veth0) is not up; please bring it up to get a fully working HSR network [ 764.509492][T25581] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 764.554555][T25583] block nbd2: server does not support multiple connections per device. [ 764.574690][T25583] block nbd2: shutting down sockets [ 764.798149][T25594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5892'. [ 765.137905][T25610] tipc: Enabling of bearer rejected, already enabled [ 765.635286][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 765.894150][T25639] syzkaller0: left promiscuous mode [ 765.907974][T25639] syzkaller0: left allmulticast mode [ 765.923399][T25639] tipc: Resetting bearer [ 766.170777][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 766.229373][T25646] bond20: option updelay: invalid value (18446744073709518847) [ 766.239600][T25646] bond20: option updelay: allowed values 0 - 2147483647 [ 766.251493][T25646] bond20 (unregistering): Released all slaves [ 766.296233][T25654] tipc: Enabling of bearer rejected, already enabled [ 766.940065][T25675] netlink: 'syz.0.5914': attribute type 11 has an invalid length. [ 767.481520][T25700] net_ratelimit: 14 callbacks suppressed [ 767.481541][T25700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 767.598092][T25703] netlink: 'syz.4.5921': attribute type 210 has an invalid length. [ 767.640766][T25706] tipc: Enabling of bearer rejected, already enabled [ 767.650713][T25706] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) ! [ 767.786317][T25709] __nla_validate_parse: 13 callbacks suppressed [ 767.786336][T25709] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5923'. [ 767.817367][T25714] syzkaller0: mtu less than device minimum [ 767.991876][T25721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5925'. [ 768.001737][T25721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5925'. [ 768.013186][T25721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5925'. [ 768.301406][T25730] bond0: Caught tx_queue_len zero misconfig [ 768.371085][T25736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5927'. [ 768.859185][T25739] syzkaller0: left promiscuous mode [ 768.876054][T25739] syzkaller0: left allmulticast mode [ 769.087548][T25747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5934'. [ 769.126583][T25751] tipc: Enabling of bearer rejected, already enabled [ 769.143097][T25750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5933'. [ 769.153178][T25751] syzkaller0: entered promiscuous mode [ 769.161512][T25751] syzkaller0: entered allmulticast mode [ 769.167786][T25750] netlink: 'syz.2.5933': attribute type 7 has an invalid length. [ 769.178836][T25751] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) ! [ 769.190459][T25750] netlink: 'syz.2.5933': attribute type 8 has an invalid length. [ 769.207078][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5933'. [ 769.254912][T25751] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5935'. [ 769.264631][T25751] syzkaller0: mtu less than device minimum [ 769.315347][T25750] veth1: entered promiscuous mode [ 769.327254][T25750] veth0: entered promiscuous mode [ 769.333594][T25750] erspan0: entered promiscuous mode [ 769.385899][T25750] debugfs: 'hsr1' already exists in 'hsr' [ 769.391673][T25750] Cannot create hsr debugfs directory [ 769.434633][T25755] lo: Caught tx_queue_len zero misconfig [ 769.866513][T25774] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5943'. [ 770.551783][T25786] tipc: Resetting bearer [ 770.925710][T25796] tipc: Enabling of bearer rejected, already enabled [ 770.939856][T25796] netlink: 'syz.2.5949': attribute type 1 has an invalid length. [ 770.957455][T25795] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 770.965419][T25795] IPVS: dh: FWM 3 0x00000003 - no destination available [ 771.146160][T25796] bond20: entered promiscuous mode [ 771.193563][T25796] 8021q: adding VLAN 0 to HW filter on device bond20 [ 771.231715][T25806] bond20: entered allmulticast mode [ 771.343804][T25796] bond20: (slave bridge0): making interface the new active one [ 771.362533][T25796] bridge0: entered promiscuous mode [ 771.375035][T25796] bridge0: entered allmulticast mode [ 771.402254][T25796] bond20: (slave bridge0): Enslaving as an active interface with an up link [ 771.440998][T25812] netlink: 'syz.1.5954': attribute type 1 has an invalid length. [ 772.052368][T25826] syzkaller0: left promiscuous mode [ 772.063452][T25826] syzkaller0: left allmulticast mode [ 772.568432][T25836] can: request_module (can-proto-0) failed. [ 772.858562][T25713] Set syz1 is full, maxelem 65536 reached [ 773.068743][T25863] __nla_validate_parse: 6 callbacks suppressed [ 773.068763][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5968'. [ 773.139521][T25863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5968'. [ 773.168435][T25868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5967'. [ 773.404220][T25873] veth0: Caught tx_queue_len zero misconfig [ 773.472627][T25876] syzkaller0: left promiscuous mode [ 773.478822][T25876] syzkaller0: left allmulticast mode [ 773.607092][T25886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5973'. [ 775.808613][T25902] tipc: Resetting bearer [ 775.815167][T25902] tipc: Resetting bearer [ 776.384375][T25874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.514267][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 776.611082][T25913] netlink: 'syz.2.5979': attribute type 4 has an invalid length. [ 776.799149][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5983'. [ 777.029121][T25929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5984'. [ 777.961564][T25962] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 777.972501][T11131] lo speed is unknown, defaulting to 1000 [ 778.654567][T25975] netlink: 'syz.2.5999': attribute type 2 has an invalid length. [ 778.663106][T25973] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 778.673231][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.685625][T19330] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 778.888482][T25979] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 779.223845][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6003'. [ 779.344554][T25997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6003'. [ 779.380326][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6004'. [ 779.464086][T26000] veth1 (unregistering): left promiscuous mode [ 779.516137][T26000] veth0 (unregistering): left promiscuous mode [ 779.692127][T26005] tipc: Resetting bearer [ 779.790600][T26011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6006'. [ 779.866418][T26011] netlink: 'syz.2.6006': attribute type 4 has an invalid length. [ 779.924279][T26011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6006'. [ 780.516588][T26017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6007'. [ 781.134616][T26026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6011'. [ 781.178300][T26026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6011'. [ 781.188808][T26030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6013'. [ 781.265481][T26030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6013'. [ 781.450468][T26037] netlink: 'syz.0.6017': attribute type 1 has an invalid length. [ 781.541108][T22968] block nbd64: NBD_DISCONNECT [ 781.568227][T26040] tipc: Resetting bearer [ 781.796668][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 782.914921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.925325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.933677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.051688][T26078] xfrm1: entered allmulticast mode [ 783.195678][T22762] lo speed is unknown, defaulting to 1000 [ 783.553311][T26097] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 