last executing test programs: 4.785948735s ago: executing program 3 (id=2587): r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) close(0x3) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0}) r2 = socket(0x1d, 0x80802, 0x6) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="5604", 0x2}], 0x1) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) 4.6387313s ago: executing program 1 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 64) close(0x3) (async) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3b, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x19, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79e16d"}}}}}, 0x0) 4.492091654s ago: executing program 1 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x470f82, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r6 = socket(0x22, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040000000c2"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x4, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x7, r7}, 0x38) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f00000001c0)=r3}, 0x20) recvmsg$unix(r6, &(0x7f0000002140)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/177, 0xb1}, {&(0x7f0000001940)=""/139, 0x8b}], 0x3, &(0x7f0000002100)}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) mmap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x6, 0x10, r9, 0x92177000) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 4.366982103s ago: executing program 1 (id=2594): sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xb, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000a00)={@val={0xa}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @tcp={0xf, 0x6, "46e2eb", 0x2cf, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x2f}, @dstopts={0x2b, 0x6, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x7, [0x80000000000]}}, @enc_lim, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xf099}, @calipso={0x7, 0x10, {0x0, 0x2, 0x75, 0x0, [0xb]}}]}, @routing={0x2, 0x0, 0x2, 0x42, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1a}]}, @routing={0x0, 0x10, 0x2, 0xb, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @local, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @remote}]}, @hopopts={0x2, 0x5, '\x00', [@generic={0x3, 0x11, "4adb2a99103fc1052c0f"}, @ra={0x5, 0x2, 0x800}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0xa}}]}, @dstopts={0xfb, 0x25, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim, @jumbo={0xc2, 0x4, 0xd1fb}, @hao={0xc9, 0x10, @mcast2}, @generic={0x40, 0xf7, "8641a12804f0aea274c8f3cd1a209871b209ff6f72929847fa71c6492080d744e9d42a38fde859dbd619296f5350dc10e6b4e06fa7432fd900069c184cd3fcaeeb3c9887ece5f20b148b84898977122439a35b2970f65352a11687551f5e1b068f24cf5cba2788b7df13398b253d138c9367ae25a33bbb0e4a4a938b6b8be240d5145ace4263c65abc7c77968d30b505e2ba5ca05831931ff72621823e62dcb807a7a1cd030cfddeb24fa8dca79413c3f72ba9729f4572a712c26780a5773957543118d3605d6b94bd2d7660ac8515e523d6e01f3702610e6b8a6d8754f670d1b90fd7326e1d22f6150c8ef19ba479f6fcb07495ba4a4d"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x4, 0x6, 0x0, 0xd, {[@sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x213c}, @mss={0x2, 0x4}]}}, {"746814363f498a31c41bb82e1ec6c044cd37875408710bd81cec50f693bad0fe22b2967f6618e32421a6bf060fe7173f8e5a2f271b84a96186af662a0e08c1f3388bea7e7e82bea3c822e37fb85658a77755c4d44520da896ea07034577ceb04002c050452882a"}}}}}}}}, 0xffffffffffffff4f) 4.27159842s ago: executing program 2 (id=2596): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001200)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7f", 0xb}], 0x1, 0xf) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x20, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x2ea, 0xfe, &(0x7f0000000600)=""/254, 0x4db87591a0c22c54, 0x2, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r1, r1, r2, 0x1, r4, r4], &(0x7f0000000780)=[{0x4, 0x5, 0x5, 0x2}, {0x0, 0x5, 0xf, 0x2}, {0x5, 0x4, 0x4}, {0x3, 0x4, 0x6, 0x9}], 0x10, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r4, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1f, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @ldst={0x1, 0x3, 0x0, 0x0, 0xa, 0x30, 0x10}, @map_val={0x18, 0xe, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.062875011s ago: executing program 2 (id=2597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x14c}}, 0x844) 3.957522656s ago: executing program 2 (id=2598): socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x12}) write(r1, &(0x7f0000000340), 0x11000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) 3.807919597s ago: executing program 4 (id=2600): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a950000000bf62d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf250b0000000c00058007000200"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff0000000000d73c5318110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 3.523896417s ago: executing program 4 (id=2603): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000064f3ffbf7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="21a0ffff030000e34300128009000100626f6e64"], 0x64}, 0x1, 0x0, 0x0, 0x2004001c}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty=0x2000000}}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000140)="2a173b50e7db69f2e37905c6565589c92893bdaeb5a02090c78556d2b7fe66eb22c53f275ac90968607737a41d6ff289763328f39b93d8c644b44b0699", &(0x7f00000001c0)=""/103, &(0x7f00000003c0)="3deee2c670c760fac40fa5a853b7ff10df6fec01f2d8ae3113ff3aba371b40a8dcc000c1538f6db5b39c0c254ea2e53aac4398c434d59e82716428da0ac575facf80f3f329f00d5cecd38f", &(0x7f0000000540)="c3a515fde5e66bbafb8a581e5c18a4bdcd94c1e1fe906f79ebc81e6f202d913a5ac1b9f7695b33c6d49a1353c651f894a8205a59741f35e64a7df0a577c0aaea46213f3bf25b2204f7bd568aa086b6284812a55f09ae9dcda13d367831b7ea522e025c356a14fee5f030013fd0ed9e1897f365b311cf6da10b60ef9204f55ce1175367fb555c84afd04717c18d02aeaf5f0a4696a174aca53f3db9ba279a2db857fa5b0e00242bf9d9c6999f164576f8e1ca3d7ff053fcca3275f21c75e51c6aa73ccb7532fdda4178ff3533c4c7d4dd829f4c6c1471ef2f", 0x400, r1}, 0x38) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 3.449699632s ago: executing program 1 (id=2605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x6}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'vlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x514c9}]}}}]}, 0x40}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000004c0)={r3, &(0x7f00000001c0)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x521000, &(0x7f0000000200)={@align=0xf78, {0x1000, 0x8, 0x0, 0x127}}, 0x2, &(0x7f00000003c0), &(0x7f0000000480)=0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001800c00028005000100000000002c00018014000300"], 0x50}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000100)=@buf) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafb2205eaa7", 0x13}, {&(0x7f0000000180)="9ca344b373c5071ee61089", 0xb}], 0x2) 3.434163939s ago: executing program 3 (id=2606): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2f, 0x8, 0x3, 0x8, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x8, 0x3, 0x437}}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000140)=0x95, 0x4) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x10, 0x7800, 0x8, 0x9, {{0x6, 0x4, 0x1, 0xc, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@ra={0x94, 0x4}]}}}}}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) write$tun(r5, &(0x7f0000000240)={@val={0x0, 0xf7}, @val={0x0, 0x0, 0x2, 0xb3, 0x9, 0xfff}, @llc={@snap={0xab, 0x0, "a6", "46a8a4", 0x5, "f1e92af968bfb7c0d81b5309b48e41cc5d62345fbb8d2b6e4fd080d6a5af6a533be3d2a321fbb3bc2e449c6e5a6c910a"}}}, 0x46) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000001300)=0x1008) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001340)={r7, 0x3}, &(0x7f0000001380)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000013c0)={r7, 0x90, "84a606e5755caa904b9b31d65ab0325183cecbd07251e915ba110c06e38d5e813c284196da5c29dba5d5880b652f9a8415d30947057175f7d18e79b16b7315edfe94311d4baf1ff39632f601ed5460530c0b0d7c0fa873474672ac4945fd4d5a9e299311df9c5c24c336b5791c51117df3af514d330a6738b4a7175d7bfec66144dbe3ce3108e8e2d2e4549ab6d27f4a"}, &(0x7f0000001480)=0x98) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001500), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000001580)={'syztnl0\x00', &(0x7f0000001540)={'sit0\x00', r2, 0x40, 0x10, 0x6, 0x3, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x68, 0x0, 0x56, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0xb, 0x65, [@multicast1, @multicast1]}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r9, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000001680)=0x7fff, 0x4) (async) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r11, &(0x7f00000016c0)={0x1a, 0x201, 0x3, 0x10, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000001700)={r8, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000001740), &(0x7f0000001780)=0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000017c0)=[@in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in6={0xa, 0x4e24, 0x800, @loopback, 0x8001}, @in6={0xa, 0x4e21, 0x0, @private2, 0x200}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x0, @local, 0x3}, @in6={0xa, 0x4e22, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0xc8) (async) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001980)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@const={0x9, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61, 0x92c3b3d765c11837, 0x0, 0x5f, 0x30, 0x1e, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001900)=""/55, 0x30, 0x37, 0x1, 0x0, 0x10000, @value=r12}, 0x28) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)=@ipv4_newaddr={0x34, 0x14, 0x4, 0x70bd2a, 0x25dfdbfd, {0x2, 0x38, 0x20, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x727, 0xffffffff, 0x217f, 0x73}}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040804}, 0x20040000) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000001c00)=0x10, 0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001c40)={r7, 0x2}, 0x8) 3.205691339s ago: executing program 3 (id=2608): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0, 0x9}]}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg$unix(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x400) shutdown(r6, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0xd, 0x8000, 0x800, 0x10000, r9}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r9, 0xbd1, 0x10, 0x2800000000000, 0x4}, &(0x7f0000000140)=0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) 3.126711201s ago: executing program 0 (id=2609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20004854}, 0x0) 3.062296696s ago: executing program 4 (id=2610): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0xc, 0x1, 0x5, 0x7}, @mptcp=@syn={0x1e, 0xc}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}, @window={0x3, 0x3, 0xf4}]}}}}}}}, 0x0) getsockname$ax25(r0, &(0x7f0000000080)={{0x3, @null}, [@rose, @null, @default, @rose, @remote, @netrom, @bcast, @rose]}, &(0x7f0000000140)=0x48) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4) r2 = socket$netlink(0x10, 0x3, 0x11) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0x46, &(0x7f00000011c0), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x140a, 0x0, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x4, 0xa5, [0xbbf3, 0x1, 0x1, 0x0, 0x5, 0x80], 0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/165}, &(0x7f00000003c0)=0x78) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000004c0)=0x81, 0x4) getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f00000017c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="ec000000110009050000000000000000c000670005d7b8d6aeb2d9c349d02966cfda89913f2dd9a8d43bc958472bc9e8cc099fbba24047c31303123d76781acec7f22a2eba286dde70761bf60bbeb56024e84a3a31af03716ff6dddf9f3fd24dcee0d00fea16ba9fc26d5084415bc549140a0368e7246aac1e1fcd650280eef9c9c4f81aa6e0d4a04dd7e76f951dc5f756"], 0xec}], 0x1}, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x8, 0x4) 2.677966606s ago: executing program 0 (id=2611): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0422784dcb0002", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="0500110001000000"], 0x4c}}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.547869385s ago: executing program 2 (id=2612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r5, 0x100000af5, 0x0) close(r4) close(r3) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x7fff, 0xcc, 0x0, 0x10, 0x541b]}, &(0x7f0000000240)=0x78) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9, 0xffe0}, {0x7, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 2.344774194s ago: executing program 0 (id=2613): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a4, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt(r1, 0x3, 0x9, &(0x7f00000002c0)=""/175, &(0x7f0000000380)=0xaf) accept$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{}, [@rose, @remote, @remote, @remote, @default, @null, @null, @default]}, &(0x7f0000000440)=0x48) (async) r2 = accept$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{}, [@rose, @remote, @remote, @remote, @default, @null, @null, @default]}, &(0x7f0000000440)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000480)=@bpq0, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000600)={&(0x7f00000004c0), 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x1, 0x446, 0x2, {}, {r4, r5/1000+60000}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x18, 0x3, 0x0, 0x0, "61ae8f4c3a2bb0f59e533d7ec5e855328d43619c13c7b701bf1f604e8bd8186d35e522dadbf6f7631b3da8b5dbebda4d612ea5851e974cb57e581306166128e9"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x40004) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000740)={r0, &(0x7f0000000640)='bpq0\x00', 0x185000, &(0x7f0000000680)={@_ha_fsid={[0xa, 0x1]}, {0x1, 0x6, 0x9, 0x87b}}, 0x8, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x2}) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r1) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r1) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x22200448}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x22200448}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000051}, 0x20008000) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000051}, 0x20008000) sendmsg$NFT_BATCH(r6, &(0x7f0000000e40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x102, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x3a}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x1}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x7f}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0xf8}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e24}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x9}]}}, @NFT_MSG_DELRULE={0x148, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xcf, 0x7, 0x1, 0x0, "950d9550fdd84973afda8ff751528638fd41ece4252be33c50ebcb7e06b3b7f72f0f6e55c8cd2775e22901f89f4be258369312f40f3f6ead2d692448c6c580d624f0fa236a2fe3f2b53585665f01ceb29b2e8752adf6d9697d4042caacc2952dd08d6009fdd81708ae2cc4cb0cb97a094fbf19fa292672f7a9c99d94d830533df69ab91062760e685b1a4eeaca114e3568f74d89e180c7d0417749759a39a901c0a1729d1898a716719882e136164df5b9ed2856839b19ec61462c2117973a010ab62a291dec42945e0d46"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x64, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x144, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_USERDATA={0xeb, 0xd, 0x1, 0x0, "24b1795c188023bf4d2f4f5e0ab565d37f40cc939566d742c5d2d03ce131c337f7ab1e90289157e4a592937a8bdf543e1e9ed2e0f62909087e28b1fbaeb7db2198f859475db28ef2976af87511a6d79970991c666ce3703976306a515d4c4ec69836bbae1589c527f8703018d8e8817ff8e8f556f8fed03c0315278ddbaa0d4db4aa496916b36e69a19229c00d9f47e50a162874070c31f79f462bf6050217759ce7b518368f93d07cf25f48ba5ba931ac311049633e1b6a1562e81b0485ecf40a13fb58d7367d7c13d0f8fdba2c49ec10479b9c453ad87d0ca773a7832db2dae23ac7e0d7aff3"}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3f0}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000810) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000e80)={0x0, 0x80000001, 0x80000000, 0x7}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000ec0)=""/126, &(0x7f0000000f40)=0x7e) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000f80)=0xd, 0x4) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000f80)=0xd, 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000fc0)) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x813, r0, 0x7b30000) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r8, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x69}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000003580)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003540)={&(0x7f00000011c0)={0x2368, 0x12, 0x400, 0x70bd2a, 0x25dfdbfc, {0x22, 0x4, 0x41, 0x40, {0x4e24, 0x4e22, [0x0, 0x5, 0x1, 0x5], [0x10000, 0x6, 0x9, 0x9], 0x0, [0x0, 0x5]}, 0x8001, 0x6c9}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "2dead3096acc7dcd9cdc85bcd372f884863ffbee6b1346785e9e9160647dbd95febf5ffe8f0a6bbe596d2289ac02bd3db5af387aeb2365a0a7355d109037acb632c3c76a1a68dfa9a50e26f2612679b9c8f09d8091bf4e15b3b215c05e3f98982c0d56b7af6a4968fc62db2a6890bd9a0625ced38b1f696dfcaaea65b7625c54500324b7f484e5a19e1e49aa2591da6b19644a5d7be5974a2b5d7fcb709eff650d0c36e4e559d71d"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "c06fde9ab4528e0ba165b9e40186fd8dc48c00159700ae9c9f75a8b0c066d4c1c336a5737a03efc1d2c575c1fcdcda19e9ff190c8ea69ae8e6734b8120e76fe86fb191d5ccf97dc9b8dea5e2bc14b70e23785ac9612bfb20bc9fa8835532a2d9eaaf610c63dfc5aee458f6baa0317c6f7d3d4655e3f4dd3ee7fddaf9177a3545b0d228f4df441ca83ebf7de5830477d6d881263d118b6158c524a020d931d7de8a16618fb0b9"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "3139cff6233c827a989c86bed6fa9d686e14fab4b6d49a14414badf21dee6368da660e5d970fefa05c43b8e95bd516d8c2000b3937581dd54c670621e9b88cd5a7905c82dcca80d6da5ca8796cd84d36f819d9c185bb45aaeea365978c8f580e3420ed5ba1e5e37a1379c228df1f714c894bea1ee908d9914124a9e7e12db8ae2f76662250159003af4ab4ef321b2d746261a13f7161d7c9afc92d5b8ef2722e8d1ce784fbf55e60b9ac3321b822c8919d8276cff13827aea032b7"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "dc53a7798a508d184e472d7d00ac8f6b8cc48c1f17176f80750a5a53b2b9412ec4edf424eefd4db503490cde601e4f1c791109f4f2a1b427de5ad6a87b511ed306807e87b70035981b8559565f28f77805abc87ba97b7d6804b0cc3635992ec9d392b849b594f913d05618b0775b86f18769cb9b4dbe281b47671d"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "38b8f0691ce54067d0e5cb8ec7b3c708b7d53ca4ba1e576c1cf68e208b62f65658725ab1c89b619d0eae0089f234389cb0aaf5a70ab24d9f982b95dcca5cb141ae4672390cfd4935a88e89804b01595408418d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "8bb069e409b8a6655d142b760903771d63f43811e0e921499853917e97"}]}, 0x2368}, 0x1, 0x0, 0x0, 0x24040880}, 0x8008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003600), r6) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r10 = socket(0x2, 0x2, 0x2) preadv(r10, &(0x7f0000003700), 0x0, 0x8, 0x1) (async) preadv(r10, &(0x7f0000003700), 0x0, 