last executing test programs: 3.572412541s ago: executing program 4 (id=7982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xc, 0x100, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r5, r6, 0x0, 0xffffffff004) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.613704123s ago: executing program 1 (id=7994): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000), &(0x7f0000001380)=0xffffffffffffff46) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 2.441510231s ago: executing program 4 (id=7997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280), &(0x7f0000000000)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x5, 0x0, 0x4}, &(0x7f00000001c0)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r4}, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000060000000e000000"], 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x2000080, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3d00}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.248895287s ago: executing program 1 (id=7999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x8, {0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x1197}]}, 0x30}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800480000340000000000069078ac1414bbac1414aa8907faac1414bb070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="34020400"], 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}]}}}]}, 0x3c}}, 0x0) 2.111112708s ago: executing program 4 (id=8003): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/247, 0xf7}], 0x1) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="05000d002b000000080004007f000001080004007f00000114000b0000000000000000000000ffffffffffff14000b0000000000000000000000ffffac1e0101"], 0x6c}, 0x1, 0x0, 0x0, 0x4004801}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000198593b07da7bb00010000000000000000000a00000000000000000000000837ec9f0a24a290705ab7f5b967754b1715a82935dbe202165207862efb095aa9043b03d741d18e7c310dadb7ef7dbcd0293ee57b"], 0x24}}, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r8 = socket(0x1a, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="010101007f000001000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r12, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$kcm(0x11, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.916867752s ago: executing program 4 (id=8006): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000100000000000000000100000004000180"], 0x9}}, 0x20) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000500c80c5d7eda28d62efd7a2265db469b7008ec548ca30000000000000000080007814196d204cadabe0d64495eeaa000000000040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4008807}, 0x40000c6) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r7], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e0001000000000000000000000000003a00"/64, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.916478688s ago: executing program 1 (id=8007): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) 1.63293029s ago: executing program 1 (id=8010): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000206010200000000000000000000000005000500000000000900020073797a3000000000100003006269746961703a706f7274000500010007000000"], 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200281, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.485561301s ago: executing program 3 (id=8012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xfffffffffffffd86, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) 1.077719533s ago: executing program 1 (id=8015): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x43f}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x43}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2021, &(0x7f0000003700)={0x0, 0x989680}) 1.073350922s ago: executing program 3 (id=8016): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) (async) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000380)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) 947.796409ms ago: executing program 4 (id=8017): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x27, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@deltclass={0x44, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x4}, {0x6, 0xfff1}, {0x4, 0x7}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40805) close(r0) socket$tipc(0x1e, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) (async) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x4}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x27, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@deltclass={0x44, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x4}, {0x6, 0xfff1}, {0x4, 0x7}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40805) (async) close(r0) (async) 932.788234ms ago: executing program 2 (id=8018): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='}', 0x1}], 0x1}}], 0x1, 0x40090) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) setsockopt(r0, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xfc, 0x0, 0xda17, 0x2e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7800, 0x20, 0x40, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', r3, 0x10, 0x700, 0x3, 0x8001, {{0x41, 0x4, 0x1, 0x0, 0x104, 0x66, 0x0, 0x28, 0x2f, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0x4c, 0x91, 0x3, 0x4, [{@multicast1, 0x3}, {@remote, 0x6}, {@multicast1, 0x7fffffff}, {@private=0xa010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3}, {@loopback, 0x5}, {@remote, 0xb7}, {@rand_addr=0x4, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6a}]}, @ssrr={0x89, 0x13, 0x7d, [@broadcast, @broadcast, @multicast2, @broadcast]}, @generic={0x86, 0x2}, @ra={0x94, 0x4}, @noop, @generic={0x86, 0x2}, @lsrr={0x83, 0xf, 0x42, [@rand_addr=0x64010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xfc, 0x3, 0x7, [{@empty, 0x8001}, {@rand_addr=0x64010102}]}, @ssrr={0x89, 0x17, 0x4d, [@multicast2, @multicast1, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x4d, 0x3, [{0x7, 0x5, "044874"}, {0x1, 0x8, "7728b8ec20dd"}, {0x5, 0x11, "4a398841189049185540b74c1ecc9f"}, {0x2, 0x9, "2a4ef94996763a"}, {0x3, 0xe, "673cd7b789ded613d0533818"}, {0x2, 0x4, "e24e"}, {0x7, 0xe, "57b4b802bfc51dcedf2cb05b"}]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @empty}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x4e20, @loopback}, 'lo\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000010000104000000000000000000000000d5e4b48c3a012a2b269777a37a0989993087557da3ffb4438c91a1f3656aeb5143b1acd21e5e80a76d09fcb9899953fa9388f8234a610d1ed94b062996642c0c2312e89c68447fd08a75ee4c4fba6f1b3d12b1a0a06d979d4a1ad06af0ffbdccad5df2361e65387cd0b05484607d334ad31f12a49b6df8ce995ff214fcf1057cd4e612efff52e8614d927a6a24857315c91e9d8d6b48ef63738304b38d9c5602087bd7c9171773adc544ee61659a013440eb3ce6e36a", @ANYRES32=0x0, @ANYBLOB="000000001cebc6c7"], 0x30}, 0x1, 0x0, 0x0, 0x4c814}, 0x11) 888.375123ms ago: executing program 1 (id=8019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000001c0)={0x0, 'veth1_vlan\x00', 0x3}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/32, 0x20, 0x0, &(0x7f00000002c0)=""/204, 0xcc}, &(0x7f0000000400)=0x40) listen(r8, 0xb) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff0200000000000000000000000000014e2000004e300003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x8890}, 0x48000) 888.090798ms ago: executing program 0 (id=8020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca0100000000000000c644e801f17579bac767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d820278c4c3fda817aeb17be0cca599b7c4bf6350dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac428b986c49c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c3893700152cdca1a4a045b3645b827c989b6a42f3a19d7df9b6c176a209afe66b38ab5a44bffc22ff89f0f03345e2f83f38b01df7ad086b462aad68f9fdf167f53fac61f511bf206de4eaf6d3eabde1bbe1077c3df5ff031bb8e9fc7f562c68e71db1dc7e61eb73a7b068ed9782ab069743d99dfe6209bd936d3e706df924e7043c5a66b730b6c64b6df44ad36788bd93ac57fd67baf927ec64f9ba759e7d4ed9bcf1a33ca39864d3bde66ad03a491ddfd17a3189ad7340ef90306e8dca300131219a55bbbd21289cf14fe40ef8fad89488df3503a766a8edf43bf816f4a5f0d8b1a0c183575a1589994054af2338e49a18186b94de6151107353eccd2817a075f9c4da88c31af5af5c981c6d72edb4df8b352a7d339e903a81b3c4eb51d8a286d0505cf8ee7c0daba3c2beb61865ee571a16cfb00e99088c8236964c798972daa234a0f055e33ea334d85a01d6f53da316813ea458430671b5eb59007a3e0a359aeb67a512576c942d187e5e9a905b18a303303e05266ecd0ab77f0ef4ae42d4c8d21c65fcedc6876ff461de2e2fa8c262b489edf06065535cb58820cfc9d3c1a93976d085a70000"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xa0001f98, 0x15, 0x0, &(0x7f0000000280)="4c1b84bdac37f4451b20a3066494677ee389d422a1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x37, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x45}}) 883.149699ms ago: executing program 3 (id=8021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) (async, rerun: 32) close(r1) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c000100706105006f6164001400028008000340000000e108000240000000050900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x21, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000900edf981b4000052ab909ac4593be7a3c4a31c8a81e951c2e882b0e21c83ec5e1b50791fbe0f1d5c816eb7b74a5441", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000004b340700000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095000000000000001838000004000000000000000000000018490000f8ffffff0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 774.057282ms ago: executing program 2 (id=8022): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x3}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x800, 0x45417}}, 0x20}}, 0x0) 683.746421ms ago: executing program 0 (id=8023): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100)={'rose0', 0x32, 0x36}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) 683.393877ms ago: executing program 3 (id=8024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r0], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x8888) 621.145603ms ago: executing program 2 (id=8025): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000007c0), 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0x2f}, {0xffffffffffffffc6, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x0, 0x3b, @broadcast}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0x2f}, {0xffffffffffffffc6, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x0, 0x3b, @broadcast}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x70bd2d, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xfffffffc, 0x4) 561.015373ms ago: executing program 0 (id=8026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x2, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x51) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x7}, "f9372a4a86b62b63", "950e57c18b2d82b0da4bdbe9e5acab0c9e74473626d409b6ff0ea138284f40b3", "e27216ae", "afd5bfd16b7402a3"}, 0x38) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 448.826369ms ago: executing program 3 (id=8027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000a40)={r5, 0x9, 0x1, "9cb458bfc8df609f8959c3af3f7e62dda7ee34bde4999d04db85ce9ba2c2a043a4e7e3cf86011b2f38b350b2921bae9090378eb8e71be9af2c6c7a295cd9e106003f01ff964fc63f18cb2e1e58382dc18da5d21f9418e3690a3684bb6255e07d637340f64dfd72b8aaebda683cbb986a33bb7b0cfb190859ed5bafee13678dd04eca0128e5e84338663d"}) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) (async) r6 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="cc002f80080001000b0000000800010029a80000a00003803000038008000200000000000c0004000201aaaaaaaaaaaa08000200000000000600010003000000080002000000000005000200000000000c00038006000300a1aa00000c000500060000000000000008000400050000000c000500ffffff7f000000002000038006000100000000000c0004000202aaaaaaaaaaaa06000300535500000c000500c2db0000000000000c00050005000000000000000c0002000202aaaaaaaaaaaa0c0002000203aaaaaaaaaaaa08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="0c4017003bf201000000002e414a91e17a78a566dba9e4f5e669b0993c823bf638773584bcd94a7fc9df632a30ad33c25c5ada110634bbcb7dfc01ae36b469cae57a9bc71a5b151ba6819ece3d2b73c3b06e0000000019aae3e1cfbee49b633c7e9254f9da5d4c5def2b393a9bb8b7d7125ba35658b38b9bf9ce9b99b38e924563b6b97cabf2640d410b72d6e7f9382b6f0ff56449fc0776e0fb6dab20339adac6953c6c42282d1ccd857f7b94d3ec871503a2276a2321784a214c7e5828f81a3558854c578423ea02583f550b5b13652e9ed2d70e9edd5ffd18492e22490f3d9dc4ed7db4727b607cda"], 0x114}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x10}, {0x7, 0xfff3}, {0x8, 0x7}}, ["", "", "", "", ""]}, 0x24}}, 0x4004014) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r13, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0xfe}]}]}]}}]}, 0x44}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 447.90031ms ago: executing program 0 (id=8028): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x3) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000540), &(0x7f0000000740)=r3}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010052300000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000000108000240000000091800018008000100667764000c00028008000140000000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xf0}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x25dfdc00, {0x60, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0x5792b252}, 0xfffffffb, 0x1, 0x0, 0x3, 0x7, 0x12, 0x1, 0x1b, 0x0, 0x3d76d621, {0x0, 0x0, 0x0, 0x408000, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x8040) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) r9 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000040)=0x9f22) (async) bind$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r9, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) accept4(r9, 0x0, 0x0, 0x80800) 383.028215ms ago: executing program 2 (id=8029): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffff2, 0x80, 0x7, 0x10, 0x5, 0x3, 0xfffffffa, 0x3, 0x100, 0x7, 0x9, 0x1f, 0x1f, 0x5, 0x3ff, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) 317.879609ms ago: executing program 0 (id=8030): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x100800) connect$x25(r0, &(0x7f0000000100), 0x12) (async) connect$x25(r0, &(0x7f0000000100), 0x12) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000200)={0x43, 0x81, 0x7, 0xc, 0xca82}) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000200)={0x43, 0x81, 0x7, 0xc, 0xca82}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000240)) 317.178019ms ago: executing program 3 (id=8031): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x4805, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00000098c9650053a88da1a8c9603d8b5af47b8be94e395edd144b0c084be5daff98942da3af3c570256cb5eb98d014c23089601d3fd8a94eb49a15bb0e5e5b5ed82e36865fc3a25e7b5e65f699684c9ac210c2d715ad57bff4c626665c1a8ef0238308fc164067ec47dc5422ac98f62ca74a503e7d416df9ac207d6e05a0c3cc96af80292a1c0f539dcc49b94d2ca79", @ANYRES16=r7, @ANYBLOB="5b5e26bd7000fcdbdf2501000000080008007f000001"], 0x1c}}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'pim6reg\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x170bd2b, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x4000002) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) unshare(0x24060400) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005064f0f38afccf50e75a86d363c02900"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1e200000dcabc2c6c45de9a57495b93e1355a9579b944083593696d1efa82c1700bd0bff8545a497b0f1d9fe6823b38cb7141a59b02de95108a7f3193fdf39af06eb88bdfbffbf876cbef3132d12ab9b2bb134ea06428ef7310e4fad4578b98cb7ac16c4fd093b623d1822181cb2dab4a81b252b56f601f2c9b0000000000000000000", @ANYRES32=r11, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x80) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r13, 0x0, 0x3, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r13, {0x2, 0x4e20, @private=0xa010100}, 0x3, 0x2, 0x0, 0x3}}, 0x26) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000840)={{r3, &(0x7f0000000640)='})@/!\xce\xfd\x11\x8ayQ:\x00a\xc9\x1b^\x80?.