last executing test programs: 3.41285864s ago: executing program 2 (id=4842): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {}, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030273797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r8, &(0x7f0000000000), 0x0) sendfile(r1, r4, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xfff, 0xcd, &(0x7f0000000580)=""/205, 0x41000, 0x11, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0x9, 0x6}, 0x10, 0x1e49b, r4, 0x1, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x7}], 0x10, 0xffff}, 0x94) 2.447449066s ago: executing program 2 (id=4851): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) listen(r0, 0xfffffffe) 2.32050238s ago: executing program 4 (id=4854): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0x147ae14}, 0xc) 2.14306373s ago: executing program 4 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000011000000630a04ff000000004400000000740000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000400000500c094060000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000180)) 2.128937036s ago: executing program 2 (id=4858): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.097717227s ago: executing program 4 (id=4859): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x5, 0x4, "dd197221"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000400), 0x8) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r9, 0x80, 0x40, 0xffffffff, 0x7ff, {{0x22, 0x4, 0x2, 0x9, 0x88, 0x67, 0x0, 0xf6, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x44, 0x2, [{0x0, 0xf, "a44ad9e563eff3c155df36a37c"}, {0x1, 0x11, "7a1afad85000ec3759ded5627a908f"}, {0x7, 0xf, "d590efb720b6d558d3e914f928"}, {0x1, 0x8, "c25585fe0e0a"}, {0x5, 0x7, "2204229b11"}]}, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast2, 0x84000000}, {@loopback, 0xeb}, {@broadcast, 0x3}]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x7, [0x71aa, 0x6]}]}}}}}) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xb3, 0xab, &(0x7f0000000080)="13a9c9b7aaa831f75db47ddadaf4dd4288a274f543a3f12e975916c795878baa70132b7b9e2a76bb795625936cbd03fb0b18157fe04c9ec203ae1efa7a2747574dfcd71824b5156579636789b59a26ed9fca575907f0315af09ba37bf6499b3c69f336c917708a835cfa5333b89ea81cfd72e52b7c9dce0c0199218ac82de9d59e77e674ea81bd445ce5b0b5d91e3fc8237be1f14d646e312da8fc87326246fdad85db8db3cf78d5e1d14f08dcae4636a94c14", &(0x7f0000000140)=""/171, 0x2, 0x0, 0xe0, 0x27, &(0x7f0000000200)="9924e98e24b291c44ad229d4c623a63388f4ee17cb37c6512c9eebdc33190501fe83bdbe74552940bfec4b207a7851e8befd951f14ea431998e76f4a7f3cf5190e05366b80eef17c5f6269ee08b24da4a965e04f627389342198081e846333c633a0099ca0ae4a804f5c960bb8cedb6a2a9f1ce6415853b9e691535c91a7b5bfe43644ac8dc03a480d43b540422f184c1de4d150422da7cef5daa460fb8786b24d0266d31bde23f6a6f996a159204ecd297900cdada7cb1e2acb1e9b2ee8c8fa12fef5b45ab2d5b3171e5504a097bd0fe551f21de64a5a4c0dfa440b814b9af8", &(0x7f0000000300)="b940e7a09764696841c8300c69e5df256994dd4bb1007fcc3386eff968b35102784d2f9acd6dd3", 0x4, 0x0, 0xf7}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.77239325s ago: executing program 0 (id=4860): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x10, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x40, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x7f, 0x6}, 0x3c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast1}, 0x4, 0x3, 0x3, 0x1}}, 0x26) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 1.713575183s ago: executing program 2 (id=4861): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {}, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030273797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r8, &(0x7f0000000000), 0x0) sendfile(r1, r4, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xfff, 0xcd, &(0x7f0000000580)=""/205, 0x41000, 0x11, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0x9, 0x6}, 0x10, 0x1e49b, r4, 0x1, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x7}], 0x10, 0xffff}, 0x94) 1.659076022s ago: executing program 0 (id=4862): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.566954645s ago: executing program 1 (id=4863): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0xfffffe3e}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.16162731s ago: executing program 1 (id=4866): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0xffffffff, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xfffffffffffffd22}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.16144643s ago: executing program 0 (id=4867): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000300)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f66ee49d20487065dad7cffef082a59ee2b21eb73656d3dc03547888735a17218c20071551f0d51963eca94a593476b25dedb707e7b8ce8b652bc423029d796b484ee048820f540c45770a40a143a1596e1fbc57e45bd84e16556ffb7990bfd000073126510261a98fad73feacc4eb3c3fad519b362e5307e1e79c6b13c4527aa95f952e19f71b11aefb68882d9fa2fec0fbacebffab318cfdcf33eceab48459926966bd946f4fdaaac", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 1.160511567s ago: executing program 4 (id=4868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000140), 0x4) 1.032095764s ago: executing program 1 (id=4870): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000010010100dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000018001680140001801000060059680000fbffffff070000000500110006000000"], 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r9, &(0x7f0000000480)={&(0x7f00000000c0)={0x2c, 0x0, r7, 0xe}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)="fc6005e276143bf89867c1155fd75704525d0735ae0f75a49df859767eb13518b130842a3865f9cd326b32ab9b6f2793200db825c086adc27bfd7412467e8e19bf4e1396370a7fd33ecdaed3b960c835", 0x50}, {&(0x7f0000000200)="2820d22a4e24b873955738ff3ff49b9a5d5378d55a064922", 0x20}, {&(0x7f0000000300)="0ee4ee745d49098bc8a5efe86c0ed7115ec2be9589ce8b7f3e79e55a988342a367befe44579d4179fc719f81c3a9357fc1ac3eb499f1f007bac0082950a5e402d5", 0x18}, {&(0x7f0000000380)="8e93c36e4e6a49fa2683ea031f4c6c895ef8c2ab568154a1f0b28c9cdc5f4914dbf8f9b0f5484af7e50737581c617dbbe09c7fd0db9d3ba461452e4e8f75ee5e53c07e2a098b57ddfdeac4e737e17a461920b255afb40f19eada6c0608c63a6b0f5e138449eb4488a995df8e2e782f30914539a94f7966dcecdd461df9d2eef5930a28037d4cf801ab599e5ccb", 0x8d}, {&(0x7f00000007c0)="975596050fe52870062a2e3c8447c4584227bc9c32825c9c4adefcef5f0680a9d42392557a565d9373c6f6794a51402cdbee0f74333a82b5dbc37945b21ec0cb61dd497949cd61b141ee68b4b356360aa7ebae3342873591bfff7a1805c79a6011"}], 0x4, 0x0, 0x0, 0x4004801}, 0x4048000) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000a0000000000c80000feff00000000000000b6e8f765ed329e68eea19e441e87ea4d2c77378835f938cf8f973581a709c78d08da1a6a8a44937eb6e7c00aacb69f44a98171f9a67b2e892ce739caf177b7975a91f22da2f300f5b4630b95f9252947eb2ed724dbc2618904058d5be656292f42967c502d8ad359718c1fe532660aa74d562eb5f0c146c509000000d14b6ec16de55b31"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r10 = socket$unix(0x1, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13b}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x10}, 0xc) 952.905754ms ago: executing program 4 (id=4871): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 819.292346ms ago: executing program 3 (id=4872): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, r1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 818.059917ms ago: executing program 2 (id=4873): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x61c, 0x30, 0xcac229faa96ee7df, 0x1, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}, {0x42c, 0x1, [@m_nat={0x1e8, 0xe, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0xa2fc7ad6bf251c3a, 0xffffffff}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xb, 0x2, 0x8, 0x10001}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x3, 0xe, 0x6}, @private=0xa010101, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0xffffffffffffffff, 0x8, 0x1ff}, @private=0xa010101, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x20000000, 0x683581da, 0x7}, @private=0xa010100, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7f, 0x1, 0x4, 0xe}, @multicast1, @rand_addr=0x64010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x0, 0x2, 0xb6e4, 0x3}, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x97, 0x18, 0x7, 0xd, 0x3ff}, @dev={0xac, 0x14, 0x14, 0x2d}, @local, 0xffffff00}}]}, {0x7d, 0x6, "fa7046c71ff7370cb40e874ff63489dcbc7f3b16092361025b10be19fa1b70becd85613c97b0d4586d3a0cf37a9de84fdf3677b8204203f5f3dca9ca82dc016012e2f18ad3f1970174f97f005bd08ac8540b6dbd78299182954c77be5a1c7d0b0362acf99fcec39f304e232e666f0fe23d3fc1ad47083d5441"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xe0, 0x1c, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x10, 0x9, 0x80}, {0xfff7, 0x1, 0x3, 0x6}, {0xd, 0x3, 0x36}, {0x5, 0x41, 0xff, 0x80}, {0xd7d, 0x2, 0x2, 0x80000000}, {0x100, 0xa5, 0xa, 0xa22}, {0x8, 0x8, 0x4, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x696d, 0x0, 0x7, 0x0, 0xe5f0}}]}, {0x51, 0x6, "55aa8129c724e6cbc821008c0c8ba23b26b5d4f38d99f12e4c0915f50cad3be57d75ce0eec313216b544b40e25fae0bbe594d2ae9248a57b07d7758c77522135434bc3d90ac901235d642eb2da"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x160, 0x11, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}, @TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x3, 0x20000000, 0x5d}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0xa}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0xcd, 0x6, "74849f35f4cf116bef1b1a653f551a941fe40a12f0ab4706823fe8a3cd15f2a7d85b1bde559d739030a15bbe96da29b676db1d06df50fb3961379b0cfcb9bbe740c1a000e8dc166a8f3122916bb62a74c39880d44f292a46e9df22c8aebbf4d2470467e275950ac2f924567ff69b86f9bdf33c1b2ec1036ec6807e393ab66bd39567b2cb9ce107266434c786447234ee14ee96f9109b2b5d93e04ebeab274772ca14f488f117b920de9eeee9524028b83dc6214ea98a8df9979c90c974392f617210470c5d76eeea33"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, {0x74, 0x1, [@m_vlan={0x70, 0x12, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x31, 0x6, "7a8ef08d1398ba7babe194367dc92457ff4444d10222ac9c452e71fdd2b02a8e127b8985d96779c8d09cc1e8e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, {0x138, 0x1, [@m_skbedit={0x78, 0x13, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xd, 0xffffffffffffffff, 0x100, 0xf}}]}, {0x31, 0x6, "8fb35399a1cac0d0445a769a92755c8dc5a1c321c4c9b2f53d00bc38b6406b3b0d7872a940f2e5d5bdf83fecfb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xbc, 0x1e, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x21, 0x6, "50c394b151fd48f2f4786c5f02cbf01629048701abea2e802aa3728344"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x61c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 759.347499ms ago: executing program 4 (id=4874): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000600000004000000"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f00000004c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendfile(r2, r1, 0x0, 0x205) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x5}, {0x8}}}, 0x24}}, 0x24040010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000fff90000000000000000000000000000006870a2202e164712e6020d9e33e66250b714a146fae80d4b00c60ec26682afd038d6c3bf93f12e7bc2b385c52aca74593dfffd2bf26c6522dad3", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket$netlink(0x10, 0x3, 0x0) 750.049352ms ago: executing program 1 (id=4875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00)'], 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 693.918934ms ago: executing program 3 (id=4876): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x8}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 558.978276ms ago: executing program 1 (id=4877): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x14000008}, 0x20000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) 553.234819ms ago: executing program 3 (id=4878): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)='[', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x23, 0x200000b, r2}}], 0x20, 0x404a055}, 0x0) 528.419196ms ago: executing program 1 (id=4879): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd"], 0x1000f) 447.508156ms ago: executing program 2 (id=4880): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/14, 0xe}, 0x10001}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 404.675324ms ago: executing program 3 (id=4881): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x1, 0x1000000000000003) 373.060413ms ago: executing program 3 (id=4882): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 340.60594ms ago: executing program 3 (id=4883): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {}, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030273797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r8, &(0x7f0000000000), 0x0) sendfile(r1, r4, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xfff, 0xcd, &(0x7f0000000580)=""/205, 0x41000, 0x11, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0x9, 0x6}, 0x10, 0x1e49b, r4, 0x1, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x7}], 0x10, 0xffff}, 0x94) 212.459887ms ago: executing program 0 (id=4884): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 114.649667ms ago: executing program 0 (id=4885): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000010010100dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000018001680140001801000060059680000fbffffff070000000500110006000000"], 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r9, &(0x7f0000000480)={&(0x7f00000000c0)={0x2c, 0x0, r7, 0xe}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)="fc6005e276143bf89867c1155fd75704525d0735ae0f75a49df859767eb13518b130842a3865f9cd326b32ab9b6f2793200db825c086adc27bfd7412467e8e19bf4e1396370a7fd33ecdaed3b960c835", 0x50}, {&(0x7f0000000200)="2820d22a4e24b873955738ff3ff49b9a5d5378d55a064922", 0x20}, {&(0x7f0000000300)="0ee4ee745d49098bc8a5efe86c0ed7115ec2be9589ce8b7f3e79e55a988342a367befe44579d4179fc719f81c3a9357fc1ac3eb499f1f007bac0082950a5e402d5", 0x18}, {&(0x7f0000000380)="8e93c36e4e6a49fa2683ea031f4c6c895ef8c2ab568154a1f0b28c9cdc5f4914dbf8f9b0f5484af7e50737581c617dbbe09c7fd0db9d3ba461452e4e8f75ee5e53c07e2a098b57ddfdeac4e737e17a461920b255afb40f19eada6c0608c63a6b0f5e138449eb4488a995df8e2e782f30914539a94f7966dcecdd461df9d2eef5930a28037d4cf801ab599e5ccb", 0x8d}, {&(0x7f00000007c0)="975596050fe52870062a2e3c8447c4584227bc9c32825c9c4adefcef5f0680a9d42392557a565d9373c6f6794a51402cdbee0f74333a82b5dbc37945b21ec0cb61dd497949cd61b141ee68b4b356360aa7ebae3342873591bfff7a1805c79a6011"}], 0x4, 0x0, 0x0, 0x4004801}, 0x4048000) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000a0000000000c80000feff00000000000000b6e8f765ed329e68eea19e441e87ea4d2c77378835f938cf8f973581a709c78d08da1a6a8a44937eb6e7c00aacb69f44a98171f9a67b2e892ce739caf177b7975a91f22da2f300f5b4630b95f9252947eb2ed724dbc2618904058d5be656292f42967c502d8ad359718c1fe532660aa74d562eb5f0c146c509000000d14b6ec16de55b31"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r10 = socket$unix(0x1, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="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", 0x13c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x10}, 0xc) 0s ago: executing program 0 (id=4886): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000024c0), 0x3, 0x2000, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.3.2613'. [ 493.264554][T18261] erspan0: left allmulticast mode [ 493.269948][T18261] erspan0: left promiscuous mode [ 493.286260][T18261] macvtap1: left promiscuous mode [ 493.300833][T18261] macvtap1: left allmulticast mode [ 493.739809][T18279] netlink: 'syz.1.2622': attribute type 13 has an invalid length. [ 494.139927][T18297] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 494.209294][T18303] netlink: 'syz.0.2628': attribute type 13 has an invalid length. [ 494.214189][T18299] netlink: 'syz.4.2626': attribute type 10 has an invalid length. [ 494.429729][T18311] netlink: 'syz.1.2630': attribute type 6 has an invalid length. [ 495.258743][T18334] netlink: 'syz.3.2637': attribute type 13 has an invalid length. [ 495.307827][T18338] netlink: 'syz.1.2639': attribute type 6 has an invalid length. [ 495.337101][T18340] __nla_validate_parse: 4 callbacks suppressed [ 495.337118][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 495.583167][T18351] bond16: left promiscuous mode [ 495.592637][T18351] bond16: left allmulticast mode [ 495.609859][T18353] netlink: 'syz.3.2643': attribute type 13 has an invalid length. [ 495.676625][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2643'. [ 495.888710][T18363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2645'. [ 495.929774][T18363] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2645'. [ 495.960197][T18361] netlink: 'syz.3.2645': attribute type 10 has