0x8, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000003b40)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003b00)={&(0x7f00000037c0)={0x310, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf26}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff2a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40483327}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x93cf}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x22}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "a39cc22516fa99c389142992e218a7c89666b71f864477e256593c42f03118cdd7b766da42e5f2955dd5e58300d47649b4d13e61eba8fc9d7ab766c0af5f8af1745e9e4b56d277690e9015ae4aeb2f793df33ef8e5e0d024937ce1fb347e4452b65222ad1e7a45883b342e15574e9a64d12418b8a1bf0709dce208433400ebf13528007932254e54d7443f31c68ff2483d7e3b8b7a1148137007fa6a284e425ee6b6374e3112cbfe2212739f5b8fb770b0a898efbd1969fe392e484ea9a26d"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x60a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "c709d95b9997d50659982880c1b9b6528b6ca7c18e953023f8f2d42828296514"}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0ca}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x12b0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x40015}, 0x20040001) 2.044928165s ago: executing program 3 (id=2614): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000340)='\x00', 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000100)=0xffffffff, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x10) sendto$inet6(r1, &(0x7f0000000240)="d3", 0x1, 0x8800, &(0x7f0000000280)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) 1.947713289s ago: executing program 0 (id=2615): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b00000000000008001a8004000a801400350067726530000000000006000000000000"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x48844}, 0x4004084) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000002bb7010000000000007c000008000180047871447a4342dc345d50a02d00dd80140003809cfac9925581debb63e64b867365edb5a6dbad7bf0558bde24dab78aa1bd44331ea4c5d84c45f18c7a0f08b48a94939836cbe594bec360dd141edf26fe7282ccbe7a6e4356a1374e99afc322"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) r5 = epoll_create(0x7) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x1, 0xff, 0x1, 0x0, 0x4, 0x3600}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) (async) r7 = epoll_create1(0x0) (async) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000180)) epoll_create1(0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffc}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':'], 0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c00000021002000000000000100000000000000000000000000000000000000fe8000000000000000000005000000bb00"/64, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="00000000000000002c001300e0000001000000000000000000000000ffffffff000000000000000000000000000000000a000000"], 0x7c}}, 0x40040b0) (async) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r9 = socket(0x10, 0x3, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r9) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x118, r10, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040840}, 0x8849) socket$kcm(0x10, 0x2, 0x0) 1.852347386s ago: executing program 3 (id=2616): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) 1.792154283s ago: executing program 4 (id=2617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000200)="a7d4e1", 0x3}], 0x1}, 0x4040045) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) r4 = accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a8010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="0a0e00000000000000aa00000a0002003221e68c37d9000050a78985460e45829b1960e0e3dedb9c0ca814acb7ea3810ec4344"], 0x54}}, 0x800) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@mcast2, 0x5e, r6}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000580)={r9, 0xfc49, 0x20}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) 259.71436ms ago: executing program 2 (id=2618): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e67e0433", @ANYRES16=r3, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000a005a7600000c000b8008000a00b512000004000880040004800800020001000000"], 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x5], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x7, 0x8, 0x73, 0x3, 0xa, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0xe) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(r5, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000000000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 259.095257ms ago: executing program 0 (id=2619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000040)={@align=0x2, {0x4, 0x400, 0xa2f, 0x2}}, 0xffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x83}, {[0x1ff, 0xe6, 0xe, 0x9]}, 0x7d8, 0x89, &(0x7f0000000100)=""/137}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200440c0}, 0x30) r4 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a80)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000b80)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x40044}}], 0x1, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r13 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="ed4d01000000fddbdf253100000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00R\x00', @ANYRES32=r13, @ANYBLOB="29d90bc2c8ff3c3e7777ab18258ea8a8211c3d88a1f8612724a7254a2d7070e64a34a3d7518df84ca25de8fb191bafd2203b6f55906b06ea77ce4b6a8b8031bc65dbc0f252fc08f86ad439dec5a92d352405d29c"], 0x24}}, 0xc0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) r15 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r15, 0x29, 0x36, &(0x7f00000000c0)={0xc}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000d00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000e40)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmmsg$unix(r19, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x40}}], 0x1, 0x48880) sendmmsg$unix(r1, &(0x7f0000001000)=[{{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000740)="b61e254312944dbf4130107e57a7b852c904762e07", 0x15}, {&(0x7f0000000780)="a288f5a7d897a54dfaddce21e2c9a967670241c11ecc832f118c16c22b8f1c6c7510a40facd5da897df345405635fb6380acb6945ceb189e7b3209cd6c6ddda28c1069813b2710eab67ab9d67d32dba0a611b8e997c648374e56962e50", 0x5d}], 0x2, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r9}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r15, r0]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r22}}}], 0x148, 0x20000808}}], 0x1, 0x4000004) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f4bcf39b4887ccc33c94f33ea824a7aaaa37fa2439c92e74d6569cb4fad4f86a2e7d8f11b86f337761b482866510d6fd8143cb013fc9b6bd517cbabf69c55e66dd893cd624da393e83a6fddef0b55c0c59032397039e0c3e8e62c2bfec2a526dd18af615807e3a37a55bd4d7cc505a8b3b0cccb418778792c3042249f8f5dd72b97286c63ec23f74d91d97c0bdae455f7a5b8fb8d23acef29dd6eda52319cce124aa6f27468a1d3f9af4ee2846869084742919038527c38643c349df6029cf1e7b81cc5406f3f7f7a94b7d6524457488dfeab702fbaee2e5db97b0866d894e9ff64f9921129e981f8a64bfed72ced0bf9572468528e0", 0xf6}], 0x1, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff98a}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x37}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x90}, 0x24000000) r23 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r23, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 258.127551ms ago: executing program 1 (id=2620): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000001b00), &(0x7f0000000480)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="ba8745", 0x3}], 0x1}}], 0x2, 0x24040800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) writev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="5810", 0x2}], 0x1) close(r6) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r5}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r8, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xcff5, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 215.703762ms ago: executing program 4 (id=2621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111bb000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_xfrm(r11, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@flushsa={0x64, 0x1c, 0x100, 0x70bd27, 0x25dfdbfc, {0x3c}, [@lifetime_val={0x24, 0x9, {0xc, 0x6, 0x3, 0xfffffffffffffffa}}, @lifetime_val={0x24, 0x9, {0x1, 0x80000000, 0x0, 0x8}}, @extra_flags={0x8, 0x18, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 90.048278ms ago: executing program 1 (id=2622): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40010, 0x0, 0x0) read$alg(r2, &(0x7f0000000700)=""/244, 0xf4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 47.865167ms ago: executing program 0 (id=2623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000080)) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0) 45.385042ms ago: executing program 3 (id=2624): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) sendto$inet6(r1, &(0x7f0000000040)='n\"', 0x2, 0x24004055, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x6, 0x9, 0x7ff, 0x2}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="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"/311], 0x58}}, 0x4000) 22.27091ms ago: executing program 4 (id=2625): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bridge\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7b1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 0s ago: executing program 2 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="4be1912d58e52ebe41f6ff1bc67140fb69545a8006accc869105bff76b5b6cd61f4fbf3ea2f03483614a63f79d7e17a143fcf38392963b9094606cf3a04be5b4c257ae520cc271a9370020c15111931568c32bc10e08a51fab2532cb60540b166003dd83063a315b9666432f", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000064f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): simple: basic_28 [ 191.946931][ T9424] simple: basic_30 [ 191.950647][ T9424] simple: basic_32 [ 191.954384][ T9424] simple: basic_34 [ 191.958103][ T9424] 0: reclassify loop, rule prio 0, protocol 800 [ 192.300301][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 192.357685][ T9458] x_tables: duplicate underflow at hook 2 [ 192.431420][ T9463] netlink: 80 bytes leftover after parsing attributes in process `syz.0.851'. [ 192.461944][ T9463] netlink: 80 bytes leftover after parsing attributes in process `syz.0.851'. [ 192.641475][ T9474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 192.784424][ T9481] ip6tnl0: Caught tx_queue_len zero misconfig [ 193.028474][ T9496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.049195][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 193.152666][ T9512] netlink: 14 bytes leftover after parsing attributes in process `syz.2.860'. [ 193.391098][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 193.392992][ T9517] ipvlan2: entered promiscuous mode [ 193.480457][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 193.639720][ T9526] syzkaller0: entered promiscuous mode [ 193.645434][ T9526] syzkaller0: entered allmulticast mode [ 193.924647][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'. [ 193.965422][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 194.548162][ T9562] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 194.617250][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.932571][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.974571][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.323479][ T9618] netlink: 'syz.1.886': attribute type 11 has an invalid length. [ 196.493231][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.507774][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.756045][ T9668] netlink: 'syz.2.895': attribute type 21 has an invalid length. [ 196.764105][ T5201] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.783027][ T9668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.790325][ T9668] IPv6: NLM_F_CREATE should be set when creating new route [ 196.797639][ T9668] IPv6: NLM_F_CREATE should be set when creating new route [ 196.804908][ T9668] IPv6: NLM_F_CREATE should be set when creating new route [ 196.855475][ T9679] netlink: 'syz.2.895': attribute type 21 has an invalid length. [ 196.889642][ T9674] bridge3: entered promiscuous mode [ 196.895053][ T9679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.905717][ T9674] bridge3: entered allmulticast mode [ 196.936690][ T9674] team0: Port device bridge3 added [ 196.965730][ T9680] bridge0: port 1(team0) entered blocking state [ 196.972120][ T9680] bridge0: port 1(team0) entered disabled state [ 196.974471][ T9682] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 197.009121][ T9680] team0: entered allmulticast mode [ 197.029566][ T9680] team0: entered promiscuous mode [ 197.096767][ T9682] netlink: del zone limit has 8 unknown bytes [ 197.103241][ T9682] netlink: del zone limit has 8 unknown bytes [ 197.119632][ T9689] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 197.144837][ T5888] syzkaller1: tun_net_xmit 90 [ 197.151388][ T9689] syzkaller1: Linktype set failed because interface is up [ 197.427036][ T9706] __nla_validate_parse: 7 callbacks suppressed [ 197.427055][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 197.465707][ T9706] dummy0: Caught tx_queue_len zero misconfig [ 197.474419][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 198.382358][ T9739] delete_channel: no stack [ 198.769674][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 200.230294][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 200.231287][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'. [ 200.372485][ T10] IPVS: starting estimator thread 0... [ 200.475140][ T9781] IPVS: using max 29 ests per chain, 69600 per kthread [ 200.556773][ T9790] ±ÿ=–a²š«: renamed from lo [ 200.764399][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.943390][ T9801] netlink: 100 bytes leftover after parsing attributes in process `syz.4.928'. [ 201.131310][ T9802] vlan0: entered allmulticast mode [ 201.266266][ T9807] netlink: 72 bytes leftover after parsing attributes in process `syz.2.929'. [ 202.042689][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 202.210627][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.307418][ T9844] vlan0: left promiscuous mode [ 202.348992][ T9817] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 202.480477][ T9847] netlink: 'syz.2.942': attribute type 3 has an invalid length. [ 202.500779][ T9847] netlink: 3 bytes leftover after parsing attributes in process `syz.2.942'. [ 202.521558][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.943'. [ 202.677943][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 202.959760][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.947'. [ 202.980289][ T9871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 203.035984][ T9858] nbd2: detected capacity change from 0 to 77309411391 [ 203.037415][ T9871] 8021q: VLANs not supported on ip6gre0 [ 203.060575][ T5834] block nbd2: Receive control failed (result -32) [ 203.069722][ T9879] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 203.074937][ T5838] block nbd2: Receive control failed (result -32) [ 203.097326][ T6434] block nbd2: Dead connection, failed to find a fallback [ 203.108577][ T6434] block nbd2: shutting down sockets [ 203.115499][ T6434] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.127496][ T6434] Buffer I/O error on dev nbd2, logical block 0, async page read [ 203.135927][ T6434] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.145955][ T6434] Buffer I/O error on dev nbd2, logical block 1, async page read [ 203.154102][ T6434] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.163610][ T6434] Buffer I/O error on dev nbd2, logical block 2, async page read [ 203.180096][ T6434] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.190366][ T6434] Buffer I/O error on dev nbd2, logical block 3, async page read [ 203.202840][ T6434] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.213288][ T6434] Buffer I/O error on dev nbd2, logical block 0, async page read [ 203.236494][ T6434] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.263984][ T6434] Buffer I/O error on dev nbd2, logical block 1, async page read [ 203.299937][ T6434] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.363481][ T6434] Buffer I/O error on dev nbd2, logical block 2, async page read [ 203.401408][ T6434] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.471709][ T6434] Buffer I/O error on dev nbd2, logical block 3, async page read [ 203.517139][ T6434] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.553587][ T9893] netlink: 64 bytes leftover after parsing attributes in process `syz.0.952'. [ 203.561769][ T6434] Buffer I/O error on dev nbd2, logical block 0, async page read [ 203.571281][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 203.591160][ T6434] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.615983][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 203.625284][ T6434] Buffer I/O error on dev nbd2, logical block 1, async page read [ 203.637441][ T6434] ldm_validate_partition_table(): Disk read failed. [ 203.664173][ T6434] Dev nbd2: unable to read RDB block 0 [ 203.695179][ T6434] nbd2: unable to read partition table [ 203.724400][ T6434] ldm_validate_partition_table(): Disk read failed. [ 203.732080][ T6434] Dev nbd2: unable to read RDB block 0 [ 203.758161][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 203.758467][ T6434] nbd2: unable to read partition table [ 203.836947][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 204.956653][ T9947] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 204.986724][ T9947] syzkaller1: linktype set to 825 [ 205.072361][ T9948] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 205.083738][ T9948] syzkaller1: linktype set to 825 [ 205.924518][ T9986] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 206.032952][ T9994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.449701][T10014] vlan0: entered promiscuous mode [ 206.463977][T10014] bridge0: entered promiscuous mode [ 206.584782][T10026] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 206.706884][T10026] bond10: entered promiscuous mode [ 206.731626][T10026] 8021q: adding VLAN 0 to HW filter on device bond10 [ 206.765847][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 206.766433][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 206.771901][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 208.000049][T10097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.137956][T10105] __nla_validate_parse: 9 callbacks suppressed [ 208.137978][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 208.242846][T10110] sock: sock_timestamping_bind_phc: sock not bind to device [ 209.408699][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1003'. [ 209.418844][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1003'. [ 209.810293][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.306016][T10105] macvlan0: entered allmulticast mode [ 210.311486][T10105] hsr0: entered allmulticast mode [ 210.317153][T10105] hsr_slave_0: entered allmulticast mode [ 210.322948][T10105] hsr_slave_1: entered allmulticast mode [ 210.329507][T10125] tunl0: Caught tx_queue_len zero misconfig [ 210.532575][T10145] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1004'. [ 210.565632][T10151] netlink: 'syz.0.1006': attribute type 28 has an invalid length. [ 210.606654][T10151] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 