784.315343][T26128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.376749][T26124] IPVS: Scheduler module ip_vs_sip not found [ 784.400267][T26128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.454615][T26128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.478185][T26128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.533523][T26128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.579274][T26128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.609717][T26128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.803430][T26167] netlink: 'syz.4.6057': attribute type 13 has an invalid length. [ 785.824008][T26167] netlink: 'syz.4.6057': attribute type 17 has an invalid length. [ 786.508397][T26181] __nla_validate_parse: 7 callbacks suppressed [ 786.508415][T26181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6061'. [ 786.835431][T26162] tipc: Resetting bearer [ 786.897394][T26162] batman_adv: batadv0: Interface deactivated: gretap4 [ 787.031030][T26167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.043753][T26167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.103690][T26167] veth1_macvtap: left promiscuous mode [ 787.111251][T26167] veth0_macvtap: left promiscuous mode [ 787.117559][T26167] veth0_macvtap: left allmulticast mode [ 787.132071][T26167] veth0_macvtap: entered promiscuous mode [ 787.146935][T26167] veth1_macvtap: entered promiscuous mode [ 787.153128][T26167] macsec0: left promiscuous mode [ 787.165254][T26167] 8021q: adding VLAN 0 to HW filter on device €Â [ 787.176589][T26167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.188121][T26167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.199915][T26167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.354672][ T818] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.370517][ T818] netdevsim netdevsim4 €Â: unset [1, 1] type 2 family 0 port 40788 - 0 [ 787.396848][ T818] netdevsim netdevsim4 €Â: unset [1, 2] type 2 family 0 port 20004 - 0 [ 787.496629][T26189] x_tables: unsorted entry at hook 2 [ 787.516434][ T1114] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.539023][ T1114] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 40788 - 0 [ 787.570483][T26191] IPVS: Scheduler module ip_vs_sip not found [ 787.577908][ T1114] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 787.638156][ T1114] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.658008][ T1114] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 40788 - 0 [ 787.688741][ T1114] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 787.708514][T26197] tipc: Enabled bearer , priority 0 [ 787.728574][T26200] syzkaller0: entered promiscuous mode [ 787.743403][T26200] syzkaller0: entered allmulticast mode [ 787.761032][T26197] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 787.809133][T26197] tipc: Resetting bearer [ 787.832960][T26195] tipc: Resetting bearer [ 787.909200][T26195] tipc: Disabling bearer [ 787.955092][ T3321] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.971722][ T3321] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 40788 - 0 [ 788.006108][ T3321] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 788.489213][T26231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6075'. [ 788.605456][T11131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 788.702976][T26229] tipc: Resetting bearer [ 788.745579][T26235] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 788.764446][T11131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 788.796551][T26239] can: request_module (can-proto-0) failed. [ 789.359276][T26244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6085'. [ 789.422145][T26250] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 789.518731][T26257] netlink: 'syz.2.6086': attribute type 1 has an invalid length. [ 789.561376][T26255] syzkaller0: entered promiscuous mode [ 789.575732][T26255] syzkaller0: entered allmulticast mode [ 789.579115][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6088'. [ 789.624644][T26261] batman_adv: batadv0: Interface deactivated: dummy0 [ 789.656663][T26261] batman_adv: batadv0: Removing interface: dummy0 [ 789.673331][T26261] bond21: (slave dummy0): making interface the new active one [ 789.687140][T26261] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 789.705317][T26263] net_ratelimit: 364 callbacks suppressed [ 789.705336][T26263] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 789.917492][T26273] sctp: [Deprecated]: syz.4.6089 (pid 26273) Use of int in max_burst socket option deprecated. [ 789.917492][T26273] Use struct sctp_assoc_value instead [ 790.024862][T26275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6090'. [ 792.500157][T26264] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.508893][T26264] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.702704][T26264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.746750][T26264] tipc: Resetting bearer [ 792.769299][T11034] lo speed is unknown, defaulting to 1000 [ 792.803436][T11034] syz0: Port: 1 Link DOWN [ 792.848186][ T24] lo speed is unknown, defaulting to 1000 [ 793.033052][T26280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6091'. [ 793.081602][T26287] rdma_op ffff88802ab77a38 conn xmit_rdma 0000000000000000 [ 793.123695][T26293] tipc: Can't bind to reserved service type 0 [ 793.295817][T26295] syzkaller0: entered promiscuous mode [ 793.355881][T26295] syzkaller0: entered allmulticast mode [ 793.387967][T26295] tipc: Resetting bearer [ 793.617938][T26307] tipc: Resetting bearer [ 793.749574][T26318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6098'. [ 794.004180][T26328] netlink: 'syz.4.6099': attribute type 1 has an invalid length. [ 794.058205][T26321] bond16 (unregistering): Released all slaves [ 794.281885][T26341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6102'. [ 794.308240][T26324] veth1_macvtap: left promiscuous mode [ 794.339072][T26324] veth0_macvtap: left promiscuous mode [ 794.359178][T26324] veth0_macvtap: entered promiscuous mode [ 794.370500][T26324] veth1_macvtap: entered promiscuous mode [ 794.390384][T26324] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 794.452335][T26328] 8021q: adding VLAN 0 to HW filter on device bond25 [ 794.483431][T26334] bond25: (slave gretap5): Enslaving as a backup interface with an up link [ 794.494923][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.517216][T26336] bond25 (unregistering): (slave gretap5): Releasing backup interface [ 794.530635][T26336] bond25 (unregistering): Released all slaves [ 794.644578][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.658715][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.680010][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.734626][T26348] syzkaller0: entered promiscuous mode [ 794.747083][T26348] syzkaller0: entered allmulticast mode [ 794.795207][T26357] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6105'. [ 794.808105][T26357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6105'. [ 795.341102][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6110'. [ 795.387359][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6110'. [ 795.501089][T26380] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6110'. [ 795.794308][T26389] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6112'. [ 795.818207][T26391] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6113'. [ 795.829728][T26391] tipc: Resetting bearer [ 795.849654][T26391] syzkaller0: left promiscuous mode [ 795.869757][T26391] syzkaller0: left allmulticast mode [ 795.883343][T26392] netlink: 'syz.3.6112': attribute type 2 has an invalid length. [ 795.919877][T26392] netlink: 'syz.3.6112': attribute type 2 has an invalid length. [ 796.071331][T26396] sctp: [Deprecated]: syz.0.6114 (pid 26396) Use of int in maxseg