\xfaA\xe5\xa7\x1e\x12\xc9\xb3X\xfe\xe95\xe9\f', 0x4000, &(0x7f0000000240)={@_ha_fsid={[0x8, 0x5]}, {0x0, 0xf, 0x7, 0x8000000000000000}}, 0xfdfffff2, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0x8}, {[0x2, 0x800, 0xfff, 0xe9b1]}, 0x7ff, 0x80, &(0x7f0000000500)=""/128}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r11], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 192.58373ms ago: executing program 2 (id=8032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket(0x26, 0x4, 0x6) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x19c, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5d, 0xa8, @random="24a0afc32ae06ebcedf7182660b960ce234835b12ff339066c0b88d5423b9ab1339bee9eceeefa5dde00ba7cb06218d21409b8e6e955381185c289c71b4e40f6c3209acc1ec25b469215bb02cd691c1bc56dba6e8fdc2905f4"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa5, 0xa8, @random="c0c84efd4b6bbfe5d1fbaca2e92ef855677bf35142556d623e8eaf6694f1082b06fc519c9167be7bcad1aa94f9afdf7394f602caa8f836e3809faa371bb825de2b454d2390fd3012d436adab4581ac18dd2402d97f168ec5d59c3e7f279004b3bf5d8968977cadbc4bfacf30fdd01ecb0af30e8b27d4371ae7c8dd01134e176c6a059fd26c5cec675ffb8e588c0cd560786d18be671b22427c75eb81ad26a0dbf3"}]}, 0x19c}}, 0x24004010) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000003800)=[{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000000)="ce8b", 0x2}, {&(0x7f0000000180)="43c74bcc5d9e41dbfd5e5425a1741669632c27b9ec54f6543ed9f0fe5e26243ef12bb5bb72dd24b7ffb7cb39074dea5755d20353da2fed3405cb5696d318b8bb569c55888c754217888e71610cfb60ab72b46295eeeb06a02a75e3a6b7cda9b91c8ca74a6f975c7e69ccf1e0136a1061fc30246263954a736ca89b3f89810d162a3d80b2beb487", 0x87}, {&(0x7f0000000240)="7dcf968f55a2195e9ee5fac209b4ec04191f7b5ce91630e0cd2ce8059f0295939e1e670b4d6fd1da8b0d44b406a4eff684c3981168ba23e422893f138fc7b95cc9c193e2c584978b223beb8e90b4715de42bab124c00223e9ce2d17bcd99e01340755be99ee76327372fcbbcef07ea95f95bdc4277afce67f52a4f156384b6915090ff06f2db6defc1bf8e065cd58639e5a56d4440876b56c5f5dfcc85081448dd", 0xa1}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="9986beb18738ee59747bf106cac5229f85a96162649e9e9da7e931207a7a70ab37311fcc59a4e986e2b8a067b0d374c9919063a8f7f6ebb8221da042a9f14719295a727db5af05344ca086e89c65b0ad37677b8e342d0c6a22ef7e264b193d2543396d02b74322e84b10954755edb0eb55053e31bcffef7fad9de402d9950625f233a3c5dd4a0aef", 0x88}], 0x5, &(0x7f0000002e80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x48, 0x117, 0x2, 0x34, "50ad0a0a865bce7942c471221b357398c29fb7c3756b96ea95bc421e67413f1602e90c0207e80807143cf6ac5287d904497da79d"}, @iv={0xa8, 0x117, 0x2, 0x94, "e451960c3d23480c61869923d4344af5816bc3607344ce4d83b49c9140d1dbdc547f4871fa758749a60dbd8475c3330aa5968f1787a08e5ba664bd7d6f8a9d391e4e0e68a7ae70662be3b517302b21cf6fb39ba150835ef4615532861cf3ef03b51166f7459fe3761a3a3baf8ec8aa9a674e679e5a7d6ba0f2da7fbac64b6fd96475faac3e4a7c807730ed684c3427181d8e6469"}], 0x108, 0x24000800}, {0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002fc0)="3b45c4e7f9de62bedda4651168077f37bc64e00a033513c790d6dd5137a657179b251009f87bbd83c27733e022bebf7b28faa9a6f42f4e079b9e28bde9c7923ed77ec0e51dab77b5d8e446b505f0688a03bc830ab703805e90c8a2e9944452144cd2cfc2dedfaa86c34251293c157232bd0e4a410dad45f2df9ba21eca9352f6a44d40d42447b7dce99df6a5128d5135597ba351a85cf40df3928f07baef11cab38608bf22e6e8011f248eb081cfb90073bcbb3e589f1ae0e0ba73e5b14e9e7e67c2fa163d50ee11b4a0b5a416afee76132d8af620d574b1", 0xd8}, {&(0x7f00000030c0)="d285d1b1af6bd94330f2bfe023ebf5633d6326ef35d7d13a32ff68dbc2c1b0191fe7538608374015669b4ad995464017538c1a72270f6d6590409ec7e9a09645cdc23b7c48c84cc78802f920cceaae771ffb29ee7140f5978ebea781f1d063fe1c7c876f6db3907637da213cb82a8a1c4e080205b88210ebc39c61ce6000e97a8d0af2a153e008fab4c7b7f3000c2eaca4c2294a7707807595a029ea9a325cac7e31054aa170b6439aef17b7cb4ead14e5e23cb66d2b17e50374db0a2c477f878b6154abb9769992a53bb55efbf6fb99a343b19c63528c8a513dca842947b309e0468e0cdc497f1e42d87c744f2bd6", 0xef}, {&(0x7f00000031c0)="12c1e24cb546afb2cf90bfec91f534ec87a964fe5dd498b4a54a37e409b285619d59513dc77fa7ee702f6bc12414b24bcbce9da53efc1de8179907e4901fcdba89a40a662ba16b982167cc8549f529b9835f120b8687a0ccef2c90943bfd94346096f9b4683fa107bdbf6c3bc313ed1aa86839edc16dc87b27f4b619e8818c81e5390621b7c72272d2bf929f5d9dbc5085db41fe46f7e4a1ff1fab0466fae39589295eb7c013fde9", 0xa8}, {&(0x7f0000003280)="d7e980e44a1a40e69c18896e115dacad11663dcf3cf181739c1a5d37c93e1f5369766bfdad757b8dececfc02aeec91e3118e358d7ccadfaf75faa349a9bc13efc398e42de796c6e836214f6931e851476c98dd45f5b9c0caea93c12bef1e6e53eacef50772fa08652f8d896af669ab795ce33607c13ebc03dfa1af7df4a8b23dca74106d", 0x84}, {&(0x7f0000003340)="0cd84687a28ed7714e8f4fd4968105cc4159617d55bd02f77ac25776d01b59070ccd6142debb86331c6d3aed0cd8a7fa7340967ca87540a12b9e830d8266e61002d2f7993261e8e0aa629f01761309dd400a27f36c3157eab566320869e007ee7046361d636c4c", 0x67}, {&(0x7f00000033c0)="b7b029d6c2adebae63d6388269e8c0414a34bd1e11d2f1ab7f4915f60aa768324e097b0d388b81db34a74816924e7d101082ba56ac5e35031252375906f749dd86c47400b22dfd9ed7af98647c4c92cc8b1b3f7f1e1ebfb76faf6a009dbc1f1d703ca757320dcd68acb6ef931c8283a418160e4b405b30812d2db142a7e9bc01ffb3d8442868347d1590fe460196f3f9e46f985b6df7339c7147eb3253a4a8396317541e11d7b9996397c56d1200b902992f1b248ee215c178a355d132522350ff361ee3dd3c54c11310f5ad4b4620ad626f", 0xd2}, {&(0x7f00000034c0)="0bf8d1142f314dbf78863550096f1fbf384ec9529f87a29053a1cf76514d42e2a7837e0745dc83ca5fce4685ffc3f28512559ce7a1b685d319ed4fc8e069ad36d5b9713604a328affa7cfc3fdf681eb50b875aea2051d3b676e22c453b23237672784348fc22700a486766929c03a090b27fecca34c50a199896a67b4214f9dbf32b", 0x82}, {&(0x7f0000003580)="5198832851f9c76eb1c9a97cd580cb6c98457f2193089d5487c19818a9e6f21ac74c40c994e9e1e853ffcdb3f74ade65f7ef62fa53326cfd614dbfb654217a183fead7e5a8812e72eb623a1c6c2d3fbbf0a7454268401e91feeae5f90ddae8ccc9adbe5a6c51dfde25d4e459cda883a3937440853df14607a819ec436ce14b7d075e59c5a303e36a31185085eb9a819123d900fd42fa46be7ee387cb109451f42d5e13dfe3f1a30cd3520e2401e5fb5c02de7b442226bc561b1cfa", 0xbb}], 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}], 0x2, 0x4000000) socket$unix(0x1, 0x5, 0x0) connect$can_bcm(r1, &(0x7f0000000380), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000640)={'sit0\x00', r6, 0xc5992fadc2a012fa, 0x10, 0x1, 0x5, {{0x43, 0x4, 0x3, 0x1c, 0x10c, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1c}, {[@end, @cipso={0x86, 0x25, 0x1, [{0x1, 0x7, "f46537f868"}, {0x7, 0xb, "d9ae12942986f69d26"}, {0x1, 0xd, "6035c632ad389bf7b55366"}]}, @ssrr={0x89, 0xb, 0x2f, [@empty, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x0, [{@remote, 0xa}]}, @cipso={0x86, 0x3c, 0x3, [{0x5, 0x12, "0f6fda15eb6ca3a48c1e0e4154064b41"}, {0x1, 0xa, "7ec4e98b505d72c1"}, {0x2, 0xb, "67805f4b8837e2541a"}, {0x5, 0x3, "db"}, {0x1, 0xc, "be9749ae25a2c505ffa4"}]}, @cipso={0x86, 0x79, 0x3, [{0x1, 0xa, "6c6884613084e9cb"}, {0x2, 0xd, "e3f7d475a7d13e107f9d5c"}, {0x2, 0x9, "5f50010c3fc0fe"}, {0x6, 0x12, "f40b2ff5133499df3d027ec710eb103d"}, {0x5, 0x12, "cfba4f7e1140de3a44825291fd3bd97a"}, {0x7, 0x4, '\vq'}, {0x0, 0x6, "19b59d42"}, {0x1, 0xe, "f5a6028e6d6203423ca75e12"}, {0x1, 0x6, "e3004ed3"}, {0x7, 0x11, "172fafccc6e4810d15255d9d14f816"}]}, @noop]}}}}}) 191.024134ms ago: executing program 0 (id=8033): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00', @broadcast}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="141100002f00010000000000fcdbdf250211f2800c0003000aac0f0000000000140001"], 0x1114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x44, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x35d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6], 0x7c}}, 0x20000000) 1.726269ms ago: executing program 4 (id=8034): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 0s ago: executing program 2 (id=8035): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) r2 = socket$inet6(0x10, 0x80002, 0x6) sendto$inet6(r2, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0xe1ce0e82fa4f86e9, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0xe1ce0e82fa4f86e9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r11) (async) close(r11) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r13 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000080)={'a', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) kernel console output (not intermixed with test programs): omiscuous mode [ 796.737557][T29136] veth9: entered allmulticast mode [ 796.953289][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6134'. [ 797.141144][T29155] ip6gre2: entered allmulticast mode [ 797.417771][T29181] xt_cgroup: invalid path, errno=-2 [ 797.419289][T29175] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6141'. [ 797.573630][T29188] netlink: 'syz.2.6144': attribute type 1 has an invalid length. [ 797.630992][T29197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6144'. [ 797.683362][T29188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 797.708173][T29195] nbd: must specify at least one socket [ 798.048198][T29222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6156'. [ 798.180247][T29230] xt_addrtype: ipv6 does not support BROADCAST matching [ 798.206779][T29229] syzkaller0: entered promiscuous mode [ 798.213141][T29229] syzkaller0: entered allmulticast mode [ 798.227785][T29229] tipc: Started in network mode [ 798.228753][T29232] netlink: 4780 bytes leftover after parsing attributes in process `syz.2.6160'. [ 798.233333][T29229] tipc: Node identity c2eaca1d82e9, cluster identity 4711 [ 798.256125][T29229] tipc: Enabled bearer , priority 0 [ 798.302894][T29229] tipc: Resetting bearer [ 798.322623][T29227] tipc: Resetting bearer [ 798.350330][T29227] tipc: Disabling bearer [ 798.368470][T29238] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 798.374649][T29238] syzkaller1: linktype set to 823 [ 798.558637][T29247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6165'. [ 798.570500][T29247] smc: net device veth1_to_team applied user defined pnetid S [ 798.717826][T29256] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6168'. [ 798.826051][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6172'. [ 798.847007][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6172'. [ 798.877569][T29264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6172'. [ 798.893923][T29264] nbd: must specify at least one socket [ 799.262929][T19652] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.278563][T19652] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.302576][T19652] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.327515][T19652] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.491703][T29303] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 799.651431][T29307] bridge0: port 3(batadv2) entered blocking state [ 799.685920][T29307] bridge0: port 3(batadv2) entered disabled state [ 799.705906][T29307] batadv2: entered allmulticast mode [ 799.725372][T29307] batadv2: entered promiscuous mode [ 800.033735][T29305] xfrm0 speed is unknown, defaulting to 1000 [ 800.054392][T29305] xfrm0 speed is unknown, defaulting to 1000 [ 800.103395][T29332] bridge10: entered allmulticast mode [ 800.126348][T19650] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 800.136093][T19650] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 800.261336][T29335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 800.400616][T29328] siw: device registration error -23 [ 800.409847][T29342] netlink: 'syz.2.6196': attribute type 24 has an invalid length. [ 800.856372][T29363] ªªªªªª: renamed from bridge_slave_0 (while UP) [ 800.948300][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.987158][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.024660][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.070041][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.123652][T29372] erspan0: entered allmulticast mode [ 801.559243][ T3216] block nbd3: Possible stuck request ffff8880277c7000: control (read@0,1024B). Runtime 180 seconds [ 801.570158][ T3216] block nbd3: Possible stuck request ffff8880277c71c0: control (read@1024,1024B). Runtime 180 seconds [ 801.581372][ T3216] block nbd3: Possible stuck request ffff8880277c7380: control (read@2048,1024B). Runtime 180 seconds [ 801.594225][ T3216] block nbd3: Possible stuck request ffff8880277c7540: control (read@3072,1024B). Runtime 180 seconds [ 801.783101][T29394] bond3: option xmit_hash_policy: invalid value (64) [ 801.805148][T29394] bond3 (unregistering): Released all slaves [ 801.886600][T29410] veth1_to_bond: entered allmulticast mode [ 801.915097][T29410] veth1_to_bond: left allmulticast mode [ 802.074951][T29416] netlink: 'syz.1.6213': attribute type 29 has an invalid length. [ 802.418669][T29438] __nla_validate_parse: 12 callbacks suppressed [ 802.418687][T29438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6220'. [ 802.615252][T29451] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 802.639775][T29451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6220'. [ 802.659591][T29463] netlink: 'syz.3.6224': attribute type 1 has an invalid length. [ 802.683435][T29463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.167407][T29499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6233'. [ 803.176710][T29499] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6233'. [ 803.238292][T29502] netlink: 'syz.1.6234': attribute type 3 has an invalid length. [ 805.464282][T29454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.698623][T29533] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 806.086702][T29553] netlink: 'syz.4.6245': attribute type 61 has an invalid length. [ 806.249610][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 806.270447][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 806.281343][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 806.291571][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 806.299720][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 806.533356][T29569] siw: device registration error -23 [ 806.927703][T29586] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6253'. [ 807.309625][T29612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6258'. [ 807.732061][T29628] netlink: 808 bytes leftover after parsing attributes in process `syz.4.6261'. [ 807.783572][T29632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6262'. [ 808.095199][T29647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.155573][T29647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.358089][T19614] Bluetooth: hci2: command tx timeout [ 808.488845][T29659] tipc: Enabled bearer , priority 0 [ 808.607892][T29659] syzkaller0: entered promiscuous mode [ 808.613416][T29659] syzkaller0: entered allmulticast mode [ 808.620037][T29659] tipc: Resetting bearer [ 808.631631][T29668] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 808.636857][T29559] xfrm0 speed is unknown, defaulting to 1000 [ 808.646293][T29657] tipc: Resetting bearer [ 808.749963][T29672] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6273'. [ 810.440505][T19614] Bluetooth: hci2: command tx timeout [ 810.541742][ T4992] udevd[4992]: worker [22499] /devices/virtual/block/nbd3 timeout; kill it [ 810.551479][ T4992] udevd[4992]: seq 26216 '/devices/virtual/block/nbd3' killed [ 811.146814][T29657] tipc: Disabling bearer [ 811.159837][T29559] xfrm0 speed is unknown, defaulting to 1000 [ 811.193721][T29680] : renamed from dummy0 [ 811.237111][ T7085] tipc: Node number set to 1624661004 [ 811.334155][T29685] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6274'. [ 811.421361][T29692] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6275'. [ 811.495999][T29694] ipvlan2: entered promiscuous mode [ 811.770058][T29709] netlink: 'syz.1.6279': attribute type 2 has an invalid length. [ 812.363305][T29559] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.371679][T29559] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.381924][T29559] bridge_slave_0: entered allmulticast mode [ 812.392279][T29559] bridge_slave_0: entered promiscuous mode [ 812.410949][T29559] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.424623][T29559] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.432816][T29559] bridge_slave_1: entered allmulticast mode [ 812.441536][T29559] bridge_slave_1: entered promiscuous mode [ 812.441954][T29747] xt_hashlimit: size too large, truncated to 1048576 [ 812.450073][T29737] syzkaller0: entered promiscuous mode [ 812.461217][T29737] syzkaller0: entered allmulticast mode [ 812.487566][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6287'. [ 812.505036][T29750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6287'. [ 812.525399][T29559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.535035][T19614] Bluetooth: hci2: command tx timeout [ 812.630424][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6290'. [ 812.641002][T29559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.712114][T29559] team0: Port device team_slave_0 added [ 812.728341][T29559] team0: Port device team_slave_1 added [ 812.830046][T29559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.851989][T29559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.912257][T29559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.944005][T29559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.966344][T29559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.053323][T29559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.139782][T29559] hsr_slave_0: entered promiscuous mode [ 813.147436][T29559] hsr_slave_1: entered promiscuous mode [ 813.153754][T29559] debugfs: 'hsr0' already exists in 'hsr' [ 813.160089][T29559] Cannot create hsr debugfs directory [ 813.385383][T29779] netlink: 'syz.4.6295': attribute type 1 has an invalid length. [ 813.629079][T29559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.685537][T29794] nbd: nbd3 already in use [ 813.692148][T29797] block nbd3: NBD_DISCONNECT [ 813.700738][T29797] block nbd3: Send disconnect failed -32 [ 813.709374][T29797] block nbd3: shutting down sockets [ 813.738193][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 813.748677][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 813.763991][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 813.774228][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 813.797017][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 813.807278][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 813.840234][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 813.850495][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 813.859398][ T3216] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 813.871859][ T3216] Buffer I/O error on dev nbd3, logical block 0, async page read [ 813.880144][ T3216] Buffer I/O error on dev nbd3, logical block 1, async page read [ 813.888656][ T3216] Buffer I/O error on dev nbd3, logical block 2, async page read [ 813.896975][ T3216] Buffer I/O error on dev nbd3, logical block 3, async page read [ 813.910100][ T3216] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 813.919282][ T3216] Buffer I/O error on dev nbd3, logical block 0, async page read [ 813.927313][ T3216] Buffer I/O error on dev nbd3, logical block 1, async page read [ 813.936204][ T3216] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 813.945659][ T3216] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 813.948542][T29559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.956612][ T3216] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 813.975434][ T3216] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 813.985453][T22499] ldm_validate_partition_table(): Disk read failed. [ 814.000576][T22499] Dev nbd3: unable to read RDB block 0 [ 814.008767][T22499] nbd3: unable to read partition table [ 814.051440][ T4992] udevd[4992]: worker [22499] terminated by signal 9 (Killed) [ 814.082347][ T4992] udevd[4992]: worker [22499] failed while handling '/devices/virtual/block/nbd3' [ 814.103871][T29810] lo: MTU too low for tipc bearer [ 814.129495][T29810] tipc: Enabling of bearer rejected, failed to enable media [ 814.170608][T15016] bridge_slave_1: left allmulticast mode [ 814.177005][T15016] bridge_slave_1: left promiscuous mode [ 814.182967][T15016] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.209391][T15016] bridge_slave_0: left allmulticast mode [ 814.225110][T15016] bridge_slave_0: left promiscuous mode [ 814.241613][T15016] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.329805][T15016] veth3: left allmulticast mode [ 814.356863][T15016] veth3: left promiscuous mode [ 814.367160][T15016] bridge3: port 1(veth3) entered disabled state [ 814.378043][T29829] nbd: socks must be embedded in a SOCK_ITEM attr [ 814.420370][T15016] dummy0: left allmulticast mode [ 814.423864][T29831] Cannot find set identified by id 1 to match [ 814.436151][T29831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6308'. [ 814.447954][T15016] dummy0: left promiscuous mode [ 814.454626][T15016] bridge7: port 1(dummy0) entered disabled state [ 814.564025][T29838] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6312'. [ 814.597383][T19614] Bluetooth: hci2: command tx timeout [ 814.797787][T15016] bond2 (unregistering): (slave bridge4): Releasing active interface [ 814.884820][T15016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.897496][T15016] bond0 (unregistering): (slave team0): Releasing backup interface [ 814.911991][T15016] bond0 (unregistering): Released all slaves [ 814.926069][T15016] bond1 (unregistering): Released all slaves [ 814.945434][T15016] bond2 (unregistering): Released all slaves [ 814.974208][T15016] bond3 (unregistering): Released all slaves [ 814.995762][T15016] bond4 (unregistering): Released all slaves [ 815.018634][T15016] bond5 (unregistering): Released all slaves [ 815.047003][T15016] bond6 (unregistering): Released all slaves [ 815.188553][T29840] tipc: Enabling of bearer rejected, failed to enable media [ 815.241074][T15016] tipc: Left network mode [ 815.341782][T29559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.709211][T29559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.848651][T29881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6321'. [ 816.047617][T29894] netlink: 'syz.1.6323': attribute type 1 has an invalid length. [ 816.181549][T29894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 816.698906][T15016] hsr_slave_0: left promiscuous mode [ 816.704987][T15016] hsr_slave_1: left promiscuous mode [ 816.711478][T15016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.719762][T15016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.116632][T15016] team0 (unregistering): Port device team_slave_1 removed [ 817.135253][T15016] team0 (unregistering): Port device team_slave_0 removed [ 818.919446][T29887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.984593][T29559] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 819.023102][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.050301][T29559] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 819.078698][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.098197][T29559] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 819.120366][T29979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6330'. [ 819.122399][T29972] netlink: 'syz.2.6328': attribute type 1 has an invalid length. [ 819.131229][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.144443][T29977] netlink: 'syz.1.6330': attribute type 1 has an invalid length. [ 819.157245][T29559] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 819.172089][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.216210][T29977] bond4: entered promiscuous mode [ 819.221810][T29977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 819.510120][T29559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.566765][T29559] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.592527][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.599718][T19649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.638024][T30014] netlink: 'syz.2.6340': attribute type 12 has an invalid length. [ 819.664636][T15016] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.671814][T15016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.684829][T30016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6339'. [ 819.703977][T30012] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6338'. [ 819.711381][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6339'. [ 819.713587][T30012] netlink: 21 bytes leftover after parsing attributes in process `syz.4.6338'. [ 819.746904][T30012] netlink: 21 bytes leftover after parsing attributes in process `syz.4.6338'. [ 819.811396][T30016] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 819.861981][T30016] bond5 (unregistering): Released all slaves [ 820.097659][T29994] xfrm0 speed is unknown, defaulting to 1000 [ 820.139360][T29994] xfrm0 speed is unknown, defaulting to 1000 [ 820.149528][T30037] syzkaller1: entered promiscuous mode [ 820.470458][T30056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6350'. [ 820.897404][T30080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6358'. [ 820.910218][T29559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.922475][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6356'. [ 821.069035][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6359'. [ 821.104296][T30082] bridge2: port 1(veth9) entered blocking state [ 821.111119][T30082] bridge2: port 1(veth9) entered disabled state [ 821.118248][T30082] veth9: entered allmulticast mode [ 821.143157][T30082] veth9: entered promiscuous mode [ 821.151643][T30077] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6356'. [ 821.175787][T30080] bridge2: port 2(veth0_to_bond) entered blocking state [ 821.204452][T30080] bridge2: port 2(veth0_to_bond) entered disabled state [ 821.217848][T30080] veth0_to_bond: entered allmulticast mode [ 821.232030][T30080] veth0_to_bond: entered promiscuous mode [ 821.344902][T29559] veth0_vlan: entered promiscuous mode [ 821.383119][T29559] veth1_vlan: entered promiscuous mode [ 821.450927][T29559] veth0_macvtap: entered promiscuous mode [ 821.493803][T29559] veth1_macvtap: entered promiscuous mode [ 821.555466][T29559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.593136][T29559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.630314][T19654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.645870][T19654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.677885][T19654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.710159][T19654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.016777][T30107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.109463][T19649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.141813][T19649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.240483][T30107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.336292][T30107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.372885][T19654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.381153][T19654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.491166][T30107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.702896][T19652] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.818461][T19651] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.930755][T19643] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.036960][T19652] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.063525][T30166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 823.079611][T30166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 823.088099][T30166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 823.100789][T30166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 823.108705][T30166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 823.490420][T30191] netlink: 'syz.0.6387': attribute type 1 has an invalid length. [ 823.753691][T30209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.775282][T30211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.899772][T30220] xt_hashlimit: size too large, truncated to 1048576 [ 823.992439][T30225] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 824.073365][T30225] 0ªX¹¦Dö»: entered allmulticast mode [ 824.119045][T27621] IPVS: starting estimator thread 0... [ 824.125107][T30232] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 824.158213][T30231] bridge_slave_1: left allmulticast mode [ 824.165853][T30231] bridge_slave_1: left promiscuous mode [ 824.187123][T30231] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.225976][T30233] IPVS: using max 30 ests per chain, 72000 per kthread [ 824.241183][T30231] bridge_slave_0: left allmulticast mode [ 824.268828][T30231] bridge_slave_0: left promiscuous mode [ 824.289608][T30231] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.335200][T30243] netlink: 'syz.1.6401': attribute type 1 has an invalid length. [ 824.451940][T30165] xfrm0 speed is unknown, defaulting to 1000 [ 824.499468][T30165] xfrm0 speed is unknown, defaulting to 1000 [ 824.637936][T30262] netlink: 'syz.2.6403': attribute type 1 has an invalid length. [ 824.675305][T30262] netlink: 'syz.2.6403': attribute type 1 has an invalid length. [ 824.695479][T30262] netlink: 'syz.2.6403': attribute type 1 has an invalid length. [ 824.725387][T30262] netlink: 'syz.2.6403': attribute type 1 has an invalid length. [ 824.937128][T30271] syzkaller0: entered promiscuous mode [ 824.950650][T30271] syzkaller0: entered allmulticast mode [ 825.157010][T30166] Bluetooth: hci4: command tx timeout [ 827.241772][T30166] Bluetooth: hci4: command tx timeout [ 827.649069][T30287] __nla_validate_parse: 11 callbacks suppressed [ 827.649120][T30287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6413'. [ 827.786226][T30302] netlink: 'syz.3.6416': attribute type 1 has an invalid length. [ 827.826630][T30302] 8021q: adding VLAN 0 to HW filter on device bond10 [ 828.168877][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6422'. [ 828.222413][T30320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6422'. [ 828.466389][T30165] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.474507][T30165] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.477413][T30339] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 828.485060][T30165] bridge_slave_0: entered allmulticast mode [ 828.497445][T30165] bridge_slave_0: entered promiscuous mode [ 828.517049][T30165] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.538017][T30165] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.558865][T30165] bridge_slave_1: entered allmulticast mode [ 828.581436][T30165] bridge_slave_1: entered promiscuous mode [ 828.609091][T30346] sctp: [Deprecated]: syz.3.6430 (pid 30346) Use of int in maxseg socket option. [ 828.609091][T30346] Use struct sctp_assoc_value instead [ 828.684237][T30165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.701601][T30165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.718745][T30348] netlink: 'syz.2.6431': attribute type 9 has an invalid length. [ 828.765401][T30350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6431'. [ 828.831110][T30358] netlink: 'syz.3.6434': attribute type 1 has an invalid length. [ 828.903982][T30358] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 828.918705][T30165] team0: Port device team_slave_0 added [ 828.965418][T30361] can: request_module (can-proto-4) failed. [ 828.972896][T30165] team0: Port device team_slave_1 added [ 829.050857][T30372] netlink: 'syz.3.6436': attribute type 1 has an invalid length. [ 829.058236][T30165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.075059][T30165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.124135][T30374] netlink: 'syz.3.6436': attribute type 1 has an invalid length. [ 829.150659][T30165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.182850][T30165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.195853][T30165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.257218][T30165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.317132][T19614] Bluetooth: hci4: command tx timeout [ 829.389382][T30165] hsr_slave_0: entered promiscuous mode [ 829.420805][T30165] hsr_slave_1: entered promiscuous mode [ 829.434562][T30165] debugfs: 'hsr0' already exists in 'hsr' [ 829.449385][T30165] Cannot create hsr debugfs directory [ 829.737771][T30407] xt_ecn: cannot match TCP bits for non-tcp packets [ 829.764135][T30165] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 829.778474][T30165] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 829.797234][T30165] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.894936][T30165] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 829.904907][T30165] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 829.915011][T30165] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.000898][T30410] netlink: 'syz.0.6445': attribute type 1 has an invalid length. [ 830.011829][T30165] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 830.016078][T30410] netlink: 'syz.0.6445': attribute type 11 has an invalid length. [ 830.024583][T30165] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 830.030343][T30410] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6445'. [ 830.043590][T30165] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.117658][T30165] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 830.127657][T30165] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 830.137966][T30165] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.217951][T30413] syzkaller0: entered promiscuous mode [ 830.224181][T30413] syzkaller0: entered allmulticast mode [ 831.395844][T19614] Bluetooth: hci4: command 0x0419 tx timeout [ 832.190202][T30388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.216771][T30165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 832.229018][T30165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 832.238128][T30165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 832.295008][T30165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.321676][T30165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 832.392379][T30165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.427616][T30165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 832.460490][T30165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.965180][T30457] h: entered promiscuous mode [ 832.979476][T30456] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6456'. [ 833.007460][T30165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.098323][T30165] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.128913][T19643] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.136085][T19643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.197841][T30461] syzkaller0: entered promiscuous mode [ 833.209542][T30461] syzkaller0: entered allmulticast mode [ 833.219478][T30464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6458'. [ 833.239635][T19643] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.246794][T19643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.478696][T19614] Bluetooth: hci4: command 0x0419 tx timeout [ 835.698997][T30472] tipc: Started in network mode [ 835.704141][T30472] tipc: Node identity 0a94a4284ab9, cluster identity 4711 [ 835.712377][T30472] tipc: Enabled bearer , priority 0 [ 835.810252][T30472] tipc: Disabling bearer [ 835.870492][T30487] sch_fq: defrate 0 ignored. [ 836.002578][T30496] xt_time: unknown flags 0xf4 [ 836.192607][T30507] netlink: ct family unspecified [ 836.211174][T30507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.341993][T30514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6472'. [ 836.353571][T30514] block nbd3: Unsupported socket: should be TCP or UNIX. [ 836.378842][T30515] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6473'. [ 836.593230][T30525] veth0: entered promiscuous mode [ 836.607611][T30525] netlink: 'syz.0.6475': attribute type 21 has an invalid length. [ 836.615595][T30525] IPv6: NLM_F_CREATE should be specified when creating new route [ 836.625372][T30525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 836.632661][T30525] IPv6: NLM_F_CREATE should be set when creating new route [ 836.639921][T30525] IPv6: NLM_F_CREATE should be set when creating new route [ 836.647181][T30525] IPv6: NLM_F_CREATE should be set when creating new route [ 836.663652][T30528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6476'. [ 836.680485][T30528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6476'. [ 836.690280][T30525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6475'. [ 836.704562][T30528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6476'. [ 836.721912][T30528] netlink: 780 bytes leftover after parsing attributes in process `syz.1.6476'. [ 836.733565][T30525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6475'. [ 836.799489][T30524] veth0: left promiscuous mode [ 836.909057][T30533] sctp: [Deprecated]: syz.3.6477 (pid 30533) Use of int in max_burst socket option. [ 836.909057][T30533] Use struct sctp_assoc_value instead [ 837.055639][T30165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.209014][T30549] syzkaller1: entered promiscuous mode [ 837.231563][T30549] syzkaller1: entered allmulticast mode [ 837.691418][T30165] veth0_vlan: entered promiscuous mode [ 837.719953][T30165] veth1_vlan: entered promiscuous mode [ 837.850834][T30165] veth0_macvtap: entered promiscuous mode [ 837.866761][T30165] veth1_macvtap: entered promiscuous mode [ 837.916927][T30165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.941394][T30581] netlink: 'syz.1.6486': attribute type 12 has an invalid length. [ 837.953064][T30165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.987201][T15016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.004804][T15016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.021495][T15016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.053003][T15016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.169660][T19651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.202584][T19651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.279831][T15016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.307080][T15016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.133050][T30166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 839.149278][T30166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 839.158276][T30166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 839.171157][T30166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 839.185680][T30166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 839.294578][T30651] netlink: 'syz.4.6506': attribute type 1 has an invalid length. [ 839.303757][T30651] __nla_validate_parse: 2 callbacks suppressed [ 839.303771][T30651] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6506'. [ 839.344350][T30651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6506'. [ 839.692513][T30664] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 840.429114][T30698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6519'. [ 840.460304][T30698] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6519'. [ 840.481019][T30698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6519'. [ 840.501399][T30698] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6519'. [ 840.520093][T30698] netlink: 'syz.1.6519': attribute type 3 has an invalid length. [ 840.543423][T30701] netlink: 'syz.1.6519': attribute type 1 has an invalid length. [ 840.560485][T30698] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6519'. [ 840.580920][T30701] ipvlan0: mtu less than device minimum [ 840.627399][T30640] xfrm0 speed is unknown, defaulting to 1000 [ 840.643041][T30703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6521'. [ 840.658769][T30640] xfrm0 speed is unknown, defaulting to 1000 [ 840.897555][T30710] netlink: 'syz.1.6523': attribute type 1 has an invalid length. [ 841.031914][T30710] bond5: entered promiscuous mode [ 841.053695][T30710] 8021q: adding VLAN 0 to HW filter on device bond5 [ 841.120784][T30711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 841.132716][T30728] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6526'. [ 841.142355][T30711] bond5: (slave vti1): The slave device specified does not support setting the MAC address [ 841.160480][T30711] bond5: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 841.180012][T30711] bond5: (slave vti1): making interface the new active one [ 841.191019][T30711] vti1: entered promiscuous mode [ 841.212419][T30711] bond5: (slave vti1): Enslaving as an active interface with an up link [ 841.249182][T19614] Bluetooth: hci3: command tx timeout [ 841.249389][T30722] bridge1: entered promiscuous mode [ 841.261316][T30722] bridge1: entered allmulticast mode [ 841.448107][T30738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6530'. [ 841.571323][T30738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 841.588588][T30749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.004171][T30768] netlink: 'syz.2.6537': attribute type 1 has an invalid length. [ 842.070766][T30773] xt_hashlimit: size too large, truncated to 1048576 [ 842.126723][T30768] bond4: entered promiscuous mode [ 842.150204][T30768] 8021q: adding VLAN 0 to HW filter on device bond4 [ 842.254814][T30768] bond4: (slave bridge1): making interface the new active one [ 842.263674][T30768] bridge1: entered promiscuous mode [ 842.270912][T30768] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 842.317945][T30640] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.339227][T30640] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.363628][T30640] bridge_slave_0: entered allmulticast mode [ 842.386244][T30640] bridge_slave_0: entered promiscuous mode [ 842.413211][T30640] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.428439][T30640] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.468665][T30640] bridge_slave_1: entered allmulticast mode [ 842.497165][T30640] bridge_slave_1: entered promiscuous mode [ 842.582268][T30640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.609806][T30640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.760762][T30640] team0: Port device team_slave_0 added [ 842.778708][T30640] team0: Port device team_slave_1 added [ 842.844506][T30640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.852357][T30640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.895388][T30640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.910392][T30640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.918533][T30640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.959070][T30640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.264108][T30640] hsr_slave_0: entered promiscuous mode [ 843.276027][T30640] hsr_slave_1: entered promiscuous mode [ 843.283859][T30640] debugfs: 'hsr0' already exists in 'hsr' [ 843.290862][T30640] Cannot create hsr debugfs directory [ 843.328563][T19614] Bluetooth: hci3: command tx timeout [ 844.180355][T30640] bond0: (slave netdevsim1): Releasing backup interface [ 844.504104][T30870] veth1_to_bond: entered allmulticast mode [ 844.517523][T30870] __nla_validate_parse: 5 callbacks suppressed [ 844.517537][T30870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6567'. [ 844.553394][T30868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6565'. [ 844.591253][T30870] veth1_to_bond (unregistering): left allmulticast mode [ 844.605423][T30868] block nbd0: reconnected socket [ 844.628888][T30868] netlink: 'syz.2.6565': attribute type 1 has an invalid length. [ 844.661457][T30870] bond0: (slave bond_slave_1): Releasing backup interface [ 844.680200][T30868] nbd: error processing sock list [ 845.232320][T30640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 845.279403][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.327144][T30640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 845.363493][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.382912][T30902] bridge_slave_1: left allmulticast mode [ 845.397446][T30166] Bluetooth: hci3: command tx timeout [ 845.404405][T30902] bridge_slave_1: left promiscuous mode [ 845.424806][T30902] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.441307][T30902] bridge_slave_0: left allmulticast mode [ 845.448539][T30902] bridge_slave_0: left promiscuous mode [ 845.454451][T30904] IPv6: NLM_F_CREATE should be specified when creating new route [ 845.464913][T30902] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.593070][T19614] block nbd0: Receive control failed (result -32) [ 845.604283][T30640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 845.664103][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.675491][T30913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.687659][T30640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 845.725477][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.758305][T30911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6574'. [ 845.925597][T30902] syzkaller0: entered promiscuous mode [ 845.933241][T30902] syzkaller0: entered allmulticast mode [ 846.145616][T30942] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6577'. [ 847.481743][T19614] Bluetooth: hci3: command tx timeout [ 848.670355][T30640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.745662][T30640] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.788498][T19643] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.795651][T19643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.852062][T19643] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.859253][T19643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.935047][T30961] netlink: 'syz.2.6583': attribute type 4 has an invalid length. [ 849.038550][T30965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6584'. [ 849.079199][T30970] netlink: 'syz.4.6586': attribute type 1 has an invalid length. [ 849.088076][T30968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6585'. [ 849.127532][T30974] netlink: 'syz.4.6586': attribute type 1 has an invalid length. [ 849.552265][T30998] netlink: 'syz.1.6590': attribute type 1 has an invalid length. [ 849.689778][T30997] bond6: (slave geneve2): making interface the new active one [ 849.699713][T30997] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 849.736630][T19649] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.756040][T19649] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.819821][T19649] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.837153][T19649] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.853050][T15016] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xef [ 850.071274][T31017] sctp: [Deprecated]: syz.2.6593 (pid 31017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 850.071274][T31017] Use struct sctp_sack_info instead [ 850.434127][T31045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6600'. [ 850.470132][T31045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6600'. [ 850.544464][T31047] netlink: 'syz.4.6599': attribute type 2 has an invalid length. [ 850.553171][T31045] tipc: Enabled bearer , priority 0 [ 850.581685][T31045] syzkaller0: entered promiscuous mode [ 850.603350][T31045] syzkaller0: entered allmulticast mode [ 850.617724][T30640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.626223][T31054] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6601'. [ 850.639339][T31045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 850.678587][T31060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6603'. [ 850.720241][T31045] tipc: Resetting bearer [ 850.746886][T31044] tipc: Resetting bearer [ 850.823047][T31044] tipc: Disabling bearer [ 850.935428][T30640] veth0_vlan: entered promiscuous mode [ 850.994538][T30640] veth1_vlan: entered promiscuous mode [ 851.032093][T31076] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6606'. [ 851.072494][T31076] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6606'. [ 851.138589][T30640] veth0_macvtap: entered promiscuous mode [ 851.178865][T30640] veth1_macvtap: entered promiscuous mode [ 851.240910][T30640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.260884][T30640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.281887][T19643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.311023][T19643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.340966][T19643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.368891][T19643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.537942][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6612'. [ 851.571045][T19643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.588307][T19643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.617029][T31093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6612'. [ 851.671340][T19650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.689128][T19650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.873044][T31112] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 852.098949][T31128] netlink: 'syz.3.6621': attribute type 39 has an invalid length. [ 852.540946][T31157] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6623'. [ 854.864578][T31114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 855.065395][T31172] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.6632'. [ 855.118313][T31172] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 855.155570][T31172] 0ªX¹¦Dö»: entered allmulticast mode [ 856.767956][T19614] Bluetooth: hci0: command 0x0406 tx timeout [ 858.005338][T31181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.422465][T31242] bridge0: port 3(macsec1) entered blocking state [ 858.443117][T31242] bridge0: port 3(macsec1) entered disabled state [ 858.459306][T31242] macsec1: entered allmulticast mode [ 858.491434][T31242] macsec1: left allmulticast mode [ 858.497255][T15016] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xef [ 858.937303][T31273] __nla_validate_parse: 3 callbacks suppressed [ 858.937321][T31273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6658'. [ 858.940683][T31270] tipc: Enabling of bearer rejected, failed to enable media [ 859.118598][T31281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6661'. [ 859.264046][T31286] netlink: 'syz.0.6662': attribute type 1 has an invalid length. [ 859.267853][T31287] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6663'. [ 859.282516][T31286] netlink: 'syz.0.6662': attribute type 2 has an invalid length. [ 859.283082][T31286] xt_hashlimit: size too large, truncated to 1048576 [ 859.283314][T31286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6662'. [ 859.318389][T31287] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6663'. [ 859.638829][T31299] netlink: 'syz.4.6668': attribute type 12 has an invalid length. [ 859.658003][T31299] netlink: 'syz.4.6668': attribute type 29 has an invalid length. [ 859.691269][T31299] netlink: 'syz.4.6668': attribute type 7 has an invalid length. [ 859.714657][T31299] netlink: 'syz.4.6668': attribute type 39 has an invalid length. [ 859.755506][T31310] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6670'. [ 859.854820][T31299] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6668'. [ 859.972515][T31321] netlink: 512 bytes leftover after parsing attributes in process `syz.0.6674'. [ 860.020328][T31327] openvswitch: netlink: Message has 8 unknown bytes. [ 860.131507][T31327] macvtap1: entered promiscuous mode [ 860.154620][T31327] macvtap1: entered allmulticast mode [ 860.179953][T31327] veth1_vlan: entered allmulticast mode [ 860.617808][T31364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6685'. [ 860.824377][T31380] netlink: 'syz.2.6691': attribute type 5 has an invalid length. [ 860.897100][T31384] : renamed from bond0 (while UP) [ 860.924289][T31384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6692'. [ 860.941561][T31384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.979447][T31384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.173018][T31395] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 861.208498][T19650] nci: nci_ntf_packet: unknown ntf opcode 0x132 [ 861.268130][T31397] bond0: entered promiscuous mode [ 861.273773][T31397] bond0: entered allmulticast mode [ 861.310375][T31397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.478963][T31420] netlink: 'syz.1.6702': attribute type 1 has an invalid length. [ 861.489867][T31419] netlink: 'syz.1.6702': attribute type 1 has an invalid length. [ 861.541637][T31419] bond7: (slave bridge4): making interface the new active one [ 861.550177][T31419] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 861.572625][T31421] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 861.582785][T31421] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 862.998247][T27620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.008350][T27620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.017006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.010595][T31390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 864.023997][T31430] netlink: 'syz.1.6705': attribute type 1 has an invalid length. [ 864.037576][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.048781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.209423][T31493] sctp: [Deprecated]: syz.1.6716 (pid 31493) Use of int in max_burst socket option. [ 864.209423][T31493] Use struct sctp_assoc_value instead [ 864.276232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.459612][ T29] audit: type=1804 audit(1782726300.649:15): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6720" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1119 res=1 errno=0 [ 864.545244][ T29] audit: type=1800 audit(1782726300.649:16): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6720" name="cgroup.controllers" dev="tmpfs" ino=1119 res=0 errno=0 [ 864.573044][T31516] syzkaller0: entered promiscuous mode [ 864.592749][T31516] syzkaller0: entered allmulticast mode [ 864.611944][T31519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.619232][T31519] IPv6: NLM_F_CREATE should be set when creating new route [ 864.838826][T31535] netlink: 'syz.0.6726': attribute type 1 has an invalid length. [ 865.062767][T31535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.076775][T27623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.087601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.146853][T31536] bond1: (slave veth3): Enslaving as an active interface with a down link [ 865.272704][T31537] bond1: (slave veth0_to_bond): making interface the new active one [ 865.306824][T31537] veth0_to_bond: entered promiscuous mode [ 865.323571][T31537] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 865.564084][T27623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.593158][T31559] __nla_validate_parse: 12 callbacks suppressed [ 865.593175][T31559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6733'. [ 865.859911][T31564] sctp: [Deprecated]: syz.4.6733 (pid 31564) Use of int in max_burst socket option. [ 865.859911][T31564] Use struct sctp_assoc_value instead [ 866.064389][T31585] ip_vti0: entered promiscuous mode [ 866.081736][T31585] ip_vti0: entered allmulticast mode [ 866.123676][T31588] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6740'. [ 866.156448][T27623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.165618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.620817][T31602] IPVS: ip_vs_edit_dest(): server weight less than zero [ 866.631145][T27622] IPVS: starting estimator thread 0... [ 866.746190][T31606] IPVS: using max 33 ests per chain, 79200 per kthread [ 866.886973][T31612] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 866.897383][T31615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6748'. [ 866.903086][T31612] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6747'. [ 866.923431][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6745'. [ 866.952995][T31610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6745'. [ 867.071887][T31623] netlink: 'syz.2.6751': attribute type 20 has an invalid length. [ 867.109415][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6751'. [ 867.224688][T31627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6750'. [ 867.244092][T31623] netlink: 'syz.2.6751': attribute type 20 has an invalid length. [ 867.252566][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.261796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.263610][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6751'. [ 867.438230][T31643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6754'. [ 867.915158][T31669] vlan2: entered promiscuous mode [ 867.960718][T31669] geneve1: entered promiscuous mode [ 867.984184][T31669] vlan2: entered allmulticast mode [ 868.004134][T31669] geneve1: entered allmulticast mode [ 868.117313][T19650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.128094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.175434][T31684] xt_HMARK: spi-set and port-set can't be combined [ 868.211687][T31688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.282130][T31695] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 868.464615][T31706] netlink: 'syz.0.6768': attribute type 1 has an invalid length. [ 868.483453][T31706] netlink: 'syz.0.6768': attribute type 2 has an invalid length. [ 868.912477][T31726] netlink: 'syz.4.6773': attribute type 1 has an invalid length. [ 868.984640][T31730] netlink: 'syz.0.6775': attribute type 1 has an invalid length. [ 869.109115][T31732] bond3: (slave veth5): Enslaving as an active interface with a down link [ 869.119640][T31730] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 869.129989][T31721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 869.575625][T31764] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 869.937042][T31786] syzkaller0: entered promiscuous mode [ 869.960198][T31786] syzkaller0: entered allmulticast mode [ 870.601388][T31779] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 870.612044][T31779] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 870.669891][T31811] syzkaller0: entered promiscuous mode [ 870.685652][T31811] syzkaller0: entered allmulticast mode [ 870.702008][T31779] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 870.721324][T31811] tipc: Enabled bearer , priority 0 [ 870.749523][T31779] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 870.781225][T31811] tipc: Resetting bearer [ 870.815551][T31810] tipc: Resetting bearer [ 870.924463][T31810] tipc: Disabling bearer [ 871.029372][T31820] 8021q: adding VLAN 0 to HW filter on device bond4 [ 871.047069][T31779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 871.057873][T31779] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 871.198626][T31779] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 871.217924][T31779] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 871.283257][T31779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 871.306104][T31779] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 871.699007][T31851] veth1_to_bond: entered allmulticast mode [ 871.712639][T31849] veth1_to_bond: left allmulticast mode [ 871.769737][T31859] __nla_validate_parse: 6 callbacks suppressed [ 871.769772][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6805'. [ 871.965068][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6806'. [ 871.971544][T31867] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 872.204185][T31880] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 872.238647][T31886] net_ratelimit: 4 callbacks suppressed [ 872.238678][T31886] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 872.271722][T31890] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 872.646487][T31909] netlink: 'syz.4.6818': attribute type 3 has an invalid length. [ 872.681554][T31910] netlink: 'syz.4.6818': attribute type 3 has an invalid length. [ 872.758989][T18413] IPVS: starting estimator thread 0... [ 872.887548][T31920] IPVS: using max 30 ests per chain, 72000 per kthread [ 873.030377][T31935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6823'. [ 873.078163][T31935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6823'. [ 873.186386][T31933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6822'. [ 873.472788][T31959] netlink: 'syz.3.6829': attribute type 1 has an invalid length. [ 873.832315][T31975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6831'. [ 873.971863][T31984] netlink: 'syz.2.6835': attribute type 1 has an invalid length. [ 874.022752][T31986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6835'. [ 874.244061][T31999] tipc: Enabled bearer , priority 0 [ 874.262261][T31999] syzkaller0: entered promiscuous mode [ 874.284137][T31999] syzkaller0: entered allmulticast mode [ 874.322875][T31999] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 874.420471][T31999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 874.424739][T32010] SET target dimension over the limit! [ 874.508047][T31999] tipc: Resetting bearer [ 874.567824][T31998] tipc: Resetting bearer [ 874.622563][T32019] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6845'. [ 874.719703][T31998] tipc: Disabling bearer [ 874.980771][T32038] tipc: Enabling not permitted [ 874.987571][T32037] lo speed is unknown, defaulting to 1000 [ 875.006957][T32038] tipc: Enabling of bearer rejected, failed to enable media [ 875.048091][T32037] lo speed is unknown, defaulting to 1000 [ 875.067459][T32037] lo speed is unknown, defaulting to 1000 [ 875.068083][T32040] syzkaller1: entered promiscuous mode [ 875.100904][T32040] syzkaller1: entered allmulticast mode [ 875.121895][T32037] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 875.173651][T32037] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 875.214392][T32037] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 875.260917][T32037] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 875.428614][T32037] lo speed is unknown, defaulting to 1000 [ 875.480335][T32037] lo speed is unknown, defaulting to 1000 [ 875.517718][T32037] lo speed is unknown, defaulting to 1000 [ 875.551943][T32037] lo speed is unknown, defaulting to 1000 [ 875.583885][T32037] lo speed is unknown, defaulting to 1000 [ 875.613909][T32037] lo speed is unknown, defaulting to 1000 [ 875.648421][T32037] lo speed is unknown, defaulting to 1000 [ 875.660709][T32037] lo speed is unknown, defaulting to 1000 [ 875.699603][T32037] lo speed is unknown, defaulting to 1000 [ 876.054416][T32037] lo speed is unknown, defaulting to 1000 [ 876.506040][T19652] veth0_to_bond: left promiscuous mode [ 876.612782][T32112] syz_tun: entered allmulticast mode [ 876.917334][T32124] gretap0: entered promiscuous mode [ 876.927625][T32126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6866'. [ 876.955164][T32129] x_tables: duplicate underflow at hook 1 [ 876.986749][T32130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6866'. [ 877.528914][T32130] bond5: Invalid ad_actor_system MAC address. [ 877.538135][T32130] bond5: option ad_actor_system: invalid value (1) [ 877.969866][T32130] bond5 (unregistering): Released all slaves [ 879.418470][T32189] bridge2: entered promiscuous mode [ 879.459600][T32189] bridge2: entered allmulticast mode [ 879.544915][T32203] netlink: 'syz.0.6879': attribute type 1 has an invalid length. [ 879.741951][T32204] syzkaller1: entered promiscuous mode [ 879.757495][T32204] syzkaller1: entered allmulticast mode [ 879.808984][T32209] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 879.826038][T32209] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 879.858947][T32209] bond2: (slave ip6gre1): making interface the new active one [ 879.889081][T32209] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 879.910816][T32204] syzkaller1: left promiscuous mode [ 879.927820][T32204] syzkaller1: left allmulticast mode [ 880.071358][T32235] netlink: 'syz.1.6886': attribute type 9 has an invalid length. [ 880.091631][T32236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6885'. [ 880.153863][T32238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.194447][T32244] openvswitch: netlink: Tunnel attr 768 out of range max 16 [ 880.406505][T32247] syzkaller0: entered promiscuous mode [ 880.437034][T32247] syzkaller0: entered allmulticast mode [ 880.468901][T32250] veth0: entered promiscuous mode [ 880.669645][T32254] veth0: left promiscuous mode [ 880.945985][T32280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6897'. [ 882.551888][T32341] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6909'. [ 882.596860][T32341] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6909'. [ 882.730136][T32351] bridge3: entered promiscuous mode [ 882.740956][T32351] bridge3: entered allmulticast mode [ 882.767750][T32353] 8021q: VLANs not supported on ip6tnl0 [ 882.911109][T32363] netlink: 'syz.4.6913': attribute type 1 has an invalid length. [ 883.185549][T32363] bond5: entered promiscuous mode [ 883.199847][T32363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 883.219734][T32375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6913'. [ 883.242959][T32375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6913'. [ 883.360015][T32363] bond5: (slave bridge2): making interface the new active one [ 883.380952][T32363] bridge2: entered promiscuous mode [ 883.400538][T32363] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 883.728210][T32405] netlink: 'syz.4.6920': attribute type 12 has an invalid length. [ 883.995634][T32405] bond6: option primary_reselect: invalid value (255) [ 884.032337][T32405] bond6 (unregistering): Released all slaves [ 884.195197][T32431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6926'. [ 884.378570][T32436] pimreg3: entered allmulticast mode [ 884.552398][T32454] netlink: 'syz.2.6934': attribute type 10 has an invalid length. [ 884.619278][T32454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.654587][T32454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.717630][T32454] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 884.779366][T32454] bond0 (unregistering): Released all slaves [ 885.062382][T32470] syzkaller0: entered promiscuous mode [ 885.098047][T32470] syzkaller0: entered allmulticast mode [ 885.151196][T32483] block nbd0: Unsupported socket: should be TCP or UNIX. [ 885.197021][T32486] openvswitch: netlink: IPv4 tunnel dst address is zero [ 885.450262][T32503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6945'. [ 885.453877][T32498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6945'. [ 885.853674][T32520] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6952'. [ 885.873044][T32520] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6952'. [ 886.398654][T32540] syzkaller0: entered promiscuous mode [ 886.421261][T32540] syzkaller0: entered allmulticast mode [ 886.442053][T32539] tipc: Started in network mode [ 886.463401][T32539] tipc: Node identity 36cdae1c15e6, cluster identity 4711 [ 886.486039][T32545] netlink: 'syz.3.6958': attribute type 1 has an invalid length. [ 886.496730][T32539] tipc: Enabled bearer , priority 0 [ 886.642777][T32545] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 886.646480][T32539] tipc: Resetting bearer [ 886.772438][T32539] tipc: Disabling bearer [ 886.801170][T32554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6961'. [ 886.811691][T32525] xfrm0 speed is unknown, defaulting to 1000 [ 886.827542][T32525] xfrm0 speed is unknown, defaulting to 1000 [ 887.548702][T32593] netlink: 'syz.3.6971': attribute type 30 has an invalid length. [ 887.668967][T32525] lo speed is unknown, defaulting to 1000 [ 887.674510][T32595] __nla_validate_parse: 1 callbacks suppressed [ 887.674527][T32595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6974'. [ 887.702280][T32595] syzkaller0: entered promiscuous mode [ 887.708605][T32595] syzkaller0: entered allmulticast mode [ 887.728451][T32595] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 887.771605][T32592] syzkaller0: entered promiscuous mode [ 887.781243][T32592] syzkaller0: entered allmulticast mode [ 887.948417][T32604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6978'. [ 888.303204][T32629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6985'. [ 889.242964][T32669] sctp: [Deprecated]: syz.4.6996 (pid 32669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 889.242964][T32669] Use struct sctp_sack_info instead [ 889.575402][T32690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7001'. [ 889.663780][T32692] netlink: 'syz.3.7002': attribute type 13 has an invalid length. [ 889.697807][T32692] veth1_macvtap: left promiscuous mode [ 889.722792][T32692] macsec0: entered allmulticast mode [ 889.766366][T32697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7004'. [ 889.812163][T32700] sctp: [Deprecated]: syz.0.7005 (pid 32700) Use of int in max_burst socket option. [ 889.812163][T32700] Use struct sctp_assoc_value instead [ 890.075408][T32717] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7011'. [ 890.229920][T32727] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7013'. [ 890.552388][T32741] netlink: 'syz.1.7019': attribute type 1 has an invalid length. [ 890.616821][T32741] 8021q: adding VLAN 0 to HW filter on device bond8 [ 890.658127][T32746] netlink: 'syz.0.7020': attribute type 1 has an invalid length. [ 890.673033][T32746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7020'. [ 890.703376][T32746] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 891.214882][ T307] syzkaller0: entered promiscuous mode [ 891.254617][ T307] syzkaller0: entered allmulticast mode [ 891.267361][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7031'. [ 891.402754][ T321] netlink: 252 bytes leftover after parsing attributes in process `syz.3.7032'. [ 891.589650][ T328] netlink: 'syz.2.7034': attribute type 10 has an invalid length. [ 891.785501][ T334] netlink: ct family unspecified [ 891.815131][ T334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.974611][ T355] syzkaller0: entered promiscuous mode [ 891.981886][ T355] syzkaller0: entered allmulticast mode [ 892.113963][ T363] netlink: 'syz.2.7042': attribute type 30 has an invalid length. [ 892.828850][ T396] netlink: 'syz.4.7051': attribute type 19 has an invalid length. [ 892.998336][ T404] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 893.113680][ T410] openvswitch: netlink: Flow key attr not present in new flow. [ 893.223073][ T418] netlink: 'syz.1.7056': attribute type 1 has an invalid length. [ 893.362420][ T418] bond9: entered promiscuous mode [ 893.374242][ T418] 8021q: adding VLAN 0 to HW filter on device bond9 [ 893.437876][ T429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 893.457049][ T429] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 893.468726][ T429] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 893.493587][ T429] bond9: (slave ip6gre1): making interface the new active one [ 893.502167][ T429] ip6gre1: entered promiscuous mode [ 893.513175][ T429] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 893.552053][ T433] __nla_validate_parse: 4 callbacks suppressed [ 893.552067][ T433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7060'. [ 893.832115][ T455] netlink: 'syz.0.7066': attribute type 12 has an invalid length. [ 893.844798][ T455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7066'. [ 894.364785][ T497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7077'. [ 894.571097][ T504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7082'. [ 894.683893][ T513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 895.467805][T27622] IPVS: starting estimator thread 0... [ 895.586024][ T557] IPVS: using max 33 ests per chain, 79200 per kthread [ 895.792361][ T571] Bluetooth: MGMT ver 1.23 [ 896.091661][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7105'. [ 896.523472][ T605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7110'. [ 896.832287][ T626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 896.879983][ T629] tipc: Enabling of bearer rejected, failed to enable media [ 897.335144][ T647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7123'. [ 898.132643][ T679] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 898.167113][ T684] syzkaller1: entered promiscuous mode [ 898.227812][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7133'. [ 898.639004][ T708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7138'. [ 899.584565][ T751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7151'. [ 899.655210][T19614] block nbd3: Receive control failed (result -32) [ 899.683985][ T752] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 899.708751][T19614] block nbd7: Receive control failed (result -107) [ 899.709570][ T752] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 899.752332][ T756] netlink: 'syz.3.7154': attribute type 1 has an invalid length. [ 899.859284][ T761] nbd: couldn't find a device at index -2147352532 [ 900.575565][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7169'. [ 900.663141][ T806] bond3: entered promiscuous mode [ 900.671312][ T806] bond3: entered allmulticast mode [ 900.917996][ T826] netlink: 'syz.4.7173': attribute type 1 has an invalid length. [ 900.939154][ T826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7173'. [ 901.211606][ T839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7179'. [ 901.222389][ T839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7179'. [ 901.379329][ T847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7183'. [ 901.718727][ T870] nbd: nbd1 already in use [ 901.753305][ T870] block nbd1: NBD_DISCONNECT [ 901.786475][ T870] block nbd1: Send disconnect failed -32 [ 901.800398][ T870] block nbd1: shutting down sockets [ 901.836125][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7193'. [ 902.029689][T19675] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 902.047638][ T886] netlink: 'syz.1.7196': attribute type 1 has an invalid length. [ 902.346239][ T905] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 902.593057][ T917] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 902.782343][T19675] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 902.844807][T19675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.869341][T19675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.885096][T19675] bond0 (unregistering): (slave bond6): Releasing backup interface [ 902.903425][ T926] netlink: 'syz.2.7204': attribute type 1 has an invalid length. [ 902.907873][T19675] bond0 (unregistering): Released all slaves [ 902.938748][T19675] bond1 (unregistering): (slave veth3): Releasing active interface [ 902.958163][T19675] bond1 (unregistering): Released all slaves [ 903.006784][T19675] bond2 (unregistering): Released all slaves [ 903.043224][T19675] bond3 (unregistering): Released all slaves [ 903.062334][T19675] bond4 (unregistering): Released all slaves [ 903.080734][T19675] bond5 (unregistering): Released all slaves [ 903.110454][T19675] bond6 (unregistering): Released all slaves [ 903.130317][T19675] bond7 (unregistering): (slave veth5): Releasing active interface [ 903.142613][T19675] batadv0: entered promiscuous mode [ 903.149986][T19675] bond7 (unregistering): (slave batadv0): Releasing active interface [ 903.159308][T19675] bond7 (unregistering): Released all slaves [ 903.178112][T19675] bond8 (unregistering): Released all slaves [ 903.198277][T19675] bond9 (unregistering): Released all slaves [ 903.231240][T19675] bond10 (unregistering): Released all slaves [ 903.259219][ T888] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 903.303118][ T886] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 903.333267][ T899] veth0: entered promiscuous mode [ 903.397822][ T904] batadv_slave_1: entered promiscuous mode [ 903.404295][ T935] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7205'. [ 903.424204][ T904] batadv_slave_1: left promiscuous mode [ 903.444438][ T904] veth0: left promiscuous mode [ 903.562802][ T929] bond5: (slave gretap2): making interface the new active one [ 903.574575][ T929] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 903.590111][T19675] tipc: Disabling bearer [ 903.627033][T19675] tipc: Left network mode [ 903.908309][ T976] IPv6: addrconf: prefix option has invalid lifetime [ 903.958292][ T954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 904.042751][ T976] tipc: Enabling of bearer rejected, failed to enable media [ 904.434559][ T1001] netlink: 'syz.0.7214': attribute type 7 has an invalid length. [ 904.634869][ T1006] netlink: 576 bytes leftover after parsing attributes in process `syz.0.7214'. [ 905.782816][ T1066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7228'. [ 906.204435][T19675] batman_adv: batadv0: Removing interface: ipvlan2 [ 906.228688][T19675] batman_adv: batadv0: Removing interface: ipvlan3 [ 906.271740][T19675] hsr_slave_0: left promiscuous mode [ 906.288307][T19675] hsr_slave_1: left promiscuous mode [ 906.721931][T19675] team0 (unregistering): Port device team_slave_1 removed [ 906.765188][T19675] team0 (unregistering): Port device team_slave_0 removed [ 907.153472][ T1090] bridge1: entered promiscuous mode [ 907.164706][ T1090] bridge1: entered allmulticast mode [ 907.201287][ T1090] team0: Port device bridge1 added [ 907.219721][ T1097] bridge0: port 3(team0) entered blocking state [ 907.236340][ T1097] bridge0: port 3(team0) entered disabled state [ 907.253435][ T1097] team0: entered allmulticast mode [ 907.274202][ T1097] team_slave_0: entered allmulticast mode [ 907.290614][ T1097] team_slave_1: entered allmulticast mode [ 907.322666][ T1097] team0: entered promiscuous mode [ 907.336881][ T1097] team_slave_0: entered promiscuous mode [ 907.348345][ T1097] team_slave_1: entered promiscuous mode [ 907.367235][ T1097] bridge0: port 3(team0) entered blocking state [ 907.375457][ T1097] bridge0: port 3(team0) entered forwarding state [ 907.954017][T19675] IPVS: stop unused estimator thread 0... [ 908.119670][ T1165] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7245'. [ 908.152498][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7245'. [ 908.419892][ T1182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.453898][ T1184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.692535][ T1191] syzkaller0: entered promiscuous mode [ 908.727045][ T1191] syzkaller0: entered allmulticast mode [ 908.860722][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7254'. [ 908.904082][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7254'. [ 908.990674][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7257'. [ 909.012000][ T1216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7257'. [ 909.070805][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880693e1000: rx timeout, send abort [ 909.126549][ T1215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7257'. [ 909.272899][ T1225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7259'. [ 909.570970][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068d78000: rx timeout, send abort [ 909.579641][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880693e1000: abort rx timeout. Force session deactivation [ 909.832864][ T1250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7265'. [ 909.838892][ T1252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.889912][ T1250] netlink: 21 bytes leftover after parsing attributes in process `syz.4.7265'. [ 909.963206][ T1250] netlink: 21 bytes leftover after parsing attributes in process `syz.4.7265'. [ 909.996315][ T1252] netlink: 'syz.0.7267': attribute type 1 has an invalid length. [ 910.056335][ T1263] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 910.079332][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068d78000: abort rx timeout. Force session deactivation [ 910.094845][ T1247] syzkaller0: entered promiscuous mode [ 910.114396][ T1247] syzkaller0: entered allmulticast mode [ 910.619574][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.627154][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.672038][ T1287] netlink: 'syz.4.7276': attribute type 7 has an invalid length. [ 911.171290][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7284'. [ 911.252183][ T1322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7285'. [ 911.362708][ T1322] team0: Port device team_slave_0 removed [ 911.397608][ T1336] netlink: 'syz.1.7289': attribute type 3 has an invalid length. [ 911.580496][ T1342] can: request_module (can-proto-0) failed. [ 911.791225][ T1356] netlink: 81 bytes leftover after parsing attributes in process `syz.3.7295'. [ 911.905847][ T1357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7294'. [ 912.057885][ T1369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7297'. [ 912.270448][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7301'. [ 912.301255][ T1379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7301'. [ 912.349962][ T1384] netlink: 'syz.4.7302': attribute type 3 has an invalid length. [ 912.671928][ T1402] netlink: 'syz.2.7308': attribute type 12 has an invalid length. [ 913.011674][ T1417] x_tables: duplicate underflow at hook 1 [ 913.554436][ T1439] netlink: 'syz.3.7320': attribute type 10 has an invalid length. [ 913.565302][ T1439] macsec0: left allmulticast mode [ 913.574949][ T1439] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 914.517977][ T1495] netlink: 'syz.0.7336': attribute type 4 has an invalid length. [ 914.529401][ T1496] netlink: 'syz.0.7336': attribute type 4 has an invalid length. [ 915.160464][ T1540] __nla_validate_parse: 7 callbacks suppressed [ 915.160480][ T1540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7349'. [ 915.189497][ T1541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7349'. [ 915.309866][ T1549] netlink: 'syz.1.7351': attribute type 1 has an invalid length. [ 915.342070][ T1549] syz.1.7351: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 915.396324][ T1549] CPU: 1 UID: 0 PID: 1549 Comm: syz.1.7351 Not tainted syzkaller #0 PREEMPT(full) [ 915.396351][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.396363][ T1549] Call Trace: [ 915.396370][ T1549] [ 915.396378][ T1549] dump_stack_lvl+0xe8/0x150 [ 915.396409][ T1549] warn_alloc+0x24c/0x270 [ 915.396442][ T1549] ? stack_depot_save_flags+0x33/0x800 [ 915.396472][ T1549] ? __pfx_warn_alloc+0x10/0x10 [ 915.396501][ T1549] ? kasan_save_track+0x3e/0x80 [ 915.396517][ T1549] ? __kasan_kmalloc+0x93/0xb0 [ 915.396537][ T1549] ? xsk_setsockopt+0x52a/0x960 [ 915.396563][ T1549] ? do_sock_setsockopt+0x17c/0x1b0 [ 915.396592][ T1549] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 915.396610][ T1549] ? do_syscall_64+0x174/0x580 [ 915.396627][ T1549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.396656][ T1549] __vmalloc_node_range_noprof+0x12c/0x1730 [ 915.396713][ T1549] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 915.396743][ T1549] ? __kasan_kmalloc+0x93/0xb0 [ 915.396763][ T1549] ? __kmalloc_cache_noprof+0x32d/0x660 [ 915.396791][ T1549] ? __kmalloc_cache_noprof+0x150/0x660 [ 915.396821][ T1549] vmalloc_user_noprof+0xad/0xe0 [ 915.396849][ T1549] ? xskq_create+0xbf/0x170 [ 915.396876][ T1549] xskq_create+0xbf/0x170 [ 915.396906][ T1549] xsk_init_queue+0x8a/0xe0 [ 915.396936][ T1549] xsk_setsockopt+0x52a/0x960 [ 915.396961][ T1549] ? __fget_files+0x2a/0x420 [ 915.396982][ T1549] ? __pfx_xsk_setsockopt+0x10/0x10 [ 915.397007][ T1549] ? __pfx_aa_sk_perm+0x10/0x10 [ 915.397034][ T1549] ? aa_sock_opt_perm+0xff/0x1a0 [ 915.397060][ T1549] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 915.397084][ T1549] ? __pfx_xsk_setsockopt+0x10/0x10 [ 915.397109][ T1549] do_sock_setsockopt+0x17c/0x1b0 [ 915.397135][ T1549] __x64_sys_setsockopt+0x13d/0x1b0 [ 915.397157][ T1549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.397179][ T1549] do_syscall_64+0x174/0x580 [ 915.397198][ T1549] ? clear_bhb_loop+0x40/0x90 [ 915.397221][ T1549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.397239][ T1549] RIP: 0033:0x7feae679ce59 [ 915.397257][ T1549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.397273][ T1549] RSP: 002b:00007feae766a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 915.397292][ T1549] RAX: ffffffffffffffda RBX: 00007feae6a15fa0 RCX: 00007feae679ce59 [ 915.397306][ T1549] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 915.397318][ T1549] RBP: 00007feae6832e6f R08: 0000000000000004 R09: 0000000000000000 [ 915.397329][ T1549] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.397341][ T1549] R13: 00007feae6a16038 R14: 00007feae6a15fa0 R15: 00007ffd6cb69598 [ 915.397372][ T1549] [ 915.397410][ T1549] Mem-Info: [ 915.551244][ T1561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 915.573433][ T1549] active_anon:5753 inactive_anon:0 isolated_anon:0 [ 915.573433][ T1549] active_file:17 inactive_file:43002 isolated_file:0 [ 915.573433][ T1549] unevictable:768 dirty:61 writeback:0 [ 915.573433][ T1549] slab_reclaimable:12788 slab_unreclaimable:127695 [ 915.573433][ T1549] mapped:29284 shmem:1294 pagetables:3547 [ 915.573433][ T1549] sec_pagetables:0 bounce:0 [ 915.573433][ T1549] kernel_misc_reclaimable:0 [ 915.573433][ T1549] free:1287963 free_pcp:9912 free_cma:0 [ 915.573489][ T1549] Node 0 active_anon:23012kB inactive_anon:0kB active_file:68kB inactive_file:171800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117136kB dirty:244kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16432kB pagetables:14048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 915.573543][ T1549] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 915.579294][ T1561] IPv6: NLM_F_CREATE should be set when creating new route [ 915.602398][ T1549] Node 0 [ 915.607217][ T1561] IPv6: NLM_F_CREATE should be set when creating new route [ 915.626909][ T1549] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.626964][ T1549] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 915.627007][ T1549] Node 0 DMA32 free:1205528kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23012kB inactive_anon:0kB active_file:68kB inactive_file:171800kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2551440kB mlocked:0kB bounce:0kB free_pcp:33776kB local_pcp:16392kB free_cma:0kB [ 915.627065][ T1549] lowmem_reserve[]: 0 0 0 0 0 [ 915.627105][ T1549] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.627159][ T1549] lowmem_reserve[]: 0 0 0 0 0 [ 915.627199][ T1549] Node 1 Normal free:3930964kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6044kB local_pcp:6044kB free_cma:0kB [ 915.627256][ T1549] lowmem_reserve[]: 0 0 0 0 0 [ 915.627295][ T1549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 915.627422][ T1549] Node 0 DMA32: 2301*4kB (UME) 1472*8kB (UME) 469*16kB (UME) 649*32kB (UM) 762*64kB (UME) 626*128kB (UME) 397*256kB (UM) 264*512kB (UM) 132*1024kB (UE) 10*2048kB (UME) 155*4096kB (U) = 1205476kB [ 915.627602][ T1549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 915.627709][ T1549] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 3*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3931016kB [ 915.627930][ T1549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.627948][ T1549] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 915.627965][ T1549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.627982][ T1549] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 915.627998][ T1549] 44309 total pagecache pages [ 915.628007][ T1549] 0 pages in swap cache [ 915.628015][ T1549] Free swap = 124996kB [ 915.628024][ T1549] Total swap = 124996kB [ 915.628033][ T1549] 2097051 pages RAM [ 915.628041][ T1549] 0 pages HighMem/MovableOnly [ 915.628050][ T1549] 427420 pages reserved [ 915.628058][ T1549] 0 pages cma reserved [ 915.946487][ T1573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7356'. [ 915.950369][ T1561] IPv6: NLM_F_CREATE should be set when creating new route [ 916.188405][ T1566] syzkaller1: entered promiscuous mode [ 916.222620][ T1566] syzkaller1: entered allmulticast mode [ 916.466067][ T1584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7360'. [ 917.032100][ T1618] netlink: 'syz.0.7373': attribute type 10 has an invalid length. [ 917.066161][ T1618] veth1_macvtap: left promiscuous mode [ 917.101670][ T1618] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 917.145028][ T1628] netlink: 'syz.0.7373': attribute type 12 has an invalid length. [ 917.177412][ T1626] netlink: 'syz.1.7372': attribute type 1 has an invalid length. [ 917.187129][ T1628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7373'. [ 917.274293][T19677] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.314930][T19677] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.334787][T19677] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.365166][T19677] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.505951][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7381'. [ 918.075384][ T1684] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 918.609804][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7396'. [ 918.736750][ T1720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7397'. [ 918.848176][ T1726] openvswitch: netlink: Key type 31 is not supported [ 918.883987][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7399'. [ 918.907080][ T1730] netlink: 'syz.0.7400': attribute type 4 has an invalid length. [ 919.574307][ T1759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7405'. [ 919.953659][ T1759] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 919.989105][ T1759] bond6 (unregistering): Released all slaves [ 920.257239][ T1785] netlink: 'syz.3.7409': attribute type 1 has an invalid length. [ 920.435446][ T1785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 920.560319][ T1798] bond2: (slave veth0_to_bond): making interface the new active one [ 920.610218][ T1796] __nla_validate_parse: 1 callbacks suppressed [ 920.610235][ T1796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7409'. [ 920.644357][ T1798] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 920.803911][ T1785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 920.820730][ T1785] bond2: (slave bond3): Enslaving as an active interface with a down link [ 921.025460][ T1828] netlink: 'syz.0.7420': attribute type 62 has an invalid length. [ 921.042481][ T1818] syzkaller0: entered promiscuous mode [ 921.051248][ T1832] netlink: 'syz.0.7420': attribute type 62 has an invalid length. [ 921.059748][ T1818] syzkaller0: entered allmulticast mode [ 921.262771][ T1844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.291262][ T1847] tc_dump_action: action bad kind [ 922.128029][ T1891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7439'. [ 922.138286][ T1891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7439'. [ 922.155809][ T1891] ipvlan3: entered promiscuous mode [ 922.237817][ T1898] veth1_to_bond: entered allmulticast mode [ 922.255185][ T1895] netlink: 'syz.4.7440': attribute type 7 has an invalid length. [ 922.267328][ T1898] veth1_to_bond: left allmulticast mode [ 922.323839][ T1895] netlink: 'syz.4.7440': attribute type 7 has an invalid length. [ 922.352497][T19651] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.375140][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7441'. [ 922.390319][T19652] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.391962][ T1900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7441'. [ 922.437644][T19652] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.481324][T19652] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.542965][ T1909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7444'. [ 922.724683][ T1923] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7446'. [ 922.791326][ T1923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7446'. [ 922.843339][ T1923] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7446'. [ 922.868699][ T1934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7449'. [ 922.890567][ T1932] syzkaller1: entered promiscuous mode [ 922.913292][ T1932] syzkaller1: entered allmulticast mode [ 923.068543][ T1945] netlink: 'syz.2.7453': attribute type 8 has an invalid length. [ 923.781505][ T1992] netlink: 'syz.4.7466': attribute type 1 has an invalid length. [ 923.830899][ T1992] bond6: entered promiscuous mode [ 923.837984][ T1992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 923.872104][ T1992] bond6: entered allmulticast mode [ 924.123027][ T1992] bond6: (slave bridge3): making interface the new active one [ 924.133940][ T1992] bridge3: entered promiscuous mode [ 924.142526][ T1992] bridge3: entered allmulticast mode [ 924.162795][ T1992] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 924.304675][ T2023] netlink: 'syz.3.7474': attribute type 11 has an invalid length. [ 924.669086][ T2047] netlink: 'syz.0.7481': attribute type 1 has an invalid length. [ 924.777429][ T2047] bond4: entered promiscuous mode [ 924.790770][ T2047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 924.861992][ T2061] netlink: 'syz.2.7484': attribute type 1 has an invalid length. [ 924.994671][ T2070] pimreg3: entered allmulticast mode [ 925.414446][ T2091] netlink: 'syz.3.7489': attribute type 28 has an invalid length. [ 925.437351][ T2091] netlink: 'syz.3.7489': attribute type 3 has an invalid length. [ 928.325289][ T2116] __nla_validate_parse: 7 callbacks suppressed [ 928.325308][ T2116] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7495'. [ 928.430323][ T2116] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 928.563711][ T2130] validate_nla: 1 callbacks suppressed [ 928.563729][ T2130] netlink: 'syz.3.7499': attribute type 1 has an invalid length. [ 928.620756][ T2117] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 928.634553][ T2117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7496'. [ 928.681359][ T2130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 928.700066][ T2127] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7498'. [ 928.755472][ T2143] dvmrp0: entered allmulticast mode [ 928.840705][ T2146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7502'. [ 928.961551][ T2154] netlink: 'syz.3.7505': attribute type 30 has an invalid length. [ 929.108299][ T2159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7507'. [ 929.183730][ T2158] netlink: 'syz.4.7506': attribute type 12 has an invalid length. [ 929.228751][ T2158] netlink: 'syz.4.7506': attribute type 12 has an invalid length. [ 929.280123][ T2158] netlink: 'syz.4.7506': attribute type 4 has an invalid length. [ 929.325193][ T2174] IPv6: NLM_F_CREATE should be specified when creating new route [ 929.667568][T27621] IPVS: starting estimator thread 0... [ 929.786227][ T2194] IPVS: using max 31 ests per chain, 74400 per kthread [ 929.997746][ T2207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7518'. [ 930.288049][ T2221] netlink: 'syz.2.7522': attribute type 1 has an invalid length. [ 930.391612][ T2223] netlink: 'syz.3.7525': attribute type 12 has an invalid length. [ 930.421237][ T2223] netlink: 'syz.3.7525': attribute type 29 has an invalid length. [ 930.449413][ T2223] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7525'. [ 930.474636][ T2223] netlink: 59 bytes leftover after parsing attributes in process `syz.3.7525'. [ 930.490767][ T2229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7528'. [ 930.492913][ T2227] netlink: 'syz.0.7526': attribute type 7 has an invalid length. [ 930.560056][ T2228] netlink: 'syz.3.7525': attribute type 1 has an invalid length. [ 930.571684][ T2233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7528'. [ 930.648115][ T2228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 930.753385][ T2241] ip6t_srh: unknown srh match flags 5F28 [ 930.807190][ T2233] macvtap2: entered promiscuous mode [ 930.821949][ T2233] vlan0: entered promiscuous mode [ 930.844135][ T2233] macvtap2: entered allmulticast mode [ 930.850327][ T2233] vlan0: entered allmulticast mode [ 930.856258][ T2233] veth0_vlan: entered allmulticast mode [ 931.049437][ T2249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.384951][ T2275] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 931.423745][ T2275] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 933.127037][ T2363] bond7: option xmit_hash_policy: invalid value (64) [ 933.135595][ T2363] bond7 (unregistering): Released all slaves [ 933.511276][ T2383] __nla_validate_parse: 9 callbacks suppressed [ 933.511309][ T2383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7570'. [ 933.678395][ T2391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7572'. [ 934.023802][ T2410] openvswitch: netlink: Key type 303 is out of range max 32 [ 934.059314][ T2410] syzkaller1: entered promiscuous mode [ 934.065025][ T2410] syzkaller1: entered allmulticast mode [ 934.222577][ T2422] sctp: [Deprecated]: syz.2.7582 (pid 2422) Use of int in max_burst socket option deprecated. [ 934.222577][ T2422] Use struct sctp_assoc_value instead [ 934.537597][ T2441] validate_nla: 3 callbacks suppressed [ 934.537615][ T2441] netlink: 'syz.2.7588': attribute type 39 has an invalid length. [ 934.574712][ T2443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7587'. [ 934.776295][ T2442] 0ªX¹¦Dö»: left allmulticast mode [ 934.883481][ T2461] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 934.894626][ T2464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7594'. [ 935.212568][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.230626][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.330019][ T2442] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 935.363537][ T2442] bond3: left promiscuous mode [ 935.368685][ T2442] bond3: left allmulticast mode [ 935.378207][ T2442] bond4: left promiscuous mode [ 935.383108][ T2490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7596'. [ 935.449020][ T2489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7596'. [ 935.459773][T19650] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.471794][T19650] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.482252][T19650] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.491265][T19650] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.678251][T19650] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.688318][T19650] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.791453][T19650] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.811589][T19650] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.835615][ T2497] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7599'. [ 935.971357][ T2513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7602'. [ 935.985395][ T2512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7602'. [ 936.157096][ T2524] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 936.211637][ T2536] xt_recent: Unsupported userspace flags (000000b1) [ 936.789265][ T2572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7617'. [ 937.194281][ T2590] macvtap1: entered promiscuous mode [ 937.207449][ T2590] vlan0: entered promiscuous mode [ 937.221910][ T2590] macvtap1: entered allmulticast mode [ 937.243773][ T2590] vlan0: entered allmulticast mode [ 937.260792][ T2590] veth0_vlan: entered allmulticast mode [ 937.449024][ T2616] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 937.471458][ T2618] openvswitch: netlink: Missing key (keys=40, expected=100) [ 937.575942][ T2629] netlink: 'syz.2.7632': attribute type 1 has an invalid length. [ 937.675199][ T2637] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 937.755390][ T2629] 8021q: adding VLAN 0 to HW filter on device bond7 [ 938.023526][ T2652] netlink: 'syz.2.7638': attribute type 64 has an invalid length. [ 938.103763][ T2655] bond0: entered allmulticast mode [ 938.123745][ T2655] bond_slave_0: entered allmulticast mode [ 938.135157][ T2655] bond_slave_1: entered allmulticast mode [ 938.565250][ T2694] bridge2: entered promiscuous mode [ 938.576021][ T2694] bridge2: entered allmulticast mode [ 938.577492][ T2683] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 938.590448][ T2683] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 938.599313][ T2683] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 938.608214][ T2683] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 938.617100][ T2683] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 938.625959][ T2683] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 938.634828][ T2683] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 938.647907][ T2697] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 938.661444][ T2698] __nla_validate_parse: 3 callbacks suppressed [ 938.661460][ T2698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7651'. [ 938.767166][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7652'. [ 938.796291][ T2702] netlink: 'syz.3.7653': attribute type 8 has an invalid length. [ 938.811233][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7652'. [ 938.843533][ T2710] dvmrp0: entered allmulticast mode [ 939.000624][ T2716] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 939.030614][ T2715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7656'. [ 939.088579][ T2715] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7656'. [ 939.089827][ T2720] netlink: 'syz.4.7656': attribute type 1 has an invalid length. [ 939.450081][ T2749] net_ratelimit: 47 callbacks suppressed [ 939.450100][ T2749] openvswitch: netlink: IP tunnel dst address not specified [ 939.552066][ T2759] netlink: 'syz.3.7666': attribute type 4 has an invalid length. [ 939.575432][ T2759] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7666'. [ 939.642146][ T2762] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7665'. [ 939.707277][ T2752] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7665'. [ 939.912859][ T2769] IPVS: Unknown mcast interface: vcan0 [ 940.202599][ T2783] can: request_module (can-proto-3) failed. [ 940.284901][ T2791] syzkaller0: entered allmulticast mode [ 940.448198][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.459327][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.511655][ T2804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.565378][ T2807] netlink: 'syz.3.7678': attribute type 39 has an invalid length. [ 940.888895][ T2836] netlink: 'syz.1.7683': attribute type 4 has an invalid length. [ 940.967817][ T2841] netlink: 'syz.3.7685': attribute type 1 has an invalid length. [ 940.997072][T19650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.011202][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.028045][T27621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.237999][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.531638][ T2872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7690'. [ 941.704798][ T2877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.716264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.026839][ T2841] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 944.269745][ T2887] syzkaller0: entered promiscuous mode [ 944.312585][ T2887] syzkaller0: entered allmulticast mode [ 944.682058][ T2916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7702'. [ 944.939249][T19662] net_ratelimit: 4 callbacks suppressed [ 944.939263][T19662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.971222][T27620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.003863][T27620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.411819][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.451086][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.863906][T19677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.892158][T27621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.952280][T27621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.333882][ T2904] bond0: (slave bond_slave_0): Releasing backup interface [ 947.497753][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.546198][ T2921] netlink: 'syz.0.7704': attribute type 1 has an invalid length. [ 947.618748][ T2921] bond6: entered promiscuous mode [ 947.626111][ T2921] 8021q: adding VLAN 0 to HW filter on device bond6 [ 947.641247][ T2928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7705'. [ 947.651829][ T2928] netlink: 50 bytes leftover after parsing attributes in process `syz.4.7705'. [ 947.662048][ T2928] netlink: 50 bytes leftover after parsing attributes in process `syz.4.7705'. [ 947.707102][ T2933] macvtap1: entered allmulticast mode [ 947.850316][ T2921] bond6: (slave bridge4): making interface the new active one [ 947.861958][ T2921] bridge4: entered promiscuous mode [ 947.865350][ T2940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7709'. [ 947.876772][ T2921] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 947.981929][ T2940] 8021q: adding VLAN 0 to HW filter on device bond11 [ 948.036426][T27621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.182843][ T2948] tipc: Cannot configure node identity twice [ 948.459173][ T2967] 8021q: VLANs not supported on lo [ 948.787049][ T2983] sit1: entered promiscuous mode [ 948.801760][ T2983] sit1: entered allmulticast mode [ 949.107181][ T2998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7728'. [ 949.392237][ T3015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7734'. [ 949.404403][ T3016] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7733'. [ 949.423434][ T3016] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 949.454790][ T3016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7733'. [ 949.589424][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7736'. [ 950.173248][ T3072] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7746'. [ 950.270173][ T3073] macvlan2: entered promiscuous mode [ 950.295937][ T3073] macvlan2: entered allmulticast mode [ 950.596530][T18413] net_ratelimit: 4 callbacks suppressed [ 950.596560][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.657804][ T3095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7753'. [ 950.764630][ T3099] syzkaller0: entered promiscuous mode [ 950.786059][ T3099] syzkaller0: entered allmulticast mode [ 950.843402][ T3106] syzkaller0: entered promiscuous mode [ 950.859780][ T3106] syzkaller0: entered allmulticast mode [ 951.071138][ T3116] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.7760'. [ 951.083285][T27621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.278266][ T3125] ipip0: entered promiscuous mode [ 951.307721][ T3125] ipip0: entered allmulticast mode [ 951.636290][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.192659][ T3188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.249065][ T3188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.258937][ T3187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7778'. [ 952.297425][ T3187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7778'. [ 952.306119][ T3188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.562533][ T3212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7783'. [ 952.576378][ T3180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.595498][ T3180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.649114][ T3204] netlink: 'syz.2.7782': attribute type 10 has an invalid length. [ 952.666908][ T3204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7782'. [ 952.684037][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.738001][ T3204] team0: Port device geneve1 added [ 952.755156][T19677] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.791360][T19677] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.868540][T19677] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.896550][T19677] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.934136][ T3226] syzkaller0: entered promiscuous mode [ 952.952256][ T3226] syzkaller0: entered allmulticast mode [ 952.969160][ T3231] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7787'. [ 953.280476][ T3256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7792'. [ 953.369315][ T3256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7792'. [ 953.728615][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.757848][ T3273] tipc: MTU too low for tipc bearer [ 953.901599][ T3289] netlink: 'syz.4.7800': attribute type 1 has an invalid length. [ 953.946297][ T3289] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 953.959754][ T3293] netlink: 'syz.1.7801': attribute type 21 has an invalid length. [ 954.160457][ T3310] tipc: Enabled bearer , priority 24 [ 954.922476][ T3359] netlink: 'syz.1.7815': attribute type 1 has an invalid length. [ 955.640234][ T3373] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 955.683552][T27621] tipc: Node number set to 1073990173 [ 955.801821][T27623] net_ratelimit: 4 callbacks suppressed [ 955.801851][T27623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.999680][ T3398] __nla_validate_parse: 7 callbacks suppressed [ 955.999697][ T3398] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7819'. [ 956.077557][ T3398] IPv6: NLM_F_CREATE should be specified when creating new route [ 956.117950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.392440][ T3413] xt_TCPMSS: Only works on TCP SYN packets [ 956.495253][T27620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.513334][ T3418] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7823'. [ 956.544659][ T3407] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 956.611074][ T3423] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7826'. [ 956.618025][ T3417] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 956.656758][ T3417] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 956.796860][T19659] bridge2: port 2(veth0_to_bond) entered blocking state [ 956.803978][T19659] bridge2: port 2(veth0_to_bond) entered forwarding state [ 956.846588][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.055229][ T3438] bond0: option miimon: invalid value (18446744071829782528) [ 957.079075][T27622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.099297][ T3438] bond0: option miimon: allowed values 0 - 2147483647 [ 957.156942][T27622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.613146][ T3466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7837'. [ 957.658612][ T3466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7837'. [ 957.879606][T27623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.285514][ T3486] syzkaller1: entered promiscuous mode [ 958.305861][ T3486] syzkaller1: entered allmulticast mode [ 958.525806][ T3503] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7845'. [ 958.766880][ T3506] syzkaller0: entered promiscuous mode [ 958.781262][ T3506] syzkaller0: entered allmulticast mode [ 958.812175][ T3525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.821075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.880525][ T3506] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7846'. [ 959.091942][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7851'. [ 959.256765][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7852'. [ 961.924008][ T3531] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 961.925376][ T3537] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 962.148078][ T3564] tipc: Enabling of bearer rejected, failed to enable media [ 962.170175][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7859'. [ 962.243392][ T3564] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7858'. [ 962.365312][ T3564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7858'. [ 962.474628][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7864'. [ 962.755514][ T3602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 962.768232][ T3604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.793170][ T3603] tipc: Started in network mode [ 962.813532][ T3603] tipc: Node identity , cluster identity 4711 [ 963.047201][ T3612] syzkaller0: entered promiscuous mode [ 963.076690][ T3612] syzkaller0: entered allmulticast mode [ 963.118411][ T3614] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.147457][ T3614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.339955][ T3614] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.363714][ T3614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.468882][ T3614] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.496964][ T3614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.610949][ T3614] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.652303][ T3614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.781898][ T3627] netlink: 'syz.4.7874': attribute type 10 has an invalid length. [ 963.815552][ T3624] netlink: 'syz.4.7874': attribute type 10 has an invalid length. [ 963.847395][ T3627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7874'. [ 963.856593][T19650] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.863435][ T3624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7874'. [ 963.881988][T19650] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.887472][ T3630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7876'. [ 963.923155][T19657] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.937555][T19657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.002431][ T3627] team0: Port device geneve1 added [ 964.144067][T19650] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.174092][T19650] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.203857][T19650] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.229054][T19650] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.260538][ T3643] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.7880'. [ 964.296929][ T3650] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7883'. [ 964.557169][ T3668] xt_bpf: check failed: parse error [ 964.561185][ T3670] netlink: 'syz.3.7890': attribute type 39 has an invalid length. [ 964.575506][ T3668] netlink: 'syz.1.7887': attribute type 1 has an invalid length. [ 964.593743][ T3668] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7887'. [ 964.907250][ T3684] netlink: 'syz.0.7895': attribute type 1 has an invalid length. [ 964.924636][ T3684] netlink: 'syz.0.7895': attribute type 4 has an invalid length. [ 964.984861][ T3686] team0: No ports can be present during mode change [ 965.103885][ T3691] netlink: 'syz.0.7899': attribute type 1 has an invalid length. [ 965.823219][T18414] lo speed is unknown, defaulting to 1000 [ 966.101583][ T3749] netlink: 'syz.3.7915': attribute type 21 has an invalid length. [ 966.230644][ T3752] veth1_to_bridge: left allmulticast mode [ 966.427296][ T3752] bond4: left promiscuous mode [ 966.458910][ T3752] bridge1: left promiscuous mode [ 966.502535][ T3752] bridge2: left promiscuous mode [ 966.528116][ T3752] bridge2: left allmulticast mode [ 966.563966][ T3752] bridge3: left promiscuous mode [ 966.608991][ T3752] bridge3: left allmulticast mode [ 966.735195][T19652] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.777508][T19652] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.863852][T19652] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.897781][T19652] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.929613][T19659] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.952515][T19659] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.980783][T19659] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.990960][T19659] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.671948][ T3834] __nla_validate_parse: 11 callbacks suppressed [ 967.671967][ T3834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7931'. [ 967.712082][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7931'. [ 967.768815][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7931'. [ 967.861519][ T3846] syzkaller0: entered promiscuous mode [ 967.894516][ T3846] syzkaller0: entered allmulticast mode [ 968.087411][ T3856] netlink: 'syz.1.7937': attribute type 21 has an invalid length. [ 968.108089][ T3858] netlink: 'syz.2.7936': attribute type 1 has an invalid length. [ 968.136132][ T3856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7937'. [ 968.186355][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7937'. [ 968.433297][ T3875] xt_l2tp: wrong L2TP version: 0 [ 968.833929][ T3901] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7951'. [ 969.011940][ T3905] ip6tnl3: entered allmulticast mode [ 969.109124][ T3913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 969.264693][ T3923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 969.533006][ T3944] validate_nla: 5 callbacks suppressed [ 969.533041][ T3944] netlink: 'syz.3.7961': attribute type 1 has an invalid length. [ 969.670016][ T3944] 8021q: adding VLAN 0 to HW filter on device bond7 [ 969.697976][ T3948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7963'. [ 969.731065][ T3953] bond2: (slave veth0_to_bond): Releasing active interface [ 969.749829][ T3953] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 969.805070][ T3953] bond7: (slave veth0_to_bond): making interface the new active one [ 969.848018][ T3953] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 969.909182][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7966'. [ 969.963400][ T3976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7966'. [ 970.103643][ T3981] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 970.147306][ T3981] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 970.173538][ T3987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7968'. [ 970.540428][ T4008] gre0: entered promiscuous mode [ 970.560659][ T4008] gre0: entered allmulticast mode [ 970.623294][ T4001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.034505][ T4041] netlink: 'syz.4.7982': attribute type 14 has an invalid length. [ 971.060819][ T4041] netlink: 'syz.4.7982': attribute type 13 has an invalid length. [ 971.624912][ T4057] bond8 (unregistering): Released all slaves [ 971.660172][ T4063] netlink: 'syz.1.7990': attribute type 1 has an invalid length. [ 971.951593][ T4078] syzkaller1: entered promiscuous mode [ 971.979142][ T4078] syzkaller1: entered allmulticast mode [ 972.074575][ T4083] netlink: 'syz.0.7998': attribute type 8 has an invalid length. [ 972.257348][ T4090] bond13 (unregistering): Released all slaves [ 972.447296][ T4098] bond8: Invalid ad_actor_system MAC address. [ 972.474268][ T4098] bond8: option ad_actor_system: invalid value (1) [ 972.505340][ T4098] bond8 (unregistering): Released all slaves [ 972.533665][ T4116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.821093][ T4128] __nla_validate_parse: 13 callbacks suppressed [ 972.821111][ T4128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8009'. [ 972.839171][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8008'. [ 973.715011][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8019'. [ 973.719502][ T4175] netlink: 'syz.4.8017': attribute type 4 has an invalid length. [ 973.800480][ T4183] team0: Device is already in use. [ 973.863032][ T4188] netlink: 'syz.2.8025': attribute type 27 has an invalid length. [ 974.237098][ T4211] netlink: 'syz.0.8033': attribute type 11 has an invalid length. [ 974.245234][ T4211] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.8033'. [ 974.433385][ T4211] [ 974.435757][ T4211] ====================================================== [ 974.442774][ T4211] WARNING: possible circular locking dependency detected [ 974.449096][ T4216] syzkaller0: entered promiscuous mode [ 974.449797][ T4211] syzkaller #0 Not tainted [ 974.459631][ T4211] ------------------------------------------------------ [ 974.463040][ T4216] syzkaller0: entered allmulticast mode [ 974.466640][ T4211] syz.0.8033/4211 is trying to acquire lock: [ 974.466654][ T4211] ffff88802646bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 974.487545][ T4211] [ 974.487545][ T4211] but task is already holding lock: [ 974.494897][ T4211] ffff88802646b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 974.505081][ T4211] [ 974.505081][ T4211] which lock already depends on the new lock. [ 974.505081][ T4211] [ 974.515470][ T4211] [ 974.515470][ T4211] the existing dependency chain (in reverse order) is: [ 974.524469][ T4211] [ 974.524469][ T4211] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 974.533068][ T4211] blk_alloc_queue+0x544/0x690 [ 974.538352][ T4211] __blk_mq_alloc_disk+0x194/0x390 [ 974.544034][ T4211] nbd_dev_add+0x494/0xb60 [ 974.549008][ T4211] nbd_init+0x15f/0x1e0 [ 974.553760][ T4211] do_one_initcall+0x250/0x870 [ 974.559034][ T4211] do_initcall_level+0x10a/0x1a0 [ 974.564553][ T4211] do_initcalls+0x59/0xa0 [ 974.569394][ T4211] kernel_init_freeable+0x29d/0x3e0 [ 974.575102][ T4211] kernel_init+0x1d/0x1d0 [ 974.579985][ T4211] ret_from_fork+0x514/0xb70 [ 974.585099][ T4211] ret_from_fork_asm+0x1a/0x30 [ 974.590370][ T4211] [ 974.590370][ T4211] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 974.597580][ T4211] fs_reclaim_acquire+0x71/0x100 [ 974.603025][ T4211] __kmalloc_cache_node_noprof+0x66/0x630 [ 974.609255][ T4211] create_worker+0x112/0x7b0 [ 974.614379][ T4211] workqueue_prepare_cpu+0xe4/0x170 [ 974.620088][ T4211] cpuhp_invoke_callback+0x434/0x810 [ 974.625888][ T4211] _cpu_up+0x2ce/0x5b0 [ 974.630473][ T4211] cpu_up+0x1d2/0x220 [ 974.634962][ T4211] cpuhp_bringup_mask+0xb2/0x1a0 [ 974.640486][ T4211] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 974.646808][ T4211] bringup_nonboot_cpus+0x17/0x30 [ 974.652343][ T4211] smp_init+0x32/0x110 [ 974.656986][ T4211] kernel_init_freeable+0x27f/0x3e0 [ 974.662697][ T4211] kernel_init+0x1d/0x1d0 [ 974.667536][ T4211] ret_from_fork+0x514/0xb70 [ 974.672633][ T4211] ret_from_fork_asm+0x1a/0x30 [ 974.677907][ T4211] [ 974.677907][ T4211] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 974.685621][ T4211] cpus_read_lock+0x42/0x160 [ 974.690733][ T4211] static_key_slow_inc+0x12/0x30 [ 974.696192][ T4211] nbd_genl_reconfigure+0x1301/0x1e80 [ 974.702076][ T4211] genl_family_rcv_msg_doit+0x233/0x340 [ 974.708216][ T4211] genl_rcv_msg+0x614/0x7a0 [ 974.713228][ T4211] netlink_rcv_skb+0x226/0x4a0 [ 974.718496][ T4211] genl_rcv+0x28/0x40 [ 974.723004][ T4211] netlink_unicast+0x7bb/0x940 [ 974.728268][ T4211] netlink_sendmsg+0x813/0xb40 [ 974.733537][ T4211] sock_sendmsg_nosec+0x13a/0x180 [ 974.739122][ T4211] ____sys_sendmsg+0x54e/0x850 [ 974.744388][ T4211] ___sys_sendmsg+0x2a5/0x360 [ 974.749573][ T4211] __x64_sys_sendmsg+0x1b1/0x290 [ 974.755023][ T4211] do_syscall_64+0x174/0x580 [ 974.760131][ T4211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.766542][ T4211] [ 974.766542][ T4211] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 974.774177][ T4211] __mutex_lock+0x19d/0x1550 [ 974.779331][ T4211] nbd_queue_rq+0x373/0x1150 [ 974.784431][ T4211] blk_mq_dispatch_rq_list+0x499/0x1990 [ 974.790532][ T4211] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 974.797394][ T4211] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 974.803881][ T4211] blk_mq_run_work_fn+0x16c/0x300 [ 974.809417][ T4211] process_scheduled_works+0xa8e/0x14e0 [ 974.815477][ T4211] worker_thread+0xa47/0xfb0 [ 974.820586][ T4211] kthread+0x388/0x470 [ 974.825172][ T4211] ret_from_fork+0x514/0xb70 [ 974.830272][ T4211] ret_from_fork_asm+0x1a/0x30 [ 974.835549][ T4211] [ 974.835549][ T4211] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 974.842746][ T4211] __mutex_lock+0x19d/0x1550 [ 974.847881][ T4211] nbd_queue_rq+0xc1/0x1150 [ 974.852990][ T4211] blk_mq_dispatch_rq_list+0x499/0x1990 [ 974.859049][ T4211] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 974.865884][ T4211] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 974.872375][ T4211] blk_mq_run_work_fn+0x16c/0x300 [ 974.877911][ T4211] process_scheduled_works+0xa8e/0x14e0 [ 974.883970][ T4211] worker_thread+0xa47/0xfb0 [ 974.889069][ T4211] kthread+0x388/0x470 [ 974.893652][ T4211] ret_from_fork+0x514/0xb70 [ 974.898749][ T4211] ret_from_fork_asm+0x1a/0x30 [ 974.904019][ T4211] [ 974.904019][ T4211] -> #1 (set->srcu){.+.+}-{0:0}: [ 974.911128][ T4211] __synchronize_srcu+0xc9/0x2f0 [ 974.916606][ T4211] elevator_switch+0x1e8/0x7b0 [ 974.921885][ T4211] elevator_change+0x2fa/0x480 [ 974.927166][ T4211] elevator_set_default+0x375/0x440 [ 974.932875][ T4211] blk_register_queue+0x3f3/0x4e0 [ 974.938457][ T4211] __add_disk+0x6cb/0xe30 [ 974.943313][ T4211] add_disk_fwnode+0xfb/0x4b0 [ 974.948497][ T4211] nbd_dev_add+0x733/0xb60 [ 974.953421][ T4211] nbd_init+0x15f/0x1e0 [ 974.958089][ T4211] do_one_initcall+0x250/0x870 [ 974.963360][ T4211] do_initcall_level+0x10a/0x1a0 [ 974.968807][ T4211] do_initcalls+0x59/0xa0 [ 974.973648][ T4211] kernel_init_freeable+0x29d/0x3e0 [ 974.979353][ T4211] kernel_init+0x1d/0x1d0 [ 974.984189][ T4211] ret_from_fork+0x514/0xb70 [ 974.989288][ T4211] ret_from_fork_asm+0x1a/0x30 [ 974.994559][ T4211] [ 974.994559][ T4211] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 975.002362][ T4211] __lock_acquire+0x1520/0x2cf0 [ 975.007739][ T4211] lock_acquire+0x106/0x350 [ 975.012747][ T4211] __mutex_lock+0x19d/0x1550 [ 975.017841][ T4211] elevator_change+0x1af/0x480 [ 975.023118][ T4211] elevator_set_none+0xb5/0x140 [ 975.028482][ T4211] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 975.034793][ T4211] nbd_start_device+0x189/0xb30 [ 975.040152][ T4211] nbd_genl_connect+0x1597/0x1c10 [ 975.045690][ T4211] genl_family_rcv_msg_doit+0x233/0x340 [ 975.051767][ T4211] genl_rcv_msg+0x614/0x7a0 [ 975.056807][ T4211] netlink_rcv_skb+0x226/0x4a0 [ 975.062076][ T4211] genl_rcv+0x28/0x40 [ 975.066566][ T4211] netlink_unicast+0x7bb/0x940 [ 975.071834][ T4211] netlink_sendmsg+0x813/0xb40 [ 975.077104][ T4211] sock_sendmsg_nosec+0x13a/0x180 [ 975.082642][ T4211] ____sys_sendmsg+0x54e/0x850 [ 975.087907][ T4211] ___sys_sendmsg+0x2a5/0x360 [ 975.093086][ T4211] __x64_sys_sendmsg+0x1b1/0x290 [ 975.098526][ T4211] do_syscall_64+0x174/0x580 [ 975.103618][ T4211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.110019][ T4211] [ 975.110019][ T4211] other info that might help us debug this: [ 975.110019][ T4211] [ 975.120225][ T4211] Chain exists of: [ 975.120225][ T4211] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 975.120225][ T4211] [ 975.133944][ T4211] Possible unsafe locking scenario: [ 975.133944][ T4211] [ 975.141370][ T4211] CPU0 CPU1 [ 975.146714][ T4211] ---- ---- [ 975.152060][ T4211] lock(&q->q_usage_counter(io)#50); [ 975.157419][ T4211] lock(fs_reclaim); [ 975.163903][ T4211] lock(&q->q_usage_counter(io)#50); [ 975.171785][ T4211] lock(&q->elevator_lock); [ 975.176360][ T4211] [ 975.176360][ T4211] *** DEADLOCK *** [ 975.176360][ T4211] [ 975.184482][ T4211] 6 locks held by syz.0.8033/4211: [ 975.189570][ T4211] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 975.197753][ T4211] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 975.206712][ T4211] #2: ffff8880275c01c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 975.218108][ T4211] #3: ffff8880275c00d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 975.229064][ T4211] #4: ffff88802646b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 975.239679][ T4211] #5: ffff88802646b878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 975.250562][ T4211] [ 975.250562][ T4211] stack backtrace: [ 975.256435][ T4211] CPU: 0 UID: 0 PID: 4211 Comm: syz.0.8033 Not tainted syzkaller #0 PREEMPT(full) [ 975.256469][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 975.256487][ T4211] Call Trace: [ 975.256493][ T4211] [ 975.256500][ T4211] dump_stack_lvl+0xe8/0x150 [ 975.256520][ T4211] print_circular_bug+0x2e1/0x300 [ 975.256541][ T4211] check_noncircular+0x12e/0x150 [ 975.256561][ T4211] __lock_acquire+0x1520/0x2cf0 [ 975.256583][ T4211] ? elevator_change+0x1af/0x480 [ 975.256604][ T4211] lock_acquire+0x106/0x350 [ 975.256619][ T4211] ? elevator_change+0x1af/0x480 [ 975.256644][ T4211] __mutex_lock+0x19d/0x1550 [ 975.256658][ T4211] ? elevator_change+0x1af/0x480 [ 975.256679][ T4211] ? rcu_is_watching+0x15/0xb0 [ 975.256704][ T4211] ? elevator_change+0x1af/0x480 [ 975.256725][ T4211] ? __pfx___mutex_lock+0x10/0x10 [ 975.256738][ T4211] ? enable_work+0x17f/0x230 [ 975.256753][ T4211] ? lockdep_hardirqs_on+0x7a/0x110 [ 975.256776][ T4211] ? __cancel_work_sync+0xf7/0x110 [ 975.256790][ T4211] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 975.256807][ T4211] elevator_change+0x1af/0x480 [ 975.256831][ T4211] elevator_set_none+0xb5/0x140 [ 975.256851][ T4211] ? __pfx_elevator_set_none+0x10/0x10 [ 975.256874][ T4211] ? xa_load+0x1db/0x210 [ 975.256891][ T4211] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 975.256908][ T4211] ? kernfs_add_one+0x480/0x5e0 [ 975.256962][ T4211] ? nbd_start_device+0x17d/0xb30 [ 975.256981][ T4211] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 975.257001][ T4211] ? sysfs_add_file_mode_ns+0x258/0x300 [ 975.257024][ T4211] nbd_start_device+0x189/0xb30 [ 975.257042][ T4211] ? device_create_file+0xf4/0x1b0 [ 975.257117][ T4211] nbd_genl_connect+0x1597/0x1c10 [ 975.257136][ T4211] ? __pfx_nbd_genl_connect+0x10/0x10 [ 975.257152][ T4211] ? rcu_is_watching+0x15/0xb0 [ 975.257169][ T4211] ? trace_kmalloc+0x2a/0xf0 [ 975.257192][ T4211] ? __kmalloc_noprof+0x396/0x720 [ 975.257214][ T4211] ? __nla_parse+0x40/0x60 [ 975.257265][ T4211] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 975.257288][ T4211] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 975.257311][ T4211] genl_family_rcv_msg_doit+0x233/0x340 [ 975.257334][ T4211] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 975.257358][ T4211] ? __lock_acquire+0x683/0x2cf0 [ 975.257375][ T4211] genl_rcv_msg+0x614/0x7a0 [ 975.257396][ T4211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.257415][ T4211] ? __pfx_nbd_genl_connect+0x10/0x10 [ 975.257435][ T4211] netlink_rcv_skb+0x226/0x4a0 [ 975.257451][ T4211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 975.257470][ T4211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 975.257490][ T4211] ? down_read+0x2be/0x330 [ 975.257505][ T4211] genl_rcv+0x28/0x40 [ 975.257523][ T4211] netlink_unicast+0x7bb/0x940 [ 975.257540][ T4211] netlink_sendmsg+0x813/0xb40 [ 975.257559][ T4211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.257577][ T4211] ? apparmor_socket_sendmsg+0x53/0x330 [ 975.257594][ T4211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.257609][ T4211] sock_sendmsg_nosec+0x13a/0x180 [ 975.257630][ T4211] ____sys_sendmsg+0x54e/0x850 [ 975.257647][ T4211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 975.257665][ T4211] ? import_iovec+0x73/0xa0 [ 975.257713][ T4211] ___sys_sendmsg+0x2a5/0x360 [ 975.257729][ T4211] ? __lock_acquire+0x683/0x2cf0 [ 975.257745][ T4211] ? __pfx____sys_sendmsg+0x10/0x10 [ 975.257761][ T4211] ? futex_wait+0x2a2/0x390 [ 975.257798][ T4211] ? __fget_files+0x2a/0x420 [ 975.257811][ T4211] ? __fget_files+0x3a2/0x420 [ 975.257828][ T4211] __x64_sys_sendmsg+0x1b1/0x290 [ 975.257844][ T4211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 975.257865][ T4211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.257880][ T4211] do_syscall_64+0x174/0x580 [ 975.257894][ T4211] ? clear_bhb_loop+0x40/0x90 [ 975.257910][ T4211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.257925][ T4211] RIP: 0033:0x7f44cab9ce59 [ 975.257939][ T4211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.257952][ T4211] RSP: 002b:00007f44cbae1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.257968][ T4211] RAX: ffffffffffffffda RBX: 00007f44cae15fa0 RCX: 00007f44cab9ce59 [ 975.257979][ T4211] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 975.257989][ T4211] RBP: 00007f44cac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 975.257999][ T4211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.258007][ T4211] R13: 00007f44cae16038 R14: 00007f44cae15fa0 R15: 00007fff7eb55fc8 [ 975.258024][ T4211] [ 975.816270][T19614] block nbd1: Receive control failed (result -32) [ 975.822904][T19614] block nbd1: Receive control failed (result -32) [ 975.856600][ T4211] nbd1: detected capacity change from 0 to 63 [ 975.865039][ T1644] block nbd1: Dead connection, failed to find a fallback [ 975.872443][ T1644] block nbd1: shutting down sockets [ 975.878117][ T1644] blk_print_req_error: 33 callbacks suppressed [ 975.878140][ T1644] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 975.896265][ T1644] buffer_io_error: 54 callbacks suppressed [ 975.896280][ T1644] Buffer I/O error on dev nbd1, logical block 0, async page read [ 975.910212][ T1644] Buffer I/O error on dev nbd1, logical block 1, async page read [ 975.919985][ T1644] Buffer I/O error on dev nbd1, logical block 2, async page read [ 975.928047][ T1644] Buffer I/O error on dev nbd1, logical block 3, async page read [ 975.936779][ T1644] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 975.946614][ T1644] Buffer I/O error on dev nbd1, logical block 0, async page read [ 975.954435][ T1644] Buffer I/O error on dev nbd1, logical block 1, async page read [ 975.962782][ T1644] Buffer I/O error on dev nbd1, logical block 2, async page read [ 975.971389][ T1644] Buffer I/O error on dev nbd1, logical block 3, async page read [ 975.981006][ T1644] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 975.990395][ T1644] Buffer I/O error on dev nbd1, logical block 0, async page read [ 975.998722][ T1644] Buffer I/O error on dev nbd1, logical block 1, async page read [ 976.007077][ T1644] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 976.016821][ T1644] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 976.026089][ T1644] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 976.035525][ T3216] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 976.045622][ T1644] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 976.054875][ T1644] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 976.064379][ T1644] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 976.074368][ T4149] ldm_validate_partition_table(): Disk read failed. [ 976.082477][ T4149] Dev nbd1: unable to read RDB block 0 [ 976.092257][ T4149] nbd1: unable to read partition table [ 976.109593][ T4149] ldm_validate_partition_table(): Disk read failed. [ 976.117744][ T4149] Dev nbd1: unable to read RDB block 0 [ 976.124607][ T4149] nbd1: unable to read partition table