210.723524][T10165] SET target dimension over the limit! [ 210.736169][T10165] IPVS: length: 132 != 8 [ 210.810776][T10174] pimreg: entered allmulticast mode [ 210.934786][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 211.072457][T10181] hsr0: left allmulticast mode [ 211.078478][T10181] hsr_slave_0: left allmulticast mode [ 211.086216][T10181] hsr_slave_1: left allmulticast mode [ 211.360000][T10195] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 211.451763][T10206] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 211.535222][T10206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.755599][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 211.876906][T10226] syzkaller1: entered promiscuous mode [ 211.896959][T10226] syzkaller1: entered allmulticast mode [ 211.917197][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 212.292472][T10247] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.1030'. [ 212.530548][T10262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'. [ 212.551296][T10267] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1037'. [ 212.580345][T10262] syzkaller0: entered promiscuous mode [ 212.586361][T10262] syzkaller0: entered allmulticast mode [ 213.163582][T10307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.183572][T10308] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 213.213627][T10307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.264214][T10315] __nla_validate_parse: 1 callbacks suppressed [ 213.264235][T10315] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1046'. [ 213.291166][T10307] bond0 (unregistering): Released all slaves [ 213.467563][T10305] syzkaller0: entered promiscuous mode [ 213.494100][T10305] syzkaller0: entered allmulticast mode [ 213.605147][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 213.635421][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 213.876638][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 213.887111][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'. [ 215.423203][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1059'. [ 215.601589][T10388] macvlan0: entered promiscuous mode [ 215.611701][T10388] vlan1: entered promiscuous mode [ 215.622736][T10388] team0: Port device macvlan0 added [ 215.644149][ T29] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 215.676547][T10390] tipc: Started in network mode [ 215.681585][T10390] tipc: Node identity , cluster identity 4711 [ 215.689236][T10390] tipc: Failed to obtain node identity [ 215.700800][T10390] tipc: Enabling of bearer rejected, failed to enable media [ 215.718298][T10392] wg1: entered promiscuous mode [ 215.723286][T10392] wg1: entered allmulticast mode [ 215.753187][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 216.031403][T10403] netlink: 'syz.4.1068': attribute type 4 has an invalid length. [ 216.070262][T10405] vlan2: entered allmulticast mode [ 216.104966][T10405] bridge0: port 4(vlan2) entered blocking state [ 216.111943][T10405] bridge0: port 4(vlan2) entered disabled state [ 216.120077][T10408] netlink: 'syz.4.1068': attribute type 4 has an invalid length. [ 216.138624][T10405] vlan2: entered promiscuous mode [ 216.170187][T10403] netlink: 'syz.4.1068': attribute type 4 has an invalid length. [ 216.200708][T10403] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 216.216364][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1070'. [ 216.254355][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1070'. [ 216.386206][T10412] syzkaller0: entered promiscuous mode [ 216.391779][T10412] syzkaller0: entered allmulticast mode [ 216.845844][ T1682] block nbd0: Possible stuck request ffff888026c18000: control (read@0,1024B). Runtime 90 seconds [ 216.857264][ T1682] block nbd0: Possible stuck request ffff888026c18200: control (read@1024,1024B). Runtime 90 seconds [ 216.872022][ T1682] block nbd0: Possible stuck request ffff888026c18400: control (read@2048,1024B). Runtime 90 seconds [ 216.883624][ T1682] block nbd0: Possible stuck request ffff888026c18600: control (read@3072,1024B). Runtime 90 seconds [ 217.472666][T10430] C: renamed from team_slave_0 [ 217.480400][T10430] netlink: 'syz.4.1076': attribute type 8 has an invalid length. [ 217.489929][T10430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 218.276489][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'. [ 218.353068][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'. [ 218.544866][T10485] syzkaller0: entered promiscuous mode [ 218.552134][T10485] syzkaller0: entered allmulticast mode [ 218.561398][T10487] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1093'. [ 218.960338][T10496] Cannot find set identified by id 65534 to match [ 218.967364][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 219.030842][T10475] infiniband syz1: set down [ 219.036072][T10475] infiniband syz1: added bond_slave_1 [ 219.048947][T10501] netdevsim netdevsim0 ªªªªª»: renamed from netdevsim0 (while UP) [ 219.167484][T10475] RDS/IB: syz1: added [ 219.172311][T10475] smc: adding ib device syz1 with port count 1 [ 219.196521][T10475] smc: ib device syz1 port 1 has no pnetid [ 219.257034][T10507] netlink: 'syz.2.1099': attribute type 2 has an invalid length. [ 219.274996][T10507] netlink: 'syz.2.1099': attribute type 2 has an invalid length. [ 219.317905][T10508] netlink: 'syz.2.1099': attribute type 2 has an invalid length. [ 219.326594][T10508] netlink: 'syz.2.1099': attribute type 2 has an invalid length. [ 219.352073][T10510] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 219.377033][T10516] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 219.407009][T10514] netlink: 'syz.3.1102': attribute type 1 has an invalid length. [ 219.457459][T10514] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1102'. [ 219.491023][T10515] bond3: (slave bridge2): making interface the new active one [ 219.500537][T10515] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 219.568814][T10516] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 220.168377][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 220.260898][T10556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1113'. [ 220.751694][T10568] IPVS: set_ctl: invalid protocol: 125 0.0.0.0:20004 [ 220.848580][T10574] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 221.096729][T10579] ±ÿ=–a²š«: entered allmulticast mode [ 221.102722][T10579] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 221.339437][T10591] validate_nla: 2 callbacks suppressed [ 221.339454][T10591] netlink: 'syz.1.1122': attribute type 11 has an invalid length. [ 221.392471][T10591] netlink: 144684 bytes leftover after parsing attributes in process `syz.1.1122'. [ 221.580676][T10600] x_tables: duplicate underflow at hook 2 [ 221.829839][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 221.909425][T10617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1130'. [ 222.942733][T10652] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 223.625256][T10646] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.650175][T10646] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 223.687172][T10646] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.784706][T10646] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 224.346983][T10646] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.380436][T10646] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 224.464944][T10646] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.501386][T10646] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 224.585839][T10646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.611180][T10646] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 225.411032][T10717] __nla_validate_parse: 1 callbacks suppressed [ 225.411053][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1151'. [ 225.466413][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1151'. [ 225.478020][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 225.520553][T10717] vlan2: entered promiscuous mode [ 225.530910][T10717] bridge0: entered promiscuous mode [ 226.199366][T10746] xt_TCPMSS: Only works on TCP SYN packets [ 226.242926][T10746] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 226.778931][T10773] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 226.823835][T10773] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1162'. [ 226.864851][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 227.084017][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.811702][T10809] netlink: 'syz.1.1168': attribute type 2 has an invalid length. [ 227.827771][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 228.114074][T10814] tipc: Started in network mode [ 228.133917][T10814] tipc: Node identity d22498abe3e5, cluster identity 4711 [ 228.161749][T10814] tipc: Enabled bearer , priority 0 [ 228.204709][T10815] syzkaller0: entered promiscuous mode [ 228.210237][T10815] syzkaller0: entered allmulticast mode [ 228.336239][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 228.469763][T10815] tipc: Resetting bearer [ 228.533722][T10812] tipc: Resetting bearer [ 228.693721][T10812] tipc: Disabling bearer [ 229.157516][T10859] xt_bpf: check failed: parse error [ 229.190103][T10856] smc: removing ib device syz1 [ 229.278314][T10861] tipc: New replicast peer: 255.255.255.255 [ 229.306097][T10861] tipc: Enabled bearer , priority 10 [ 229.596172][T10870] syzkaller0: entered promiscuous mode [ 229.621913][T10870] syzkaller0: entered allmulticast mode [ 229.995540][T10883] openvswitch: netlink: Message has 8 unknown bytes. [ 230.264964][T10894] netlink: 'syz.3.1186': attribute type 3 has an invalid length. [ 230.304335][ T5896] tipc: Node number set to 11777 [ 230.416404][T10894] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.478767][T10894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 230.500871][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1188'. [ 230.534993][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1188'. [ 231.225405][T10931] x_tables: duplicate underflow at hook 2 [ 231.237299][T10931] netlink: 'syz.2.1194': attribute type 4 has an invalid length. [ 233.359828][T10995] netlink: 'syz.0.1205': attribute type 21 has an invalid length. [ 233.642153][T11000] netlink: 'syz.4.1206': attribute type 39 has an invalid length. [ 233.958899][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 234.131392][T11015] erspan2: entered allmulticast mode [ 234.245170][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 234.605413][T11032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.612830][T11032] IPv6: NLM_F_CREATE should be set when creating new route [ 234.620337][T11032] IPv6: NLM_F_CREATE should be set when creating new route [ 234.627551][T11032] IPv6: NLM_F_CREATE should be set when creating new route [ 235.197533][T11049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1221'. [ 235.294092][T11042] nbd3: detected capacity change from 0 to 77309411391 [ 235.557750][T11044] nbd4: detected capacity change from 0 to 77309411391 [ 235.662464][ T5836] block nbd4: Receive control failed (result -104) [ 235.662464][ T5142] block nbd3: Receive control failed (result -32) [ 235.664704][ T5838] block nbd4: Receive control failed (result -32) [ 235.671148][ T5834] block nbd3: Receive control failed (result -32) [ 236.072262][T11082] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 236.324493][T11101] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 236.460361][T11101] 8021q: adding VLAN 0 to HW filter on device bond7 [ 236.490444][T11102] vlan3: entered allmulticast mode [ 236.547030][T11102] bond7: entered allmulticast mode [ 236.593425][T11101] bond7: (slave geneve3): making interface the new active one [ 236.603452][T11101] geneve3: entered allmulticast mode [ 236.616333][T11101] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 236.864966][T11116] block nbd5: server does not support multiple connections per device. [ 236.879512][T11116] block nbd5: shutting down sockets [ 236.960784][T11122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1242'. [ 237.367131][T11135] erspan0: entered promiscuous mode [ 237.446897][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.535919][T11135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.555164][T11157] netlink: 'syz.2.1248': attribute type 1 has an invalid length. [ 237.595029][T11157] bond4: entered promiscuous mode [ 237.600206][T11157] bond4: entered allmulticast mode [ 237.610390][T11157] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.705109][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 237.758659][T11157] macvlan3: entered promiscuous mode [ 237.787903][T11157] macvlan3: entered allmulticast mode [ 237.829827][T11157] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 237.915541][ T7578] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.098170][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.172541][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1250'. [ 238.235535][T11170] syzkaller0: entered promiscuous mode [ 238.264965][T11170] syzkaller0: entered allmulticast mode [ 238.499112][T11176] netlink: 'syz.0.1253': attribute type 13 has an invalid length. [ 238.745788][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.765098][T11183] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 238.844132][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.924606][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.924991][ T179] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.972354][ T179] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 239.016992][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.044455][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 239.566630][T11199] netlink: 'syz.0.1255': attribute type 3 has an invalid length. [ 239.585439][T11199] netlink: 'syz.0.1255': attribute type 3 has an invalid length. [ 239.627540][T11201] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 239.696851][T11201] 8021q: adding VLAN 0 to HW filter on device bond11 [ 240.643423][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 241.409578][T11261] syzkaller0: entered promiscuous mode [ 241.424306][T11261] syzkaller0: entered allmulticast mode [ 241.468282][T11220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1260'. [ 243.016865][ C0] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 243.016888][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.240485][ T5191] udevd[5191]: worker [6061] /devices/virtual/block/nbd0 is taking a long time [ 244.205176][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.411207][T11286] syzkaller0: entered promiscuous mode [ 244.451734][T11286] syzkaller0: entered allmulticast mode [ 244.766103][T11315] x_tables: unsorted underflow at hook 3 [ 244.843303][T11322] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 244.968196][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1283'. [ 245.086702][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 246.553147][T11343] syzkaller0: entered promiscuous mode [ 246.573912][T11343] syzkaller0: entered allmulticast mode [ 246.633500][T11364] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1289'. [ 246.697437][T11367] netlink: 'syz.3.1290': attribute type 3 has an invalid length. [ 246.905145][T11371] xt_CT: No such helper "syz1" [ 246.924642][ T1682] block nbd0: Possible stuck request ffff888026c18000: control (read@0,1024B). Runtime 120 seconds [ 246.947524][ T1682] block nbd0: Possible stuck request ffff888026c18200: control (read@1024,1024B). Runtime 120 seconds [ 246.959162][ T1682] block nbd0: Possible stuck request ffff888026c18400: control (read@2048,1024B). Runtime 120 seconds [ 246.970745][ T1682] block nbd0: Possible stuck request ffff888026c18600: control (read@3072,1024B). Runtime 120 seconds [ 249.759320][T11357] Set syz1 is full, maxelem 65536 reached [ 249.768942][T11358] : renamed from bond_slave_0 (while UP) [ 249.864508][T11382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1293'. [ 249.909375][T11369] vlan0: entered promiscuous mode [ 249.915581][T11369] virt_wifi0: entered promiscuous mode [ 249.968664][T11390] netlink: 'syz.3.1295': attribute type 9 has an invalid length. [ 249.989547][T11390] netlink: 'syz.3.1295': attribute type 6 has an invalid length. [ 250.009385][T11390] netlink: 'syz.3.1295': attribute type 7 has an invalid length. [ 250.021209][T11390] netlink: 'syz.3.1295': attribute type 8 has an invalid length. [ 250.290964][T11409] ip6t_srh: unknown srh invflags 4000 [ 250.362935][T11409] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1301'. [ 250.528846][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1303'. [ 250.602174][T11419] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 250.774330][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.938755][T11424] syzkaller0: entered promiscuous mode [ 250.970052][T11424] syzkaller0: entered allmulticast mode [ 251.221490][T11450] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1311'. [ 251.309648][T11450] x_tables: duplicate underflow at hook 2 [ 252.684085][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.812017][T11464] vlan1: entered promiscuous mode [ 252.824455][T11464] geneve1: entered promiscuous mode [ 252.829937][T11464] vlan1: entered allmulticast mode [ 252.840690][T11464] geneve1: entered allmulticast mode [ 253.250607][T11490] syzkaller0: entered promiscuous mode [ 253.261481][T11490] syzkaller0: entered allmulticast mode [ 253.301627][T11490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'. [ 253.536949][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 254.866771][T11506] syzkaller0: entered promiscuous mode [ 254.872290][T11506] syzkaller0: entered allmulticast mode [ 255.068804][T11523] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 255.070274][T11527] netlink: 'syz.2.1330': attribute type 32 has an invalid length. [ 256.462457][T11523] bond8: entered promiscuous mode [ 256.468331][T11523] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.507851][T11541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.515113][T11541] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 256.528544][T11541] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 256.541885][T11541] bond8: (slave ip6gre1): making interface the new active one [ 256.549761][T11541] ip6gre1: entered promiscuous mode [ 256.556615][T11541] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 256.572137][T11543] dvmrp1: left allmulticast mode [ 256.715806][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'. [ 256.788192][T11560] netlink: 195920 bytes leftover after parsing attributes in process `syz.3.1336'. [ 256.844952][T11564] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1339'. [ 256.930203][T11570] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1340'. [ 256.946433][T11572] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1340'. [ 256.973219][T11570] xt_ecn: cannot match TCP bits for non-tcp packets [ 257.280555][T11583] syzkaller0: entered promiscuous mode [ 257.288250][T11583] syzkaller0: entered allmulticast mode [ 257.320492][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1344'. [ 257.582464][T11574] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 257.640518][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 257.650421][T11596] netlink: 'syz.4.1345': attribute type 21 has an invalid length. [ 258.948084][T11600] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1347'. [ 259.038157][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 259.122069][T11616] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 259.359931][T11607] dummy0: entered promiscuous mode [ 259.370217][T11607] dummy0: left promiscuous mode [ 259.801957][T11641] xt_TCPMSS: Only works on TCP SYN packets [ 260.087532][T11654] @ÿ: renamed from veth0_vlan (while UP) [ 260.388934][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 260.683638][T11677] openvswitch: netlink: Message has 2 unknown bytes. [ 261.005643][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.489707][T11709] bond0: option miimon: invalid value (18446744071562067968) [ 261.504523][T11709] bond0: option miimon: allowed values 0 - 2147483647 [ 261.551846][T11709] syzkaller0: entered promiscuous mode [ 261.566114][T11709] syzkaller0: entered allmulticast mode [ 261.579473][T11709] tipc: Started in network mode [ 261.597240][T11709] tipc: Node identity ca65e914893c, cluster identity 4711 [ 261.607941][T11709] tipc: Enabled bearer , priority 0 [ 261.627266][T11708] tipc: Resetting bearer [ 261.653973][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.654919][T11708] tipc: Disabling bearer [ 261.975944][T11732] tipc: Failed to remove unknown binding: 66,0,0/0:805172413/805172415 [ 262.004341][T11732] tipc: Failed to remove unknown binding: 66,0,0/0:805172413/805172415 [ 262.018130][T11730] batadv_slave_1: entered promiscuous mode [ 262.090236][T11736] __nla_validate_parse: 4 callbacks suppressed [ 262.090255][T11736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1379'. [ 262.137834][T11729] batadv_slave_1: left promiscuous mode [ 262.158833][T11739] tun0: tun_chr_ioctl cmd 1074812118 [ 262.168851][T11739] tun0: tun_chr_ioctl cmd 1074033169 [ 262.170353][T11740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1381'. [ 262.437774][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 262.462271][T11756] nbd: nbd2 already in use [ 262.467147][T11756] block nbd0: NBD_DISCONNECT [ 262.471032][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 262.471829][T11756] block nbd0: Send disconnect failed -32 [ 262.505501][T11756] block nbd0: shutting down sockets [ 262.527196][T11764] siw: device registration error -23 [ 262.539704][ C0] blk_print_req_error: 123 callbacks suppressed [ 262.539725][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.555661][ C0] buffer_io_error: 122 callbacks suppressed [ 262.555679][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.578737][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.588370][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 262.596265][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.605895][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 262.613682][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.623231][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 262.632247][ T6061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.651087][ T6061] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.664223][ T6061] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.689595][ T6061] Buffer I/O error on dev nbd0, logical block 1, async page read [ 262.703135][ T6061] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.728270][ T6061] Buffer I/O error on dev nbd0, logical block 2, async page read [ 262.755598][ T6061] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.778909][ T6061] Buffer I/O error on dev nbd0, logical block 3, async page read [ 262.797059][ T6061] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.808386][ T6061] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.844082][ T6061] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.860910][ T6061] Buffer I/O error on dev nbd0, logical block 1, async page read [ 262.884077][ T6061] ldm_validate_partition_table(): Disk read failed. [ 262.896879][ T6061] Dev nbd0: unable to read RDB block 0 [ 262.910230][ T6061] nbd0: unable to read partition table [ 262.949893][ T6061] ldm_validate_partition_table(): Disk read failed. [ 262.964569][ T6061] Dev nbd0: unable to read RDB block 0 [ 262.980165][ T6061] nbd0: unable to read partition table [ 262.980648][T11789] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 263.004817][T11789] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1395'. [ 263.241515][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 263.245225][T11794] syzkaller0: entered promiscuous mode [ 263.273857][T11794] syzkaller0: entered allmulticast mode [ 264.854932][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1403'. [ 265.225639][T11838] netlink: 'syz.1.1409': attribute type 2 has an invalid length. [ 265.259200][T11839] syz_tun: entered promiscuous mode [ 265.265548][T11839] syz_tun: entered allmulticast mode [ 265.275765][T11848] syzkaller0: entered promiscuous mode [ 265.281917][T11848] syzkaller0: entered allmulticast mode [ 265.301055][T11846] sctp: [Deprecated]: syz.4.1410 (pid 11846) Use of int in maxseg socket option. [ 265.301055][T11846] Use struct sctp_assoc_value instead [ 265.342944][T11848] tipc: Started in network mode [ 265.349332][T11848] tipc: Node identity , cluster identity 4711 [ 265.357669][T11848] tipc: Failed to obtain node identity [ 265.363285][T11848] tipc: Enabling of bearer rejected, failed to enable media [ 265.484603][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.503429][ T1648] block nbd3: Connection timed out, retrying (0/2 alive) [ 265.511397][ T1648] block nbd3: Connection timed out, retrying (0/2 alive) [ 265.519387][ T1648] block nbd3: Connection timed out, retrying (0/2 alive) [ 265.527191][ T1648] block nbd3: Connection timed out, retrying (0/2 alive) [ 265.537323][ T1648] block nbd3: Dead connection, failed to find a fallback [ 265.545931][ T1648] block nbd3: shutting down sockets [ 265.556434][ T6434] ldm_validate_partition_table(): Disk read failed. [ 265.571616][ T6434] Dev nbd3: unable to read RDB block 0 [ 265.571956][T11864] netlink: 'syz.0.1414': attribute type 2 has an invalid length. [ 265.584685][ T6434] nbd3: unable to read partition table [ 265.608489][ T6434] ldm_validate_partition_table(): Disk read failed. [ 265.629203][ T6434] Dev nbd3: unable to read RDB block 0 [ 265.636138][ T6434] nbd3: unable to read partition table [ 265.966992][T11881] vlan2: entered promiscuous mode [ 266.100874][T11881] macsec1: entered allmulticast mode [ 266.106590][T11881] macsec0: entered allmulticast mode [ 266.143883][ T1648] block nbd4: Connection timed out, retrying (0/2 alive) [ 266.151029][ T1648] block nbd4: Connection timed out, retrying (0/2 alive) [ 266.158320][ T1648] block nbd4: Connection timed out, retrying (0/2 alive) [ 266.165505][T11862] block nbd4: Dead connection, failed to find a fallback [ 266.174397][T11862] block nbd4: shutting down sockets [ 266.179741][ T1648] block nbd4: Connection timed out, retrying (0/2 alive) [ 266.188105][T10708] ldm_validate_partition_table(): Disk read failed. [ 266.195608][T10708] Dev nbd4: unable to read RDB block 0 [ 266.201881][T10708] nbd4: unable to read partition table [ 266.304954][T10708] ldm_validate_partition_table(): Disk read failed. [ 266.319284][T10708] Dev nbd4: unable to read RDB block 0 [ 266.341839][T10708] nbd4: unable to read partition table [ 266.688988][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 266.698592][T11910] netlink: 'syz.1.1424': attribute type 7 has an invalid length. [ 267.464753][T11916] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 267.539141][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1429'. [ 267.611666][T11916] bond5: entered promiscuous mode [ 267.617467][T11916] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.624916][T11918] bond5: entered allmulticast mode [ 267.674388][T11916] bond5: (slave bridge3): making interface the new active one [ 267.690413][T11916] bridge3: entered promiscuous mode [ 267.698497][T11916] bridge3: entered allmulticast mode [ 267.707092][T11916] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 267.712221][T11923] netlink: 'syz.3.1430': attribute type 13 has an invalid length. [ 267.738322][T11925] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1432'. [ 267.744443][T11923] netlink: 'syz.3.1430': attribute type 17 has an invalid length. [ 267.776051][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 268.026515][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.061046][T11923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.079241][ T7578] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.103400][ T7578] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.111309][ T7578] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.154803][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 268.350418][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 268.355439][T11961] IPv6: Can't replace route, no match found [ 268.361546][T11956] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 268.366917][T11961] IPv6: Can't replace route, no match found [ 268.604171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.613489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.621991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.684093][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.798134][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 268.833874][T11983] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 268.897026][T11983] bond12: entered promiscuous mode [ 268.904198][T11983] bond12: entered allmulticast mode [ 268.910024][T11983] 8021q: adding VLAN 0 to HW filter on device bond12 [ 269.046619][T11982] erspan2: entered allmulticast mode [ 269.074707][T11982] bond12: (slave erspan2): making interface the new active one [ 269.088304][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 269.099197][T11982] erspan2: entered promiscuous mode [ 269.128593][T11982] bond12: (slave erspan2): Enslaving as an active interface with an up link [ 269.346712][T12009] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 269.793523][T12022] bond5: entered promiscuous mode [ 269.814482][T12022] bond5: entered allmulticast mode [ 269.820260][T12022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.457818][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1463'. [ 270.738599][T12064] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1464'. [ 270.925515][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1465'. [ 270.953712][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1465'. [ 271.306396][T12077] syzkaller0: entered promiscuous mode [ 271.312023][T12077] syzkaller0: entered allmulticast mode [ 271.678763][T12092] netlink: 'syz.1.1474': attribute type 83 has an invalid length. [ 271.707338][T12091] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 271.762351][T12089] bond0: (slave rose0): Enslaving as an active interface with an up link [ 272.250494][T12118] netlink: 'syz.1.1483': attribute type 1 has an invalid length. [ 272.444043][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.607541][T12118] team0: Port device team_slave_0 removed [ 273.164652][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.335289][T12127] __nla_validate_parse: 4 callbacks suppressed [ 273.335309][T12127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 273.518872][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1495'. [ 273.994795][T12207] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1504'. [ 274.014060][T12207] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1504'. [ 274.070387][T12208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1503'. [ 274.154844][T12213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1506'. [ 274.180492][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 274.517784][T12227] x_tables: duplicate underflow at hook 1 [ 274.721623][T12218] tipc: Resetting bearer [ 274.782502][T12218] bridge0: port 3(syz_tun) entered disabled state [ 274.830198][T12218] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.838079][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.181855][T12218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.222248][T12218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.747374][ T49] netdevsim netdevsim0 ªªªªª»: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.773983][ T49] netdevsim netdevsim0 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.808673][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.842401][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.869370][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.884308][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.921116][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.932429][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.271180][T12254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.295168][T12254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.316079][T12254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.335857][T12250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.345939][T12250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.405110][T12250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.435278][T12250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.452484][T12254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.504117][T12254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.750274][T12265] Bluetooth: MGMT ver 1.23 [ 276.773124][T12268] batadv1: entered promiscuous mode [ 276.778959][T12268] batadv1: entered allmulticast mode [ 276.883492][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 276.925889][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1521'. [ 276.937899][T12277] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 276.955187][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 276.977395][T12275] netlink: 'syz.3.1520': attribute type 5 has an invalid length. [ 276.999004][T12279] netlink: 'syz.1.1522': attribute type 6 has an invalid length. [ 277.422909][T12290] veth0_to_bridge: tun_chr_ioctl cmd 1074025677 [ 277.429886][T12290] veth0_to_bridge: linktype set to 6 [ 277.572175][T12301] tipc: Enabling of bearer rejected, already enabled [ 277.925994][T12324] Unsupported ieee802154 address type: 0 [ 277.948020][T12325] netlink: 'syz.0.1535': attribute type 4 has an invalid length. [ 277.982826][T12325] netlink: 'syz.0.1535': attribute type 4 has an invalid length. [ 278.484145][T12350] __nla_validate_parse: 17 callbacks suppressed [ 278.484168][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1542'. [ 278.517379][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1542'. [ 278.582727][T12350] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1542'. [ 278.612578][T12350] net_ratelimit: 239 callbacks suppressed [ 278.612599][T12350] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.689667][T12358] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1545'. [ 278.700891][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 278.711914][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1545'. [ 278.724521][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 278.825323][T12369] tipc: New replicast peer: 255.255.255.255 [ 278.847463][T12369] tipc: Enabled bearer , priority 10 [ 278.893616][T12373] netlink: 'syz.3.1548': attribute type 21 has an invalid length. [ 278.918404][T12373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1548'. [ 278.939230][T12373] netlink: 'syz.3.1548': attribute type 1 has an invalid length. [ 278.960892][T12369] tipc: Enabling of bearer rejected, already enabled [ 279.110849][T12386] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 279.366512][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 279.399280][T12405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1554'. [ 279.421715][T12401] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.971234][ T10] tipc: Node number set to 1129965844 [ 280.131504][T12440] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 280.565945][T12452] syzkaller1: entered promiscuous mode [ 280.571488][T12452] syzkaller1: entered allmulticast mode [ 280.726067][T12467] xt_TCPMSS: Only works on TCP SYN packets [ 280.732837][T12467] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 280.888859][T12467] bond6: entered promiscuous mode [ 280.905458][T12467] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.006953][T12469] bond6: (slave veth9): making interface the new active one [ 281.023876][T12469] veth9: entered promiscuous mode [ 281.037538][T12469] bond6: (slave veth9): Enslaving as an active interface with an up link [ 281.215666][T12480] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 281.223456][T12480] netlink: 'syz.0.1571': attribute type 6 has an invalid length. [ 281.253235][T12480] bond0: entered promiscuous mode [ 281.259116][T12480] bond_slave_0: entered promiscuous mode [ 281.266065][T12480] bond_slave_1: entered promiscuous mode [ 281.273607][T12480] batadv0: entered promiscuous mode [ 281.300505][T12480] debugfs: 'hsr1' already exists in 'hsr' [ 281.330417][T12480] Cannot create hsr debugfs directory [ 281.345232][T12480] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 281.365709][T12480] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 281.393602][T12480] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 281.439868][T12480] bond0: left promiscuous mode [ 281.466975][T12480] bond_slave_0: left promiscuous mode [ 281.484572][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 281.488187][T12480] bond_slave_1: left promiscuous mode [ 281.524317][T12480] batadv0: left promiscuous mode [ 282.151085][T12522] validate_nla: 1 callbacks suppressed [ 282.151105][T12522] netlink: 'syz.0.1582': attribute type 5 has an invalid length. [ 282.515465][T12530] netlink: 'syz.4.1583': attribute type 2 has an invalid length. [ 283.085358][T12549] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.097862][T12549] bond9: option mode: unable to set because the bond device is up [ 283.510926][T12573] __nla_validate_parse: 10 callbacks suppressed [ 283.510947][T12573] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1592'. [ 283.535505][T12573] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1592'. [ 283.865927][T12589] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.1596'. [ 284.099759][T12606] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1598'. [ 284.122588][T12598] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1598'. [ 284.141212][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1598'. [ 284.152465][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1598'. [ 284.235288][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.244697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.256854][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.395920][T12620] netlink: 'syz.4.1602': attribute type 1 has an invalid length. [ 284.849286][T12634] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.859664][T12634] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 284.870002][T12634] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 284.880194][T12634] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 