socket option. [ 796.071331][T26396] Use struct sctp_assoc_value instead [ 796.532331][T26413] syzkaller0: entered promiscuous mode [ 796.551848][T26413] syzkaller0: entered allmulticast mode [ 796.841991][T26422] tipc: Enabling of bearer rejected, already enabled [ 796.866965][T26422] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 796.949211][T26429] netlink: 'syz.2.6120': attribute type 1 has an invalid length. [ 797.050969][T26431] syzkaller0: mtu less than device minimum [ 797.393118][T26451] netlink: 'syz.1.6124': attribute type 13 has an invalid length. [ 797.437516][T26451] netlink: 'syz.1.6124': attribute type 17 has an invalid length. [ 797.655908][T26451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.673414][T26451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.785625][T26451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.827134][T26451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 797.838369][T26451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 797.857439][T26451] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 797.878823][T22762] lo speed is unknown, defaulting to 1000 [ 797.892981][T22762] syz0: Port: 1 Link ACTIVE [ 797.901160][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.908546][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.920503][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.927922][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.069553][T11039] lo speed is unknown, defaulting to 1000 [ 798.105520][T26470] syzkaller0: entered promiscuous mode [ 798.128877][T26470] syzkaller0: entered allmulticast mode [ 799.289515][T26477] tipc: Resetting bearer [ 799.304290][ T3321] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.349659][T26488] __nla_validate_parse: 4 callbacks suppressed [ 799.349678][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6136'. [ 799.404274][ T6110] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.449472][ T818] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 799.514099][ T1114] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.538636][ T1114] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.799302][T26511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6145'. [ 799.816510][T26512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6146'. [ 799.898122][T26515] netlink: 'syz.4.6145': attribute type 10 has an invalid length. [ 800.182829][T26515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.400243][T26528] syzkaller0: entered promiscuous mode [ 800.406218][T26528] syzkaller0: entered allmulticast mode [ 800.650776][T26537] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6151'. [ 803.046638][T26540] tipc: Resetting bearer [ 803.052594][T26540] syzkaller0: left promiscuous mode [ 803.058005][T26540] syzkaller0: left allmulticast mode [ 803.070248][T26540] bridge10: left promiscuous mode [ 803.076597][T26540] bridge10: left allmulticast mode [ 803.252763][T26565] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 803.276530][T26565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6158'. [ 803.314126][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.365342][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6161'. [ 803.382055][T26574] tipc: Resetting bearer [ 803.390561][T26574] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 803.412164][T26574] syzkaller0: mtu less than device minimum [ 803.478087][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'. [ 803.985782][T26545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.074453][T26580] hsr0: left allmulticast mode [ 804.079491][T26580] hsr_slave_0: left allmulticast mode [ 804.104886][T26580] hsr_slave_1: left allmulticast mode [ 804.733355][T26580] team1: left allmulticast mode [ 804.740232][T26580] team2: left allmulticast mode [ 804.773092][T26580] bond11: left promiscuous mode [ 804.798290][T26580] bridge7: left promiscuous mode [ 804.810252][T26580] vlan4: left allmulticast mode [ 804.824583][T26580] bond11: left allmulticast mode [ 804.836284][T26580] bridge7: left allmulticast mode [ 804.850490][T26580] vlan5: left promiscuous mode [ 804.861175][T26580] bond14: left promiscuous mode [ 804.867104][T26580] bridge8: left promiscuous mode [ 804.872575][T26580] vlan5: left allmulticast mode [ 804.878126][T26580] bond14: left allmulticast mode [ 804.883262][T26580] bridge8: left allmulticast mode [ 804.890631][T26580] bond15: left promiscuous mode [ 804.897376][T26580] bridge9: left promiscuous mode [ 804.902819][T26580] ipvlan3: left allmulticast mode [ 804.921771][T26580] ipvlan4: left allmulticast mode [ 804.927314][T26580] bond15: left allmulticast mode [ 804.932555][T26580] bridge9: left allmulticast mode [ 804.939793][T26580] bond18: left promiscuous mode [ 804.945157][T26580] bond18: left allmulticast mode [ 804.962051][T26580] gretap2: left promiscuous mode [ 804.977389][T26580] batman_adv: batadv0: Interface deactivated: gretap3 [ 805.081921][T26580] bond20: left promiscuous mode [ 805.087638][T26580] bridge0: left promiscuous mode [ 805.092964][T26580] bond20: left allmulticast mode [ 805.098820][T26580] bridge0: left allmulticast mode [ 805.194867][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.221706][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.244044][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.276217][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.295714][T26609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6170'. [ 805.316403][T26609] nbd: must specify at least one socket [ 805.572902][T26622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 805.618007][T26622] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.6175'. [ 806.404206][T26640] tipc: Enabling of bearer rejected, already enabled [ 806.436968][T26640] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 806.529823][T26643] syzkaller0: mtu less than device minimum [ 806.633636][T26645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6183'. [ 806.660016][T26645] nbd: must specify at least one socket [ 806.769805][T26654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6184'. [ 806.864875][T26660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6188'. [ 806.896222][T26658] bridge0: port 2(veth0_virt_wifi) entered blocking state [ 806.920143][T26658] bridge0: port 2(veth0_virt_wifi) entered disabled state [ 806.937201][T26658] veth0_virt_wifi: entered allmulticast mode [ 806.965612][T26658] veth0_virt_wifi: entered promiscuous mode [ 807.465225][T26655] syzkaller1: entered promiscuous mode [ 807.474037][T26655] syzkaller1: entered allmulticast mode [ 808.204854][T26701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.225701][T26701] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.256158][T26709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6200'. [ 808.275999][T26709] nbd: must specify at least one socket [ 808.380746][T26701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.399803][T26701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.418341][T26701] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 808.438750][T22762] lo speed is unknown, defaulting to 1000 [ 808.451042][T22762] syz2: Port: 1 Link ACTIVE [ 808.531359][ T3321] bridge0: port 2(veth0_virt_wifi) entered blocking state [ 808.538708][ T3321] bridge0: port 2(veth0_virt_wifi) entered forwarding state [ 808.598611][T26715] syzkaller0: entered promiscuous mode [ 808.615674][T26715] syzkaller0: entered allmulticast mode [ 808.860674][T26726] netlink: 'syz.3.6206': attribute type 1 has an invalid length. [ 808.882007][T26726] netlink: 756 bytes leftover after parsing attributes in process `syz.3.6206'. [ 809.008005][T26726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6206'. [ 809.251396][T26735] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6209'. [ 