last executing test programs: 3.512044821s ago: executing program 0 (id=2711): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}]}]}, 0x54}}, 0xc0d0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept$netrom(r2, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 1.787276555s ago: executing program 0 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x800) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x30000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg1\x00', 0x8000}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x2400, 0x4) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xcf53, 0x8, 0x5}, &(0x7f0000000280)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x51, "9a2bf6b6c1f182baf7edc3c6316f425f3ac24ba5dcfe6ddeb05301785a82a5fe877a85c459966e506fb2c9842d1f159678abf83679a812598e3e5e1bdd6ac75cd6b9b483881d8e6a46439c27389f4576f5"}, &(0x7f0000000340)=0x59) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4814) (async) socket$rds(0x15, 0x5, 0x0) 1.670217665s ago: executing program 1 (id=2718): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000040)=[{r0, 0x104}, {r3, 0x8408}, {r0, 0x12}, {r0, 0x200c}, {r0, 0x8340}, {r0, 0x8}], 0x6, 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x80) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f000000c300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000015aaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000015aaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @empty, 0x4}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @empty, 0x4}]}, &(0x7f0000000080)=0x10) 1.623978856s ago: executing program 0 (id=2719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x34, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x34, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}}, 0x0) (async) 1.572094687s ago: executing program 2 (id=2720): socket(0x2a, 0x2, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000a3920000730199000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000040000000000000000000782be6d4bccab100000045f3e6411ae10c618dc728fc36f04292c64bcc7d06fbe8b0a655aa8f8f5546f463b9018cef6b8e09ed3aa511a7afe761b56a85c19460570812d6e819a23378cb7b23b033e8c4cd7d1b297408b2", @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.431770402s ago: executing program 0 (id=2724): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) read(r1, &(0x7f00000000c0)=""/153, 0x99) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20080000) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000040)="9b2d2d3b3d70c38e10e74d24810f95487fb8e476e62edfb22bed9aa566330466f17fc004a3b3a41324337ab663b61e6f872c5aea035859d84ef21eb33f4664f51cf3207616462f71b48f3a55ea41fec22b4657662d53bba2140e8fe74594e53d4e264a6a58a3660622478e5eb4d4c9beefd51b8330c1c3840805749d06259d6ef7b4a34f6d6667ead850ae3b285898068040a6b9fe5f4c791c77a4892657f0e6481d2d1585d7b1ba957dff6f4d2ce0998a5812c21c46e43e5eaefa32", 0xbc) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000280), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0xffffffff000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="08ac0f000dac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r10, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/48, 0x30}, 0xfffffffe}], 0x1, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08dc540d000800000000001c00020001000000"], 0x2c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022cbd7040fedbdf25010000000800020000000000080008000200000008000220000000d84a3e816111774be32420cb0f0014000b00fe8000010000000000000000000000bb11a222fc34e7"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x2000c040) openat$cgroup_ro(r1, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 1.380251101s ago: executing program 4 (id=2725): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff5}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7000007, 0x12, r1, 0x4a1fb000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) 1.380007523s ago: executing program 2 (id=2726): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x30001, 0x8, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a80)={0x16, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000fc0500000000000006000000791550000000000095"], &(0x7f00000017c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.379817545s ago: executing program 1 (id=2727): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) pipe(0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x403, 0x0, 0x8000004, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5, 0x8ca}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}]}, 0x48}}, 0x0) 1.322469341s ago: executing program 2 (id=2728): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000006c0)={@null, 0x3, 'rose0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0x140, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xf4, 0x2, [@TCA_BASIC_EMATCHES={0x84, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_META={0x54, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x6c, 0x3, [@m_sample={0x68, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) (async) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000140)={0x16}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180500000000000000000000000000e7b6080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "fdae53e2e2310f8d", "e120da5ea92c4c665aa74b40e206fceb16d4b2eb4383b06e07bdb3a4a87b6b52", "5b3972fe", "7290369cd565a690"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "fdae53e2e2310f8d", "e120da5ea92c4c665aa74b40e206fceb16d4b2eb4383b06e07bdb3a4a87b6b52", "5b3972fe", "7290369cd565a690"}, 0x38) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000100000000000000000000003800", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 1.152199609s ago: executing program 1 (id=2730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="40010000", @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2503000000500001801200010069623a766972755f776966693042454f000000380004001400010002004e210a0101000000000000210000200002000a00000600000002ff010000000000000000000000000001b8f3ffff1c000380080003"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a00000001"], 0x184}}, 0x0) 1.151751318s ago: executing program 4 (id=2731): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) (async) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=0x0, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="000000ecff"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) 1.151381085s ago: executing program 3 (id=2732): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r1}, 0x10) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x5, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004055) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 1.117272791s ago: executing program 2 (id=2733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x6a, &(0x7f00000004c0)=""/106, 0x41100, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0), 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000004c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x2000000}, 0x20) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0x5}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x23, 0x2, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="313a010000000000300012800b000100697036746e6c00002000028008000800040000080000030020010000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth0_macvtap\x00', 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.030978576s ago: executing program 4 (id=2734): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg(r4, &(0x7f0000001700)={&(0x7f0000000080)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}, 0x80, 0x0}, 0x4000000) (async) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) unshare(0x22020400) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) epoll_pwait(r5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getae={0x48, 0x1f, 0x10, 0x70bd25, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2, 0x2b}, @in6=@private2, 0x3}, [@etimer_thresh={0x8, 0xc, 0x3}]}, 0x48}}, 0x0) (async) socket(0x2b, 0x800, 0x0) 895.576242ms ago: executing program 1 (id=2735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a00fffe"], 0x174}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) write(r2, &(0x7f0000000280)="240000001e005f0214fffffffffffff8070000001d005200"/36, 0x24) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a00fffe"], 0x174}}, 0x0) (async) socket(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r2, &(0x7f0000000280)="240000001e005f0214fffffffffffff8070000001d005200"/36, 0x24) (async) 844.066378ms ago: executing program 4 (id=2736): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}], 0x1, 0x4044014) shutdown(r0, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1d, &(0x7f0000000100)=""/29, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x112e9, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) listen(r0, 0x2) 830.91893ms ago: executing program 3 (id=2737): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close(0x4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x69e}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="c584a052b2bcd42fc9fcca50bbf98831997256ecd077c1a79fa47ad23929d633ecd56bde44cad954d49afc99f7f334fab4d114cb6abd9ad9a02fe2ce3c852aaf84cb7532f14ae11d0bd3fb11d1375dcfa61ec9d151a5ec6123c29c42f1cd445e6f4053ab65bcbfaa", 0x68}, {&(0x7f0000000440)="2bc15a61c40d6f15665576df397c6f8a07547eb85eeb9efa6b3258d174dd5edd1368ccb50f06cffebb6f8fc3506d9309a628ec86420a505ce2ca723bf14bd7103707bb5d5d8f3e1dd973eb1416cd4300f956961356ab1aff7579cc53e2085126f58a9886914619afe9488a24e980bb7fee60f48ef3bdf4a643b2a86c917a0783633a235c9cc79576d62389453e26501307247a248f42d1763cc07a69935b86bee0363fab5b1518c60cfdece9f3f5676678c9d381c9db16a3de0f463a6690678f3fc0940c547bc9b4a1a67a42b62205a18ce3", 0xd2}, {&(0x7f0000000540)="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", 0xfe}, {&(0x7f0000000140)="f3c9243aae97964415c4452a703293d9f1aae86336a2e72f9ad891156f48ad24", 0x20}], 0x4, &(0x7f0000000640)=[@rthdr_2292={{0xa8, 0x29, 0x39, {0x5c, 0x12, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00', @mcast2, @remote, @private0, @local, @private1, @rand_addr=' \x01\x00', @local, @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts_2292={{0x1c8, 0x29, 0x4, {0x3c, 0x35, '\x00', [@generic={0x1, 0xce, "cb5625c8c3c14a77f234510c3c62d7a8d7c2f8786e81b82bddd945c7aeb1d4ae10b7d973e561bcdd79d7daedab771f29b9a4d4063bf65209b133f2e605918dc6458a011033b88c4088799a656e2577ff8da4291f497dd17e9808f9adc6a5a74d2242a1125d232875f99aaae2b7e89ebc895ed76d7a3a144f030c26cabf5bdd7eb3bbb1f2b1aec15036371dd677b5737dfa80b4a761033bb9d955dfee31f3ff2cab935c9635038e02f42f6d3b579c96caedad7fecbee7581ce9bf4e007464502d6a62cdcafd6eed7b0fd0c0ca5dc5"}, @ra={0x5, 0x2, 0x9}, @generic={0xa7, 0xbe, "ffda912da794526b3b9c2e747ba78cf81e906bf1912cd5a897d7c05eed50f31789b3195ee146267d48b1790a2ebfddc9e29fc927d6c58f8404bcc05fa58416686ef3b9d20af760ed4f2e2a8d26424c251b83f4f2417474aac727109faea7d02efa18b1453b52b9280b09a51be760b8d0a16b9a0af043ee5e9ad98934c40fde7344ac940ba4efe83c3269de8001466b2ec851a267ebf216fc0fdba4ee2238b1eb7a4cccb1551c5e357c97c9898b26185d1a6e0fae4e110ca0ddce6e358c9f"}, @ra, @ra={0x5, 0x2, 0x7}, @pad1, @ra={0x5, 0x2, 0xa}, @jumbo]}}}], 0x288}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x6, @mcast1, 0xffffffff}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000900)="8fdd7e9e3f8b7a0b2a6558198d1254015c8df177e1223f8c58dcfb182c5055fdf192a8f9c58232628f5d0af5a83f130baeadebe8b4a59f28c319be5c1deacf1fe4cd08339b7c95832e551721428e79766c014f665ff15411fdf60a96732fcf896d4d1b8c5313bee5cb6ddc0415c5c5a39728f06699df11c706aadd42e55794de2c9784142400fc97a1ce2caa587d57cd124b2f7036f030b906afa811ccbe85d14b414bec8456041c5d6af55d47b8c5c9f51d03766259415fd878b9ed557bc910e4290ba30671855c5855878649fd7b712caaeb", 0xd3}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000002c0)="64ad4be9d493d19b70f57334f656ae9ad2f6f664b7285ea809cd0dbd7a81f061832d56df168671e457c0", 0x2a}], 0x3, &(0x7f0000000a00)=[@rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0x81, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa9}}, @hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0xc8}}, {{&(0x7f0000000380)={0xa, 0x4e22, 0x2, @local, 0x3}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b00)="3be4af56fc1492a9c68fb65ecdbac40d828282ad5aa3326a3a7b1778824ee108ffb4856457b5cff087e89153a44944392ba3de", 0x33}], 0x1, &(0x7f0000000b80)=[@hopopts_2292={{0x68, 0x29, 0x36, {0x3c, 0x9, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast1}, @generic={0x2, 0x32, "af762add3254259c9f7d5536859c5a3ceabebbeb093dbcaa68ebaa8371cfc9e753be7effcd594b7cea4a63bfba32b5e6428a"}]}}}], 0x68}}], 0x3, 0x4000080) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) (async) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x39000, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c00048028000180080001006e6174001c000280080002400000000a0800034000001f1608000140000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x1, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xcc2}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x15, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000b0b000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000b0b000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) connect$can_bcm(r5, &(0x7f0000000000)={0x1d, r10}, 0x10) 759.967576ms ago: executing program 2 (id=2738): r0 = socket(0x11, 0x2, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="d100000000000180c20000000800450000200000e0000011907800000010000000004e210000000c907861040000"], 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x11d, 0x1, 0x0, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x20008890) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9044080}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x64, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 717.694916ms ago: executing program 4 (id=2739): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket(0x1, 0x5, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x3, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010200000000000000000a0008014c000480480001800b0001007461726765740000380002800800024000000001200003007339f6f1f554afb9fdd6724ec49dfb78c76924070000000024c41a6d0b0001005450524f585900000900020073797a31000000000900010073797a310000000000e0a0fc040c0006400000000000000001140000001100010000000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) epoll_create1(0x80000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r7, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x4004000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000280)=0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000858f2c71d116df8ddc6e8500e0ffffff0000e000c6bd0006695052b5f6b8989dc1b6a67fd12fceedab972712ce5046444b6f0eba06bf5d9c47b847dadcb43bfc6d2374521714492aed31e61c9225059d75913bf0878f5accd0d1e75617ca3a33c91b7d69499a04c566cfe0815216e235d7b3d46ef2f689e121c97553f4ee1297295722bab28a"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, r9}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000380), &(0x7f0000000580)=r11}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaa07aaaaaaaaaaaaaa88486c731b6d00005e7f00000000000000000000000000000006ff02000000000000f6ea03d34402000000000000000137eeef5b8a3f1f3af300154bebba9b8d6fa7d6644a873b658dd64b31d48e227b86233e50815f5a0736ebbc114b8ef91b3554ace0ee48"], 0x0) 604.616298ms ago: executing program 3 (id=2740): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) r2 = socket(0x23, 0x3, 0xfff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000a00000000", 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@RTM_GETMDB={0x18, 0x56, 0x300, 0x70bd2c, 0x25dfdbfb, {0x7, r1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 501.179758ms ago: executing program 1 (id=2741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r2}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000040, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf250300000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r2}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r4, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000040, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001140)) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf250300000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) (async) 300.073641ms ago: executing program 3 (id=2742): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e", 0x23}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r2, r2, 0x3, 0x0, &(0x7f0000000100), 0x9, 0xb, 0x16c0, 0x5508, 0xc336, 0x1, 0xb, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={@any, 0x5, 0x7, 0x0, 0x1ff, 0x7f, "e20f4110a90ed9a88f05807d871a4c2ba72bdc51ae85889d60cb1f70d7273f460f4ab1c196d3446d04f70446a4ec0000000000002914fe7f983559d0ed621e912af8cb94f4798bb7a71c7efe4ab532ea4214bedb31c2e97f524752adbdf2bac48304acc1f1da218fbe2069c0c1ab23cc3f85af9dc7c34e00"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) 298.863847ms ago: executing program 1 (id=2743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 234.304823ms ago: executing program 3 (id=2744): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) (async) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) (async) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r3, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) (async) socket(0x11, 0x3, 0x0) (async) close(0x3) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffff5, 0x4f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0c0004000000002157e5f1454283541cd5be6400ea00180002800a0014aad1f20c5d887b73afe35a000180c20039fa0000a1e6093b631665bc033fc3f8036581c4fb136aa7a96d71dc00"/89], 0x48}}, 0x4040) 230.238996ms ago: executing program 0 (id=2745): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a", 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) 88.122707ms ago: executing program 3 (id=2746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfbf78821a09cb60c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20040c54) 58.415156ms ago: executing program 4 (id=2747): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff078a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100)={0x8}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000080)={0x1008}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x400}) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10], 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8400000010000504000783007b00000000000000", @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e0058"], 0x84}}, 0x20000010) (async) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8400000010000504000783007b00000000000000", @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e0058"], 0x84}}, 0x20000010) socket$inet6(0xa, 0x80001, 0x0) (async) r13 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r13, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r13, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108) sendmsg$nl_route_sched_retired(r12, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xc, 0x6}, {0xfff2, 0x3}, {0xfff1, 0x5}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched_retired(r12, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xc, 0x6}, {0xfff2, 0x3}, {0xfff1, 0x5}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 12.687461ms ago: executing program 2 (id=2748): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5ad}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)='_j', 0x2}], 0x1}, 0x1) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0xfffffffffffffdb8, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb6fb585}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x2040400) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x42, 0x73, &(0x7f0000000100)="4f54e27cf2c9d0e06b0b3dba3daea1c36ef5613c9e965b672502bdd60a1e37bb7b6fc147c48f0bbe98c492057e8a7e67a43eac94235a6eb6cbcd46705ab48a188ad1", &(0x7f0000000180)=""/115, 0xfff, 0x0, 0x91, 0x1000, &(0x7f00000002c0)="f45cd7419438673cf29cb20165ef85452ec2276dea7e0e36092eb7287015eea5c79e7093ae477530b7d31f87dd37261b6846db5cab9992bc7bb281c12a9ba53ea2179f650b1b5d6f0f1f0b8cf5f88cbb8219cd56a24a6fa32a21ac882e2e79e7a6e1a8f71d64cff69722606bba9f1169848912e936cf0d697ae31fff954cf526a301d40d7cb2102fe18af747df1904749e", &(0x7f0000001640)="11f7ed2acb627db0ee1fccf9d4741ef4acce141a83b23a640adf7655fda48fbc93c0b00d5973e19f9fec2b08c4ed62ca280f687d5f3dced2d2932adbf48db437462d78561feb8355be8864fd85f9a5262015f518c7eb9175474ce2cc104014515105daf9b57aef234ca5f61ffd43729a968590cd7f269618cad76f2ccad500ceea0f9aaf932b71b37520905ba8fe99b91324a2b7100c06aed58063beee827cec8db2f8db1f44ce1fa97ae7e88a8fcf5794b8baa4c7800a3a5ec9ca952016111165ae67c39691e7f9806a6806672eb69edac69ed967308cd098090101c315b2bd2468dd5c518186e6b3b4f0b1cdd83ce7eb2b2969aa901c14515bb80ab9397d5df1e6295e480346c33391a08fdfe8f969c0343c1de4f5e1ba9f8d6d252518a94d0869adca388c61de15505a6ba1a909715c9431a488a80820e8e6eab5346288b747eced1dfe1910919112ce0bd961c80427c04d2a5d94440d2b16d6eff15901a63a7220a7adef5600a07c91500bd11ba991caa334f77cede077358c4d614d985516884e61aeeb31d4d2088611f039ca610a89a6f517b92e2f8a7f3fc816246d5b01d8b4ae76a8d199b4530ae12592c12981b00c6691eb111490042f71011461084608eec63f3bec5cd42c5bbff2f858a54acdea5a5f49934ce805b097c98f9ca01de8fca7081e59fde687aec9a033a86004999995307009631ddacf58f7a935e7807de8a51c2c5247aff69a5b22589e88794f56387d538f3bbbbf4d22a8ac3f9bb430d7673f907e10e818741307cd0fc6b1d86045ed98f71b7e26badef4b3933f416afdab88a8a89e6cdd0d8eb608700569581bcea8f661f0aa95876ca9a884d9fc14ea188cda44332df710ab63104eae754e8da359e75460e016d28ff59a8dae6a42d8fca8d91b8ccca23e513ac417c1647e06ae9e7dbd0367fce37b9fa470118e82e0c6e09a0eecb7ef7dc4c2bb4a8e70f7f17c99071e19e596201b223ae4132e5baac2e1810e5dba86242db573aff78dd7d66eedd654b73444592594f3c642b5e47d7e86d1fc086d796058966248b0c5bf9f0db40ecd2e7d49459c4c1c203513fc75b8d9fe90b3de04c359e8c600caa03a22af262766b1117a8cbb71336a0437e112ecca644d0fa624c6b4515e4b1962520a3e98cc611619ea1a3829ba8b342f8e35b1c6747fabcf6ed787b7309a7f6b6bd4a83ca4bcf9fa25e8c6c8336661ec93b663d2eeb994824a256755a212450d3932cf0e6e94e4c09a1c35c30c5d56172219c530bbc669b13a817338fe0cea439be661a5b0f90373b75772b4c27b5fae519c04c7af0e4e163508bddc67a897d2dcad3d5a25a739038dde6f1ec3628400909e9f6cef07be9577e72bed3de376ded190a23ece62859346d4857a4ec9c680dc3884591eaa26bfba55495e5f54d0cb5cda9437b4008788ac42767d04bd4a887a6d15b586a78181882a6b2f0d45a1e61f6306a3eb1221b70e76c46e49cf47d28e0162ea12843bdd6c397fb3cad9b4d1223c72355eb1351456bc8f43eeff68025ffa125df1c9479dc8b4ba6bd21b90cdc8246522cfd79d859fc7ce31ec181bfc5310f1d48eec6cf094800a1f66bcdfb142cb34b7612a7554cf6dce14953ec675e5a172608c7e7dfc34ae2403d3d30f2f7867075e28d6448f6b197526cc3e4d5540476e094d4f65e180460e7b25c8e5b7c92044fb28a0b9e49da2b1656140a5acbdf53a179f59d4311438417f6c71d7d38e34f887c050e7d46706dcc67bec4db8b6ce397b595a2f28d2980f49920f2d45868ad60116211123a336f4edce71e353ac22bb2e46a0b77605710432c7922e417af6071cd39f8d18a1a34ca5132174fd91e14488b249cca8db3b2b381e415d1ea8fcee383ec9b87f3792ce72790c8f984ea0c24332671eaf75af52f28c9ec528a16caf212a1f4791e36500d78c082e8d4281fd63b283b6a248f9af9531b6b9561f0236183b40fee67d50f23e896af3c1c42f96990471d09a1b83be2d5faea0197f24393ec2a39867176dd8de8f07029d64292e7bddd3a6b367f3d0a6c14ba9b82ae98313c647498bca470e42e186b4786d2df232b5bd23040a04f75478a64edede8c03a8ac83196f4d49fc4eddc389faed5364b34d2a012255da3fdbd2652fe89f1873e9745dcee77f444dd2c4f1be7ee18a5286106538472c60135b966643bf01e97de0d680a44554748fc8944c93bee01962f724923404ffcd918a898aff468e332012ea37dc137c61b67901e4c13a562d560de2658873d480f02ec74ad8eb72e2d77643baefcbf1ec2c56b0d6273f96b62235c9aca1cfbb4e950e1d2eef4ef04924e976d33bc4180c67f9657888475881ed499c761d6a1ffc03bc183d3c15fd3664f44a3a862756aac7ac2cc8b0001392812b070941611bd1d8aafa1fd5cbc1c94bfe537a59467a3524bcbfdd48fcc91bbd12003237de0cd46775ffc138f644a2e5545c2a12f271d8198c933e1c347f50ed902729804e1e724dcf22ecf20162f4b18d8a92ba6c3bcb010b1a20bb70300e21c139da3e4f2d8ec0729aaaa9879f25857a26c94ad5e9ddc6749c3b1300b43b011c3aabb1b87e96f4fc396c2021f3d8a023470c669b0adc940c77d642b614c7af796d195fafac8baa48892e2947c52d2e6d2ff4892ca9c86ebf9fab9d840d2d111d17fb30f43df61ef4e9de17a1359dd3f6d456c4437308f3a82f912c803035d2d632437b16004444853ac297314447b92c1355f554fcee6f7cc9a7d68bb6c079975b69e9fbd7a99d534bf2f0526dc2b3ac4b4e9a24c61ba865b329ac184cbf2dfe81091da23f29cb5673783367ff0034f952fe19b52eff13f0e0f282fc25da3be9c52dc52d762f05783b34579c58b88faf34bf9197bbf751dcd6258a562b90708f60314521600c72c357c3d8e55ab321e708836609973cd1a1f94e2216b591583a384acd54dae1323e1aeb1af18db8e4ada0541bff027ae5d1c0c3660e74588cee4d482ebc7649b86772a7bfe2ce88b124d73b01dff4fa5d6f3a47ad0bd217b43fd2673bb58cbd240526e26b9f6e8a0ee89ebb408568cdbeb2417c9cf7ba9894f888095ac41104937c332fd8bbb45047bc0e0f57f878b6bd466afbfded5e9a549c919cc8cad5ed1c37c6a292496d8d36bc524b35dbe704ff4d29723186098ff87c58ec1e56725b2ac594a2779d6271a9a3d1bccd35aea72330cffcc08be8ec49d16f706938b131bc2b2e1c087f328acf86244b551bd83ddc3240ec346b2edae497b97520ac6994a24bfcacf04c20768fc30aba77bf5684c931a09fc0a10018c6221a406172ddfeb1d062314466b99ae5b5654a3c3f2df36dc57d371f99427a490bd721a33a714f4a07beb3c5c90326e5178007b56a877855d2872d18eff0f049eaff168b2e6eb46cf819e3cf4c315892db091d3c25935331c04139e320da6fa748934f73bf1b5cc9f81f629d90d05bbbdb04efa565a1a6100a5376e6ed8263cab5d66dbe038423ff47749343c21b8d0883901ac8729344adbbe26427a0777fab4eb7823f72d106f9e82b41136723dd85cdd21c30915f66045a57c122a8d33448dbe74dd3cd79f32c5df2662d05d2a2195c2665c5662621ae85d305a7be3fab222bf00e472dc575912725313ea12ee2862fe65499e6c812fa5574a9c43d0c4d7410cc275cb6e922db3caad307c0a13511182033f59071f1ef91c3e42e6a40f484abe32a77b36e336ca9f9d5d37852d2297dca68b85f31c22c202c480af05a73b54648c6281576fa3bac965f1272a312d7516d651f226a3f5566463cfa84dd8a93ca25d7711706c5924cab5b2b70d9be1d489daf4e7639012e8abb867012e85d49082432ab1cae590d82b11358b4753488a2f1d74db2fde192398e219f15dacfccdaeaccd0552fb749d49e4e03952b8668490af808a83f90b83b65c838ceffb8d50ed62de14295f2e33789307cd6f91bf057eb3e454b8437399759f0548c9f273eaaf8ef2f9b5343587428654f154c7668747625e92e31c5c2ba9956b74831265ede1c04aa0c42f3d88ff8ec4726afb5f146cc9a5d0b5d0c52aa386a5fefadeb068189896ba7c22e1d1eadcc6460f4107ba8f639464ff14b65ad952e4102523669e2f3eb1522f4d30e28cd1d952a67e937c000c0857f9a3f2cdb4c5701138a6934f192cfd8fd201c0fb8988ba2b31fc33ff91562169e0b748b0f83cbf46eeb23caf56940e9c0c58308ec3d804f7438ce74ca10d99d3394042c94b0c90348a5be1f87b87c06bb666adaac1c5d6ed06d6dabd6f727f263a861778a0d816ede05d2cffc997eb724050988d89d0258092aba94d9fd7c9282e8a6fd37ad6f1dff3ac4d0c7c5a941c96e837eae2b9cb26f19a8aacec5c162c2df01fe3ad94f06c795f7c520f7b698bb342baeedfbadbddb25b6f431fb4c950a72464d30501a951a5af890d894a068d6fe8a6a4510666f3292c6482ce74fef92c870b3f023558aa40c173b6bb63d660bc582728aded4d06fe4d9654f368cd2de34ee2982d1915ba178dcf904e75d776fa1757cd6af5317a3499b825524875f4aee10add39dc6f5e3a8a36f23238c1585d1771d85e55744474015a0945d229f1a82f2a435354771a9e7ee14bd9039ef142dcfb0c2f4c33ba65a7c108decd79e71fabcd020e916e24c5a0137d0ad693ff8283aad23e539f2489c231b6cabe7f4f1253393435e0e15416773c3b80ca89841dcf529af4a05249333c266c19f125c3fab01bc0dd0cab28d3fe683959b9516927a28d59d89dce5314dfd41cf19ff5ed74bed6613b5347cbc93fac4ca5fdc8f2bfd557ed760ccf18e354b4f7c16d9ebec0e3822c43564f20f59d070411c17ea43d620e5dc56736bd61a758bb291a06c98d0873d0ce1951c019643b78253e19814d10d7d216f19b80a576922c69f4568d47cf41fb4400f43c48f4f1d0bdf902f22780c2e5b9f0127eaf4234c665c6adc07d03725b2b32659967da9f89480734493ee901a7152ca72d8931faf157d15b8895359abfc19f6d7c6108f6ea35dc5d5bf8d0a7568ab8bc901109afa4c32c3084a6db44a31efdaa7dd6b661884ac94a8b9752d20d1c4ae824e0fdc3dd392a9db2d45088ad9784d4eca5153491e3da6cdc3aa85aed96a3e9b1ffaeabc7bbd8df8bef3f1b3e31ff7baeb041cf9da4dd02464e0d3c503160e3ea67727d3c147f15f77d1fa8c2c477dcb2c520513142658a35a708ce64d60e8d40bb7049f36027ed9c945d45bbe2c5c3a00cedf958368295ca1c37e7539b99e7041b78a75b2cfe9ec0b5b1f3dce3c04331303e842b667071c675fe739301ab041d58ad77c045acf23f7922cfc52b129a533012f8e03a4c276a18a43c2038683963e6fe3f92e20525279821713ec03ad6ceab58d239772f4855affcf305b50309a206192e4932bbd0fc3cf3bdd122fa16f72a57fbd1ed94848d9c28a3930883321e8f30cfb76a64caf2aac1963561835586a3d2499cd0d81bd09fdf5ca7f9cb4f4a94762e036f6dc17c8807ba697ef4d8af62132bb69e4fc8621f9a115981c113f570e1f89a5c241c24998741724122b4fa5193be0e06adf323b6cfbaad7326c10ffefb8c7b32782984f5c2d9ab617127514f13a993acc181054f21a71e49b118d87fe10afae83c700a88f2a922b6e365b043b7c55d48f5e15e961daf69d9a2d92685f5264589053f32a9f81ab6e950cbf9aa5fb19981b4512f917780852c51c00c0a88de220a4105a4629c74fa499a3842c8127654d10b967238600388205bcb8c354d754c2dcdac9014e1f84706a94f5", 0x0, 0x0, 0xbf9d}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000041d000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) 0s ago: executing program 0 (id=2749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r3, 0x2) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1}, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407fffffffeffe, 0x800000000000102}, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) kernel console output (not intermixed with test programs): miscuous mode [ 168.867842][ T8704] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 168.944259][ T8704] bond2: entered promiscuous mode [ 168.967705][ T8704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.052587][ T8710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.062410][ T8710] bond2: (slave bond3): making interface the new active one [ 169.071092][ T8710] bond3: entered promiscuous mode [ 169.078266][ T8710] bond2: (slave bond3): Enslaving as an active interface with an up link [ 169.198380][ T8716] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.476005][ T8740] netlink: 'syz.2.687': attribute type 4 has an invalid length. [ 169.522595][ T8740] .`: renamed from bond0 [ 169.844434][ T8757] netlink: 'syz.4.692': attribute type 13 has an invalid length. [ 170.198363][ T8778] tipc: Enabled bearer , priority 0 [ 170.207943][ T8778] syzkaller0: entered promiscuous mode [ 170.226580][ T8778] syzkaller0: entered allmulticast mode [ 170.305330][ T8778] tipc: Resetting bearer [ 170.342027][ T8777] tipc: Resetting bearer [ 170.400092][ T8777] tipc: Disabling bearer [ 170.549152][ T8784] lo speed is unknown, defaulting to 1000 [ 170.625440][ T8789] lo speed is unknown, defaulting to 1000 [ 170.669891][ T8795] lo speed is unknown, defaulting to 1000 [ 171.061563][ T8801] syzkaller0: entered promiscuous mode [ 171.067274][ T8801] syzkaller0: entered allmulticast mode [ 171.100443][ T8813] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 171.147389][ T8802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.234074][ T8818] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.258742][ T8818] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 171.303240][ T8821] __nla_validate_parse: 14 callbacks suppressed [ 171.303261][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'. [ 171.381156][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.707'. [ 171.567000][ T8821] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 171.616201][ T8822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.661607][ T8824] macvlan2: entered promiscuous mode [ 171.667664][ T8824] macvlan2: entered allmulticast mode [ 171.674199][ T8824] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 171.900516][ T8802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.489674][ T8829] delete_channel: no stack [ 173.308536][ T8802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.480652][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 173.550486][ T8802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.674006][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 173.751353][ T8871] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 173.768577][ T8871] team0 (unregistering): Port device team_slave_0 removed [ 173.779565][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 173.825122][ T8871] team0 (unregistering): Failed to send options change via netlink (err -105) [ 173.853991][ T8871] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 173.876254][ T8871] team0 (unregistering): Port device team_slave_1 removed [ 174.039943][ T8891] netlink: zone id is out of range [ 174.064660][ T8891] netlink: zone id is out of range [ 174.081056][ T6872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.096629][ T8891] netlink: zone id is out of range [ 174.112069][ T8891] netlink: zone id is out of range [ 174.129438][ T8891] netlink: zone id is out of range [ 174.134747][ T8891] netlink: zone id is out of range [ 174.153531][ T6870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.157703][ T8891] netlink: zone id is out of range [ 174.177764][ T8891] netlink: zone id is out of range [ 174.182949][ T8891] netlink: zone id is out of range [ 174.190762][ T8891] netlink: zone id is out of range [ 174.201910][ T6870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.213007][ T8892] lo speed is unknown, defaulting to 1000 [ 174.316455][ T6872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.514296][ T8910] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 174.582345][ T8904] lo speed is unknown, defaulting to 1000 [ 174.591395][ T8913] netlink: 156 bytes leftover after parsing attributes in process `syz.0.731'. [ 174.638792][ T8910] bond4: entered promiscuous mode [ 174.644398][ T8910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.700319][ T8901] lo speed is unknown, defaulting to 1000 [ 174.775257][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 174.799628][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 175.185342][ T8940] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001 [ 175.590197][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 175.688246][ T8959] hsr0: entered promiscuous mode [ 175.693809][ T8959] macvlan2: entered allmulticast mode [ 175.720625][ T8959] hsr0: entered allmulticast mode [ 175.732792][ T8959] hsr_slave_0: entered allmulticast mode [ 175.748709][ T8959] hsr_slave_1: entered allmulticast mode [ 176.152655][ T8991] x_tables: unsorted entry at hook 3 [ 176.218238][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 176.588552][ T9002] netlink: 644 bytes leftover after parsing attributes in process `syz.1.759'. [ 176.626352][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 176.648735][ T9002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.759'. [ 176.669058][ T9002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.759'. [ 176.784340][ T9006] bond0: entered promiscuous mode [ 176.806296][ T9006] bond_slave_0: entered promiscuous mode [ 176.822931][ T9006] bond_slave_1: entered promiscuous mode [ 176.891923][ T9006] batadv0: entered promiscuous mode [ 176.915570][ T9006] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 176.927628][ T9006] bond0: left promiscuous mode [ 176.932531][ T9006] bond_slave_0: left promiscuous mode [ 176.946219][ T9006] bond_slave_1: left promiscuous mode [ 176.956002][ T9006] batadv0: left promiscuous mode [ 176.973476][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 176.989281][ T9024] hsr0: entered promiscuous mode [ 177.008017][ T9028] hsr_slave_0: left promiscuous mode [ 177.018381][ T9028] hsr_slave_1: left promiscuous mode [ 177.085364][ T9028] hsr0 (unregistering): left promiscuous mode [ 177.143421][ T9035] IPv6: Can't replace route, no match found [ 177.152757][ T9035] netlink: 'syz.4.766': attribute type 3 has an invalid length. [ 177.253107][ T9037] netlink: 'syz.3.767': attribute type 10 has an invalid length. [ 177.278861][ T9037] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.327242][ T9037] bond0: (slave team0): Enslaving as an active interface with an up link [ 177.362638][ T9041] netlink: 'syz.1.770': attribute type 6 has an invalid length. [ 177.415167][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.768'. [ 177.442955][ T9045] syzkaller0: entered promiscuous mode [ 177.465790][ T9045] syzkaller0: entered allmulticast mode [ 177.533639][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 177.715819][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'. [ 177.728555][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 177.826816][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'. [ 178.219051][ T9101] netlink: 'syz.2.784': attribute type 4 has an invalid length. [ 178.236350][ T9101] ip6gretap2: entered allmulticast mode [ 178.253292][ T9102] netlink: 'syz.1.786': attribute type 3 has an invalid length. [ 178.330913][ T9107] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 178.341065][ T9104] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.390834][ T9112] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 178.488079][ T9107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.557006][ T9111] vlan2: entered promiscuous mode [ 178.562358][ T9111] bond3: entered promiscuous mode [ 178.568808][ T9111] vlan2: entered allmulticast mode [ 178.583089][ T9111] bond3: entered allmulticast mode [ 178.626936][ T9112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.671123][ T9118] bond3: (slave bridge1): making interface the new active one [ 178.679616][ T9118] bridge1: entered promiscuous mode [ 178.685093][ T9118] bridge1: entered allmulticast mode [ 178.692126][ T9118] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 178.715290][ T9107] vlan0: entered promiscuous mode [ 178.747861][ T9104] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.759115][ T9131] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 178.825460][ T9104] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.924440][ T9104] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.109012][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.137070][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.164732][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.239140][ T6872] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.282541][ T9153] veth1_to_batadv: entered allmulticast mode [ 179.297793][ T9155] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 179.353144][ T9155] bond6: entered promiscuous mode [ 179.361396][ T9155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.374098][ T9153] veth1_to_batadv: entered promiscuous mode [ 179.458976][ T9163] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 179.510839][ T9157] bond6: (slave bridge5): making interface the new active one [ 179.524133][ T9157] bridge5: entered promiscuous mode [ 179.531203][ T9157] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 179.581848][ T9163] team0: entered promiscuous mode [ 179.595241][ T9163] team0: entered allmulticast mode [ 179.627429][ T9163] bridge0: port 1(team0) entered blocking state [ 179.641736][ T9163] bridge0: port 1(team0) entered disabled state [ 179.701225][ T9152] veth1_to_batadv: left promiscuous mode [ 179.719443][ T9152] veth1_to_batadv: left allmulticast mode [ 180.236865][ T9206] lo speed is unknown, defaulting to 1000 [ 180.311427][ T9207] netlink: 'syz.1.812': attribute type 6 has an invalid length. [ 180.322303][ T9207] netlink: 'syz.1.812': attribute type 7 has an invalid length. [ 180.335673][ T9207] netlink: 'syz.1.812': attribute type 8 has an invalid length. [ 180.394309][ T9217] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 180.405320][ T9217] bond0: (slave wlan1): Opening slave failed [ 180.618063][ T9222] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 180.633174][ T9225] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 181.479329][ T9270] bond0: entered promiscuous mode [ 181.550657][ T9280] lo speed is unknown, defaulting to 1000 [ 181.851965][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.879644][ T9283] bridge0: entered allmulticast mode [ 181.924303][ T9287] __nla_validate_parse: 15 callbacks suppressed [ 181.924326][ T9287] netlink: 52 bytes leftover after parsing attributes in process `syz.3.833'. [ 182.238082][ T9305] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 182.247220][ T9305] netlink: 96 bytes leftover after parsing attributes in process `syz.2.838'. [ 182.305239][ T9305] netlink: 1 bytes leftover after parsing attributes in process `syz.2.838'. [ 182.339286][ T9305] netlink: 658 bytes leftover after parsing attributes in process `syz.2.838'. [ 182.422901][ T9311] Unknown options in mask 6 [ 182.483038][ T9314] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 182.544670][ T9314] bond5: entered promiscuous mode [ 182.560487][ T9314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.628105][ T9314] macvtap0: entered allmulticast mode [ 183.200215][ T9338] lo speed is unknown, defaulting to 1000 [ 183.852361][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 183.914156][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'. [ 184.082032][ T9374] net_ratelimit: 7 callbacks suppressed [ 184.082052][ T9374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.336811][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 184.633319][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.857'. [ 184.642550][ T9388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.857'. [ 184.697872][ T9388] erspan0: entered promiscuous mode [ 184.716669][ T9388] gretap0: entered promiscuous mode [ 185.051197][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 185.375238][ T9411] sctp: [Deprecated]: syz.2.865 (pid 9411) Use of int in max_burst socket option deprecated. [ 185.375238][ T9411] Use struct sctp_assoc_value instead [ 185.396114][ T9419] x_tables: duplicate underflow at hook 1 [ 185.753864][ T9439] netlink: set zone limit has 4 unknown bytes [ 186.480709][ T9262] Set syz1 is full, maxelem 65536 reached [ 186.920679][ T6872] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.931991][ T9484] __nla_validate_parse: 8 callbacks suppressed [ 186.932013][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 186.948570][ T6872] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.962194][ T6872] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.971793][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 186.981189][ T6872] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.106825][ T9493] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 187.115017][ T9493] netlink: 6 bytes leftover after parsing attributes in process `syz.4.889'. [ 187.199103][ T9499] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 187.276110][ T9499] bond5: entered promiscuous mode [ 187.281609][ T9499] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.618246][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 187.633202][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 187.729065][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'. [ 187.745932][ T9531] veth0: entered promiscuous mode [ 187.773437][ T9531] macvtap1: entered promiscuous mode [ 187.795363][ T9531] macvtap1: entered allmulticast mode [ 187.803737][ T9531] veth0: entered allmulticast mode [ 187.842762][ T9528] macvtap2: entered promiscuous mode [ 187.856112][ T9528] macvtap2: entered allmulticast mode [ 188.010150][ T9536] bond7: entered promiscuous mode [ 188.018096][ T9552] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 188.040521][ T9536] 8021q: adding VLAN 0 to HW filter on device bond7 [ 188.102083][ T9543] bridge2: entered promiscuous mode [ 188.121067][ T9543] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 188.161897][ T9552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.192925][ T9552] team0: Port device bond0 added [ 188.313137][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 188.900114][ T9597] lo speed is unknown, defaulting to 1000 [ 189.081637][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 189.090957][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 189.250996][ T9611] lo speed is unknown, defaulting to 1000 [ 189.340283][ T9612] lo speed is unknown, defaulting to 1000 [ 189.561698][ T9626] xt_TCPMSS: Only works on TCP SYN packets [ 189.592163][ T9626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.916'. [ 189.803263][ T9597] x_tables: unsorted underflow at hook 4 [ 189.828104][ T9627] lo speed is unknown, defaulting to 1000 [ 190.168728][ T9648] netlink: 'syz.2.922': attribute type 10 has an invalid length. [ 190.219696][ T9651] netlink: 'syz.2.922': attribute type 10 has an invalid length. [ 190.246562][ T9648] team0: Failed to send options change via netlink (err -105) [ 190.254561][ T9648] team0: Port device dummy0 added [ 190.263808][ T9651] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.314848][ T9651] team0: Failed to send options change via netlink (err -105) [ 190.340042][ T9651] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.365212][ T9651] team0: Port device dummy0 removed [ 190.401436][ T9651] .`: (slave dummy0): Enslaving as an active interface with an up link [ 191.050122][ T9689] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 191.067484][ T9690] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 191.094054][ T9689] team0: Port device dummy0 added [ 191.104508][ T9690] team0: Port device dummy0 removed [ 191.107953][ T9693] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 191.122694][ T9690] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.133242][ T9688] lo speed is unknown, defaulting to 1000 [ 191.251602][ T9695] xt_CT: No such helper "syz1" [ 192.028402][ T9728] netlink: 'syz.4.942': attribute type 58 has an invalid length. [ 192.077391][ T9728] tipc: Enabling of bearer rejected, failed to enable media [ 192.099723][ T9728] syzkaller0: entered promiscuous mode [ 192.113811][ T9728] syzkaller0: entered allmulticast mode [ 192.650035][ T9730] syzkaller0: entered promiscuous mode [ 192.655731][ T9730] syzkaller0: entered allmulticast mode [ 192.913679][ T9750] syzkaller1: entered promiscuous mode [ 192.965548][ T9750] syzkaller1: entered allmulticast mode [ 193.055834][ T9753] __nla_validate_parse: 10 callbacks suppressed [ 193.055855][ T9753] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.947'. [ 193.627083][ T9776] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 193.635205][ T9774] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 193.688607][ T9776] netlink: 228 bytes leftover after parsing attributes in process `syz.3.952'. [ 194.033068][ T9778] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 194.069019][ T9778] netlink: 228 bytes leftover after parsing attributes in process `syz.3.952'. [ 194.300006][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.344240][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'. [ 195.396175][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'. [ 195.496990][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 195.826330][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 196.170647][ T9857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.973'. [ 196.451359][ T9866] sctp: [Deprecated]: syz.0.975 (pid 9866) Use of int in max_burst socket option. [ 196.451359][ T9866] Use struct sctp_assoc_value instead [ 196.836863][ T9881] ip6t_srh: unknown srh invflags BA61 [ 197.061354][ T9885] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.979'. [ 197.122571][ T9886] netlink: set zone limit has 4 unknown bytes [ 197.372755][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 198.023667][ T9906] netlink: 'syz.4.984': attribute type 2 has an invalid length. [ 198.157498][ T9914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.331077][ T9683] Set syz1 is full, maxelem 65536 reached [ 198.622788][ T9936] xt_hashlimit: max too large, truncated to 1048576 [ 198.636766][ T9936] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 198.826762][ T9951] __nla_validate_parse: 2 callbacks suppressed [ 198.826785][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 199.151680][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 199.772149][ T9992] netlink: 'syz.3.1013': attribute type 6 has an invalid length. [ 199.827370][ T9989] netlink: set zone limit has 4 unknown bytes [ 199.864498][ T9994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 199.941799][ T9994] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1014'. [ 199.957468][T10000] lo speed is unknown, defaulting to 1000 [ 200.399902][T10028] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20004 [ 200.565832][T10046] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1027'. [ 200.580615][T10046] veth1_macvtap: left promiscuous mode [ 200.586445][T10046] macsec0: entered allmulticast mode [ 200.646344][T10046] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1027'. [ 200.960552][T10067] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1032'. [ 201.042763][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 201.069737][T10064] lo speed is unknown, defaulting to 1000 [ 201.211416][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1040'. [ 201.393983][T10097] sctp: [Deprecated]: syz.0.1043 (pid 10097) Use of int in max_burst socket option. [ 201.393983][T10097] Use struct sctp_assoc_value instead [ 201.850105][T10111] sctp: [Deprecated]: syz.2.1036 (pid 10111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.850105][T10111] Use struct sctp_sack_info instead [ 202.591212][T10146] netlink: 'syz.2.1051': attribute type 13 has an invalid length. [ 203.608385][T10114] : renamed from vlan0 (while UP) [ 203.618323][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1046'. [ 203.627542][T10118] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1046'. [ 203.922791][T10135] lo speed is unknown, defaulting to 1000 [ 203.968510][T10130] lo speed is unknown, defaulting to 1000 [ 205.001120][T10176] netlink: 'syz.3.1058': attribute type 4 has an invalid length. [ 205.572342][T10179] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 205.588824][T10179] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 205.773801][T10188] __nla_validate_parse: 1 callbacks suppressed [ 205.773824][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1060'. [ 205.834553][T10190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1062'. [ 206.276151][T10216] syzkaller0: entered promiscuous mode [ 206.281825][T10216] syzkaller0: entered allmulticast mode [ 206.562126][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 206.678847][T10244] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.693073][T10244] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.722257][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 206.731789][ T5141] block nbd0: Receive control failed (result -32) [ 206.791484][T10240] geneve3: entered promiscuous mode [ 206.816098][T10240] geneve3: entered allmulticast mode [ 207.009173][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 207.382136][T10271] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 207.487268][T10283] lo: left promiscuous mode [ 207.681190][T10285] netlink: 'syz.3.1088': attribute type 2 has an invalid length. [ 207.870746][T10294] tipc: Started in network mode [ 207.885250][T10294] tipc: Node identity d25d2de04b95, cluster identity 4711 [ 207.906850][T10294] tipc: Enabled bearer , priority 0 [ 207.925558][T10294] syzkaller0: entered promiscuous mode [ 207.931559][T10294] syzkaller0: entered allmulticast mode [ 207.999705][T10294] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1091'. [ 208.029756][T10294] tipc: Resetting bearer [ 208.068366][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 208.086384][T10293] tipc: Resetting bearer [ 208.119079][T10293] tipc: Disabling bearer [ 208.124060][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1095'. [ 208.462422][T10332] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.675982][T10345] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 209.032220][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 209.327906][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 209.446337][T10378] lo speed is unknown, defaulting to 1000 [ 209.501758][T10380] netlink: 'syz.0.1107': attribute type 25 has an invalid length. [ 209.539792][T10382] xt_hashlimit: size too large, truncated to 1048576 [ 209.567994][T10382] xt_hashlimit: max too large, truncated to 1048576 [ 210.312008][T10408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.474936][T10408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.661470][T10408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.786831][T10437] bond1: (slave lo): Releasing backup interface [ 210.794433][T10437] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 210.814878][T10437] bridge_slave_0: left allmulticast mode [ 210.833250][T10437] bridge_slave_0: left promiscuous mode [ 210.856995][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.871872][T10437] bridge_slave_1: left allmulticast mode [ 210.879389][T10437] bridge_slave_1: left promiscuous mode [ 210.888096][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.949957][T10437] bond0: (slave bond_slave_0): Releasing backup interface [ 210.970391][T10437] bond0: (slave bond_slave_1): Releasing backup interface [ 210.994526][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.003375][T10437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.028328][T10437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.036283][T10437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.092258][T10437] bond2: (slave bond3): Releasing backup interface [ 211.102568][T10437] bond3: left promiscuous mode [ 211.114166][T10437] bond4: (slave bridge3): Releasing active interface [ 211.133507][T10437] bond6: (slave bridge5): Releasing backup interface [ 211.140616][T10437] bridge5: left promiscuous mode [ 211.156266][ T1020] lo speed is unknown, defaulting to 1000 [ 211.193355][ T1020] syz2: Port: 1 Link DOWN [ 211.356881][ T6861] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.393126][T10465] __nla_validate_parse: 6 callbacks suppressed [ 211.393145][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 211.431904][ T128] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.440492][ T128] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.453161][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.461034][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.496476][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.523232][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.541305][ T6870] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.562865][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.595353][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.638133][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.664145][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.695996][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 211.704143][T10469] xt_recent: Unsupported userspace flags (000000b1) [ 212.386159][T10512] : entered promiscuous mode [ 212.393482][T10512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1145'. [ 212.504352][T10515] lo speed is unknown, defaulting to 1000 [ 212.974237][T10540] netlink: 'syz.3.1152': attribute type 28 has an invalid length. [ 213.691912][T10576] lo speed is unknown, defaulting to 1000 [ 213.759257][T10581] tipc: Enabling of bearer rejected, failed to enable media [ 213.787576][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 213.891339][T10582] 8021q: adding VLAN 0 to HW filter on device bond8 [ 213.944555][T10589] netlink: 'syz.4.1166': attribute type 32 has an invalid length. [ 213.944573][T10587] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 213.960086][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 213.981815][T10584] macvlan2: entered allmulticast mode [ 213.990576][T10584] veth0_to_bond: entered promiscuous mode [ 213.997243][T10584] veth0_to_bond: entered allmulticast mode [ 214.008579][T10584] bond8: (slave macvlan2): Enslaving as an active interface with an up link [ 214.057946][T10589] bond6: Setting coupled_control to off (0) [ 214.203537][T10605] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1171'. [ 215.416400][T10656] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1183'. [ 215.600732][T10646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.625805][T10646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.069314][T10646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.086260][T10646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.334446][T10646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.351939][T10646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.498678][T10646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.518619][T10646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.519269][T10698] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1195'. [ 216.559448][T10700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.700078][ T6868] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.722884][ T6868] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.797341][ T128] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.808512][ T128] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.881591][ T6861] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.903307][ T6861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.963085][ T6861] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.984676][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 217.006244][ T6861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.082077][T10721] nbd: must specify at least one socket [ 217.088706][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1201'. [ 217.351166][T10730] lo speed is unknown, defaulting to 1000 [ 217.366807][T10738] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1206'. [ 217.387144][T10737] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1203'. [ 217.685782][T10748] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1208'. [ 217.697755][T10750] netlink: 'syz.2.1209': attribute type 11 has an invalid length. [ 217.710600][T10750] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1209'. [ 217.927510][T10757] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 217.948926][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 218.667774][T10783] bridge6: entered promiscuous mode [ 218.699865][T10790] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 218.740681][T10791] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1221'. [ 218.894422][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1224'. [ 219.088740][T10802] lo speed is unknown, defaulting to 1000 [ 219.090433][T10799] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 219.607376][T10830] syz_tun: entered allmulticast mode [ 219.784742][T10832] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 219.952279][T10837] batadv0: entered promiscuous mode [ 219.959302][T10837] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 220.216321][T10849] syzkaller0: entered promiscuous mode [ 220.229596][T10849] syzkaller0: entered allmulticast mode [ 220.265267][T10851] macsec1: entered promiscuous mode [ 220.495264][T10869] sctp: [Deprecated]: syz.1.1243 (pid 10869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.495264][T10869] Use struct sctp_sack_info instead [ 220.542532][T10869] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 220.559330][T10851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.657171][T10883] netlink: 'syz.4.1245': attribute type 2 has an invalid length. [ 220.788999][T10893] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 220.913221][T10897] syzkaller0: entered promiscuous mode [ 220.932557][T10897] syzkaller0: entered allmulticast mode [ 221.109740][T10905] bond6: entered promiscuous mode [ 221.114978][T10905] bond6: entered allmulticast mode [ 221.121300][T10905] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.400098][T10922] nbd: must specify a size in bytes for the device [ 221.625344][T10935] __nla_validate_parse: 13 callbacks suppressed [ 221.625366][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1261'. [ 221.658737][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 221.716162][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1261'. [ 221.725483][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1261'. [ 221.957182][T10946] IPVS: set_ctl: invalid protocol: 33 172.20.20.27:20001 [ 221.996131][T10943] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 222.004676][T10947] lo speed is unknown, defaulting to 1000 [ 222.132383][T10954] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1264'. [ 222.381226][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1272'. [ 222.551309][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 222.780554][T10978] mac80211_hwsim hwsim6 ;: renamed from wlan0 [ 222.890127][T10993] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 223.143309][T11005] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 223.366640][T11019] netlink: 'syz.3.1284': attribute type 21 has an invalid length. [ 223.452926][T11023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.467641][T11023] bond0: (slave rose0): Enslaving as an active interface with an up link [ 223.694161][T11028] Cannot find set identified by id 1 to match [ 223.870819][T11054] lo: Caught tx_queue_len zero misconfig [ 223.931336][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 223.941032][T11043] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 224.218671][T11073] xt_ecn: cannot match TCP bits for non-tcp packets [ 224.244544][T11073] veth0: entered promiscuous mode [ 224.309989][T11069] veth0: left promiscuous mode [ 224.791008][T11101] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 224.929604][T11105] x_tables: duplicate underflow at hook 1 [ 224.956921][T11105] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1306'. [ 225.110643][T11113] veth1_macvtap: left promiscuous mode [ 225.126643][T11113] macsec0: entered allmulticast mode [ 225.161010][T11113] veth1_macvtap: entered promiscuous mode [ 225.185757][T11113] veth1_macvtap: entered allmulticast mode [ 225.192852][T11113] macsec0: left allmulticast mode [ 225.199368][T11113] veth1_macvtap: left allmulticast mode [ 225.204324][T11119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 225.550895][T11139] xt_connbytes: Forcing CT accounting to be enabled [ 225.612991][T11144] netlink: 'syz.4.1315': attribute type 10 has an invalid length. [ 225.644794][ T6035] udevd[6035]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.673271][ T5974] udevd[5974]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.704816][T11144] team0: Device veth0_vlan failed to register rx_handler [ 226.776953][T11206] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 226.836797][T11208] __nla_validate_parse: 7 callbacks suppressed [ 226.836817][T11208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1330'. [ 226.896713][ T5974] udevd[5974]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 227.036758][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1332'. [ 227.184571][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 227.216372][T11227] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 227.361564][T11232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1335'. [ 227.434542][T11239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1336'. [ 227.517009][T11236] sctp: [Deprecated]: syz.4.1338 (pid 11236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.517009][T11236] Use struct sctp_sack_info instead [ 227.581641][T11241] sctp: [Deprecated]: syz.4.1338 (pid 11241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.581641][T11241] Use struct sctp_sack_info instead [ 227.605263][T11251] netlink: 'syz.3.1341': attribute type 9 has an invalid length. [ 227.647779][T11251] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1341'. [ 227.808147][T11245] lo speed is unknown, defaulting to 1000 [ 227.967355][T11272] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1344'. [ 228.165388][T11281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1348'. [ 228.355223][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'. [ 228.376704][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 228.436611][T11293] geneve2: entered allmulticast mode [ 228.643148][T11304] vlan4: entered promiscuous mode [ 228.668152][T11306] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 228.685693][T11304] macvtap0: entered promiscuous mode [ 228.759077][T11306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.799597][T11310] vlan2: entered promiscuous mode [ 228.804700][T11310] bond5: entered promiscuous mode [ 228.810003][T11310] vlan2: entered allmulticast mode [ 228.815154][T11310] bond5: entered allmulticast mode [ 228.861190][T11306] bond5: (slave bridge5): making interface the new active one [ 228.870392][T11306] bridge5: entered promiscuous mode [ 228.875928][T11306] bridge5: entered allmulticast mode [ 228.882598][T11306] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 228.973945][T11317] lo speed is unknown, defaulting to 1000 [ 229.223321][T11328] vlan2: entered promiscuous mode [ 229.231587][T11328] macvtap0: entered promiscuous mode [ 229.788747][T11359] : renamed from team_slave_1 [ 229.799280][T11362] x_tables: duplicate underflow at hook 1 [ 229.805886][T11363] x_tables: duplicate underflow at hook 2 [ 230.010828][T11370] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 230.053468][T11375] netlink: 'syz.3.1370': attribute type 2 has an invalid length. [ 230.288363][T11387] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 230.596242][T11408] bond0: Caught tx_queue_len zero misconfig [ 230.666188][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.710105][T11403] bridge_slave_1 (unregistering): left allmulticast mode [ 230.756799][T11403] bridge_slave_1 (unregistering): left promiscuous mode [ 230.776552][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.014925][T11424] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.060667][T11424] bond1: (slave lo): Enslaving as an active interface with an up link [ 231.108259][T11424] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 231.133857][T11441] sctp: [Deprecated]: syz.0.1391 (pid 11441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.133857][T11441] Use struct sctp_sack_info instead [ 231.239217][T11426] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 231.300510][ T1020] lo speed is unknown, defaulting to 1000 [ 231.457127][T11451] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 231.487710][T11460] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 231.488898][T11459] openvswitch: netlink: Duplicate or invalid key (type 0). [ 231.545444][T11463] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 231.582532][T11459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.912497][T11484] __nla_validate_parse: 13 callbacks suppressed [ 231.912519][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 231.942463][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1406'. [ 232.017904][T11484] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.037146][T11484] bond9: (slave lo): Enslaving as an active interface with an up link [ 232.064273][T11484] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 232.106754][T11487] bond9: option mode: unable to set because the bond device has slaves [ 232.135529][T11487] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 232.234976][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 232.601528][T11512] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 232.885429][T11519] lo speed is unknown, defaulting to 1000 [ 233.670453][ T5920] lo speed is unknown, defaulting to 1000 [ 233.961816][T11557] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 234.016922][T11551] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 234.043938][T11557] !9: entered promiscuous mode [ 234.147082][T11551] !9: left promiscuous mode [ 234.532007][T11582] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1432'. [ 234.845196][T11608] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1434'. [ 234.861837][T11609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.051895][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 235.078111][T11624] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.655866][T11591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.850431][T11632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1441'. [ 238.030629][T11645] netlink: 'syz.1.1447': attribute type 2 has an invalid length. [ 238.078969][T11645] : entered promiscuous mode [ 238.114529][T11645] netlink: 'syz.1.1447': attribute type 2 has an invalid length. [ 238.146653][T11645] : left promiscuous mode [ 238.241486][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 238.289517][T11658] veth0: entered promiscuous mode [ 238.294765][T11658] vlan3: entered promiscuous mode [ 238.392097][T11641] hsr_slave_1 (unregistering): left promiscuous mode [ 238.547728][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 238.626460][T11672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1454'. [ 238.940035][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 239.022787][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1459'. [ 239.028224][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 239.181843][T11693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1461'. [ 239.660144][T11717] lo speed is unknown, defaulting to 1000 [ 239.732185][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 239.817663][T11727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.876862][T11730] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.896223][ T10] IPVS: starting estimator thread 0... [ 240.995718][T11782] IPVS: using max 28 ests per chain, 67200 per kthread [ 241.080643][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'. [ 241.266296][T11801] tipc: Failed to remove unknown binding: 66,0,0/0:2818568372/2818568374 [ 241.312566][T11801] tipc: Failed to remove unknown binding: 66,0,0/0:2818568372/2818568373 [ 241.332900][T11801] tipc: Failed to remove unknown binding: 66,0,0/0:2818568372/2818568374 [ 241.344699][T11801] tipc: Failed to remove unknown binding: 66,0,0/0:2818568372/2818568373 [ 241.887579][T11833] dvmrp1: entered allmulticast mode [ 241.935007][T11835] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 242.026100][T11835] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.106515][T11835] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.144534][T11835] bond9: (slave geneve2): making interface the new active one [ 242.164580][T11835] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 242.189405][ T6872] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 242.229291][ T6872] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 242.258516][ T6872] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 242.277027][ T6872] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 242.371619][T11858] netlink: 'syz.1.1502': attribute type 2 has an invalid length. [ 242.629278][T11875] unsupported nlmsg_type 40 [ 242.839098][T11890] netlink: 'syz.1.1508': attribute type 16 has an invalid length. [ 242.860472][T11891] __nla_validate_parse: 13 callbacks suppressed [ 242.860494][T11891] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1511'. [ 242.875986][T11890] netlink: 'syz.1.1508': attribute type 17 has an invalid length. [ 242.885859][T11891] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1511'. [ 242.917097][T11897] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 243.101902][T11890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.299663][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 243.388145][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 243.397400][ T6868] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.421714][ T6868] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.481194][ T6868] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.501983][ T30] audit: type=1800 audit(1773011809.081:3): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1518" name="memory.events" dev="tmpfs" ino=1505 res=0 errno=0 [ 243.536224][ T6868] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.597206][T11914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.800875][T11930] netlink: 'syz.0.1522': attribute type 5 has an invalid length. [ 243.994450][T11940] x_tables: duplicate underflow at hook 1 [ 244.070417][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 244.092530][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 244.174354][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 244.212395][T11952] lo speed is unknown, defaulting to 1000 [ 244.277434][T11958] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.473812][T11965] tc_dump_action: action bad kind [ 244.927278][T11997] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1538'. [ 245.104170][T11997] bond10: option ad_user_port_key: invalid value (65535) [ 245.129839][T11997] bond10: option ad_user_port_key: allowed values 0 - 1023 [ 245.150027][T11997] bond10 (unregistering): Released all slaves [ 245.241948][T12011] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1541'. [ 245.251503][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 245.283508][T12001] bond6 (unregistering): Released all slaves [ 245.629629][T12028] syzkaller1: entered promiscuous mode [ 245.635188][T12028] syzkaller1: entered allmulticast mode [ 245.662174][T12032] netlink: 'syz.2.1546': attribute type 2 has an invalid length. [ 245.837356][T12041] netlink: 'syz.0.1551': attribute type 10 has an invalid length. [ 245.871881][T12041] dummy0: entered promiscuous mode [ 245.889999][T12045] netlink: 'syz.0.1551': attribute type 10 has an invalid length. [ 245.907684][T12041] dummy0: entered allmulticast mode [ 245.914574][T12041] team0: Port device dummy0 added [ 245.932125][ T5929] bridge0: port 1(team0) entered blocking state [ 245.938600][ T5929] bridge0: port 1(team0) entered forwarding state [ 245.998777][T12045] dummy0: left allmulticast mode [ 246.022144][T12045] team0: Port device dummy0 removed [ 246.034716][T12045] dummy0: left promiscuous mode [ 246.053728][ T6868] bridge0: port 1(team0) entered disabled state [ 246.246561][T12071] xt_l2tp: wrong L2TP version: 0 [ 246.256142][T12073] xt_l2tp: wrong L2TP version: 0 [ 246.270464][T12072] netlink: 'syz.4.1560': attribute type 5 has an invalid length. [ 246.288890][T12073] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 246.418494][T12076] delete_channel: no stack [ 247.001778][T12092] lo speed is unknown, defaulting to 1000 [ 247.371084][T12128] netlink: 'syz.2.1577': attribute type 21 has an invalid length. [ 247.449795][T12136] netlink: 'syz.4.1578': attribute type 27 has an invalid length. [ 247.574323][T12136] bridge0: port 1(1x9) entered disabled state [ 247.712939][T12136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.727098][T12136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.815228][T12136] vlan0: left promiscuous mode [ 247.894662][T12136] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 247.923100][T12136] vlan2: left promiscuous mode [ 247.929834][T12136] bond3: left promiscuous mode [ 247.934774][T12136] bridge1: left promiscuous mode [ 247.940666][T12136] vlan2: left allmulticast mode [ 247.946877][T12136] bond3: left allmulticast mode [ 247.951762][T12136] bridge1: left allmulticast mode [ 247.958869][T12152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.970674][T12136] bond5: left promiscuous mode [ 248.010945][T12136] geneve2: left allmulticast mode [ 248.020394][T12136] vlan4: left promiscuous mode [ 248.025319][T12136] macvtap0: left promiscuous mode [ 248.085487][T12135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.093977][T12135] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.105500][T12135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.123540][ T6868] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.134948][ T6868] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.176528][ T6868] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.186347][ T6868] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.321362][T12146] lo speed is unknown, defaulting to 1000 [ 248.798021][T12184] __nla_validate_parse: 3 callbacks suppressed [ 248.798044][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 248.806472][T12185] netlink: 'syz.2.1588': attribute type 21 has an invalid length. [ 248.846723][T12185] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1588'. [ 248.879475][T12185] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1588'. [ 248.926451][T12193] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 249.166254][T12205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.195186][T12205] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 249.338373][T12202] lo speed is unknown, defaulting to 1000 [ 249.359753][T12217] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 249.664352][T12233] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 250.331218][T12268] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1605'. [ 250.351010][T12272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1607'. [ 250.372499][T12268] bridge_slave_1: default FDB implementation only supports local addresses [ 250.572920][T12282] netlink: 'syz.1.1609': attribute type 21 has an invalid length. [ 250.601479][T12282] netlink: 'syz.1.1609': attribute type 22 has an invalid length. [ 250.634894][T12282] netlink: 'syz.1.1609': attribute type 23 has an invalid length. [ 250.662133][T12282] netlink: 'syz.1.1609': attribute type 25 has an invalid length. [ 250.681660][T12282] netlink: 'syz.1.1609': attribute type 26 has an invalid length. [ 250.693990][T12282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1609'. [ 251.232861][T12306] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1614'. [ 251.484575][T12319] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 251.495791][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1620'. [ 251.532443][T12319] 8021q: adding VLAN 0 to HW filter on device bond11 [ 251.542855][T12321] IPv6: Can't replace route, no match found [ 251.588008][T12322] bond11: (slave veth7): Enslaving as an active interface with a down link [ 251.624689][T12319] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 251.632569][T12319] bond11: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 251.742212][T12330] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1623'. [ 251.751568][T12330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'. [ 253.074710][T12385] bond1: option broadcast_neighbor: invalid value (30) [ 253.089258][T12385] bond1 (unregistering): Released all slaves [ 253.220000][T12388] lo speed is unknown, defaulting to 1000 [ 253.490495][T12412] lo speed is unknown, defaulting to 1000 [ 253.721809][T12416] pim6reg1: entered promiscuous mode [ 253.732474][T12416] pim6reg1: entered allmulticast mode [ 254.050749][T12430] netlink: 'syz.3.1643': attribute type 1 has an invalid length. [ 254.058765][T12430] netlink: 'syz.3.1643': attribute type 11 has an invalid length. [ 254.097963][T12430] __nla_validate_parse: 9 callbacks suppressed [ 254.097982][T12430] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1643'. [ 254.165880][T12429] netlink: 'syz.3.1643': attribute type 5 has an invalid length. [ 254.386790][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1646'. [ 254.387786][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1646'. [ 254.472103][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1646'. [ 254.506678][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1646'. [ 254.911828][T12456] Bluetooth: MGMT ver 1.23 [ 254.926113][T12456] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 254.951072][T12457] netlink: 'syz.3.1649': attribute type 4 has an invalid length. [ 254.966163][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1647'. [ 254.977331][T12459] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1647'. [ 254.993890][T12457] netlink: 'syz.3.1649': attribute type 4 has an invalid length. [ 255.015872][T12461] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 255.206962][T12469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.241420][T12457] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.249274][T12457] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.259711][T12471] openvswitch: netlink: Multiple metadata blocks provided [ 255.280196][T12457] batman_adv: batadv0: Interface deactivated: dummy0 [ 255.298807][T12473] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 255.359341][T12457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.386688][T12457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.518210][T12457] hsr0: left allmulticast mode [ 255.533631][T12457] hsr_slave_0: left allmulticast mode [ 255.556423][T12457] hsr_slave_1: left allmulticast mode [ 255.613711][T12489] netlink: 'syz.4.1657': attribute type 10 has an invalid length. [ 255.677222][T12495] netlink: 'syz.4.1657': attribute type 10 has an invalid length. [ 255.731170][ T6870] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.748664][ T6870] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.798253][T12489] bond0: (slave dummy0): Releasing backup interface [ 255.907493][T12489] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 255.926025][T12489] team0: Failed to send options change via netlink (err -105) [ 255.934471][T12489] team0: Port device dummy0 added [ 255.942018][ T6870] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.970361][ T6870] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.994464][T12501] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1658'. [ 256.014614][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 256.459188][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 257.051707][T12557] netlink: 'syz.1.1677': attribute type 58 has an invalid length. [ 258.251233][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.278529][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.515456][ T30] audit: type=1800 audit(1773011824.091:4): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1686" name="memory.events" dev="tmpfs" ino=1744 res=0 errno=0 [ 258.662217][T12623] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.784435][T12631] bond10: (slave veth3): Enslaving as an active interface with a down link [ 258.852058][T12632] bond10: (slave dummy0): making interface the new active one [ 258.908032][T12632] dummy0: entered promiscuous mode [ 258.913649][T12632] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 258.999085][T12631] bond10: (slave dummy0): Releasing active interface [ 259.016474][T12631] dummy0 (unregistering): left promiscuous mode [ 259.068643][T12623] lo speed is unknown, defaulting to 1000 [ 259.277604][T12658] validate_nla: 2 callbacks suppressed [ 259.277625][T12658] netlink: 'syz.4.1697': attribute type 2 has an invalid length. [ 259.359607][T12658] !: entered promiscuous mode [ 259.854802][T12677] __nla_validate_parse: 7 callbacks suppressed [ 259.854843][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1703'. [ 260.239630][T12696] netlink: 'syz.1.1708': attribute type 9 has an invalid length. [ 260.271648][T12696] netlink: 'syz.1.1708': attribute type 11 has an invalid length. [ 260.306445][T12696] netlink: 'syz.1.1708': attribute type 12 has an invalid length. [ 260.324551][T12696] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1708'. [ 260.430281][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1713'. [ 260.640559][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1716'. [ 260.714189][T12734] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.748322][T12738] syzkaller1: entered promiscuous mode [ 260.753876][T12738] syzkaller1: entered allmulticast mode [ 260.810876][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'. [ 260.862329][T12752] netlink: 'syz.0.1719': attribute type 21 has an invalid length. [ 260.914228][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 260.950195][T12754] macvtap0: entered promiscuous mode [ 260.967505][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 260.988857][T12754] veth0_macvtap: left promiscuous mode [ 261.104134][T12754] macvtap0 (unregistering): left promiscuous mode [ 261.154248][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 261.345859][T12781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1729'. [ 261.360684][T12783] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1730'. [ 261.703886][T12806] netlink: zone id is out of range [ 261.709591][T12806] netlink: zone id is out of range [ 261.714764][T12806] netlink: zone id is out of range [ 261.738891][T12806] netlink: zone id is out of range [ 261.742613][T12808] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.766531][T12808] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.786567][T12806] netlink: zone id is out of range [ 261.791786][T12806] netlink: zone id is out of range [ 261.812786][T12806] netlink: zone id is out of range [ 261.823945][T12813] netlink: 'syz.1.1739': attribute type 2 has an invalid length. [ 261.848441][T12806] netlink: zone id is out of range [ 261.856908][T12806] netlink: zone id is out of range [ 261.862229][T12806] netlink: zone id is out of range [ 261.892829][T12813] l24): entered promiscuous mode [ 261.928675][T12808] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.940494][T12808] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.015061][T12808] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.039927][T12808] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.208924][T12808] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.216552][T12834] Unsupported ieee802154 address type: 0 [ 262.226382][T12808] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.361915][T12829] nbd: nbd0 already in use [ 262.372145][T12829] block nbd0: NBD_DISCONNECT [ 262.377243][T12829] block nbd0: Send disconnect failed -32 [ 262.383215][T12829] block nbd0: shutting down sockets [ 262.534151][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.542780][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.588999][ T5929] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.601939][ T5929] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.654904][ T5929] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.694041][ T5929] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.726298][T12862] netlink: 'syz.3.1751': attribute type 3 has an invalid length. [ 262.734174][ T5929] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.744866][ T5929] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.034612][T12875] netlink: 'syz.0.1756': attribute type 39 has an invalid length. [ 264.145312][T12911] netlink: 'syz.3.1767': attribute type 9 has an invalid length. [ 265.316432][T12845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.500608][T12923] __nla_validate_parse: 7 callbacks suppressed [ 265.500631][T12923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1771'. [ 265.526797][T12924] gre0: entered promiscuous mode [ 265.531817][T12924] gre0: entered allmulticast mode [ 266.040611][T12957] x_tables: duplicate underflow at hook 3 [ 266.118126][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 266.160273][T12964] netlink: 'syz.0.1779': attribute type 1 has an invalid length. [ 266.251705][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 266.306737][T12967] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig [ 266.476721][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 266.555104][T12986] netlink: 'syz.3.1787': attribute type 32 has an invalid length. [ 266.563589][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 266.628171][T12986] bond12: Setting coupled_control to off (0) [ 266.634612][T12981] vlan0: entered promiscuous mode [ 266.647874][T12991] netlink: 'syz.1.1789': attribute type 21 has an invalid length. [ 266.659880][T12992] netlink: 'syz.4.1788': attribute type 10 has an invalid length. [ 266.704436][T12991] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1789'. [ 266.721951][T12995] netlink: 'syz.4.1788': attribute type 10 has an invalid length. [ 266.752125][T12991] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1789'. [ 266.812600][T12995] team0: Port device dummy0 removed [ 266.870606][T12995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 267.749187][T13034] syzkaller1: entered promiscuous mode [ 267.754731][T13034] syzkaller1: entered allmulticast mode [ 267.766826][T13037] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1800'. [ 268.017967][T13049] tipc: Can't bind to reserved service type 0 [ 268.036068][T13052] sit2: entered promiscuous mode [ 268.115485][T13058] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1807'. [ 268.490979][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1810'. [ 268.663395][T13075] ip6_vti0: Caught tx_queue_len zero misconfig [ 268.674895][T13076] ip6t_srh: unknown srh invflags BA61 [ 269.320097][T13118] veth0: Caught tx_queue_len zero misconfig [ 269.645213][T13141] net_ratelimit: 390 callbacks suppressed [ 269.645235][T13141] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 269.682662][T13135] veth0_to_bridge: entered promiscuous mode [ 269.702893][T13134] veth0_to_bridge: left promiscuous mode [ 269.843414][T13151] recent_mt_check: 55 callbacks suppressed [ 269.843435][T13151] xt_recent: Unsupported userspace flags (000000b1) [ 270.115505][T13167] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 270.819716][T13174] IPVS: length: 132 != 8 [ 271.037351][T13221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.170687][T13226] syz.4.1849: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 271.209232][T13226] CPU: 0 UID: 0 PID: 13226 Comm: syz.4.1849 Not tainted syzkaller #0 PREEMPT(full) [ 271.209262][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.209293][T13226] Call Trace: [ 271.209302][T13226] [ 271.209311][T13226] dump_stack_lvl+0xe8/0x150 [ 271.209347][T13226] warn_alloc+0x249/0x340 [ 271.209373][T13226] ? stack_trace_save+0xa9/0x100 [ 271.209398][T13226] ? __pfx_warn_alloc+0x10/0x10 [ 271.209429][T13226] ? kasan_save_track+0x4f/0x80 [ 271.209449][T13226] ? kasan_save_track+0x3e/0x80 [ 271.209469][T13226] ? __kasan_kmalloc+0x93/0xb0 [ 271.209490][T13226] ? __kmalloc_cache_noprof+0x31c/0x660 [ 271.209512][T13226] ? xskq_create+0x56/0x170 [ 271.209541][T13226] ? xsk_setsockopt+0x54c/0x990 [ 271.209566][T13226] ? do_sock_setsockopt+0x17c/0x1b0 [ 271.209614][T13226] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 271.209645][T13226] ? do_syscall_64+0x14d/0xf80 [ 271.209670][T13226] __vmalloc_node_range_noprof+0x132/0x1730 [ 271.209730][T13226] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.209762][T13226] ? __kasan_kmalloc+0x93/0xb0 [ 271.209793][T13226] vmalloc_user_noprof+0xad/0xe0 [ 271.209817][T13226] ? xskq_create+0xbf/0x170 [ 271.209854][T13226] xskq_create+0xbf/0x170 [ 271.209888][T13226] xsk_init_queue+0x8a/0xe0 [ 271.209920][T13226] xsk_setsockopt+0x54c/0x990 [ 271.209953][T13226] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.209982][T13226] ? __pfx_aa_sk_perm+0x10/0x10 [ 271.210020][T13226] ? aa_sock_opt_perm+0xff/0x1a0 [ 271.210051][T13226] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 271.210075][T13226] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.210106][T13226] do_sock_setsockopt+0x17c/0x1b0 [ 271.210145][T13226] __x64_sys_setsockopt+0x13d/0x1b0 [ 271.210189][T13226] do_syscall_64+0x14d/0xf80 [ 271.210208][T13226] ? trace_irq_disable+0x3b/0x150 [ 271.210240][T13226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.210262][T13226] ? clear_bhb_loop+0x40/0x90 [ 271.210289][T13226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.210311][T13226] RIP: 0033:0x7fc7c2d9c799 [ 271.210332][T13226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.210351][T13226] RSP: 002b:00007fc7c0ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.210374][T13226] RAX: ffffffffffffffda RBX: 00007fc7c3015fa0 RCX: 00007fc7c2d9c799 [ 271.210390][T13226] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 271.210403][T13226] RBP: 00007fc7c2e32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 271.210417][T13226] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.210430][T13226] R13: 00007fc7c3016038 R14: 00007fc7c3015fa0 R15: 00007ffe23fc7988 [ 271.210466][T13226] [ 271.210609][T13226] Mem-Info: [ 271.497178][T13226] active_anon:8471 inactive_anon:0 isolated_anon:0 [ 271.497178][T13226] active_file:3085 inactive_file:40005 isolated_file:0 [ 271.497178][T13226] unevictable:768 dirty:209 writeback:0 [ 271.497178][T13226] slab_reclaimable:12583 slab_unreclaimable:119712 [ 271.497178][T13226] mapped:33330 shmem:4354 pagetables:1608 [ 271.497178][T13226] sec_pagetables:0 bounce:0 [ 271.497178][T13226] kernel_misc_reclaimable:0 [ 271.497178][T13226] free:1301247 free_pcp:10259 free_cma:0 [ 271.571040][T13226] Node 0 active_anon:33884kB inactive_anon:0kB active_file:12340kB inactive_file:159820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133320kB dirty:832kB writeback:0kB shmem:15880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14052kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.630639][T13203] pimreg: entered allmulticast mode [ 271.665691][T13226] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.717157][T13226] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.756004][T13203] pimreg: left allmulticast mode [ 271.786246][T13229] netlink: 'syz.3.1850': attribute type 4 has an invalid length. [ 271.794044][T13229] __nla_validate_parse: 7 callbacks suppressed [ 271.794062][T13229] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1850'. [ 271.823982][T13226] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 271.839134][T13226] Node 0 DMA32 free:1246056kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33684kB inactive_anon:0kB active_file:12340kB inactive_file:159820kB unevictable:1536kB writepending:832kB zspages:0kB present:3129332kB managed:2552728kB mlocked:0kB bounce:0kB free_pcp:42760kB local_pcp:20700kB free_cma:0kB [ 271.874883][T13226] lowmem_reserve[]: 0 0 0 0 0 [ 271.880074][T13226] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 271.955636][T13226] lowmem_reserve[]: 0 0 0 0 0 [ 271.960452][T13226] Node 1 Normal free:3944024kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.024851][T13226] lowmem_reserve[]: 0 0 0 0 0 [ 272.086020][T13226] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.117693][T13226] Node 0 DMA32: 1971*4kB (UME) 1955*8kB (UM) 918*16kB (UM) 804*32kB (UME) 407*64kB (UM) 140*128kB (UM) 202*256kB (UM) 184*512kB (UM) 128*1024kB (UME) 57*2048kB (UME) 182*4096kB (UM) = 1247108kB [ 272.185628][T13226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 272.235901][T13226] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 16*16kB (UME) 8*32kB (UM) 7*64kB (UM) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 960*4096kB (M) = 3944024kB [ 272.269506][T13226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.325491][T13226] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.336422][T13226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.360079][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1854'. [ 272.374981][T13226] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.419321][T13226] 44591 total pagecache pages [ 272.428639][T13226] 0 pages in swap cache [ 272.433757][T13226] Free swap = 124996kB [ 272.455686][T13226] Total swap = 124996kB [ 272.488882][T13226] 2097051 pages RAM [ 272.498241][T13226] 0 pages HighMem/MovableOnly [ 272.573914][T13226] 427033 pages reserved [ 272.587003][T13226] 0 pages cma reserved [ 272.798743][T13269] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1860'. [ 272.853833][T13266] team0 (unregistering): Port device team_slave_1 removed [ 272.933290][T13266] team0 (unregistering): Port device bond0 removed [ 273.038322][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1864'. [ 273.286752][T13298] pim6reg99999999: entered allmulticast mode [ 273.344227][T13298] syzkaller1: entered promiscuous mode [ 273.366604][T13298] syzkaller1: entered allmulticast mode [ 273.401391][T13302] tipc: Started in network mode [ 273.420501][T13302] tipc: Node identity 06f438ffc1f4, cluster identity 4711 [ 273.436226][T13302] tipc: Enabled bearer , priority 0 [ 273.703555][T13302] syzkaller0: entered promiscuous mode [ 273.711243][T13302] syzkaller0: entered allmulticast mode [ 273.739208][T13302] tipc: Resetting bearer [ 273.805822][T13295] tipc: Resetting bearer [ 273.989666][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1874'. [ 274.499550][T13345] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1877'. [ 275.532998][T13295] tipc: Disabling bearer [ 275.542739][T13327] bond0: ARP target 170.170.170.170 is already present [ 275.550768][T13327] bond0: option arp_ip_target: invalid value (2863311530) [ 275.627192][ T9] tipc: Node number set to 3338680575 [ 275.639553][T13350] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 275.891931][T13365] netlink: 'syz.4.1882': attribute type 89 has an invalid length. [ 275.962192][T13365] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1882'. [ 275.982583][T13365] netlink: set zone limit has 8 unknown bytes [ 276.005120][T13366] netlink: set zone limit has 8 unknown bytes [ 276.045460][T13373] ipvlan3: entered promiscuous mode [ 276.052416][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'. [ 276.054187][T13373] bridge0: port 1(ipvlan3) entered blocking state [ 276.069565][T13373] bridge0: port 1(ipvlan3) entered disabled state [ 276.076508][T13373] ipvlan3: entered allmulticast mode [ 276.082724][T13373] bridge0: entered allmulticast mode [ 276.091916][T13373] ipvlan3: left allmulticast mode [ 276.097260][T13373] bridge0: left allmulticast mode [ 276.157542][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1880'. [ 276.172630][T13361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.220666][T13361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.537821][T13396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1890'. [ 276.957520][T13423] __nla_validate_parse: 3 callbacks suppressed [ 276.957542][T13423] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1897'. [ 277.002178][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1897'. [ 277.248813][T13431] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1899'. [ 277.268482][T13433] syzkaller1: entered promiscuous mode [ 277.283682][T13433] syzkaller1: entered allmulticast mode [ 277.571457][T13445] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 278.105075][T13469] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 278.124368][T13469] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1909'. [ 278.339619][T13487] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 278.540087][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1916'. [ 278.585917][T13489] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.595028][T13489] bond7: (slave bond8): making interface the new active one [ 278.604618][T13489] bond7: (slave bond8): Enslaving as an active interface with an up link [ 278.640320][T13487] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 278.655799][T13501] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1919'. [ 278.673945][T13498] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.796298][T13511] netlink: 'syz.4.1921': attribute type 37 has an invalid length. [ 278.837077][T13487] vlan3: entered promiscuous mode [ 278.842412][T13487] bond7: entered promiscuous mode [ 278.861115][T13487] bond8: entered promiscuous mode [ 278.971980][T13514] netlink: 'syz.4.1922': attribute type 13 has an invalid length. [ 279.031249][T13514] netlink: 'syz.4.1922': attribute type 17 has an invalid length. [ 279.065734][T13514] netlink: 'syz.4.1922': attribute type 27 has an invalid length. [ 279.202100][T13526] netlink: 'syz.0.1923': attribute type 13 has an invalid length. [ 279.225916][T13526] netlink: 'syz.0.1923': attribute type 17 has an invalid length. [ 279.260572][T13526] gre0: left promiscuous mode [ 279.265368][T13526] gre0: left allmulticast mode [ 279.285237][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 279.338256][T13526] team0: left promiscuous mode [ 279.354803][T13526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.880762][T13558] tipc: Started in network mode [ 279.890320][T13558] tipc: Node identity 080211, cluster identity 4711 [ 279.898494][T13558] tipc: Enabled bearer , priority 0 [ 279.915091][T13560] tipc: Resetting bearer [ 280.056469][T13575] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1936'. [ 280.124111][T13576] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1937'. [ 280.199818][T13584] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1938'. [ 280.478216][T13607] netlink: 'syz.1.1942': attribute type 12 has an invalid length. [ 280.723986][T13566] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 280.915683][ T5922] tipc: Node number set to 134353152 [ 283.283184][T13589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.529739][T13644] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 283.559519][T13644] __nla_validate_parse: 2 callbacks suppressed [ 283.559542][T13644] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1951'. [ 283.595817][T13644] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1951'. [ 283.617916][T13655] netlink: 'syz.2.1953': attribute type 9 has an invalid length. [ 283.654191][T13661] netlink: 'syz.4.1956': attribute type 9 has an invalid length. [ 283.729719][T13665] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 283.741902][T13665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1953'. [ 283.993533][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1960'. [ 284.024144][T13678] vlan2: entered allmulticast mode [ 284.040260][T13678] bridge4: entered allmulticast mode [ 284.264430][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 284.522678][T13710] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 285.280599][T13746] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 285.707003][T13753] batman_adv: batadv0: Adding interface: dummy0 [ 285.727729][T13753] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 285.784962][T13753] batman_adv: batadv0: Interface activated: dummy0 [ 285.899791][T13755] batadv0: mtu less than device minimum [ 285.948700][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.960595][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.972419][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.984236][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.996061][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.007872][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.019683][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.031507][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.043305][T13755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.300366][T13762] x_tables: duplicate underflow at hook 3 [ 286.341241][T13762] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1982'. [ 286.386144][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1981'. [ 286.520807][T13772] netlink: 'syz.3.1985': attribute type 4 has an invalid length. [ 286.745111][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 286.838152][T13784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.902774][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 287.967675][T13835] netlink: 'syz.0.2001': attribute type 10 has an invalid length. [ 287.979193][T13835] bridge0: port 1(team0) entered disabled state [ 287.987674][T13835] team0: left allmulticast mode [ 287.992679][T13835] bridge0: port 1(team0) entered disabled state [ 288.010173][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.068353][T13839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1999'. [ 289.167588][T13872] syzkaller0: entered promiscuous mode [ 289.173105][T13872] syzkaller0: entered allmulticast mode [ 289.219335][T13872] tipc: Enabled bearer , priority 0 [ 289.229283][T13872] __nla_validate_parse: 3 callbacks suppressed [ 289.229303][T13872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2010'. [ 289.265938][T13871] tipc: Resetting bearer [ 289.309555][T13871] tipc: Disabling bearer [ 289.564728][T13885] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 289.678606][T13885] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 290.185310][T13927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2023'. [ 290.416867][T13936] xt_TCPMSS: Only works on TCP SYN packets [ 290.486833][T13932] netlink: 'syz.2.2026': attribute type 2 has an invalid length. [ 290.606785][T13950] ksmbd: Unknown IPC event: 0, ignore. [ 290.805461][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2035'. [ 291.372291][T13983] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 291.409437][T13983] bond8 (unregistering): Released all slaves [ 291.503919][T13997] net_ratelimit: 11 callbacks suppressed [ 291.503943][T13997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.668796][T14002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2048'. [ 291.755074][T14006] syzkaller0: entered promiscuous mode [ 291.833489][T14009] netlink: 'syz.1.2052': attribute type 10 has an invalid length. [ 291.856591][T14009] netlink: 'syz.1.2052': attribute type 10 has an invalid length. [ 292.038081][T14020] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 292.374193][T14039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2059'. [ 292.397340][T14040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2059'. [ 292.482978][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 292.670470][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2065'. [ 292.822477][T14059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2067'. [ 293.200805][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 293.274458][T14071] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 293.468343][T14077] netlink: 'syz.3.2075': attribute type 18 has an invalid length. [ 293.924033][T14104] netlink: 'syz.2.2081': attribute type 2 has an invalid length. [ 294.082628][T14111] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 294.098441][T14111] netlink: 'syz.3.2083': attribute type 2 has an invalid length. [ 294.354999][T14128] netlink: 'syz.3.2087': attribute type 11 has an invalid length. [ 294.440036][T14131] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 294.712911][T14142] __nla_validate_parse: 8 callbacks suppressed [ 294.712932][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2093'. [ 294.729776][T14144] batadv_slave_1: entered promiscuous mode [ 294.737727][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 294.787135][T14144] batadv_slave_1 (unregistering): left promiscuous mode [ 294.798333][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.866144][T14150] tun0: tun_chr_ioctl cmd 1074025673 [ 295.244230][T14168] tipc: Enabled bearer , priority 0 [ 295.261048][T14167] syz.3.2100 (14167) used obsolete PPPIOCDETACH ioctl [ 295.278309][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2100'. [ 295.336653][T14170] sctp: [Deprecated]: syz.4.2099 (pid 14170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.336653][T14170] Use struct sctp_sack_info instead [ 295.482684][T14168] syzkaller0: entered promiscuous mode [ 295.489643][T14168] syzkaller0: entered allmulticast mode [ 295.496148][T14168] tipc: Resetting bearer [ 295.570897][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 295.734138][T14192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2106'. [ 295.840801][ T5929] tipc: Resetting bearer [ 295.854714][T14166] tipc: Resetting bearer [ 297.583856][T14166] tipc: Disabling bearer [ 297.632482][T14204] bridge5: entered promiscuous mode [ 297.665727][T14204] bridge5: entered allmulticast mode [ 297.674623][T14204] team0: Port device bridge5 added [ 297.683264][T14207] bridge0: port 1(team0) entered blocking state [ 297.714732][T14207] bridge0: port 1(team0) entered disabled state [ 297.724838][T14207] team0: entered allmulticast mode [ 297.748260][T14241] team0: entered promiscuous mode [ 297.753433][T14241] team_slave_1: entered promiscuous mode [ 297.761826][T14241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 297.796159][T14241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2112'. [ 297.956885][T14257] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 298.363037][T14286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.417095][T14286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2124'. [ 298.499246][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 298.672472][T14303] IPVS: set_ctl: invalid protocol: 2 172.30.1.1:20003 [ 298.860527][T14311] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2130'. [ 299.262141][T14342] netlink: 'syz.4.2137': attribute type 27 has an invalid length. [ 299.506515][T14349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.528375][T14349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.955463][T14348] tap0: tun_chr_ioctl cmd 2147767521 [ 299.970523][T14376] netlink: zone id is out of range [ 299.979132][T14372] netlink: 'syz.4.2145': attribute type 1 has an invalid length. [ 300.002511][T14374] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 300.100062][T14376] netlink: 'syz.0.2147': attribute type 11 has an invalid length. [ 300.143576][T14380] sch_fq: defrate 0 ignored. [ 300.402509][T14389] netlink: 212112 bytes leftover after parsing attributes in process `syz.4.2151'. [ 300.714601][T14401] netlink: 'syz.4.2155': attribute type 62 has an invalid length. [ 300.783085][T14403] syzkaller0: entered promiscuous mode [ 300.795676][T14403] syzkaller0: entered allmulticast mode [ 301.028722][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2159'. [ 301.117860][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2159'. [ 301.149015][T14415] nbd: device at index 64 is going down [ 301.278872][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 301.292567][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 301.303367][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 301.318033][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 301.347554][T14314] udevd[14314]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.449628][T14433] x_tables: duplicate underflow at hook 1 [ 301.611635][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 301.646612][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 301.938397][T14467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2172'. [ 302.128070][T14476] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 302.138724][T14476] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 303.002312][T14516] netlink: 'syz.3.2187': attribute type 8 has an invalid length. [ 303.525027][T14500] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 303.709482][T14549] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 304.214269][T14575] IPVS: length: 221 != 8 [ 304.915069][T14605] lo speed is unknown, defaulting to 1000 [ 304.921674][T14605] lo speed is unknown, defaulting to 1000 [ 304.929322][T14605] lo speed is unknown, defaulting to 1000 [ 304.952321][T14605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 304.988400][T14609] netlink: 'syz.0.2212': attribute type 2 has an invalid length. [ 305.032866][T14607] sit3: entered allmulticast mode [ 305.052473][T14605] lo speed is unknown, defaulting to 1000 [ 305.067195][T14605] lo speed is unknown, defaulting to 1000 [ 305.075766][T14605] lo speed is unknown, defaulting to 1000 [ 305.098741][T14605] lo speed is unknown, defaulting to 1000 [ 305.118225][T14605] lo speed is unknown, defaulting to 1000 [ 305.137530][T14605] lo speed is unknown, defaulting to 1000 [ 305.240234][T14619] xt_hashlimit: size too large, truncated to 1048576 [ 305.412610][T14627] netlink: 'syz.3.2218': attribute type 31 has an invalid length. [ 305.479213][T14629] __nla_validate_parse: 21 callbacks suppressed [ 305.479233][T14629] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2219'. [ 305.497029][T14629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2219'. [ 305.534551][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2219'. [ 305.569684][T14629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2219'. [ 305.683207][T14638] tipc: MTU too low for tipc bearer [ 305.741929][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'. [ 305.770497][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2221'. [ 305.808579][T14648] netlink: 'syz.3.2224': attribute type 32 has an invalid length. [ 306.243418][T14667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2227'. [ 306.551375][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 306.563830][T14674] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2229'. [ 306.691615][T14679] lo speed is unknown, defaulting to 1000 [ 306.811822][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2234'. [ 306.905067][T14689] ip6gretap2: entered promiscuous mode [ 306.914304][T14689] ip6gretap2: entered allmulticast mode [ 307.288048][T14703] sctp: [Deprecated]: syz.1.2239 (pid 14703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.288048][T14703] Use struct sctp_sack_info instead [ 307.949391][T14706] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 307.981642][T14708] rdma_op ffff88807b0f89f0 conn xmit_rdma 0000000000000000 [ 308.294357][T14735] Cannot find del_set index 4 as target [ 308.373545][T14738] tipc: Started in network mode [ 308.390513][T14738] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 308.427931][T14738] tipc: Enabling of bearer rejected, failed to enable media [ 308.470028][T14746] openvswitch: netlink: Unknown nsh attribute 0 [ 308.488741][T14747] netlink: 'syz.4.2250': attribute type 9 has an invalid length. [ 308.600739][T14738] tipc: Resetting bearer [ 309.211158][T14781] veth1: entered promiscuous mode [ 309.226800][T14781] veth1: entered allmulticast mode [ 309.341144][T14784] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 309.687906][T14803] netlink: 'syz.4.2257': attribute type 1 has an invalid length. [ 309.754627][T14798] syzkaller0: entered promiscuous mode [ 309.836069][T14798] syzkaller0: entered allmulticast mode [ 309.902372][T14809] erspan2: entered allmulticast mode [ 310.456670][T14832] netlink: 'syz.1.2262': attribute type 21 has an invalid length. [ 310.476730][T14833] netlink: 'syz.1.2262': attribute type 21 has an invalid length. [ 310.493017][T14832] __nla_validate_parse: 77 callbacks suppressed [ 310.493038][T14832] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2262'. [ 310.525695][T14833] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2262'. [ 310.942797][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 312.386086][T14833] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2262'. [ 312.395249][T14832] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2262'. [ 312.537275][T14843] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 312.700120][T14856] lo speed is unknown, defaulting to 1000 [ 312.712951][T14854] netlink: 'syz.3.2268': attribute type 2 has an invalid length. [ 312.757896][T14854] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2268'. [ 313.265806][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 313.475423][T14857] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 313.782015][T14910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2277'. [ 313.792367][T14910] nbd: must specify at least one socket [ 313.869868][T14912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2278'. [ 314.357752][T14928] lo speed is unknown, defaulting to 1000 [ 314.403030][T14944] netlink: 'syz.3.2284': attribute type 1 has an invalid length. [ 314.448625][T14944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2284'. [ 314.539117][ T30] audit: type=1804 audit(1773011880.121:5): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2285" name="/newroot/433/memory.events" dev="tmpfs" ino=2232 res=1 errno=0 [ 314.606354][ T30] audit: type=1800 audit(1773011880.141:6): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2285" name="memory.events" dev="tmpfs" ino=2232 res=0 errno=0 [ 314.689967][T14957] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 314.718765][T14949] bond0: (slave sit0): Error: Device type is different from other slaves [ 314.896640][T14952] lo speed is unknown, defaulting to 1000 [ 315.317157][T14928] dvmrp0: entered allmulticast mode [ 315.456498][T14979] dvmrp0: left allmulticast mode [ 315.502675][T14992] xt_CT: No such helper "netbios-ns" [ 315.612166][T14999] netlink: 'syz.2.2291': attribute type 29 has an invalid length. [ 315.621019][T15002] netlink: 'syz.2.2291': attribute type 29 has an invalid length. [ 315.643205][T14999] tipc: Enabling of bearer rejected, failed to enable media [ 315.682435][T14999] __nla_validate_parse: 3 callbacks suppressed [ 315.682457][T14999] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2291'. [ 315.750328][T15013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2293'. [ 315.820829][T15013] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2293'. [ 315.854316][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2293'. [ 315.886256][T15013] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2293'. [ 315.904665][T15013] openvswitch: netlink: IPv4 tun info is not correct [ 315.913889][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 316.115281][T15031] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 316.123842][T15031] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2299'. [ 316.135419][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 316.153148][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 316.254264][T15036] veth0_to_bridge: entered promiscuous mode [ 316.262137][T15036] veth0_to_bridge: left promiscuous mode [ 316.331901][T15040] bridge_slave_1: entered promiscuous mode [ 316.362308][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2302'. [ 316.683169][T15060] syzkaller1: entered promiscuous mode [ 316.699235][T15060] syzkaller1: entered allmulticast mode [ 318.101029][T15110] netlink: 'syz.2.2324': attribute type 1 has an invalid length. [ 318.133093][T15105] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.315934][T15118] netlink: 'syz.2.2327': attribute type 4 has an invalid length. [ 318.687256][T15148] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 318.698782][T15148] netlink: 'syz.3.2336': attribute type 10 has an invalid length. [ 318.706883][T15148] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 318.714697][T15148] bond0: (slave wlan1): Opening slave failed [ 318.830859][T15154] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 318.883389][T15154] bond14: entered allmulticast mode [ 319.370439][T15190] syzkaller1: entered promiscuous mode [ 319.385906][T15190] syzkaller1: entered allmulticast mode [ 319.438410][T15192] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 320.032092][T15238] netlink: 'syz.3.2356': attribute type 13 has an invalid length. [ 320.092443][T15238] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 320.112358][T15238] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 320.568970][T15264] geneve6: entered promiscuous mode [ 320.614682][ T6870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.637125][ T6870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.651308][ T6870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.727406][ T6870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.907607][T15283] lo speed is unknown, defaulting to 1000 [ 321.011685][T15292] netlink: 'syz.1.2372': attribute type 2 has an invalid length. [ 321.185470][T15296] __nla_validate_parse: 30 callbacks suppressed [ 321.185490][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 321.732024][T15304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2376'. [ 322.048987][T15322] geneve3: entered promiscuous mode [ 322.062176][T15303] lo speed is unknown, defaulting to 1000 [ 322.079636][T15324] netlink: 'syz.3.2381': attribute type 2 has an invalid length. [ 322.281827][T15328] netlink: 'syz.3.2384': attribute type 5 has an invalid length. [ 322.416661][T15336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2382'. [ 322.483295][T15337] IPv6: sit2: Disabled Multicast RS [ 322.514951][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2382'. [ 322.536209][T15348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2389'. [ 322.656362][T15348] netlink: 'syz.0.2389': attribute type 5 has an invalid length. [ 322.709996][T15348] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 322.727498][T12482] lo speed is unknown, defaulting to 1000 [ 322.851354][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2393'. [ 322.875476][T15363] syzkaller1: entered promiscuous mode [ 322.881619][T15363] syzkaller1: entered allmulticast mode [ 323.006359][T15373] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2396'. [ 323.184985][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'. [ 323.194584][T15389] 8021q: VLANs not supported on nlmon0 [ 323.237655][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2404'. [ 323.437842][T15402] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2408'. [ 323.461831][T15402] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 323.490414][T15405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.497729][T15405] IPv6: NLM_F_CREATE should be set when creating new route [ 323.505040][T15405] IPv6: NLM_F_CREATE should be set when creating new route [ 323.695423][T15416] netlink: 'syz.4.2413': attribute type 11 has an invalid length. [ 323.825264][T15420] netlink: 'syz.4.2415': attribute type 1 has an invalid length. [ 323.893294][T15420] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.935408][T15422] bond9: (slave gretap1): making interface the new active one [ 323.961009][T15422] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 323.981651][T15429] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 324.075426][T15420] bond9 (unregistering): (slave gretap1): Releasing active interface [ 324.090911][T15420] bond9 (unregistering): Released all slaves [ 324.217451][T15432] chnl_net:caif_netlink_parms(): no params data found [ 324.324992][T15442] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 324.846077][T15479] netlink: 'syz.1.2429': attribute type 12 has an invalid length. [ 324.908616][T15479] netlink: 'syz.1.2429': attribute type 12 has an invalid length. [ 324.917144][T15481] netlink: 'syz.3.2430': attribute type 2 has an invalid length. [ 325.166131][T15499] xt_l2tp: missing protocol rule (udp|l2tpip) [ 325.287917][T15463] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 325.318529][T15463] bond1 (unregistering): Released all slaves [ 325.679451][T15511] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 325.734223][T15511] bond11: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 325.774475][T15511] veth7: entered promiscuous mode [ 325.817482][T15516] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.826916][ T6868] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 325.947457][T14978] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 326.073088][T15527] ip6gretap0: entered promiscuous mode [ 326.088412][T15527] ip6gretap0: left promiscuous mode [ 326.278055][T15543] xt_ecn: cannot match TCP bits for non-tcp packets [ 326.519852][T15560] __nla_validate_parse: 16 callbacks suppressed [ 326.519868][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 326.539927][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 326.708359][T15578] validate_nla: 4 callbacks suppressed [ 326.708378][T15578] netlink: 'syz.4.2454': attribute type 8 has an invalid length. [ 326.739704][T15578] Cannot find del_set index 2 as target [ 326.866604][T15586] netlink: 'syz.0.2458': attribute type 21 has an invalid length. [ 326.874694][T15586] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2458'. [ 326.895209][T15586] netlink: 'syz.0.2458': attribute type 4 has an invalid length. [ 326.903587][T15586] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2458'. [ 327.017907][T15584] syzkaller0: entered promiscuous mode [ 327.023545][T15584] syzkaller0: entered allmulticast mode [ 327.034549][T15595] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2460'. [ 327.045581][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2460'. [ 327.198948][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2464'. [ 327.601141][T15615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.732782][T15608] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2464'. [ 328.894856][T15625] tipc: Enabling of bearer rejected, failed to enable media [ 328.906390][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2468'. [ 329.009200][T15623] wg1: entered promiscuous mode [ 329.025329][T15623] wg1: entered allmulticast mode [ 329.031999][T15636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2470'. [ 329.087488][T15639] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 329.100602][T15641] block nbd0: Unsupported socket: should be TCP or UNIX. [ 329.158686][T15635] netlink: 'syz.4.2473': attribute type 83 has an invalid length. [ 329.242078][T15645] bond8: (slave veth13): Enslaving as an active interface with a down link [ 329.261861][T15650] .`: (slave dummy0): Releasing backup interface [ 329.277534][T15650] bond8: (slave dummy0): making interface the new active one [ 329.286990][T15650] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 329.320126][T15639] bond8: (slave dummy0): Releasing active interface [ 329.431265][T15655] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 329.502836][T15655] bond9: entered promiscuous mode [ 329.509833][T15655] bond9: entered allmulticast mode [ 329.515500][T15655] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.900451][T15685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.977230][T15690] ipt_REJECT: TCP_RESET invalid for non-tcp [ 330.209731][T15714] netlink: 'syz.3.2498': attribute type 21 has an invalid length. [ 330.226221][T15714] netlink: 'syz.3.2498': attribute type 21 has an invalid length. [ 330.274246][T15714] netlink: 'syz.3.2498': attribute type 21 has an invalid length. [ 330.288087][T15717] tipc: Enabled bearer , priority 0 [ 330.316972][T15714] netlink: 'syz.3.2498': attribute type 21 has an invalid length. [ 330.421456][T15710] syzkaller0: entered promiscuous mode [ 330.438054][T15710] syzkaller0: entered allmulticast mode [ 330.452173][T15710] tipc: Resetting bearer [ 330.490478][T15705] bond1: (slave lo): Releasing backup interface [ 330.503208][T15705] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 330.580064][T15705] bond8: (slave macvlan2): Releasing backup interface [ 330.589156][T15705] veth0_to_bond: left allmulticast mode [ 330.596770][T15705] veth0_to_bond: left promiscuous mode [ 330.611795][T15705] bond9: (slave geneve2): Releasing active interface [ 330.644656][T15705] bond10: (slave veth3): Releasing active interface [ 330.667323][T15705] bond11: (slave ip6gretap0): Removing an active aggregator [ 330.675442][T15705] bond11: (slave ip6gretap0): Releasing backup interface [ 330.690532][T15708] tipc: Resetting bearer [ 332.133344][T15708] tipc: Disabling bearer [ 332.182644][T15726] syzkaller0: entered promiscuous mode [ 332.188475][T15726] syzkaller0: entered allmulticast mode [ 332.207723][T14979] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 332.237721][T14979] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 332.288154][T15751] __nla_validate_parse: 119 callbacks suppressed [ 332.288174][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 332.316637][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 333.937442][T14979] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 333.946413][T14979] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 333.959444][T15775] validate_nla: 4 callbacks suppressed [ 333.959461][T15775] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 334.076210][T15778] netlink: 'syz.2.2510': attribute type 15 has an invalid length. [ 334.262202][T15795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2516'. [ 334.302391][T15797] gretap0: entered promiscuous mode [ 334.308727][T15797] vlan3: entered promiscuous mode [ 334.368766][T15799] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 334.386544][ T9] syzkaller1: tun_net_xmit 90 [ 334.423193][T15799] syzkaller1: Linktype set failed because interface is up [ 334.474689][T15812] xt_hashlimit: max too large, truncated to 1048576 [ 334.641317][T15821] siw: device registration error -23 [ 334.710901][T15823] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2524'. [ 334.749819][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 334.788277][T15827] netlink: 'syz.2.2525': attribute type 1 has an invalid length. [ 334.817346][T15831] netlink: 'syz.3.2527': attribute type 4 has an invalid length. [ 334.817346][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 334.860978][T15827] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 334.904811][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 335.121210][T15858] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2536'. [ 335.165904][T15858] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 335.185974][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2536'. [ 335.210811][T15858] SET target dimension over the limit! [ 335.220749][T15850] bond0: left promiscuous mode [ 335.265504][T15861] lo speed is unknown, defaulting to 1000 [ 335.470687][T15873] bond12: entered promiscuous mode [ 335.501740][T15850] lo speed is unknown, defaulting to 1000 [ 335.633825][T15878] vcan0: entered promiscuous mode [ 335.649457][T15878] vcan0: entered allmulticast mode [ 335.662933][T15878] bond12: (slave vcan0): The slave device specified does not support setting the MAC address [ 335.682729][T15878] bond12: (slave vcan0): Error -95 calling set_mac_address [ 335.734925][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2545'. [ 336.283648][T15906] "syz.4.2550" (15906) uses obsolete ecb(arc4) skcipher [ 336.372935][T15908] lo speed is unknown, defaulting to 1000 [ 336.443565][ T5141] block nbd0: Receive control failed (result -104) [ 337.257866][T15960] netlink: 'syz.0.2562': attribute type 5 has an invalid length. [ 337.281038][T15960] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 337.308674][T15963] "syz.2.2564" (15963) uses obsolete ecb(arc4) skcipher [ 337.345414][T15961] netlink: 'syz.4.2563': attribute type 16 has an invalid length. [ 337.359529][T15961] netlink: 'syz.4.2563': attribute type 17 has an invalid length. [ 337.385937][T15961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.459470][T15973] __nla_validate_parse: 5 callbacks suppressed [ 337.459492][T15973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 337.568214][T15980] erspan0: entered promiscuous mode [ 337.671645][T15983] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2569'. [ 337.688888][T15983] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 337.727817][T15983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2569'. [ 338.032759][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2573'. [ 338.369375][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 338.369401][T16018] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 338.393824][T16018] openvswitch: netlink: Message has 8 unknown bytes. [ 338.412925][T16016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2579'. [ 338.434538][T16024] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 338.483635][T16024] tunl0: Caught tx_queue_len zero misconfig [ 338.548344][T16016] syzkaller1: entered promiscuous mode [ 338.553900][T16016] syzkaller1: entered allmulticast mode [ 338.791558][T16044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2584'. [ 339.092290][T16074] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.2593'. [ 339.116442][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'. [ 339.126097][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'. [ 339.207631][T16082] sock: sock_timestamping_bind_phc: sock not bind to device [ 339.237829][T16082] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 339.355333][T16082] 8021q: adding VLAN 0 to HW filter on device bond9 [ 339.434988][T16095] bond9: (slave geneve4): making interface the new active one [ 339.476911][T16095] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 339.487010][ T6861] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.517289][ T6861] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.528589][ T6861] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 339.539873][ T6861] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.512698][T16160] mac80211_hwsim hwsim4 wlan1: Caught tx_queue_len zero misconfig [ 340.529135][T16160] netlink: 'syz.3.2618': attribute type 3 has an invalid length. [ 340.560829][T16162] netlink: 'syz.2.2619': attribute type 21 has an invalid length. [ 340.585728][T16162] netlink: 'syz.2.2619': attribute type 4 has an invalid length. [ 340.657522][T16162] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 340.804975][T16170] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 340.862150][T16170] bond9 (unregistering): Released all slaves [ 341.051264][ T6861] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.100845][ T6861] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.130674][ T6861] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.176269][ T6861] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.399843][T16189] lo speed is unknown, defaulting to 1000 [ 341.667749][T16200] lo speed is unknown, defaulting to 1000 [ 342.079683][T16232] ip6tnl0: Caught tx_queue_len zero misconfig [ 342.138100][T16235] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 342.212383][T16237] x_tables: duplicate underflow at hook 1 [ 342.259074][T16239] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 342.334799][T16239] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.411337][T16245] bond9: (slave veth17): Enslaving as an active interface with a down link [ 342.502683][T16241] bond9: (slave veth19): Enslaving as an active interface with a down link [ 342.732320][T16267] netlink: 'syz.0.2647': attribute type 11 has an invalid length. [ 343.009862][T16275] lo speed is unknown, defaulting to 1000 [ 343.199957][T16288] netlink: 'syz.0.2653': attribute type 3 has an invalid length. [ 343.244874][T16288] netlink: 'syz.0.2653': attribute type 3 has an invalid length. [ 343.344784][T16300] __nla_validate_parse: 11 callbacks suppressed [ 343.344806][T16300] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2656'. [ 344.138193][T16353] dvmrp1: entered allmulticast mode [ 344.346828][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 344.457152][T16377] syzkaller0: entered promiscuous mode [ 344.463060][T16377] syzkaller0: entered allmulticast mode [ 344.613232][T16383] ip6tnl5: entered promiscuous mode [ 344.629359][T16383] ip6tnl5: entered allmulticast mode [ 345.050344][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2682'. [ 346.410492][T16394] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 346.689593][T16426] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2689'. [ 346.860149][T16425] bridge0: left allmulticast mode [ 346.881599][T16425] team0: left promiscuous mode [ 346.891511][T16425] team_slave_1: left promiscuous mode [ 346.909667][T16425] batadv0: left promiscuous mode [ 346.933246][T16425] veth1: left promiscuous mode [ 346.941198][T16425] veth1: left allmulticast mode [ 347.020624][T16425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.137988][T16425] bond1: left allmulticast mode [ 347.143216][T16425] bridge3: left allmulticast mode [ 347.165391][T16425] ip6gretap2: left allmulticast mode [ 347.204010][T16425] vlan2: left promiscuous mode [ 347.209419][T16425] bond5: left promiscuous mode [ 347.214310][T16425] bridge5: left promiscuous mode [ 347.220132][T16425] vlan2: left allmulticast mode [ 347.225254][T16425] bond5: left allmulticast mode [ 347.233173][T16425] bridge5: left allmulticast mode [ 347.257650][T16425] geneve3: left promiscuous mode [ 347.326075][T14978] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.355954][T14978] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.385502][T14978] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.394417][T14978] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.436976][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 347.480524][T14978] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.490018][T16453] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 347.507663][T14978] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.532869][T14978] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.546169][T14978] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.565899][T16449] lo speed is unknown, defaulting to 1000 [ 347.719693][T16463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.299634][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2705'. [ 348.328318][T16505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2706'. [ 349.241839][T16534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2712'. [ 349.274912][T16528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2710'. [ 349.285474][T16528] netlink: 'syz.1.2710': attribute type 1 has an invalid length. [ 349.294962][T16528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2710'. [ 349.760076][T16543] netlink: 'syz.2.2714': attribute type 10 has an invalid length. [ 350.728981][T16543] veth0_vlan: left promiscuous mode [ 350.735075][T16543] veth0_vlan: entered promiscuous mode [ 350.788596][T16543] team0: Device veth0_vlan failed to register rx_handler [ 350.867634][T16563] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2716'. [ 350.999434][T16569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2718'. [ 351.052696][T16579] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2722'. [ 351.213892][T16585] lo: Caught tx_queue_len zero misconfig [ 351.315423][T16600] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 351.433428][T16606] netlink: 'syz.1.2730': attribute type 1 has an invalid length. [ 351.442887][T16606] netlink: 760 bytes leftover after parsing attributes in process `syz.1.2730'. [ 351.459617][T16607] netlink: 'syz.1.2730': attribute type 1 has an invalid length. [ 351.477438][T16607] netlink: 760 bytes leftover after parsing attributes in process `syz.1.2730'. [ 351.516577][T16605] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2730'. [ 351.545844][T16605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2730'. [ 352.202093][T16651] netlink: 'syz.1.2741': attribute type 1 has an invalid length. [ 352.554328][T16668] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 352.563737][T16668] netlink: 'syz.3.2746': attribute type 2 has an invalid length. [ 352.657814][T16675] vlan5: entered promiscuous mode [ 352.663104][T16675] bridge0: entered promiscuous mode [ 352.670165][T16659] [ 352.672534][T16659] ====================================================== [ 352.679583][T16659] WARNING: possible circular locking dependency detected [ 352.686787][T16659] syzkaller #0 Not tainted [ 352.691228][T16659] ------------------------------------------------------ [ 352.698268][T16659] syz.1.2743/16659 is trying to acquire lock: [ 352.704373][T16659] ffffffff8e85f168 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 352.714114][T16659] [ 352.714114][T16659] but task is already holding lock: [ 352.721516][T16659] ffff888026c15628 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 352.732013][T16659] [ 352.732013][T16659] which lock already depends on the new lock. [ 352.732013][T16659] [ 352.742445][T16659] [ 352.742445][T16659] the existing dependency chain (in reverse order) is: [ 352.751475][T16659] [ 352.751475][T16659] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 352.760228][T16659] blk_alloc_queue+0x546/0x680 [ 352.765626][T16659] __blk_mq_alloc_disk+0x197/0x390 [ 352.771439][T16659] nbd_dev_add+0x499/0xb50 [ 352.776410][T16659] nbd_init+0x168/0x1f0 [ 352.781162][T16659] do_one_initcall+0x250/0x8d0 [ 352.786486][T16659] do_initcall_level+0x104/0x190 [ 352.792014][T16659] do_initcalls+0x59/0xa0 [ 352.796896][T16659] kernel_init_freeable+0x2a6/0x3e0 [ 352.802642][T16659] kernel_init+0x1d/0x1d0 [ 352.807663][T16659] ret_from_fork+0x51e/0xb90 [ 352.812800][T16659] ret_from_fork_asm+0x1a/0x30 [ 352.818118][T16659] [ 352.818118][T16659] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 352.825364][T16659] fs_reclaim_acquire+0x71/0x100 [ 352.830853][T16659] prepare_alloc_pages+0x152/0x650 [ 352.836505][T16659] __alloc_frozen_pages_noprof+0x12f/0x380 [ 352.842856][T16659] __alloc_pages_noprof+0xa/0x30 [ 352.848337][T16659] pcpu_populate_chunk+0x182/0xb30 [ 352.853990][T16659] pcpu_alloc_noprof+0xc6c/0x19c0 [ 352.859554][T16659] xt_percpu_counter_alloc+0x161/0x220 [ 352.865660][T16659] translate_table+0x1332/0x20b0 [ 352.871232][T16659] ip6t_register_table+0x11b/0x800 [ 352.876887][T16659] ip6table_raw_table_init+0x54/0x80 [ 352.882760][T16659] xt_find_table_lock+0x30c/0x3e0 [ 352.888409][T16659] xt_request_find_table_lock+0x26/0x100 [ 352.894603][T16659] do_ip6t_get_ctl+0x716/0x1230 [ 352.900030][T16659] nf_getsockopt+0x26e/0x290 [ 352.905268][T16659] ipv6_getsockopt+0x1fd/0x2b0 [ 352.910666][T16659] do_sock_getsockopt+0x2d3/0x3f0 [ 352.916339][T16659] __x64_sys_getsockopt+0x1a4/0x240 [ 352.922089][T16659] do_syscall_64+0x14d/0xf80 [ 352.927220][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.933655][T16659] [ 352.933655][T16659] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 352.941418][T16659] __lock_acquire+0x15a5/0x2cf0 [ 352.946815][T16659] lock_acquire+0xf0/0x2e0 [ 352.951773][T16659] __mutex_lock+0x19f/0x1300 [ 352.956909][T16659] pcpu_alloc_noprof+0x218/0x19c0 [ 352.962510][T16659] sbitmap_init_node+0x1e1/0x640 [ 352.968127][T16659] sbitmap_queue_init_node+0x3e/0x4d0 [ 352.974095][T16659] blk_mq_init_tags+0x15c/0x2d0 [ 352.979531][T16659] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 352.985536][T16659] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 352.991892][T16659] nbd_start_device+0x17f/0xb10 [ 352.997346][T16659] nbd_genl_connect+0x165b/0x1cf0 [ 353.002922][T16659] genl_family_rcv_msg_doit+0x22a/0x330 [ 353.009130][T16659] genl_rcv_msg+0x61c/0x7a0 [ 353.014192][T16659] netlink_rcv_skb+0x232/0x4b0 [ 353.019517][T16659] genl_rcv+0x28/0x40 [ 353.024055][T16659] netlink_unicast+0x80f/0x9b0 [ 353.029372][T16659] netlink_sendmsg+0x813/0xb40 [ 353.034691][T16659] ____sys_sendmsg+0x972/0x9f0 [ 353.040008][T16659] ___sys_sendmsg+0x2a5/0x360 [ 353.045247][T16659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.050742][T16659] do_syscall_64+0x14d/0xf80 [ 353.055885][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.062338][T16659] [ 353.062338][T16659] other info that might help us debug this: [ 353.062338][T16659] [ 353.072593][T16659] Chain exists of: [ 353.072593][T16659] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 353.072593][T16659] [ 353.086293][T16659] Possible unsafe locking scenario: [ 353.086293][T16659] [ 353.093870][T16659] CPU0 CPU1 [ 353.099252][T16659] ---- ---- [ 353.104641][T16659] lock(&q->q_usage_counter(io)#51); [ 353.110071][T16659] lock(fs_reclaim); [ 353.116633][T16659] lock(&q->q_usage_counter(io)#51); [ 353.124572][T16659] lock(pcpu_alloc_mutex); [ 353.129262][T16659] [ 353.129262][T16659] *** DEADLOCK *** [ 353.129262][T16659] [ 353.137425][T16659] 6 locks held by syz.1.2743/16659: [ 353.142637][T16659] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.150953][T16659] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 353.159947][T16659] #2: ffff8880274129d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 353.171387][T16659] #3: ffff8880274128d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 353.182383][T16659] #4: ffff888026c15628 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 353.193137][T16659] #5: ffff888026c15660 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 353.204151][T16659] [ 353.204151][T16659] stack backtrace: [ 353.210086][T16659] CPU: 0 UID: 0 PID: 16659 Comm: syz.1.2743 Not tainted syzkaller #0 PREEMPT(full) [ 353.210111][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.210123][T16659] Call Trace: [ 353.210132][T16659] [ 353.210234][T16659] dump_stack_lvl+0xe8/0x150 [ 353.210312][T16659] print_circular_bug+0x2e1/0x300 [ 353.210343][T16659] check_noncircular+0x12e/0x150 [ 353.210373][T16659] __lock_acquire+0x15a5/0x2cf0 [ 353.210407][T16659] lock_acquire+0xf0/0x2e0 [ 353.210429][T16659] ? pcpu_alloc_noprof+0x218/0x19c0 [ 353.210482][T16659] __mutex_lock+0x19f/0x1300 [ 353.210500][T16659] ? pcpu_alloc_noprof+0x218/0x19c0 [ 353.210520][T16659] ? stack_depot_save_flags+0x3f3/0x810 [ 353.210545][T16659] ? kasan_save_track+0x4f/0x80 [ 353.210565][T16659] ? kasan_save_track+0x3e/0x80 [ 353.210582][T16659] ? pcpu_alloc_noprof+0x218/0x19c0 [ 353.210600][T16659] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 353.210619][T16659] ? blk_mq_init_tags+0x83/0x2d0 [ 353.210643][T16659] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 353.210661][T16659] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 353.210684][T16659] ? __pfx___mutex_lock+0x10/0x10 [ 353.210699][T16659] ? genl_rcv+0x28/0x40 [ 353.210716][T16659] ? ____sys_sendmsg+0x972/0x9f0 [ 353.210732][T16659] ? ___sys_sendmsg+0x2a5/0x360 [ 353.210759][T16659] pcpu_alloc_noprof+0x218/0x19c0 [ 353.210787][T16659] sbitmap_init_node+0x1e1/0x640 [ 353.210817][T16659] sbitmap_queue_init_node+0x3e/0x4d0 [ 353.210848][T16659] blk_mq_init_tags+0x15c/0x2d0 [ 353.210874][T16659] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 353.210895][T16659] ? kfree+0x1c1/0x630 [ 353.210909][T16659] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 353.210933][T16659] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 353.210963][T16659] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 353.210988][T16659] ? sysfs_add_file_mode_ns+0x259/0x300 [ 353.211015][T16659] nbd_start_device+0x17f/0xb10 [ 353.211045][T16659] ? device_create_file+0xf4/0x1b0 [ 353.211113][T16659] nbd_genl_connect+0x165b/0x1cf0 [ 353.211145][T16659] ? __pfx_nbd_genl_connect+0x10/0x10 [ 353.211175][T16659] ? rcu_is_watching+0x15/0xb0 [ 353.211204][T16659] ? __nla_parse+0x40/0x60 [ 353.211254][T16659] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 353.211277][T16659] genl_family_rcv_msg_doit+0x22a/0x330 [ 353.211299][T16659] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 353.211323][T16659] ? __lock_acquire+0x6b5/0x2cf0 [ 353.211349][T16659] genl_rcv_msg+0x61c/0x7a0 [ 353.211368][T16659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.211385][T16659] ? __pfx_nbd_genl_connect+0x10/0x10 [ 353.211410][T16659] ? __lock_acquire+0x6b5/0x2cf0 [ 353.211437][T16659] netlink_rcv_skb+0x232/0x4b0 [ 353.211461][T16659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.211479][T16659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.211509][T16659] ? down_read+0x272/0x2e0 [ 353.211526][T16659] ? genl_rcv+0xd/0x40 [ 353.211542][T16659] genl_rcv+0x28/0x40 [ 353.211558][T16659] netlink_unicast+0x80f/0x9b0 [ 353.211584][T16659] ? __pfx_netlink_unicast+0x10/0x10 [ 353.211606][T16659] ? netlink_sendmsg+0x650/0xb40 [ 353.211628][T16659] ? skb_put+0x11b/0x210 [ 353.211710][T16659] netlink_sendmsg+0x813/0xb40 [ 353.211739][T16659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.211765][T16659] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.211814][T16659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.211836][T16659] ____sys_sendmsg+0x972/0x9f0 [ 353.211851][T16659] ? futex_unqueue+0x211/0x240 [ 353.211875][T16659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.211895][T16659] ? import_iovec+0x73/0xa0 [ 353.211963][T16659] ___sys_sendmsg+0x2a5/0x360 [ 353.211982][T16659] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.212001][T16659] ? futex_wait+0x29a/0x380 [ 353.212039][T16659] ? __fget_files+0x2a/0x420 [ 353.212070][T16659] ? __fget_files+0x3a0/0x420 [ 353.212100][T16659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.212118][T16659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.212139][T16659] ? rcu_is_watching+0x15/0xb0 [ 353.212168][T16659] do_syscall_64+0x14d/0xf80 [ 353.212185][T16659] ? trace_irq_disable+0x3b/0x150 [ 353.212212][T16659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.212229][T16659] ? clear_bhb_loop+0x40/0x90 [ 353.212249][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.212267][T16659] RIP: 0033:0x7f6cd9b9c799 [ 353.212285][T16659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.212302][T16659] RSP: 002b:00007f6cda9b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.212347][T16659] RAX: ffffffffffffffda RBX: 00007f6cd9e15fa0 RCX: 00007f6cd9b9c799 [ 353.212360][T16659] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 353.212372][T16659] RBP: 00007f6cd9c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 353.212383][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.212394][T16659] R13: 00007f6cd9e16038 R14: 00007f6cd9e15fa0 R15: 00007ffe77273088 [ 353.212415][T16659] [ 353.721722][ T5141] block nbd2: Receive control failed (result -32) [ 353.721734][ T5825] block nbd2: Receive control failed (result -32) [ 353.746324][T16659] nbd2: detected capacity change from 0 to 63 [ 353.753981][T15808] block nbd2: Dead connection, failed to find a fallback [ 353.761292][T15808] block nbd2: shutting down sockets [ 353.766759][T15808] blk_print_req_error: 138 callbacks suppressed [ 353.766776][T15808] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.783156][T15808] buffer_io_error: 138 callbacks suppressed [ 353.783174][T15808] Buffer I/O error on dev nbd2, logical block 0, async page read [ 353.798312][T15808] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.815361][T15808] Buffer I/O error on dev nbd2, logical block 1, async page read [ 353.823396][T15808] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.833067][T15808] Buffer I/O error on dev nbd2, logical block 2, async page read [ 353.841256][T15808] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.851975][T15808] Buffer I/O error on dev nbd2, logical block 3, async page read [ 353.859945][T15808] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.869853][T15808] Buffer I/O error on dev nbd2, logical block 0, async page read [ 353.877722][T15808] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.887421][T15808] Buffer I/O error on dev nbd2, logical block 1, async page read [ 353.895229][T15808] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.905252][T15808] Buffer I/O error on dev nbd2, logical block 2, async page read [ 353.913122][T15808] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.923186][T15808] Buffer I/O error on dev nbd2, logical block 3, async page read [ 353.931477][T15808] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.941081][T15808] Buffer I/O error on dev nbd2, logical block 0, async page read [ 353.949017][T15808] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 353.958977][T15808] Buffer I/O error on dev nbd2, logical block 1, async page read [ 353.967427][T15808] ldm_validate_partition_table(): Disk read failed. [ 353.974448][T15808] Dev nbd2: unable to read RDB block 0 [ 353.980562][T15808] nbd2: unable to read partition table [ 353.989606][T15808] ldm_validate_partition_table(): Disk read failed. [ 353.996727][T15808] Dev nbd2: unable to read RDB block 0 [ 354.002731][T15808] nbd2: unable to read partition table