last executing test programs: 2.914920284s ago: executing program 0 (id=2064): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x2000, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0xfffffffd, 0x80}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'veth1_vlan\x00', @remote}) socket$inet6(0xa, 0x3, 0x3a) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000020800454c004a0000000000119078000000000000000000004e2000360038fa56b097e29046d365ad46ee16387b1f5a69c32a6c969bbdc8512223aa15ca1b9b50eb1bb2000000000000000000"], 0x0) recvmmsg(r5, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/236, 0xec}], 0x2}, 0xfffffff8}], 0x1, 0x100, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r9, &(0x7f00000003c0)={0x2c, 0x0, r8, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000480)={{[0x1a5f, 0x101, 0x9, 0x6]}, 0x0, 0x2, 0x2, 0x0, &(0x7f00000004c0)=[{{@align=0x2, {0x0, 0x7, 0x2067, 0xfffffffffffffff2}}, 0x4, 0x0, '\x00'}, {{@align=0x1, {0x8, 0x6, 0x80000002, 0xfd3}}, 0x9, 0x0, '-{,\x00'}, {{@_ha_fsid={[0x0, 0xecf1]}, {0x7f, 0x6c9a, 0x3ff, 0x100000001}}, 0x2, 0x0, '/dev/net/tun\x00'}, {{@_ha_fsid={[0x5]}, {0x2, 0x1, 0x9, 0x401}}, 0x503f16c9, 0x0, 'syzkaller1\x00'}, {{@_ha_fsid={[0x7, 0x7ea]}, {0x8001, 0x7, 0x1}}, 0x7ff, 0x0, '\x00\x9ch\x94\xde\x02\xb6\xb2r\x82\x17\xb1\xb8'}, {{@align=0x90, {0x8, 0x3, 0x2, 0x2}}, 0x8, 0x0, '^%\x00'}, {{@align=0x6, {0xc95f, 0x8000, 0x401, 0x3}}, 0x7fff, 0x0, '\xf5'}, {{@_ha_fsid={[0x1e1]}, {0x22ac, 0x6, 0x6, 0x3ff}}, 0x1, 0x0, '\x00'}]}) 2.560132912s ago: executing program 1 (id=2068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x9, 0x2, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000480)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.31237267s ago: executing program 1 (id=2073): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xa) sendmsg$rds(r0, &(0x7f0000003280)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/83, 0x53}, {&(0x7f0000001bc0)}], 0x4, &(0x7f0000003140)=[@rdma_dest={0x18, 0x114, 0x2, {0x1, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x100}, {&(0x7f0000001c40)=""/223, 0xdf}, &(0x7f0000003000)=[{&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/109, 0x6d}, {&(0x7f0000002dc0)=""/70, 0x46}, {&(0x7f0000002e40)=""/143, 0x8f}, {&(0x7f0000002f00)=""/254, 0xfe}], 0x5, 0x74, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x6}, &(0x7f0000003080)=0x6, 0xfffffffffffffffd, 0x5, 0x2, 0x7, 0x7, 0x27, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0xffffffff}, &(0x7f00000030c0)=0x9, &(0x7f0000003100)=0x1, 0xb3, 0x4, 0x8, 0x1a06c000000, 0x41, 0x5}}], 0x110}, 0x80000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)={@fallback, 0xffffffffffffffff, 0x34, 0x20}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0xfa947000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000008000000d4014100200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 2.297079542s ago: executing program 2 (id=2074): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000006c0)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000d40)={0x2000}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r10 = accept(r0, &(0x7f00000004c0), &(0x7f0000000540)=0x80) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000580)=r1, 0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240011001800010000000000fedbdf251d01060008000900e29af181fd8469f9335d0ccd4bac3872535277aac7b5bbb4f4fbc897313462333132a5c46ced5362f438ee022027a609bb9fd0e9191cf335e922395f58069438fdc14fdb050654", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000005000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000050000000000000000000000000000000000000000000000000078bfdc4cdc81d45d82b0606c0b7d55edf2e4ade7bf71a211c37af5c4ec5aca82295ab8701a252f5f5bce0fd88d9d502a25de1edd67e7f9031101d4e90c05297d6c3fcee9f96af15e7449d8c04604741f21e62a39cf823ad37fe3d03f59bfbb793b19ef4cc20636486d13081d8119c3b332cdbeb75b56965a565159af4331160d4a142f69839701a8906b9c139b1118df1ecad1dfd654ad35f04531d383"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r13, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r15, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r15, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r14, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @private=0xa010102}, 0x250, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0xe, 0x61ad}) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r16, 0x0, 0x1, 0x0, 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r14) 2.266120272s ago: executing program 3 (id=2075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x38, r2, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x0, 0x2, 0x4, 0x6, 0x401, 0x9]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x0, @local}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013", @ANYRES32=r6], 0xc8}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a) 1.994411809s ago: executing program 3 (id=2077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth0_to_hsr\x00', @local}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x1, @multicast2=0xe0000001}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d08000000f5c405c0ff3eaf643001000000000000008263d71e03000000000000006df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f868bf9dedd199199fb0291b61c733b7d6a7b043013f8eba4ee08eb785264d1770fc39693a50b4feb28c9b542d94346888bcc8e45a12295c42e4011a59c4d3837f7b90c3ce93fe5f4ef64", 0xe1}, {&(0x7f00000015c0), 0xe100}, {&(0x7f0000001a40)="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", 0x220}, {&(0x7f00000016c0)="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", 0x1d1}, {&(0x7f0000000240)="7b2f715d821cac40000000009c2165993364", 0x12}], 0x5, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x9d, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @broadcast]}]}}}], 0x48}, 0x0) socket(0x8, 0x800, 0x5d48) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth0_to_hsr\x00', @local}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x1, @multicast2=0xe0000001}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d08000000f5c405c0ff3eaf643001000000000000008263d71e03000000000000006df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f868bf9dedd199199fb0291b61c733b7d6a7b043013f8eba4ee08eb785264d1770fc39693a50b4feb28c9b542d94346888bcc8e45a12295c42e4011a59c4d3837f7b90c3ce93fe5f4ef64", 0xe1}, {&(0x7f00000015c0), 0xe100}, {&(0x7f0000001a40)="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", 0x220}, {&(0x7f00000016c0)="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", 0x1d1}, {&(0x7f0000000240)="7b2f715d821cac40000000009c2165993364", 0x12}], 0x5, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x9d, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @broadcast]}]}}}], 0x48}, 0x0) (async) socket(0x8, 0x800, 0x5d48) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) (async) shutdown(r3, 0x1) (async) 1.898120816s ago: executing program 2 (id=2078): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x27, r3}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r5}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf250100000008000300070000000500050000000100000056c22136acc60b86f55425c694ea2246dc"], 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, r8, 0x5, 0x0, @val=@iter={0x0}}, 0x20) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r11, 0x0, 0x0}, 0x10) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000340)={0x0, 0x0, 0xf1, 0x3, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r14, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r13, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$netlink(0x10, 0x3, 0x0) 1.857873653s ago: executing program 1 (id=2079): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xdc, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x17c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xc2, 0x8, "23001a331d429b4f9b0bc60b69818f41558366d7063185e1ad1d9e7b13075ff8179908e3ffd8d4c84c96bee66e445301f111de0ba402d038982a608ed0ad84a07f55fef66866dc3a8fa5c3b297f6f436851b40a471d82a4eea20af9dba98c915aaf9c3195b3d825da49a781059407b8f8381067f9c24e1f977dbc50a0e60614ab9305401285ead3cc72347b427585386bed37082740fdeca79a67f18abca7254fa451432e94b0479e1ca896bb9198d782cb31a598dd17b5786385a7222ad"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x8c, 0x8, "58d0586bfba4d3e2440558e0dfd8d55427cc3004e6060ecad8cd712803b2444ddd86661bf686ceade65ab4ab281bef31df4ff50747fb4f386763d8a14067485740f3701cc99e66f87e76deb4ee9e3867d8daa51373ad8deee8fa20902b4c72dd0a491b474331b23b8dddaa2dc19e0c787430bbd36db1d979e5bfae90cde517d0f6fe18537a49b26e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x102, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x32c}, 0x1, 0x0, 0x0, 0x4010}, 0x4020080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) sendmsg$netlink(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000000)={0x10, 0x21}, 0x10}, {&(0x7f0000000080)={0x1c, 0x3a, 0x1, 0x70bd29, 0x25dfdbfd, "", [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x4}]}, 0x1c}], 0x2}, 0x0) 1.800486306s ago: executing program 4 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c00990003000000040000000800270001000000080022010c010000080026006c090000050019010500000008009f000600000004006c00"], 0x54}, 0x1, 0x0, 0x0, 0xd4}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000300)="2c0e4e", 0x3}], 0x1, 0x8040000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x299}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000001000000000000d100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000046cb95a850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="0008cd1bcbd33b63000001000cc14c60de575237ba616e"], 0x3c}}, 0x8000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000300)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, 0x5, 0x7ff00000) 1.799715396s ago: executing program 0 (id=2081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="7a37794b6967f564b226f6324de8", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000}, [@jmp={0x5, 0x1, 0x0, 0x7, 0x6, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x11, 0xa, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.604022536s ago: executing program 0 (id=2082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000001030007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd5, &(0x7f0000000340)=""/213, 0x41100}, 0x94) 1.530672903s ago: executing program 3 (id=2083): mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x41424344, @ANYRES64=r0, @ANYBLOB="a002000090780000fe12f989bc53ad1fb08803057af5d82d982d0800"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="61105c000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) 1.405499883s ago: executing program 4 (id=2084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000003d000e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0xffffffffffffffff, 0x707a, 0x8000}, @multicast1, @broadcast, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x9804) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f80)={'ip6_vti0\x00', &(0x7f0000000f00)={'syztnl1\x00', 0x0, 0x2f, 0xce, 0x0, 0x0, 0x7b, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x0, 0x6f4e, 0x3ff}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'macvlan0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006140)=@newtfilter={0x50, 0x2c, 0xd27, 0x1060bd2d, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x6, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0xf772}}}]}]}]}}]}, 0x50}}, 0x1d56ce4333ce878e) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f0000002240)=ANY=[@ANYBLOB='H\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="2802028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ffff000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009109000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040000001000ff07000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESHEX=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100010008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYBLOB="10f6a10ec0d6077eec317addbc9a09946df42611c3f8bdc6c88f8f846f774ddf866db8c600cf411d58392f0c4d779bb26b1862415e13a960d8512346aa5789951737cfe9", @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400faffffff08000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="ffff0100", @ANYRES32=0x0, @ANYBLOB="280102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="86c10100", @ANYRES32=r9, @ANYBLOB="e80102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB], 0x848}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r15, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a30000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800e000100696d6d6564696174650000000c000280080001400000000d08000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r17 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r17, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080001"], 0x24}}, 0x0) (async) bind$vsock_stream(r16, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 1.404487099s ago: executing program 2 (id=2085): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x8}, {0xfff1, 0xffff}, {0x6, 0xfff3}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x9, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006002e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000040)=0x11, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r9, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x400000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1b, 0x0, 0x4000}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="0101000000000022000927000000000000318eb47442325b17f20d010ab9cb1900000000000000"], 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.388418106s ago: executing program 0 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fc", 0xc3}], 0x1}, 0x4040004) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)={0x88, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x4}, {0x4}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 1.370241625s ago: executing program 3 (id=2087): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010104}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}]}, 0x4008810) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r3, 0x0, 0x0, 0x40, 0xfffffffffffffffe, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'ip6tnl0\x00', @random="0100"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000080)=0x101) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) sendto$packet(r2, &(0x7f0000000380)="995db72560b80530e3b0197a5cea8ac7732d701c283ce5e1986749392a4a2a487991829bac427525bd1dd130088e1e92ea04e344e9052c1f60da3b5254b72e5b3ff024a681b946b44c78e593d64f441bcdd11571dc742f112d3d961d680cca6f4d5abca4a574967fca65c099cec7845c416ba5578cb1106a097f96ed19a4120fb7c916fc0f132efed488cd1e684b718db106ea9d2741d46c48aacc4940ad164baee91fedd4e712fbb61d75bc5765f6a80139c3ae74956fbc40a4416666", 0xbd, 0x400d5, &(0x7f0000000500)={0x11, 0xf8, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x5a, 0x0, 0x0, 0x1f00c00e}, 0x200400c0) 1.172243043s ago: executing program 0 (id=2088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="5c00000012006bab9e3de3d8096c1dffff137e0300000000000000b68675f8001d000a006b849ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf93670300000000000000080003000601000008000300110000005c", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000808) openat$cgroup_ro(r1, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x75324cc7ada9, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) 1.169503414s ago: executing program 4 (id=2089): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcac48dc4}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.031372586s ago: executing program 4 (id=2090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x4, 0x5, 0x80, 0x0, 0xf, 0xe, 0x0, 0x6, 0x0, 0x3, 0x2, 0x2, 0x10, 0x1}, 0xe) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) listen(0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/26, 0x1a, 0x10160, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000001c0)={'pimreg1\x00', 0x9}) 861.880744ms ago: executing program 2 (id=2091): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff050) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000540)="60000000100010000100000000000000000001000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700000c5b34c5df71604cf6dd3e0185eb03e70000000000000000000000b6d68c648a178d6adf050131db3d28982d167b3f51be111880e4e975c685010f6cef51cedacd2af9172c452f28bb4202537bc6543542203453d34a8732549730db2f09f410350f4f00f3a868d3e15f69f033bb495ced420e8ebb97973a9bb5ee14a4deaf9993ce66eeb60284caaa06e94bd81d8d9698c39d98f7eb878473132b27e8351e4ab910445bc5aa40e3a0ab8a44d9b428be92ad060000000000000043798b2d26fa0bc965d6a1292e89483cb73cc833efb32fc3b883046921e095e2307dfb8d3f2c4158c6f9215263f6989be6fa4659a78fe9c7dec9bfbc44d93b86352a119c072fdc", 0x146) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) unshare(0x20000400) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010000800000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x6c}}, 0x10) 762.502598ms ago: executing program 0 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800b2e6c692288ce0947a8fd9408400001e00e2", @ANYRES32=0x0, @ANYBLOB="000000000000040008000a00", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockname$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000200)=0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x7, &(0x7f0000001ac0)=""/74, 0x4a}, 0xffff}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/230, 0xe6}], 0x1, &(0x7f0000001d00)=""/136, 0x88}, 0xc}, {{&(0x7f0000001dc0)=@nfc_llcp, 0x80, &(0x7f0000003280)=[{&(0x7f0000001e40)=""/2, 0x2}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/195, 0xc3}, {&(0x7f0000002f80)=""/215, 0xd7}, {&(0x7f0000003080)=""/163, 0xa3}, {&(0x7f0000003140)=""/64, 0x40}, {&(0x7f0000003180)=""/229, 0xe5}], 