811.074138][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 812.476381][T26755] veth1: left promiscuous mode [ 812.485121][T26755] erspan0: left promiscuous mode [ 812.739186][T26771] syzkaller0: entered promiscuous mode [ 812.770658][T26771] syzkaller0: entered allmulticast mode [ 812.965144][T26782] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 812.994909][T26782] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 813.026212][T26782] veth0_virt_wifi: entered allmulticast mode [ 813.063766][T26782] veth0_virt_wifi: entered promiscuous mode [ 814.037980][T26818] __nla_validate_parse: 3 callbacks suppressed [ 814.037999][T26818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6226'. [ 814.431035][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6231'. [ 814.864275][T26838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6232'. [ 815.020421][T26838] bond22: entered allmulticast mode [ 815.053227][T26848] tipc: Resetting bearer [ 815.060278][T26848] syzkaller0: left promiscuous mode [ 815.067247][T26848] syzkaller0: left allmulticast mode [ 815.112228][T26846] syzkaller0: entered promiscuous mode [ 815.133682][T26846] syzkaller0: entered allmulticast mode [ 815.165222][T26838] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:0 [ 815.179880][T26838] IPVS: set_ctl: invalid protocol: 76 172.20.20.187:65532 [ 815.205599][T26856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6237'. [ 815.325819][T26852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6234'. [ 815.374416][T26852] netlink: 'syz.4.6234': attribute type 10 has an invalid length. [ 815.502000][T26859] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.514334][T26859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.581033][T26859] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 815.663286][T21586] syz1: Port: 1 Link ACTIVE [ 815.800992][T26861] syzkaller0: entered promiscuous mode [ 815.813522][T26861] syzkaller0: entered allmulticast mode [ 816.208252][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6243'. [ 818.497575][T26896] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 818.633022][T26906] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6245'. [ 818.697112][T26912] syzkaller0: entered promiscuous mode [ 818.708740][T26912] syzkaller0: entered allmulticast mode [ 818.746227][T26914] SET target dimension over the limit! [ 818.757872][T26914] netlink: 'syz.2.6250': attribute type 10 has an invalid length. [ 818.813171][T26914] team0: Device bond0 failed to register rx_handler [ 819.037228][T26925] tc_dump_action: action bad kind [ 819.641911][T26949] syzkaller0: entered promiscuous mode [ 819.650432][T26949] syzkaller0: entered allmulticast mode [ 819.662001][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6258'. [ 819.682114][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'. [ 819.721641][T26952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6260'. [ 819.860123][T26957] syzkaller0: left promiscuous mode [ 819.877146][T26957] syzkaller0: left allmulticast mode [ 819.888412][T26957] tipc: Resetting bearer [ 819.974163][T26964] tipc: Enabling of bearer rejected, already enabled [ 819.989276][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6265'. [ 820.012261][T26965] tipc: Enabling of bearer rejected, already enabled [ 820.030292][T26964] netlink: 'syz.2.6265': attribute type 1 has an invalid length. [ 820.119274][T26971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6266'. [ 820.181456][T26970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6265'. [ 820.190580][T26964] bond22: entered promiscuous mode [ 820.196722][T26964] 8021q: adding VLAN 0 to HW filter on device bond22 [ 820.205841][T26965] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 820.221451][T26979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'. [ 820.230341][T26977] syzkaller0: mtu less than device minimum [ 820.231621][T26979] nbd: must specify at least one socket [ 820.252096][T26970] bond22: entered allmulticast mode [ 820.363491][T26964] bond22: (slave bridge10): making interface the new active one [ 820.380178][T26964] bridge10: entered promiscuous mode [ 820.387395][T26964] bridge10: entered allmulticast mode [ 820.395388][T26964] bond22: (slave bridge10): Enslaving as an active interface with an up link [ 820.830806][T27004] "syz.4.6275" (27004) uses obsolete ecb(arc4) skcipher [ 820.841428][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6276'. [ 821.281914][T27019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6279'. [ 821.298816][T27019] nbd: must specify at least one socket [ 821.316971][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 821.322960][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6280'. [ 823.821314][T27022] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.828763][T27022] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.319923][T27022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.483594][T27022] tipc: Resetting bearer [ 824.498033][T27022] syzkaller0: left promiscuous mode [ 824.503274][T27022] syzkaller0: left allmulticast mode [ 824.533686][T27022] bond22: left allmulticast mode [ 824.540735][T27026] tipc: Enabling of bearer rejected, already enabled [ 824.551377][T27028] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 824.593995][T27032] syzkaller0: mtu less than device minimum [ 824.605099][T21586] lo speed is unknown, defaulting to 1000 [ 824.622617][T21586] syz0: Port: 1 Link DOWN [ 824.727291][T21586] lo speed is unknown, defaulting to 1000 [ 824.786056][T27069] __nla_validate_parse: 1 callbacks suppressed [ 824.786075][T27069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6287'. [ 824.874803][T27063] tipc: Started in network mode [ 824.910529][T27063] tipc: Node identity 7f000001, cluster identity 4711 [ 824.966067][T27063] tipc: Enabled bearer , priority 10 [ 825.196184][T27085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6291'. [ 825.264839][T27088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6292'. [ 825.281570][T27088] nbd: must specify at least one socket [ 825.492963][T27063] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 825.509435][T27063] tipc: Enabled bearer , priority 10 [ 825.951367][T27107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6296'. [ 826.012293][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6297'. [ 826.430193][T27133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6302'. [ 826.701030][T27141] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 826.713435][T27144] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:0 [ 826.733840][T27144] IPVS: set_ctl: invalid protocol: 76 172.20.20.187:65532 [ 826.865923][T27109] bridge0: port 2(veth0_virt_wifi) entered disabled state [ 826.889526][T27109] bridge0: left promiscuous mode [ 826.901961][T27109] bridge0: left allmulticast mode [ 827.543592][T27109] ip6gre2: left allmulticast mode [ 827.549039][T27109] macvtap1: left allmulticast mode [ 827.554885][T27109] macvtap2: left allmulticast mode [ 827.560692][T27109] macvlan2: left promiscuous mode [ 827.566214][T27109] macvlan2: left allmulticast mode [ 827.572082][T27109] gretap1: left promiscuous mode [ 827.581747][T27109] bond14: left promiscuous mode [ 827.587407][T27109] bond14: left allmulticast mode [ 827.592416][T27109] dummy0: left allmulticast mode [ 827.646293][T21586] lo speed is unknown, defaulting to 1000 [ 827.652254][T21586] syz2: Port: 1 Link DOWN [ 827.654880][T27133] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 827.667284][ T24] tipc: Node number set to 2130706433 [ 827.687497][T27131] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 827.704335][T27131] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 827.714427][T27131] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 