284.941205][T12634] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.952017][T12634] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 284.962330][T12634] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 284.972318][T12634] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 285.014054][T12645] geneve2: entered promiscuous mode [ 285.052594][T12634] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.067309][T12634] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 285.084246][T12634] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 285.094149][T12634] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 285.199683][T12652] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 285.255796][T12634] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.310945][T12634] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 285.353935][T12634] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 285.395336][T12634] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 285.444320][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1614'. [ 285.615017][ T7582] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.643441][ T7582] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.670647][ T7582] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 285.694647][ T7582] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 285.785427][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.817250][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.844984][ T49] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 285.882442][ T49] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 285.940193][ T179] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.952682][ T179] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.982806][ T179] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 286.002380][ T179] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 286.038831][ T179] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.056752][ T179] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 286.074084][ T179] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 286.096288][ T179] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 286.213691][T12682] SET target dimension over the limit! [ 286.230522][T12681] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 286.472768][T12691] netlink: 'syz.1.1625': attribute type 4 has an invalid length. [ 286.492796][T12692] netlink: 'syz.1.1625': attribute type 4 has an invalid length. [ 286.523551][T12697] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1626'. [ 286.565562][T12690] syzkaller0: entered promiscuous mode [ 286.571085][T12690] syzkaller0: entered allmulticast mode [ 286.710348][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 286.877164][T12707] netlink: 'syz.2.1629': attribute type 4 has an invalid length. [ 287.326736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.581668][T12738] syzkaller1: entered promiscuous mode [ 287.592044][T12738] syzkaller1: entered allmulticast mode [ 288.210950][T12768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.330854][T12776] netlink: 'syz.0.1650': attribute type 29 has an invalid length. [ 288.343302][T12776] netlink: 'syz.0.1650': attribute type 29 has an invalid length. [ 288.663594][T12789] __nla_validate_parse: 7 callbacks suppressed [ 288.663615][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 288.750618][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 288.760141][ T1325] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.768796][ T1325] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.784859][ T1325] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.797835][ T1325] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.958468][T12808] sctp: [Deprecated]: syz.0.1660 (pid 12808) Use of int in maxseg socket option. [ 288.958468][T12808] Use struct sctp_assoc_value instead [ 288.975561][T12806] m1Ie5èÿá: entered promiscuous mode [ 289.360114][T12831] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1668'. [ 289.404516][T12832] tipc: Enabled bearer , priority 10 [ 289.446957][T12839] bridge0: entered promiscuous mode [ 289.453878][T12839] bridge0: entered allmulticast mode [ 289.855934][T12860] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 289.872712][T12860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.247441][T12879] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1679'. [ 290.356830][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1677'. [ 290.553680][ T796] tipc: Node number set to 834771115 [ 291.141296][T12917] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 291.269014][T12921] syzkaller0: entered promiscuous mode [ 291.274633][T12921] syzkaller0: entered allmulticast mode [ 291.475090][T12931] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1687'. [ 291.523583][T12931] tipc: Failed to remove unknown binding: 66,1,1/11777:4049737065/4049737067 [ 291.557913][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 291.837064][T12951] netlink: 'syz.1.1693': attribute type 2 has an invalid length. [ 292.297173][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 292.365977][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.397511][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 292.418299][T12974] hsr_slave_0: left promiscuous mode [ 292.434291][T12974] hsr_slave_1: left promiscuous mode [ 292.631057][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1700'. [ 292.676665][T12991] IPv6: addrconf: prefix option has invalid lifetime [ 292.751907][T12997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.330604][T13030] nbd: must specify at least one socket [ 293.340199][T13031] netlink: 'syz.0.1711': attribute type 75 has an invalid length. [ 293.377909][T13031] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 293.491442][T13030] siw: device registration error -23 [ 293.861962][T13049] bond7: invalid ARP target 0.0.0.0 specified for addition [ 293.949397][T13056] __nla_validate_parse: 2 callbacks suppressed [ 293.949452][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1717'. [ 293.980617][T13049] bond7: option arp_ip_target: invalid value (0) [ 293.999423][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 294.025616][T13049] bond7 (unregistering): Released all slaves [ 294.622662][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 294.875297][T13109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1726'. [ 294.914871][T13100] bond7: option mode: invalid value (254) [ 294.974436][T13100] bond7 (unregistering): Released all slaves [ 295.112781][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 295.130554][T13121] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1730'. [ 295.149709][T13111] syz.1.1727 (13111) used obsolete PPPIOCDETACH ioctl [ 295.232515][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.275084][T13130] bond0 (unregistering): Released all slaves [ 295.614817][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1735'. [ 295.662378][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 296.158714][T13180] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 296.442186][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 296.459586][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1747'. [ 296.461390][T13201] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 296.615281][T13211] xt_hashlimit: size too large, truncated to 1048576 [ 296.787227][T13218] raw_sendmsg: syz.4.1754 forgot to set AF_INET. Fix it! [ 297.080740][T13232] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 297.133246][T13232] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 297.156661][T13232] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 297.166324][T13232] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 297.480796][T13255] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 297.538763][T13261] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 297.800674][T13282] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 297.808035][T13272] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 299.355525][T13369] __nla_validate_parse: 16 callbacks suppressed [ 299.355549][T13369] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1791'. [ 299.591934][T13371] syzkaller0: entered promiscuous mode [ 299.658823][T13371] syzkaller0: entered allmulticast mode [ 299.907239][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 299.956299][T13391] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 299.965345][T13395] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1797'. [ 299.966579][T13391] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1796'. [ 300.000615][T13391] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1796'. [ 300.023358][T13391] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 300.120315][T13404] netlink: 'syz.3.1801': attribute type 9 has an invalid length. [ 300.130862][T13406] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1800'. [ 300.404643][T13419] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 300.636273][T13433] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 300.651027][T13435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1810'. [ 300.651705][T13433] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 300.682109][T13435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1810'. [ 300.719891][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 300.739258][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 300.824813][T13433] bond0: entered promiscuous mode [ 300.854494][T13433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.931707][T13452] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 300.956588][T13446] bond0: (slave bridge6): making interface the new active one [ 300.966079][T13446] bridge6: entered promiscuous mode [ 300.977220][T13446] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 301.318468][T13474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.328352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.347389][T13474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.360329][ T7582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.384825][T13475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.393954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.644995][T13484] netlink: 'syz.2.1823': attribute type 4 has an invalid length. [ 301.657505][T13484] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 301.951454][T13496] netlink: 'syz.0.1828': attribute type 12 has an invalid length. [ 301.964457][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 302.057685][T13511] lo speed is unknown, defaulting to 1000 [ 302.087618][T13511] lo speed is unknown, defaulting to 1000 [ 302.099873][T13514] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 302.122081][T13516] tc_dump_action: action bad kind [ 302.174866][T13511] lo speed is unknown, defaulting to 1000 [ 302.270453][T13511] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 302.281571][T13522] netlink: 'syz.0.1834': attribute type 5 has an invalid length. [ 302.326242][T13511] lo speed is unknown, defaulting to 1000 [ 302.335234][T13511] lo speed is unknown, defaulting to 1000 [ 302.343292][T13511] lo speed is unknown, defaulting to 1000 [ 302.351684][T13511] lo speed is unknown, defaulting to 1000 [ 302.361131][T13511] lo speed is unknown, defaulting to 1000 [ 302.562284][T13532] netlink: 'syz.1.1837': attribute type 1 has an invalid length. [ 302.761338][T13543] €Â0: renamed from batadv_slave_1 [ 303.122604][T13560] netlink: 'syz.2.1843': attribute type 21 has an invalid length. [ 303.286044][T13569] bond7: entered promiscuous mode [ 303.294122][T13569] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.418634][T13569] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.435284][T13569] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 303.502857][T13569] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 303.521222][T13569] bond7: (slave wireguard0): making interface the new active one [ 303.530318][T13569] wireguard0: entered promiscuous mode [ 303.538729][T13569] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 303.577037][T13585] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 303.605025][T13585] syzkaller1: linktype set to 0 [ 303.770020][T13599] tipc: Enabling of bearer rejected, failed to enable media [ 303.952592][T13613] tipc: Enabling of bearer rejected, already enabled [ 304.265049][T13623] bond14: entered promiscuous mode [ 304.270324][T13623] bond14: entered allmulticast mode [ 304.307196][T13623] 8021q: adding VLAN 0 to HW filter on device bond14 [ 304.367759][T13640] sctp: [Deprecated]: syz.1.1866 (pid 13640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.367759][T13640] Use struct sctp_sack_info instead [ 304.462648][T13640] __nla_validate_parse: 11 callbacks suppressed [ 304.462669][T13640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1866'. [ 304.482206][T13643] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1867'. [ 304.491318][T13643] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1867'. [ 304.500491][T13643] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1867'. [ 304.700259][T13653] tipc: Failed to remove unknown binding: 66,1,1/1129965844:4007599709/4007599711 [ 304.944308][T13655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.998266][T13664] macvlan3: entered promiscuous mode [ 305.008181][T13664] team0: Port device macvlan3 added [ 305.306480][T13684] validate_nla: 6 callbacks suppressed [ 305.306501][T13684] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 305.316566][T13686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1882'. [ 305.320728][T13684] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1881'. [ 305.490724][T13698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.499862][T13698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.698283][T13697] net_ratelimit: 1 callbacks suppressed [ 305.698302][T13697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.771823][T13697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.953298][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 305.981221][T13718] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1891'. [ 306.429348][T13745] netlink: 'syz.1.1897': attribute type 2 has an invalid length. [ 306.481667][T13743] netlink: 'syz.1.1897': attribute type 2 has an invalid length. [ 306.512816][T13749] smc: net device applied user defined pnetid SYZ2 [ 306.542550][T13749] smc: net device erased user defined pnetid SYZ2 [ 307.099226][T13777] macsec1: entered promiscuous mode [ 307.113926][T13777] gretap0: entered promiscuous mode [ 307.139459][T13777] gretap0: left promiscuous mode [ 307.194836][T13771] lo speed is unknown, defaulting to 1000 [ 307.201172][T13783] netlink: 'syz.3.1904': attribute type 10 has an invalid length. [ 307.377413][T13787] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1905'. [ 307.895823][T13816] netlink: 'syz.0.1910': attribute type 13 has an invalid length. [ 307.907859][T13816] netlink: 'syz.0.1910': attribute type 17 has an invalid length. [ 308.105006][T13816] ±ÿ=–a²š«: left allmulticast mode [ 308.229940][T13816] bridge0: port 3(syz_tun) entered blocking state [ 308.236745][T13816] bridge0: port 3(syz_tun) entered forwarding state [ 308.245343][T13816] bridge0: left promiscuous mode [ 308.250635][T13816] bridge0: left allmulticast mode [ 308.262304][T13816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.270760][T13816] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.279518][T13816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.297276][ T1325] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.307929][ T1325] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.316731][ T1325] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.352763][ T1325] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.413618][T13833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1914'. [ 308.528684][T13838] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 308.573396][T13837] syzkaller0: entered promiscuous mode [ 308.585069][T13837] syzkaller0: entered allmulticast mode [ 308.627013][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.634119][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.640480][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.646867][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.653213][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.659616][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.666181][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.672540][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.678937][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.685313][T13837] tc action pedit 'at' offset 1298 out of bounds [ 308.691676][T13837] 0: reclassify loop, rule prio 0, protocol 800 [ 309.323638][T13860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.358943][T13861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.477372][T13874] __nla_validate_parse: 1 callbacks suppressed [ 309.477393][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 310.078209][T13898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.078857][T13896] syzkaller0: entered promiscuous mode [ 310.092385][T13896] syzkaller0: entered allmulticast mode [ 310.141400][T13893] netlink: 'syz.1.1932': attribute type 3 has an invalid length. [ 310.166771][T13893] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1932'. [ 310.198153][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1935'. [ 310.617629][T13913] xt_time: unknown flags 0xf4 [ 310.626983][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 310.657224][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 310.692385][T13914] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1937'. [ 310.746887][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 310.813182][T13914] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1937'. [ 310.847448][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 310.979825][T13938] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1944'. [ 311.136732][T13950] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 311.416024][T13966] netlink: 'syz.2.1948': attribute type 7 has an invalid length. [ 311.424069][T13966] netlink: 'syz.2.1948': attribute type 8 has an invalid length. [ 311.567527][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.742825][T13976] netlink: 'syz.1.1952': attribute type 1 has an invalid length. [ 311.897441][T13981] netlink: 'syz.2.1951': attribute type 2 has an invalid length. [ 311.909437][T13981] netlink: 'syz.2.1951': attribute type 2 has an invalid length. [ 312.045599][T13989] macsec1: entered promiscuous mode [ 312.311959][T13980] lo speed is unknown, defaulting to 1000 [ 312.806393][T14017] team0: No ports can be present during mode change [ 313.544875][T14042] wg1: entered allmulticast mode [ 313.717447][T14050] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 313.748344][T14051] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 313.802455][T14055] batadv0: entered promiscuous mode [ 313.812117][T14055] batadv0: entered allmulticast mode [ 314.180977][T14073] netlink: zone id is out of range [ 314.208939][T14073] netlink: zone id is out of range [ 314.246780][T14073] netlink: zone id is out of range [ 314.251966][T14073] netlink: zone id is out of range [ 314.303205][T14073] netlink: zone id is out of range [ 314.319726][T14073] netlink: zone id is out of range [ 314.344409][T14073] netlink: zone id is out of range [ 314.349586][T14073] netlink: zone id is out of range [ 314.594951][T14090] __nla_validate_parse: 6 callbacks suppressed [ 314.594973][T14090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1978'. [ 315.183177][T14115] geneve4: entered promiscuous mode [ 315.198433][T14115] geneve4: entered allmulticast mode [ 315.314300][ T7580] netdevsim netdevsim4 eth0: set [1, 3] type 2 family 0 port 20000 - 0 [ 315.324931][ T7580] netdevsim netdevsim4 eth1: set [1, 3] type 2 family 0 port 20000 - 0 [ 315.341803][ T7580] netdevsim netdevsim4 eth2: set [1, 3] type 2 family 0 port 20000 - 0 [ 315.370637][ T7580] netdevsim netdevsim4 eth3: set [1, 3] type 2 family 0 port 20000 - 0 [ 315.652609][T14134] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1989'. [ 315.690536][T14134] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1989'. [ 316.370105][T14147] syzkaller0: entered promiscuous mode [ 316.376538][T14147] syzkaller0: entered allmulticast mode [ 316.654891][T14186] sctp: [Deprecated]: syz.3.2001 (pid 14186) Use of int in maxseg socket option. [ 316.654891][T14186] Use struct sctp_assoc_value instead [ 317.325567][ C0] net_ratelimit: 8 callbacks suppressed [ 317.325591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.652355][T14199] dvmrp0: entered allmulticast mode [ 319.272827][T14232] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2011'. [ 319.285700][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 319.344244][T14227] lo speed is unknown, defaulting to 1000 [ 319.671924][ T24] IPVS: starting estimator thread 0... [ 319.774374][T14240] IPVS: using max 25 ests per chain, 60000 per kthread [ 320.074334][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 320.086184][T14256] lo speed is unknown, defaulting to 1000 [ 320.175473][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 320.256788][T14269] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2024'. [ 320.271132][T14273] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 320.370848][T14269] macvtap0: entered promiscuous mode [ 320.399524][T14279] netlink: 'syz.2.2026': attribute type 10 has an invalid length. [ 320.412639][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 320.492748][T14269] macvtap0 (unregistering): left promiscuous mode [ 320.529590][T14284] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 320.534357][T14279] team0: Device vxcan1 is of different type [ 320.537816][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 320.830633][T14297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.839621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.020410][T14308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2035'. [ 321.096323][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2036'. [ 321.107934][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2036'. [ 321.240765][T14321] macvlan1: entered promiscuous mode [ 321.258624][T14321] team0: Port device macvlan1 added [ 321.267112][T14324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.274516][T14324] IPv6: NLM_F_CREATE should be set when creating new route [ 321.290856][T14324] ±ÿ=–a²š«: entered allmulticast mode [ 321.299071][T14324] tunl0: entered allmulticast mode [ 321.355314][T14319] netlink: 'syz.0.2038': attribute type 30 has an invalid length. [ 321.364805][T14324] gre0: entered allmulticast mode [ 321.428709][T14324] gretap0: entered allmulticast mode [ 321.466650][T14324] erspan0: entered allmulticast mode [ 321.483537][T14324] ip_vti0: entered allmulticast mode [ 321.515600][T14324] ip6_vti0: entered allmulticast mode [ 321.553032][T14324] sit0: entered allmulticast mode [ 321.568991][T14324] ip6tnl0: entered allmulticast mode [ 321.596980][T14324] tipc: Resetting bearer [ 321.603280][T14324] ip6gre0: entered allmulticast mode [ 321.677123][T14324] bridge0: port 3(syz_tun) entered disabled state [ 321.714523][T14324] ip6gretap0: entered allmulticast mode [ 321.714966][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 321.722761][T14324] bridge0: entered allmulticast mode [ 321.739985][T14324] vcan0: entered allmulticast mode [ 321.760712][T14324] bond0: entered allmulticast mode [ 321.769212][T14324] bond_slave_0: entered allmulticast mode [ 321.775892][T14324] bond_slave_1: entered allmulticast mode [ 321.785831][T14324] team0: entered allmulticast mode [ 321.791100][T14324] team_slave_0: entered allmulticast mode [ 321.804966][T14324] team_slave_1: entered allmulticast mode [ 321.823438][T14324] nlmon0: entered allmulticast mode [ 321.837547][T14324] caif0: entered allmulticast mode [ 321.849111][T14324] batadv0: entered allmulticast mode [ 321.858769][T14324] vxcan0: entered allmulticast mode [ 321.865211][T14324] vxcan1: entered allmulticast mode [ 321.870668][T14324] veth0: entered allmulticast mode [ 321.877292][T14324] veth1: entered allmulticast mode [ 321.882584][T14324] wg0: entered allmulticast mode [ 321.888502][T14324] wg1: left promiscuous mode [ 321.893193][T14324] wg2: entered allmulticast mode [ 321.898890][T14324] veth0_to_bridge: entered allmulticast mode [ 321.905770][T14324] veth1_to_bridge: entered allmulticast mode [ 321.912249][T14324] : entered allmulticast mode [ 321.917777][T14324] veth1_to_bond: entered allmulticast mode [ 321.923951][T14324] veth0_to_team: entered allmulticast mode [ 321.930084][T14324] veth1_to_team: entered allmulticast mode [ 321.936694][T14324] veth1_to_batadv: entered allmulticast mode [ 321.942922][T14324] €Â0: entered allmulticast mode [ 321.948581][T14324] xfrm0: entered allmulticast mode [ 321.953895][T14324] veth0_to_hsr: entered allmulticast mode [ 321.959733][T14324] hsr_slave_0: entered allmulticast mode [ 321.966087][T14324] veth1_to_hsr: entered allmulticast mode [ 321.972004][T14324] hsr_slave_1: entered allmulticast mode [ 321.978339][T14324] hsr0: entered allmulticast mode [ 321.983485][T14324] veth1_virt_wifi: entered allmulticast mode [ 321.990210][T14324] veth0_virt_wifi: entered allmulticast mode [ 321.996854][T14324] virt_wifi0: entered allmulticast mode [ 322.002497][T14324] veth1_vlan: entered allmulticast mode [ 322.008532][T14324] @ÿ: entered allmulticast mode [ 322.013830][T14324] vlan0: entered allmulticast mode [ 322.019161][T14324] vlan1: entered allmulticast mode [ 322.024595][T14324] macvlan0: entered allmulticast mode [ 322.030240][T14324] macvlan1: entered allmulticast mode [ 322.036259][T14324] ipvlan0: entered allmulticast mode [ 322.041737][T14324] ipvlan1: entered allmulticast mode [ 322.047747][T14324] veth1_macvtap: entered allmulticast mode [ 322.054446][T14324] veth0_macvtap: entered allmulticast mode [ 322.060362][T14324] macvtap0: entered allmulticast mode [ 322.066341][T14324] macsec0: entered allmulticast mode [ 322.071706][T14324] geneve0: entered allmulticast mode [ 322.077634][T14324] geneve1: entered allmulticast mode [ 322.083109][T14324] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 322.090802][T14324] geneve2: entered allmulticast mode [ 322.096871][T14324] : entered allmulticast mode [ 322.101848][T14324] bond1: entered allmulticast mode [ 322.107558][T14324] vti0: entered allmulticast mode [ 322.112731][T14324] ip6tnl1: entered allmulticast mode [ 322.118567][T14324] bond2: left promiscuous mode [ 322.123340][T14324] gre1: left promiscuous mode [ 322.128596][T14324] bond2: entered allmulticast mode [ 322.134279][T14324] gre1: entered allmulticast mode [ 322.139603][T14324] bond3: entered allmulticast mode [ 322.145319][T14324] bond4: entered allmulticast mode [ 322.150524][T14324] bond5: entered allmulticast mode [ 322.156144][T14324] gretap1: entered allmulticast mode [ 322.161701][T14324] veth2: entered allmulticast mode [ 322.167466][T14324] veth3: entered allmulticast mode [ 322.172902][T14324] ieee802154 phy0 wpan0: entered allmulticast mode [ 322.180394][T14324] gretap2: entered allmulticast mode [ 322.186194][T14324] syztnl2: entered allmulticast mode [ 322.191617][T14324] veth4: entered allmulticast mode [ 322.197068][T14324] veth5: entered allmulticast mode [ 322.202388][T14324] vxlan0: entered allmulticast mode [ 322.208191][T14324] bridge1: entered allmulticast mode [ 322.213597][T14324] bond6: entered allmulticast mode [ 322.219048][T14324] erspan1: entered allmulticast mode [ 322.224784][T14324] veth6: entered allmulticast mode [ 322.229994][T14324] veth7: entered allmulticast mode [ 322.235816][T14324] ip6gretap1: entered allmulticast mode [ 322.241499][T14324] ipip0: entered allmulticast mode [ 322.247399][T14324] ip6tnl2: entered allmulticast mode [ 322.252950][T14324] gre2: entered allmulticast mode [ 322.258630][T14324] ip6erspan0: entered allmulticast mode [ 322.265321][T14324] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 322.272618][T14324] bond8: left promiscuous mode [ 322.278013][T14324] ip6gre1: left promiscuous mode [ 322.283138][T14324] bond8: entered allmulticast mode [ 322.289009][T14324] ip6gre1: entered allmulticast mode [ 322.295163][T14324] veth8: entered allmulticast mode [ 322.300589][T14324] veth9: entered allmulticast mode [ 322.306460][T14324] netdevsim netdevsim0 eth0: entered allmulticast mode [ 322.313671][T14324] netdevsim netdevsim0 eth1: entered allmulticast mode [ 322.321423][T14324] netdevsim netdevsim0 eth2: entered allmulticast mode [ 322.329208][T14324] netdevsim netdevsim0 eth3: entered allmulticast mode [ 322.336797][T14324] bond9: entered allmulticast mode [ 322.342071][T14324] veth10: entered allmulticast mode [ 322.347958][T14324] veth11: entered allmulticast mode [ 322.353343][T14324] bridge2: entered allmulticast mode [ 322.359268][T14324] : entered allmulticast mode [ 322.370633][T14324] mac80211_hwsim hwsim1 wlan2: entered allmulticast mode [ 322.378415][T14324] vxcan2: entered allmulticast mode [ 322.384007][T14324] vxcan3: entered allmulticast mode [ 322.389404][T14324] mac80211_hwsim hwsim29 wlan3: entered allmulticast mode [ 322.396812][T14324] ipip1: entered allmulticast mode [ 322.402113][T14324] macvlan2: entered allmulticast mode [ 322.558309][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 323.464351][T14413] sctp: [Deprecated]: syz.3.2060 (pid 14413) Use of int in maxseg socket option. [ 323.464351][T14413] Use struct sctp_assoc_value instead [ 323.969803][T14425] pimreg: tun_chr_ioctl cmd 2147767520 [ 323.983568][T14424] vlan0: entered promiscuous mode [ 323.989895][T14424] geneve1: entered promiscuous mode [ 323.995574][T14424] vlan0: entered allmulticast mode [ 324.000724][T14424] geneve1: entered allmulticast mode [ 324.191880][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.203110][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.234838][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.259246][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.547668][T14460] lo speed is unknown, defaulting to 1000 [ 324.760656][T14473] netlink: 'syz.3.2081': attribute type 2 has an invalid length. [ 325.255197][T14460] __nla_validate_parse: 5 callbacks suppressed [ 325.255222][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 325.360277][T14490] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 325.391428][T14490] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 325.432508][T14491] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 325.436682][T14490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2086'. [ 325.510762][T14491] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 325.870521][T14504] netlink: 'syz.1.2090': attribute type 29 has an invalid length. [ 325.892974][T14503] netlink: 'syz.1.2090': attribute type 29 has an invalid length. [ 325.939065][T14503] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2090'. [ 326.184216][T14527] syz_tun: left allmulticast mode [ 326.194286][T14527] syz_tun: left promiscuous mode [ 326.204444][T14527] bridge0: port 3(syz_tun) entered disabled state [ 326.235560][T14535] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2094'. [ 326.289281][T14527] syz_tun: entered allmulticast mode [ 326.305323][T14527] team0: Port device syz_tun added [ 326.336427][T14533] syz_tun: left allmulticast mode [ 326.344501][T14540] netlink: 'syz.3.2093': attribute type 13 has an invalid length. [ 326.352970][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 326.375530][T14533] team0: Port device syz_tun removed [ 326.394106][T14533] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.407106][T14533] bridge_slave_1: left promiscuous mode [ 326.414993][T14533] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.434824][T14533] bond0: (slave bond_slave_0): Releasing backup interface [ 326.449172][T14533] bond0: (slave bond_slave_1): Releasing backup interface [ 326.464584][T14533] team0: Port device team_slave_0 removed [ 326.473165][T14533] team0: Port device team_slave_1 removed [ 326.479689][T14533] batman_adv: batadv0: Removing interface: €Â0 [ 326.496064][T14533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.721967][T14547] syzkaller0: entered promiscuous mode [ 326.740117][T14547] syzkaller0: entered allmulticast mode [ 326.818208][T14562] netlink: 'syz.2.2102': attribute type 2 has an invalid length. [ 326.894054][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 326.928476][T14562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2102'. [ 326.940021][T14557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2100'. [ 327.157674][T14573] openvswitch: netlink: IPv4 tun info is not correct [ 327.222473][T14576] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.2106'. [ 327.410671][T14590] x_tables: unsorted entry at hook 1 [ 327.454573][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 327.563375][T14592] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.641504][T14598] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 327.643998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.694678][T14598] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 327.734697][T14598] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 327.878277][T14615] tipc: Enabling of bearer rejected, failed to enable media [ 328.075788][ T30] audit: type=1804 audit(1775367520.187:2): pid=14624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2118" name="/newroot/428/cgroup.controllers" dev="tmpfs" ino=2210 res=1 errno=0 [ 328.100940][ T30] audit: type=1800 audit(1775367520.187:3): pid=14624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2118" name="cgroup.controllers" dev="tmpfs" ino=2210 res=0 errno=0 [ 328.107957][T14630] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 328.880947][T14679] syzkaller0: entered promiscuous mode [ 329.050255][T14682] bond8: option min_links: invalid value (18446744073709551612) [ 329.090298][T14682] bond8: option min_links: allowed values 0 - 2147483647 [ 329.125983][T14682] bond8 (unregistering): Released all slaves [ 329.203410][T14692] macvtap0: entered promiscuous mode [ 329.252266][T14687] lo speed is unknown, defaulting to 1000 [ 329.361581][T14693] macvtap0 (unregistering): left promiscuous mode [ 330.003556][T14721] dvmrp31: entered allmulticast mode [ 330.148441][T14731] pimreg: left allmulticast mode [ 330.255368][T14731] syzkaller0: entered promiscuous mode [ 330.262095][T14731] syzkaller0: entered allmulticast mode [ 330.414177][T14750] tunl0: Caught tx_queue_len zero misconfig [ 330.512497][T14753] __nla_validate_parse: 15 callbacks suppressed [ 330.512518][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'. [ 330.622548][T14759] syzkaller0: entered promiscuous mode [ 330.629205][T14759] syzkaller0: entered allmulticast mode [ 330.766818][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.992513][T14785] lo speed is unknown, defaulting to 1000 [ 331.786941][T14826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2166'. [ 331.800805][T14826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2166'. [ 331.954870][T14831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2167'. [ 332.244258][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 333.058564][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2170'. [ 333.149983][T14733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.376433][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 333.413126][T14852] syzkaller0: entered promiscuous mode [ 333.419223][T14852] syzkaller0: entered allmulticast mode [ 333.426285][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 333.442550][T14854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2175'. [ 333.476610][T14857] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2174'. [ 333.632554][T14863] lo: Caught tx_queue_len zero misconfig [ 333.636957][T14864] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 333.667225][T14864] netlink: 'syz.0.2177': attribute type 2 has an invalid length. [ 334.031382][T14891] nftables ruleset with unbound chain [ 334.180188][T14890] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 334.230024][T14898] syzkaller1: entered promiscuous mode [ 334.245052][T14898] syzkaller1: entered allmulticast mode [ 334.270595][T14891] syzkaller0: entered promiscuous mode [ 334.278427][T14891] syzkaller0: entered allmulticast mode [ 334.626821][T14932] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 334.696503][T14942] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 334.698048][T14945] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 334.734649][T14945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.873845][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e91000: rx timeout, send abort [ 335.248027][T14980] lo: Caught tx_queue_len zero misconfig [ 335.345336][T14985] syzkaller0: entered promiscuous mode [ 335.351096][T14985] syzkaller0: entered allmulticast mode [ 335.375249][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bb41000: rx timeout, send abort [ 335.383614][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e91000: abort rx timeout. Force session deactivation [ 335.458322][T14990] syzkaller0: entered promiscuous mode [ 335.491406][T14990] syzkaller0: entered allmulticast mode [ 335.795823][T15000] netlink: 'syz.0.2214': attribute type 3 has an invalid length. [ 335.864748][T15001] __nla_validate_parse: 6 callbacks suppressed [ 335.864806][T15001] netlink: 182604 bytes leftover after parsing attributes in process `syz.0.2214'. [ 335.883547][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bb41000: abort rx timeout. Force session deactivation [ 335.926043][T15002] netlink: 182604 bytes leftover after parsing attributes in process `syz.0.2214'. [ 336.015491][T15007] bond15: option lp_interval: invalid value (0) [ 336.022063][T15007] bond15: option lp_interval: allowed values 1 - 2147483647 [ 336.084320][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 336.230786][T15007] bond15 (unregistering): Released all slaves [ 336.350586][T15011] ipvlan2: entered allmulticast mode [ 336.872060][T15039] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2221'. [ 337.161073][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 337.189703][T15061] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 337.273412][T15061] bond3: entered promiscuous mode [ 337.284884][T15061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.492609][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2228'. [ 337.560600][T15083] vlan3: entered allmulticast mode [ 337.616176][T15083] bridge7: entered allmulticast mode [ 337.636036][T15083] bridge7: port 1(erspan0) entered blocking state [ 337.642626][T15083] bridge7: port 1(erspan0) entered disabled state [ 337.674576][T15083] erspan0: entered allmulticast mode [ 337.691406][T15083] erspan0: left allmulticast mode [ 337.839077][T15090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.092133][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2234'. [ 338.105791][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2233'. [ 338.137140][T15102] ipvlan2: entered allmulticast mode [ 338.229221][T15105] 8021q: VLANs not supported on ip6_vti0 [ 338.347399][T15111] lo: left allmulticast mode [ 338.354952][T15111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.371836][T12242] lo speed is unknown, defaulting to 1000 [ 338.420363][T15116] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 338.430747][T15116] bridge7: entered allmulticast mode [ 338.524782][T15119] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 338.545088][T15120] netlink: 'syz.2.2240': attribute type 1 has an invalid length. [ 338.553231][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 338.573410][T15119] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address [ 338.585303][T15119] bond15: (slave vxcan5): Error -95 calling set_mac_address [ 338.736981][T15126] lo speed is unknown, defaulting to 1000 [ 338.778060][T15127] lo speed is unknown, defaulting to 1000 [ 339.203563][T15132] syzkaller0: entered promiscuous mode [ 339.226142][T15132] syzkaller0: entered allmulticast mode [ 339.258719][T15132] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 339.592509][T15153] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2249'. [ 339.606790][T15158] openvswitch: netlink: Flow actions attr not present in new flow. [ 339.624310][T15158] syz.0.2250 uses old SIOCAX25GETINFO [ 339.852324][T15167] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 340.048428][T15181] tipc: Started in network mode [ 340.064015][T15181] tipc: Node identity cac4783c38a9, cluster identity 4711 [ 340.088113][T15181] tipc: Enabled bearer , priority 0 [ 340.119859][T15189] syzkaller0: entered promiscuous mode [ 340.146110][T15189] syzkaller0: entered allmulticast mode [ 340.182001][T15180] tipc: Resetting bearer [ 340.207529][T15180] tipc: Disabling bearer [ 340.242396][T15186] lo speed is unknown, defaulting to 1000 [ 340.482373][T15207] netlink: 'syz.0.2263': attribute type 13 has an invalid length. [ 340.496364][T15207] netlink: 'syz.0.2263': attribute type 17 has an invalid length. [ 340.507409][T15207] ±ÿ=–a²š«: left allmulticast mode [ 340.515470][T15207] tunl0: left allmulticast mode [ 340.522318][T15207] gre0: left allmulticast mode [ 340.567110][T15207] gretap0: left allmulticast mode [ 340.617250][T15207] erspan0: left allmulticast mode [ 340.625246][T15207] ip_vti0: left allmulticast mode [ 340.632130][T15207] ip6_vti0: left allmulticast mode [ 340.638975][T15207] sit0: left allmulticast mode [ 340.651211][T15207] ip6tnl0: left allmulticast mode [ 340.657954][T15207] ip6gre0: left allmulticast mode [ 340.666424][T15207] ip6gretap0: left allmulticast mode [ 340.673285][T15207] bridge0: left allmulticast mode [ 340.679569][T15207] vcan0: left allmulticast mode [ 340.685503][T15207] bond0: left allmulticast mode [ 340.691078][T15207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.699106][T15207] team0: left allmulticast mode [ 340.706694][T15207] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.714606][T15207] nlmon0: left allmulticast mode [ 340.720791][T15207] caif0: left allmulticast mode [ 340.725847][T15207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.761440][T15222] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 340.911330][T15233] __nla_validate_parse: 6 callbacks suppressed [ 340.911352][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 341.099440][T15241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2270'. [ 341.617189][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 341.659797][T15269] netlink: 'syz.3.2277': attribute type 12 has an invalid length. [ 341.668712][T15269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2277'. [ 341.685071][T15274] netlink: 'syz.3.2277': attribute type 12 has an invalid length. [ 341.703249][T15274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2277'. [ 341.838120][T15281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2283'. [ 341.855788][T15280] ip6gre2: entered promiscuous mode [ 341.868643][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 341.953537][T15292] netlink: 656 bytes leftover after parsing attributes in process `syz.4.2286'. [ 341.985661][T15284] syzkaller0: entered allmulticast mode [ 342.050753][T15284] syzkaller0 (unregistering): left allmulticast mode [ 342.057027][T15298] netlink: 'syz.0.2288': attribute type 3 has an invalid length. [ 342.224422][T15316] netlink: 'syz.1.2293': attribute type 10 has an invalid length. [ 342.257484][T15316] team0: Port device dummy0 removed [ 342.277139][T15316] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 342.385950][T15326] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2296'. [ 342.551001][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 342.594460][T15330] netlink: 'syz.3.2298': attribute type 21 has an invalid length. [ 342.618827][T15330] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.642004][T15330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.649553][T15330] IPv6: NLM_F_CREATE should be set when creating new route [ 342.656891][T15330] IPv6: NLM_F_CREATE should be set when creating new route [ 342.664201][T15330] IPv6: NLM_F_CREATE should be set when creating new route [ 342.841772][T15345] lo speed is unknown, defaulting to 1000 [ 343.032547][T15355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.055335][T15348] lo speed is unknown, defaulting to 1000 [ 343.489443][T15376] netlink: 'syz.3.2309': attribute type 13 has an invalid length. [ 343.506967][T15376] netlink: 'syz.3.2309': attribute type 17 has an invalid length. [ 343.635747][T15376] erspan0: left promiscuous mode [ 343.748243][T15376] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.824071][T15376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.282968][T15414] openvswitch: netlink: Duplicate or invalid key (type 0). [ 344.291235][T15414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.445446][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.732596][T15428] syzkaller0: entered promiscuous mode [ 344.738504][T15428] syzkaller0: entered allmulticast mode [ 344.831064][T15429] team1: entered promiscuous mode [ 344.839730][T15429] team1: entered allmulticast mode [ 344.856558][T15429] 8021q: adding VLAN 0 to HW filter on device team1 [ 344.920516][T15433] team2: entered promiscuous mode [ 344.936363][T15433] team2: entered allmulticast mode [ 344.950997][T15433] 8021q: adding VLAN 0 to HW filter on device team2 [ 344.990717][T15438] can: request_module (can-proto-5) failed. [ 345.896816][T15498] bridge0: entered allmulticast mode [ 346.093433][T15504] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 346.576433][T15527] __nla_validate_parse: 4 callbacks suppressed [ 346.576453][T15527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2349'. [ 346.578816][T15524] tipc: Enabled bearer , priority 0 [ 346.646409][T15534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2351'. [ 346.658051][T15534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2351'. [ 346.707024][T15524] syzkaller0: entered promiscuous mode [ 346.712849][T15524] syzkaller0: entered allmulticast mode [ 346.719574][T15524] tipc: Resetting bearer [ 346.726082][T15527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2349'. [ 346.838757][T15541] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2353'. [ 346.928112][T15549] netlink: 'syz.4.2355': attribute type 1 has an invalid length. [ 346.936775][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 346.946487][T15549] netlink: 'syz.4.2355': attribute type 1 has an invalid length. [ 346.980600][T15555] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 347.028661][T15560] syzkaller1: entered promiscuous mode [ 347.043685][T15560] syzkaller1: entered allmulticast mode [ 347.051201][T15563] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2358'. [ 347.309525][T15572] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR [ 347.353542][ T7589] tipc: Resetting bearer [ 347.372675][T15524] tipc: Resetting bearer [ 348.766593][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.040445][T15524] tipc: Disabling bearer [ 349.274634][T15618] netlink: 'syz.3.2365': attribute type 19 has an invalid length. [ 349.282525][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2365'. [ 349.329114][T15625] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2365'. [ 349.383059][ T7600] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.396599][T15631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2368'. [ 349.405844][ T7600] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.413796][T15633] Cannot find set identified by id 3 to match [ 349.425047][ T7600] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.454661][T15631] openvswitch: netlink: Flow key attr not present in new flow. [ 349.462404][ T7600] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.872769][T15671] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 350.034538][T15678] netlink: 'syz.2.2379': attribute type 14 has an invalid length. [ 350.062847][T15679] netlink: 'syz.2.2379': attribute type 3 has an invalid length. [ 350.434355][T15703] netlink: 'syz.3.2384': attribute type 21 has an invalid length. [ 350.459406][T15703] netlink: 'syz.3.2384': attribute type 4 has an invalid length. [ 350.484603][T15703] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 350.610446][T15715] 8021q: adding VLAN 0 to HW filter on device bond16 [ 350.626696][T15716] 8021q: VLANs not supported on ip6tnl0 [ 350.628677][T15715] netlink: 'syz.4.2390': attribute type 1 has an invalid length. [ 350.655959][T15715] vxlan2: entered promiscuous mode [ 350.691212][T15715] bond16: (slave vxlan2): Opening slave failed [ 350.774455][T15727] netlink: 'syz.0.2395': attribute type 6 has an invalid length. [ 351.673421][T15752] syzkaller0: entered promiscuous mode [ 351.685772][T15752] syzkaller0: entered allmulticast mode [ 351.806791][ T30] audit: type=1107 audit(1775367543.927:4): pid=15759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 351.841762][T15767] __nla_validate_parse: 19 callbacks suppressed [ 351.841816][T15767] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2404'. [ 351.858997][T15766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2404'. [ 351.994888][T15764] lo speed is unknown, defaulting to 1000 [ 352.118504][T15776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2407'. [ 352.154903][T15774] validate_nla: 1 callbacks suppressed [ 352.154924][T15774] netlink: 'syz.0.2405': attribute type 10 has an invalid length. [ 352.175927][T15774] netlink: 'syz.0.2405': attribute type 10 has an invalid length. [ 352.478105][T15789] netlink: 'syz.0.2410': attribute type 4 has an invalid length. [ 352.508877][T15789] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2410'. [ 352.762640][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2413'. [ 352.780156][T15799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2412'. [ 352.794192][T15799] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 353.065095][T15813] bridge_slave_1: left allmulticast mode [ 353.075364][T15813] bridge_slave_1: left promiscuous mode [ 353.086592][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.103222][T15813] team0: Port device team_slave_0 removed [ 353.111675][T15813] team0: Port device team_slave_1 removed [ 353.118777][T15813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.127720][T15813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.139605][T15813] bond0: (slave bridge6): Releasing backup interface [ 353.148541][T15813] bridge6: left promiscuous mode [ 353.346113][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 353.361848][T15825] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 353.516719][T15835] bond17 (unregistering): Released all slaves [ 353.578309][T15841] netlink: 'syz.2.2425': attribute type 4 has an invalid length. [ 353.592250][T15838] sch_fq: defrate 3 ignored. [ 353.607272][T15841] netlink: 'syz.2.2425': attribute type 4 has an invalid length. [ 353.839869][T15859] netlink: 'syz.2.2428': attribute type 24 has an invalid length. [ 353.867863][T15860] netlink: 'syz.0.2430': attribute type 32 has an invalid length. [ 353.997001][T15869] ipip0: entered promiscuous mode [ 354.032359][T15869] tc_dump_action: action bad kind [ 354.033821][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2433'. [ 354.385151][T15894] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 354.456164][T15894] 8021q: adding VLAN 0 to HW filter on device bond12 [ 354.475290][T15897] vlan3: entered promiscuous mode [ 354.480505][T15897] bond12: entered promiscuous mode [ 354.493635][T15897] vlan3: entered allmulticast mode [ 354.512564][T15897] bond12: entered allmulticast mode [ 354.514859][T15902] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2443'. [ 354.930538][T15919] syzkaller0: left promiscuous mode [ 354.947022][T15919] syzkaller0: left allmulticast mode [ 355.341183][T15939] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 355.385320][T15939] bond0: (slave dummy0): Releasing backup interface [ 355.412621][T15945] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 355.429764][T15939] team0: Port device dummy0 added [ 355.874689][T15960] lo speed is unknown, defaulting to 1000 [ 355.895352][T15962] dvmrp12: entered allmulticast mode [ 355.942126][T15961] dvmrp12: left allmulticast mode [ 356.118810][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 356.303325][T15964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.720820][T15994] xt_l2tp: missing protocol rule (udp|l2tpip) [ 356.903030][T16000] xt_hashlimit: size too large, truncated to 1048576 [ 356.942071][T16004] __nla_validate_parse: 4 callbacks suppressed [ 356.942092][T16004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2475'. [ 357.004229][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.074331][T16008] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2477'. [ 357.537757][T16030] validate_nla: 3 callbacks suppressed [ 357.537779][T16030] netlink: 'syz.1.2481': attribute type 13 has an invalid length. [ 357.739501][T12242] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 357.761046][T16041] netlink: 'syz.0.2483': attribute type 21 has an invalid length. [ 357.769910][T16041] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2483'. [ 357.801440][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 357.886312][T16048] netlink: 'syz.0.2483': attribute type 1 has an invalid length. [ 357.916150][T16041] netlink: 'syz.0.2483': attribute type 4 has an invalid length. [ 357.936719][T16048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2483'. [ 357.939067][T16047] netlink: 'syz.2.2484': attribute type 2 has an invalid length. [ 357.957007][T16041] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2483'. [ 358.000144][T16056] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 358.038358][T16047] !: entered promiscuous mode [ 358.318217][T12242] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 358.340365][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 358.366885][T16070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.497032][T16070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2492'. [ 358.561343][T16083] netlink: 'syz.0.2492': attribute type 8 has an invalid length. [ 358.617787][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 358.754675][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2496'. [ 359.878471][T16151] lo speed is unknown, defaulting to 1000 [ 360.230545][T16166] bond0: Caught tx_queue_len zero misconfig [ 360.669557][T16200] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 361.140298][T16227] SET target dimension over the limit! [ 361.190729][T16230] block nbd0: not configured, cannot reconfigure [ 361.626700][T16230] tipc: Resetting bearer [ 361.650098][T16249] netlink: 'syz.2.2534': attribute type 11 has an invalid length. [ 361.651633][T16248] netlink: 'syz.3.2533': attribute type 1 has an invalid length. [ 361.715258][T16230] vxcan0: left allmulticast mode [ 361.722701][T16230] vxcan1: left allmulticast mode [ 361.740410][T16230] veth0: left allmulticast mode [ 361.749007][T16230] veth1: left allmulticast mode [ 361.766903][T16230] wg0: left allmulticast mode [ 361.772054][T16230] wg1: left allmulticast mode [ 361.777477][T16230] wg2: left allmulticast mode [ 361.788811][T16230] veth0_to_bridge: left allmulticast mode [ 361.797093][T16230] veth1_to_bridge: left allmulticast mode [ 361.803159][T16230] bridge_slave_1: left allmulticast mode [ 361.811070][T16230] : left allmulticast mode [ 361.818214][T16230] bond_slave_0: left allmulticast mode [ 361.825131][T16230] veth1_to_bond: left allmulticast mode [ 361.831031][T16230] bond_slave_1: left allmulticast mode [ 361.838104][T16230] veth0_to_team: left allmulticast mode [ 361.844946][T16230] team_slave_0: left allmulticast mode [ 361.850733][T16230] veth1_to_team: left allmulticast mode [ 361.857667][T16230] team_slave_1: left allmulticast mode [ 361.863522][T16230] veth1_to_batadv: left allmulticast mode [ 361.870428][T16230] €Â0: left allmulticast mode [ 361.876683][T16230] xfrm0: left allmulticast mode [ 361.881799][T16230] veth0_to_hsr: left allmulticast mode [ 361.888611][T16230] veth1_to_hsr: left allmulticast mode [ 361.895358][T16230] hsr0: left allmulticast mode [ 361.901899][T16230] hsr_slave_0: left allmulticast mode [ 361.907747][T16230] hsr_slave_1: left allmulticast mode [ 361.913294][T16230] veth1_virt_wifi: left allmulticast mode [ 361.919760][T16230] veth0_virt_wifi: left allmulticast mode [ 361.927280][T16230] virt_wifi0: left allmulticast mode [ 361.932680][T16230] veth1_vlan: left allmulticast mode [ 361.938878][T16230] vlan0: left allmulticast mode [ 361.944098][T16230] vlan1: left allmulticast mode [ 361.949077][T16230] macvlan0: left allmulticast mode [ 361.954767][T16230] macvlan1: left allmulticast mode [ 361.960093][T16230] ipvlan0: left allmulticast mode [ 361.971535][T16230] ipvlan1: left allmulticast mode [ 361.977599][T16230] @ÿ: left allmulticast mode [ 361.982594][T16230] veth1_macvtap: left allmulticast mode [ 361.989270][T16230] veth0_macvtap: left allmulticast mode [ 361.996218][T16230] macvtap0: left allmulticast mode [ 362.001561][T16230] macsec0: left allmulticast mode [ 362.008619][T16230] geneve1: left allmulticast mode [ 362.014793][T16230] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 362.021788][T16230] geneve2: left allmulticast mode [ 362.027915][T16230] : left allmulticast mode [ 362.032719][T16230] bond1: left allmulticast mode [ 362.054594][T16230] vti0: left allmulticast mode [ 362.059610][T16230] ip6tnl1: left allmulticast mode [ 362.070709][T16230] bond2: left allmulticast mode [ 362.076746][T16230] gre1: left allmulticast mode [ 362.081800][T16230] bond3: left allmulticast mode [ 362.088155][T16230] bond4: left allmulticast mode [ 362.093181][T16230] bond5: left allmulticast mode [ 362.099269][T16230] gretap1: left allmulticast mode [ 362.106732][T16230] veth2: left allmulticast mode [ 362.111793][T16230] veth3: left allmulticast mode [ 362.117919][T16230] ieee802154 phy0 wpan0: left allmulticast mode [ 362.125130][T16230] gretap2: left allmulticast mode [ 362.130325][T16230] syztnl2: left allmulticast mode [ 362.136176][T16230] veth4: left allmulticast mode [ 362.141232][T16230] veth5: left allmulticast mode [ 362.146729][T16230] vxlan0: left allmulticast mode [ 362.151840][T16230] bridge1: left allmulticast mode [ 362.157759][T16230] bond6: left allmulticast mode [ 362.162782][T16230] erspan1: left allmulticast mode [ 362.169188][T16230] veth6: left allmulticast mode [ 362.175248][T16230] veth7: left allmulticast mode [ 362.180326][T16230] ip6gretap1: left allmulticast mode [ 362.186712][T16230] ipip0: left allmulticast mode [ 362.191757][T16230] ip6tnl2: left allmulticast mode [ 362.197529][T16230] gre2: left allmulticast mode [ 362.202469][T16230] ip6erspan0: left allmulticast mode [ 362.209634][T16230] vlan3: left allmulticast mode [ 362.215066][T16230] bond7: left allmulticast mode [ 362.220048][T16230] geneve3: left allmulticast mode [ 362.225721][T16230] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 362.232731][T16230] bond8: left allmulticast mode [ 362.238210][T16230] ip6gre1: left allmulticast mode [ 362.243401][T16230] veth8: left allmulticast mode [ 362.249003][T16230] veth9: left allmulticast mode [ 362.254674][T16230] netdevsim netdevsim0 eth0: left allmulticast mode [ 362.261483][T16230] netdevsim netdevsim0 eth1: left allmulticast mode [ 362.268996][T16230] netdevsim netdevsim0 eth2: left allmulticast mode [ 362.276269][T16230] netdevsim netdevsim0 eth3: left allmulticast mode [ 362.282982][T16230] bond9: left allmulticast mode [ 362.288420][T16230] veth10: left allmulticast mode [ 362.293499][T16230] veth11: left allmulticast mode [ 362.299302][T16230] bridge2: left allmulticast mode [ 362.304845][T16230] : left allmulticast mode [ 362.309491][T16230] mac80211_hwsim hwsim1 wlan2: left allmulticast mode [ 362.317017][T16230] vxcan2: left allmulticast mode [ 362.322106][T16230] vxcan3: left allmulticast mode [ 362.327639][T16230] mac80211_hwsim hwsim29 wlan3: left allmulticast mode [ 362.334957][T16230] ipip1: left allmulticast mode [ 362.340063][T16230] macvlan2: left allmulticast mode [ 362.456161][ T1325] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.475313][ T1325] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.574959][ T1325] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.585088][ T1325] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.617590][T16253] lo speed is unknown, defaulting to 1000 [ 363.177435][T16296] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 363.196445][T16296] netlink: 'syz.0.2544': attribute type 9 has an invalid length. [ 363.197613][T16297] syzkaller0: entered promiscuous mode [ 363.204436][T16296] __nla_validate_parse: 9 callbacks suppressed [ 363.204452][T16296] netlink: 211728 bytes leftover after parsing attributes in process `syz.0.2544'. [ 363.226694][T16297] syzkaller0: entered allmulticast mode [ 365.505952][T16262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.733444][T16324] Bluetooth: MGMT ver 1.23 [ 366.648228][T16366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 366.670427][T16365] veth10: entered allmulticast mode [ 366.694943][T16366] netlink: 'syz.3.2561': attribute type 21 has an invalid length. [ 366.720669][T16366] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2561'. [ 366.766248][T16366] netlink: 'syz.3.2561': attribute type 4 has an invalid length. [ 366.804515][T16366] netlink: 'syz.3.2561': attribute type 3 has an invalid length. [ 366.827500][T16366] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2561'. [ 366.893213][T16375] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2564'. [ 366.943453][T16356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2558'. [ 366.961920][T16375] netlink: 'syz.1.2564': attribute type 1 has an invalid length. [ 367.145354][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 367.160206][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 367.206397][T16393] lo speed is unknown, defaulting to 1000 [ 367.661252][T16411] netlink: 'syz.4.2573': attribute type 6 has an invalid length. [ 368.159974][T16441] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 368.203634][T16445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2580'. [ 368.451820][T16458] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 368.524090][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.745756][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2592'. [ 368.755422][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 368.890843][T16489] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 369.107090][T16494] lo speed is unknown, defaulting to 1000 [ 369.477048][T16507] pim6reg1: entered promiscuous mode [ 369.503544][T16507] pim6reg1: entered allmulticast mode [ 369.699469][T16520] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2603'. [ 369.863133][T16520] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 370.004027][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2605'. [ 370.272698][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2610'. [ 370.379433][T16533] tipc: Enabled bearer , priority 0 [ 370.480000][T16539] syzkaller0: entered promiscuous mode [ 370.485664][T16539] syzkaller0: entered allmulticast mode [ 370.492512][T16539] tipc: Resetting bearer [ 370.554163][T16560] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2611'. [ 370.677537][ T36] tipc: Resetting bearer [ 370.704754][T16560] bond0 (unregistering): Released all slaves [ 370.775877][T16522] tipc: Resetting bearer [ 370.985839][T16562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2612'. [ 371.553923][T16588] nbd: socks must be embedded in a SOCK_ITEM attr [ 371.561813][T16588] block nbd0: shutting down sockets [ 371.627859][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2617'. [ 372.831405][T16522] tipc: Disabling bearer [ 373.003964][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.053140][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'. [ 373.088794][T16600] syzkaller0: entered promiscuous mode [ 373.095862][T16600] syzkaller0: entered allmulticast mode [ 373.216504][T16603] [ 373.218900][T16603] ====================================================== [ 373.225945][T16603] WARNING: possible circular locking dependency detected [ 373.232993][T16603] syzkaller #0 Not tainted [ 373.237435][T16603] ------------------------------------------------------ [ 373.244655][T16603] syz.1.2622/16603 is trying to acquire lock: [ 373.250773][T16603] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 373.260140][T16603] [ 373.260140][T16603] but task is already holding lock: [ 373.267528][T16603] ffff888054d48fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 373.277246][T16603] [ 373.277246][T16603] which lock already depends on the new lock. [ 373.277246][T16603] [ 373.287761][T16603] [ 373.287761][T16603] the existing dependency chain (in reverse order) is: [ 373.296798][T16603] [ 373.296798][T16603] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 373.304728][T16603] lock_sock_nested+0x41/0x100 [ 373.310059][T16603] mptcp_listen+0x230/0x610 [ 373.315106][T16603] __x64_sys_listen+0x1c7/0x240 [ 373.320489][T16603] do_syscall_64+0x14d/0xf80 [ 373.325617][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.332042][T16603] [ 373.332042][T16603] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 373.339886][T16603] lock_sock_nested+0x41/0x100 [ 373.345185][T16603] inet_shutdown+0x6a/0x390 [ 373.350309][T16603] nbd_mark_nsock_dead+0x2e9/0x560 [ 373.356021][T16603] sock_shutdown+0x15e/0x260 [ 373.361141][T16603] nbd_clear_sock+0x24/0x170 [ 373.366258][T16603] nbd_config_put+0x2dd/0x580 [ 373.371465][T16603] nbd_genl_connect+0x19d5/0x1cf0 [ 373.377193][T16603] genl_family_rcv_msg_doit+0x22a/0x330 [ 373.383278][T16603] genl_rcv_msg+0x61c/0x7a0 [ 373.388312][T16603] netlink_rcv_skb+0x232/0x4b0 [ 373.393615][T16603] genl_rcv+0x28/0x40 [ 373.398167][T16603] netlink_unicast+0x80f/0x9b0 [ 373.403483][T16603] netlink_sendmsg+0x813/0xb40 [ 373.408867][T16603] ____sys_sendmsg+0x972/0x9f0 [ 373.414168][T16603] ___sys_sendmsg+0x2a5/0x360 [ 373.419558][T16603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.425030][T16603] do_syscall_64+0x14d/0xf80 [ 373.430154][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.436582][T16603] [ 373.436582][T16603] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 373.444241][T16603] __mutex_lock+0x19f/0x1300 [ 373.449369][T16603] nbd_queue_rq+0x37b/0x1100 [ 373.454486][T16603] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 373.460668][T16603] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 373.467531][T16603] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 373.474137][T16603] blk_mq_run_hw_queue+0x348/0x4f0 [ 373.479969][T16603] blk_mq_dispatch_list+0xd16/0xe10 [ 373.485876][T16603] blk_mq_flush_plug_list+0x48d/0x570 [ 373.491786][T16603] __blk_flush_plug+0x3ed/0x4d0 [ 373.497203][T16603] __submit_bio+0x28d/0x580 [ 373.502235][T16603] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 373.508396][T16603] block_read_full_folio+0x599/0x830 [ 373.514226][T16603] filemap_read_folio+0x137/0x3b0 [ 373.519805][T16603] do_read_cache_folio+0x358/0x590 [ 373.525462][T16603] read_part_sector+0xb6/0x2b0 [ 373.530768][T16603] adfspart_check_ICS+0xa5/0xa40 [ 373.536241][T16603] bdev_disk_changed+0x7ba/0x1550 [ 373.541799][T16603] blkdev_get_whole+0x380/0x510 [ 373.547185][T16603] bdev_open+0x31e/0xd30 [ 373.551960][T16603] blkdev_open+0x470/0x610 [ 373.556906][T16603] do_dentry_open+0x785/0x14e0 [ 373.562226][T16603] vfs_open+0x3b/0x340 [ 373.566827][T16603] path_openat+0x2e08/0x3860 [ 373.571946][T16603] do_file_open+0x23e/0x4a0 [ 373.576978][T16603] do_sys_openat2+0x113/0x200 [ 373.582209][T16603] __x64_sys_openat+0x138/0x170 [ 373.587592][T16603] do_syscall_64+0x14d/0xf80 [ 373.592798][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.599218][T16603] [ 373.599218][T16603] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 373.606445][T16603] __mutex_lock+0x19f/0x1300 [ 373.611570][T16603] nbd_queue_rq+0xc6/0x1100 [ 373.616601][T16603] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 373.622675][T16603] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 373.629534][T16603] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 373.636052][T16603] blk_mq_run_hw_queue+0x348/0x4f0 [ 373.641691][T16603] blk_mq_dispatch_list+0xd16/0xe10 [ 373.647595][T16603] blk_mq_flush_plug_list+0x48d/0x570 [ 373.653509][T16603] __blk_flush_plug+0x3ed/0x4d0 [ 373.658918][T16603] __submit_bio+0x28d/0x580 [ 373.664046][T16603] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 373.670208][T16603] block_read_full_folio+0x599/0x830 [ 373.676117][T16603] filemap_read_folio+0x137/0x3b0 [ 373.681673][T16603] do_read_cache_folio+0x358/0x590 [ 373.687402][T16603] read_part_sector+0xb6/0x2b0 [ 373.692700][T16603] adfspart_check_ICS+0xa5/0xa40 [ 373.698179][T16603] bdev_disk_changed+0x7ba/0x1550 [ 373.703735][T16603] blkdev_get_whole+0x380/0x510 [ 373.709213][T16603] bdev_open+0x31e/0xd30 [ 373.714073][T16603] blkdev_open+0x470/0x610 [ 373.719045][T16603] do_dentry_open+0x785/0x14e0 [ 373.724347][T16603] vfs_open+0x3b/0x340 [ 373.728951][T16603] path_openat+0x2e08/0x3860 [ 373.734077][T16603] do_file_open+0x23e/0x4a0 [ 373.739112][T16603] do_sys_openat2+0x113/0x200 [ 373.744418][T16603] __x64_sys_openat+0x138/0x170 [ 373.749886][T16603] do_syscall_64+0x14d/0xf80 [ 373.755092][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.761521][T16603] [ 373.761521][T16603] -> #3 (set->srcu){.+.+}-{0:0}: [ 373.768747][T16603] __synchronize_srcu+0xca/0x300 [ 373.774235][T16603] elevator_switch+0x1e8/0x7a0 [ 373.779702][T16603] elevator_change+0x2cc/0x450 [ 373.784995][T16603] elevator_set_default+0x36c/0x430 [ 373.790724][T16603] blk_register_queue+0x366/0x430 [ 373.796364][T16603] __add_disk+0x677/0xd50 [ 373.801312][T16603] add_disk_fwnode+0xfb/0x480 [ 373.806612][T16603] nbd_dev_add+0x72c/0xb50 [ 373.811734][T16603] nbd_init+0x168/0x1f0 [ 373.816418][T16603] do_one_initcall+0x250/0x8d0 [ 373.821730][T16603] do_initcall_level+0x104/0x190 [ 373.827299][T16603] do_initcalls+0x59/0xa0 [ 373.832199][T16603] kernel_init_freeable+0x2a6/0x3e0 [ 373.837936][T16603] kernel_init+0x1d/0x1d0 [ 373.842817][T16603] ret_from_fork+0x51e/0xb90 [ 373.848032][T16603] ret_from_fork_asm+0x1a/0x30 [ 373.853679][T16603] [ 373.853679][T16603] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 373.861547][T16603] __mutex_lock+0x19f/0x1300 [ 373.866777][T16603] elevator_change+0x1b3/0x450 [ 373.872085][T16603] elevator_set_none+0xb5/0x140 [ 373.877472][T16603] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 373.883947][T16603] nbd_start_device+0x17f/0xb10 [ 373.889333][T16603] nbd_genl_connect+0x165b/0x1cf0 [ 373.894890][T16603] genl_family_rcv_msg_doit+0x22a/0x330 [ 373.901001][T16603] genl_rcv_msg+0x61c/0x7a0 [ 373.906039][T16603] netlink_rcv_skb+0x232/0x4b0 [ 373.911334][T16603] genl_rcv+0x28/0x40 [ 373.915843][T16603] netlink_unicast+0x80f/0x9b0 [ 373.921133][T16603] netlink_sendmsg+0x813/0xb40 [ 373.926516][T16603] ____sys_sendmsg+0x972/0x9f0 [ 373.931898][T16603] ___sys_sendmsg+0x2a5/0x360 [ 373.937107][T16603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.942576][T16603] do_syscall_64+0x14d/0xf80 [ 373.947711][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.954131][T16603] [ 373.954131][T16603] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 373.962766][T16603] blk_alloc_queue+0x546/0x680 [ 373.968152][T16603] __blk_mq_alloc_disk+0x197/0x390 [ 373.973796][T16603] nbd_dev_add+0x499/0xb50 [ 373.978745][T16603] nbd_init+0x168/0x1f0 [ 373.983425][T16603] do_one_initcall+0x250/0x8d0 [ 373.988724][T16603] do_initcall_level+0x104/0x190 [ 373.994193][T16603] do_initcalls+0x59/0xa0 [ 373.999066][T16603] kernel_init_freeable+0x2a6/0x3e0 [ 374.004981][T16603] kernel_init+0x1d/0x1d0 [ 374.009843][T16603] ret_from_fork+0x51e/0xb90 [ 374.014978][T16603] ret_from_fork_asm+0x1a/0x30 [ 374.020376][T16603] [ 374.020376][T16603] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 374.027624][T16603] __lock_acquire+0x15a5/0x2cf0 [ 374.033023][T16603] lock_acquire+0xf0/0x2e0 [ 374.037982][T16603] fs_reclaim_acquire+0x71/0x100 [ 374.043454][T16603] __kmalloc_cache_noprof+0x40/0x660 [ 374.049287][T16603] tcp_fastopen_defer_connect+0x250/0x390 [ 374.055548][T16603] tcp_v4_connect+0x10ac/0x19b0 [ 374.060935][T16603] tcp_v6_connect+0xbbb/0x1b10 [ 374.066260][T16603] __inet_stream_connect+0x25a/0xdd0 [ 374.072079][T16603] inet_stream_connect+0x66/0xa0 [ 374.077544][T16603] __sys_connect+0x312/0x450 [ 374.082664][T16603] __x64_sys_connect+0x7a/0x90 [ 374.087959][T16603] do_syscall_64+0x14d/0xf80 [ 374.093083][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.099508][T16603] [ 374.099508][T16603] other info that might help us debug this: [ 374.099508][T16603] [ 374.109999][T16603] Chain exists of: [ 374.109999][T16603] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 374.109999][T16603] [ 374.122964][T16603] Possible unsafe locking scenario: [ 374.122964][T16603] [ 374.130426][T16603] CPU0 CPU1 [ 374.135797][T16603] ---- ---- [ 374.141178][T16603] lock(k-sk_lock-AF_INET6); [ 374.145883][T16603] lock(sk_lock-AF_INET6); [ 374.152951][T16603] lock(k-sk_lock-AF_INET6); [ 374.160160][T16603] lock(fs_reclaim); [ 374.164155][T16603] [ 374.164155][T16603] *** DEADLOCK *** [ 374.164155][T16603] [ 374.172314][T16603] 1 lock held by syz.1.2622/16603: [ 374.177435][T16603] #0: ffff888054d48fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 374.187556][T16603] [ 374.187556][T16603] stack backtrace: [ 374.193459][T16603] CPU: 0 UID: 0 PID: 16603 Comm: syz.1.2622 Not tainted syzkaller #0 PREEMPT(full) [ 374.193477][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 374.193487][T16603] Call Trace: [ 374.193496][T16603] [ 374.193503][T16603] dump_stack_lvl+0xe8/0x150 [ 374.193526][T16603] print_circular_bug+0x2e1/0x300 [ 374.193550][T16603] check_noncircular+0x12e/0x150 [ 374.193573][T16603] __lock_acquire+0x15a5/0x2cf0 [ 374.193595][T16603] ? __tcp_get_metrics+0x7ec/0x870 [ 374.193620][T16603] lock_acquire+0xf0/0x2e0 [ 374.193636][T16603] ? __kmalloc_cache_noprof+0x40/0x660 [ 374.193657][T16603] fs_reclaim_acquire+0x71/0x100 [ 374.193673][T16603] ? __kmalloc_cache_noprof+0x40/0x660 [ 374.193692][T16603] __kmalloc_cache_noprof+0x40/0x660 [ 374.193714][T16603] ? tcp_fastopen_defer_connect+0x250/0x390 [ 374.193739][T16603] tcp_fastopen_defer_connect+0x250/0x390 [ 374.193761][T16603] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 374.193784][T16603] ? sk_setup_caps+0x9ef/0xc40 [ 374.193804][T16603] ? sk_setup_caps+0x29/0xc40 [ 374.193823][T16603] tcp_v4_connect+0x10ac/0x19b0 [ 374.193850][T16603] ? __pfx_tcp_v4_connect+0x10/0x10 [ 374.193869][T16603] ? aa_label_sk_perm+0x52b/0x6e0 [ 374.193890][T16603] ? tcp_v6_connect+0x62d/0x1b10 [ 374.193910][T16603] tcp_v6_connect+0xbbb/0x1b10 [ 374.193927][T16603] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 374.193951][T16603] ? __pfx_tcp_v6_connect+0x10/0x10 [ 374.193972][T16603] __inet_stream_connect+0x25a/0xdd0 [ 374.193991][T16603] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.194007][T16603] ? __pfx___inet_stream_connect+0x10/0x10 [ 374.194024][T16603] ? inet_stream_connect+0x51/0xa0 [ 374.194041][T16603] ? __local_bh_enable_ip+0xd0/0x130 [ 374.194061][T16603] inet_stream_connect+0x66/0xa0 [ 374.194079][T16603] __sys_connect+0x312/0x450 [ 374.194097][T16603] ? __pfx___sys_connect+0x10/0x10 [ 374.194116][T16603] ? rcu_is_watching+0x15/0xb0 [ 374.194139][T16603] __x64_sys_connect+0x7a/0x90 [ 374.194156][T16603] do_syscall_64+0x14d/0xf80 [ 374.194174][T16603] ? trace_irq_disable+0x3b/0x150 [ 374.194187][T16603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.194202][T16603] ? clear_bhb_loop+0x40/0x90 [ 374.194218][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.194233][T16603] RIP: 0033:0x7f820819c819 [ 374.194248][T16603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.194261][T16603] RSP: 002b:00007f8209043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 374.194278][T16603] RAX: ffffffffffffffda RBX: 00007f8208415fa0 RCX: 00007f820819c819 [ 374.194289][T16603] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000006 [ 374.194298][T16603] RBP: 00007f8208232c91 R08: 0000000000000000 R09: 0000000000000000 [ 374.194308][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.194317][T16603] R13: 00007f8208416038 R14: 00007f8208415fa0 R15: 00007ffe8b9eb058 [ 374.194333][T16603] [ 374.566445][T16614] veth1_to_bridge: entered allmulticast mode [ 374.572793][T16614] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check.