0x7, &(0x7f0000003300)=""/63, 0x3f}, 0x8}, {{&(0x7f0000003340)=@hci, 0x80, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/87, 0x57}, {&(0x7f0000003440)=""/156, 0x9c}], 0x2, &(0x7f0000003540)=""/8, 0x8}, 0x3}, {{&(0x7f0000003580)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003600)=""/97, 0x61}, {&(0x7f0000003680)=""/48, 0x30}, {&(0x7f00000036c0)=""/134, 0x86}, {&(0x7f0000003780)=""/25, 0x19}, {&(0x7f00000037c0)=""/70, 0x46}, {&(0x7f0000003840)=""/140, 0x8c}, {&(0x7f0000003900)=""/109, 0x6d}, {&(0x7f0000003980)=""/112, 0x70}, {&(0x7f0000003a00)=""/252, 0xfc}, {&(0x7f0000003b00)=""/240, 0xf0}], 0xa, &(0x7f0000003cc0)=""/193, 0xc1}, 0x600000}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003dc0)=""/245, 0xf5}, {&(0x7f0000003ec0)=""/153, 0x99}], 0x2, &(0x7f0000003fc0)=""/223, 0xdf}}, {{&(0x7f00000040c0)=@qipcrtr, 0x80, &(0x7f0000005280)=[{&(0x7f0000004140)=""/188, 0xbc}, {&(0x7f0000004200)=""/46, 0x2e}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x4, &(0x7f00000052c0)=""/79, 0x4f}, 0x7f}, {{&(0x7f0000005340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005500)=[{&(0x7f00000053c0)=""/27, 0x1b}, {&(0x7f0000005400)=""/228, 0xe4}], 0x2}, 0x8}], 0x8, 0x40000000, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000140)={r7, 0x80}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01003abd7000fedbdf2512000000060028000300000008000300", @ANYRES32=r13, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40d5}, 0x20040080) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000007c0)={{0xa, 0x4e22, 0x2, @loopback, 0x5}, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xde}, 0xffffffffffffffff, {[0x8, 0x7, 0x1000, 0x8000, 0x8, 0x1, 0x8, 0xa]}}, 0x5c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={r7, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000040)={r7, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 748.468951ms ago: executing program 1 (id=2093): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) 676.102486ms ago: executing program 4 (id=2094): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x1f, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) clock_gettime(0x3, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={r2, r3/1000+60000}, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fd8c00000000000002000000000000080000000000000000000000000000000044000500ac03319ed190d0141424000020000000000000000000000000003c000000000000000000000000000000000000000000000102000000040100000200"/186], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@newspdinfo={0x3c, 0x24, 0x200, 0x70bd2a, 0x25dfdbfb, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x101}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010102, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x100, 0x0, 0x0, 0xb7, 0xb, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) socket(0x10, 0x2, 0x0) recvmsg$kcm(r1, 0x0, 0x202) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) 536.019704ms ago: executing program 1 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x14680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000fc8c91b0000240000000030900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000814) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000240)=""/106, &(0x7f0000000380)=0x6a) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xca9aaa2127bffa8d}}, 0x4000002) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x27, 0x16, 0x0, &(0x7f0000000180)="ff7e17c49f526b2d6f78ac1ae8673ff9d548b5cefdaa", 0x0, 0x2000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000", @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) 471.85236ms ago: executing program 2 (id=2096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa1000000000f0007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd5, &(0x7f0000000340)=""/213, 0x41100}, 0x94) 377.479463ms ago: executing program 3 (id=2097): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) (async) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) (async) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) (async) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) (async) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) socket$netlink(0x10, 0x3, 0x12) (async) r10 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) (async) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xffffffffffffff1f) (async) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xffffffffffffff1f) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 260.040062ms ago: executing program 2 (id=2098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0xa, &(0x7f0000001680)=""/146, &(0x7f0000001740)=0x92) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000056c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000005700)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000018}, 0x80) write$tun(r1, &(0x7f00000016c0)={@val={0x11, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x4}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}}}}}}}, 0xfdef) 248.470067ms ago: executing program 4 (id=2099): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/166, 0xa6}, {&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001980)=""/4097, 0x1001}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/133, 0x85}], 0x8}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x22}, @local, 0x17, 0x7}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "52c159d9911e48b828107d197f81907e3395ca71d946f569c66bfdfbaf3959342adc39a00e4bebbc5c856e3ea08da53ba25efaad994bf7e80850c08b3179a4f3f2cfd98851400bfdcc590c5d080006c94582564852c8cf9a1571a652be32a1c9df8a2d33f0ec90f8f2596da2d5ec25f02ce7e5c4b9fd9edfa5c402cf3c1d514e5bcb5b1c0b2525927469b5bc54d7117ac4168f22d1ab9e59d30aa1d8b01fb31ce34a0bb7724c6aa5ff2f4927e20634236e6b0319"}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x6800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c00048028000180080001006f7366001c000280050002000200000008000340000000010800014000000015140000001100010000000000000000260100000a"], 0x80}, 0x1, 0x0, 0x0, 0x24000850}, 0x24044010) 199.568626ms ago: executing program 3 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xc6, 0x233, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, 0x10, 0x1, 0xe, 0x7}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r6, 0x213, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7486}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x48}}, 0x40) 0s ago: executing program 1 (id=2101): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x14, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4000000, 0x0, 0x5}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4000000, 0x0, 0x5}, 0x50) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="d947d95f4daf0609824ca895630638ada97d716935b7d582abc589e11c996ed43a605776f83c00a3b867a1b9bb0a4afd4baee19d6404b2ff3eabff12ab72f021d93b45e7bf8bcef3bbb4385914b5dc0d2e5c2710f814d2f7913a66f05518340e877694d13ab8f0166d02e1dd181e48e6d61135de071ef797d2edbfa2f2f02fad89924ffac107c59dc247e9e2a1dacb32678ac6a331ded38c32cb10b72ef2d86423ae7d76857f3f57c20ddd235b6be9fe7465", 0xb2}], 0x1, 0xf, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_DELOBJ={0x94, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x74, 0x8, "86b88dc4e62cdfd8e59ba895371937a69bbcc42ca89dc5e22bd2a8e0dbd36e364da7541077b0ad6840b03f6b86935a45444e221f971b7a0a0af35080e655ed58bf90e76a078c15a64c9ed5057ab9637ad7c068822588120822f9ba1f03c8c58f5a10992db4c051ffd4e9dcd3827b951d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb5, 0x6, "19f8cee24ce1d145bbc681d2f4f3a8d24450aaf37c357c696ba1dd868b67f2d8bf87cbd060b31dc911990e617815f82c2c59043022f946dc5067e8529dc3e6709945a54945c2a0261bb0fc912c67895b74463646df54dc7488a7809147bea0ff7c9121900e0a28dabbb408acde3b775b91cdd2018cc941afc6bf53e48faf7b75d6437fca0e50e676d7f54a32b0e10a99d7c1c9553c1cafcfeb7e9bdebf9c28813ddaeb5a3fe88acdbf4401206133649470"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47018980}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x565446a0}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b3c925d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19ec4421}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_DELOBJ={0x94, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x74, 0x8, "86b88dc4e62cdfd8e59ba895371937a69bbcc42ca89dc5e22bd2a8e0dbd36e364da7541077b0ad6840b03f6b86935a45444e221f971b7a0a0af35080e655ed58bf90e76a078c15a64c9ed5057ab9637ad7c068822588120822f9ba1f03c8c58f5a10992db4c051ffd4e9dcd3827b951d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb5, 0x6, "19f8cee24ce1d145bbc681d2f4f3a8d24450aaf37c357c696ba1dd868b67f2d8bf87cbd060b31dc911990e617815f82c2c59043022f946dc5067e8529dc3e6709945a54945c2a0261bb0fc912c67895b74463646df54dc7488a7809147bea0ff7c9121900e0a28dabbb408acde3b775b91cdd2018cc941afc6bf53e48faf7b75d6437fca0e50e676d7f54a32b0e10a99d7c1c9553c1cafcfeb7e9bdebf9c28813ddaeb5a3fe88acdbf4401206133649470"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47018980}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x565446a0}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b3c925d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19ec4421}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) kernel console output (not intermixed with test programs): sync page read [ 138.455745][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 138.464310][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 138.473106][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.483126][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.494095][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 138.502859][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.513022][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.523375][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.533740][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.544649][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.554834][ T5621] ldm_validate_partition_table(): Disk read failed. [ 138.562046][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.572091][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.583197][ T5621] Dev nbd2: unable to read RDB block 0 [ 138.593687][ T5621] nbd2: unable to read partition table [ 138.677312][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.685053][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.737222][ T5621] ldm_validate_partition_table(): Disk read failed. [ 138.776014][ T5621] Dev nbd2: unable to read RDB block 0 [ 138.799386][ T5621] nbd2: unable to read partition table [ 138.856265][ T7588] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 138.869453][ T7602] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.901311][ T6306] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.818018][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.840576][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.944848][ T7315] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.960161][ T7315] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.971428][ T7315] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.980552][ T7315] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.192565][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 141.204829][ T7615] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 141.223776][ T7615] batman_adv: batadv0: Adding interface: gretap1 [ 141.234180][ T7615] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.270847][ T7615] batman_adv: batadv0: Interface activated: gretap1 [ 141.861235][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.274829][ T7664] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.438'. [ 142.331198][ T7664] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.438'. [ 142.402343][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 142.406666][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 142.474101][ T7670] bond0: Unable to set up delay as MII monitoring is disabled [ 142.654369][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 142.684452][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.711463][ T7679] bridge0: entered allmulticast mode [ 142.826654][ T7688] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 142.980687][ T7688] bond1: entered promiscuous mode [ 143.003706][ T7688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.115226][ T7691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.156428][ T7691] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 143.183857][ T7691] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 143.197722][ T7691] bond1: (slave gre1): making interface the new active one [ 143.205816][ T7691] gre1: entered promiscuous mode [ 143.226966][ T7691] bond1: (slave gre1): Enslaving as an active interface with an up link [ 143.825673][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.451'. [ 144.238104][ T7745] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 144.257064][ T7745] netlink: 224 bytes leftover after parsing attributes in process `syz.3.454'. [ 144.703263][ T7761] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 144.753429][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 144.808256][ T7774] netlink: 56 bytes leftover after parsing attributes in process `syz.2.461'. [ 144.880461][ T7761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.001019][ T7776] bond2: (slave gretap1): making interface the new active one [ 145.016230][ T7776] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 145.125378][ T7779] tipc: Enabled bearer , priority 0 [ 145.163124][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 145.250375][ T7787] syzkaller0: entered promiscuous mode [ 145.258493][ T7787] syzkaller0: entered allmulticast mode [ 145.279671][ T7778] tipc: Resetting bearer [ 145.287143][ T7793] netlink: 'syz.2.464': attribute type 3 has an invalid length. [ 145.332631][ T7778] tipc: Disabling bearer [ 145.503000][ T7793] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.699500][ T7821] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 145.879324][ T7821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.149553][ T7823] bond3: (slave gretap2): making interface the new active one [ 146.220581][ T7823] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 146.332489][ T7850] netlink: 'syz.1.480': attribute type 3 has an invalid length. [ 146.589550][ T7856] syzkaller1: entered promiscuous mode [ 146.602867][ T7856] syzkaller1: entered allmulticast mode [ 146.624849][ T7856] syzkaller1: left promiscuous mode [ 146.630431][ T7856] syzkaller1: left allmulticast mode [ 146.958718][ T7871] netlink: 'syz.2.485': attribute type 11 has an invalid length. [ 146.986199][ T7869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.176850][ T7887] tipc: Started in network mode [ 147.185615][ T7887] tipc: Node identity ac141441, cluster identity 4711 [ 147.203790][ T7887] tipc: Enabled bearer , priority 10 [ 147.287962][ T7890] nbd1: detected capacity change from 0 to 63 [ 147.297163][ T7893] ip6gretap0: entered promiscuous mode [ 147.325625][ T7892] block nbd1: NBD_DISCONNECT [ 147.340607][ T7892] block nbd1: Disconnected due to user request. [ 147.366589][ T7892] block nbd1: shutting down sockets [ 147.379410][ T7896] x_tables: duplicate underflow at hook 3 [ 147.396636][ C0] blk_print_req_error: 114 callbacks suppressed [ 147.396655][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.412564][ C0] buffer_io_error: 138 callbacks suppressed [ 147.412582][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.426450][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.436580][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.444755][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.454416][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 147.462358][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.472633][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 147.487474][ T7896] __nla_validate_parse: 6 callbacks suppressed [ 147.487491][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 147.511166][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 147.520770][ T1598] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.529482][ T1598] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.537614][ T1598] Buffer I/O error on dev nbd1, logical block 2, async page read [ 147.546715][ T1598] Buffer I/O error on dev nbd1, logical block 3, async page read [ 147.558154][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 147.568039][ T1598] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.576132][ T1598] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.584751][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 147.598992][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 147.613162][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 147.627062][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 147.637015][ T5621] ldm_validate_partition_table(): Disk read failed. [ 147.644661][ T5621] Dev nbd1: unable to read RDB block 0 [ 147.651010][ T5621] nbd1: unable to read partition table [ 147.672904][ T5621] ldm_validate_partition_table(): Disk read failed. [ 147.681416][ T5621] Dev nbd1: unable to read RDB block 0 [ 147.688344][ T5621] nbd1: unable to read partition table [ 148.002519][ T7915] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 148.026617][ T5624] block nbd0: Receive control failed (result -32) [ 148.026649][ T5611] block nbd0: Receive control failed (result -32) [ 148.272921][ T7935] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 148.322390][ T5731] tipc: Node number set to 2886997057 [ 148.413115][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'. [ 148.700258][ T7951] bond1: option ad_select: invalid value (34) [ 148.768492][ T7951] bond1 (unregistering): Released all slaves [ 149.007929][ T7951] netlink: 208 bytes leftover after parsing attributes in process `syz.4.507'. [ 149.518640][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 149.621275][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.684428][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 149.822960][ T7991] bond2: entered allmulticast mode [ 150.035052][ T8013] tipc: Cannot configure node identity twice [ 150.405107][ T8035] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 150.432115][ T8035] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.527'. [ 150.459980][ T8035] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 150.487780][ T8035] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.527'. [ 150.747913][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 150.872643][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 150.916080][ T8060] nbd: nbd0 already in use [ 150.930668][ T8059] tipc: Enabling of bearer rejected, failed to enable media [ 150.951558][ T8060] block nbd0: NBD_DISCONNECT [ 150.959143][ T8060] block nbd0: Send disconnect failed -32 [ 150.983030][ T8060] block nbd0: Send disconnect failed -32 [ 150.999702][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 151.003752][ T8060] block nbd0: shutting down sockets [ 151.059792][ T8069] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 151.094110][ T8069] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 151.345414][ T8089] tipc: Enabling of bearer rejected, failed to enable media [ 151.553350][ T8095] syzkaller0: entered promiscuous mode [ 151.563404][ T8095] syzkaller0: entered allmulticast mode [ 151.603752][ T8097] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 151.611582][ T8097] syzkaller1: Linktype set failed because interface is up [ 151.671445][ T5731] syzkaller1: tun_net_xmit 90 [ 152.514029][ T8126] xt_policy: neither incoming nor outgoing policy selected [ 152.579965][ T8132] __nla_validate_parse: 2 callbacks suppressed [ 152.579984][ T8132] netlink: 4108 bytes leftover after parsing attributes in process `syz.3.555'. [ 152.710678][ T8128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.747599][ T8128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.773724][ T8128] bond0 (unregistering): Released all slaves [ 153.027555][ T8154] Bluetooth: MGMT ver 1.23 [ 153.335071][ T8170] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 153.794676][ T8194] tipc: Enabled bearer , priority 0 [ 153.839677][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 153.842122][ T8192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.855711][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 153.914880][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 153.923038][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 153.931583][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 153.940042][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 153.971795][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 153.992287][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 154.004453][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 154.015874][ T8196] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 154.353890][ T8210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.840566][ T8230] sctp: [Deprecated]: syz.1.588 (pid 8230) Use of int in max_burst socket option. [ 154.840566][ T8230] Use struct sctp_assoc_value instead [ 154.916303][ T8233] netlink: 76 bytes leftover after parsing attributes in process `syz.3.589'. [ 155.257857][ T8253] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 155.803216][ T8290] sctp: [Deprecated]: syz.3.601 (pid 8290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.803216][ T8290] Use struct sctp_sack_info instead [ 155.849219][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 155.912867][ T8276] nbd0: detected capacity change from 0 to 63 [ 155.919757][ T8283] block nbd0: NBD_DISCONNECT [ 155.926395][ T8283] block nbd0: Disconnected due to user request. [ 155.932949][ T8283] block nbd0: shutting down sockets [ 155.938570][ C1] blk_print_req_error: 67 callbacks suppressed [ 155.938582][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 155.954421][ C1] buffer_io_error: 138 callbacks suppressed [ 155.954433][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 155.968174][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 155.976019][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 155.983952][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 155.992193][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.003461][ T1598] Buffer I/O error on dev nbd0, logical block 0, async page read [ 156.056881][ T1598] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 156.068083][ T1598] Buffer I/O error on dev nbd0, logical block 1, async page read [ 156.076478][ T1598] Buffer I/O error on dev nbd0, logical block 2, async page read [ 156.089679][ T1598] Buffer I/O error on dev nbd0, logical block 3, async page read [ 156.102273][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 156.112075][ T1598] Buffer I/O error on dev nbd0, logical block 0, async page read [ 156.120003][ T1598] Buffer I/O error on dev nbd0, logical block 1, async page read [ 156.129749][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 156.141448][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 156.153214][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 156.162267][ T8295] Cannot find del_set index 17 as target [ 156.164367][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 156.179710][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 156.189557][ T5621] ldm_validate_partition_table(): Disk read failed. [ 156.207314][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 156.218265][ T5621] Dev nbd0: unable to read RDB block 0 [ 156.225428][ T5621] nbd0: unable to read partition table [ 156.236096][ T5621] ldm_validate_partition_table(): Disk read failed. [ 156.244944][ T5621] Dev nbd0: unable to read RDB block 0 [ 156.258812][ T5621] nbd0: unable to read partition table [ 156.535437][ T8312] syzkaller1: entered promiscuous mode [ 156.552849][ T8312] syzkaller1: entered allmulticast mode [ 156.684623][ T8320] nbd0: detected capacity change from 0 to 63 [ 156.724755][ T8327] block nbd0: NBD_DISCONNECT [ 156.760459][ T8327] block nbd0: Disconnected due to user request. [ 156.813537][ T8327] block nbd0: shutting down sockets [ 156.827850][ T8338] netlink: 44 bytes leftover after parsing attributes in process `syz.1.614'. [ 156.837465][ T5621] ldm_validate_partition_table(): Disk read failed. [ 156.838335][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 156.879396][ T5621] Dev nbd0: unable to read RDB block 0 [ 156.911811][ T5621] nbd0: unable to read partition table [ 156.954253][ T5621] ldm_validate_partition_table(): Disk read failed. [ 156.986002][ T5621] Dev nbd0: unable to read RDB block 0 [ 157.016394][ T5621] nbd0: unable to read partition table [ 157.134289][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 157.335318][ T8348] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 157.388101][ T8348] bond2 (unregistering): Released all slaves [ 157.391688][ T8361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.617'. [ 157.420026][ T8363] validate_nla: 41 callbacks suppressed [ 157.420044][ T8363] netlink: 'syz.0.619': attribute type 16 has an invalid length. [ 157.558651][ T8361] ip6tnl1: entered allmulticast mode [ 157.722312][ T8381] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.754785][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 157.778836][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 157.815575][ T8389] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 157.817385][ T8385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.624'. [ 157.856445][ T8384] netlink: 96 bytes leftover after parsing attributes in process `syz.3.624'. [ 157.884047][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 158.044783][ T8395] tipc: Invalid UDP bearer configuration [ 158.044835][ T8395] tipc: Enabling of bearer rejected, failed to enable media [ 158.235407][ T8400] bond3: Removing last arp target with arp_interval on [ 158.293332][ T8394] bridge0: entered promiscuous mode [ 158.336337][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.630'. [ 158.346574][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.630'. [ 158.356040][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.630'. [ 158.384610][ T8394] bond1: (slave bridge0): making interface the new active one [ 158.411512][ T30] audit: type=1804 audit(1787296468.601:2): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.630" name="/newroot/122/cgroup.controllers" dev="tmpfs" ino=647 res=1 errno=0 [ 158.434055][ T8394] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 158.462182][ T8417] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 158.470405][ T30] audit: type=1800 audit(1787296468.651:3): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.630" name="cgroup.controllers" dev="tmpfs" ino=647 res=0 errno=0 [ 158.546075][ T8420] netlink: 71 bytes leftover after parsing attributes in process `syz.2.633'. [ 158.550236][ T8396] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 158.591813][ T8420] netlink: 108 bytes leftover after parsing attributes in process `syz.2.633'. [ 159.025394][ T8431] bridge1: entered promiscuous mode [ 159.041093][ T8431] bridge1: entered allmulticast mode [ 159.179366][ T8447] x_tables: duplicate underflow at hook 1 [ 159.685130][ T8461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.886768][ T8467] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 160.167760][ T8486] Bluetooth: MGMT ver 1.23 [ 160.269641][ T5731] bridge0: entered promiscuous mode [ 160.639276][ T8504] bond2 (unregistering): Released all slaves [ 161.616322][ T8537] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 161.761957][ T8549] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 162.477988][ T8585] sit1: entered promiscuous mode [ 162.683890][ T8602] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 162.701863][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 163.167116][ T8623] ipvlan2: entered promiscuous mode [ 163.199480][ T8623] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.280295][ T8623] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 163.283064][ T8630] netlink: 'syz.3.683': attribute type 7 has an invalid length. [ 163.300232][ T8623] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 163.358335][ T8630] netlink: 'syz.3.683': attribute type 21 has an invalid length. [ 163.372114][ T8630] __nla_validate_parse: 16 callbacks suppressed [ 163.372132][ T8630] netlink: 128 bytes leftover after parsing attributes in process `syz.3.683'. [ 163.400319][ T8630] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 163.409328][ T8630] netlink: 3 bytes leftover after parsing attributes in process `syz.3.683'. [ 163.658626][ T8640] netlink: 120 bytes leftover after parsing attributes in process `syz.4.687'. [ 163.933033][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 163.947866][ T7342] IPVS: starting estimator thread 0... [ 163.964744][ T8648] netlink: 'syz.4.689': attribute type 3 has an invalid length. [ 164.061269][ T8650] IPVS: using max 35 ests per chain, 84000 per kthread [ 165.621282][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.253814][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 166.270306][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 166.287897][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.697'. [ 166.329621][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.697'. [ 166.381996][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 166.398025][ T7338] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.429084][ T7338] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.470189][ T8684] netlink: 'syz.4.698': attribute type 13 has an invalid length. [ 166.479521][ T7340] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.518852][ T7340] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.836220][ T8716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.850070][ T8695] erspan0: entered promiscuous mode [ 166.879103][ T8695] vlan2: entered promiscuous mode [ 166.892883][ T8718] ip_tables: iptables: counters copy to user failed while replacing table [ 166.979231][ T8719] openvswitch: netlink: Unknown key attributes 1 [ 167.549530][ T8741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.716'. [ 167.629992][ T8741] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.704177][ T8757] ipip0: entered promiscuous mode [ 167.729657][ T8757] ipip0: entered allmulticast mode [ 167.862411][ T8765] netlink: 'syz.3.720': attribute type 3 has an invalid length. [ 168.431425][ T8795] syzkaller0: entered promiscuous mode [ 168.449813][ T8795] syzkaller0: entered allmulticast mode [ 168.893870][ T8819] netlink: 'syz.1.732': attribute type 10 has an invalid length. [ 168.903495][ T8819] netlink: 2 bytes leftover after parsing attributes in process `syz.1.732'. [ 168.924995][ T8819] team0: Device wg2 is of different type [ 169.275042][ T8831] netlink: 4412 bytes leftover after parsing attributes in process `syz.1.735'. [ 169.308490][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.735'. [ 169.677269][ T8863] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 169.836696][ T8865] netlink: 'syz.0.741': attribute type 4 has an invalid length. [ 169.853373][ T8865] netlink: 17 bytes leftover after parsing attributes in process `syz.0.741'. [ 170.052051][ T8868] xt_CT: No such helper "snmp_trap" [ 170.590612][ T8896] tc_dump_action: action bad kind [ 170.612055][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 170.628062][ T8891] xt_CT: No such helper "syz1" [ 170.736814][ T8901] netlink: 'syz.3.747': attribute type 12 has an invalid length. [ 170.776235][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.747'. [ 170.968335][ T8910] netlink: 54 bytes leftover after parsing attributes in process `syz.4.749'. [ 171.009281][ T8912] netlink: 116 bytes leftover after parsing attributes in process `syz.2.750'. [ 171.174726][ T8917] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 171.337119][ T8919] ip6t_srh: unknown srh invflags BA61 [ 171.659876][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.757'. [ 171.674714][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 171.710910][ T8943] sctp: [Deprecated]: syz.2.759 (pid 8943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.710910][ T8943] Use struct sctp_sack_info instead [ 172.067219][ T8966] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 172.403259][ T8975] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 172.440753][ T8980] netlink: 'syz.0.767': attribute type 4 has an invalid length. [ 172.509878][ T8980] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.685868][ T8989] netlink: 'syz.0.771': attribute type 40 has an invalid length. [ 173.033245][ T9009] gretap0: entered promiscuous mode [ 173.263768][ T9021] syzkaller0: entered promiscuous mode [ 173.270193][ T9021] syzkaller0: entered allmulticast mode [ 173.276829][ T9024] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 173.331729][ T9024] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 173.355496][ T9024] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 173.374291][ T9024] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 173.397313][ T9024] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 173.414617][ T9031] tipc: Enabled bearer , priority 0 [ 173.756522][ T9039] tipc: Resetting bearer [ 173.908750][ T9022] tipc: Disabling bearer [ 174.217267][ T9065] __nla_validate_parse: 28 callbacks suppressed [ 174.217287][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 174.312488][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 174.467407][ T9069] validate_nla: 17 callbacks suppressed [ 174.467427][ T9069] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 174.801946][ T9085] block nbd0: not configured, cannot reconfigure [ 175.318805][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 175.352750][ T9104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 175.560291][ T9109] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 177.190449][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.796'. [ 177.205101][ T9106] netlink: 64 bytes leftover after parsing attributes in process `syz.2.796'. [ 177.231674][ T9106] tipc: Invalid UDP bearer configuration [ 177.231730][ T9106] tipc: Enabling of bearer rejected, failed to enable media [ 177.293202][ T9113] ±ÿ: renamed from lo (while UP) [ 178.322620][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 178.386029][ T9179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.815'. [ 178.409165][ T9175] netlink: 'syz.3.813': attribute type 4 has an invalid length. [ 178.458909][ T9179] tipc: Started in network mode [ 178.476941][ T9179] tipc: Node identity b2fa442a3e65, cluster identity 4711 [ 178.489839][ T9179] tipc: Enabled bearer , priority 0 [ 178.499729][ T9179] syzkaller0: entered promiscuous mode [ 178.506264][ T9179] syzkaller0: entered allmulticast mode [ 178.540579][ T9179] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 178.622606][ T9178] tipc: Resetting bearer [ 178.715600][ T9178] tipc: Disabling bearer [ 178.835480][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 178.896851][ T9209] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 178.943796][ T9210] bridge4: port 1(veth7) entered blocking state [ 178.959747][ T9210] bridge4: port 1(veth7) entered disabled state [ 178.967662][ T9210] veth7: entered allmulticast mode [ 178.974790][ T9210] veth7: entered promiscuous mode [ 179.030938][ T9209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.056518][ T9213] macvlan2: entered promiscuous mode [ 179.065168][ T9213] macvlan2: entered allmulticast mode [ 179.070913][ T9213] bond4: entered allmulticast mode [ 179.076790][ T9213] bond4: entered promiscuous mode [ 179.083758][ T9213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.094479][ T9213] team0: Port device macvlan2 added [ 179.119514][ T9201] bridge4: port 2(veth9) entered blocking state [ 179.126040][ T9201] bridge4: port 2(veth9) entered disabled state [ 179.133422][ T9201] veth9: entered allmulticast mode [ 179.140457][ T9201] veth9: entered promiscuous mode [ 179.558410][ T9242] macsec1: entered allmulticast mode [ 179.564308][ T9242] gretap0: entered allmulticast mode [ 179.579510][ T9242] gretap0: left allmulticast mode [ 180.083493][ T9264] netlink: 51 bytes leftover after parsing attributes in process `syz.0.838'. [ 180.093467][ T9262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.839'. [ 180.289173][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 180.300294][ T9271] openvswitch: netlink: Missing key (keys=40, expected=100) [ 180.325223][ T9273] netlink: 9 bytes leftover after parsing attributes in process `syz.2.841'. [ 180.373427][ T9273] gretap0: entered promiscuous mode [ 180.417032][ T9273] netlink: 5 bytes leftover after parsing attributes in process `syz.2.841'. [ 180.430355][ T9275] syzkaller0: entered promiscuous mode [ 180.441909][ T9275] syzkaller0: entered allmulticast mode [ 180.456146][ T9273] 0ªî{X¹¦: renamed from gretap0 [ 180.467941][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 180.485205][ T9273] 0ªî{X¹¦: left promiscuous mode [ 180.499861][ T9273] 0ªî{X¹¦: entered allmulticast mode [ 180.520609][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 180.524164][ T9273] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 180.651878][ T9283] IPVS: dh: FWM 3 0x00000003 - no destination available [ 180.769185][ T9289] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 180.905090][ T9295] netlink: 'syz.1.850': attribute type 39 has an invalid length. [ 181.058325][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.853'. [ 181.216616][ T9311] syzkaller0: entered promiscuous mode [ 181.244117][ T9311] syzkaller0: entered allmulticast mode [ 181.294108][ T9311] tipc: Started in network mode [ 181.308044][ T9311] tipc: Node identity 6ed1f4edfef2, cluster identity 4711 [ 181.333809][ T9311] tipc: Enabled bearer , priority 0 [ 181.361981][ T9308] tipc: Resetting bearer [ 181.457659][ T9308] tipc: Disabling bearer [ 181.676915][ T9321] syzkaller0: entered promiscuous mode [ 181.681774][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 181.685227][ T9321] syzkaller0: entered allmulticast mode [ 181.715523][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.861'. [ 184.645101][ T9388] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 184.790364][ T9390] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 184.838376][ T9407] netlink: 'syz.2.870': attribute type 10 has an invalid length. [ 184.846840][ T9388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.909143][ T9392] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 185.071802][ T7343] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.087135][ T9398] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 185.183500][ T9407] dummy0: entered promiscuous mode [ 185.195042][ T9407] bond5: (slave dummy0): Removing an active aggregator [ 185.204863][ T7315] bond5: Warning: Found an uninitialized port [ 185.213755][ T9407] bond5: (slave dummy0): Releasing backup interface [ 185.537390][ T9436] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 185.756165][ T9449] tipc: Enabling of bearer rejected, already enabled [ 185.979461][ T9462] netlink: 'syz.2.888': attribute type 9 has an invalid length. [ 186.067103][ T9471] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.249635][ T9478] bond3: entered promiscuous mode [ 186.404042][ T9492] __nla_validate_parse: 8 callbacks suppressed [ 186.404058][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 186.469084][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 186.515070][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 186.575543][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 186.863712][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.900'. [ 186.939416][ T9515] netlink: 'syz.1.900': attribute type 4 has an invalid length. [ 186.983548][ T9515] netlink: 'syz.1.900': attribute type 4 has an invalid length. [ 187.023254][ T9523] nbd: must specify a size in bytes for the device [ 187.284704][ T9537] Bluetooth: hci0: unsupported parameter 5134 [ 187.322973][ T9537] Bluetooth: hci0: unsupported parameter 8192 [ 187.355813][ T9537] Bluetooth: hci0: unsupported parameter 5134 [ 187.402173][ T9537] Bluetooth: hci0: unsupported parameter 8192 [ 187.424519][ T9551] netlink: 240 bytes leftover after parsing attributes in process `syz.2.911'. [ 187.522581][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 187.644187][ T9551] syzkaller0: entered promiscuous mode [ 187.655102][ T9551] syzkaller0: entered allmulticast mode [ 187.871340][ T9573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.915'. [ 187.873821][ T9577] SET target dimension over the limit! [ 187.987879][ T9567] netlink: 44 bytes leftover after parsing attributes in process `syz.1.913'. [ 188.116100][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 188.157662][ T9582] xfrm0: entered allmulticast mode [ 188.210830][ T9582] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 188.297580][ T9587] nbd: must specify a size in bytes for the device [ 188.572561][ T9610] syzkaller0: entered promiscuous mode [ 188.579292][ T9610] syzkaller0: entered allmulticast mode [ 189.237612][ T9639] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 189.278748][ T9639] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 189.305793][ T9639] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 189.322350][ T9639] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.344643][ T9639] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.424180][ T9658] IPVS: length: 224 != 8 [ 190.189437][ T9685] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 190.501524][ T9714] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 190.522049][ T9712] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 190.702465][ T9714] bond4: entered promiscuous mode [ 190.708153][ T9714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.725458][ T9722] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 190.813060][ T9737] tipc: Enabled bearer , priority 0 [ 190.936562][ T9737] syzkaller0: entered promiscuous mode [ 190.944638][ T9737] syzkaller0: entered allmulticast mode [ 190.961773][ T9737] tipc: Resetting bearer [ 191.047655][ T9736] tipc: Resetting bearer [ 191.472871][ T9763] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 191.652982][ T9777] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 191.661652][ T9777] __nla_validate_parse: 5 callbacks suppressed [ 191.661669][ T9777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.965'. [ 191.973839][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.972'. [ 193.403665][ T9736] tipc: Disabling bearer [ 193.413945][ T9763] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 193.444615][ T9773] team0: Port device dummy0 removed [ 193.471345][ T9777] dummy0: entered promiscuous mode [ 193.495207][ T5344] tipc: Node number set to 1142084275 [ 193.509941][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 194.066861][ T9799] bridge0: left allmulticast mode [ 194.119874][ T9833] netlink: 564 bytes leftover after parsing attributes in process `syz.2.979'. [ 194.206438][ T9799] dummy0: left promiscuous mode [ 194.428092][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.079755][ T9799] tipc: Resetting bearer [ 195.085999][ T9799] syzkaller0: left promiscuous mode [ 195.094108][ T9799] syzkaller0: left allmulticast mode [ 195.103424][ T9799] bond1: left promiscuous mode [ 195.108362][ T9799] bond1: left allmulticast mode [ 195.117704][ T9799] bond2: left allmulticast mode [ 195.146290][ T9799] bond3: left promiscuous mode [ 195.269738][ T9827] syzkaller0: entered promiscuous mode [ 195.278166][ T9827] syzkaller0: entered allmulticast mode [ 195.322233][ T7340] IPVS: starting estimator thread 0... [ 195.427123][ T9840] IPVS: using max 34 ests per chain, 81600 per kthread [ 195.544529][ T9843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.983'. [ 197.081209][ T7340] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.108976][ T7340] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.146710][ T7340] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.167549][ T7340] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.191994][ T7340] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.206588][ T7340] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.239005][ T7340] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.266058][ T7340] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.413244][ T9867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.987'. [ 197.549479][ T9875] syzkaller0: entered promiscuous mode [ 197.555333][ T9875] syzkaller0: entered allmulticast mode [ 197.621234][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.850049][ T9888] netlink: 'syz.2.992': attribute type 3 has an invalid length. [ 197.857942][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 198.522885][ T9901] netlink: 'syz.3.994': attribute type 6 has an invalid length. [ 198.663627][ T9901] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 198.715953][ T5623] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 199.088533][ T9942] netlink: 'syz.3.1001': attribute type 2 has an invalid length. [ 199.120266][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 199.137957][ T9944] vlan1: Caught tx_queue_len zero misconfig [ 199.252392][ T7333] IPVS: starting estimator thread 0... [ 199.299379][ T9958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1001'. [ 199.351612][ T9955] IPVS: using max 31 ests per chain, 74400 per kthread [ 201.208125][ T9942] kthread_run failed with err -4 [ 201.222649][ T9947] dummy0: entered promiscuous mode [ 201.236895][ T9947] dummy0: left promiscuous mode [ 201.455747][ T9987] netlink: 'syz.1.1009': attribute type 16 has an invalid length. [ 201.561698][ T9995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1011'. [ 202.757206][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1023'. [ 202.777946][T10031] tc_dump_action: action bad kind [ 202.789755][T10030] block nbd4: NBD_DISCONNECT [ 203.053867][T10036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.774600][T10084] netdevsim netdevsim3: Direct firmware load for á failed with error -2 [ 203.784681][T10084] netdevsim netdevsim3: Falling back to sysfs fallback for: á [ 203.968520][T10094] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 204.030778][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1042'. [ 204.125638][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 204.134858][T10099] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1044'. [ 204.236458][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 204.248266][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 204.260795][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 204.276465][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 204.436221][T10115] block nbd1: NBD_DISCONNECT [ 204.613777][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 205.034604][T10151] nft_compat: unsupported protocol 0 [ 205.197576][T10159] nbd0: detected capacity change from 0 to 63 [ 205.245388][ T5624] block nbd0: Receive control failed (result -32) [ 205.258378][ T1598] block nbd0: Dead connection, failed to find a fallback [ 205.266741][ T1598] block nbd0: shutting down sockets [ 205.274483][ T1598] blk_print_req_error: 231 callbacks suppressed [ 205.274500][ T1598] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.290498][ T1598] buffer_io_error: 286 callbacks suppressed [ 205.290512][ T1598] Buffer I/O error on dev nbd0, logical block 0, async page read [ 205.305009][ T1598] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.314665][ T1598] Buffer I/O error on dev nbd0, logical block 1, async page read [ 205.322662][ T1598] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.332276][ T1598] Buffer I/O error on dev nbd0, logical block 2, async page read [ 205.340045][ T1598] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.351193][ T1598] Buffer I/O error on dev nbd0, logical block 3, async page read [ 205.361260][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.372473][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 205.380377][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 205.391192][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 205.399051][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 205.407388][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.417324][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 205.425215][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 205.433578][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.444447][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.454625][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.466630][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.476535][ T5621] ldm_validate_partition_table(): Disk read failed. [ 205.492301][ T5621] Dev nbd0: unable to read RDB block 0 [ 205.503673][ T5621] nbd0: unable to read partition table [ 205.522270][ T5621] ldm_validate_partition_table(): Disk read failed. [ 205.530541][ T5621] Dev nbd0: unable to read RDB block 0 [ 205.540141][ T5621] nbd0: unable to read partition table [ 205.665831][T10171] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 205.673813][T10173] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 205.748169][ T7315] tipc: Subscription rejected, illegal request [ 205.807834][T10171] bond2: entered promiscuous mode [ 205.832358][T10171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.136282][T10201] openvswitch: netlink: IP tunnel dst address not specified [ 206.236704][T10206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 206.329342][T10211] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 206.433608][T10210] nbd4: detected capacity change from 0 to 63 [ 206.450901][ T5624] block nbd4: Receive control failed (result -32) [ 206.484177][ T1598] block nbd4: Dead connection, failed to find a fallback [ 206.491398][ T1598] block nbd4: shutting down sockets [ 206.508741][ T6227] ldm_validate_partition_table(): Disk read failed. [ 206.532370][ T6227] Dev nbd4: unable to read RDB block 0 [ 206.549923][ T6227] nbd4: unable to read partition table [ 206.574758][ T6227] ldm_validate_partition_table(): Disk read failed. [ 206.585427][ T6227] Dev nbd4: unable to read RDB block 0 [ 206.593411][ T6227] nbd4: unable to read partition table [ 206.607337][T10221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 206.625875][T10225] Bluetooth: MGMT ver 1.23 [ 206.765396][T10230] netlink: 'syz.0.1082': attribute type 2 has an invalid length. [ 206.791157][T10230] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 208.090198][T10223] syzkaller0: entered promiscuous mode [ 208.096599][T10223] syzkaller0: entered allmulticast mode [ 208.177548][T10247] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.602351][T10254] syzkaller0: entered promiscuous mode [ 208.614204][T10254] syzkaller0: entered allmulticast mode [ 208.634451][T10269] nbd: nbd0 already in use [ 208.996950][T10290] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.125203][T10297] gtp1: entered promiscuous mode [ 209.149993][T10297] gtp1: entered allmulticast mode [ 209.331667][T10302] nbd2: detected capacity change from 0 to 63 [ 209.367538][T10314] syzkaller0: entered promiscuous mode [ 209.373591][ T5624] block nbd2: Receive control failed (result -32) [ 209.407625][ T1598] block nbd2: Dead connection, failed to find a fallback [ 209.415068][ T1598] block nbd2: shutting down sockets [ 209.420855][T10314] syzkaller0: entered allmulticast mode [ 209.423108][ T5621] ldm_validate_partition_table(): Disk read failed. [ 209.458296][ T5621] Dev nbd2: unable to read RDB block 0 [ 209.474468][ T5621] nbd2: unable to read partition table [ 209.514546][ T5621] ldm_validate_partition_table(): Disk read failed. [ 209.546183][ T5621] Dev nbd2: unable to read RDB block 0 [ 209.570827][ T5621] nbd2: unable to read partition table [ 209.594528][T10314] bond3: entered promiscuous mode [ 209.803960][T10335] __nla_validate_parse: 4 callbacks suppressed [ 209.803978][T10335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1114'. [ 210.365820][T10353] nbd: nbd2 already in use [ 211.268135][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 211.291801][T10380] ipvlan2: entered promiscuous mode [ 211.317653][T10385] bond0: entered promiscuous mode [ 211.341320][T10385] bridge2: entered promiscuous mode [ 211.424912][T10385] bond0: left promiscuous mode [ 211.450271][T10385] bridge2: left promiscuous mode [ 211.507807][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1129'. [ 211.574538][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1129'. [ 211.624143][T10405] bond0: (slave bond_slave_0): Releasing backup interface [ 211.634894][T10402] xt_CT: No such helper "snmp_trap" [ 211.786718][T10405] bond_slave_0: entered promiscuous mode [ 211.805552][T10405] bond_slave_0: entered allmulticast mode [ 211.836787][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'. [ 211.930040][T10413] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 212.265440][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 212.322340][T10439] block nbd1: Unsupported socket: should be TCP or UNIX. [ 212.372705][T10430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1139'. [ 212.458079][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1140'. [ 212.478030][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 212.491318][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1142'. [ 212.505711][T10451] tc_dump_action: action bad kind [ 212.658162][T10457] tipc: Enabling of bearer rejected, failed to enable media [ 212.670147][T10456] nbd: nbd4 already in use [ 212.683172][T10457] xt_connbytes: Forcing CT accounting to be enabled [ 213.486607][T10490] syzkaller0: entered promiscuous mode [ 213.502901][T10490] syzkaller0: entered allmulticast mode [ 213.572711][T10503] syz.1.1152 (10503) used obsolete PPPIOCDETACH ioctl [ 214.116262][T10517] nbd3: detected capacity change from 0 to 63 [ 214.193016][ T5624] block nbd3: Receive control failed (result -32) [ 214.213941][ T1598] block nbd3: Dead connection, failed to find a fallback [ 214.222030][ T1598] block nbd3: shutting down sockets [ 214.227296][ T1598] blk_print_req_error: 254 callbacks suppressed [ 214.227313][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.243879][ T1598] buffer_io_error: 434 callbacks suppressed [ 214.243893][ T1598] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.258471][ T1598] Buffer I/O error on dev nbd3, logical block 1, async page read [ 214.267081][ T1598] Buffer I/O error on dev nbd3, logical block 2, async page read [ 214.275228][ T1598] Buffer I/O error on dev nbd3, logical block 3, async page read [ 214.285850][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.295693][ T1598] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.303708][ T1598] Buffer I/O error on dev nbd3, logical block 1, async page read [ 214.312163][ T1598] Buffer I/O error on dev nbd3, logical block 2, async page read [ 214.320039][ T1598] Buffer I/O error on dev nbd3, logical block 3, async page read [ 214.330574][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.340246][ T1598] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.348219][ T1598] Buffer I/O error on dev nbd3, logical block 1, async page read [ 214.356426][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.366308][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.376278][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.386150][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.396173][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 214.407118][ T5621] ldm_validate_partition_table(): Disk read failed. [ 214.414003][ T1598] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.424113][ T1598] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.435046][ T5621] Dev nbd3: unable to read RDB block 0 [ 214.442185][ T5621] nbd3: unable to read partition table [ 214.465006][ T5621] ldm_validate_partition_table(): Disk read failed. [ 214.476655][ T5621] Dev nbd3: unable to read RDB block 0 [ 214.483850][ T5621] nbd3: unable to read partition table [ 215.118624][T10544] __nla_validate_parse: 9 callbacks suppressed [ 215.118643][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 215.421720][T10553] openvswitch: netlink: IP tunnel dst address not specified [ 215.442898][T10553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.294430][T10554] kthread_run failed with err -4 [ 217.442295][T10570] netlink: 'syz.0.1173': attribute type 16 has an invalid length. [ 217.471140][T10570] netlink: 'syz.0.1173': attribute type 17 has an invalid length. [ 217.598448][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 217.877594][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1180'. [ 217.926864][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 217.964840][T10595] bond3: entered promiscuous mode [ 217.970118][T10595] bond3: entered allmulticast mode [ 218.293458][T10618] xt_CT: No such helper "netbios-ns" [ 218.629500][T10640] ip6erspan0: entered allmulticast mode [ 218.873902][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1192'. [ 218.985561][T10658] syz.2.1193: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 219.104082][T10658] CPU: 0 UID: 0 PID: 10658 Comm: syz.2.1193 Not tainted syzkaller #0 PREEMPT(full) [ 219.104099][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.104111][T10658] Call Trace: [ 219.104116][T10658] [ 219.104124][T10658] dump_stack_lvl+0xe8/0x150 [ 219.104151][T10658] warn_alloc+0x24c/0x270 [ 219.104169][T10658] ? __pfx_warn_alloc+0x10/0x10 [ 219.104181][T10658] ? xskq_create+0x56/0x220 [ 219.104191][T10658] ? xsk_setsockopt+0x52a/0x960 [ 219.104207][T10658] ? do_syscall_64+0x166/0x520 [ 219.104220][T10658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.104239][T10658] __vmalloc_node_range_noprof+0x12c/0x1730 [ 219.104270][T10658] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 219.104283][T10658] ? __kmalloc_cache_noprof+0x331/0x660 [ 219.104295][T10658] ? __kmalloc_cache_noprof+0x152/0x660 [ 219.104307][T10658] ? xskq_create+0x56/0x220 [ 219.104319][T10658] xskq_create+0x148/0x220 [ 219.104330][T10658] ? xsk_init_queue+0x8a/0xe0 [ 219.104341][T10658] xsk_init_queue+0x8a/0xe0 [ 219.104352][T10658] xsk_setsockopt+0x52a/0x960 [ 219.104367][T10658] ? __fget_files+0x2a/0x420 [ 219.104382][T10658] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.104398][T10658] ? __pfx_aa_sk_perm+0x10/0x10 [ 219.104419][T10658] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 219.104429][T10658] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.104445][T10658] do_sock_setsockopt+0x17c/0x1b0 [ 219.104464][T10658] __x64_sys_setsockopt+0x13d/0x1b0 [ 219.104481][T10658] do_syscall_64+0x166/0x520 [ 219.104493][T10658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.104503][T10658] ? clear_bhb_loop+0x70/0xc0 [ 219.104516][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.104526][T10658] RIP: 0033:0x7f92a8d9e0d9 [ 219.104540][T10658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.104550][T10658] RSP: 002b:00007f92a9c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.104562][T10658] RAX: ffffffffffffffda RBX: 00007f92a9025fa0 RCX: 00007f92a8d9e0d9 [ 219.104569][T10658] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 219.104576][T10658] RBP: 00007f92a8e35024 R08: 0000000000000004 R09: 0000000000000000 [ 219.104585][T10658] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.104591][T10658] R13: 00007f92a9026038 R14: 00007f92a9025fa0 R15: 00007ffd38c63e48 [ 219.104609][T10658] [ 219.104626][T10658] Mem-Info: [ 219.151594][T10662] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1190'. [ 219.253728][T10658] active_anon:8980 inactive_anon:0 isolated_anon:0 [ 219.253728][T10658] active_file:0 inactive_file:43092 isolated_file:0 [ 219.253728][T10658] unevictable:0 dirty:181 writeback:0 [ 219.253728][T10658] slab_reclaimable:10503 slab_unreclaimable:100481 [ 219.253728][T10658] mapped:32249 shmem:3377 pagetables:1250 [ 219.253728][T10658] sec_pagetables:0 bounce:0 [ 219.253728][T10658] kernel_misc_reclaimable:0 [ 219.253728][T10658] free:1318862 free_pcp:12083 free_cma:0 [ 219.420352][T10658] Node 0 active_anon:24520kB inactive_anon:0kB active_file:0kB inactive_file:172164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134396kB dirty:720kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14524kB pagetables:5060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 219.481871][T10658] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 219.519137][T10682] Bluetooth: MGMT ver 1.23 [ 219.537914][T10658] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.538419][T10682] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 219.575567][T10658] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 219.582062][T10658] Node 0 DMA32 free:1314308kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24620kB inactive_anon:0kB active_file:0kB inactive_file:172164kB unevictable:0kB writepending:720kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:56444kB local_pcp:35712kB free_cma:0kB [ 219.616806][T10658] lowmem_reserve[]: 0 0 0 0 0 [ 219.621893][T10658] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.654168][T10658] lowmem_reserve[]: 0 0 0 0 0 [ 219.670895][T10658] Node 1 Normal free:3944172kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.702971][T10642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.710409][ T7316] smbdirect: ib_dev[syz1] removed [ 219.734635][T10642] bond0 (unregistering): Released all slaves [ 219.734949][T10658] lowmem_reserve[]: 0 0 0 0 0 [ 219.752995][T10658] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 219.766773][T10658] Node 0 DMA32: 1277*4kB (UME) 380*8kB (UME) 204*16kB (UME) 492*32kB (UME) 28*64kB (UM) 6*128kB (UM) 2*256kB (UM) 20*512kB (ME) 10*1024kB (UME) 9*2048kB (UM) 305*4096kB (UM) = 1318420kB [ 219.785833][T10658] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 219.796491][T10663] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0 [ 219.797844][T10658] Node 1 [ 219.805510][T10673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1193'. [ 219.819648][T10658] Normal: 1*4kB (U) 7*8kB (UM) 7*16kB (UM) 10*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944172kB [ 219.836997][T10658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.846994][T10658] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.856626][T10658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.869800][T10658] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.883107][T10658] 43615 total pagecache pages [ 219.888717][T10658] 0 pages in swap cache [ 219.893445][T10658] Free swap = 124996kB [ 219.897643][T10658] Total swap = 124996kB [ 219.902251][T10658] 2097051 pages RAM [ 219.906157][T10658] 0 pages HighMem/MovableOnly [ 219.910870][T10658] 428414 pages reserved [ 219.918831][T10658] 0 pages cma reserved [ 220.065567][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 220.101705][T10698] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.244869][T10704] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 220.733655][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 220.756845][T10740] can: request_module (can-proto-5) failed. [ 220.808796][T10745] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1212'. [ 221.100994][T10762] tipc: Resetting bearer [ 221.124239][T10762] syzkaller0: left promiscuous mode [ 221.234227][T10768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1218'. [ 221.670864][T10792] sctp: [Deprecated]: syz.2.1224 (pid 10792) Use of int in maxseg socket option. [ 221.670864][T10792] Use struct sctp_assoc_value instead [ 222.013066][T10814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 222.227157][T10826] openvswitch: netlink: Flow key attr not present in new flow. [ 222.282299][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.908855][T10865] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1242'. [ 222.925899][T10861] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 222.934029][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1242'. [ 222.957569][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 223.078454][T10870] macvtap1: entered allmulticast mode [ 223.136871][T10861] macvtap2: entered allmulticast mode [ 223.206452][T10870] bond4: (slave bridge2): making interface the new active one [ 223.220482][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 223.233789][T10870] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 223.251601][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 223.278315][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 223.342045][T10884] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 223.957328][T10915] sctp: [Deprecated]: syz.3.1258 (pid 10915) Use of int in max_burst socket option. [ 223.957328][T10915] Use struct sctp_assoc_value instead [ 224.033817][T10922] geneve2: entered allmulticast mode [ 224.197002][T10926] netlink: 'syz.4.1263': attribute type 13 has an invalid length. [ 224.382051][T10935] block nbd1: server does not support multiple connections per device. [ 224.391645][T10935] block nbd1: shutting down sockets [ 224.708313][T10959] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 224.866392][T10964] IPv6: sit1: Disabled Multicast RS [ 225.761598][T11012] __nla_validate_parse: 6 callbacks suppressed [ 225.761615][T11012] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1285'. [ 225.880686][T11016] syzkaller0: entered promiscuous mode [ 225.901753][T11016] syzkaller0: entered allmulticast mode [ 225.967424][T11021] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1286'. [ 226.004625][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1286'. [ 226.297902][T11031] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 226.398189][T11043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 226.786363][T11048] netlink: 'syz.2.1291': attribute type 2 has an invalid length. [ 226.814265][ T5624] block nbd1: Receive control failed (result -32) [ 226.815395][ T5611] block nbd1: Receive control failed (result -32) [ 227.240832][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 227.264444][T11092] batman_adv: batadv0: Adding interface: dummy0 [ 227.270883][T11092] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 227.316189][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'. [ 227.332024][T11092] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 227.521671][T11103] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1304'. [ 227.997618][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1312'. [ 228.165572][T11130] macsec2: entered promiscuous mode [ 228.186904][T11130] hsr0: entered promiscuous mode [ 228.210298][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 228.564377][T11167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.573622][T11167] IPv6: NLM_F_CREATE should be set when creating new route [ 228.705745][T11178] netlink: 'syz.2.1320': attribute type 11 has an invalid length. [ 228.725703][T11178] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1320'. [ 228.794002][T11185] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 228.954703][T11191] xt_hashlimit: size too large, truncated to 1048576 [ 229.007794][T11195] @0Ù: renamed from bond_slave_1 (while UP) [ 229.133168][T11204] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 229.493619][T11213] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 229.658168][T11220] netlink: 'syz.2.1335': attribute type 3 has an invalid length. [ 230.414213][T11226] Bluetooth: ISO socket layer initialized [ 230.417315][T11247] ovs-s!: entered promiscuous mode [ 230.479939][T11251] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 230.825212][T11267] x_tables: duplicate entry at hook 1 [ 230.940754][T11267] __nla_validate_parse: 4 callbacks suppressed [ 230.940772][T11267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'. [ 230.989487][T11267] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1348'. [ 231.204078][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 231.352704][T11286] netlink: NAT attribute has 5 unknown bytes [ 231.379764][T11286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.462815][T11289] netlink: 'syz.1.1353': attribute type 29 has an invalid length. [ 231.616825][T11297] syzkaller0: entered promiscuous mode [ 231.632559][T11297] syzkaller0: entered allmulticast mode [ 231.668364][T11296] tipc: Enabled bearer , priority 0 [ 231.676952][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 231.689330][T11294] tipc: Resetting bearer [ 231.713695][T11294] tipc: Disabling bearer [ 231.978146][T11303] netlink: 'syz.1.1357': attribute type 16 has an invalid length. [ 232.013128][T11303] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1357'. [ 232.144597][T11302] syzkaller1: entered promiscuous mode [ 232.166268][T11302] syzkaller1: entered allmulticast mode [ 232.453890][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 232.501501][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 232.632908][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 232.698636][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 232.720550][T11334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.756774][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1365'. [ 232.815960][T11340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.190164][T11353] netlink: 'syz.1.1369': attribute type 83 has an invalid length. [ 233.847365][T11377] syzkaller1: entered promiscuous mode [ 233.866489][T11377] syzkaller1: entered allmulticast mode [ 233.925612][T11379] tunl0: Caught tx_queue_len zero misconfig [ 234.697362][T11394] Bluetooth: hci0: unsupported parameter 5135 [ 234.752424][T11394] Bluetooth: hci0: unsupported parameter 8192 [ 234.780746][T11394] Bluetooth: hci0: unsupported parameter 5135 [ 234.878206][T11394] Bluetooth: hci0: unsupported parameter 8192 [ 235.137752][T11423] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 235.171415][T11421] netlink: 'syz.3.1387': attribute type 12 has an invalid length. [ 235.193122][T11424] netlink: Unknown NAT attribute (type=16383, max=9) [ 235.210503][T11427] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 235.237226][T11421] netlink: 'syz.3.1387': attribute type 29 has an invalid length. [ 235.245875][T11424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.274686][T11421] netlink: 'syz.3.1387': attribute type 3 has an invalid length. [ 235.397493][T11423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.459504][T11423] team0: Port device netdevsim1 added [ 235.529426][T11427] team0: Port device netdevsim1 removed [ 235.542235][T11445] netlink: 'syz.4.1389': attribute type 6 has an invalid length. [ 235.570953][T11427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.607937][T11450] netlink: 'syz.1.1390': attribute type 4 has an invalid length. [ 235.625437][T11427] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 235.900582][T11461] C: renamed from veth1_to_team (while UP) [ 235.933344][T11461] netlink: 'syz.4.1394': attribute type 4 has an invalid length. [ 235.957419][T11461] __nla_validate_parse: 11 callbacks suppressed [ 235.957437][T11461] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1394'. [ 236.031279][T11461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 236.264256][T11481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1398'. [ 236.454982][T11492] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 236.620043][T11492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.638778][T11503] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 236.660839][T11498] bond5: (slave geneve2): making interface the new active one [ 236.671566][T11498] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 236.736366][T11503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.815895][T11517] openvswitch: netlink: Unknown nsh attribute 0 [ 236.818348][T11503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1403'. [ 236.866133][T11509] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 236.885532][T11512] batman_adv: batadv0: Removing interface: dummy0 [ 236.976815][T11512] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 236.997264][T11522] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 237.044335][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 237.057879][T11506] tipc: Enabled bearer , priority 0 [ 237.064840][ T7333] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 237.092505][T11503] dummy0: entered promiscuous mode [ 237.094096][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 237.107757][T11534] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 237.126836][T11503] bond4: (slave dummy0): Removing an active aggregator [ 237.168626][T11503] bond4: (slave dummy0): Releasing backup interface [ 237.400152][T11504] tipc: Disabling bearer [ 237.468963][T11546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1412'. [ 237.697421][T11565] xt_TCPMSS: Only works on TCP SYN packets [ 237.830843][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 238.543442][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1429'. [ 238.556232][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1429'. [ 238.619271][ T5611] block nbd5: Receive control failed (result -32) [ 238.619280][ T5624] block nbd5: Receive control failed (result -32) [ 239.170493][T11639] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 239.245701][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 239.656090][T11663] ip_tables: iptables: counters copy to user failed while replacing table [ 239.745962][T11671] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.232571][T11704] block nbd6: Unsupported socket: should be TCP or UNIX. [ 241.370883][T11750] sctp: [Deprecated]: syz.3.1467 (pid 11750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.370883][T11750] Use struct sctp_sack_info instead [ 241.544778][T11761] __nla_validate_parse: 74 callbacks suppressed [ 241.544797][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 241.566651][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1470'. [ 241.644089][T11770] openvswitch: netlink: Message has 8 unknown bytes. [ 241.853441][T11783] openvswitch: netlink: Key 18 has unexpected len 0 expected 2 [ 242.042361][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'. [ 242.068290][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 242.526375][T11826] vxcan3: entered promiscuous mode [ 242.559376][T11828] validate_nla: 3 callbacks suppressed [ 242.559394][T11828] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 242.576369][T11828] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1489'. [ 242.592256][T11832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1487'. [ 243.125788][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1498'. [ 243.148909][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 243.190070][T11856] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1496'. [ 243.253408][T11853] veth5: entered allmulticast mode [ 243.458477][T11876] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 243.557700][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1498'. [ 243.607698][T11876] netlink: 'syz.0.1498': attribute type 10 has an invalid length. [ 243.648074][T11886] nbd: nbd2 already in use [ 243.666031][T11886] block nbd2: NBD_DISCONNECT [ 243.685662][T11886] block nbd2: Send disconnect failed -32 [ 244.122614][T11915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.029631][T11966] nbd: nbd0 already in use [ 245.053277][T11966] block nbd0: NBD_DISCONNECT [ 245.069656][T11966] block nbd0: Send disconnect failed -32 [ 245.945707][T12000] syzkaller1: entered promiscuous mode [ 245.951518][T12000] syzkaller1: entered allmulticast mode [ 246.240057][T12021] nbd: nbd4 already in use [ 246.263112][T12021] block nbd4: NBD_DISCONNECT [ 246.280764][T12021] block nbd4: Send disconnect failed -32 [ 246.409006][T12032] tipc: Enabling of bearer rejected, already enabled [ 246.819744][T12050] __nla_validate_parse: 7 callbacks suppressed [ 246.819762][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 246.853086][T12053] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1542'. [ 246.910588][T12050] bond6: entered allmulticast mode [ 246.924999][T12069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1542'. [ 247.128492][T12068] syzkaller0: entered promiscuous mode [ 247.162806][T12068] syzkaller0: entered allmulticast mode [ 247.188447][T12078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.221880][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'. [ 247.274486][T12071] tipc: Enabled bearer , priority 0 [ 247.329751][T12067] tipc: Resetting bearer [ 247.434646][T12088] nbd: nbd1 already in use [ 247.450610][T12088] block nbd1: NBD_DISCONNECT [ 247.462815][T12088] block nbd1: Send disconnect failed -32 [ 247.473090][T12088] block nbd1: Send disconnect failed -32 [ 247.483616][T12088] block nbd1: shutting down sockets [ 247.853265][T12115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1558'. [ 247.863601][T12115] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 248.173476][T12131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.825481][T12067] tipc: Disabling bearer [ 249.842729][ T7595] tipc: Node number set to 2418275565 [ 250.000189][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 250.214670][T12156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1567'. [ 250.233794][T12135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.281727][T12156] syzkaller1: entered promiscuous mode [ 250.288782][T12156] syzkaller1: entered allmulticast mode [ 250.320341][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 250.362064][T12156] bridge_slave_1: left allmulticast mode [ 250.374493][T12156] bridge_slave_1: left promiscuous mode [ 250.400843][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.460690][T12156] bridge_slave_0: left allmulticast mode [ 250.475633][T12156] bridge_slave_0: left promiscuous mode [ 250.500004][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.594670][T12166] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 250.605685][T12167] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 250.742709][T12171] netlink: 'syz.4.1573': attribute type 8 has an invalid length. [ 250.757205][T12166] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 250.771566][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 250.792271][T12172] syzkaller0: entered promiscuous mode [ 250.803104][T12172] syzkaller0: entered allmulticast mode [ 250.803184][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 251.072882][T12179] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 251.137716][T12176] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 251.181829][T12183] nbd2: detected capacity change from 0 to 63 [ 251.191731][T12191] block nbd2: NBD_DISCONNECT [ 251.204509][T12191] block nbd2: Disconnected due to user request. [ 251.240330][T12191] block nbd2: shutting down sockets [ 251.245030][ T25] blk_print_req_error: 114 callbacks suppressed [ 251.245051][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.263100][ T25] buffer_io_error: 138 callbacks suppressed [ 251.263116][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.277377][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 251.287657][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 251.295542][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 251.303506][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 251.325998][ T1598] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 251.335941][ T1598] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.346585][ T1598] Buffer I/O error on dev nbd2, logical block 1, async page read [ 251.358820][ T1598] Buffer I/O error on dev nbd2, logical block 2, async page read [ 251.369091][ T1598] Buffer I/O error on dev nbd2, logical block 3, async page read [ 251.381560][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 251.391453][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.401095][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 251.409731][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 251.420689][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 251.432204][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 251.442074][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 251.451965][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 251.461726][ T5621] ldm_validate_partition_table(): Disk read failed. [ 251.470772][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.484369][ T5621] Dev nbd2: unable to read RDB block 0 [ 251.501957][ T5621] nbd2: unable to read partition table [ 251.519438][ T5621] ldm_validate_partition_table(): Disk read failed. [ 251.528231][ T5621] Dev nbd2: unable to read RDB block 0 [ 251.538482][ T5621] nbd2: unable to read partition table [ 251.640559][T12208] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 251.714006][T12208] bond8: entered promiscuous mode [ 251.730735][T12208] bond8: entered allmulticast mode [ 251.752333][T12208] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.830452][T12217] syzkaller0: entered promiscuous mode [ 251.839699][T12217] syzkaller0: entered allmulticast mode [ 251.949791][T12228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1585'. [ 252.030996][T12221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1585'. [ 252.084454][T12213] netlink: 'syz.2.1585': attribute type 32 has an invalid length. [ 252.093354][T12213] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1585'. [ 252.222695][T12240] netlink: 'syz.1.1590': attribute type 2 has an invalid length. [ 252.261860][T12240] ´: entered promiscuous mode [ 252.290073][T12246] netlink: 'syz.1.1590': attribute type 2 has an invalid length. [ 252.445281][T12252] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1592'. [ 252.656160][T12261] nbd: nbd3 already in use [ 252.682449][T12261] block nbd3: NBD_DISCONNECT [ 252.711593][T12261] block nbd3: Send disconnect failed -32 [ 252.862997][T12273] bridge4: entered allmulticast mode [ 252.934808][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 252.966998][T12275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1599'. [ 253.026997][T12287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 253.046161][T12282] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1599'. [ 253.077465][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 253.345577][T12306] netlink: 11620 bytes leftover after parsing attributes in process `syz.2.1605'. [ 253.596319][T12317] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 253.679214][T12317] erspan0: entered promiscuous mode [ 253.690470][T12318] IPVS: Scheduler module ip_vs_sip not found [ 253.749721][T12317] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1608'. [ 253.969353][T12337] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 254.070743][T12341] bond5: (slave veth5): Enslaving as an active interface with a down link [ 254.211172][T12337] bond5: (slave veth7): Enslaving as an active interface with a down link [ 254.268440][T12341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.282238][T12335] nbd1: detected capacity change from 0 to 63 [ 254.306058][T12344] block nbd1: NBD_DISCONNECT [ 254.325476][T12344] block nbd1: Disconnected due to user request. [ 254.335440][T12344] block nbd1: shutting down sockets [ 254.383178][ T5621] ldm_validate_partition_table(): Disk read failed. [ 254.414070][ T5621] Dev nbd1: unable to read RDB block 0 [ 254.440555][ T5621] nbd1: unable to read partition table [ 254.465596][ T5621] ldm_validate_partition_table(): Disk read failed. [ 254.477510][ T5621] Dev nbd1: unable to read RDB block 0 [ 254.484574][ T5621] nbd1: unable to read partition table [ 254.654136][T12371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.675318][T12371] batman_adv: batadv0: Interface deactivated: gretap1 [ 254.698318][T12371] batman_adv: batadv0: Removing interface: gretap1 [ 255.312567][T12410] nbd1: detected capacity change from 0 to 63 [ 255.346379][T12413] block nbd1: NBD_DISCONNECT [ 255.366283][T12413] block nbd1: Disconnected due to user request. [ 255.373221][T12413] block nbd1: shutting down sockets [ 255.395339][ T5621] ldm_validate_partition_table(): Disk read failed. [ 255.417463][ T5621] Dev nbd1: unable to read RDB block 0 [ 255.429859][T12415] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 255.441913][ T5621] nbd1: unable to read partition table [ 255.467395][ T5621] ldm_validate_partition_table(): Disk read failed. [ 255.476376][ T5621] Dev nbd1: unable to read RDB block 0 [ 255.484915][ T5621] nbd1: unable to read partition table [ 255.534374][T12422] syzkaller0: entered promiscuous mode [ 255.542672][T12422] tipc: Enabling of bearer rejected, already enabled [ 255.554428][T12422] syzkaller0: mtu less than device minimum [ 255.584094][T12422] netlink: 'syz.0.1635': attribute type 11 has an invalid length. [ 255.768897][T12436] bond4: entered promiscuous mode [ 255.774728][T12436] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.862882][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.914037][T12446] syzkaller1: entered promiscuous mode [ 255.934491][T12446] syzkaller1: entered allmulticast mode [ 255.989900][T12450] pimreg: entered allmulticast mode [ 256.012317][T12454] pimreg: left allmulticast mode [ 256.066693][T12450] validate_nla: 1 callbacks suppressed [ 256.066710][T12450] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 256.371824][T12463] nbd1: detected capacity change from 0 to 63 [ 256.389423][T12465] block nbd3: not configured, cannot reconfigure [ 256.410587][T12468] block nbd1: NBD_DISCONNECT [ 256.426022][T12468] block nbd1: Disconnected due to user request. [ 256.433364][T12468] block nbd1: shutting down sockets [ 256.451580][ C0] blk_print_req_error: 332 callbacks suppressed [ 256.451609][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 256.467596][ C0] buffer_io_error: 434 callbacks suppressed [ 256.467615][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.481590][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 256.491221][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 256.499061][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 256.506969][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 256.520510][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.530253][ T1598] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.538131][ T1598] Buffer I/O error on dev nbd1, logical block 1, async page read [ 256.545990][ T1598] Buffer I/O error on dev nbd1, logical block 2, async page read [ 256.554062][ T1598] Buffer I/O error on dev nbd1, logical block 3, async page read [ 256.562100][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.571738][ T1598] Buffer I/O error on dev nbd1, logical block 0, async page read [ 256.579517][ T1598] Buffer I/O error on dev nbd1, logical block 1, async page read [ 256.588133][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.598410][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.608312][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.618919][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.628773][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.640234][ T5621] ldm_validate_partition_table(): Disk read failed. [ 256.661745][ T1598] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 256.671952][ T5621] Dev nbd1: unable to read RDB block 0 [ 256.679220][ T5621] nbd1: unable to read partition table [ 256.690015][ T5621] ldm_validate_partition_table(): Disk read failed. [ 256.698777][ T5621] Dev nbd1: unable to read RDB block 0 [ 256.706034][ T5621] nbd1: unable to read partition table [ 256.715808][T12480] bridge0: entered promiscuous mode [ 256.771743][T12480] bridge0: entered allmulticast mode [ 256.832052][T12480] team0: Port device bridge0 added [ 257.184936][T12498] tipc: Enabling of bearer rejected, already enabled [ 257.290549][T12505] bridge0: left promiscuous mode [ 257.313818][T12505] bridge0: entered allmulticast mode [ 257.407885][T12505] bond1: (slave bridge0): Releasing backup interface [ 257.957998][T12514] __nla_validate_parse: 14 callbacks suppressed [ 257.958018][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 258.138253][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 258.207621][T12556] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1672'. [ 258.225851][T12554] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 258.276974][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 258.674284][T12596] gre0: MTU too low for tipc bearer [ 258.693656][T12596] tipc: Enabling of bearer rejected, failed to enable media [ 258.703510][T12588] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1682'. [ 258.773473][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1686'. [ 258.787149][T12588] gretap0: entered allmulticast mode [ 258.851268][T12597] syzkaller0: entered promiscuous mode [ 258.871300][T12597] syzkaller0: entered allmulticast mode [ 258.904762][T12606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1687'. [ 258.958561][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1687'. [ 258.995457][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'. [ 259.410648][T12645] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 259.583477][T12651] veth9: entered allmulticast mode [ 259.596197][T12651] bond6: (slave veth9): Enslaving as an active interface with a down link [ 259.613015][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 259.655301][T12645] bond6: (slave veth0_to_bond): making interface the new active one [ 259.664694][T12645] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 259.716721][T12651] macvlan2: entered promiscuous mode [ 259.728764][T12651] macvlan2: entered allmulticast mode [ 259.733631][T12661] GUP no longer grows the stack in syz.1.1701 (12661): 200000003000-20000000a000 (200000001000) [ 259.739727][T12651] bond6: entered promiscuous mode [ 259.751237][T12651] veth0_to_bond: entered promiscuous mode [ 259.760597][T12651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 259.761554][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.1.1701 Not tainted syzkaller #0 PREEMPT(full) [ 259.761580][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.761614][T12661] Call Trace: [ 259.761623][T12661] [ 259.761631][T12661] dump_stack_lvl+0xe8/0x150 [ 259.761665][T12661] __get_user_pages+0x238c/0x2720 [ 259.761700][T12661] ? __gup_longterm_locked+0xc3b/0x15c0 [ 259.761735][T12661] ? __gup_longterm_locked+0xc3b/0x15c0 [ 259.761762][T12661] __gup_longterm_locked+0xd52/0x15c0 [ 259.761785][T12661] ? lock_acquire+0x106/0x350 [ 259.761829][T12661] gup_fast_fallback+0x1d92/0x20e0 [ 259.761889][T12661] ? __pfx_gup_fast_fallback+0x10/0x10 [ 259.761920][T12661] ? futex_unqueue+0x22/0x240 [ 259.761949][T12661] ? is_valid_gup_args+0x11f/0x200 [ 259.761980][T12661] ? get_user_pages_fast+0x4d/0xb0 [ 259.762012][T12661] __iov_iter_get_pages_alloc+0x378/0xa40 [ 259.762040][T12661] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 259.762074][T12661] iov_iter_get_pages2+0x5e/0xa0 [ 259.762098][T12661] __se_sys_vmsplice+0x7b5/0x1660 [ 259.762147][T12661] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 259.762175][T12661] ? __pfx_futex_wait+0x10/0x10 [ 259.762228][T12661] ? 0xffffffffff600000 [ 259.762282][T12661] do_syscall_64+0x166/0x520 [ 259.762304][T12661] ? trace_irq_disable+0x3b/0x140 [ 259.762329][T12661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.762350][T12661] ? clear_bhb_loop+0x70/0xc0 [ 259.762380][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.762400][T12661] RIP: 0033:0x7f2ef7f9e0d9 [ 259.762418][T12661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.762435][T12661] RSP: 002b:00007f2ef8dc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 259.762456][T12661] RAX: ffffffffffffffda RBX: 00007f2ef8225fa0 RCX: 00007f2ef7f9e0d9 [ 259.762470][T12661] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 259.762483][T12661] RBP: 00007f2ef8035024 R08: 0000000000000000 R09: 0000000000000000 [ 259.762496][T12661] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 259.762508][T12661] R13: 00007f2ef8226038 R14: 00007f2ef8225fa0 R15: 00007ffda94294f8 [ 259.762540][T12661] [ 259.999524][T12651] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 260.015856][T12651] bond6: left promiscuous mode [ 260.020678][T12651] veth0_to_bond: left promiscuous mode [ 260.077466][T12677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.708591][T12714] gretap0: entered promiscuous mode [ 260.764718][T12716] Bluetooth: hci0: unsupported parameter 5135 [ 260.775547][T12716] Bluetooth: hci0: unsupported parameter 8192 [ 260.784236][T12714] gretap0: left promiscuous mode [ 260.790087][T12716] Bluetooth: hci0: unsupported parameter 5135 [ 260.802043][T12716] Bluetooth: hci0: unsupported parameter 8192 [ 260.981290][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.067671][T12736] netlink: 'syz.1.1721': attribute type 13 has an invalid length. [ 261.277271][T12742] syzkaller1: entered promiscuous mode [ 261.290525][T12742] syzkaller1: entered allmulticast mode [ 261.507098][T12760] netlink: 'syz.1.1729': attribute type 4 has an invalid length. [ 262.161271][ T7332] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.170723][ T7332] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.184800][ T7332] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.193771][ T7332] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.018384][T12811] nbd0: detected capacity change from 0 to 63 [ 263.037589][T12817] block nbd0: NBD_DISCONNECT [ 263.043117][T12822] __nla_validate_parse: 14 callbacks suppressed [ 263.043135][T12822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'. [ 263.071698][T12817] block nbd0: Disconnected due to user request. [ 263.099519][T12817] block nbd0: shutting down sockets [ 263.125569][ C1] blk_print_req_error: 103 callbacks suppressed [ 263.125593][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.141580][ C1] buffer_io_error: 138 callbacks suppressed [ 263.141598][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 263.155414][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.165012][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 263.172821][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.182407][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 263.190284][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.199900][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 263.232402][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 263.242424][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 263.244577][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 263.250211][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 263.267775][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 263.276518][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 263.284574][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 263.294192][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 263.296159][T12835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1746'. [ 263.302009][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 263.302231][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 263.302398][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 263.302581][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 263.302738][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 263.357977][ T5621] ldm_validate_partition_table(): Disk read failed. [ 263.371835][ T5621] Dev nbd0: unable to read RDB block 0 [ 263.417317][ T5621] nbd0: unable to read partition table [ 263.468251][T12833] syzkaller1: entered promiscuous mode [ 263.485904][T12833] syzkaller1: entered allmulticast mode [ 263.488858][ T5621] ldm_validate_partition_table(): Disk read failed. [ 263.527445][ T5621] Dev nbd0: unable to read RDB block 0 [ 263.542843][ T5621] nbd0: unable to read partition table [ 263.668078][T12846] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 263.833974][T12846] bond7: entered promiscuous mode [ 263.839135][T12846] bond7: entered allmulticast mode [ 263.844878][T12846] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.928940][T12859] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1755'. [ 263.994763][T12854] erspan1: entered allmulticast mode [ 264.046312][T12854] bond7: (slave erspan1): making interface the new active one [ 264.056048][T12854] erspan1: entered promiscuous mode [ 264.067109][T12854] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 264.077974][T12879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1757'. [ 264.109737][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 264.150295][T12880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1757'. [ 264.350093][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 264.600186][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 264.624759][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 264.796846][T12914] netlink: 'syz.0.1767': attribute type 39 has an invalid length. [ 265.250657][T12938] x_tables: unsorted entry at hook 3 [ 265.379332][T12949] nftables ruleset with unbound set [ 265.828226][ T5273] veth1_vlan: left promiscuous mode [ 265.908010][T12973] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 266.156232][T12984] veth0_to_bond: entered allmulticast mode [ 266.175063][T12994] netlink: 'syz.0.1788': attribute type 1 has an invalid length. [ 266.328656][T12994] bond5: entered promiscuous mode [ 266.339380][T12994] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.448282][T13002] bond5: (slave bridge5): making interface the new active one [ 266.463825][T13002] bridge5: entered promiscuous mode [ 266.495627][T13002] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 267.244132][T13053] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 268.013536][T13113] nbd: must specify at least one socket [ 268.055518][T13111] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 268.081936][T13111] netlink: 'syz.1.1810': attribute type 2 has an invalid length. [ 268.194371][T13117] ip6tnl0: Caught tx_queue_len zero misconfig [ 268.690681][T13115] __nla_validate_parse: 9 callbacks suppressed [ 268.690699][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 268.997694][T13152] netlink: NAT attribute has 5 unknown bytes [ 269.019104][T13152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.174731][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'. [ 269.367544][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 270.008216][T13199] x_tables: unsorted entry at hook 2 [ 270.404888][T13214] tipc: Enabled bearer , priority 0 [ 270.448827][T13218] syzkaller0: entered promiscuous mode [ 270.488286][T13218] syzkaller0: entered allmulticast mode [ 270.619715][T13218] tipc: Resetting bearer [ 270.725426][T13218] tipc: Disabling bearer [ 271.193566][T13254] nbd1: detected capacity change from 0 to 63 [ 271.203248][T13257] block nbd1: NBD_DISCONNECT [ 271.206638][T13259] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1838'. [ 271.213453][T13257] block nbd1: Disconnected due to user request. [ 271.235241][T13257] block nbd1: shutting down sockets [ 271.261851][T13259] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1838'. [ 271.289077][T13261] netlink: 'syz.2.1839': attribute type 6 has an invalid length. [ 271.297434][ C1] blk_print_req_error: 94 callbacks suppressed [ 271.297453][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.313310][ C1] buffer_io_error: 138 callbacks suppressed [ 271.313329][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.327013][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.336692][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.344528][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.354105][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 271.361918][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.371478][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 271.390080][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 271.400261][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.409161][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.417167][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 271.425081][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 271.433265][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 271.442935][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.450877][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.459042][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 271.469083][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 271.482018][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 271.491982][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 271.503684][ T6227] ldm_validate_partition_table(): Disk read failed. [ 271.520926][ T6227] Dev nbd1: unable to read RDB block 0 [ 271.526699][T13261] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.536156][ T6227] nbd1: unable to read partition table [ 271.549986][ T6227] ldm_validate_partition_table(): Disk read failed. [ 271.567339][ T6227] Dev nbd1: unable to read RDB block 0 [ 271.577851][ T6227] nbd1: unable to read partition table [ 271.689322][T13273] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1844'. [ 271.712855][T13265] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 271.786903][T13265] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 271.810660][T13278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.229124][T13302] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 272.264062][T13300] bridge_slave_0: invalid flags given to default FDB implementation [ 272.290089][T13302] gretap2: entered allmulticast mode [ 272.307353][T13302] bond6: (slave gretap2): making interface the new active one [ 272.322109][T13302] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 272.651745][T13319] nbd0: detected capacity change from 0 to 63 [ 272.665023][T13322] block nbd0: NBD_DISCONNECT [ 272.669791][T13326] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1856'. [ 272.679930][T13322] block nbd0: Disconnected due to user request. [ 272.691601][T13322] block nbd0: shutting down sockets [ 272.712958][ T5621] ldm_validate_partition_table(): Disk read failed. [ 272.750335][ T5621] Dev nbd0: unable to read RDB block 0 [ 272.782112][ T5621] nbd0: unable to read partition table [ 272.818155][ T5621] ldm_validate_partition_table(): Disk read failed. [ 272.828031][T13329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1855'. [ 272.845101][ T5621] Dev nbd0: unable to read RDB block 0 [ 272.854080][ T5621] nbd0: unable to read partition table [ 272.872173][T13329] nbd: must specify at least one socket [ 273.364093][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1865'. [ 273.416837][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 273.432228][T13369] netlink: 'syz.2.1865': attribute type 7 has an invalid length. [ 273.490937][T13368] openvswitch: netlink: Flow key attribute not present in set flow. [ 273.668300][T13381] nbd4: detected capacity change from 0 to 63 [ 273.691972][T13377] block nbd4: NBD_DISCONNECT [ 273.705261][T13388] __nla_validate_parse: 1 callbacks suppressed [ 273.705279][T13388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1871'. [ 273.706776][T13377] block nbd4: Disconnected due to user request. [ 273.808947][T13377] block nbd4: shutting down sockets [ 273.848879][ T5621] ldm_validate_partition_table(): Disk read failed. [ 273.869525][ T5621] Dev nbd4: unable to read RDB block 0 [ 273.885930][ T5621] nbd4: unable to read partition table [ 273.914658][ T5621] ldm_validate_partition_table(): Disk read failed. [ 273.940712][ T5621] Dev nbd4: unable to read RDB block 0 [ 273.970538][ T5621] nbd4: unable to read partition table [ 274.300193][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 274.313475][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 274.768476][T13441] netlink: get zone limit has 4 unknown bytes [ 275.406812][T13470] xt_hashlimit: max too large, truncated to 1048576 [ 275.772676][T13494] netlink: 'syz.4.1901': attribute type 13 has an invalid length. [ 275.809530][T13494] netlink: 'syz.4.1901': attribute type 27 has an invalid length. [ 276.140998][T13516] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 276.141213][T13515] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 276.203982][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 276.251985][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.268498][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.315788][T13527] xt_connbytes: Forcing CT accounting to be enabled [ 276.367314][T13515] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 276.371446][ T48] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.422003][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.441774][T13516] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 276.553143][T13524] ip6erspan1: entered allmulticast mode [ 276.622150][ T48] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.650152][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1915'. [ 276.659745][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.701295][ T48] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.736556][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.870351][T13551] veth1_to_bond: Caught tx_queue_len zero misconfig [ 276.878792][T13550] netlink: 'syz.4.1919': attribute type 4 has an invalid length. [ 277.011773][ T7322] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.038264][ T7322] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.264585][T13549] bond7: entered promiscuous mode [ 277.409228][T13564] batadv0: entered promiscuous mode [ 277.427832][T13564] batadv0: entered allmulticast mode [ 277.445891][T13564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.935704][T13600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'. [ 278.149852][T13605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1930'. [ 278.272971][T13608] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 278.295071][T13608] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1931'. [ 278.314861][T13608] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.1931'. [ 279.968611][T13605] ip: renamed from virt_wifi0 [ 279.985206][T13605] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check. [ 280.338834][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 280.492923][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1939'. [ 280.617892][T13645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1942'. [ 280.854458][T13659] nbd4: detected capacity change from 0 to 63 [ 280.868722][T13663] block nbd4: NBD_DISCONNECT [ 280.879600][T13663] block nbd4: Disconnected due to user request. [ 280.887531][T13663] block nbd4: shutting down sockets [ 280.895568][ C0] blk_print_req_error: 325 callbacks suppressed [ 280.895589][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 280.911590][ C0] buffer_io_error: 434 callbacks suppressed [ 280.911610][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 280.919791][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 280.934858][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 280.942698][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 280.950483][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 280.958602][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 280.968596][ T1598] Buffer I/O error on dev nbd4, logical block 0, async page read [ 280.979796][ T1598] Buffer I/O error on dev nbd4, logical block 1, async page read [ 280.991404][ T1598] Buffer I/O error on dev nbd4, logical block 2, async page read [ 280.999310][ T1598] Buffer I/O error on dev nbd4, logical block 3, async page read [ 281.009510][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 281.020113][ T1598] Buffer I/O error on dev nbd4, logical block 0, async page read [ 281.028388][ T1598] Buffer I/O error on dev nbd4, logical block 1, async page read [ 281.039230][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.049300][ T1598] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 281.059402][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.069849][ T1598] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 281.080149][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 281.095439][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 281.105884][ T5621] ldm_validate_partition_table(): Disk read failed. [ 281.117771][ T5621] Dev nbd4: unable to read RDB block 0 [ 281.131922][ T5621] nbd4: unable to read partition table [ 281.160248][ T5621] ldm_validate_partition_table(): Disk read failed. [ 281.222137][ T5621] Dev nbd4: unable to read RDB block 0 [ 281.229327][ T5621] nbd4: unable to read partition table [ 281.627322][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 281.685892][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 281.915326][T13714] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.1955'. [ 282.003784][T13715] nbd4: detected capacity change from 0 to 63 [ 282.026058][T13722] block nbd4: NBD_DISCONNECT [ 282.053101][T13722] block nbd4: Disconnected due to user request. [ 282.083155][ T5621] ldm_validate_partition_table(): Disk read failed. [ 282.089993][T13722] block nbd4: shutting down sockets [ 282.107389][ T5621] Dev nbd4: unable to read RDB block 0 [ 282.127822][ T5621] nbd4: unable to read partition table [ 282.162061][ T5621] ldm_validate_partition_table(): Disk read failed. [ 282.195608][ T5621] Dev nbd4: unable to read RDB block 0 [ 282.224229][ T5621] nbd4: unable to read partition table [ 282.303687][T13734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.747903][T13749] syzkaller0: entered promiscuous mode [ 282.776287][T13749] syzkaller0: entered allmulticast mode [ 283.041014][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 283.078114][T13769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1969'. [ 283.208253][T13775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.227090][T13781] xfrm0: entered allmulticast mode [ 283.234649][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 283.234935][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 283.252577][T13781] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 283.324212][T13779] nbd2: detected capacity change from 0 to 63 [ 283.402394][T13786] block nbd2: NBD_DISCONNECT [ 283.416853][T13786] block nbd2: Disconnected due to user request. [ 283.425312][T13786] block nbd2: shutting down sockets [ 283.444060][ T5621] ldm_validate_partition_table(): Disk read failed. [ 283.468010][ T5621] Dev nbd2: unable to read RDB block 0 [ 283.494769][ T5621] nbd2: unable to read partition table [ 283.524726][ T5621] ldm_validate_partition_table(): Disk read failed. [ 283.534021][ T5621] Dev nbd2: unable to read RDB block 0 [ 283.540958][ T5621] nbd2: unable to read partition table [ 283.625272][T13802] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 283.852278][T13816] netlink: 'syz.0.1984': attribute type 9 has an invalid length. [ 283.975870][T13824] xt_limit: Overflow, try lower: 268435456/134217728 [ 284.272108][T13834] nbd3: detected capacity change from 0 to 63 [ 284.286701][T13839] block nbd3: NBD_DISCONNECT [ 284.315230][T13839] block nbd3: Disconnected due to user request. [ 284.360125][T13839] block nbd3: shutting down sockets [ 284.374994][ T5621] ldm_validate_partition_table(): Disk read failed. [ 284.393950][ T5621] Dev nbd3: unable to read RDB block 0 [ 284.405861][ T5621] nbd3: unable to read partition table [ 284.433285][ T5621] ldm_validate_partition_table(): Disk read failed. [ 284.453415][ T5621] Dev nbd3: unable to read RDB block 0 [ 284.463678][ T5621] nbd3: unable to read partition table [ 284.519114][T13838] vlan1: entered allmulticast mode [ 284.539946][T13838] bond0: entered allmulticast mode [ 284.555708][T13838] bond_slave_0: entered allmulticast mode [ 284.596087][T13838] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 285.345019][T13883] netlink: Failed to add ¦â—k\ helper -22 [ 285.353406][T13883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.460127][T13895] nbd: socks must be embedded in a SOCK_ITEM attr [ 285.769471][T13906] __nla_validate_parse: 3 callbacks suppressed [ 285.769492][T13906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2013'. [ 285.800699][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 285.961595][T13920] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 286.060226][T13920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.522567][T13951] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 286.849934][T13980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.030041][T13987] x_tables: duplicate underflow at hook 3 [ 287.120805][T13992] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2038'. [ 287.149233][T13994] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 287.272317][T13994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.481583][T14010] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2044'. [ 287.696117][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2049'. [ 287.864772][T14041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2052'. [ 288.107951][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2055'. [ 288.309606][T14079] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 288.876894][T14107] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 288.897916][T14072] openvswitch: netlink: Missing key (keys=c0, expected=10000000) [ 289.093514][T14120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'. [ 289.152456][T14120] ipvlan0: entered promiscuous mode [ 289.159318][T14120] ipvlan0: left promiscuous mode [ 289.729838][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 289.744044][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.752764][T14156] bridge0: entered allmulticast mode [ 289.800213][T14156] bridge_slave_1: left allmulticast mode [ 289.812591][T14156] bridge_slave_1: left promiscuous mode [ 289.827389][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.876280][T14156] bridge_slave_0: left allmulticast mode [ 289.918143][T14156] bridge_slave_0: left promiscuous mode [ 289.936672][T14156] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.950446][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2080'. [ 290.476731][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.495101][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.506997][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.527114][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.603778][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.627641][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.636336][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.647184][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.656567][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.665860][T14198] netlink: 'syz.0.2088': attribute type 39 has an invalid length. [ 290.681218][T14205] nbd4: detected capacity change from 0 to 63 [ 290.690112][T14207] block nbd4: NBD_DISCONNECT [ 290.701271][T14207] block nbd4: Disconnected due to user request. [ 290.712919][T14207] block nbd4: shutting down sockets [ 290.742130][ C1] blk_print_req_error: 413 callbacks suppressed [ 290.742150][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.758047][ C1] buffer_io_error: 582 callbacks suppressed [ 290.758061][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 290.771765][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.781340][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 290.789138][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.798705][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 290.806507][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.816066][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 290.827373][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 290.837880][ T1598] Buffer I/O error on dev nbd4, logical block 0, async page read [ 290.845778][ T1598] Buffer I/O error on dev nbd4, logical block 1, async page read [ 290.853840][ T1598] Buffer I/O error on dev nbd4, logical block 2, async page read [ 290.861783][ T1598] Buffer I/O error on dev nbd4, logical block 3, async page read [ 290.872284][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 290.883167][ T1598] Buffer I/O error on dev nbd4, logical block 0, async page read [ 290.891709][ T1598] Buffer I/O error on dev nbd4, logical block 1, async page read [ 290.900126][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 290.911671][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 290.921759][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 290.931739][ T1598] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 290.941624][ T5621] ldm_validate_partition_table(): Disk read failed. [ 290.950367][ T5621] Dev nbd4: unable to read RDB block 0 [ 290.957472][ T5621] nbd4: unable to read partition table [ 290.968587][ T5621] ldm_validate_partition_table(): Disk read failed. [ 290.977117][ T5621] Dev nbd4: unable to read RDB block 0 [ 290.984547][ T5621] nbd4: unable to read partition table [ 291.692692][ T7332] [ 291.695068][ T7332] ============================================ [ 291.701224][ T7332] WARNING: possible recursive locking detected [ 291.707413][ T7332] syzkaller #0 Not tainted [ 291.711833][ T7332] -------------------------------------------- [ 291.717996][ T7332] kworker/u8:30/7332 is trying to acquire lock: [ 291.724238][ T7332] ffff88807a3c1158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 291.734118][ T7332] [ 291.734118][ T7332] but task is already holding lock: [ 291.741498][ T7332] ffff88807e8ab958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 291.751454][ T7332] [ 291.751454][ T7332] other info that might help us debug this: [ 291.759516][ T7332] Possible unsafe locking scenario: [ 291.759516][ T7332] [ 291.766957][ T7332] CPU0 [ 291.770235][ T7332] ---- [ 291.773508][ T7332] lock(&qdisc_xmit_lock_key#4); [ 291.778709][ T7332] lock(&qdisc_xmit_lock_key#4); [ 291.783735][ T7332] [ 291.783735][ T7332] *** DEADLOCK *** [ 291.783735][ T7332] [ 291.791877][ T7332] May be due to missing lock nesting notation [ 291.791877][ T7332] [ 291.800292][ T7332] locks held by kworker/u8:30/7332: 10, last CPU#1: [ 291.806882][ T7332] #0: ffff88807ba66140 ((wq_completion)bond7){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 291.817766][ T7332] #1: ffffc90005d67c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 291.830644][ T7332] #2: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820 [ 291.840230][ T7332] #3: ffffffff8eb5a240 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 291.850600][ T7332] #4: ffff88807a497228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 291.863230][ T7332] #5: ffff88807e8ab958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 291.873625][ T7332] #6: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 291.882542][ T7332] #7: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 291.892299][ T7332] #8: ffffffff8eb5a240 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 291.902221][ T7332] #9: ffff888067281228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 291.914844][ T7332] [ 291.914844][ T7332] stack backtrace: [ 291.920725][ T7332] CPU: 1 UID: 0 PID: 7332 Comm: kworker/u8:30 Not tainted syzkaller #0 PREEMPT(full) [ 291.920745][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.920756][ T7332] Workqueue: bond7 bond_alb_monitor [ 291.920778][ T7332] Call Trace: [ 291.920785][ T7332] [ 291.920792][ T7332] dump_stack_lvl+0xe8/0x150 [ 291.920815][ T7332] print_deadlock_bug+0x279/0x290 [ 291.920833][ T7332] __lock_acquire+0x24df/0x2cf0 [ 291.920857][ T7332] ? __pfx_netif_skb_features+0x10/0x10 [ 291.920883][ T7332] ? __lock_acquire+0x683/0x2cf0 [ 291.920905][ T7332] ? sch_direct_xmit+0x15f/0x4c0 [ 291.920924][ T7332] lock_acquire+0x106/0x350 [ 291.920944][ T7332] ? sch_direct_xmit+0x15f/0x4c0 [ 291.920965][ T7332] ? __bfs+0x153/0x290 [ 291.920988][ T7332] _raw_spin_lock+0x2e/0x40 [ 291.921011][ T7332] ? sch_direct_xmit+0x15f/0x4c0 [ 291.921031][ T7332] sch_direct_xmit+0x15f/0x4c0 [ 291.921053][ T7332] ? __pfx_sch_direct_xmit+0x10/0x10 [ 291.921078][ T7332] __dev_queue_xmit+0x177f/0x3820 [ 291.921098][ T7332] ? __dev_queue_xmit+0x29b/0x3820 [ 291.921117][ T7332] ? __pfx___dev_queue_xmit+0x10/0x10 [ 291.921131][ T7332] ? neigh_resolve_output+0x428/0x720 [ 291.921152][ T7332] ? eth_header+0x11b/0x200 [ 291.921168][ T7332] ? __asan_memcpy+0x40/0x70 [ 291.921193][ T7332] ? ip_finish_output2+0x3de/0x10b0 [ 291.921209][ T7332] ip_finish_output2+0xc4b/0x10b0 [ 291.921225][ T7332] ? ip_skb_dst_mtu+0x811/0xa50 [ 291.921240][ T7332] ? ip_finish_output2+0x3de/0x10b0 [ 291.921264][ T7332] ? ip_finish_output+0x40b/0x530 [ 291.921280][ T7332] ip_output+0x29f/0x450 [ 291.921294][ T7332] ? ip_output+0x5a/0x450 [ 291.921308][ T7332] iptunnel_xmit+0x626/0xd10 [ 291.921331][ T7332] ip_tunnel_xmit+0x195b/0x2040 [ 291.921353][ T7332] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 291.921372][ T7332] ? __gre_xmit+0x106/0x1a0 [ 291.921394][ T7332] erspan_xmit+0xb6a/0x1620 [ 291.921420][ T7332] ? __pfx_erspan_xmit+0x10/0x10 [ 291.921443][ T7332] ? __lock_acquire+0x683/0x2cf0 [ 291.921466][ T7332] dev_hard_start_xmit+0x2cd/0x830 [ 291.921494][ T7332] sch_direct_xmit+0x257/0x4c0 [ 291.921517][ T7332] ? __pfx_sch_direct_xmit+0x10/0x10 [ 291.921537][ T7332] ? __switch_to_asm+0x50/0x70 [ 291.921560][ T7332] __dev_queue_xmit+0x177f/0x3820 [ 291.921580][ T7332] ? __dev_queue_xmit+0x29b/0x3820 [ 291.921598][ T7332] ? __pfx___dev_queue_xmit+0x10/0x10 [ 291.921613][ T7332] ? rcu_is_watching+0x16/0xb0 [ 291.921626][ T7332] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 291.921644][ T7332] ? trace_kmem_cache_alloc+0x29/0xe0 [ 291.921660][ T7332] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 291.921678][ T7332] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 291.921694][ T7332] ? kmem_cache_alloc_node_noprof+0x1f7/0x620 [ 291.921715][ T7332] ? __alloc_skb+0x4d0/0x7a0 [ 291.921736][ T7332] ? alb_send_lp_vid+0x14e/0x550 [ 291.921757][ T7332] alb_send_lp_vid+0x348/0x550 [ 291.921777][ T7332] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 291.921802][ T7332] alb_send_learning_packets+0x12c/0x300 [ 291.921822][ T7332] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 291.921841][ T7332] ? bond_alb_monitor+0xf3/0x1820 [ 291.921862][ T7332] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 291.921883][ T7332] bond_alb_monitor+0x3d0/0x1820 [ 291.921900][ T7332] ? do_raw_spin_unlock+0xf5/0x200 [ 291.921919][ T7332] ? bond_alb_monitor+0xf3/0x1820 [ 291.921938][ T7332] ? __pfx_bond_alb_monitor+0x10/0x10 [ 291.921957][ T7332] ? rcu_is_watching+0x16/0xb0 [ 291.921972][ T7332] ? process_scheduled_works+0xa1a/0x14c0 [ 291.921989][ T7332] process_scheduled_works+0xa88/0x14c0 [ 291.922016][ T7332] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.922035][ T7332] ? assign_work+0x3cf/0x5d0 [ 291.922053][ T7332] worker_thread+0xa47/0xfb0 [ 291.922080][ T7332] kthread+0x38b/0x480 [ 291.922101][ T7332] ? __pfx_worker_thread+0x10/0x10 [ 291.922117][ T7332] ? __pfx_kthread+0x10/0x10 [ 291.922137][ T7332] ret_from_fork+0x514/0xb70 [ 291.922159][ T7332] ? __pfx_ret_from_fork+0x10/0x10 [ 291.922179][ T7332] ? __switch_to+0xc89/0x1420 [ 291.922198][ T7332] ? __pfx_kthread+0x10/0x10 [ 291.922218][ T7332] ret_from_fork_asm+0x1a/0x30 [ 291.922252][ T7332] [ 292.514279][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.529511][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.553450][T14241] hsr0: left promiscuous mode [ 292.665742][T14241] ip6tnl1: left allmulticast mode [ 292.686323][T14241] bond4: left promiscuous mode [ 292.717272][T14241] bridge0: left promiscuous mode [ 292.722410][T14241] bridge0: left allmulticast mode [ 292.732002][T14241] veth9: left allmulticast mode [ 292.740958][T14241] bond7: left promiscuous mode [ 292.746045][T14241] erspan1: left promiscuous mode [ 292.751511][T14241] bond7: left allmulticast mode [ 292.765158][T14241] erspan1: left allmulticast mode [ 292.841373][ T48] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.850541][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.859542][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.868625][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0