827.949744][T27172] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.6305'. [ 827.980097][T27172] netlink: 'syz.0.6305': attribute type 1 has an invalid length. [ 828.861851][T27198] netlink: 'syz.0.6316': attribute type 13 has an invalid length. [ 829.761562][T27236] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6325'. [ 829.846625][T27236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6325'. [ 830.135960][T27239] bond25: option arp_all_targets: invalid value (3) [ 830.175530][T27239] bond25 (unregistering): Released all slaves [ 830.449635][T27253] syzkaller0: left promiscuous mode [ 830.464340][T27253] syzkaller0: left allmulticast mode [ 830.850845][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6336'. [ 830.895411][T27267] netlink: 'syz.3.6337': attribute type 1 has an invalid length. [ 830.969558][T27271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6338'. [ 831.037412][T27264] bond22: left promiscuous mode [ 831.042650][T27264] bridge10: left promiscuous mode [ 831.048466][T27264] bond22: left allmulticast mode [ 831.056907][T27264] bridge10: left allmulticast mode [ 831.127986][T27273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6337'. [ 831.190217][T27269] veth23: entered allmulticast mode [ 831.218911][T27269] bond20: (slave veth23): Enslaving as an active interface with a down link [ 831.277198][T27267] bond14: (slave veth0_to_bond): Releasing active interface [ 831.293557][T27267] bond20: (slave veth0_to_bond): making interface the new active one [ 831.303740][T27267] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 831.326360][T27273] 8021q: adding VLAN 0 to HW filter on device bond20 [ 831.947866][T27300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6346'. [ 832.222792][T27308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6350'. [ 832.293152][T27311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6349'. [ 834.454900][T27321] syzkaller0: entered promiscuous mode [ 834.472954][T27321] syzkaller0: entered allmulticast mode [ 834.497403][T27321] tipc: Resetting bearer [ 834.524662][T27322] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 834.574998][T27324] syzkaller0: mtu less than device minimum [ 835.088053][T27356] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 835.222527][T27347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.392367][T27347] 8021q: adding VLAN 0 to HW filter on device €Â [ 835.416722][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6364'. [ 835.431794][T27347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 835.479936][T27347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 835.511225][T27347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 835.539878][T27347] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 835.654475][ T13] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.686199][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.706953][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.727874][T27380] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6365'. [ 835.744763][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.012275][T27388] syzkaller0: entered promiscuous mode [ 836.041832][T27388] syzkaller0: entered allmulticast mode [ 836.558452][T27404] syzkaller0: entered promiscuous mode [ 836.569824][T27404] syzkaller0: entered allmulticast mode [ 836.896661][T27410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6386'. [ 837.045403][T27412] netlink: 'syz.3.6376': attribute type 13 has an invalid length. [ 837.304667][T27419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6379'. [ 837.347184][T27419] vlan0: entered promiscuous mode [ 837.373079][T27424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6378'. [ 837.376685][T27419] bond17: entered promiscuous mode [ 837.438028][T27419] batadv2: entered promiscuous mode [ 837.480937][T27428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6380'. [ 837.534246][ T818] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.576491][ T818] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.624143][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.642028][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.720030][T27432] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 837.820581][T27442] tipc: New replicast peer: 255.255.255.255 [ 837.836551][T27442] tipc: Enabled bearer , priority 10 [ 837.860366][T27432] netlink: 'syz.4.6381': attribute type 10 has an invalid length. [ 837.869204][T27444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6385'. [ 837.887203][T27444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6385'. [ 838.209739][T27459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6392'. [ 838.269263][T27459] xt_l2tp: invalid flags combination: 8 [ 838.287635][T27459] netlink: 'syz.0.6392': attribute type 1 has an invalid length. [ 838.440567][T27466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6393'. [ 838.628796][T27479] bond23 (unregistering): Released all slaves [ 838.798886][T27483] tipc: Enabled bearer , priority 0 [ 838.831580][T27483] syzkaller0: entered promiscuous mode [ 838.850675][T27483] syzkaller0: entered allmulticast mode [ 838.873306][T27483] openvswitch: netlink: Flow actions attr not present in new flow. [ 838.963469][T27491] syzkaller0: left promiscuous mode [ 838.984696][T27491] syzkaller0: left allmulticast mode [ 839.008974][T27491] tipc: Resetting bearer [ 839.192586][T27497] tipc: Resetting bearer [ 839.718483][T27482] tipc: Resetting bearer [ 839.810065][T27482] tipc: Disabling bearer [ 840.843381][T27533] tipc: Resetting bearer [ 840.858885][T27533] syzkaller0: left promiscuous mode [ 840.864420][T27533] syzkaller0: left allmulticast mode [ 840.870501][T27533] vlan0: left promiscuous mode [ 840.881734][T27533] bond17: left promiscuous mode [ 840.888030][T27533] batadv2: left promiscuous mode [ 840.901064][T27533] veth23: left allmulticast mode [ 840.949632][T11033] syz1: Port: 1 Link DOWN [ 841.081335][T27546] syzkaller0: entered promiscuous mode [ 841.087654][T27546] syzkaller0: entered allmulticast mode [ 843.862849][T27568] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 843.864568][ T1114] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.875234][T27568] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 843.892125][T27568] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 843.903787][ T1114] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.926315][ T1114] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.958253][ T1114] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.109029][T27598] __nla_validate_parse: 7 callbacks suppressed [ 844.109049][T27598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6422'. [ 844.250793][T27611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6427'. [ 844.443519][T27624] tipc: Enabling of bearer rejected, already enabled [ 844.465972][T27624] syzkaller0: entered promiscuous mode [ 844.489712][T27624] syzkaller0: entered allmulticast mode [ 844.527362][T27624] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 844.558801][T27630] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6432'. [ 844.648203][T27624] syzkaller0: mtu less than device minimum [ 846.038825][T27667] syzkaller0: entered promiscuous mode [ 846.070666][T27667] syzkaller0: entered allmulticast mode [ 846.332885][T27681] tipc: Enabled bearer , priority 0 [ 846.364906][T27681] syzkaller0: entered promiscuous mode [ 846.388508][T27681] syzkaller0: entered allmulticast mode [ 846.426650][T27683] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 846.501490][T27681] tipc: Resetting bearer [ 846.532000][T27685] tipc: Enabling of bearer rejected, already enabled [ 846.554663][T27688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6445'. [ 846.561884][T27680] tipc: Resetting bearer [ 846.645722][T27680] tipc: Disabling bearer [ 846.678045][T27685] syzkaller0: entered promiscuous mode [ 846.701483][T27685] syzkaller0: entered allmulticast mode [ 846.762406][T27688] syzkaller0: entered promiscuous mode [ 846.782384][T27688] syzkaller0: entered allmulticast mode [ 847.169285][T27723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6448'. [ 847.814754][T27736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6453'. [ 847.908422][T27740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6454'. [ 848.805843][T27736] bridge1: left promiscuous mode [ 848.814039][T27736] bridge1: left allmulticast mode [ 848.819915][T27736] bond3: left promiscuous mode [ 848.827097][T27736] geneve2: left promiscuous mode [ 848.835345][T27736] geneve2: left allmulticast mode [ 848.844458][T27736] gretap1: left allmulticast mode [ 848.856652][T27736] tipc: Resetting bearer [ 848.881755][T27736] veth15: left allmulticast mode [ 848.887795][T27736] bridge5: left promiscuous mode [ 848.893138][T27736] bridge6: left promiscuous mode [ 848.902439][T27736] bond17: left promiscuous mode [ 848.907647][T27736] dummy0: left promiscuous mode [ 848.913416][T27736] veth17: left allmulticast mode [ 848.924337][T27736] bond19: left promiscuous mode [ 848.929628][T27736] syz_tun: left promiscuous mode [ 848.935183][T27736] bond19: left allmulticast mode [ 848.940238][T27736] syz_tun: left allmulticast mode [ 848.946208][T27736] ip6gre4: left promiscuous mode [ 848.951266][T27736] ip6gre4: left allmulticast mode [ 848.956898][T27736] veth19: left allmulticast mode [ 848.963048][T27736] veth21: left allmulticast mode [ 848.970626][T27736] xfrm1: left allmulticast mode [ 848.982319][T27745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6454'. [ 849.067085][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.086477][ T13] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.107288][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.137113][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.177895][T27758] tipc: Enabling of bearer rejected, already enabled [ 849.209229][T27758] syzkaller0: entered promiscuous mode [ 849.235617][T27758] syzkaller0: entered allmulticast mode [ 849.255497][T27758] tipc: Resetting bearer [ 849.284356][T27758] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 849.358988][T27758] syzkaller0: mtu less than device minimum [ 849.499873][T27773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6463'. [ 849.535373][T27778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6466'. [ 849.578149][T27778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6466'. [ 849.604126][ T3321] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.628928][ T3321] netdevsim netdevsim4 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.658002][ T3321] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.686142][ T3321] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.750756][T27784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.858042][T27786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6468'. [ 849.984980][T27783] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6467'. [ 850.005244][T27783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6467'. [ 850.492701][T27806] tipc: Enabling of bearer rejected, already enabled [ 850.550592][T27806] syzkaller0: mtu less than device minimum [ 851.040719][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6484'. [ 851.090039][T27830] tipc: Resetting bearer [ 851.110887][T27830] syzkaller0: left promiscuous mode [ 851.126903][T27830] syzkaller0: left allmulticast mode [ 852.043098][T27850] tipc: Enabling of bearer rejected, already enabled [ 852.107035][T27850] syzkaller0: mtu less than device minimum [ 852.341044][T27861] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 852.797683][T27886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6509'. [ 853.118241][T27887] syzkaller0: entered promiscuous mode [ 853.127615][T27887] syzkaller0: entered allmulticast mode [ 853.324121][T27901] netlink: 'syz.2.6511': attribute type 1 has an invalid length. [ 853.535343][T27901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6511'. [ 853.548538][T27905] veth1: entered allmulticast mode [ 853.580474][T27905] bond23: (slave veth1): Enslaving as an active interface with a down link [ 853.631759][T27911] bond23: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 853.675892][T27901] 8021q: adding VLAN 0 to HW filter on device bond23 [ 853.698973][T27915] tipc: Enabled bearer , priority 0 [ 853.873184][T27909] syzkaller0: entered promiscuous mode [ 853.894303][T27909] syzkaller0: entered allmulticast mode [ 853.904958][T27909] tipc: Resetting bearer [ 853.953518][T27908] tipc: Resetting bearer [ 854.117906][T27927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6519'. [ 854.693782][T27934] netlink: 34 bytes leftover after parsing attributes in process `syz.1.6521'. [ 856.722714][T27908] tipc: Disabling bearer [ 856.733190][T27930] tipc: Resetting bearer [ 856.739794][T27930] syzkaller0: left promiscuous mode [ 856.745273][T27930] syzkaller0: left allmulticast mode [ 856.785158][ T818] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.826346][ T818] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.846259][ T818] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.855581][ T818] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.126835][T27952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6528'. [ 857.152715][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6528'. [ 857.195156][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6531'. [ 857.231433][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6531'. [ 857.407426][T27967] netlink: 'syz.4.6533': attribute type 1 has an invalid length. [ 857.428898][T27967] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6533'. [ 857.459967][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6533'. [ 857.762164][T27981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6536'. [ 857.784834][T27980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.001010][T27985] nbd4: detected capacity change from 0 to 63 [ 858.036137][T27987] block nbd4: NBD_DISCONNECT [ 858.069176][T27987] block nbd4: Disconnected due to user request. [ 858.085027][T27987] block nbd4: shutting down sockets [ 858.109356][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.119188][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 858.129721][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.139359][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 858.149517][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.159149][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 858.167576][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.177256][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 858.198377][ T1652] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.209110][ T1652] Buffer I/O error on dev nbd4, logical block 0, async page read [ 858.217354][ T1652] Buffer I/O error on dev nbd4, logical block 1, async page read [ 858.225735][ T1652] Buffer I/O error on dev nbd4, logical block 2, async page read [ 858.234484][ T1652] Buffer I/O error on dev nbd4, logical block 3, async page read [ 858.247414][ T1652] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.257267][ T1652] Buffer I/O error on dev nbd4, logical block 0, async page read [ 858.266699][ T1652] Buffer I/O error on dev nbd4, logical block 1, async page read [ 858.267025][T27991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6539'. [ 858.286018][ T2269] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.295916][ T2269] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.307406][ T2269] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.319077][ T2269] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.329285][T22725] ldm_validate_partition_table(): Disk read failed. [ 858.334870][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6539'. [ 858.349264][T22725] Dev nbd4: unable to read RDB block 0 [ 858.356841][T22725] nbd4: unable to read partition table [ 858.373662][T22725] ldm_validate_partition_table(): Disk read failed. [ 858.381748][T22725] Dev nbd4: unable to read RDB block 0 [ 858.388866][T22725] nbd4: unable to read partition table [ 858.532596][T27999] tipc: Enabling of bearer rejected, already enabled [ 858.556420][T27999] syzkaller0: mtu less than device minimum [ 858.922279][T28018] batadv0: entered promiscuous mode [ 858.940568][T28018] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 859.044646][T28025] netlink: 'syz.4.6552': attribute type 10 has an invalid length. [ 859.074425][T28025] syz_tun: entered promiscuous mode [ 859.093685][T28025] bond19: (slave syz_tun): Releasing active interface [ 859.257429][T28037] tipc: Enabled bearer , priority 0 [ 859.268593][T28037] syzkaller0: entered promiscuous mode [ 859.275463][T28037] syzkaller0: entered allmulticast mode [ 859.284651][T28037] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 859.320299][T28037] tipc: Resetting bearer [ 859.340251][T28036] tipc: Resetting bearer [ 859.370102][T28036] tipc: Disabling bearer [ 859.483426][T28047] syz_tun: left promiscuous mode [ 859.857792][T28059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.893586][T28059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.006950][T28063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.510082][T28077] __nla_validate_parse: 4 callbacks suppressed [ 860.510101][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6572'. [ 860.537962][T28077] tipc: Resetting bearer [ 860.547810][T28077] syzkaller0: left promiscuous mode [ 860.553287][T28077] syzkaller0: left allmulticast mode [ 860.570843][T28081] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6571'. [ 860.604045][T28081] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6571'. [ 860.643764][T28081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6571'. [ 861.306059][T28105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6579'. [ 861.340888][T28105] [ 861.343290][T28105] ====================================================== [ 861.350337][T28105] WARNING: possible circular locking dependency detected [ 861.357383][T28105] syzkaller #0 Not tainted [ 861.361820][T28105] ------------------------------------------------------ [ 861.368881][T28105] syz.0.6579/28105 is trying to acquire lock: [ 861.374964][T28105] ffff888047a51398 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 861.383867][T28105] [ 861.383867][T28105] but task is already holding lock: [ 861.391265][T28105] ffff88802a05bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 861.400683][T28105] [ 861.400683][T28105] which lock already depends on the new lock. [ 861.400683][T28105] [ 861.411092][T28105] [ 861.411092][T28105] the existing dependency chain (in reverse order) is: [ 861.420131][T28105] [ 861.420131][T28105] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 861.427978][T28105] __mutex_lock+0x19d/0x1550 [ 861.433114][T28105] elevator_change+0x1af/0x480 [ 861.438415][T28105] elevator_set_none+0xb5/0x140 [ 861.443805][T28105] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 861.450149][T28105] nbd_start_device+0x189/0xb30 [ 861.455550][T28105] nbd_genl_connect+0x1597/0x1c10 [ 861.461110][T28105] genl_family_rcv_msg_doit+0x233/0x340 [ 861.467188][T28105] genl_rcv_msg+0x614/0x7a0 [ 861.472222][T28105] netlink_rcv_skb+0x226/0x4a0 [ 861.477520][T28105] genl_rcv+0x28/0x40 [ 861.482031][T28105] netlink_unicast+0x7bb/0x940 [ 861.487327][T28105] netlink_sendmsg+0x813/0xb40 [ 861.492639][T28105] sock_sendmsg_nosec+0x13a/0x180 [ 861.498209][T28105] ____sys_sendmsg+0x54e/0x850 [ 861.503516][T28105] ___sys_sendmsg+0x2a5/0x360 [ 861.508732][T28105] __x64_sys_sendmsg+0x1b1/0x290 [ 861.514216][T28105] do_syscall_64+0x174/0x580 [ 861.519353][T28105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.525784][T28105] [ 861.525784][T28105] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 861.534410][T28105] blk_alloc_queue+0x544/0x690 [ 861.539724][T28105] __blk_mq_alloc_disk+0x194/0x390 [ 861.545367][T28105] nbd_dev_add+0x494/0xb60 [ 861.550323][T28105] nbd_init+0x15f/0x1e0 [ 861.555012][T28105] do_one_initcall+0x250/0x870 [ 861.560320][T28105] do_initcall_level+0x10a/0x1a0 [ 861.565806][T28105] do_initcalls+0x59/0xa0 [ 861.570676][T28105] kernel_init_freeable+0x29d/0x3e0 [ 861.576414][T28105] kernel_init+0x1d/0x1d0 [ 861.581323][T28105] ret_from_fork+0x514/0xb70 [ 861.586450][T28105] ret_from_fork_asm+0x1a/0x30 [ 861.591751][T28105] [ 861.591751][T28105] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 861.598998][T28105] fs_reclaim_acquire+0x71/0x100 [ 861.604476][T28105] __kmalloc_cache_node_noprof+0x66/0x630 [ 861.610725][T28105] create_worker+0x112/0x7b0 [ 861.615849][T28105] workqueue_prepare_cpu+0xe4/0x170 [ 861.621587][T28105] cpuhp_invoke_callback+0x434/0x810 [ 861.627411][T28105] _cpu_up+0x2ce/0x5b0 [ 861.632015][T28105] cpu_up+0x1d2/0x220 [ 861.636537][T28105] cpuhp_bringup_mask+0xb2/0x1a0 [ 861.642012][T28105] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 861.648347][T28105] bringup_nonboot_cpus+0x17/0x30 [ 861.653899][T28105] smp_init+0x32/0x110 [ 861.658504][T28105] kernel_init_freeable+0x27f/0x3e0 [ 861.664240][T28105] kernel_init+0x1d/0x1d0 [ 861.669102][T28105] ret_from_fork+0x514/0xb70 [ 861.674234][T28105] ret_from_fork_asm+0x1a/0x30 [ 861.679523][T28105] [ 861.679523][T28105] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 861.687273][T28105] cpus_read_lock+0x42/0x160 [ 861.692398][T28105] static_key_slow_inc+0x12/0x30 [ 861.697885][T28105] nbd_genl_reconfigure+0x1301/0x1e80 [ 861.703794][T28105] genl_family_rcv_msg_doit+0x233/0x340 [ 861.709882][T28105] genl_rcv_msg+0x614/0x7a0 [ 861.714920][T28105] netlink_rcv_skb+0x226/0x4a0 [ 861.720226][T28105] genl_rcv+0x28/0x40 [ 861.724734][T28105] netlink_unicast+0x7bb/0x940 [ 861.730032][T28105] netlink_sendmsg+0x813/0xb40 [ 861.735384][T28105] sock_sendmsg_nosec+0x13a/0x180 [ 861.740964][T28105] ____sys_sendmsg+0x54e/0x850 [ 861.746269][T28105] ___sys_sendmsg+0x2a5/0x360 [ 861.751477][T28105] __x64_sys_sendmsg+0x1b1/0x290 [ 861.756941][T28105] do_syscall_64+0x174/0x580 [ 861.762070][T28105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.768511][T28105] [ 861.768511][T28105] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 861.776193][T28105] __mutex_lock+0x19d/0x1550 [ 861.781330][T28105] nbd_queue_rq+0x373/0x1150 [ 861.786460][T28105] blk_mq_dispatch_rq_list+0x499/0x1990 [ 861.792549][T28105] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 861.799422][T28105] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 861.805950][T28105] blk_mq_run_work_fn+0x16c/0x300 [ 861.811517][T28105] process_scheduled_works+0xa8e/0x14e0 [ 861.817625][T28105] worker_thread+0xa47/0xfb0 [ 861.822759][T28105] kthread+0x388/0x470 [ 861.827404][T28105] ret_from_fork+0x514/0xb70 [ 861.832537][T28105] ret_from_fork_asm+0x1a/0x30 [ 861.837864][T28105] [ 861.837864][T28105] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 861.845098][T28105] __mutex_lock+0x19d/0x1550 [ 861.850231][T28105] nbd_queue_rq+0xc1/0x1150 [ 861.855272][T28105] blk_mq_dispatch_rq_list+0x499/0x1990 [ 861.861356][T28105] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 861.868235][T28105] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 861.874780][T28105] blk_mq_run_work_fn+0x16c/0x300 [ 861.880348][T28105] process_scheduled_works+0xa8e/0x14e0 [ 861.886446][T28105] worker_thread+0xa47/0xfb0 [ 861.891573][T28105] kthread+0x388/0x470 [ 861.896194][T28105] ret_from_fork+0x514/0xb70 [ 861.901327][T28105] ret_from_fork_asm+0x1a/0x30 [ 861.906634][T28105] [ 861.906634][T28105] -> #0 (set->srcu){.