an invalid length. [ 496.179166][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 496.638974][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 496.713576][T18400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2656'. [ 496.749591][T18400] nbd: must specify at least one socket [ 496.974133][T18408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2657'. [ 497.887418][T18433] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2665'. [ 497.957322][T18438] validate_nla: 3 callbacks suppressed [ 497.957341][T18438] netlink: 'syz.1.2667': attribute type 13 has an invalid length. [ 497.978474][T18435] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 498.038270][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'. [ 498.391258][T18458] netlink: 'syz.2.2671': attribute type 10 has an invalid length. [ 498.499931][T18462] nbd: must specify at least one socket [ 499.178125][T18485] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 499.195924][T18480] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 499.334733][T18489] netlink: 'syz.2.2682': attribute type 6 has an invalid length. [ 499.370053][T18491] netlink: 'syz.1.2679': attribute type 13 has an invalid length. [ 499.627373][T18508] netlink: 'syz.0.2683': attribute type 10 has an invalid length. [ 499.802570][ T5967] net_ratelimit: 32 callbacks suppressed [ 499.802590][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.816859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.835393][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.843751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.853675][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.862259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.872853][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.881193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.893506][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.901857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.466948][T18537] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 500.584299][T18543] nbd: must specify at least one socket [ 500.672670][T18547] netlink: 'syz.2.2695': attribute type 13 has an invalid length. [ 500.762413][T18552] __nla_validate_parse: 11 callbacks suppressed [ 500.762431][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2695'. [ 500.966938][T18559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2696'. [ 500.989473][T18559] netlink: 'syz.1.2696': attribute type 10 has an invalid length. [ 501.693218][T18581] netlink: 'syz.0.2701': attribute type 6 has an invalid length. [ 502.018251][T18594] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 502.399813][T18613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2709'. [ 502.427267][T18609] netlink: 'syz.3.2709': attribute type 10 has an invalid length. [ 502.618406][T18617] nbd: must specify at least one socket [ 502.893737][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 502.917011][T18630] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 502.920872][T18628] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2714'. [ 503.088693][T18632] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 503.288202][T18647] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2720'. [ 503.323969][T18647] netlink: 'syz.3.2720': attribute type 10 has an invalid length. [ 504.402784][T18696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2731'. [ 504.440660][T18701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2732'. [ 504.465543][T18701] netlink: 'syz.3.2732': attribute type 10 has an invalid length. [ 504.597831][T18674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.610255][T18706] nbd: must specify at least one socket [ 504.790505][T18716] netlink: 'syz.1.2736': attribute type 6 has an invalid length. [ 505.757723][ T48] net_ratelimit: 33 callbacks suppressed [ 505.757741][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.768695][T18740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2743'. [ 505.771891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.802316][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.810670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.819589][T18748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2744'. [ 505.835966][T18748] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 505.839421][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.852262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.862268][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.870660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.890413][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.899097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.041680][T18755] bond0: Caught tx_queue_len zero misconfig [ 506.388645][T18770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2751'. [ 506.876776][T18789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2756'. [ 507.706558][T18822] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 508.166481][T18837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2769'. [ 508.624412][T18848] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2773'. [ 509.630653][T18899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2784'. [ 509.699648][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2786'. [ 509.767996][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 512.445098][T18886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.951570][ T5963] net_ratelimit: 116 callbacks suppressed [ 512.951588][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.965807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.979143][T18954] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 512.986106][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.997872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.013030][ T673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.021387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.034418][T18959] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2802'. [ 513.053078][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.062079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.078854][ T673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.087289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.269742][T18976] netlink: 'syz.4.2807': attribute type 13 has an invalid length. [ 513.386117][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2807'. [ 513.605789][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 513.624343][T18996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2809'. [ 514.722966][T19033] pimreg: entered allmulticast mode [ 514.746400][T19032] pimreg: left allmulticast mode [ 514.955763][T19038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2823'. [ 515.237474][T19050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.263689][T19050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.312428][T19050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 515.341677][T19050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.449629][T19050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.475509][T19050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.185752][T19081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2834'. [ 516.409800][T19091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2835'. [ 516.588054][T19095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2837'. [ 517.128921][T19112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2841'. [ 517.198666][T19114] netlink: 'syz.3.2841': attribute type 10 has an invalid length. [ 517.636507][T19134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2847'. [ 520.436922][T19121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.656885][T19152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'. [ 521.040439][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2852'. [ 521.217175][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2858'. [ 521.238908][ T13] net_ratelimit: 60 callbacks suppressed [ 521.238926][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.253691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.297340][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.306019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.323746][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.332694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.348250][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.357182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.407258][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.415659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.771538][T19201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 521.833678][T19201] netlink: 'syz.2.2862': attribute type 10 has an invalid length. [ 522.516975][T19216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'. [ 523.141387][T19239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2871'. [ 523.302484][T19249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'. [ 523.587534][T19256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2876'. [ 523.648052][T19258] netlink: 'syz.3.2876': attribute type 10 has an invalid length. [ 524.156671][T19274] netlink: 'syz.1.2881': attribute type 13 has an invalid length. [ 524.243333][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'. [ 524.869709][T19305] netlink: 'syz.4.2886': attribute type 13 has an invalid length. [ 524.993140][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 525.936270][T19343] netlink: 'syz.3.2895': attribute type 13 has an invalid length. [ 526.025377][T19345] __nla_validate_parse: 5 callbacks suppressed [ 526.025398][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 526.373463][T19356] netlink: 'syz.2.2899': attribute type 13 has an invalid length. [ 526.477432][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 526.551361][T19363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2901'. [ 526.728123][T19371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2898'. [ 526.777857][T19371] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 526.914055][ T5967] net_ratelimit: 18 callbacks suppressed [ 526.914074][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.928716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.984687][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.993086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.019053][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.027441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.058929][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.067845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.108134][T19383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2904'. [ 527.125892][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.134291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.300070][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 527.348520][T19387] netlink: 'syz.1.2908': attribute type 13 has an invalid length. [ 527.378005][T19385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2905'. [ 527.423889][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 527.882986][T19417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.932843][T19417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.974503][T19417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 528.007568][T19417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.009684][T19423] netlink: 'syz.2.2912': attribute type 13 has an invalid length. [ 528.041601][T19417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.052240][T19417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.134589][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 528.326977][T19434] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2916'. [ 528.556384][T19445] netlink: 'syz.2.2918': attribute type 10 has an invalid length. [ 528.664135][T19449] netlink: 'syz.3.2920': attribute type 13 has an invalid length. [ 530.591415][T19398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.792684][T19464] netlink: 'syz.3.2925': attribute type 13 has an invalid length. [ 531.169011][T19490] __nla_validate_parse: 10 callbacks suppressed [ 531.169032][T19490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2931'. [ 531.235876][T19493] netlink: 'syz.0.2931': attribute type 10 has an invalid length. [ 531.938237][ T5963] net_ratelimit: 4 callbacks suppressed [ 531.938254][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.952355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.982763][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.991708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.020465][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.029421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.056923][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.065555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.079721][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.088654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.295901][T19531] netlink: 'syz.2.2942': attribute type 13 has an invalid length. [ 532.362810][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2942'. [ 532.540616][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 532.575604][T19537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2943'. [ 532.815241][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 532.830581][T19547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2944'. [ 532.997694][T19549] ip6gre2: entered promiscuous mode [ 533.019981][T19549] ip6gre2: entered allmulticast mode [ 533.123573][T19560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2949'. [ 533.178118][T19560] netlink: 'syz.1.2949': attribute type 10 has an invalid length. [ 533.352532][ T7084] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 181 sec [ 533.694853][T19580] netlink: 'syz.0.2955': attribute type 13 has an invalid length. [ 533.805650][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2955'. [ 534.008787][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'. [ 534.036019][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2959'. [ 536.737730][T19604] syzkaller1: entered promiscuous mode [ 536.743286][T19604] syzkaller1: entered allmulticast mode [ 536.904363][T19623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2966'. [ 536.970115][T19630] netlink: 'syz.4.2969': attribute type 13 has an invalid length. [ 537.015014][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2966'. [ 537.055769][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'. [ 537.201820][ T5963] net_ratelimit: 18 callbacks suppressed [ 537.201839][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.216974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.253029][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.261440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.283211][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.291551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.322142][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.330493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.353594][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.362347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.379472][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 537.443629][T19651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2973'. [ 537.734861][T19672] netlink: 'syz.1.2978': attribute type 13 has an invalid length. [ 537.844725][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2978'. [ 537.924961][T19684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2981'. [ 538.002392][T19691] netlink: 'syz.3.2982': attribute type 6 has an invalid length. [ 538.068952][T19684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2981'. [ 538.115488][T19693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2983'. [ 538.208710][T19703] netlink: 'syz.1.2986': attribute type 13 has an invalid length. [ 538.254585][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 538.946544][T19733] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 539.123508][T19740] netlink: 'syz.2.2994': attribute type 13 has an invalid length. [ 539.451730][T19758] netlink: 'syz.2.2997': attribute type 10 has an invalid length. [ 540.784862][T19808] netlink: 'syz.2.3008': attribute type 10 has an invalid length. [ 541.455023][T19813] bond7: left promiscuous mode [ 541.459992][T19813] bond7: left allmulticast mode [ 541.473030][T19813] ip6gre2: left promiscuous mode [ 541.478248][T19813] ip6gre2: left allmulticast mode [ 541.976961][T19842] __nla_validate_parse: 9 callbacks suppressed [ 541.976982][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3014'. [ 541.987614][T19841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3016'. [ 542.339983][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 542.535121][ T57] net_ratelimit: 102 callbacks suppressed [ 542.535140][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.550111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.610009][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.618996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.660733][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.669438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.692063][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.700333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.715430][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.723919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.749383][T19871] netlink: 'syz.1.3021': attribute type 13 has an invalid length. [ 542.866216][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 545.525167][T19862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.859641][T19918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3031'. [ 545.915481][T19922] netlink: 'syz.2.3031': attribute type 10 has an invalid length. [ 546.458088][T19947] netlink: 'syz.1.3034': attribute type 13 has an invalid length. [ 546.527173][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3034'. [ 546.855151][T19966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3039'. [ 547.209196][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 547.817878][T19992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3043'. [ 547.848458][T19992] netlink: 'syz.4.3043': attribute type 10 has an invalid length. [ 548.396301][T20010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3046'. [ 548.928129][T20021] netlink: 'syz.1.3048': attribute type 13 has an invalid length. [ 549.036188][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 549.329087][T19940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.385752][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3053'. [ 549.613546][T20046] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 549.675980][ T48] net_ratelimit: 34 callbacks suppressed [ 549.675999][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.690017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.713127][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.721970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.746981][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.756046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.776476][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.785624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.812766][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.821949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.355835][T20074] lo: Caught tx_queue_len zero misconfig [ 550.368251][T20074] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 550.387618][T20073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3061'. [ 550.624246][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'. [ 550.650832][T20086] block nbd0: Unsupported socket: should be TCP or UNIX. [ 550.668428][T20090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3065'. [ 551.099041][T20100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3067'. [ 551.116159][T20100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3067'. [ 551.127721][T20100] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 552.256777][T20136] __nla_validate_parse: 1 callbacks suppressed [ 552.256796][T20136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3076'. [ 552.392278][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3077'. [ 552.598628][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3079'. [ 552.647958][T20144] block nbd0: Unsupported socket: should be TCP or UNIX. [ 552.669184][T20152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3080'. [ 552.748523][T20153] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3080'. [ 552.792320][T20153] netlink: 'syz.0.3080': attribute type 10 has an invalid length. [ 553.450641][T20176] netlink: 'syz.2.3086': attribute type 13 has an invalid length. [ 553.479317][T20179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3085'. [ 553.555619][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 553.568358][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3086'. [ 553.758157][T20190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3088'. [ 553.826109][T20195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3090'. [ 554.005558][T20201] netlink: 'syz.3.3091': attribute type 13 has an invalid length. [ 554.110116][T20208] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 554.323136][T20216] tipc: Enabled bearer , priority 0 [ 554.438365][T20216] syzkaller0: entered promiscuous mode [ 554.448271][T20216] syzkaller0: entered allmulticast mode [ 554.456562][T20216] tipc: Resetting bearer [ 554.588976][T20215] tipc: Resetting bearer [ 554.643104][T20226] block nbd0: Unsupported socket: should be TCP or UNIX. [ 557.388884][T20215] tipc: Disabling bearer [ 557.412157][T20227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.424052][T20227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.444540][T20227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 557.471892][T20227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.535541][T20227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.550008][T20227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.682826][T20245] __nla_validate_parse: 4 callbacks suppressed [ 557.682844][T20245] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3099'. [ 557.725928][T20245] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3099'. [ 557.918705][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3102'. [ 557.957494][T20256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3101'. [ 558.197691][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 558.226735][ T5967] net_ratelimit: 18 callbacks suppressed [ 558.226764][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.241598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.252925][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.261474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.308546][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.316870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.379372][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.387829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.405952][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.415002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.500047][T20305] syzkaller1: entered promiscuous mode [ 559.521513][T20305] syzkaller1: entered allmulticast mode [ 560.528422][T20352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3121'. [ 560.594079][T20331] gretap1: entered promiscuous mode [ 560.693886][T20358] netlink: 'syz.4.3122': attribute type 13 has an invalid length. [ 560.824146][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 560.835366][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 561.774505][T20367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.274345][T20418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3131'. [ 562.449328][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3134'. [ 562.472600][T20425] block nbd0: Unsupported socket: should be TCP or UNIX. [ 562.659081][T20434] netlink: 'syz.3.3135': attribute type 10 has an invalid length. [ 562.855797][T20441] __nla_validate_parse: 1 callbacks suppressed [ 562.855895][T20441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3138'. [ 562.873613][T20439] netlink: 'syz.4.3136': attribute type 13 has an invalid length. [ 563.017705][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 563.323441][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3138'. [ 564.144451][ T57] net_ratelimit: 51 callbacks suppressed [ 564.144468][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.159249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.192329][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.200831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.228423][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.237386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.249107][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.257979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.271389][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.279684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.854529][T20495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3147'. [ 564.916170][T20495] netlink: 'syz.1.3147': attribute type 10 has an invalid length. [ 565.570331][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3151'. [ 565.826431][T20519] netlink: 'syz.0.3153': attribute type 13 has an invalid length. [ 565.859568][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3154'. [ 565.906518][T20522] block nbd0: Unsupported socket: should be TCP or UNIX. [ 565.914858][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 567.209072][T20557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3162'. [ 567.274410][T20557] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3162'. [ 567.316179][T20555] netlink: 'syz.4.3162': attribute type 10 has an invalid length. [ 567.659340][T20565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3163'. [ 567.867084][T20574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 568.030533][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'. [ 568.033070][T20584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3170'. [ 568.829652][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 568.839435][T20606] block nbd0: Unsupported socket: should be TCP or UNIX. [ 569.073867][T20620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3176'. [ 569.132703][T20620] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3176'. [ 569.166486][T20615] netlink: 'syz.3.3176': attribute type 10 has an invalid length. [ 569.235610][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 569.247409][T20624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3179'. [ 569.374489][T20630] netlink: 'syz.4.3182': attribute type 6 has an invalid length. [ 570.273496][T20651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3187'. [ 570.452495][T20665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3191'. [ 570.486004][T20665] netlink: 'syz.4.3191': attribute type 10 has an invalid length. [ 570.877248][T20679] block nbd0: Unsupported socket: should be TCP or UNIX. [ 571.513191][T20687] syzkaller0: entered promiscuous mode [ 571.518721][T20687] syzkaller0: entered allmulticast mode [ 571.595558][T20692] netlink: 'syz.0.3199': attribute type 6 has an invalid length. [ 571.968354][T20715] netlink: 'syz.4.3205': attribute type 1 has an invalid length. [ 572.014538][T20715] 8021q: adding VLAN 0 to HW filter on device bond18 [ 572.096313][T20715] bond18: (slave geneve2): making interface the new active one [ 572.107639][T20715] bond18: (slave geneve2): Enslaving as an active interface with an up link [ 572.575592][T20725] block nbd0: Unsupported socket: should be TCP or UNIX. [ 572.763112][T20731] bond8 (unregistering): Released all slaves [ 572.855281][T20737] hsr0 speed is unknown, defaulting to 1000 [ 572.872261][T20737] hsr0 speed is unknown, defaulting to 1000 [ 572.886456][T20737] hsr0 speed is unknown, defaulting to 1000 [ 572.899191][T20737] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 572.917503][T20737] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 572.934543][T20737] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 572.956912][T20737] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 572.988778][T20737] hsr0 speed is unknown, defaulting to 1000 [ 573.006986][T20737] hsr0 speed is unknown, defaulting to 1000 [ 573.015133][T20737] hsr0 speed is unknown, defaulting to 1000 [ 573.031080][T20737] hsr0 speed is unknown, defaulting to 1000 [ 573.066267][T20737] hsr0 speed is unknown, defaulting to 1000 [ 573.154611][T20746] __nla_validate_parse: 8 callbacks suppressed [ 573.154630][T20746] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3215'. [ 573.197855][T20751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3216'. [ 573.278989][T20755] hsr0 speed is unknown, defaulting to 1000 [ 573.345039][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 573.655074][T20765] netlink: 'syz.2.3219': attribute type 6 has an invalid length. [ 573.994179][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 574.059408][T20775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3221'. [ 574.244723][T20777] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3222'. [ 574.436162][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 574.685946][ T7084] hsr0 speed is unknown, defaulting to 1000 [ 574.697257][ T10] hsr0 speed is unknown, defaulting to 1000 [ 574.725699][T20796] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3227'. [ 574.903704][T20800] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 574.922597][T20800] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 574.948814][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3228'. [ 574.988282][T20801] block nbd0: Unsupported socket: should be TCP or UNIX. [ 575.269884][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3231'. [ 575.301712][T20807] block nbd0: Unsupported socket: should be TCP or UNIX. [ 575.735543][T20813] hsr0 speed is unknown, defaulting to 1000 [ 575.870205][T20822] block nbd0: Unsupported socket: should be TCP or UNIX. [ 576.506229][T20831] netlink: 'syz.3.3238': attribute type 6 has an invalid length. [ 577.817381][T20871] block nbd0: Unsupported socket: should be TCP or UNIX. [ 577.994336][T20874] block nbd0: Unsupported socket: should be TCP or UNIX. [ 578.427561][T20878] hsr0 speed is unknown, defaulting to 1000 [ 578.798952][T20892] __nla_validate_parse: 15 callbacks suppressed [ 578.798973][T20892] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3251'. [ 579.009892][T20897] netlink: 'syz.4.3255': attribute type 6 has an invalid length. [ 579.204230][T20911] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3257'. [ 579.214226][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 579.379047][T20903] hsr0 speed is unknown, defaulting to 1000 [ 579.906362][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3263'. [ 579.933807][T20935] block nbd0: Unsupported socket: should be TCP or UNIX. [ 580.026101][T20941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'. [ 580.152747][T20946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3264'. [ 580.414564][T20958] syzkaller0: entered promiscuous mode [ 580.420276][T20958] syzkaller0: entered allmulticast mode [ 580.726448][T20962] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3272'. [ 580.894932][T20966] syzkaller0: entered promiscuous mode [ 580.913069][T20966] syzkaller0: entered allmulticast mode [ 580.935500][T20968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3273'. [ 581.146455][T20982] netlink: 'syz.4.3277': attribute type 6 has an invalid length. [ 581.343059][T20993] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3280'. [ 581.482230][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3283'. [ 581.492217][T21005] block nbd0: Unsupported socket: should be TCP or UNIX. [ 581.886881][T21015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.940674][T21015] ip6_vti0: entered promiscuous mode [ 583.455978][T21042] netlink: 'syz.1.3293': attribute type 1 has an invalid length. [ 584.390829][T20998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.601807][T21062] __nla_validate_parse: 1 callbacks suppressed [ 584.601826][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3300'. [ 584.621588][T21062] block nbd0: Unsupported socket: should be TCP or UNIX. [ 584.794306][T21078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3303'. [ 584.906192][T21080] netlink: 'syz.3.3304': attribute type 13 has an invalid length. [ 584.970582][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 585.538555][T21100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3311'. [ 585.779111][T21115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3315'. [ 585.879783][T21107] syzkaller0: entered promiscuous mode [ 585.887537][T21107] syzkaller0: entered allmulticast mode [ 585.959981][T21120] netlink: 'syz.1.3316': attribute type 13 has an invalid length. [ 586.085898][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 586.108318][T21128] syzkaller0: entered promiscuous mode [ 586.299027][T21138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 586.324629][T21138] block nbd0: Unsupported socket: should be TCP or UNIX. [ 586.394676][T21145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3325'. [ 586.536853][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'. [ 586.598720][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3326'. [ 587.414380][T21167] netlink: 'syz.2.3330': attribute type 13 has an invalid length. [ 587.974445][T21193] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 588.194480][T21208] block nbd0: Unsupported socket: should be TCP or UNIX. [ 589.128282][T21230] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 589.359178][T21238] syzkaller0: entered promiscuous mode [ 589.373892][T21238] syzkaller0: entered allmulticast mode [ 589.428524][T21242] syzkaller0: entered promiscuous mode [ 589.436838][T21242] syzkaller0: entered allmulticast mode [ 589.838144][T21256] __nla_validate_parse: 8 callbacks suppressed [ 589.838163][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 589.863041][T21256] block nbd0: Unsupported socket: should be TCP or UNIX. [ 589.997817][T21266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3356'. [ 590.687340][T21286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3358'. [ 590.753691][T21292] netlink: 'syz.3.3360': attribute type 6 has an invalid length. [ 590.763252][T21290] syzkaller0: entered promiscuous mode [ 590.779249][T21290] syzkaller0: entered allmulticast mode [ 591.065553][T21304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3365'. [ 591.078602][T21302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3362'. [ 591.087829][T21306] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 591.114680][T21306] 8021q: adding VLAN 0 to HW filter on device bond17 [ 591.189968][T21306] bond17: (slave veth9): Enslaving as an active interface with a down link [ 591.233030][T21306] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3364'. [ 591.256596][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 591.433219][T21319] hsr0 speed is unknown, defaulting to 1000 [ 591.743641][ T7078] page_pool_release_retry() stalled pool shutdown: id 220, 1 inflight 60 sec [ 592.067051][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3372'. [ 592.076852][T21337] block nbd0: Unsupported socket: should be TCP or UNIX. [ 592.152677][T21335] syzkaller0: entered promiscuous mode [ 592.168484][T21335] syzkaller0: entered allmulticast mode [ 592.494497][T21346] netlink: 'syz.1.3373': attribute type 6 has an invalid length. [ 592.696614][T21352] syzkaller0: entered promiscuous mode [ 592.710470][T21352] syzkaller0: entered allmulticast mode [ 593.122235][T21367] netlink: 'syz.2.3380': attribute type 6 has an invalid length. [ 593.449204][T21386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3382'. [ 593.590691][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 593.663681][ T7084] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 241 sec [ 594.240571][ T7084] hsr0 speed is unknown, defaulting to 1000 [ 594.247162][ T10] hsr0 speed is unknown, defaulting to 1000 [ 594.266736][T21415] tipc: Enabled bearer , priority 0 [ 594.353020][T21411] syzkaller0: entered promiscuous mode [ 594.376805][T21411] syzkaller0: entered allmulticast mode [ 594.559015][T21420] tipc: Resetting bearer [ 594.591737][T21410] tipc: Resetting bearer [ 594.645142][T21410] tipc: Disabling bearer [ 597.502822][T21423] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 597.512856][T21423] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 597.524160][T21423] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 597.768659][T21459] netlink: 'syz.1.3392': attribute type 6 has an invalid length. [ 597.811698][T21460] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3395'. [ 597.928059][T21472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3396'. [ 597.994454][T21472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3396'. [ 598.010261][T21476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3395'. [ 598.046101][T21481] netlink: 'syz.4.3396': attribute type 10 has an invalid length. [ 598.877354][T21494] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3402'. [ 599.032084][T21500] syzkaller0: entered promiscuous mode [ 599.037833][T21500] syzkaller0: entered allmulticast mode [ 599.305832][T21512] syzkaller0: entered promiscuous mode [ 599.313439][T21512] syzkaller0: entered allmulticast mode [ 599.641252][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.652043][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.663465][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 599.674255][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.695394][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.710885][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.927453][T21537] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3414'. [ 599.977544][T21541] tipc: Started in network mode [ 599.983841][T21541] tipc: Node identity 080211, cluster identity 4711 [ 599.991409][T21541] tipc: Enabled bearer , priority 0 [ 600.123281][T21545] tipc: Enabled bearer , priority 0 [ 600.143775][T21545] syzkaller0: entered promiscuous mode [ 600.149595][T21545] syzkaller0: entered allmulticast mode [ 600.187207][T21545] tipc: Resetting bearer [ 600.196744][T21544] tipc: Resetting bearer [ 600.227551][T21544] tipc: Disabling bearer [ 600.244683][T21548] syzkaller0: entered promiscuous mode [ 600.250232][T21548] syzkaller0: entered allmulticast mode [ 600.407359][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3421'. [ 600.512173][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 600.608773][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'. [ 600.619069][T21562] block nbd0: Unsupported socket: should be TCP or UNIX. [ 600.984906][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 601.011724][T21568] hsr_slave_0: left promiscuous mode [ 601.029293][T21568] hsr_slave_1: left promiscuous mode [ 601.101665][ T42] tipc: Node number set to 134353152 [ 601.146217][T21284] smbdirect: ib_dev[syz2] removed [ 601.416401][T21583] tipc: Enabled bearer , priority 0 [ 601.425576][T21583] syzkaller0: entered promiscuous mode [ 601.434891][T21583] syzkaller0: entered allmulticast mode [ 601.488576][T21583] tipc: Resetting bearer [ 601.500197][T21582] tipc: Resetting bearer [ 601.530627][T21582] tipc: Disabling bearer [ 601.619140][T21595] block nbd0: Unsupported socket: should be TCP or UNIX. [ 602.502246][T21613] syzkaller0: entered promiscuous mode [ 602.516470][T21613] syzkaller0: entered allmulticast mode [ 602.676851][T21625] block nbd0: Unsupported socket: should be TCP or UNIX. [ 603.552721][T21651] netlink: 'syz.4.3452': attribute type 6 has an invalid length. [ 603.736165][T21661] syzkaller0: entered promiscuous mode [ 603.742415][T21661] syzkaller0: entered allmulticast mode [ 604.445454][T21669] syzkaller0: entered promiscuous mode [ 604.451637][T21669] syzkaller0: entered allmulticast mode [ 608.249343][ T57] net_ratelimit: 32 callbacks suppressed [ 608.249361][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.264121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.316159][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.324637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.368374][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.377388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.411064][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.419420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.440273][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.448729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.604386][T21736] syzkaller0: entered promiscuous mode [ 608.609903][T21736] syzkaller0: entered allmulticast mode [ 608.691202][T21748] syzkaller0: entered promiscuous mode [ 608.702481][T21748] syzkaller0: entered allmulticast mode [ 611.453263][T21756] tipc: Enabling of bearer rejected, failed to enable media [ 611.600466][T21792] syzkaller0: entered promiscuous mode [ 611.625978][T21792] syzkaller0: entered allmulticast mode [ 611.828803][T21808] syzkaller0: entered promiscuous mode [ 611.841096][T21808] syzkaller0: entered allmulticast mode [ 612.006137][T21811] tipc: Enabled bearer , priority 0 [ 612.018543][T21816] netlink: 'syz.2.3489': attribute type 14 has an invalid length. [ 612.022176][T21806] syzkaller0: entered promiscuous mode [ 612.028362][T21816] __nla_validate_parse: 5 callbacks suppressed [ 612.028377][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3489'. [ 612.051589][T21806] syzkaller0: entered allmulticast mode [ 612.083842][T21816] bond0: option xmit_hash_policy: invalid value (191) [ 612.119146][T21806] tipc: Resetting bearer [ 612.143117][T21804] tipc: Resetting bearer [ 612.175948][T21804] tipc: Disabling bearer [ 612.193926][T21820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 612.200570][T21822] syzkaller0: entered promiscuous mode [ 612.204416][T21820] block nbd0: Unsupported socket: should be TCP or UNIX. [ 612.227871][T21822] syzkaller0: entered allmulticast mode [ 612.316490][T21820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 612.388088][T21826] syzkaller0: entered promiscuous mode [ 612.395413][T21826] syzkaller0: entered allmulticast mode [ 612.559127][T21830] syzkaller0: entered promiscuous mode [ 612.574436][T21830] syzkaller0: entered allmulticast mode [ 612.688256][T21832] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 612.732203][T21832] syzkaller0: entered promiscuous mode [ 612.742391][T21832] syzkaller0: entered allmulticast mode [ 612.799914][T21841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3497'. [ 612.954297][T21845] tipc: Enabled bearer , priority 0 [ 612.963011][T21845] syzkaller0: entered promiscuous mode [ 612.968725][T21845] syzkaller0: entered allmulticast mode [ 613.012560][T21845] tipc: Resetting bearer [ 613.029898][T21844] tipc: Resetting bearer [ 613.110549][T21844] tipc: Disabling bearer [ 613.595893][T21868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3503'. [ 613.613977][T21870] netlink: 816 bytes leftover after parsing attributes in process `syz.1.3504'. [ 614.088374][T21887] xt_hashlimit: size too large, truncated to 1048576 [ 614.170891][T21879] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 614.180012][T21879] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 614.198955][T21888] netlink: 'syz.0.3508': attribute type 1 has an invalid length. [ 614.226973][T21888] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3508'. [ 614.884932][T21917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3512'. [ 614.908438][T21918] netlink: 'syz.2.3513': attribute type 1 has an invalid length. [ 615.066243][T21932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3513'. [ 615.118642][T21918] bond9: entered promiscuous mode [ 615.143480][T21918] 8021q: adding VLAN 0 to HW filter on device bond9 [ 615.227195][T21932] bond9: entered allmulticast mode [ 615.368820][T21938] bond9: (slave bridge5): making interface the new active one [ 615.395496][T21938] bridge5: entered promiscuous mode [ 615.421007][T21938] bridge5: entered allmulticast mode [ 615.434282][T21938] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 615.710401][T21942] syzkaller0: entered promiscuous mode [ 615.736365][T21942] syzkaller0: entered allmulticast mode [ 615.789567][T21965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3519'. [ 615.813955][T21957] syzkaller0: entered promiscuous mode [ 615.834498][T21957] syzkaller0: entered allmulticast mode [ 615.865323][ T57] net_ratelimit: 4 callbacks suppressed [ 615.865339][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.879933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.936007][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.944887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.955820][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.964748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.982788][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.991145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.003091][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.011462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.850470][T21977] syzkaller0: entered promiscuous mode [ 618.856804][T21977] syzkaller0: entered allmulticast mode [ 618.875294][T21993] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 619.476813][T22023] syzkaller0: entered promiscuous mode [ 619.487281][T22023] syzkaller0: entered allmulticast mode [ 619.522032][T22024] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 619.767861][T22034] tipc: Enabling of bearer rejected, already enabled [ 621.283613][T22080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 621.323923][T22080] block nbd0: Unsupported socket: should be TCP or UNIX. [ 621.350220][T22087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3542'. [ 621.447473][T22094] syzkaller0: entered promiscuous mode [ 621.479131][T22094] syzkaller0: entered allmulticast mode [ 621.598413][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 622.415568][T22117] netlink: 'syz.1.3547': attribute type 4 has an invalid length. [ 622.581444][T22126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3550'. [ 622.735391][T22131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3550'. [ 622.799315][T22131] nbd: device at index 64 is going down [ 622.927106][T22147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3555'. [ 622.941263][T22028] udevd[22028]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 624.229970][ T1314] net_ratelimit: 19 callbacks suppressed [ 624.229988][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.521564][T22151] syzkaller0: entered promiscuous mode [ 625.529292][T22151] syzkaller0: entered allmulticast mode [ 625.614207][T22164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3557'. [ 625.632011][T22164] block nbd0: Unsupported socket: should be TCP or UNIX. [ 626.622054][T22190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3560'. [ 627.076759][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3560'. [ 629.443782][T22220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3567'. [ 629.605878][T22223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3568'. [ 629.615264][T22223] block nbd0: Unsupported socket: should be TCP or UNIX. [ 629.724119][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 629.735785][T22228] lo: entered allmulticast mode [ 629.752484][T22230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3571'. [ 629.771004][T22230] block nbd0: Unsupported socket: should be TCP or UNIX. [ 629.804227][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3570'. [ 630.214247][T22244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3574'. [ 630.374943][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.459088][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.509518][T22254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 630.534126][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 630.588483][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.732133][T22249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.821058][T22249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.161075][T22266] netlink: 'syz.3.3576': attribute type 10 has an invalid length. [ 631.484592][T22280] syzkaller0: entered promiscuous mode [ 631.497357][T22280] syzkaller0: entered allmulticast mode [ 631.525462][T22280] 0: reclassify loop, rule prio 0, protocol 800 [ 631.846549][T22290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3585'. [ 631.882783][T22290] block nbd0: Unsupported socket: should be TCP or UNIX. [ 631.956823][T22292] syzkaller0: entered promiscuous mode [ 631.968823][T22292] syzkaller0: entered allmulticast mode [ 632.336423][T22298] sctp: [Deprecated]: syz.0.3587 (pid 22298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.336423][T22298] Use struct sctp_sack_info instead [ 632.510633][ T29] audit: type=1804 audit(1778725379.427:14): pid=22303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3589" name="/newroot/683/cgroup.controllers" dev="tmpfs" ino=3540 res=1 errno=0 [ 632.558703][ T29] audit: type=1800 audit(1778725379.457:15): pid=22303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3589" name="cgroup.controllers" dev="tmpfs" ino=3540 res=0 errno=0 [ 633.452441][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 633.734214][T22324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3593'. [ 635.206813][T22348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 635.321042][T22350] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3597'. [ 636.223619][T22318] lo: Caught tx_queue_len zero misconfig [ 636.453484][T22359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1731235117/1731235119 [ 636.480801][T22359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1731235117/1731235118 [ 636.544346][T22359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1731235117/1731235119 [ 636.545429][T22356] tipc: Enabled bearer , priority 0 [ 636.554310][T22359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1731235117/1731235118 [ 636.594201][T22356] syzkaller0: entered promiscuous mode [ 636.612864][T22356] syzkaller0: entered allmulticast mode [ 636.643203][T22356] tipc: Resetting bearer [ 636.670422][T22356] tipc: Resetting bearer [ 636.711401][T22356] tipc: Disabling bearer [ 636.732713][T22371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3604'. [ 636.848995][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 636.998919][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.020062][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.063452][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.094695][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.223059][T22385] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20005 [ 637.507693][T22390] syzkaller0: entered promiscuous mode [ 637.521454][T22390] syzkaller0: entered allmulticast mode [ 637.683431][T22392] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3611'. [ 637.804213][T22397] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3613'. [ 638.298554][T22413] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 638.643508][T22420] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3619'. [ 638.842639][T22426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.853911][T22426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.865395][T22426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 638.876085][T22426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.900579][T22426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.911834][T22426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.949143][T22434] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3621'. [ 639.519830][T22449] netlink: 'syz.2.3626': attribute type 3 has an invalid length. [ 639.584990][T22451] lo: entered allmulticast mode [ 639.616279][T22450] lo: left allmulticast mode [ 639.645299][T22454] block nbd2: NBD_DISCONNECT [ 639.685604][T22449] siw: device registration error -23 [ 639.951543][T22459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3631'. [ 639.987784][T22459] block nbd0: Unsupported socket: should be TCP or UNIX. [ 641.667735][T22509] syzkaller0: entered promiscuous mode [ 641.677142][T22509] syzkaller0: entered allmulticast mode [ 641.744111][T22511] syzkaller0: entered promiscuous mode [ 641.749849][T22511] syzkaller0: entered allmulticast mode [ 641.933533][T22520] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3645'. [ 642.696741][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3650'. [ 642.916973][T22544] IPv6: Can't replace route, no match found [ 642.943453][T22544] IPv6: Can't replace route, no match found [ 643.229222][T22552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.240555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.265876][T22552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.294452][T22552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.305080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.316966][T22552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.320545][T22560] netlink: 768 bytes leftover after parsing attributes in process `syz.0.3656'. [ 643.327884][T22552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.363691][T22555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.374999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.379506][T22560] netlink: 768 bytes leftover after parsing attributes in process `syz.0.3656'. [ 643.385498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.483727][T22560] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 643.767068][T22571] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 644.337727][T22591] netlink: 'syz.4.3662': attribute type 13 has an invalid length. [ 644.382748][T22585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.389747][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3663'. [ 644.415148][T22585] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.446826][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 644.458519][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3662'. [ 644.509034][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 644.552997][T22585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 644.576995][T22585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.582390][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 644.607175][T22585] veth1_vlan: left promiscuous mode [ 644.633201][T22585] veth0_vlan: left promiscuous mode [ 644.645298][T22585] veth0_vlan: entered promiscuous mode [ 644.657988][T22585] veth1_vlan: entered promiscuous mode [ 644.684311][T22585] veth1_macvtap: left promiscuous mode [ 644.709637][T22585] veth0_macvtap: left promiscuous mode [ 644.735606][T22585] veth0_macvtap: entered promiscuous mode [ 644.754017][T22585] veth1_macvtap: entered promiscuous mode [ 644.805275][T22585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.837598][T22585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.868667][T22585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.883566][T22585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 644.895655][T22585] 8021q: adding VLAN 0 to HW filter on device eth0 [ 644.904207][T22585] 8021q: adding VLAN 0 to HW filter on device eth1 [ 644.913800][T22585] 8021q: adding VLAN 0 to HW filter on device eth2 [ 644.933862][T22585] 8021q: adding VLAN 0 to HW filter on device eth3 [ 644.950884][T22585] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 644.964527][T22585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.984297][T22585] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.004548][T22585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 645.032952][T22585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 645.053339][T22585] erspan0: entered promiscuous mode [ 645.063757][T22585] bond9: left promiscuous mode [ 645.068578][T22585] bridge5: left promiscuous mode [ 645.075371][T22585] 8021q: adding VLAN 0 to HW filter on device bond9 [ 645.235389][T22598] : entered promiscuous mode [ 645.259964][ T673] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.301366][T22612] netlink: 'syz.2.3665': attribute type 6 has an invalid length. [ 645.332780][ T673] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.362307][ T673] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.433679][T22602] openvswitch: : Dropping previously announced user features [ 645.455896][ T673] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.640264][T22633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3668'. [ 646.169822][T22660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3672'. [ 646.529563][T22668] smbdirect: ib_dev[syz0] removed [ 650.157077][T22703] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3680'. [ 650.464975][T22711] sctp: [Deprecated]: syz.0.3681 (pid 22711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.464975][T22711] Use struct sctp_sack_info instead [ 650.493225][T22711] sctp: [Deprecated]: syz.0.3681 (pid 22711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.493225][T22711] Use struct sctp_sack_info instead [ 650.571129][T22711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.594170][T22711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.664398][ T29] audit: type=1804 audit(1778725397.587:16): pid=22717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3684" name="/newroot/730/cgroup.controllers" dev="tmpfs" ino=3810 res=1 errno=0 [ 650.731361][ T29] audit: type=1800 audit(1778725397.587:17): pid=22717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3684" name="cgroup.controllers" dev="tmpfs" ino=3810 res=0 errno=0 [ 651.033174][T22728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.350412][T22733] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 651.705560][ T48] net_ratelimit: 424 callbacks suppressed [ 651.705578][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.720272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.751413][T22749] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 651.773690][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.782089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.794124][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.802577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.813332][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.821719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.833505][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.953720][T22757] syzkaller0: entered promiscuous mode [ 651.963781][T22757] syzkaller0: entered allmulticast mode [ 652.123259][T22759] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3694'. [ 652.134695][T22759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3694'. [ 652.419303][T22778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3697'. [ 652.632621][T22784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 652.818967][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3700'. [ 653.481086][T22819] nbd: must specify a device to reconfigure [ 653.629522][T22818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3704'. [ 653.704006][T22830] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3706'. [ 653.718950][T22830] 0ªX¹¦À: renamed from batadv0 [ 653.741965][T22830] 0ªX¹¦À: entered allmulticast mode [ 653.758913][T22830] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 653.975805][T22833] lo: Caught tx_queue_len zero misconfig [ 653.989704][ T9] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 301 sec [ 654.014171][T22833] netem: change failed [ 654.034994][T21284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.056103][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3702'. [ 654.077160][T21284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.402374][T22847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.098194][T22883] netlink: 'syz.0.3716': attribute type 21 has an invalid length. [ 655.152940][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 655.153832][T22881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.178758][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 655.225728][T21928] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.251756][T21928] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.279304][T21928] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.311351][T21928] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.337696][T22888] netlink: 'syz.2.3717': attribute type 6 has an invalid length. [ 655.368373][T22888] IPv6: NLM_F_CREATE should be specified when creating new route [ 655.382398][T21928] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.428558][T21928] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.466710][T21928] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.497377][T21928] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.569779][T22896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3718'. [ 655.929044][T22900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3718'. [ 655.932301][T22909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3720'. [ 655.956783][T22909] bridge0: entered allmulticast mode [ 655.963004][T22909] bridge0: left allmulticast mode [ 656.279535][T22634] udevd[22634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 656.297214][T22634] udevd[22634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 656.343744][T22928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 656.792999][T21928] wlan1: Trigger new scan to find an IBSS to join [ 656.992022][ T29] audit: type=1800 audit(1778725403.907:18): pid=22940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3724" name="memory.events" dev="tmpfs" ino=3849 res=0 errno=0 [ 657.085644][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3725'. [ 657.306701][T22956] xt_l2tp: invalid flags combination: 8 [ 657.320262][T22956] netlink: 'syz.0.3725': attribute type 1 has an invalid length. [ 657.336692][T22956] gre0: entered promiscuous mode [ 657.342966][T22956] gre0: entered allmulticast mode [ 658.054436][T22983] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3731'. [ 658.084444][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'. [ 658.406568][T23003] dvmrp0: entered allmulticast mode [ 660.072056][T23050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3740'. [ 660.137952][T23052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.163250][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.188761][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.512415][T23048] infiniband syz0: set down [ 660.518516][T23048] infiniband syz0: added bridge_slave_1 [ 660.563774][T23048] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 660.578994][T23048] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 660.596850][T23048] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 660.634717][T23062] lo: Caught tx_queue_len zero misconfig [ 660.651967][T23048] RDS/IB: syz0: added [ 660.663567][T23048] smc: adding ib device syz0 with port count 1 [ 660.670172][T23048] smc: ib device syz0 port 1 has no pnetid [ 661.145289][T23072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3751'. [ 661.513464][T23086] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3754'. [ 661.741783][T21933] wlan1: Trigger new scan to find an IBSS to join [ 661.873950][T23096] syzkaller1: entered promiscuous mode [ 661.893603][T23096] syzkaller1: entered allmulticast mode [ 662.023413][T23099] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20005 [ 662.044181][T23096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3759'. [ 662.181056][T23103] tipc: Enabling of bearer rejected, already enabled [ 662.400195][T23104] tipc: Resetting bearer [ 662.424568][T23109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3762'. [ 662.486528][T23111] netlink: 'syz.3.3762': attribute type 10 has an invalid length. [ 662.671650][T21933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.710659][T23119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3763'. [ 662.762011][T23119] netlink: 'syz.0.3763': attribute type 10 has an invalid length. [ 662.893248][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'. [ 663.340378][T23135] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3769'. [ 663.374735][T23140] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3767'. [ 663.808442][T23162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3775'. [ 663.868817][T23164] netlink: 'syz.1.3775': attribute type 10 has an invalid length. [ 664.076236][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3778'. [ 664.243810][T23175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.303262][T23175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.344722][T23175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 664.368814][T23175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.399792][T23175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.411162][T23175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.557947][T23194] net_ratelimit: 21 callbacks suppressed [ 664.557965][T23194] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 664.606611][T23192] block nbd4: not configured, cannot reconfigure [ 664.775207][T23196] xt_hashlimit: size too large, truncated to 1048576 [ 665.022049][T23208] syzkaller0: entered promiscuous mode [ 665.038760][T23208] syzkaller0: entered allmulticast mode [ 665.167237][T23213] netlink: 'syz.0.3787': attribute type 10 has an invalid length. [ 665.653271][T23228] team0: entered promiscuous mode [ 665.672547][T23228] team_slave_0: entered promiscuous mode [ 665.687583][T23228] team_slave_1: entered promiscuous mode [ 665.705647][T23228] geneve1: entered promiscuous mode [ 665.895031][T23230] x_tables: ip_tables: osf match: only valid for protocol 6 [ 666.525385][T23250] syzkaller0: entered promiscuous mode [ 666.539240][T23250] syzkaller0: entered allmulticast mode [ 666.665481][T23259] tipc: Resetting bearer [ 666.684381][T23262] __nla_validate_parse: 8 callbacks suppressed [ 666.684399][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 667.039750][T23278] netlink: 'syz.3.3810': attribute type 3 has an invalid length. [ 667.390379][T23296] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3813'. [ 667.675721][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 669.058446][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3827'. [ 669.848308][T23394] netlink: 'syz.2.3840': attribute type 6 has an invalid length. [ 669.903411][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.912377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.952462][T21284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.960871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.988200][T21284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.996604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.008751][T21284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.017216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.039416][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.047824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.068634][T23407] netlink: 'syz.0.3845': attribute type 1 has an invalid length. [ 670.074626][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3844'. [ 670.078495][T23407] netlink: 'syz.0.3845': attribute type 2 has an invalid length. [ 670.264360][T23412] bond0: entered promiscuous mode [ 670.291326][T23412] bond_slave_0: entered promiscuous mode [ 670.312573][T23412] bond_slave_1: entered promiscuous mode [ 670.620508][T23430] netlink: 'syz.3.3854': attribute type 6 has an invalid length. [ 671.125677][T23459] tipc: Enabling of bearer rejected, already enabled [ 671.336754][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 671.588633][T23484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3874'. [ 671.725642][T23493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.742545][T23493] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.806428][T23493] veth1_macvtap: left promiscuous mode [ 671.816994][T23493] veth0_macvtap: left promiscuous mode [ 671.825296][T23493] veth0_macvtap: entered promiscuous mode [ 671.839671][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.846948][ T57] bridge0: port 2(bridge_slave_1) entered listening state [ 672.000524][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 672.337173][T23518] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3887'. [ 672.677415][T23537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3895'. [ 673.195991][T23549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.248069][T23549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.274561][T23549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 673.305275][T23549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.428855][T23549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.457769][T23549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.529412][T23613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3920'. [ 674.610733][T23610] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.056527][T23625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3926'. [ 675.064310][T23626] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3925'. [ 675.111223][T23626] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3925'. [ 675.485959][T23635] net_ratelimit: 62 callbacks suppressed [ 675.485976][T23635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.500091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.616584][T23655] tipc: Enabled bearer , priority 10 [ 675.731803][T23661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3939'. [ 675.955792][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'. [ 676.139801][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 677.720088][T23753] __nla_validate_parse: 1 callbacks suppressed [ 677.720108][T23753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3971'. [ 677.924734][T23760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3971'. [ 677.952076][T23760] nbd: device at index 64 is going down [ 678.098030][T23777] Cannot find del_set index 2 as target [ 678.316811][T23785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3983'. [ 678.340688][T23398] udevd[23398]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 678.379240][T23398] udevd[23398]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 678.565601][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 678.623225][T23803] batadv_slave_0: Caught tx_queue_len zero misconfig [ 678.726229][T23809] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3992'. [ 678.751670][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 678.815508][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.824524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.853163][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.862118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.887431][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.896357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.925877][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.934907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.064004][T23827] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4002'. [ 679.208601][T23837] veth0_macvtap: Caught tx_queue_len zero misconfig [ 679.945122][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4019'. [ 680.491564][ T57] net_ratelimit: 26 callbacks suppressed [ 680.491615][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.505700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.523811][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.532248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.555329][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.563740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.574785][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.583414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.860364][T23921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'. [ 680.904860][T23921] block nbd0: Unsupported socket: should be TCP or UNIX. [ 681.064413][T23931] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 681.143589][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.152199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.297305][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4041'. [ 681.378997][T23948] netlink: 'syz.0.4042': attribute type 25 has an invalid length. [ 684.752934][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'. [ 684.791393][T24104] block nbd0: Unsupported socket: should be TCP or UNIX. [ 685.676310][ T1314] net_ratelimit: 102 callbacks suppressed [ 685.676330][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.754087][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.762537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.784516][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.792938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.811123][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.819514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.869418][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.877839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.903970][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.117864][T24183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4110'. [ 687.156024][T24183] block nbd0: Unsupported socket: should be TCP or UNIX. [ 687.452365][T24199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4117'. [ 688.909659][T24245] netlink: 'syz.1.4130': attribute type 3 has an invalid length. [ 688.920391][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 688.939917][T24245] netlink: 'syz.1.4130': attribute type 3 has an invalid length. [ 688.966638][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 689.601987][T24276] xt_hashlimit: size too large, truncated to 1048576 [ 689.988770][T24293] IPVS: stopping backup sync thread 8509 ... [ 690.747108][T21928] net_ratelimit: 105 callbacks suppressed [ 690.747125][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.761317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.807006][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.815348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.850680][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.859228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.875109][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.883451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.899973][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.908355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.963892][T24339] syzkaller1: entered allmulticast mode [ 691.317773][T24354] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4165'. [ 692.677489][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4191'. [ 692.704959][T24432] netlink: 'syz.1.4191': attribute type 5 has an invalid length. [ 692.731635][T24432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'. [ 692.842507][T24432] geneve2: entered promiscuous mode [ 692.847879][T24432] geneve2: entered allmulticast mode [ 692.882881][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 692.905428][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 692.928751][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 692.949950][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 694.795802][T24528] lo: Caught tx_queue_len zero misconfig [ 696.525117][T24602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4248'. [ 696.554687][T24604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4249'. [ 696.692968][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4249'. [ 697.725512][T24633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4257'. [ 697.772300][T24633] block nbd0: Unsupported socket: should be TCP or UNIX. [ 698.548192][T24662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4266'. [ 698.688208][T24669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4266'. [ 698.995787][T24680] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 699.006723][T24680] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 699.353973][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4278'. [ 699.399103][T24695] block nbd0: Unsupported socket: should be TCP or UNIX. [ 699.457762][T24699] netlink: 'syz.0.4279': attribute type 1 has an invalid length. [ 699.492285][T24699] netlink: 'syz.0.4279': attribute type 6 has an invalid length. [ 699.511899][T24699] netlink: 'syz.0.4279': attribute type 7 has an invalid length. [ 699.530864][T24699] netlink: 'syz.0.4279': attribute type 1 has an invalid length. [ 699.946510][T24716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4283'. [ 700.371636][T24708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4283'. [ 701.416808][T24760] vxlan0: entered promiscuous mode [ 701.422973][T24760] vxlan0: entered allmulticast mode [ 701.430385][T21284] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.451480][T21284] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.472359][T21284] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.491842][T21284] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.954874][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4303'. [ 702.626527][T24802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4310'. [ 703.063528][T24815] syzkaller1: entered promiscuous mode [ 703.072283][T24815] syzkaller1: entered allmulticast mode [ 703.084754][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4317'. [ 703.226620][T24826] tipc: Resetting bearer [ 703.473850][T24836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4320'. [ 703.597353][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 704.252905][T24856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4325'. [ 704.265474][T24856] block nbd0: Unsupported socket: should be TCP or UNIX. [ 705.359302][T24899] syzkaller1: entered promiscuous mode [ 705.375716][T24899] syzkaller1: entered allmulticast mode [ 706.538519][T24935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 706.553776][T24935] block nbd0: Unsupported socket: should be TCP or UNIX. [ 706.904764][T24954] netlink: 'syz.4.4351': attribute type 4 has an invalid length. [ 706.957340][T24955] netlink: 'syz.4.4351': attribute type 4 has an invalid length. [ 707.437302][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4354'. [ 707.449908][T24948] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 707.668595][T21933] net_ratelimit: 76 callbacks suppressed [ 707.668612][T21933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.683352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.726902][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.735336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.769857][T21284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.778246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.789107][T24978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4359'. [ 707.802036][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.810414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.864720][T21928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.873135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.972943][T24989] syzkaller0: entered promiscuous mode [ 708.022118][T24989] syzkaller0: entered allmulticast mode [ 708.153360][T24996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4359'. [ 709.110852][T25023] tipc: Enabled bearer , priority 0 [ 709.235029][T25023] syzkaller0: entered promiscuous mode [ 709.241680][T25023] syzkaller0: entered allmulticast mode [ 709.247908][T25023] tipc: Resetting bearer [ 709.271911][T25022] tipc: Resetting bearer [ 712.522060][T25022] tipc: Disabling bearer [ 712.899851][T25083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4377'. [ 713.412585][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 714.063204][T25135] gre0: left promiscuous mode [ 714.076312][T25135] gre0: left allmulticast mode [ 714.109366][T25135] ip6_vti0: left promiscuous mode [ 714.202635][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 714.382628][ T5839] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 362 sec [ 715.094225][T25176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4401'. [ 715.538202][T25199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4404'. [ 715.750417][T25194] tipc: Resetting bearer [ 716.363617][T25219] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 716.375564][T25219] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 716.406158][T25220] tipc: Enabling of bearer rejected, already enabled [ 716.512888][T25227] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 716.596610][T25234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4413'. [ 716.836682][T25241] tipc: Enabled bearer , priority 0 [ 716.972461][T25241] syzkaller0: entered promiscuous mode [ 716.981920][T25241] syzkaller0: entered allmulticast mode [ 716.988186][T25241] tipc: Resetting bearer [ 717.001730][T25240] tipc: Resetting bearer [ 719.554220][T25240] tipc: Disabling bearer [ 719.807823][T25269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4427'. [ 719.875561][T25275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4430'. [ 719.897948][T25275] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 720.056158][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4427'. [ 720.802760][T25300] syzkaller0: entered promiscuous mode [ 720.813563][T25300] syzkaller0: entered allmulticast mode [ 720.867349][T25304] syzkaller0: entered promiscuous mode [ 720.879910][T25304] syzkaller0: entered allmulticast mode [ 721.464026][T25328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4439'. [ 721.603794][T25334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4442'. [ 721.795293][T25343] netlink: 'syz.3.4444': attribute type 4 has an invalid length. [ 721.816556][T25343] netlink: 'syz.3.4444': attribute type 4 has an invalid length. [ 721.913446][T25347] bond0: (slave vlan2): Opening slave failed [ 721.972963][T25351] syzkaller0: entered promiscuous mode [ 721.978675][T25351] syzkaller0: entered allmulticast mode [ 722.137296][ T60] net_ratelimit: 18 callbacks suppressed [ 722.137313][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.151504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.200449][T21933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.208878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.229613][T21933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.238353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.265054][T21933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.273625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.289902][T21933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.298278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.335876][T25367] tipc: Enabled bearer , priority 0 [ 722.347179][T25367] syzkaller0: entered promiscuous mode [ 722.353718][T25367] syzkaller0: entered allmulticast mode [ 722.392239][T25367] tipc: Resetting bearer [ 722.407746][T25366] tipc: Resetting bearer [ 722.443553][T25366] tipc: Disabling bearer [ 722.474433][T25372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4454'. [ 722.528256][T25372] batman_adv: batadv0: Removing interface: ipvlan1 [ 722.572415][T25372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.632886][T25379] syzkaller0: entered promiscuous mode [ 722.639133][T25379] syzkaller0: entered allmulticast mode [ 722.648328][T25378] syzkaller1: entered promiscuous mode [ 722.656200][T25378] syzkaller1: entered allmulticast mode [ 722.719739][T25383] netlink: 'syz.4.4455': attribute type 298 has an invalid length. [ 722.744009][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.754182][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.204003][T25402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4461'. [ 723.232862][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4460'. [ 723.287981][T25404] syzkaller0: entered promiscuous mode [ 723.303507][T25404] syzkaller0: entered allmulticast mode [ 723.466030][T25411] syzkaller0: entered promiscuous mode [ 723.482483][T25411] syzkaller0: entered allmulticast mode [ 723.497961][T25413] syzkaller0: entered promiscuous mode [ 723.512143][T25413] syzkaller0: entered allmulticast mode [ 723.697480][T25429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4467'. [ 724.219891][T25452] syzkaller0: entered promiscuous mode [ 724.229271][T25452] syzkaller0: entered allmulticast mode [ 724.281979][T25456] syzkaller0: entered promiscuous mode [ 724.287705][T25456] syzkaller0: entered allmulticast mode [ 724.396637][T25462] syzkaller0: entered promiscuous mode [ 724.411408][T25462] syzkaller0: entered allmulticast mode [ 724.527657][T25458] tipc: Enabled bearer , priority 0 [ 724.555446][T25457] tipc: Resetting bearer [ 724.608051][T25457] tipc: Disabling bearer [ 724.799773][T25483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4485'. [ 724.817817][T25485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4484'. [ 724.934697][T25483] 8021q: adding VLAN 0 to HW filter on device bond10 [ 724.952103][T25492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4485'. [ 725.080195][T25490] 8021q: adding VLAN 0 to HW filter on device bond11 [ 725.095779][T25490] bond10: (slave bond11): Enslaving as an active interface with an up link [ 725.122982][T25492] bond10 (unregistering): (slave bond11): Releasing backup interface [ 725.154544][T25492] bond10 (unregistering): Released all slaves [ 725.639366][T25523] syzkaller0: entered promiscuous mode [ 725.671902][T25523] syzkaller0: entered allmulticast mode [ 725.689022][T25525] syzkaller0: entered promiscuous mode [ 725.695551][T25525] syzkaller0: entered allmulticast mode [ 725.815291][T25532] syzkaller0: entered promiscuous mode [ 725.822088][T25532] syzkaller0: entered allmulticast mode [ 726.214876][T25542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4496'. [ 726.308716][T25553] tipc: Enabled bearer , priority 0 [ 726.323286][T25547] syzkaller0: entered promiscuous mode [ 726.333048][T25547] syzkaller0: entered allmulticast mode [ 726.403390][T25547] tipc: Resetting bearer [ 726.485450][T25546] tipc: Resetting bearer [ 726.522963][T25546] tipc: Disabling bearer [ 726.604726][T25561] syzkaller0: entered promiscuous mode [ 726.616706][T25561] syzkaller0: entered allmulticast mode [ 726.674482][T25558] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4500'. [ 727.076586][T25577] tipc: Enabled bearer , priority 0 [ 727.085111][T25577] syzkaller0: entered promiscuous mode [ 727.090641][T25577] syzkaller0: entered allmulticast mode [ 727.161664][T25577] tipc: Resetting bearer [ 727.184265][T25575] tipc: Resetting bearer [ 727.220271][T25575] tipc: Disabling bearer [ 727.226847][T25585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 727.260204][T25583] tipc: Enabled bearer , priority 0 [ 727.271693][T25583] syzkaller0: entered promiscuous mode [ 727.278847][T25583] syzkaller0: entered allmulticast mode [ 727.365245][T25583] tipc: Resetting bearer [ 727.390203][T25582] tipc: Resetting bearer [ 727.420545][T25582] tipc: Disabling bearer [ 727.432553][T25593] syzkaller1: entered promiscuous mode [ 727.438219][T25593] syzkaller1: entered allmulticast mode [ 727.646720][T25600] syzkaller0: entered promiscuous mode [ 727.652720][T25600] syzkaller0: entered allmulticast mode [ 730.168947][T25612] syzkaller0: entered promiscuous mode [ 730.174741][T25612] syzkaller0: entered allmulticast mode [ 730.363543][T25632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4520'. [ 730.913161][T25644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4520'. [ 731.413822][T25647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4522'. [ 731.423071][T25647] block nbd2: Unsupported socket: should be TCP or UNIX. [ 733.224599][T25659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4526'. [ 733.354882][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4526'. [ 733.976977][T25683] netlink: 'syz.1.4530': attribute type 1 has an invalid length. [ 734.019259][T25686] netlink: 'syz.0.4531': attribute type 1 has an invalid length. [ 734.074090][T25683] 8021q: adding VLAN 0 to HW filter on device bond8 [ 734.198181][T25696] netlink: 816 bytes leftover after parsing attributes in process `syz.4.4532'. [ 734.266884][T25690] bond18: (slave geneve3): making interface the new active one [ 734.278259][T25690] bond18: (slave geneve3): Enslaving as an active interface with an up link [ 734.303984][T25691] bond8: (slave geneve3): making interface the new active one [ 734.317385][T25691] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 734.322953][T25690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4531'. [ 734.349455][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 734.366670][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 734.377776][T25690] 8021q: adding VLAN 0 to HW filter on device bond18 [ 734.392491][ T5967] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 734.405263][ T5967] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 734.416431][ T5967] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.425272][ T5967] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.433818][ T5967] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.443746][ T5967] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.467397][T25705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 734.479991][T25705] block nbd2: Unsupported socket: should be TCP or UNIX. [ 734.536143][T25708] netlink: 'syz.2.4536': attribute type 13 has an invalid length. [ 734.639236][T25713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4536'. [ 734.999194][T25719] tipc: Failed to remove unknown binding: 66,0,0/2135697940:705692864/705692866 [ 735.024403][T25719] tipc: Failed to remove unknown binding: 66,0,0/2135697940:705692864/705692865 [ 735.118630][T25731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4539'. [ 735.179872][T25715] tipc: Failed to remove unknown binding: 66,0,0/2135697940:705692864/705692866 [ 735.208751][T25715] tipc: Failed to remove unknown binding: 66,0,0/2135697940:705692864/705692865 [ 735.325583][T25729] tipc: Resetting bearer [ 735.527437][T25737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4542'. [ 736.091027][T25752] IPv6: Can't replace route, no match found [ 736.104815][T25752] IPv6: Can't replace route, no match found [ 736.399472][T25757] net_ratelimit: 5 callbacks suppressed [ 736.399492][T25757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.414441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.441513][T25757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.519270][T25760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.528429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.559724][T25760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.570687][T25760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.582785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.654694][T25760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.664978][T25757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.989479][T25776] netlink: 'syz.0.4551': attribute type 9 has an invalid length. [ 737.019148][T25776] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4551'. [ 737.044959][T25781] wg2: Caught tx_queue_len zero misconfig [ 737.137388][T25778] netlink: 'syz.2.4552': attribute type 27 has an invalid length. [ 737.331599][T25790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4554'. [ 737.349570][T25791] xt_hashlimit: size too large, truncated to 1048576 [ 737.457773][T25795] netlink: 'syz.2.4555': attribute type 1 has an invalid length. [ 737.488461][T25795] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4555'. [ 737.999745][T25813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 739.172842][T25857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.204263][T25857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.355244][T25857] veth1_vlan: left promiscuous mode [ 739.391858][T25857] veth0_vlan: left promiscuous mode [ 739.398749][T25857] veth0_vlan: entered promiscuous mode [ 739.413495][T25857] veth1_vlan: entered promiscuous mode [ 739.433173][T25857] veth1_macvtap: left promiscuous mode [ 739.441929][T25857] veth0_macvtap: left promiscuous mode [ 739.448853][T25857] veth0_macvtap: entered promiscuous mode [ 739.461670][T21284] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.468903][T21284] bridge0: port 2(bridge_slave_1) entered listening state [ 739.785347][T25877] netlink: 'syz.3.4566': attribute type 1 has an invalid length. [ 739.817169][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4566'. [ 739.839886][T25877] netlink: 'syz.3.4566': attribute type 1 has an invalid length. [ 740.107027][T25898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4570'. [ 740.137122][T25898] block nbd2: Unsupported socket: should be TCP or UNIX. [ 740.395983][T25905] veth0: entered promiscuous mode [ 740.411635][T25908] bond0: entered promiscuous mode [ 740.417867][T25908] bond_slave_0: entered promiscuous mode [ 740.441609][T25908] bond_slave_1: entered promiscuous mode [ 740.458124][T25902] netlink: 'syz.3.4571': attribute type 3 has an invalid length. [ 740.478683][T25902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4571'. [ 740.514134][T25901] bond0: left promiscuous mode [ 740.530940][T25901] bond_slave_0: left promiscuous mode [ 740.536650][T25901] bond_slave_1: left promiscuous mode [ 740.552508][T25901] veth0: left promiscuous mode [ 740.701984][T25917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4575'. [ 740.783370][T25917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4575'. [ 740.909240][T25921] erspan0: left promiscuous mode [ 740.956271][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4577'. [ 740.967256][T25921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.990224][T25921] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.086398][T25921] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 741.193243][T25931] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4579'. [ 741.268439][T25931] syzkaller1: entered promiscuous mode [ 741.274379][T25931] syzkaller1: entered allmulticast mode [ 742.098278][T25951] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.4582'. [ 742.183693][T25959] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4585'. [ 742.722112][T25966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4587'. [ 742.741512][T25966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4587'. [ 742.891630][T25970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4588'. [ 742.911507][T25970] block nbd2: Unsupported socket: should be TCP or UNIX. [ 743.018799][T25973] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.4589'. [ 743.381887][T25981] net_ratelimit: 162 callbacks suppressed [ 743.381905][T25981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.396567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.125224][T26023] block nbd2: Unsupported socket: should be TCP or UNIX. [ 745.797449][T26029] __nla_validate_parse: 3 callbacks suppressed [ 745.797469][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4603'. [ 745.840895][T26029] block nbd2: Unsupported socket: should be TCP or UNIX. [ 745.894224][T26031] syzkaller0: entered promiscuous mode [ 745.915380][T26031] syzkaller0: entered allmulticast mode [ 745.942467][T26031] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.4605'. [ 746.234702][T26044] nbd2: detected capacity change from 0 to 127 [ 746.368108][ T4942] block nbd2: Receive control failed (result -104) [ 746.581788][T26053] netlink: 'syz.0.4608': attribute type 10 has an invalid length. [ 747.107407][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.140666][T26084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4616'. [ 747.644788][T26112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4616'. [ 747.823531][T26108] netlink: 'syz.3.4617': attribute type 1 has an invalid length. [ 748.263373][T26121] netlink: 'syz.4.4620': attribute type 17 has an invalid length. [ 748.310094][T26127] netlink: 840 bytes leftover after parsing attributes in process `syz.0.4619'. [ 748.424335][T26131] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4621'. [ 748.518151][T26139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4623'. [ 748.534368][T26139] block nbd3: Unsupported socket: should be TCP or UNIX. [ 748.587530][T26138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4624'. [ 748.694900][T26138] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 748.720379][T26150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4626'. [ 748.779958][T26135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4622'. [ 748.793160][T26138] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 749.585971][ T11] block nbd2: Connection timed out, retrying (0/1 alive) [ 749.595386][ T11] block nbd2: Connection timed out, retrying (0/1 alive) [ 749.606577][ T11] block nbd2: Connection timed out, retrying (0/1 alive) [ 749.614570][ T11] block nbd2: Connection timed out, retrying (0/1 alive) [ 749.628773][ T11] block nbd2: Dead connection, failed to find a fallback [ 749.642595][ T11] block nbd2: shutting down sockets [ 749.650119][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.668222][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 749.676733][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.685921][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 749.695476][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.704759][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 749.712700][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.721992][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.734454][T25519] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.767892][T25519] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.777277][T25519] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.808734][T25519] Buffer I/O error on dev nbd2, logical block 1, async page read [ 749.840000][T25519] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.868768][T25519] Buffer I/O error on dev nbd2, logical block 2, async page read [ 749.900121][T25519] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.932612][T25519] Buffer I/O error on dev nbd2, logical block 3, async page read [ 749.966691][T25519] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.985873][T25519] Buffer I/O error on dev nbd2, logical block 0, async page read [ 750.011482][T25519] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 750.039872][T25519] Buffer I/O error on dev nbd2, logical block 1, async page read [ 750.059420][T25519] ldm_validate_partition_table(): Disk read failed. [ 750.072743][T25519] Dev nbd2: unable to read RDB block 0 [ 750.082681][T25519] nbd2: unable to read partition table [ 750.119997][T25519] ldm_validate_partition_table(): Disk read failed. [ 750.150968][T25519] Dev nbd2: unable to read RDB block 0 [ 750.170214][T25519] nbd2: unable to read partition table [ 750.811093][T26212] sctp: [Deprecated]: syz.2.4640 (pid 26212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.811093][T26212] Use struct sctp_sack_info instead [ 750.853385][T26212] sctp: [Deprecated]: syz.2.4640 (pid 26212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.853385][T26212] Use struct sctp_sack_info instead [ 752.084913][T26160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.220626][T26217] __nla_validate_parse: 5 callbacks suppressed [ 752.220643][T26217] netlink: 34 bytes leftover after parsing attributes in process `syz.1.4642'. [ 752.295242][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4642'. [ 752.599969][T26232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4648'. [ 752.766702][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4648'. [ 752.906866][T26252] tipc: Resetting bearer [ 753.627006][T26279] bridge0: port 1(erspan0) entered blocking state [ 753.642859][T26279] bridge0: port 1(erspan0) entered disabled state [ 753.649605][T26279] erspan0: entered allmulticast mode [ 753.662076][T26279] erspan0: entered promiscuous mode [ 753.670196][T26284] erspan0: left allmulticast mode [ 753.675973][T26284] erspan0: left promiscuous mode [ 753.682619][T26284] bridge0: port 1(erspan0) entered disabled state [ 753.883598][T26279] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4665'. [ 753.919808][T26279] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4665'. [ 753.989398][T26283] syzkaller0: entered promiscuous mode [ 754.011285][T26283] syzkaller0: entered allmulticast mode [ 754.119546][T26309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4676'. [ 754.215043][T26315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4679'. [ 754.743271][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4679'. [ 754.831988][T26336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4676'. [ 759.526510][T26371] __nla_validate_parse: 1 callbacks suppressed [ 759.526530][T26371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4689'. [ 759.734990][T26382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4693'. [ 759.791259][T26382] block nbd3: Unsupported socket: should be TCP or UNIX. [ 760.173273][T26398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4699'. [ 760.238439][T26400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4700'. [ 760.404786][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4699'. [ 760.452264][T26400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4700'. [ 760.741523][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'. [ 761.562745][T26441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4712'. [ 761.581097][T26441] block nbd3: Unsupported socket: should be TCP or UNIX. [ 761.585784][T26434] tipc: Resetting bearer [ 763.656633][T26501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4736'. [ 763.821802][T26514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 764.761563][T26540] __nla_validate_parse: 2 callbacks suppressed [ 764.761583][T26540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4748'. [ 764.779510][T26543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4745'. [ 765.086766][T26557] netlink: 'syz.2.4753': attribute type 25 has an invalid length. [ 765.579423][T26585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4755'. [ 765.835770][T26574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4755'. [ 766.319349][T26610] tipc: Resetting bearer [ 766.436584][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4772'. [ 766.464368][T26620] block nbd3: Unsupported socket: should be TCP or UNIX. [ 766.722491][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4775'. [ 767.188871][T26649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4780'. [ 767.202797][T26641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4779'. [ 767.255269][T26638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4779'. [ 767.399642][T26660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4786'. [ 767.913312][T26685] block nbd3: Unsupported socket: should be TCP or UNIX. [ 768.398992][T26705] netlink: 'syz.3.4806': attribute type 2 has an invalid length. [ 768.476910][T26711] block nbd3: Unsupported socket: should be TCP or UNIX. [ 768.798114][T26715] tipc: Resetting bearer [ 769.501281][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 770.112647][T26783] __nla_validate_parse: 6 callbacks suppressed [ 770.112667][T26783] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4834'. [ 770.318487][T26794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4834'. [ 770.518583][T26806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'. [ 770.540199][T26806] block nbd3: Unsupported socket: should be TCP or UNIX. [ 771.288187][T26828] netlink: 428 bytes leftover after parsing attributes in process `syz.4.4847'. [ 771.482329][T26837] netlink: 'syz.0.4853': attribute type 4 has an invalid length. [ 772.194420][T26869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4861'. [ 772.216042][T26869] block nbd3: Unsupported socket: should be TCP or UNIX. [ 772.376264][T26874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4863'. [ 772.411284][T26874] netlink: 'syz.1.4863': attribute type 5 has an invalid length. [ 772.430846][T26874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4863'. [ 772.727881][T26880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4866'. [ 772.750461][T26880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4866'. [ 772.769102][T26880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4866'. [ 773.162271][T26903] lo: Caught tx_queue_len zero misconfig [ 773.210384][T26906] netlink: 'syz.3.4876': attribute type 10 has an invalid length. [ 773.519071][T26930] block nbd3: Unsupported socket: should be TCP or UNIX. [ 773.864286][T26940] [ 773.866623][T26940] ====================================================== [ 773.873674][T26940] WARNING: possible circular locking dependency detected [ 773.880775][T26940] syzkaller #0 Not tainted [ 773.885197][T26940] ------------------------------------------------------ [ 773.892233][T26940] syz.0.4886/26940 is trying to acquire lock: [ 773.898289][T26940] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 773.908258][T26940] [ 773.908258][T26940] but task is already holding lock: [ 773.915608][T26940] ffff88804e496e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 773.924398][T26940] [ 773.924398][T26940] which lock already depends on the new lock. [ 773.924398][T26940] [ 773.934787][T26940] [ 773.934787][T26940] the existing dependency chain (in reverse order) is: [ 773.943781][T26940] [ 773.943781][T26940] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 773.951580][T26940] lock_sock_nested+0x41/0x100 [ 773.956926][T26940] inet_shutdown+0x6a/0x390 [ 773.961990][T26940] nbd_mark_nsock_dead+0x2e9/0x560 [ 773.967696][T26940] sock_shutdown+0x15e/0x260 [ 773.972790][T26940] nbd_clear_sock+0x24/0x170 [ 773.977879][T26940] nbd_config_put+0x2dd/0x580 [ 773.983054][T26940] nbd_genl_connect+0x19d5/0x1cf0 [ 773.988580][T26940] genl_family_rcv_msg_doit+0x22a/0x330 [ 773.994691][T26940] genl_rcv_msg+0x61c/0x7a0 [ 773.999696][T26940] netlink_rcv_skb+0x232/0x4b0 [ 774.005014][T26940] genl_rcv+0x28/0x40 [ 774.009506][T26940] netlink_unicast+0x75c/0x8e0 [ 774.014774][T26940] netlink_sendmsg+0x813/0xb40 [ 774.020042][T26940] ____sys_sendmsg+0x972/0x9f0 [ 774.025382][T26940] ___sys_sendmsg+0x2a5/0x360 [ 774.030575][T26940] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.036017][T26940] do_syscall_64+0x15f/0xf80 [ 774.041196][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.047635][T26940] [ 774.047635][T26940] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 774.055256][T26940] __mutex_lock+0x1a3/0x1550 [ 774.060404][T26940] nbd_queue_rq+0x37b/0x1100 [ 774.065502][T26940] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 774.071688][T26940] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 774.078588][T26940] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 774.085082][T26940] blk_mq_run_hw_queue+0x348/0x4f0 [ 774.090702][T26940] blk_mq_dispatch_list+0xd16/0xe10 [ 774.096519][T26940] blk_mq_flush_plug_list+0x48d/0x570 [ 774.102407][T26940] __blk_flush_plug+0x3ed/0x4d0 [ 774.107864][T26940] __submit_bio+0x28d/0x580 [ 774.112886][T26940] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 774.119025][T26940] block_read_full_folio+0x599/0x830 [ 774.124837][T26940] filemap_read_folio+0x137/0x3b0 [ 774.130396][T26940] do_read_cache_folio+0x358/0x590 [ 774.136014][T26940] read_part_sector+0xb6/0x2b0 [ 774.141337][T26940] adfspart_check_ICS+0xb1/0x960 [ 774.146784][T26940] bdev_disk_changed+0x817/0x1770 [ 774.152312][T26940] blkdev_get_whole+0x380/0x510 [ 774.157721][T26940] bdev_open+0x31e/0xd30 [ 774.162480][T26940] blkdev_open+0x470/0x610 [ 774.167413][T26940] do_dentry_open+0x785/0x14e0 [ 774.172706][T26940] vfs_open+0x3b/0x340 [ 774.177289][T26940] path_openat+0x2e08/0x3860 [ 774.182388][T26940] do_file_open+0x23e/0x4a0 [ 774.187486][T26940] do_sys_openat2+0x113/0x200 [ 774.192668][T26940] __x64_sys_openat+0x138/0x170 [ 774.198027][T26940] do_syscall_64+0x15f/0xf80 [ 774.203130][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.209544][T26940] [ 774.209544][T26940] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 774.216749][T26940] __mutex_lock+0x1a3/0x1550 [ 774.221859][T26940] nbd_queue_rq+0xc6/0x1100 [ 774.226866][T26940] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 774.232921][T26940] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 774.239765][T26940] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 774.246270][T26940] blk_mq_run_hw_queue+0x348/0x4f0 [ 774.251890][T26940] blk_mq_dispatch_list+0xd16/0xe10 [ 774.257593][T26940] blk_mq_flush_plug_list+0x48d/0x570 [ 774.263473][T26940] __blk_flush_plug+0x3ed/0x4d0 [ 774.268845][T26940] __submit_bio+0x28d/0x580 [ 774.273865][T26940] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 774.280021][T26940] block_read_full_folio+0x599/0x830 [ 774.285829][T26940] filemap_read_folio+0x137/0x3b0 [ 774.291372][T26940] do_read_cache_folio+0x358/0x590 [ 774.297006][T26940] read_part_sector+0xb6/0x2b0 [ 774.302413][T26940] adfspart_check_ICS+0xb1/0x960 [ 774.307886][T26940] bdev_disk_changed+0x817/0x1770 [ 774.313434][T26940] blkdev_get_whole+0x380/0x510 [ 774.318806][T26940] bdev_open+0x31e/0xd30 [ 774.323560][T26940] blkdev_open+0x470/0x610 [ 774.328501][T26940] do_dentry_open+0x785/0x14e0 [ 774.333778][T26940] vfs_open+0x3b/0x340 [ 774.338353][T26940] path_openat+0x2e08/0x3860 [ 774.343454][T26940] do_file_open+0x23e/0x4a0 [ 774.348467][T26940] do_sys_openat2+0x113/0x200 [ 774.353646][T26940] __x64_sys_openat+0x138/0x170 [ 774.359002][T26940] do_syscall_64+0x15f/0xf80 [ 774.364098][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.370625][T26940] [ 774.370625][T26940] -> #3 (set->srcu){.+.+}-{0:0}: [ 774.377736][T26940] __synchronize_srcu+0xca/0x300 [ 774.383208][T26940] elevator_switch+0x1e8/0x7a0 [ 774.388481][T26940] elevator_change+0x2cc/0x450 [ 774.393754][T26940] elevator_set_default+0x36c/0x430 [ 774.399462][T26940] blk_register_queue+0x3e9/0x4e0 [ 774.404988][T26940] __add_disk+0x677/0xd50 [ 774.409819][T26940] add_disk_fwnode+0xfb/0x480 [ 774.415090][T26940] nbd_dev_add+0x72c/0xb50 [ 774.420012][T26940] nbd_init+0x168/0x1f0 [ 774.424756][T26940] do_one_initcall+0x250/0x870 [ 774.430051][T26940] do_initcall_level+0x104/0x190 [ 774.435497][T26940] do_initcalls+0x59/0xa0 [ 774.440334][T26940] kernel_init_freeable+0x2a6/0x3e0 [ 774.446048][T26940] kernel_init+0x1d/0x1d0 [ 774.450933][T26940] ret_from_fork+0x514/0xb70 [ 774.456044][T26940] ret_from_fork_asm+0x1a/0x30 [ 774.461325][T26940] [ 774.461325][T26940] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 774.469143][T26940] __mutex_lock+0x1a3/0x1550 [ 774.474253][T26940] elevator_change+0x1b3/0x450 [ 774.479529][T26940] elevator_set_none+0xb5/0x140 [ 774.484891][T26940] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 774.491215][T26940] nbd_start_device+0x17f/0xb10 [ 774.496573][T26940] nbd_genl_connect+0x165b/0x1cf0 [ 774.502102][T26940] genl_family_rcv_msg_doit+0x22a/0x330 [ 774.508152][T26940] genl_rcv_msg+0x61c/0x7a0 [ 774.513164][T26940] netlink_rcv_skb+0x232/0x4b0 [ 774.518468][T26940] genl_rcv+0x28/0x40 [ 774.522970][T26940] netlink_unicast+0x75c/0x8e0 [ 774.528268][T26940] netlink_sendmsg+0x813/0xb40 [ 774.533558][T26940] ____sys_sendmsg+0x972/0x9f0 [ 774.538843][T26940] ___sys_sendmsg+0x2a5/0x360 [ 774.544039][T26940] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.549488][T26940] do_syscall_64+0x15f/0xf80 [ 774.554587][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.560986][T26940] [ 774.560986][T26940] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 774.569603][T26940] blk_alloc_queue+0x546/0x680 [ 774.574902][T26940] __blk_mq_alloc_disk+0x197/0x390 [ 774.580608][T26940] nbd_dev_add+0x499/0xb50 [ 774.585540][T26940] nbd_init+0x168/0x1f0 [ 774.590224][T26940] do_one_initcall+0x250/0x870 [ 774.595513][T26940] do_initcall_level+0x104/0x190 [ 774.600966][T26940] do_initcalls+0x59/0xa0 [ 774.605807][T26940] kernel_init_freeable+0x2a6/0x3e0 [ 774.611524][T26940] kernel_init+0x1d/0x1d0 [ 774.616375][T26940] ret_from_fork+0x514/0xb70 [ 774.621470][T26940] ret_from_fork_asm+0x1a/0x30 [ 774.626768][T26940] [ 774.626768][T26940] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 774.633971][T26940] __lock_acquire+0x15a5/0x2cf0 [ 774.639359][T26940] lock_acquire+0x106/0x350 [ 774.644368][T26940] fs_reclaim_acquire+0x71/0x100 [ 774.649816][T26940] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 774.656128][T26940] __alloc_skb+0x27d/0x7d0 [ 774.661055][T26940] tcp_send_active_reset+0x8a/0x550 [ 774.666822][T26940] __tcp_close+0x4c5/0xfe0 [ 774.671746][T26940] tcp_close+0x28/0x110 [ 774.676415][T26940] inet_release+0x143/0x190 [ 774.681422][T26940] sock_close+0xc3/0x240 [ 774.686170][T26940] __fput+0x44f/0xa60 [ 774.690655][T26940] task_work_run+0x1d9/0x270 [ 774.695794][T26940] exit_to_user_mode_loop+0xed/0x480 [ 774.701598][T26940] do_syscall_64+0x33e/0xf80 [ 774.706691][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.713089][T26940] [ 774.713089][T26940] other info that might help us debug this: [ 774.713089][T26940] [ 774.723349][T26940] Chain exists of: [ 774.723349][T26940] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 774.723349][T26940] [ 774.736066][T26940] Possible unsafe locking scenario: [ 774.736066][T26940] [ 774.743507][T26940] CPU0 CPU1 [ 774.748895][T26940] ---- ---- [ 774.754241][T26940] lock(sk_lock-AF_INET6); [ 774.758727][T26940] lock(&nsock->tx_lock); [ 774.765646][T26940] lock(sk_lock-AF_INET6); [ 774.772665][T26940] lock(fs_reclaim); [ 774.776632][T26940] [ 774.776632][T26940] *** DEADLOCK *** [ 774.776632][T26940] [ 774.784810][T26940] 2 locks held by syz.0.4886/26940: [ 774.789985][T26940] #0: ffff888076ea8840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 774.800201][T26940] #1: ffff88804e496e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 774.809329][T26940] [ 774.809329][T26940] stack backtrace: [ 774.815211][T26940] CPU: 1 UID: 0 PID: 26940 Comm: syz.0.4886 Not tainted syzkaller #0 PREEMPT(full) [ 774.815228][T26940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.815244][T26940] Call Trace: [ 774.815252][T26940] [ 774.815306][T26940] dump_stack_lvl+0xe8/0x150 [ 774.815355][T26940] print_circular_bug+0x2e1/0x300 [ 774.815375][T26940] check_noncircular+0x12e/0x150 [ 774.815395][T26940] __lock_acquire+0x15a5/0x2cf0 [ 774.815411][T26940] ? do_syscall_64+0x33e/0xf80 [ 774.815448][T26940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.815469][T26940] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 774.815487][T26940] lock_acquire+0x106/0x350 [ 774.815501][T26940] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 774.815523][T26940] fs_reclaim_acquire+0x71/0x100 [ 774.815542][T26940] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 774.815559][T26940] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 774.815577][T26940] ? __alloc_skb+0x27d/0x7d0 [ 774.815595][T26940] ? __alloc_skb+0x186/0x7d0 [ 774.815613][T26940] __alloc_skb+0x27d/0x7d0 [ 774.815633][T26940] tcp_send_active_reset+0x8a/0x550 [ 774.815649][T26940] __tcp_close+0x4c5/0xfe0 [ 774.815682][T26940] tcp_close+0x28/0x110 [ 774.815698][T26940] inet_release+0x143/0x190 [ 774.815713][T26940] sock_close+0xc3/0x240 [ 774.815728][T26940] ? __pfx_sock_close+0x10/0x10 [ 774.815742][T26940] __fput+0x44f/0xa60 [ 774.815762][T26940] task_work_run+0x1d9/0x270 [ 774.815781][T26940] ? __pfx_task_work_run+0x10/0x10 [ 774.815802][T26940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.815816][T26940] exit_to_user_mode_loop+0xed/0x480 [ 774.815829][T26940] ? rcu_is_watching+0x15/0xb0 [ 774.815846][T26940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.815860][T26940] do_syscall_64+0x33e/0xf80 [ 774.815872][T26940] ? trace_irq_disable+0x3b/0x140 [ 774.815901][T26940] ? clear_bhb_loop+0x40/0x90 [ 774.815916][T26940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.815930][T26940] RIP: 0033:0x7fd66679ce59 [ 774.815947][T26940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.815986][T26940] RSP: 002b:00007ffe64023e88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 774.816002][T26940] RAX: 0000000000000000 RBX: 00007ffe64023f70 RCX: 00007fd66679ce59 [ 774.816012][T26940] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 774.816020][T26940] RBP: 00000000000bcebb R08: 0000000000000001 R09: 0000000000000000 [ 774.816029][T26940] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffe64023fb0 [ 774.816038][T26940] R13: 00007fd666a15fac R14: 00000000000bcefb R15: 00007fd666a15fa0 [ 774.816054][T26940] [ 774.818046][ T7085] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 422 sec