+.+}-{0:0}: [ 861.913794][T28105] __lock_acquire+0x1520/0x2cf0 [ 861.919187][T28105] lock_sync+0x9d/0x120 [ 861.923885][T28105] __synchronize_srcu+0xc9/0x2f0 [ 861.929369][T28105] elevator_switch+0x1e8/0x7b0 [ 861.934673][T28105] elevator_change+0x2fa/0x480 [ 861.939987][T28105] elevator_set_default+0x375/0x440 [ 861.945749][T28105] blk_register_queue+0x3f3/0x4e0 [ 861.951296][T28105] __add_disk+0x6cb/0xe30 [ 861.956153][T28105] add_disk_fwnode+0x100/0x3a0 [ 861.961443][T28105] nbd_dev_add+0x733/0xb60 [ 861.966411][T28105] nbd_genl_connect+0x992/0x1c10 [ 861.971874][T28105] genl_family_rcv_msg_doit+0x233/0x340 [ 861.977952][T28105] genl_rcv_msg+0x614/0x7a0 [ 861.982988][T28105] netlink_rcv_skb+0x226/0x4a0 [ 861.988286][T28105] genl_rcv+0x28/0x40 [ 861.992791][T28105] netlink_unicast+0x7bb/0x940 [ 861.998082][T28105] netlink_sendmsg+0x813/0xb40 [ 862.003464][T28105] sock_sendmsg_nosec+0x13a/0x180 [ 862.009027][T28105] ____sys_sendmsg+0x54e/0x850 [ 862.014330][T28105] ___sys_sendmsg+0x2a5/0x360 [ 862.019542][T28105] __x64_sys_sendmsg+0x1b1/0x290 [ 862.025023][T28105] do_syscall_64+0x174/0x580 [ 862.030159][T28105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.036592][T28105] [ 862.036592][T28105] other info that might help us debug this: [ 862.036592][T28105] [ 862.046845][T28105] Chain exists of: [ 862.046845][T28105] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 862.046845][T28105] [ 862.060513][T28105] Possible unsafe locking scenario: [ 862.060513][T28105] [ 862.067975][T28105] CPU0 CPU1 [ 862.073345][T28105] ---- ---- [ 862.078739][T28105] lock(&q->elevator_lock); [ 862.083351][T28105] lock(&q->q_usage_counter(io)#50); [ 862.091269][T28105] lock(&q->elevator_lock); [ 862.098399][T28105] sync(set->srcu); [ 862.102305][T28105] [ 862.102305][T28105] *** DEADLOCK *** [ 862.102305][T28105] [ 862.110471][T28105] 6 locks held by syz.0.6579/28105: [ 862.115674][T28105] #0: ffffffff9009ec28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 862.123882][T28105] #1: ffffffff9009ea60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 862.132863][T28105] #2: ffff8880664ea1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 862.143247][T28105] #3: ffff88802a05bdf0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 862.153118][T28105] #4: ffff88802a05b878 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 862.164035][T28105] #5: ffff88802a05bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 862.173929][T28105] [ 862.173929][T28105] stack backtrace: [ 862.179839][T28105] CPU: 0 UID: 0 PID: 28105 Comm: syz.0.6579 Not tainted syzkaller #0 PREEMPT(full) [ 862.179861][T28105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.179872][T28105] Call Trace: [ 862.179881][T28105] [ 862.179890][T28105] dump_stack_lvl+0xe8/0x150 [ 862.179919][T28105] print_circular_bug+0x2e1/0x300 [ 862.179940][T28105] check_noncircular+0x12e/0x150 [ 862.179960][T28105] __lock_acquire+0x1520/0x2cf0 [ 862.179986][T28105] ? check_noncircular+0xda/0x150 [ 862.180006][T28105] ? lockdep_unlock+0x5d/0xd0 [ 862.180028][T28105] ? __lock_acquire+0x13e8/0x2cf0 [ 862.180054][T28105] ? __lock_acquire+0x13e8/0x2cf0 [ 862.180079][T28105] ? __synchronize_srcu+0xb5/0x2f0 [ 862.180103][T28105] lock_sync+0x9d/0x120 [ 862.180139][T28105] ? __synchronize_srcu+0xb5/0x2f0 [ 862.180165][T28105] __synchronize_srcu+0xc9/0x2f0 [ 862.180190][T28105] ? __pfx___synchronize_srcu+0x10/0x10 [ 862.180213][T28105] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.180237][T28105] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 862.180259][T28105] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 862.180282][T28105] ? synchronize_srcu+0x20a/0x260 [ 862.180307][T28105] elevator_switch+0x1e8/0x7b0 [ 862.180331][T28105] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 862.180350][T28105] elevator_change+0x2fa/0x480 [ 862.180374][T28105] ? do_raw_spin_unlock+0xf5/0x210 [ 862.180395][T28105] elevator_set_default+0x375/0x440 [ 862.180420][T28105] ? __pfx_elevator_set_default+0x10/0x10 [ 862.180449][T28105] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 862.180473][T28105] ? blk_crypto_sysfs_register+0x11c/0x170 [ 862.180499][T28105] blk_register_queue+0x3f3/0x4e0 [ 862.180518][T28105] __add_disk+0x6cb/0xe30 [ 862.180552][T28105] add_disk_fwnode+0x100/0x3a0 [ 862.180572][T28105] nbd_dev_add+0x733/0xb60 [ 862.180590][T28105] ? __pfx_nbd_dev_add+0x10/0x10 [ 862.180615][T28105] ? bpf_lsm_capable+0x9/0x20 [ 862.180636][T28105] ? security_capable+0x7e/0x2c0 [ 862.180652][T28105] ? radix_tree_lookup+0x25c/0x290 [ 862.180674][T28105] nbd_genl_connect+0x992/0x1c10 [ 862.180693][T28105] ? __pfx_nbd_genl_connect+0x10/0x10 [ 862.180709][T28105] ? rcu_is_watching+0x15/0xb0 [ 862.180724][T28105] ? trace_kmalloc+0x2a/0xf0 [ 862.180745][T28105] ? __kmalloc_noprof+0x396/0x720 [ 862.180767][T28105] ? __nla_parse+0x40/0x60 [ 862.180791][T28105] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 862.180808][T28105] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 862.180834][T28105] genl_family_rcv_msg_doit+0x233/0x340 [ 862.180853][T28105] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 862.180873][T28105] ? __lock_acquire+0x683/0x2cf0 [ 862.180899][T28105] genl_rcv_msg+0x614/0x7a0 [ 862.180916][T28105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 862.180930][T28105] ? __pfx_nbd_genl_connect+0x10/0x10 [ 862.180951][T28105] netlink_rcv_skb+0x226/0x4a0 [ 862.180974][T28105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 862.180989][T28105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 862.181015][T28105] ? down_read+0x2be/0x330 [ 862.181031][T28105] genl_rcv+0x28/0x40 [ 862.181043][T28105] netlink_unicast+0x7bb/0x940 [ 862.181066][T28105] netlink_sendmsg+0x813/0xb40 [ 862.181092][T28105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.181133][T28105] ? aa_sock_msg_perm+0xf1/0x1b0 [ 862.181153][T28105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.181175][T28105] sock_sendmsg_nosec+0x13a/0x180 [ 862.181204][T28105] ____sys_sendmsg+0x54e/0x850 [ 862.181228][T28105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.181253][T28105] ? import_iovec+0x73/0xa0 [ 862.181269][T28105] ___sys_sendmsg+0x2a5/0x360 [ 862.181290][T28105] ? __lock_acquire+0x683/0x2cf0 [ 862.181316][T28105] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.181340][T28105] ? futex_wait+0x2a2/0x390 [ 862.181373][T28105] ? __fget_files+0x2a/0x420 [ 862.181396][T28105] ? __fget_files+0x3a2/0x420 [ 862.181423][T28105] __x64_sys_sendmsg+0x1b1/0x290 [ 862.181446][T28105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.181476][T28105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.181494][T28105] do_syscall_64+0x174/0x580 [ 862.181518][T28105] ? trace_irq_disable+0x3b/0x140 [ 862.181540][T28105] ? clear_bhb_loop+0x40/0x90 [ 862.181559][T28105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.181576][T28105] RIP: 0033:0x7f4c46f9e019 [ 862.181592][T28105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.181607][T28105] RSP: 002b:00007f4c47e60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.181625][T28105] RAX: ffffffffffffffda RBX: 00007f4c47225fa0 RCX: 00007f4c46f9e019 [ 862.181639][T28105] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 862.181649][T28105] RBP: 00007f4c4703500c R08: 0000000000000000 R09: 0000000000000000 [ 862.181660][T28105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.181671][T28105] R13: 00007f4c47226038 R14: 00007f4c47225fa0 R15: 00007fff1bea2ca8 [ 862.181691][T28105] [ 862.871389][T22725] udevd[22725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 862.886179][T22517] udevd[22517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory