last executing test programs: 5.632461472s ago: executing program 0 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x170}}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r3}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x60, 0x64, 0x0, 0x0, 0x2, 0x0, 0x20000004}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000240)=0x14, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r8, r1, 0x25, 0x0, @val=@iter={&(0x7f0000000540)=@task={0x0, 0x0, r3}, 0x10}}, 0x20) r9 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r9, 0x11, 0x66, &(0x7f0000000100)=0xffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000e80)=ANY=[@ANYRESDEC=r6], &(0x7f0000000340)=""/106, 0xf4, 0x6a, 0x0, 0x2b, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000001503b27bcfaff00050000f80004000064fe747dcbe993889da4584994610ceaa8d0e68df6e608be2fd6bf5c0844a85070267402f725bb08595bd3842776a0abe21e40a50ec2bb9f3ec014d0bd8ee58bf261117ae6cc45095d479a66047b47b4e7d3653a73ae5868e922c9e01089753d740d485c494d1abac057ac39b7b7a73e73414de2f7ce4cb75de4ee233996227ba4c85c61dde147994bf03a08831802d85de79a86187c99047d50aab8cd6c820c7496ef3221a0b4c5b8c72c755217b69508a5a2cacf9af008a3d48b30fc5b3068e4ab211e856ac7ed0299484ccdcbe8148a5f68597f6200"/244, @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="0500000001000000050000000200"/28], 0x50) syz_emit_ethernet(0x1116, &(0x7f0000000080)=ANY=[], 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.526242802s ago: executing program 0 (id=4794): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0xa001) 5.278855731s ago: executing program 0 (id=4797): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x16, &(0x7f0000000480)=[{&(0x7f0000000000)="b0", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r2, 0x3841b273) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff030}, {0x6, 0x0, 0x2}]}, 0xffffffd6) 4.329023973s ago: executing program 0 (id=4808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x14, 0xa, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x1, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0xfffffffe, 0xf}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.954866583s ago: executing program 0 (id=4815): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100085060000000000000000000000003af7f99bc71e45f8eab3cf0abe338eaba06df6737a973084be0055f3c7a5fa0c", @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x80000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r12, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r13 = socket(0x10, 0x803, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r16 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x5, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x15, &(0x7f0000000400)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @exit, @jmp={0x5, 0x1, 0x2, 0x5, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x9, &(0x7f0000000280)=""/9, 0x41000, 0x17, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=[{0x0, 0x5, 0x6, 0x7}, {0x0, 0x2, 0xd, 0x9}, {0x1, 0x1, 0xd, 0x6}, {0x1, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x8, 0x1}, {0x3, 0x3, 0x7, 0x6}, {0x0, 0x800005, 0xc, 0x7}], 0x10, 0x746e}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6100000800050000000000000000000000001000000000", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x884) 3.695839227s ago: executing program 1 (id=4817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000202000000000000880000f1901190fffcffffff9500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32=r1, @ANYBLOB="92feff00000000000000001acd227c38c09982ac", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="04000004050000000200"/28], 0x50) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) unshare(0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x40, 0x29, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xffff, 0xfff1}, {0xd, 0x6}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) splice(r7, &(0x7f0000000140)=0xfff, r0, &(0x7f0000000180)=0x200, 0x1, 0x5) sendto$ax25(r6, &(0x7f00000002c0)="3e6a2ebad7dfc8c8ce248825666665bafff99242318a9cb9cad49e962ed05392e7e0aee76bfbf8912c4861cd39ec42416081ead7b6eda546db3db45b23d9534dfa455eae233a836c59fd4a67709316d5f0ab1328ce51a4a2a3082fe22a3cf748de2bfbea2f483cb0fdf1eadb8d2195382d2cb23dab53d750eff0d4dee09f48a76b1cb826e3517d47cea2f51c6192d2e67e74f19b79565bc8e7542e1436eb8dd3e15fe0db006c7bb439cc5f13172039ef6118822247cae1582d48a11802a697db85b783ad40816d46f123fe4aca8ed9bc274e129041074d99338e342ab5992acb6d5da73fd77d2411639a", 0xea, 0x4, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.896442815s ago: executing program 4 (id=4824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x40}}, 0x20040054) 2.489839789s ago: executing program 4 (id=4825): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @random="6ddb79ee4c59"}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x405a050, r0, 0x574c1000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4080) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000400)={0x1, 0x1, 0x7, r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r6, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0x5, 0x2, 0x8, 0xfffffffffffffff0, 0x1}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x72, &(0x7f00000004c0)=""/114, 0x41100, 0x10, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xa, 0x6000, 0x494b583e}, 0x10, r7, r6, 0x4, 0x0, &(0x7f00000008c0)=[{0x1, 0x4, 0x10, 0x3}, {0x2, 0x5, 0x3, 0x5}, {0x3, 0x4, 0x2, 0xa}, {0x0, 0x4, 0x4, 0x4}], 0x10, 0x2}, 0x94) r8 = accept$packet(r6, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000a40)=0x1) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r9, &(0x7f0000000a80)="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", 0x1000, 0x24040000, &(0x7f0000001a80)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x4}, 0x1c) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x18, 0x140f, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x30000000}, 0x4000000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000001bc0)={0x0, 0xb3f, 0x3, [0x1, 0x7, 0xb3e]}, &(0x7f0000001c00)=0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001c40)={r10, @in6={{0xa, 0x4e21, 0x4a9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x401, 0x3}, 0x90) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000001d80)={'vlan1\x00', &(0x7f0000001d00)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r12, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e00)={0x290, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x158, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) syz_emit_ethernet(0x2a, &(0x7f0000002140)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x7eab30d2cfc7132a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, @broadcast}}}}, &(0x7f0000002180)={0x0, 0x4, [0xe14, 0x2a0, 0x841, 0x3bf]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000033c0)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003400)={&(0x7f00000021c0)="d1f11975d06a63d1cbd8b88a138a7ae2fd04da69781463b67470493d46d96c77ba2f89da95702e15e36b5399db8fcf7d760023573c457489dde36a43a0668f659d3669938faaf7628c115a9fefeda5bd4b50f6c86e3ebf0eed178314b3f038cf286bee8796533edf801a8a712964b7a0e1350f6779c3a389f159263634713508e7982ce201c5be6d0ef6fabac9f72809119d49e9d9e13d5b668e50cc56", &(0x7f0000002280)=""/58, &(0x7f00000022c0)="e487e8889640ff6ffab7060d952c03e4dbd5b9df7744a4e0c59199c006f82706750b038aa8f063709cdac71666cfda10adcbedd1392d7329665d558122ea585bcd59025a7c718bb8dbc16f3c54d886996aaa828ba71ee3db77329917621e2900504ad90c2f0d25d206442c17ff1ee4dfdb77fe632c115fd72ab0e5fd94557d6cc59f3f404e2480601680b55eddaec302e247a43991a554e279896bf683ac9fa5e0ca4d5313c79d442ff359d30ea86fd7af2098d3657bb1c3073c531582e3b9cbf5706bfeb2f6326989abd7af36498d43f910a1bd7c58acb048dce1d5b677385bb77b6446", &(0x7f00000023c0)="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", 0x6, r13}, 0x38) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003480), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x24, r14, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.204643183s ago: executing program 4 (id=4828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x21, 0x3, 0x5b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e8, 0xffffffff, 0xffffffff, 0x4e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x618) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pread64(r2, &(0x7f00000001c0)=""/198, 0xc6, 0x2132) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) socket$inet6(0xa, 0x1, 0x8010800000000084) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.806649076s ago: executing program 3 (id=4829): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02f7ffff03000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1e, 0x7, 0x2, 0x1, 0x10000, r0, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x5) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x79}, @call={0x85, 0x0, 0x0, 0xaf}, @generic={0xd, 0x5, 0x9, 0x8, 0x22}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xcbd}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2f8359c8ec9f0f2e, '\x00', r4, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r6, 0x1) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) unshare(0x5e040c80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701369eff"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TUNSETSNDBUF(r9, 0x400454d4, &(0x7f0000000200)=0x7b94327e) 1.723625864s ago: executing program 2 (id=4830): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040881}, 0x20008840) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x10, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 1.710552261s ago: executing program 3 (id=4831): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x15, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x20000802) 1.477617426s ago: executing program 2 (id=4832): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7", 0x5}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x9) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getroute={0x3c, 0x1a, 0x2, 0x70bd2d, 0x25dfdbff, {0x1c, 0x80, 0x0, 0x81, 0xfe, 0x0, 0xff, 0xdd9cd53847904ae, 0x2300}, [@RTA_VIA={0x14, 0x12, {0x3e, "9453e4a23bc469336874233b3802"}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x0, 0x4, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0xb0760d2bbb560f9f) socket$packet(0x11, 0x2, 0x300) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.477087338s ago: executing program 3 (id=4833): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f0000003100)=[{{&(0x7f0000000e00)=@l2tp6={0xa, 0x0, 0x800, @mcast2, 0x10001, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000001100)=[@timestamping={{0x14, 0x1, 0x25, 0xf31}}], 0x18}}], 0x1, 0x24008000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.42082898s ago: executing program 2 (id=4834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f00000000c0)=0x10003, 0x4) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000880)=0x80000000, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x20, &(0x7f00000007c0)={&(0x7f0000000700)=""/12, 0xc, 0x0, &(0x7f0000000740)=""/112, 0x70}}, 0x10) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e330ae7df7fffffffd007ab11ecf8575030000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf25080000000c00018008000300020000001c00018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r4, @ANYBLOB="60000180080003000100000008000300020000001400020076657468305f6d616376746170000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x3ac}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {0x1, 0x10}, {0x9, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c4}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000440), &(0x7f0000000080)=@udp, 0x2}, 0x20) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) 1.357795871s ago: executing program 2 (id=4835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xffff}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x20040054) 1.318878957s ago: executing program 1 (id=4836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c0004"], 0x1ac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe84a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x24000000) 1.240446907s ago: executing program 4 (id=4837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/118, 0x76}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000240), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) socket$kcm(0x2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000f000000240012800b00010062726964676500001400028008000500012000010800010000000000080029007e6b00000800287b04339546dd5759eba2dd383abe9f7a3c65ab9582e5cec893fd2c403e306bca6565cb775116664e1c1caf31f0bfc1c8dfa8e859694bb83e71929d34cf7efb38"], 0x104}}, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="176b0db5d25446463f74d3740a70f6e0249ca79eab579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e39", 0x61}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9b859dc1b8a2ecca66132bd68a90f03f10f1fb3b2d7c3ef20dc1074a4ab268b17ab3ea31489aead9ab69a3b779e83c259279904a6ef330e637c994178ffc1922e966353b6a48225198e98ae3e88940c", 0xbe}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) recvmsg(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/88, 0x58}, {&(0x7f0000000a80)=""/198, 0xc6}, {&(0x7f0000000840)=""/228, 0xe4}], 0x3}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) 1.238999564s ago: executing program 2 (id=4838): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000100)={0x22, 0xc6, 0x9, 0x8, 0x9e}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) unshare(0x4000400) r3 = socket$inet(0xa, 0x3, 0x84) listen(r3, 0x8) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb0, 0x2, 0x7, 0x801, 0x0, 0x0, {0x5}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3d3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x85cb}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xd7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x815}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 1.108183211s ago: executing program 2 (id=4839): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) close(0x4) unshare(0x6a040000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) (async) recvfrom(r6, &(0x7f0000000180)=""/58, 0x3a, 0x0, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x9, 0x8000}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x31, 0x2, '2\xd9\xb79L\xad\xfb\xbd\xc7\xa2\x1c,0\x13\xa2\x88\xee\x88n\xba\x98\xa86\x98\xf8\xd3M\xed\xa4\x9e\xd9\xb1\xe3\x96\xe6|i\xfd\f\x00\x1c\xe5\x7fV\xa7'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) 891.835977ms ago: executing program 1 (id=4840): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000016a38415bbf4133a996ab420ec8b91866ecd35a0388bba0b4954d07c5d904acbe4c99c5078cfb6ed9abe204475fdbc46be03e363804930c9c4589af4328a37aec5a015cecbf0de67f2e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000016a38415bbf4133a996ab420ec8b91866ecd35a0388bba0b4954d07c5d904acbe4c99c5078cfb6ed9abe204475fdbc46be03e363804930c9c4589af4328a37aec5a015cecbf0de67f2e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000007c0), 0x0}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110026bd7000ffdbdf25180000002c0030800c00018008000100ffffffff050002004000000014000400d78ab57a2132e02bb9f2c52e5699753008000300", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x28080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x300) (async) r5 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x28, &(0x7f0000000040), 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c0000000800050000000000080004000000000f080006"], 0x2c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x4, 0x9, {{0x30, 0x4, 0x0, 0x2, 0xc0, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0x37, 0x0, [{0x6, 0xf, "fe757427d28d54b0b5d023d792"}, {0x7, 0x11, "f70bf7130a3adb39336cb5e6d3e757"}, {0x6, 0x9, "a7290faff7c840"}, {0x7, 0x8, "b6e7b4e55491"}]}, @timestamp_addr={0x44, 0x3c, 0x88, 0x1, 0xf, [{@remote, 0x9}, {@multicast1, 0x100}, {@broadcast, 0x7}, {@private=0xa010100, 0x8}, {@broadcast, 0x3}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp={0x44, 0x20, 0xa, 0x0, 0x4, [0x4e3, 0xf28, 0x8, 0xfffff82c, 0x0, 0x7, 0x2]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x33}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', r10, 0x10, 0x20, 0x9, 0x7fff, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x65, 0x0, 0x5b, 0x0, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x27, 0x3d, [@rand_addr=0x64010102, @private=0xa010100, @broadcast, @broadcast, @multicast1, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @noop]}}}}}) r11 = openat$cgroup_int(r9, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) writev(r11, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002ac0)='l', 0x1}], 0x2) (async) writev(r11, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002ac0)='l', 0x1}], 0x2) setsockopt$ax25_int(r7, 0x101, 0x6, &(0x7f0000000040)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x94, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffff801}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x55}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xcd}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x1}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000000400000018610000be4d", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000713300002100000034002d80080002000500000008000200010000000800020003000000080002000100000008000200020000000800020003000000c756128130d61f09f6b8eff01fe0d3e41341c83f4027b2f7466b3b52935c14ab6c9f1492ec323e7c7fbc4ab13f0ebabb32985641396ae2af513ba0e23f620a38c0ce6f9f65254218ac4ea40fcb92a4910326f811d5e1b103212b0500000024b97b2f2af243500ef5eef8360eeac98d29b018f6539a90851fe9bfa6546f7000000000000000021b977f83a46b6f234f23649be7a5370600"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) 835.713079ms ago: executing program 0 (id=4841): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@prinfo={0x18, 0x84, 0x5, {0x38, 0x2}}], 0x18, 0x4048800}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @remote, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xf9}, 0x10}, 0x94) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x800) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0xfff, 0x0, 0xbf, 0x8, 0xfffff000]}, &(0x7f0000000080)=0x54) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8d037000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x84040}, 0x40004) socket$inet6(0xa, 0x3, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9ba", 0x31}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) unshare(0x2c020400) 770.917192ms ago: executing program 1 (id=4842): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x4}}, {{0x0, 0x0, &(0x7f0000009240)=[{&(0x7f0000008140)="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", 0x6c1}], 0x10000000000002d4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009480)=[{0x18, 0x84, 0x1, "8f"}], 0x18}}], 0x3, 0x8800) (async) sendmmsg(r0, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x4}}, {{0x0, 0x0, &(0x7f0000009240)=[{&(0x7f0000008140)="77380a42b987f29fdeccc01236fe7227d21e2469c8188ca5ae4d9923cd4ded751aa9e7689cb2555dcd0e7d76bb71985a33fbdeb52255ab3e000933db32863b7ec944ad6ceac1ed2b759a32ef4530305f54628622ccf88843a29f627450699667df9fd820b8a1831ed5fd1bb6a1efbf7f8e4e273c98f8f02d75caa5533986b51311a2c55dd7e6d10caf82924ce550618a32f52421ab79d919870aea342444842210fa5e83500cbffa263f1d15c7972aac6083c3527ea547adaea24fc1b040bd570d06001a0572d5af60807e3a262300d56c0b9e35427680d70fb1b5c9075f92fcf4bf51c5c4c4c1f764ba5c9b7ffa7051b67e3904cdb0e1a657c1568c00dbff1764696d1c475b262290bda1f37c56f85540dc2bc1111602d989c3f1f2743c8901b0d6873ad7aa6e45c3398b5cdae0a88e2114cbfc8a124d8d0f409e3ae2e0ebd6fc65d92ce565de964a6ba31a917fa193849576eb8da8b394d18a95c45a00a13b6e461fffc0ad842e82ba4c26245a1ce7a150949f98886cafc3022d2f4c651fc76b5461ef32456544a8a4beda7ef43af357321fcd556a2b46cf3309d8743e0f32cf4ad185a437b98e7732bbecd29049a5e34416c9e956280b7e979c8056796240c634cb6689049230a3bde2acf3d4a6399c34d6a5372d5029da0eade8514759069b034b4bfaa64ae79700621ed9e31ae7a23ee721b2cdf2a92a2f81e963edde83594313dec5bfeede391f560b1c8af11c1dea8d19cb64b29488db1df7328e99182307081cce9dd3c946c0b352240dc00a65651fc2b010426df86b738b6d09ec8b3292a149918ed36053defafde68d64e5ca04f7819512950b57d099052cb48119cb8fd72f727f479160929dccc3cd27745a92b0e7174d52337b1cde1a7311cf369089b83151eee539bd4079e8a1e4c052c24a0a8445dd83654edc80f160ba730338059e0a8e4296a1e102234e09a59d6395556d9d7e2c7a5c2ddaa70b5568f72844bb64cf6a6c74fe08994d3d6f16f8f18fee71645f7a3208fa48111c33a8e7b8db6192ad8c093900ac6c5b9339b3d28cfbc024f6c5d3c0d1f1813586635e062be200c2382e71c819e8474549808e993f071c9691830d6c9d8088e0064bd9e1fe221e05928ca11412150716431b32630523c23c4a934f75e37bfb8abbb1b60ab5c9b72be3877108a7275507f286dd5aa3096b976efa72352b22aa6afad8e6a4c94e38213edcbb3425c8f9c3165b2409c2f6f751e8457558d155518511084cced84be2cc88918692166c0678b8fa1ba0f14b5b8643439e7cf47a5c7b5bc98dbbbcb79c76f0e92474ced1f1f61170024df798aef02bb241d7672c76c77e4fabe00ba9b4542d4b025afd177a00cb66714f9978d95afd57d71b370135c99aa38edd6446f1dea3a9c4bedbadb9238f106d9c3feafb2ee718b84f0934b545d0d248e5a1d6cd45c82e7e613704ac6d0716ac03e96ff8c9ab8e577d47b085c89cc3e3cf6073d3832096163d105a6335d3dbf1137d33f8c43dc0dccbee21c3f0678a7438ff096f0d37f0dd370de3dd1a639fcc9eacf4b1d9ddb1791b32d7a93e6bdf6560b3e61d495d2ee8506e4b78b58784c902c2b4db52eda28e50bd00e6f1f5a5f43d2dc9fe132086193f9f9109a4a91fc856343e6ba47d98d4f48b82e092e6c2e7a7d283eca517d217ffd0d3745961e92d7286c1af1d0c027e2fcb9e6af623c5f21c198770de63abfad337fac9428b4b771f3b9e5a9b6c7a9e35d61af69473dd36a8e023310aacec3d10d9787a1e6a7f63e1a0ae517523802d290db72daa844a8471d4448806bd2aae59310c57044e766fab7bf7446bc4f5a9db8f12abb8c36f0ed548a5d4c83418025685e1fec337b2bcd55f4ee537e29ac81e37596b7f687cc3a9efdfc5a65046fadd775b7d56291a5c0134bf2d66d20ab0ae288e18637ec1a5f780adb6e9084f7993047a1cf3bff978a468d07daecd6a9b86d1f72b7f006166c825e0b96ede8eb7a165c4162a0c2808fa61ef0649a76ffcfcba9b1bc45660297e20eb6a4e2befa17b1be189d219c31c8ab03e1b5ba08a0743217a3d6f31488ef6c0bee2edfac737a3f8c561815248cfb51211d85823d904cb28897fdb4bd71a506b1d6be22df30db4a2dd92af8f8e7d27f33ca9754e4b68318b35f4d5e8f73a20983c24415f47f4fcfbfeae3e1b87987b0a8235b3b8ff011685a8d4d654f9577b55304c71b6c64fa7f30a12771f35bfa84e2100d21f0b333a57bbaa9866c690201b502c88e1a659a4cbf17cfb90d6180293eb0dadbf089604112da04d287100fed80105f695516ce8b3d5fc207a2bc58f67797762775fccc1448942b9b6a2c9d9183b539d44e4a7abe0342cff5af274e4fb1da5f72fbb59a5c328b47eb581610703d0fd3d3984a609e098b57f6323fed572d1c547ffa50ad352c520f4b17f24cf71cd", 0x6c1}], 0x10000000000002d4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009480)=[{0x18, 0x84, 0x1, "8f"}], 0x18}}], 0x3, 0x8800) 736.830838ms ago: executing program 1 (id=4843): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a000000000000ff0200000000000000000000000000010400907800000000604aa19800003c00fe8000000000000000000000000000bb0000000000000000000000002f0004000400000000000000fcffffff00"/118], 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3, 0x100000}, 0x10}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 664.374336ms ago: executing program 1 (id=4844): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x4, 0xff, 0x7, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="70dce4f91e0a5ca21bf54cad8350d978a55a4f67cfbf1e6d1fb67ec3b50bfac683896f6d5d9a3ccb564c8f47daa7d46a2270dfb0e8405cb7b327bb4a0cec0f8ae6566c1fca7947bf76f08988ef2fece9eceba568d7bd88e20babdd609e5f00249a382323470c050f0310119113d280bb4437b010c79dec72cc669ae6d4f9313c4130279b5fcd18fb37d7b72183bc6964a06b3058911abdde374f53ca6d"], 0x32600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x7f, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000500), 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)={0x250, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x238, 0x1, 0x0, 0x1, [@nested={0x231, 0xf3, 0x0, 0x1, [@generic="4d6162974756486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e0000000000", @generic="d84197339ff6b45c110d8608efed5ecda66700199f663059790bf6688f93d36b732483bdb5bb894f72b6eae06f786f8d67300e6dc3a68e94c03de804b5022ec0ce1e64a90688f1370683160045d88e5639dac9b0ebe8c2e279975ac66139c7ce4deccc77b1a1132abcf0a7a29653f4ae116386d01894108e92fc36b46902204df866124f6be8b980be6a23f0ffd03ec25b19cf8e64e452bcd366733083878b202cbfdac77e862224bda450f6464399fc9f94095d31524575cbb15efda429b82724fb3849456bb7926f1a63f64a49baef", @nested={0x11d, 0x124, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}, @nested={0x4, 0x129}, @generic="f843606b009d9195dfd758fb99eb88fdb9550a54d5a93eac5dc73f72fb543e3aea1ed863319115b20a47606d4cb233b189185722931742eb3d11d6740b4fb9c3a69c7ace13db05305db22b5c39239aa6e56bdfe7eb88fc37e47941d6c2aaaf96b1bc0d126557dd4a1d9eb4eef4e0f0675a5d6d83b50dc1736829529309ffdabbe0dcd4ba758e3306695d7196e3de03f52b2ce0c089416c11c0108cd62c57b57d275b98f3bcc474d51aa2c01af2a3aa87e41dd7c0b9032fa24188b2b6fec7abb66a87f3d69697e5adb6d84250d7b0e7f11d3e18e1ae0ee1523796d9e61eee3aac1df605bbc4f17e0c4b67663ffbbba1fbd9d8536eda", @typed={0xc, 0xb9, 0x0, 0x0, @u64=0xfffffffffffffffc}]}]}]}]}, 0x250}}, 0xc000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="0a0003000100", 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000180)={r11, r9}) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0xffdfffff, 0x4) close(r0) socket$nl_route(0x10, 0x3, 0x0) 538.864916ms ago: executing program 3 (id=4845): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010026bd7000ffffffff0a140000030000070000000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 398.24869ms ago: executing program 3 (id=4846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000004c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000300)={0x1bc, 0x35, 0x8, 0x70bd2d, 0x25dfdbff, "", [@nested={0x1ac, 0xd1, 0x0, 0x1, [@generic="fe6bec28d50abe140cb47b63c512826f42e0418dfcf34cc4174185644f882395b426a6759f8ba6dabe43490006056e63204261c439b46c430034362effea0053687d6352d34c2587432491bab8fa8c56170272d874508992ac05e27862b27c4202b80775592b90093a9fb61f415cc91ba06a4cb915904f7ee23178b9d3e2fe203655a5992198eebaa5459f5104938ee314de9bdc87fe30282d0b22284f2b3e7471e7489bd298f2f90f35d06cb680cbba731296d469fa9b76765a596c90ccea04ef04ace3511b0c3caa611327739928bfa02245038fe81a48b85f48c171e9eab977", @generic="7ccf73af0fb3d0d76627793ac8996fb730c915abab2efa5d15b5d8bee57e51c445501aa600066e070e25e0f0c189e79cba44e4ccd174be2bac280a2e10b6aec4876d02068c820129fdf780cb4e997060fe7ac4ad896c979c3c4f334a7126178f0c3c177b76ae0d8224ba75221c94d0f8df129500f9dd349623f2a60e671f1579d0eeee0251d30905ba726437532f368b72281dd67badb95d3341a50c0b2384328b6d4638741463259f446303a1480ec970605c5afa5d56b54373a789a187d1b9121d8e", @typed={0x4, 0x152}]}]}, 0x1bc}, {&(0x7f0000000500)={0xdc, 0x26, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x7b, 0x14, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @fd=r1}, @typed={0xf, 0xff, 0x0, 0x0, @str='ip6erspan0\x00'}, @generic="6766f1472098735c5eebf2859b551d832f8e885b3e37bef1bb24a96e71944c61c9d73e91e61e21fa298716942c890021689653eed0764faaedc171748ac8c898932e7657ea871404129f5f196779c8fe9f41", @nested={0x4, 0xa7}, @generic="bda6029d27a2b57541"]}, @nested={0x47, 0xb7, 0x0, 0x1, [@generic="d638598edd08185efaa4d6171802dc1ac4aebf62a2a4c64e6de7bee7f7b0466caa42630f9f97cb81049be11595e89f7f8c180fb0cfc9bf8b1460450a9baf3b3664add0"]}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r2}]}, 0xdc}, {&(0x7f0000000600)={0xac, 0x30, 0x400, 0x70bd2c, 0x3384, "", [@generic="ccfa2025cab8d66166bc620268be7af1dfed2bd6f774a00101d44a9bc5069f4ae564554c690f94da50f1b1f1864a4666e26c1271d00bd915c39d370902fd83472610153bac3c233780c85d44220319827119c8771dfee6cb8d44f05c2fe4759888db7721965dfd75a577ebe669f81674a0ed23b4d473a09d6d347e6f234088440035510ea856b1cf5aa350dcc58c49b161ea0e95ec16ed66fcf3"]}, 0xac}, {&(0x7f00000006c0)={0x1c, 0x21, 0x10, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc, 0x144, 0x0, 0x0, @u64=0x15}]}, 0x1c}, {&(0x7f0000000700)={0x1254, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x133}, @nested={0xce, 0x33, 0x0, 0x1, [@typed={0x5, 0x12, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xce}, @generic="4e3132f465935e0c4ed3344d01f5b453cbac8f1fd172252e8461a192a7e8544c7d0ceb117ef6bac1db5dea978d1721cc5ec8e880205aff77ce769fe6baa464ba7675e05d0b4d13721b69fa1ccc4c9a66a36653ac84e6932baa5f3e7db67dcc8819119d2704b7e05d73c10503876c3f9a8f3232c2a7c599711f49628919a8c64da04dc3014928fd66dfec063d7cde6d9ca8c2cc6f0cb9f950bd1df9ff171a4c4c57beaecce16440cddb8bb2fa4ee7fee1d84699f8454b2ec80c137efec5b9"]}, @nested={0x1170, 0x9e, 0x0, 0x1, [@typed={0x5, 0xc7, 0x0, 0x0, @str='\x00'}, @generic="cd997a9dc7156ec6c4932a4e3edd0719cf24ff218edac346ad9845522d9a3755f4c708cf894f660af103ac46cc5448eb0b6eda6115808c97bb5508fd323cc6c229fe89e9461380e3bd66e722a3de8ed5b56605844cc335d9229b80054cebfa46b4585c76076d672bc309a5eb12d6d9343201e82262dfac56630c3302c2b4741c3e45b8", @generic="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", @nested={0x4, 0x7f}, @typed={0xc, 0x14f, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x126, 0x0, 0x0, @ipv6=@private1}, @generic="0c7e121b4fa8e9f110bd81d59b9d7bed1928e80e96e662a27b9863a9fd86859b170bbbb0e3e9e315a54bb515562ed751d4f50f6ff2be46c0e965bfd0d62021d72e57d97f6bb0c485d6f18c2413db15432cb4ce636b0941ff0f6949cc44b73d6e08388f9cc63d25700042160ad0bab103ce6892fef72fbabac0254c74304fe8ebadde5fca89a4098bcebd1ebfce2189369c8e4abb1cccecb3f3772bc42babde0453a187731d494db1fea2c7d061c0702595d04d5afd1bd1498edfa51ce3"]}]}, 0x1254}], 0x5, 0x0, 0x0, 0x41}, 0x4008080) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'ip6erspan0\x00', 0x81}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) 206.714364ms ago: executing program 4 (id=4847): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x118, 0x73, 0x2, 0x7, 0x93, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0xfff1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r10 = socket(0x18, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 142.171583ms ago: executing program 3 (id=4848): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000540)="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") (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x325) (async) r3 = socket$pptp(0x18, 0x1, 0x2) getpeername(r3, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000140)=0x80) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x60, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000ffff23bd7010fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="38da0300c7a427e7fddb97a05f8e11a004004c0012800b0001006970766c616e00003c0002800600020002000000060001000200000006000200010000000600020002000000060001400200000006000100020000000600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 0s ago: executing program 4 (id=4849): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000304f9fffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00fb000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="40000000000000000000000025aa1b531994824f4a7300000000"], 0x14}, 0x1, 0x0, 0x0, 0x40854}, 0x84) (async) syz_emit_ethernet(0x22, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x14, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}}, 0x0) sendto$ax25(r4, &(0x7f00000002c0)="3e6a2ebad7dfc8c8ce248825666665bafff99242318a9cb9cad49e962ed05392e7e0aee76bfbf8912c4861cd39ec42416081ead7b6eda546db3db45b23d9534dfa455eae233a836c59fd4a67709316d5f0ab1328ce51a4a2a3082fe22a3cf748de2bfbea2f483cb0fdf1eadb8d2195382d2cb23dab53d750eff0d4dee09f48a76b1cb826e3517d47cea2f51c6192d2e67e74f19b79565bc8e7542e1436eb8d", 0x9f, 0x4, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x8000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r6, 0x0, 0xbebf) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): red allmulticast mode [ 455.587334][T18577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 455.617568][T18577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 455.720341][T18872] netlink: 'syz.1.3145': attribute type 10 has an invalid length. [ 455.726534][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 455.777078][T18872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.786237][T18872] bond0: entered allmulticast mode [ 455.791543][T18872] bond_slave_0: entered allmulticast mode [ 455.797596][T18872] bond_slave_1: entered allmulticast mode [ 455.803349][T18872] dummy0: entered allmulticast mode [ 455.810934][T18872] team0: Port device bond0 added [ 455.857034][T18884] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 456.084353][ T63] IPVS: stop unused estimator thread 0... [ 456.094494][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'. [ 456.101150][T18892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3149'. [ 456.128372][T18577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.192512][T18577] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.207664][ T5140] Bluetooth: hci1: command tx timeout [ 456.255352][T18899] gtp0: entered promiscuous mode [ 456.285759][T18899] gtp0: entered allmulticast mode [ 456.300977][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.308165][ T8504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.362942][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.370145][ T8504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.498968][T18906] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.526416][T18906] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.599958][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.816247][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3157'. [ 456.862087][T18920] netlink: 'syz.4.3157': attribute type 10 has an invalid length. [ 456.917397][T18920] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.965061][T18920] bond0: (slave team0): Enslaving as an active interface with an up link [ 457.005401][T18928] gre1: entered promiscuous mode [ 457.075120][T18934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3160'. [ 457.393958][T18953] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3163'. [ 457.419508][T18577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.462088][T18953] tipc: Enabled bearer , priority 10 [ 457.471944][T18953] syzkaller0: entered promiscuous mode [ 457.479908][T18953] syzkaller0: entered allmulticast mode [ 457.571116][T18953] tipc: Resetting bearer [ 457.667475][T18952] tipc: Resetting bearer [ 457.723378][T18952] tipc: Disabling bearer [ 457.789534][T18577] veth0_vlan: entered promiscuous mode [ 457.812666][T18577] veth1_vlan: entered promiscuous mode [ 457.894501][T18577] veth0_macvtap: entered promiscuous mode [ 457.943902][T18577] veth1_macvtap: entered promiscuous mode [ 458.023610][T18577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.042472][T18577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.063525][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.090305][T18991] tipc: Enabled bearer , priority 0 [ 458.113475][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.124353][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.156893][T18991] syzkaller0: entered promiscuous mode [ 458.163245][T18991] syzkaller0: entered allmulticast mode [ 458.182308][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.258384][T18991] tipc: Resetting bearer [ 458.337727][T19007] openvswitch: netlink: Message has 592 unknown bytes. [ 458.368955][T19007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.394539][T18991] tipc: Resetting bearer [ 458.435039][T18991] tipc: Disabling bearer [ 458.512398][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.537180][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.640860][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.670278][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.803972][T19030] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3180'. [ 458.837161][T19030] tipc: Enabled bearer , priority 10 [ 458.875711][T19030] syzkaller0: entered promiscuous mode [ 458.899308][T19030] syzkaller0: entered allmulticast mode [ 458.958378][T19030] tipc: Resetting bearer [ 458.975759][T19029] tipc: Resetting bearer [ 459.023116][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 459.036536][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 459.119343][T19029] tipc: Disabling bearer [ 459.173940][T19039] xt_bpf: check failed: parse error [ 459.177299][T19046] syzkaller0: entered promiscuous mode [ 459.184821][T19046] syzkaller0: entered allmulticast mode [ 459.251579][T19046] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 459.750168][T19085] Cannot find add_set index 2 as target [ 459.865299][T19055] lo speed is unknown, defaulting to 1000 [ 459.991993][T19096] tipc: Started in network mode [ 459.998132][T19096] tipc: Node identity 82d23259481c, cluster identity 4711 [ 460.005621][T19096] tipc: Enabled bearer , priority 10 [ 460.025851][T19096] syzkaller0: entered promiscuous mode [ 460.031971][T19096] syzkaller0: entered allmulticast mode [ 460.109131][T19096] tipc: Resetting bearer [ 460.129713][T19101] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.153406][T19101] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 460.193622][T19095] tipc: Resetting bearer [ 460.212705][T19095] tipc: Disabling bearer [ 460.224251][T19106] netem: change failed [ 460.385384][T19112] team1: entered promiscuous mode [ 460.395422][T19112] team1: entered allmulticast mode [ 460.406824][T19117] __nla_validate_parse: 3 callbacks suppressed [ 460.406842][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 460.423173][T19112] 8021q: adding VLAN 0 to HW filter on device team1 [ 460.444753][T19120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3202'. [ 460.500485][T19116] netlink: 'syz.2.3202': attribute type 3 has an invalid length. [ 460.513291][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 460.515379][T19117] team2: entered promiscuous mode [ 460.530329][T19117] team2: entered allmulticast mode [ 460.536152][T19117] 8021q: adding VLAN 0 to HW filter on device team2 [ 460.859218][T19133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3206'. [ 460.869551][T19134] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 460.878259][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 461.080223][T19151] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 461.088421][T19150] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:20001 [ 461.101704][T19151] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3210'. [ 461.129660][T19151] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3210'. [ 461.164767][T19151] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 461.187771][T19151] netlink: 'syz.2.3210': attribute type 8 has an invalid length. [ 461.200176][T19151] netlink: 606 bytes leftover after parsing attributes in process `syz.2.3210'. [ 461.275388][T19162] batman_adv: batadv0: Adding interface: dummy0 [ 461.291255][T19162] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.322551][T19162] batman_adv: batadv0: Interface activated: dummy0 [ 461.358617][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 461.407936][T19167] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3214'. [ 461.447651][T19166] batadv0: mtu less than device minimum [ 461.465514][T19166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.477607][T19166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.489201][T19166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.500954][T19166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.512690][T19166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.524380][T19166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.531450][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 461.545396][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 461.554237][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 461.562534][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 461.571464][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.633831][T19164] : entered promiscuous mode [ 461.639159][T19171] tipc: Enabling of bearer rejected, failed to enable media [ 461.674296][T19176] syzkaller0: entered promiscuous mode [ 461.687435][T19176] syzkaller0: entered allmulticast mode [ 461.896690][T19183] netlink: 'syz.3.3219': attribute type 39 has an invalid length. [ 462.103966][T19172] lo speed is unknown, defaulting to 1000 [ 462.214803][T19185] siw: device registration error -23 [ 462.784897][T19172] chnl_net:caif_netlink_parms(): no params data found [ 462.860171][ T8501] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.066979][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.084536][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.181790][ T12] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.346943][ T63] batman_adv: batadv0: Removing interface: ip6gretap1 [ 463.660334][ T5835] Bluetooth: hci4: command tx timeout [ 463.968306][ T63] dvmrp0 (unregistering): left allmulticast mode [ 464.129717][ T63] bond0 (unregistering): left allmulticast mode [ 464.138722][ T63] bond_slave_0: left allmulticast mode [ 464.144297][ T63] bond_slave_1: left allmulticast mode [ 464.152444][ T63] dummy0: left allmulticast mode [ 464.162137][T19271] net_ratelimit: 13 callbacks suppressed [ 464.162150][T19271] netlink: get zone limit has 4 unknown bytes [ 464.166657][ T63] team0: Port device bond0 removed [ 464.171118][T19271] netlink: get zone limit has 4 unknown bytes [ 464.241326][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.250734][ T63] bond_slave_0: left promiscuous mode [ 464.260060][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.271013][ T63] bond_slave_1: left promiscuous mode [ 464.278502][ T63] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 464.287269][ T63] dummy0: left promiscuous mode [ 464.298932][ T63] bond0 (unregistering): Released all slaves [ 464.309101][ T63] bond1 (unregistering): Released all slaves [ 464.323270][ T63] bond2 (unregistering): Released all slaves [ 464.475484][ T63] bond3 (unregistering): Released all slaves [ 464.490018][ T63] bond4 (unregistering): Released all slaves [ 464.502777][ T63] bond5 (unregistering): Released all slaves [ 464.637225][ T63] bond6 (unregistering): Released all slaves [ 464.775210][ T63] bond7 (unregistering): Released all slaves [ 464.787545][ T63] bond8 (unregistering): Released all slaves [ 464.800496][ T63] bond9 (unregistering): Released all slaves [ 464.947317][ T63] bond10 (unregistering): Released all slaves [ 464.960354][ T63] bond11 (unregistering): Released all slaves [ 464.972540][ T63] bond12 (unregistering): Released all slaves [ 465.008076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.144041][T19172] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.174642][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.213846][T19172] bridge_slave_0: entered allmulticast mode [ 465.250748][T19172] bridge_slave_0: entered promiscuous mode [ 465.279806][T19172] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.295249][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.313627][T19172] bridge_slave_1: entered allmulticast mode [ 465.329620][T19172] bridge_slave_1: entered promiscuous mode [ 465.354507][ T63] tipc: Disabling bearer [ 465.388764][T19283] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 465.415958][ T63] tipc: Left network mode [ 465.420702][T19290] can: request_module (can-proto-0) failed. [ 465.435869][T19289] netlink: 'syz.2.3248': attribute type 1 has an invalid length. [ 465.465634][T19289] bond1: entered promiscuous mode [ 465.471891][T19289] bond1: entered allmulticast mode [ 465.477784][T19287] __nla_validate_parse: 6 callbacks suppressed [ 465.477803][T19287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3245'. [ 465.538127][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3248'. [ 465.573680][T19289] bond1: (slave ip6gretap1): making interface the new active one [ 465.592076][T19289] ip6gretap1: entered promiscuous mode [ 465.598174][T19289] ip6gretap1: entered allmulticast mode [ 465.615874][T19289] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 465.698916][T19172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.725193][T19297] bond1: left promiscuous mode [ 465.735964][T19297] ip6gretap1: left promiscuous mode [ 465.741917][T19297] bond1: left allmulticast mode [ 465.748479][ T5835] Bluetooth: hci4: command tx timeout [ 465.754314][T19297] ip6gretap1: left allmulticast mode [ 465.761478][T19297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.832227][T19172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.987146][T19172] team0: Port device team_slave_0 added [ 466.033714][T19317] netlink: 'syz.4.3255': attribute type 9 has an invalid length. [ 466.042551][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 466.047146][T19172] team0: Port device team_slave_1 added [ 466.112524][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3256'. [ 466.185204][T19172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.197832][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.238355][T19172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.329969][T19172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.345221][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.389812][T19172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.488415][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3258'. [ 466.650926][T19333] netlink: 'syz.2.3258': attribute type 1 has an invalid length. [ 466.666535][T19333] netlink: 'syz.2.3258': attribute type 2 has an invalid length. [ 466.800745][T19172] hsr_slave_0: entered promiscuous mode [ 466.820035][T19172] hsr_slave_1: entered promiscuous mode [ 466.834891][T19172] debugfs: 'hsr0' already exists in 'hsr' [ 466.858241][T19172] Cannot create hsr debugfs directory [ 467.006640][T19363] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3265'. [ 467.047500][T19363] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 467.222629][T19375] x_tables: unsorted underflow at hook 4 [ 467.370446][T19372] tipc: Enabled bearer , priority 0 [ 467.393449][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3268'. [ 467.519607][T19359] netlink: 'syz.3.3263': attribute type 2 has an invalid length. [ 467.553870][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 467.625927][T19376] syzkaller0: entered promiscuous mode [ 467.631750][T19376] syzkaller0: entered allmulticast mode [ 467.640583][T19365] tipc: Resetting bearer [ 467.731726][T19364] tipc: Resetting bearer [ 467.806480][ T5835] Bluetooth: hci4: command tx timeout [ 467.813157][T19364] tipc: Disabling bearer [ 467.986127][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.009185][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.133231][ T63] pimreg (unregistering): left allmulticast mode [ 468.269663][ T63] pim6reg (unregistering): left allmulticast mode [ 468.747480][ T63] team_slave_1 (unregistering): left allmulticast mode [ 468.755114][ T63] team0 (unregistering): Port device team_slave_1 removed [ 468.798762][ T63] team_slave_0 (unregistering): left allmulticast mode [ 468.806447][ T63] team0 (unregistering): Port device team_slave_0 removed [ 469.149953][T19358] lo speed is unknown, defaulting to 1000 [ 469.149976][ T5876] lo speed is unknown, defaulting to 1000 [ 469.196596][ T5876] syz2: Port: 1 Link DOWN [ 469.282941][T19172] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 469.357542][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 469.633171][T19437] tipc: Enabled bearer , priority 10 [ 469.649707][T19437] syzkaller0: entered promiscuous mode [ 469.663370][ T8501] smc: removing ib device syz0 [ 469.672641][T19437] syzkaller0: entered allmulticast mode [ 469.790174][T19437] tipc: Resetting bearer [ 469.854176][T19436] tipc: Resetting bearer [ 469.893419][ T5835] Bluetooth: hci4: command tx timeout [ 469.908374][T19436] tipc: Disabling bearer [ 470.270369][T19450] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3281'. [ 470.283132][T19450] netlink: 'syz.2.3281': attribute type 7 has an invalid length. [ 470.291560][T19450] netlink: 'syz.2.3281': attribute type 8 has an invalid length. [ 470.652972][T19396] lo speed is unknown, defaulting to 1000 [ 471.120556][T19471] __nla_validate_parse: 2 callbacks suppressed [ 471.120577][T19471] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3283'. [ 471.247106][T19172] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 471.306674][T19464] tipc: Enabled bearer , priority 10 [ 471.332193][T19467] syzkaller0: entered promiscuous mode [ 471.338436][T19467] syzkaller0: entered allmulticast mode [ 471.397114][T19464] tipc: Resetting bearer [ 471.454969][T19172] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 471.574164][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3283'. [ 471.589951][T19463] tipc: Resetting bearer [ 471.634661][T19463] tipc: Disabling bearer [ 471.860426][T19172] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 472.542686][T19172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.589591][T19172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.640378][T19172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.697162][T19172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.941412][ T63] IPVS: stop unused estimator thread 0... [ 473.016849][T19528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3291'. [ 473.019811][T19532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 473.025856][T19528] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 473.075555][T19172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.230185][T19172] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.294830][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.302090][ T8501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.352360][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.359650][ T8486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.611325][T19552] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3295'. [ 473.665740][T19558] tipc: Enabled bearer , priority 10 [ 473.700121][T19552] syzkaller0: entered promiscuous mode [ 473.705780][T19552] syzkaller0: entered allmulticast mode [ 473.732022][T19557] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3297'. [ 473.859270][T19552] tipc: Resetting bearer [ 473.876001][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 473.950532][T19551] tipc: Resetting bearer [ 473.980715][T19576] TCP: TCP_TX_DELAY enabled [ 473.997813][T19576] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3300'. [ 474.047524][T19551] tipc: Disabling bearer [ 474.191461][T19172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.323318][T19172] veth0_vlan: entered promiscuous mode [ 474.375714][T19172] veth1_vlan: entered promiscuous mode [ 474.593687][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 475.012207][T19172] veth0_macvtap: entered promiscuous mode [ 475.140781][ T8504] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.161728][T19636] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 475.209658][T19638] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3316'. [ 475.294032][T19172] veth1_macvtap: entered promiscuous mode [ 475.323765][ T8504] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.352266][T19636] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 475.366503][ T8504] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.396409][T19638] nbd2: detected capacity change from 0 to 63 [ 475.434459][T19649] block nbd2: NBD_DISCONNECT [ 475.465553][ T8501] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.492558][T19649] block nbd2: Disconnected due to user request. [ 475.559551][T19659] netlink: 'syz.0.3318': attribute type 3 has an invalid length. [ 475.570731][T19649] block nbd2: shutting down sockets [ 475.599277][T19172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.634018][ C1] blk_print_req_error: 138 callbacks suppressed [ 475.634038][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.649883][ C1] buffer_io_error: 138 callbacks suppressed [ 475.649901][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 475.669241][T19172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.687802][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.697458][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 475.705618][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.715170][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 475.723093][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.732608][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 475.740732][T18794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.751121][ T8501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.751350][ T8501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.751414][ T8501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.802928][T18794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 475.812284][T18794] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.823074][T18794] Buffer I/O error on dev nbd2, logical block 1, async page read [ 475.851527][ T1139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.864208][T18794] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.905611][T18794] Buffer I/O error on dev nbd2, logical block 2, async page read [ 475.955083][T18794] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.001928][T18794] Buffer I/O error on dev nbd2, logical block 3, async page read [ 476.045986][T18794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.084313][T18794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.100472][ T8501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.127060][ T8501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.134625][T18794] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 476.154862][T18794] Buffer I/O error on dev nbd2, logical block 1, async page read [ 476.168201][T18794] ldm_validate_partition_table(): Disk read failed. [ 476.184411][T18794] Dev nbd2: unable to read RDB block 0 [ 476.203921][T18794] nbd2: unable to read partition table [ 476.251661][T18794] ldm_validate_partition_table(): Disk read failed. [ 476.258660][ T8486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.286905][ T8486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.287445][T19683] netlink: 'syz.2.3322': attribute type 10 has an invalid length. [ 476.295247][T18794] Dev nbd2: unable to read RDB block 0 [ 476.332095][T18794] nbd2: unable to read partition table [ 476.370243][T19683] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 476.665935][T19694] 8021q: VLANs not supported on ip_vti0 [ 476.874351][ T5905] IPVS: starting estimator thread 0... [ 476.966448][T19710] IPVS: using max 33 ests per chain, 79200 per kthread [ 476.985163][T19712] dummy0: entered promiscuous mode [ 476.990944][T19712] macsec1: entered promiscuous mode [ 476.998341][T19712] macsec1: entered allmulticast mode [ 477.003669][T19712] dummy0: entered allmulticast mode [ 477.010626][T19712] dummy0: left allmulticast mode [ 477.015755][T19712] dummy0: left promiscuous mode [ 477.153398][T19720] can: request_module (can-proto-0) failed. [ 477.195547][T19722] tipc: Can't bind to reserved service type 1 [ 477.211522][T19720] netlink: 'syz.4.3329': attribute type 39 has an invalid length. [ 477.243576][T19724] __nla_validate_parse: 3 callbacks suppressed [ 477.243590][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3330'. [ 477.288885][T19722] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3329'. [ 477.303088][T19722] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3329'. [ 477.316060][T19722] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3329'. [ 477.448989][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 477.673177][T19740] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 477.686535][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 477.831547][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'. [ 477.867134][T19756] sctp: [Deprecated]: syz.0.3339 (pid 19756) Use of int in maxseg socket option. [ 477.867134][T19756] Use struct sctp_assoc_value instead [ 477.897995][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 477.930802][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 478.094804][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 478.540032][T19799] netlink: 'syz.4.3351': attribute type 10 has an invalid length. [ 478.573913][T19799] ªªªªªª: renamed from lo (while UP) [ 478.631121][T19803] æÿîÿ: entered promiscuous mode [ 479.155823][T19825] netlink: 'syz.2.3359': attribute type 1 has an invalid length. [ 479.163883][T19825] netlink: 'syz.2.3359': attribute type 2 has an invalid length. [ 479.635993][T19848] vlan3: entered allmulticast mode [ 479.656639][T19848] team0: entered allmulticast mode [ 479.677828][T19848] team_slave_0: entered allmulticast mode [ 479.683713][T19848] team_slave_1: entered allmulticast mode [ 479.705308][T19850] tipc: Enabled bearer , priority 0 [ 479.738641][T19851] syzkaller0: entered promiscuous mode [ 479.776466][T19851] syzkaller0: entered allmulticast mode [ 479.875517][T19850] tipc: Resetting bearer [ 479.972256][T19850] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 480.003956][T19862] netlink: 'syz.2.3366': attribute type 1 has an invalid length. [ 480.018323][T19862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.031169][T19850] CPU: 1 UID: 0 PID: 19850 Comm: syz.3.3363 Not tainted syzkaller #0 PREEMPT(full) [ 480.031196][T19850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 480.031207][T19850] Call Trace: [ 480.031215][T19850] [ 480.031223][T19850] dump_stack_lvl+0xe8/0x150 [ 480.031253][T19850] sysfs_warn_dup+0x8e/0xa0 [ 480.031279][T19850] sysfs_do_create_link_sd+0xc0/0x110 [ 480.031306][T19850] device_add_class_symlinks+0x1cf/0x240 [ 480.031337][T19850] device_add+0x475/0xb70 [ 480.031367][T19850] wiphy_register+0x1d6c/0x2d50 [ 480.031405][T19850] ? __pfx_wiphy_register+0x10/0x10 [ 480.031426][T19850] ? __pfx_netdev_run_todo+0x10/0x10 [ 480.031452][T19850] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 480.031486][T19850] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 480.031524][T19850] ieee80211_register_hw+0x34d2/0x4150 [ 480.031541][T19850] ? __lock_acquire+0x6b5/0x2cf0 [ 480.031577][T19850] ? ieee80211_register_hw+0x1491/0x4150 [ 480.031605][T19850] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 480.031640][T19850] ? __hrtimer_setup+0x181/0x200 [ 480.031658][T19850] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 480.031687][T19850] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 480.031737][T19850] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 480.031758][T19850] ? kstrndup+0xbf/0x160 [ 480.031787][T19850] hwsim_new_radio_nl+0xf35/0x1bd0 [ 480.031826][T19850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 480.031862][T19850] ? rcu_is_watching+0x15/0xb0 [ 480.031882][T19850] ? __nla_parse+0x40/0x60 [ 480.031909][T19850] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 480.031944][T19850] genl_family_rcv_msg_doit+0x22a/0x330 [ 480.031974][T19850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 480.032008][T19850] ? bpf_lsm_capable+0x9/0x20 [ 480.032032][T19850] ? security_capable+0x7e/0x2c0 [ 480.032058][T19850] genl_rcv_msg+0x61c/0x7a0 [ 480.032112][T19850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.032135][T19850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 480.032174][T19850] netlink_rcv_skb+0x232/0x4b0 [ 480.032196][T19850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.032223][T19850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.032240][T19850] ? genl_rcv+0x19/0x40 [ 480.032279][T19850] ? down_read+0x272/0x2e0 [ 480.032301][T19850] ? genl_rcv+0xd/0x40 [ 480.032327][T19850] genl_rcv+0x28/0x40 [ 480.032349][T19850] netlink_unicast+0x80f/0x9b0 [ 480.032377][T19850] ? __pfx_netlink_unicast+0x10/0x10 [ 480.032399][T19850] ? netlink_sendmsg+0x650/0xb40 [ 480.032418][T19850] ? skb_put+0x11b/0x210 [ 480.032442][T19850] netlink_sendmsg+0x813/0xb40 [ 480.032471][T19850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.032496][T19850] ? aa_sock_msg_perm+0xf1/0x1b0 [ 480.032526][T19850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.032547][T19850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.032567][T19850] ____sys_sendmsg+0xa68/0xad0 [ 480.032593][T19850] ? __might_fault+0xaf/0x130 [ 480.032628][T19850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.032663][T19850] ? import_iovec+0x73/0xa0 [ 480.032693][T19850] ___sys_sendmsg+0x2a5/0x360 [ 480.032717][T19850] ? __lock_acquire+0x6b5/0x2cf0 [ 480.032748][T19850] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.032777][T19850] ? futex_wake+0x4ac/0x580 [ 480.032820][T19850] ? __fget_files+0x2a/0x420 [ 480.032839][T19850] ? __fget_files+0x3a0/0x420 [ 480.032870][T19850] __x64_sys_sendmsg+0x1bd/0x2a0 [ 480.032900][T19850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.032937][T19850] ? rcu_is_watching+0x15/0xb0 [ 480.032969][T19850] do_syscall_64+0xe2/0xf80 [ 480.032992][T19850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.033011][T19850] ? trace_irq_disable+0x37/0x100 [ 480.033029][T19850] ? clear_bhb_loop+0x60/0xb0 [ 480.033053][T19850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.033071][T19850] RIP: 0033:0x7efd6439aeb9 [ 480.033089][T19850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.033105][T19850] RSP: 002b:00007efd625f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.033126][T19850] RAX: ffffffffffffffda RBX: 00007efd64615fa0 RCX: 00007efd6439aeb9 [ 480.033140][T19850] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 480.033153][T19850] RBP: 00007efd64408c1f R08: 0000000000000000 R09: 0000000000000000 [ 480.033165][T19850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.033176][T19850] R13: 00007efd64616038 R14: 00007efd64615fa0 R15: 00007ffefa996298 [ 480.033210][T19850] [ 480.582737][T19849] tipc: Resetting bearer [ 480.659328][T19849] tipc: Disabling bearer [ 480.769891][T19870] batman_adv: batadv0: Adding interface: macvlan3 [ 480.788231][T19870] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.814687][T19870] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 480.990520][T19878] bond2: option ad_select: invalid value (34) [ 480.999949][T19881] netlink: 'syz.2.3371': attribute type 32 has an invalid length. [ 481.023468][T19878] bond2 (unregistering): Released all slaves [ 481.114077][T19881] bond2: option coupled_control: invalid value (17) [ 481.144760][T19881] bond2 (unregistering): Released all slaves [ 481.336978][T19910] geneve3: entered promiscuous mode [ 481.349585][ T8486] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 481.368078][ T8486] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 481.419388][ T8486] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 481.649076][T19929] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 481.743637][T19934] openvswitch: netlink: Message has 4 unknown bytes. [ 481.823455][T19934] bond1: (slave bridge3): making interface the new active one [ 481.850845][T19934] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 482.024357][T19947] pim6reg: entered allmulticast mode [ 482.288436][T19960] __nla_validate_parse: 12 callbacks suppressed [ 482.288457][T19960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3384'. [ 482.405556][T19965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3389'. [ 482.781900][T19978] xt_cgroup: xt_cgroup: no path or classid specified [ 482.853196][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 484.489339][T19974] pim6reg: entered allmulticast mode [ 485.043363][T20013] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 485.185662][T20013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.197017][T20027] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3403'. [ 485.311314][T20025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.324731][T20025] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 485.337937][T20025] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 485.366867][T20027] tipc: Enabled bearer , priority 10 [ 485.377619][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 485.420090][T20032] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 485.428500][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3402'. [ 485.450085][T20032] bond1: (slave wlan0): Opening slave failed [ 485.466719][T20018] syzkaller0: entered promiscuous mode [ 485.472242][T20018] syzkaller0: entered allmulticast mode [ 485.606003][T20016] tipc: Resetting bearer [ 485.713174][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3406'. [ 485.731180][T20016] tipc: Disabling bearer [ 485.739179][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3406'. [ 485.771263][T20048] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3406'. [ 485.784058][T20049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3406'. [ 486.340198][T20074] netlink: 'syz.0.3411': attribute type 13 has an invalid length. [ 486.692145][T20074] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.700023][T20074] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.712485][T20095] netlink: 'syz.1.3414': attribute type 9 has an invalid length. [ 486.891474][T20074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.910283][T20074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.323350][T20097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.372216][T20102] tipc: Enabled bearer , priority 0 [ 487.394182][ T1139] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.404298][ T1139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.425301][ T1139] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.433003][T20127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3418'. [ 487.444297][ T1139] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.460046][ T1139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.475126][ T1139] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.485326][T20129] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3417'. [ 487.495213][T20105] syzkaller0: entered promiscuous mode [ 487.502889][T20105] syzkaller0: entered allmulticast mode [ 487.527188][T20129] tipc: Enabled bearer , priority 10 [ 487.534150][ T1139] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.545084][ T1139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.567207][ T1139] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 487.590181][T20120] syzkaller0: entered promiscuous mode [ 487.606633][T20120] syzkaller0: entered allmulticast mode [ 487.693972][T20119] tipc: Resetting bearer [ 487.729674][T20119] tipc: Disabling bearer [ 487.742419][T20118] tipc: Resetting bearer [ 487.788531][T20118] tipc: Disabling bearer [ 487.804863][T20134] netlink: 'syz.1.3419': attribute type 9 has an invalid length. [ 487.822592][T20138] bridge2: entered promiscuous mode [ 487.828005][T20138] bridge2: entered allmulticast mode [ 487.894696][T20146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3423'. [ 487.912770][T20146] geneve2: entered promiscuous mode [ 488.019793][T20158] xt_TCPMSS: Only works on TCP SYN packets [ 488.364198][T20183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 488.439091][T20189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3433'. [ 488.948127][T20228] tipc: Enabled bearer , priority 0 [ 488.981571][T20228] syzkaller0: entered promiscuous mode [ 489.016585][T20228] syzkaller0: entered allmulticast mode [ 489.064572][T20240] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3445'. [ 489.074635][T20243] syz_tun: entered promiscuous mode [ 489.081044][T20243] vlan4: entered promiscuous mode [ 489.220426][T20240] tipc: Enabled bearer , priority 10 [ 489.235112][T20232] tipc: Disabling bearer [ 489.562722][T20268] openvswitch: netlink: IPv4 tunnel dst address is zero [ 489.627668][T20277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3451'. [ 489.651571][T20214] tipc: Resetting bearer [ 489.768195][T20214] tipc: Disabling bearer [ 489.855031][T20290] netlink: 'syz.1.3455': attribute type 1 has an invalid length. [ 489.862934][T20290] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3455'. [ 490.036537][T20300] syzkaller0: entered promiscuous mode [ 490.074993][T20300] syzkaller0: entered allmulticast mode [ 490.296271][T20313] batadv_slave_0: entered promiscuous mode [ 490.399086][T20288] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:21 [ 490.430539][T20315] tipc: Started in network mode [ 490.465946][T20315] tipc: Node identity 1624830f0392, cluster identity 4711 [ 490.487329][T20315] tipc: Enabled bearer , priority 0 [ 490.496759][T20294] mpoa:mpoad_close: () going down [ 490.524075][T20320] syzkaller0: entered promiscuous mode [ 490.573020][T20320] syzkaller0: entered allmulticast mode [ 490.609676][T20331] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 490.692104][T20315] tipc: Resetting bearer [ 490.759496][T20336] tipc: Resetting bearer [ 490.802606][T20336] tipc: Disabling bearer [ 490.834623][T20310] batadv_slave_0: left promiscuous mode [ 490.971647][T20349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.588111][T20373] tipc: Enabled bearer , priority 0 [ 491.615761][T20373] syzkaller0: entered promiscuous mode [ 491.645481][T20373] syzkaller0: entered allmulticast mode [ 491.697241][T20375] tipc: Resetting bearer [ 491.711806][T20372] tipc: Resetting bearer [ 491.742533][T20372] tipc: Disabling bearer [ 491.751256][T20381] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3470'. [ 492.350883][T20410] Cannot find del_set index 2 as target [ 492.499553][T20425] netlink: 'syz.3.3477': attribute type 1 has an invalid length. [ 492.683851][T20431] netlink: 'syz.3.3477': attribute type 23 has an invalid length. [ 492.787878][ T8559] IPVS: starting estimator thread 0... [ 492.841143][T20425] bond1: entered promiscuous mode [ 492.863185][T20425] bond1: entered allmulticast mode [ 492.869358][T20425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.889287][T20441] IPVS: using max 31 ests per chain, 74400 per kthread [ 492.952504][T20412] macvlan2: entered promiscuous mode [ 492.958199][T20412] macvlan2: entered allmulticast mode [ 492.965747][T20412] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 493.548555][T20464] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 493.583957][T20464] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 493.604088][T20476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3486'. [ 493.899938][T20491] tipc: Enabled bearer , priority 0 [ 493.969838][T20491] syzkaller0: entered promiscuous mode [ 493.978235][T20491] syzkaller0: entered allmulticast mode [ 493.984203][T20495] netlink: 'syz.4.3489': attribute type 7 has an invalid length. [ 493.992983][T20491] tipc: Resetting bearer [ 493.998989][T20495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3489'. [ 494.113615][ T8486] tipc: Resetting bearer [ 494.123032][T20502] netlink: 'syz.0.3490': attribute type 39 has an invalid length. [ 494.143319][T20490] tipc: Resetting bearer [ 494.231019][T20508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3493'. [ 494.243299][T20510] xt_limit: Overflow, try lower: 271964/0 [ 494.253198][T20508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3493'. [ 497.523060][T20490] tipc: Disabling bearer [ 497.576916][ T5905] tipc: Node number set to 3402510937 [ 497.624380][T20566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3498'. [ 497.647352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.014155][T20593] x_tables: duplicate underflow at hook 1 [ 498.051170][T20599] netlink: 'syz.4.3509': attribute type 4 has an invalid length. [ 498.137672][T20606] netlink: 528 bytes leftover after parsing attributes in process `syz.3.3512'. [ 498.275667][T20621] netlink: 'syz.3.3514': attribute type 13 has an invalid length. [ 498.285607][T20621] netlink: 'syz.3.3514': attribute type 12 has an invalid length. [ 498.371678][T20624] tipc: Enabled bearer , priority 0 [ 498.448938][T20621] xt_hashlimit: max too large, truncated to 1048576 [ 498.469538][T20621] xt_bpf: check failed: parse error [ 498.487706][T20621] syzkaller0: entered promiscuous mode [ 498.499977][T20621] syzkaller0: entered allmulticast mode [ 498.542717][T20621] tipc: Resetting bearer [ 498.561510][T20620] tipc: Resetting bearer [ 498.583946][T20620] tipc: Disabling bearer [ 498.827377][T20639] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3517'. [ 498.852095][T20639] nbd: couldn't find a device at index 0 [ 498.882733][T20634] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3517'. [ 498.911484][T20634] nbd: couldn't find a device at index 0 [ 499.588028][T20681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3528'. [ 500.099253][T20702] syzkaller0: entered promiscuous mode [ 500.104795][T20702] syzkaller0: entered allmulticast mode [ 500.113098][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 500.141154][T20702] netlink: 'syz.4.3533': attribute type 21 has an invalid length. [ 500.376074][T20718] Bluetooth: MGMT ver 1.23 [ 500.457948][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'. [ 500.467148][T20724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3540'. [ 500.485421][T20724] vlan2: entered allmulticast mode [ 500.860391][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 501.040277][T20739] bond2: Removing last arp target with arp_interval on [ 501.137625][T20755] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3550'. [ 501.161050][T20752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3548'. [ 501.171982][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3548'. [ 501.548325][T20781] žÿ: renamed from team_slave_1 (while UP) [ 502.292756][T20828] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 502.324957][T20834] netlink: 'syz.3.3571': attribute type 3 has an invalid length. [ 502.364010][T20834] netlink: 'syz.3.3571': attribute type 2 has an invalid length. [ 502.381846][T20834] netlink: 'syz.3.3571': attribute type 2 has an invalid length. [ 502.408782][T20832] netlink: 'syz.3.3571': attribute type 3 has an invalid length. [ 502.436430][T20832] netlink: 'syz.3.3571': attribute type 2 has an invalid length. [ 502.466953][T20832] netlink: 'syz.3.3571': attribute type 2 has an invalid length. [ 502.498139][T20836] nbd: illegal input index 38656 [ 503.115474][T20856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.180191][ T30] audit: type=1800 audit(1770043140.997:5): pid=20852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3577" name="memory.events" dev="tmpfs" ino=721 res=0 errno=0 [ 503.236466][T20844] lo speed is unknown, defaulting to 1000 [ 503.252116][T20844] lo speed is unknown, defaulting to 1000 [ 503.328091][T20844] lo speed is unknown, defaulting to 1000 [ 503.464582][T20844] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 503.589811][T20844] lo speed is unknown, defaulting to 1000 [ 503.597634][T20844] lo speed is unknown, defaulting to 1000 [ 503.652031][T20844] lo speed is unknown, defaulting to 1000 [ 503.662282][T20844] lo speed is unknown, defaulting to 1000 [ 503.685200][T20844] lo speed is unknown, defaulting to 1000 [ 503.720831][T20844] lo speed is unknown, defaulting to 1000 [ 503.727791][T20844] lo speed is unknown, defaulting to 1000 [ 503.734425][T20844] lo speed is unknown, defaulting to 1000 [ 503.742056][T20844] lo speed is unknown, defaulting to 1000 [ 503.749729][T20844] lo speed is unknown, defaulting to 1000 [ 504.238382][T20868] __nla_validate_parse: 16 callbacks suppressed [ 504.238401][T20868] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3580'. [ 504.501004][T20885] netlink: 'syz.2.3582': attribute type 1 has an invalid length. [ 504.508961][T20885] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3582'. [ 504.521549][T20885] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3582'. [ 504.531609][T20885] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3582'. [ 504.610900][T20894] batadv_slave_1: entered promiscuous mode [ 504.624960][T20898] xt_bpf: check failed: parse error [ 504.631343][T20898] x_tables: duplicate underflow at hook 2 [ 504.639814][T20887] netlink: 'syz.1.3585': attribute type 89 has an invalid length. [ 504.654173][ T63] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 504.656855][T20888] batadv_slave_1: left promiscuous mode [ 504.915486][T20911] dvmrp6: entered allmulticast mode [ 504.988673][T20910] netlink: 'syz.1.3591': attribute type 1 has an invalid length. [ 505.058706][T20916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3592'. [ 505.194968][T20900] dvmrp1: entered allmulticast mode [ 505.254419][T20897] lo speed is unknown, defaulting to 1000 [ 505.616756][T20940] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 506.469425][T20971] netlink: 'syz.2.3605': attribute type 1 has an invalid length. [ 506.594823][T20971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3605'. [ 506.629600][T20974] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 506.682523][T20974] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 506.794162][T20971] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 506.822194][T20985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3605'. [ 506.836923][T20984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'. [ 506.895193][T20977] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 506.912030][T20980] macvlan2: entered promiscuous mode [ 506.919113][T20980] macvlan2: entered allmulticast mode [ 506.925335][T20980] bond3: entered promiscuous mode [ 506.942116][T20980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 506.952785][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3608'. [ 506.965603][T20980] bond3: left promiscuous mode [ 507.046803][T20997] bond0: option min_links: invalid value (18446744073624092673) [ 507.064830][T20997] bond0: option min_links: allowed values 0 - 2147483647 [ 507.438834][T21006] siw: device registration error -23 [ 507.495719][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3612'. [ 507.848336][T21013] lo speed is unknown, defaulting to 1000 [ 508.022007][T21031] vlan1: entered promiscuous mode [ 508.039722][T21031] bridge0: entered promiscuous mode [ 508.357831][T21014] lo speed is unknown, defaulting to 1000 [ 508.466910][T21042] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 508.748312][T21051] tipc: Enabled bearer , priority 0 [ 508.798330][T21049] tipc: Disabling bearer [ 508.979110][T21062] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 509.030247][T21068] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 509.403944][T21087] __nla_validate_parse: 5 callbacks suppressed [ 509.403958][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 509.435081][T21088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 509.625584][T21082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.686885][T21082] lo: entered allmulticast mode [ 509.703778][T21082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.724677][T21070] lo speed is unknown, defaulting to 1000 [ 509.868531][T21082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.920531][T21082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.990304][T21103] bridge0: port 3(erspan0) entered blocking state [ 510.002593][T21103] bridge0: port 3(erspan0) entered disabled state [ 510.024272][T21103] erspan0: entered allmulticast mode [ 510.034108][T21103] erspan0: entered promiscuous mode [ 510.045150][T21103] bridge0: port 3(erspan0) entered blocking state [ 510.051881][T21103] bridge0: port 3(erspan0) entered forwarding state [ 510.130728][T21082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.421975][T21107] delete_channel: no stack [ 510.591810][T21112] syzkaller0: entered promiscuous mode [ 510.610135][T21112] syzkaller0: entered allmulticast mode [ 510.629545][T21124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3641'. [ 510.656251][T21124] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3641'. [ 510.751791][T21124] vlan2: entered promiscuous mode [ 510.761413][T21124] geneve1: entered promiscuous mode [ 511.216073][T20961] Set syz1 is full, maxelem 65536 reached [ 511.273105][T20960] Set syz1 is full, maxelem 65536 reached [ 513.339768][T21140] netlink: 'syz.0.3645': attribute type 2 has an invalid length. [ 513.438039][T21169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3650'. [ 513.551197][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3650'. [ 513.754327][T21194] vxcan3: entered promiscuous mode [ 513.781678][T21198] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3659'. [ 513.889586][T21204] delete_channel: no stack [ 513.894211][T21204] delete_channel: no stack [ 514.015137][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 514.064101][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 514.158201][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3665'. [ 514.281320][T21222] team0 (unregistering): Port device team_slave_0 removed [ 514.293259][T21222] team0 (unregistering): Port device team_slave_1 removed [ 514.611119][T21250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3675'. [ 514.635431][T21250] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 514.651007][T21250] block (null): Could not allocate knbd recv work queue. [ 514.744687][T21250] nbd: failed to add new device [ 515.502998][T21264] openvswitch: netlink: IP tunnel dst address not specified [ 517.011440][ T12] nci: nci_rx_work: unknown MT 0x4 [ 517.168486][T21251] lo speed is unknown, defaulting to 1000 [ 517.592669][T21293] lo speed is unknown, defaulting to 1000 [ 517.689491][T21281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.903512][T21312] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 518.359300][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 518.477311][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 518.659764][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'. [ 518.675564][T21348] ip6gre1: entered promiscuous mode [ 518.842950][T21362] sctp: [Deprecated]: syz.4.3706 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.842950][T21362] Use struct sctp_sack_info instead [ 518.861949][T21358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3704'. [ 518.871109][T21358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3704'. [ 518.973609][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3706'. [ 519.152582][T21382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3709'. [ 519.169913][T21382] ksmbd: Unknown IPC event: 1, ignore. [ 519.173224][T21373] : entered promiscuous mode [ 519.267291][T21390] openvswitch: netlink: Message has 592 unknown bytes. [ 519.286351][T21390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.717550][T21403] block nbd2: server does not support multiple connections per device. [ 519.738492][T21403] block nbd2: shutting down sockets [ 520.017027][T21430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3723'. [ 520.131011][T21436] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 520.279994][T21438] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3726'. [ 520.289345][T21438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3726'. [ 520.315866][T21438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3726'. [ 520.700804][T21455] netlink: 'syz.3.3732': attribute type 2 has an invalid length. [ 520.715605][T21455] !: entered promiscuous mode [ 520.957912][T21448] lo speed is unknown, defaulting to 1000 [ 521.065931][T21478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.092315][T21478] bond0: (slave bond4): Enslaving as an active interface with an up link [ 521.215555][T21472] lo speed is unknown, defaulting to 1000 [ 521.318945][T21493] IPVS: stopping backup sync thread 18884 ... [ 521.570607][T21504] bond0: (slave rose0): Error: Device can not be enslaved while up [ 524.020374][T21482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.032029][T21503] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 524.057301][T21503] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3741'. [ 524.078956][T21503] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3741'. [ 524.117170][T21503] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 524.126409][T21503] netlink: 'syz.0.3741': attribute type 8 has an invalid length. [ 524.144360][T21503] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3741'. [ 524.165157][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3749'. [ 524.351884][T21528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3751'. [ 524.485603][T21544] bond1: option miimon: invalid value (18446744073709551607) [ 524.494632][T21544] bond1: option miimon: allowed values 0 - 2147483647 [ 524.504019][T21544] bond1 (unregistering): Released all slaves [ 524.762890][T21556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3758'. [ 524.780306][T21544] bridge_slave_0: left allmulticast mode [ 524.790975][T21544] bridge_slave_0: left promiscuous mode [ 524.798364][T21544] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.812234][T21544] bridge_slave_1: left allmulticast mode [ 524.858686][T21544] bridge_slave_1: left promiscuous mode [ 524.872150][T21544] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.988784][T21544] bond0: (slave bond_slave_0): Releasing backup interface [ 525.004147][T21544] bond0: (slave bond_slave_1): Releasing backup interface [ 525.021863][T21544] team0: Port device team_slave_0 removed [ 525.033892][T21544] team0: Port device 76žÿ removed [ 525.040749][T21544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.049125][T21544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.058002][T21544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.065394][T21544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.074976][T21544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 525.111377][T21534] lo speed is unknown, defaulting to 1000 [ 525.269756][T21575] __nla_validate_parse: 1 callbacks suppressed [ 525.269774][T21575] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3763'. [ 525.530390][T21592] xt_TCPMSS: Only works on TCP SYN packets [ 525.926606][T21601] Bluetooth: MGMT ver 1.23 [ 526.040451][T21602] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3766'. [ 526.226153][T21593] lo speed is unknown, defaulting to 1000 [ 526.681105][T21614] netlink: 'syz.0.3770': attribute type 33 has an invalid length. [ 526.706476][T21614] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3770'. [ 526.745117][T21632] netlink: 'syz.4.3772': attribute type 23 has an invalid length. [ 526.764456][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3772'. [ 526.858448][T21634] xt_ecn: cannot match TCP bits for non-tcp packets [ 526.914611][T21634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3773'. [ 526.924867][T21634] veth0: entered promiscuous mode [ 526.935909][T21633] veth0: left promiscuous mode [ 527.212152][T21643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3776'. [ 527.231512][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 527.802486][T21660] lo speed is unknown, defaulting to 1000 [ 528.306442][T21727] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.3798'. [ 528.517320][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3801'. [ 528.538788][T21739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3801'. [ 528.806862][T21744] nbd2: detected capacity change from 0 to 127 [ 528.816348][T21750] netlink: 'syz.3.3805': attribute type 1 has an invalid length. [ 528.824171][ T5835] block nbd2: Receive control failed (result -32) [ 528.833672][T21326] block nbd2: Dead connection, failed to find a fallback [ 528.851501][T21326] block nbd2: shutting down sockets [ 528.864743][T21326] blk_print_req_error: 138 callbacks suppressed [ 528.864760][T21326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.880757][T21326] buffer_io_error: 138 callbacks suppressed [ 528.880775][T21326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 528.894768][T21326] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.905265][T21326] Buffer I/O error on dev nbd2, logical block 1, async page read [ 528.915051][T21326] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.925116][T21326] Buffer I/O error on dev nbd2, logical block 2, async page read [ 528.976417][T21326] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.985930][T21326] Buffer I/O error on dev nbd2, logical block 3, async page read [ 529.039348][T21326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 529.066570][T21326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 529.074805][T21326] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 529.130204][T21326] Buffer I/O error on dev nbd2, logical block 1, async page read [ 529.156530][T21326] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 529.166046][T21326] Buffer I/O error on dev nbd2, logical block 2, async page read [ 529.206539][T21326] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 529.216084][T21326] Buffer I/O error on dev nbd2, logical block 3, async page read [ 529.263802][T21326] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 529.304087][T21326] Buffer I/O error on dev nbd2, logical block 0, async page read [ 529.334484][T21326] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 529.375609][T21326] Buffer I/O error on dev nbd2, logical block 1, async page read [ 529.386381][T21326] ldm_validate_partition_table(): Disk read failed. [ 529.406452][T21326] Dev nbd2: unable to read RDB block 0 [ 529.412888][T21326] nbd2: unable to read partition table [ 529.447927][T21326] ldm_validate_partition_table(): Disk read failed. [ 529.455000][T21326] Dev nbd2: unable to read RDB block 0 [ 529.466995][T21326] nbd2: unable to read partition table [ 529.569954][T21755] lo speed is unknown, defaulting to 1000 [ 529.677250][T21775] netlink: 'syz.4.3812': attribute type 1 has an invalid length. [ 529.697370][T21775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.704687][T21775] IPv6: NLM_F_CREATE should be set when creating new route [ 529.712011][T21775] IPv6: NLM_F_CREATE should be set when creating new route [ 529.746603][T21775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.045707][T21789] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.240432][T21789] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.399461][T21789] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.452204][T21814] __nla_validate_parse: 8 callbacks suppressed [ 530.452223][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3823'. [ 530.540344][T21789] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.864581][ T1163] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.915800][ T1163] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.969799][ T1163] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.993895][ T1163] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.221893][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3828'. [ 531.246110][T21833] netlink: 'syz.1.3828': attribute type 15 has an invalid length. [ 531.273293][T21833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3828'. [ 531.371570][T21833] bond1 (unregistering): Released all slaves [ 531.412334][T21829] lo speed is unknown, defaulting to 1000 [ 531.412357][T21832] lo: left allmulticast mode [ 531.486446][T21832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.934949][T21858] openvswitch: netlink: IP tunnel dst address not specified [ 532.106520][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3833'. [ 532.412738][T21839] lo speed is unknown, defaulting to 1000 [ 532.872486][T21888] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 532.883869][T21888] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 532.893400][T21862] tap0: tun_chr_ioctl cmd 1074812118 [ 532.905221][T21890] team_slave_0: entered promiscuous mode [ 532.911402][T21890] team_slave_1: entered promiscuous mode [ 532.930504][T21890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 532.939964][T21864] lo speed is unknown, defaulting to 1000 [ 533.210731][T21894] netlink: 'syz.0.3845': attribute type 7 has an invalid length. [ 533.237383][T21894] netlink: 'syz.0.3845': attribute type 8 has an invalid length. [ 533.840900][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 533.993155][T21932] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 534.287502][T21873] Bluetooth: hci5: command 0x0406 tx timeout [ 534.445700][T21952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3862'. [ 534.727943][T21958] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3863'. [ 534.857246][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3863'. [ 534.873512][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3863'. [ 535.241757][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3868'. [ 535.565608][T21977] lo speed is unknown, defaulting to 1000 [ 535.789857][T22003] netlink: 'syz.0.3877': attribute type 11 has an invalid length. [ 535.907760][T22005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3877'. [ 535.927427][T22009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3877'. [ 536.134422][T22019] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3882'. [ 536.374103][T22027] netlink: 'syz.2.3886': attribute type 4 has an invalid length. [ 536.511169][T22034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3888'. [ 536.537805][T22034] tipc: Invalid UDP bearer configuration [ 536.537860][T22034] tipc: Enabling of bearer rejected, failed to enable media [ 536.575184][T22040] netlink: 'syz.3.3890': attribute type 5 has an invalid length. [ 536.763942][T22055] netlink: 'syz.1.3894': attribute type 1 has an invalid length. [ 536.844713][T22055] bond1: entered promiscuous mode [ 536.861463][T22055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.955605][T22069] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 536.979131][T22068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3899'. [ 537.121258][T22068] syzkaller1: entered promiscuous mode [ 537.140351][T22068] syzkaller1: entered allmulticast mode [ 537.288636][T22066] lo speed is unknown, defaulting to 1000 [ 537.291084][T22084] tipc: Enabled bearer , priority 0 [ 537.400263][T22084] tipc: Resetting bearer [ 537.448371][T22084] tipc: Disabling bearer [ 537.530493][T22086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3902'. [ 538.120624][T22126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3913'. [ 538.641769][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3926'. [ 538.682134][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3925'. [ 538.695194][T22183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3927'. [ 538.791475][T22185] bond3: option arp_all_targets: invalid value (129) [ 538.844296][T22185] bond3 (unregistering): Released all slaves [ 539.003460][T22165] lo speed is unknown, defaulting to 1000 [ 539.304162][T22207] gre1: left promiscuous mode [ 539.339847][T22207] team1: left promiscuous mode [ 539.344959][T22207] team1: left allmulticast mode [ 539.372450][T22207] team2: left promiscuous mode [ 539.377421][T22207] team2: left allmulticast mode [ 539.383333][T22207] geneve3: left promiscuous mode [ 539.390299][T22207] ip6gre1: left promiscuous mode [ 539.424370][T22213] sit0: entered promiscuous mode [ 539.434097][T22213] netlink: 'syz.3.3934': attribute type 1 has an invalid length. [ 539.540093][T22214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.605536][T22218] ip6gre0: entered promiscuous mode [ 539.618568][T22208] lo speed is unknown, defaulting to 1000 [ 540.271434][T22263] ip6t_srh: unknown srh invflags BA61 [ 541.280587][ T1139] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.294344][ T1139] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.313859][T22301] batman_adv: batadv0: Adding interface: macvtap1 [ 541.320530][T22301] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.347285][T22301] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 541.383498][ T1139] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.422838][ T1139] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.507115][T22304] tipc: Enabled bearer , priority 0 [ 541.525857][T22304] syzkaller0: entered promiscuous mode [ 541.539357][T22310] netlink: 'syz.2.3961': attribute type 1 has an invalid length. [ 541.554289][T22304] syzkaller0: entered allmulticast mode [ 541.592179][T22310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.623061][T22304] tipc: Resetting bearer [ 541.634399][T22303] tipc: Resetting bearer [ 541.689291][T22303] tipc: Disabling bearer [ 541.986216][T22342] lo: entered allmulticast mode [ 541.997878][T22342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.013495][ T5897] lo speed is unknown, defaulting to 1000 [ 542.614297][T22371] veth0_virt_wifi: entered promiscuous mode [ 542.636527][T22371] veth0_virt_wifi: left promiscuous mode [ 542.721047][T22375] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 542.727585][T22375] pim6reg1: linktype set to 774 [ 542.733067][T22377] __nla_validate_parse: 8 callbacks suppressed [ 542.733095][T22377] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3981'. [ 542.749528][T22377] netlink: 440 bytes leftover after parsing attributes in process `syz.3.3981'. [ 542.815424][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3982'. [ 542.824964][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3982'. [ 542.836176][T22379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.867374][T22381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 543.304139][T22404] netlink: 'syz.2.3990': attribute type 2 has an invalid length. [ 543.342398][T22404] IPv6: sit2: Disabled Multicast RS [ 543.356962][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3990'. [ 543.369128][T22404] bridge_slave_1: left allmulticast mode [ 543.384539][T22407] xt_connbytes: Forcing CT accounting to be enabled [ 543.392878][T22404] bridge_slave_1: left promiscuous mode [ 543.401116][T22404] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.421870][T22404] bridge_slave_0: left allmulticast mode [ 543.428857][T22404] bridge_slave_0: left promiscuous mode [ 543.434881][T22404] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.602759][T22415] syzkaller0: entered promiscuous mode [ 543.608449][T22415] syzkaller0: entered allmulticast mode [ 543.677381][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3994'. [ 543.688094][T22426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3995'. [ 546.031236][T22517] macsec1: entered promiscuous mode [ 546.037228][T22517] macsec1: entered allmulticast mode [ 546.072019][T22496] tipc: Enabled bearer , priority 0 [ 546.087434][T22497] syzkaller0: entered promiscuous mode [ 546.093049][T22497] syzkaller0: entered allmulticast mode [ 546.113630][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 546.132263][T22506] tipc: Resetting bearer [ 546.227386][T22506] tipc: Resetting bearer [ 546.327307][T22506] tipc: Disabling bearer [ 546.363671][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'. [ 546.717633][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.725189][T22566] batadv0: mtu less than device minimum [ 546.736997][T22566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.749121][T22566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.760756][T22566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.772436][T22566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.784143][T22566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.796057][T22566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.807835][T22566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.967778][T22566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.804770][T22593] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 548.051957][T22613] netlink: 'syz.2.4023': attribute type 1 has an invalid length. [ 548.451520][T22630] gretap1: entered promiscuous mode [ 548.466022][T22630] batman_adv: batadv0: Adding interface: gretap1 [ 548.473442][T22630] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 548.502986][T22630] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 548.540607][T22637] __nla_validate_parse: 3 callbacks suppressed [ 548.540625][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4029'. [ 548.541946][T22636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4028'. [ 548.567066][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4028'. [ 548.588403][T22641] netlink: 'syz.4.4030': attribute type 1 has an invalid length. [ 548.603647][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'. [ 548.605000][T22628] netlink: 'syz.3.4029': attribute type 1 has an invalid length. [ 548.623841][T22632] netlink: 'syz.1.4028': attribute type 13 has an invalid length. [ 548.626569][T22641] netlink: 'syz.4.4030': attribute type 4 has an invalid length. [ 548.640486][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'. [ 548.651934][T22636] netlink: 'syz.1.4028': attribute type 13 has an invalid length. [ 548.657710][T22641] netlink: 15538 bytes leftover after parsing attributes in process `syz.4.4030'. [ 548.670041][T22628] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4029'. [ 548.683389][T22637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.944377][T22667] xt_ecn: cannot match TCP bits for non-tcp packets [ 549.015247][T22673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4037'. [ 549.113946][T22676] net_ratelimit: 12 callbacks suppressed [ 549.113966][T22676] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 549.231461][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 549.569424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 549.833943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 549.915057][T22702] lo speed is unknown, defaulting to 1000 [ 550.148762][T22732] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4055'. [ 550.158179][T22732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.177591][T22727] netlink: 'syz.1.4055': attribute type 39 has an invalid length. [ 550.192541][T22734] tipc: Enabled bearer , priority 0 [ 550.247181][T22734] syzkaller0: entered promiscuous mode [ 550.256337][T22734] syzkaller0: entered allmulticast mode [ 550.335465][T22736] tipc: Resetting bearer [ 550.372361][T22736] tipc: Disabling bearer [ 550.725645][T22734] lo speed is unknown, defaulting to 1000 [ 551.040379][T22763] netlink: 'syz.2.4066': attribute type 15 has an invalid length. [ 551.143659][T22750] lo speed is unknown, defaulting to 1000 [ 551.320342][T22772] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 551.752913][T22751] lo speed is unknown, defaulting to 1000 [ 551.791094][T22759] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 552.172377][T22826] netlink: 'syz.4.4084': attribute type 11 has an invalid length. [ 552.361592][ T63] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.390827][ T63] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.460521][ T63] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.476980][ T63] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.794591][T22843] gretap0: entered promiscuous mode [ 552.804606][T22840] tipc: Enabled bearer , priority 0 [ 552.823756][T22840] syzkaller0: entered promiscuous mode [ 552.834417][T22840] syzkaller0: entered allmulticast mode [ 553.018155][T22841] tipc: Resetting bearer [ 553.070176][T22841] tipc: Disabling bearer [ 553.098920][T22824] lo speed is unknown, defaulting to 1000 [ 553.302742][T22871] netlink: 'syz.3.4096': attribute type 1 has an invalid length. [ 553.453133][T22874] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 553.508818][T22878] veth3: entered promiscuous mode [ 553.536884][T22878] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 553.584066][T22871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.603646][ T8501] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 553.643365][T22884] netlink: 'syz.0.4100': attribute type 1 has an invalid length. [ 553.661232][T22882] pimreg: entered allmulticast mode [ 553.668332][T22884] __nla_validate_parse: 10 callbacks suppressed [ 553.668350][T22884] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4100'. [ 553.690283][T22840] lo speed is unknown, defaulting to 1000 [ 553.748594][ T1163] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 554.054642][T22896] veth4: entered allmulticast mode [ 554.409123][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 554.423050][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4110'. [ 554.437364][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4112'. [ 554.464458][T22925] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4111'. [ 554.575947][T22925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4111'. [ 554.638512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 554.701812][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4115'. [ 554.776463][T21873] Bluetooth: hci3: command 0x0406 tx timeout [ 554.838815][T22942] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 554.914273][T22946] SET target dimension over the limit! [ 554.970867][T22947] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4120'. [ 555.114478][T22949] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 555.256944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.291659][T22961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4126'. [ 555.325915][T22961] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 555.521677][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'. [ 555.543360][T22959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.656622][T22959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.805928][T22997] vlan2: entered allmulticast mode [ 555.812499][T22997] dummy0: entered allmulticast mode [ 555.833135][T22997] netlink: 'syz.1.4135': attribute type 1 has an invalid length. [ 555.954436][T23003] netlink: 'syz.3.4136': attribute type 1 has an invalid length. [ 556.443455][T23035] netlink: 'syz.4.4148': attribute type 1 has an invalid length. [ 556.581073][T23035] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 556.587143][T23038] netlink: 'syz.1.4145': attribute type 5 has an invalid length. [ 557.025033][T23076] syzkaller0: entered promiscuous mode [ 557.044828][T23076] syzkaller0: entered allmulticast mode [ 557.236865][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.246401][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.370219][T23106] netlink: 'syz.0.4168': attribute type 83 has an invalid length. [ 557.607532][T23119] openvswitch: netlink: Message has -2 unknown bytes. [ 557.636454][T23119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.708669][T23119] tipc: Enabled bearer , priority 0 [ 557.716143][T23119] syzkaller0: entered promiscuous mode [ 557.721889][T23119] syzkaller0: entered allmulticast mode [ 557.744368][T23119] tipc: Resetting bearer [ 557.769860][T23119] tipc: Resetting bearer [ 557.801909][T23119] tipc: Disabling bearer [ 557.952201][T23133] netlink: 'syz.2.4176': attribute type 4 has an invalid length. [ 557.965981][T23135] netlink: 'syz.4.4177': attribute type 12 has an invalid length. [ 558.010588][T23133] netlink: 'syz.2.4176': attribute type 4 has an invalid length. [ 558.422906][T23162] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 558.438506][T23167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.480992][T23162] bond2: (slave lo): making interface the new active one [ 558.496879][T23162] bond2: (slave lo): Enslaving as an active interface with an up link [ 558.509613][T23167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.541557][T23162] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 558.586427][T23135] lo speed is unknown, defaulting to 1000 [ 558.646462][T23167] xt_CT: No such helper "pptp" [ 558.653379][T23155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.896124][T23187] __nla_validate_parse: 13 callbacks suppressed [ 558.896143][T23187] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4191'. [ 558.924549][T23187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4191'. [ 558.939517][T23187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4191'. [ 559.141343][T23202] Cannot find add_set index 2 as target [ 559.167248][T23202] Cannot find add_set index 2 as target [ 559.175273][T23202] Cannot find add_set index 2 as target [ 559.204271][T23202] Cannot find add_set index 2 as target [ 559.224028][T23202] Cannot find add_set index 2 as target [ 559.245757][T23202] Cannot find add_set index 2 as target [ 559.270438][T23206] mac80211_hwsim hwsim37 wlan1: vlans aren't supported yet for dev_uc|mc_add() [ 559.286814][T23202] Cannot find add_set index 2 as target [ 559.299633][T23202] Cannot find add_set index 2 as target [ 559.323387][T23202] Cannot find add_set index 2 as target [ 559.343336][T23202] Cannot find add_set index 2 as target [ 559.485161][T23221] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 559.599241][T23228] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4205'. [ 559.612347][T23229] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4202'. [ 559.693111][T23233] sctp: [Deprecated]: syz.4.4206 (pid 23233) Use of int in max_burst socket option. [ 559.693111][T23233] Use struct sctp_assoc_value instead [ 560.083691][T23241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4209'. [ 560.094739][T23241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4209'. [ 560.174593][T23242] validate_nla: 1 callbacks suppressed [ 560.174613][T23242] netlink: 'syz.2.4208': attribute type 6 has an invalid length. [ 560.488531][T23264] openvswitch: netlink: Message has 2 unknown bytes. [ 560.495329][T23264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.075517][T23287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4221'. [ 561.428070][T23315] xt_CONNSECMARK: invalid mode: 0 [ 561.458900][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4228'. [ 562.029895][T23337] netlink: 'syz.2.4237': attribute type 1 has an invalid length. [ 562.074180][T23337] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4237'. [ 562.737243][T23344] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 563.668337][T23362] tipc: Enabled bearer , priority 0 [ 563.873645][T23362] syzkaller0: entered promiscuous mode [ 563.885095][T23362] syzkaller0: entered allmulticast mode [ 563.936920][T23353] tipc: Resetting bearer [ 563.964972][T23383] netlink: 'syz.2.4249': attribute type 1 has an invalid length. [ 563.978851][T23352] tipc: Resetting bearer [ 564.037805][T23389] __nla_validate_parse: 1 callbacks suppressed [ 564.037822][T23389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 564.209961][T23399] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4250'. [ 564.227456][T23399] netlink: 'syz.3.4250': attribute type 2 has an invalid length. [ 565.080596][T23411] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001 [ 566.148324][T23352] tipc: Disabling bearer [ 566.157708][T23383] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 566.182347][ T5897] tipc: Node number set to 3889367218 [ 566.535463][T23433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4260'. [ 566.558040][T23448] batadv_slave_0: entered promiscuous mode [ 566.603262][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4264'. [ 566.682849][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4259'. [ 566.752517][T23447] batadv_slave_0: left promiscuous mode [ 566.925058][T23466] ip6gre2: entered allmulticast mode [ 568.049437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 569.491026][T23441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.515054][T23466] netlink: 'syz.2.4268': attribute type 1 has an invalid length. [ 569.771557][T23483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4273'. [ 569.789074][T23474] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4270'. [ 569.813168][T23487] syzkaller0: entered promiscuous mode [ 569.818933][T23487] syzkaller0: entered allmulticast mode [ 569.875443][T23487] tipc: Enabling of bearer rejected, failed to enable media [ 569.980209][T23483] gtp0: entered promiscuous mode [ 570.016226][T23483] gtp0: entered allmulticast mode [ 570.104952][T23402] udevd[23402]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 570.135576][T23502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4279'. [ 570.164842][T23499] netlink: 'syz.4.4278': attribute type 12 has an invalid length. [ 570.196633][T23499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4278'. [ 570.238958][T23499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4278'. [ 570.275838][T23515] netlink: 'syz.3.4283': attribute type 298 has an invalid length. [ 570.439675][T23524] veth5: entered promiscuous mode [ 570.459339][T23511] syzkaller1: entered promiscuous mode [ 570.465531][T23511] syzkaller1: entered allmulticast mode [ 570.534950][T23532] netlink: 'syz.3.4289': attribute type 10 has an invalid length. [ 570.547315][T23532] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4289'. [ 570.595557][T23532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4289'. [ 570.630221][T23505] lo speed is unknown, defaulting to 1000 [ 570.819001][T23550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4293'. [ 570.830476][T23550] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4293'. [ 571.060508][T23566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4295'. [ 571.100572][T23565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 571.373550][T23586] netlink: 'syz.4.4302': attribute type 9 has an invalid length. [ 571.519025][T23588] geneve4: entered promiscuous mode [ 571.542690][ T1139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.575688][ T1139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.661487][ T1139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.971777][T23619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.217643][T23591] netlink: 'syz.1.4305': attribute type 10 has an invalid length. [ 572.257749][T23591] team0: Port device dummy0 added [ 572.263700][T23591] netlink: 'syz.1.4305': attribute type 10 has an invalid length. [ 572.284366][T23591] team0: Port device dummy0 removed [ 572.294964][T23591] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 572.356113][T23632] nbd: must specify at least one socket [ 572.585589][T23643] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 572.710032][T23650] netlink: 'syz.3.4324': attribute type 1 has an invalid length. [ 573.032404][T23679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.067663][T23678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.319067][T23696] x_tables: duplicate underflow at hook 1 [ 573.484389][T23701] syzkaller0: entered promiscuous mode [ 573.501887][T23701] syzkaller0: entered allmulticast mode [ 573.901273][T23712] tipc: Enabled bearer , priority 0 [ 573.919402][T23712] syzkaller0: entered promiscuous mode [ 573.931869][T23712] syzkaller0: entered allmulticast mode [ 573.940248][ T63] syzkaller0: tun_net_xmit 70 [ 573.951910][T23712] tipc: Resetting bearer [ 573.968808][T23712] syzkaller0: tun_net_xmit 90 [ 573.991944][T23711] tipc: Resetting bearer [ 574.032972][T23711] tipc: Disabling bearer [ 574.104338][T23721] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 574.276877][T23732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 574.401260][T23732] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 574.420164][T23749] syzkaller1: entered promiscuous mode [ 574.425780][T23749] syzkaller1: entered allmulticast mode [ 574.517903][ T5835] block nbd3: Receive control failed (result -32) [ 574.867670][T23780] __nla_validate_parse: 13 callbacks suppressed [ 574.867691][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4363'. [ 574.952222][ T8504] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.987777][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4363'. [ 575.007125][ T8504] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.041594][ T8504] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.055398][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4363'. [ 575.149012][T23799] xt_TCPMSS: Only works on TCP SYN packets [ 575.235963][T23808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4371'. [ 575.291889][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4369'. [ 575.892446][T23818] lo speed is unknown, defaulting to 1000 [ 575.989335][T23837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4378'. [ 576.111770][T23842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.410745][T23854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4384'. [ 577.557879][T23888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 578.873164][T23849] lo speed is unknown, defaulting to 1000 [ 578.913949][T23877] bridge0: entered promiscuous mode [ 579.030867][T23888] syz_tun (unregistering): left allmulticast mode [ 579.088953][T23895] netlink: 'syz.4.4391': attribute type 21 has an invalid length. [ 579.360231][T23908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.309423][T23934] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4401'. [ 580.332498][T23934] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4401'. [ 580.366421][T21873] Bluetooth: hci1: command 0x0406 tx timeout [ 580.481343][T23938] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4402'. [ 580.563839][T23942] netem: change failed [ 580.677349][T23946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4405'. [ 580.797538][T23937] lo speed is unknown, defaulting to 1000 [ 581.094553][T23963] lo: left allmulticast mode [ 581.108109][T23963] sit0: left promiscuous mode [ 581.221303][T23963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.388064][T23969] syzkaller1: entered promiscuous mode [ 581.393678][T23969] syzkaller1: entered allmulticast mode [ 581.758274][T23995] gretap2: entered allmulticast mode [ 582.011022][T24000] syzkaller0: entered promiscuous mode [ 582.061054][T24000] syzkaller0: entered allmulticast mode [ 583.861005][T24011] sctp: [Deprecated]: syz.4.4419 (pid 24011) Use of int in max_burst socket option. [ 583.861005][T24011] Use struct sctp_assoc_value instead [ 584.368150][T23974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.371536][T23996] lo speed is unknown, defaulting to 1000 [ 585.486471][T21873] Bluetooth: hci4: command 0x0406 tx timeout [ 585.504301][T24021] sctp: [Deprecated]: syz.4.4422 (pid 24021) Use of int in max_burst socket option. [ 585.504301][T24021] Use struct sctp_assoc_value instead [ 585.557272][T24026] netlink: 'syz.3.4423': attribute type 4 has an invalid length. [ 585.589645][T24029] siw: device registration error -23 [ 585.754105][T24043] tipc: Enabling of bearer rejected, failed to enable media [ 585.813193][T24047] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 585.828153][T24050] netlink: 'syz.0.4430': attribute type 1 has an invalid length. [ 585.946051][T24053] bond5: (slave gretap2): making interface the new active one [ 585.957080][T24053] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 585.980788][T24050] vlan2: entered allmulticast mode [ 585.985934][T24050] bond5: entered allmulticast mode [ 585.992189][T24050] gretap2: entered allmulticast mode [ 585.999112][T24050] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 586.034531][T24052] syzkaller0: entered promiscuous mode [ 586.041444][T24052] syzkaller0: entered allmulticast mode [ 586.091870][T24059] xt_ecn: cannot match TCP bits for non-tcp packets [ 586.217995][T24059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.240625][T24059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.260339][T24071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4432'. [ 586.323934][T24075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 586.379687][T24081] netlink: 'syz.2.4436': attribute type 15 has an invalid length. [ 586.390462][T24059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.410046][T24059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.445352][T24081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4436'. [ 586.531830][T24059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.543511][T24059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.643192][T24059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.654458][T24059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.702873][T24091] syzkaller0: entered promiscuous mode [ 586.717482][T24091] syzkaller0: entered allmulticast mode [ 586.780918][T24087] sctp: [Deprecated]: syz.1.4438 (pid 24087) Use of int in maxseg socket option. [ 586.780918][T24087] Use struct sctp_assoc_value instead [ 586.880274][ T8511] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.890368][ T8511] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.957915][ T8511] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.978408][ T8511] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.986952][T24104] netlink: 'syz.1.4443': attribute type 9 has an invalid length. [ 586.994763][T24104] netlink: 'syz.1.4443': attribute type 6 has an invalid length. [ 587.023260][T24104] netlink: 'syz.1.4443': attribute type 7 has an invalid length. [ 587.044350][T24104] netlink: 'syz.1.4443': attribute type 8 has an invalid length. [ 587.095185][T24110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.095193][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.105661][T24110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4446'. [ 587.137508][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4443'. [ 587.140403][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.173928][T24114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4443'. [ 587.176501][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.220154][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.333822][T24118] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 587.410652][T24127] netlink: 'syz.4.4449': attribute type 1 has an invalid length. [ 587.462196][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4449'. [ 587.516637][T24118] pim6reg1: linktype set to 774 [ 587.523351][T24127] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 587.662277][T24141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4452'. [ 587.892895][T24164] hsr0: entered promiscuous mode [ 587.937113][T24164] hsr0: left promiscuous mode [ 588.012491][T24176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4462'. [ 588.156527][T24182] ¾x9ÿ: renamed from bridge_slave_0 [ 588.250449][T24198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4467'. [ 588.532582][T24213] tc_dump_action: action bad kind [ 588.617596][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b66c000: rx timeout, send abort [ 588.655462][T24222] tipc: Enabled bearer , priority 0 [ 588.686921][T24227] netlink: 'syz.1.4475': attribute type 11 has an invalid length. [ 588.697402][T24226] sctp: [Deprecated]: syz.2.4476 (pid 24226) Use of int in max_burst socket option. [ 588.697402][T24226] Use struct sctp_assoc_value instead [ 588.986679][T24248] netlink: 'syz.2.4484': attribute type 1 has an invalid length. [ 588.994155][T24246] macvtap1: entered promiscuous mode [ 589.011905][T24246] veth1_to_hsr: entered promiscuous mode [ 589.029570][T24246] macvtap1: entered allmulticast mode [ 589.045326][T24246] veth1_to_hsr: entered allmulticast mode [ 589.056407][T24250] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 589.117695][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b66d000: rx timeout, send abort [ 589.127594][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b66c000: abort rx timeout. Force session deactivation [ 589.626001][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b66d000: abort rx timeout. Force session deactivation [ 589.879550][T24265] lo speed is unknown, defaulting to 1000 [ 590.382511][T24306] team0: Device vlan2 is already an upper device of the team interface [ 590.618019][T24324] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 590.664010][T24320] netlink: 'syz.4.4501': attribute type 39 has an invalid length. [ 590.854365][T24315] lo speed is unknown, defaulting to 1000 [ 591.475860][T24354] IPv6: NLM_F_CREATE should be specified when creating new route [ 591.585477][T24358] Cannot find del_set index 2 as target [ 592.007291][T24374] __nla_validate_parse: 8 callbacks suppressed [ 592.007313][T24374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4514'. [ 592.244998][T24367] lo speed is unknown, defaulting to 1000 [ 592.389051][T24391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4518'. [ 592.704997][T24402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4521'. [ 592.852032][T24410] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4523'. [ 592.893918][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4523'. [ 593.027222][T24425] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 593.047367][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4527'. [ 593.068590][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4527'. [ 593.078614][T24425] netlink: 'syz.2.4527': attribute type 2 has an invalid length. [ 593.102812][T24425] netlink: 'syz.2.4527': attribute type 2 has an invalid length. [ 593.123054][T24425] netlink: 'syz.2.4527': attribute type 2 has an invalid length. [ 593.154346][T24425] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 593.224209][T14831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.242149][T14831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.272169][T24434] syzkaller1: entered promiscuous mode [ 593.277906][T24434] syzkaller1: entered allmulticast mode [ 593.314346][T24434] team0: Port device bridge6 added [ 593.351903][T24442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4531'. [ 593.518182][T24448] tipc: Enabled bearer , priority 0 [ 593.580880][T24454] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 593.616566][T24448] syzkaller0: entered promiscuous mode [ 593.622369][T24448] syzkaller0: entered allmulticast mode [ 593.639366][T24448] tipc: Resetting bearer [ 593.726818][T24463] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 593.785237][ T8508] tipc: Resetting bearer [ 593.796666][T24447] tipc: Resetting bearer [ 595.825164][T24447] tipc: Disabling bearer [ 595.848849][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4538'. [ 595.858588][T24471] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 596.169777][T24490] tipc: Enabling of bearer rejected, failed to enable media [ 596.419529][T24510] syzkaller0: left promiscuous mode [ 596.438026][T24510] syzkaller0: left allmulticast mode [ 596.454009][T24510] netlink: 'syz.2.4551': attribute type 18 has an invalid length. [ 596.462061][T24510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4551'. [ 596.701579][T24509] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:21 [ 596.752926][T24530] bond0: entered promiscuous mode [ 596.776486][T24505] mpoa:mpoad_close: () going down [ 596.782546][T24530] bond_slave_0: entered promiscuous mode [ 596.797132][T24530] bond_slave_1: entered promiscuous mode [ 596.805953][T24530] team0: entered promiscuous mode [ 596.811201][T24530] team_slave_0: entered promiscuous mode [ 596.817312][T24530] team_slave_1: entered promiscuous mode [ 596.824884][T24530] bond0: left promiscuous mode [ 596.829936][T24530] bond_slave_0: left promiscuous mode [ 596.835522][T24530] bond_slave_1: left promiscuous mode [ 596.841441][T24530] team0: left promiscuous mode [ 596.847785][T24530] team_slave_0: left promiscuous mode [ 596.853577][T24530] team_slave_1: left promiscuous mode [ 596.873973][T24535] bond0: entered promiscuous mode [ 596.879435][T24535] bond_slave_0: entered promiscuous mode [ 596.885377][T24535] bond_slave_1: entered promiscuous mode [ 596.891397][T24535] team0: entered promiscuous mode [ 596.897392][T24535] team_slave_0: entered promiscuous mode [ 596.904459][T24535] team_slave_1: entered promiscuous mode [ 596.913031][T24535] bond0: left promiscuous mode [ 596.918213][T24535] bond_slave_0: left promiscuous mode [ 596.923839][T24535] bond_slave_1: left promiscuous mode [ 596.930373][T24535] team0: left promiscuous mode [ 596.935242][T24535] team_slave_0: left promiscuous mode [ 596.941503][T24535] team_slave_1: left promiscuous mode [ 597.224918][T24547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.305460][T24551] __nla_validate_parse: 3 callbacks suppressed [ 597.305552][T24551] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4562'. [ 597.321419][T24551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4562'. [ 597.340053][T24551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4562'. [ 597.364853][T24505] lo speed is unknown, defaulting to 1000 [ 597.501655][T24555] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 597.701309][T24568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4564'. [ 597.808471][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4566'. [ 597.820146][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4566'. [ 597.836804][T24573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4566'. [ 597.854796][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'. [ 597.856427][T24574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4566'. [ 597.877184][T24579] tipc: Enabled bearer , priority 0 [ 597.885624][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4566'. [ 598.069341][T24596] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 598.098865][T24593] netlink: 'syz.3.4571': attribute type 1 has an invalid length. [ 598.120025][T24593] netlink: 'syz.3.4571': attribute type 3 has an invalid length. [ 598.674170][T24578] tipc: Resetting bearer [ 598.707505][ T30] audit: type=1800 audit(1770043236.527:6): pid=24634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4580" name="memory.events" dev="tmpfs" ino=1414 res=0 errno=0 [ 598.929046][ T8508] tipc: Resetting bearer [ 598.948684][T24620] lo speed is unknown, defaulting to 1000 [ 599.051700][T24636] netlink: 'syz.2.4582': attribute type 1 has an invalid length. [ 599.178216][ T5897] tipc: Node number set to 716837267 [ 599.268264][T24636] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.374369][T24636] bond6: (slave geneve3): making interface the new active one [ 599.388428][T24636] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 599.668210][T24650] lo speed is unknown, defaulting to 1000 [ 600.156742][T24697] netlink: 'syz.2.4602': attribute type 2 has an invalid length. [ 600.738248][T24724] syzkaller0: entered promiscuous mode [ 600.750483][T24724] syzkaller0: entered allmulticast mode [ 600.763881][T24723] tipc: Enabled bearer , priority 0 [ 600.783364][T24698] lo speed is unknown, defaulting to 1000 [ 600.832473][T24723] tipc: Resetting bearer [ 602.980193][T24723] tipc: Disabling bearer [ 603.121562][T24762] __nla_validate_parse: 15 callbacks suppressed [ 603.121581][T24762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4615'. [ 603.233458][T24760] netlink: 'syz.3.4614': attribute type 11 has an invalid length. [ 603.563848][T24784] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4623'. [ 603.793906][T24786] netlink: 'syz.0.4624': attribute type 3 has an invalid length. [ 603.816858][T24786] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4624'. [ 604.040210][T24812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4633'. [ 604.078579][T24815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4632'. [ 604.416666][T24846] macvlan3: entered promiscuous mode [ 604.437277][T24847] macvlan4: entered promiscuous mode [ 604.483711][T24846] macvlan4: entered promiscuous mode [ 604.522283][T24852] netem: change failed [ 604.799986][T24871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4646'. [ 604.885702][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4649'. [ 604.940005][T24880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4650'. [ 604.959228][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'. [ 605.042457][T24882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4651'. [ 605.055263][T24885] netlink: 'syz.0.4652': attribute type 1 has an invalid length. [ 607.787742][T24929] sock: sock_timestamping_bind_phc: sock not bind to device [ 608.017165][T24952] netlink: 'syz.4.4667': attribute type 1 has an invalid length. [ 608.112918][T24958] gtp1: entered promiscuous mode [ 608.129873][T24958] gtp1: entered allmulticast mode [ 608.303935][T24969] netem: change failed [ 608.589232][T24984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.775215][T24990] __nla_validate_parse: 7 callbacks suppressed [ 608.775232][T24990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4677'. [ 609.112577][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4685'. [ 609.373985][T25029] netlink: 'syz.3.4689': attribute type 21 has an invalid length. [ 609.385234][T25029] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4689'. [ 609.416992][T25029] netlink: 'syz.3.4689': attribute type 4 has an invalid length. [ 609.425336][T25029] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4689'. [ 609.674303][T25055] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4694'. [ 609.797541][T25054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4695'. [ 609.988034][T25038] lo speed is unknown, defaulting to 1000 [ 610.075541][T25078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4701'. [ 610.260789][T25068] lo speed is unknown, defaulting to 1000 [ 610.548683][T25100] netlink: 'syz.4.4706': attribute type 32 has an invalid length. [ 610.570321][T25100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 610.808623][T25116] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4709'. [ 610.828487][T25100] bond3: option coupled_control: invalid value (84) [ 610.850310][T25100] bond3 (unregistering): Released all slaves [ 610.925716][T25116] .70·: renamed from hsr0 (while UP) [ 610.942537][T25116] .70·: entered allmulticast mode [ 610.947800][T25116] hsr_slave_0: entered allmulticast mode [ 610.953635][T25116] hsr_slave_1: entered allmulticast mode [ 610.978166][T25116] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 611.025608][T25112] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 611.250108][T25130] xt_TCPMSS: Only works on TCP SYN packets [ 611.287031][T25132] tipc: Resetting bearer [ 611.315031][T25132] syzkaller0: entered promiscuous mode [ 611.331162][T25132] syzkaller0: entered allmulticast mode [ 611.416163][T25132] netlink: 'syz.2.4715': attribute type 1 has an invalid length. [ 611.447804][T25132] netlink: 'syz.2.4715': attribute type 2 has an invalid length. [ 611.455574][T25132] netlink: 'syz.2.4715': attribute type 1 has an invalid length. [ 611.478134][T25142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4715'. [ 611.490176][T25132] netlink: 'syz.2.4715': attribute type 3 has an invalid length. [ 611.624701][T25145] nbd: socks must be embedded in a SOCK_ITEM attr [ 611.711058][T25131] tipc: Resetting bearer [ 611.748313][T25133] lo speed is unknown, defaulting to 1000 [ 611.815771][T25153] vlan3: entered allmulticast mode [ 611.866399][T25149] udevd[25149]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 611.877276][T25153] veth0_to_bond: entered allmulticast mode [ 611.943811][T25040] udevd[25040]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.103975][T25158] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 612.140549][T25166] bridge4: entered promiscuous mode [ 612.146064][T25166] bridge4: entered allmulticast mode [ 612.155852][T25166] team0: Port device bridge4 added [ 612.186637][T14827] tipc: Resetting bearer [ 612.198752][T25179] xt_CT: No such helper "snmp_trap" [ 612.210037][T25177] xt_CT: No such helper "snmp_trap" [ 612.353548][T25192] netlink: 'syz.4.4728': attribute type 1 has an invalid length. [ 612.369190][T25192] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 612.679101][T25205] netlink: 'syz.1.4731': attribute type 10 has an invalid length. [ 612.721845][T25205] team0: Port device geneve0 added [ 612.739085][T14827] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.761184][T14827] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.849146][T14827] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.859808][T14827] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.868091][T25219] netlink: 'syz.2.4736': attribute type 10 has an invalid length. [ 612.905939][T25219] dummy0: entered allmulticast mode [ 612.911473][T25219] dummy0: entered promiscuous mode [ 612.919975][T25219] team0: Port device dummy0 added [ 612.978197][T25223] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 2, id = 0 [ 613.090709][T25227] veth1_macvtap: mtu less than device minimum [ 613.145757][T25236] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 613.324874][T25213] lo speed is unknown, defaulting to 1000 [ 613.431563][T25246] tipc: Enabled bearer , priority 0 [ 613.438722][T25245] syzkaller0: entered promiscuous mode [ 613.444836][T25245] syzkaller0: entered allmulticast mode [ 613.646756][T25245] tipc: Resetting bearer [ 613.725449][T25245] tipc: Disabling bearer [ 613.755005][T25236] infiniband !yz!: set down [ 613.786467][T25236] infiniband !yz!: added team_slave_0 [ 614.184675][T25236] RDS/IB: !yz!: added [ 614.207132][T25236] smc: adding ib device !yz! with port count 1 [ 614.213316][T25236] smc: ib device !yz! port 1 has no pnetid [ 614.266131][T25284] bond7: entered promiscuous mode [ 614.282098][T25284] 8021q: adding VLAN 0 to HW filter on device bond7 [ 614.314425][T25299] __nla_validate_parse: 22 callbacks suppressed [ 614.314445][T25299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4755'. [ 614.381188][T25300] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 614.392768][T25302] validate_nla: 6 callbacks suppressed [ 614.392789][T25302] netlink: 'syz.4.4756': attribute type 1 has an invalid length. [ 614.414812][T25252] netlink: 744 bytes leftover after parsing attributes in process `syz.0.4744'. [ 614.428237][T25302] netlink: 'syz.4.4756': attribute type 4 has an invalid length. [ 614.438909][T25302] netlink: 15538 bytes leftover after parsing attributes in process `syz.4.4756'. [ 614.674946][T25311] tipc: Enabling of bearer rejected, already enabled [ 614.859138][T25323] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4763'. [ 614.986402][T25327] netlink: 'syz.0.4765': attribute type 1 has an invalid length. [ 615.205672][T25311] lo speed is unknown, defaulting to 1000 [ 615.305728][T25342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4769'. [ 615.574015][T25355] caif0: entered promiscuous mode [ 615.580642][T25355] caif0: entered allmulticast mode [ 615.597698][T25355] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4771'. [ 615.980983][T25370] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 616.112670][T25377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4779'. [ 616.348002][T25389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4782'. [ 616.364371][T25389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4782'. [ 616.541918][T25392] netlink: 'syz.0.4783': attribute type 3 has an invalid length. [ 616.551643][T25392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4783'. [ 616.742571][T25398] delete_channel: no stack [ 616.788921][T25396] bridge_slave_1: left allmulticast mode [ 616.794605][T25396] bridge_slave_1: left promiscuous mode [ 616.822574][T25396] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.838666][T25396] ¾x9ÿ: left allmulticast mode [ 616.846788][T25396] ¾x9ÿ: left promiscuous mode [ 616.851751][T25396] bridge0: port 1(1¾x9ÿ) entered disabled state [ 617.120890][T25414] mÿ5nè‹Ò: entered promiscuous mode [ 617.792787][T25455] netlink: 'syz.1.4799': attribute type 10 has an invalid length. [ 618.347605][T25474] bond3: Removing last ns target with arp_interval on [ 618.764921][T25507] xt_hashlimit: size too large, truncated to 1048576 [ 619.270293][T25509] lo speed is unknown, defaulting to 1000 [ 619.334577][T25518] __nla_validate_parse: 11 callbacks suppressed [ 619.334597][T25518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4815'. [ 619.401959][T25518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'. [ 619.626654][T25552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4821'. [ 619.828645][T25539] lo speed is unknown, defaulting to 1000 [ 620.960500][T25600] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4827'. [ 620.984965][T25593] netlink: 'syz.2.4827': attribute type 5 has an invalid length. [ 621.061292][T25603] žÿ: renamed from team_slave_1 (while UP) [ 621.435064][T25619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'. [ 621.561951][T25627] netlink: 'syz.1.4836': attribute type 32 has an invalid length. [ 621.576506][T25627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4836'. [ 621.720451][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4839'. [ 621.767441][T25644] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4837'. [ 621.832084][T25644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4837'. [ 622.018549][T25640] lo speed is unknown, defaulting to 1000 [ 622.257948][T25666] netlink: zone id is out of range [ 622.267429][T25666] netlink: zone id is out of range [ 622.272587][T25666] netlink: zone id is out of range [ 622.289369][T25666] netlink: zone id is out of range [ 622.294568][T25666] netlink: zone id is out of range [ 622.300108][T25666] netlink: zone id is out of range [ 622.305243][T25666] netlink: zone id is out of range [ 622.317249][T25666] netlink: zone id is out of range [ 622.332291][T25666] netlink: zone id is out of range [ 622.338133][T25666] netlink: zone id is out of range [ 622.358959][T25668] nbd: socks must be embedded in a SOCK_ITEM attr [ 622.375249][T25670] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4845'. [ 622.382693][T25668] block nbd4: shutting down sockets [ 622.566968][T25657] lo speed is unknown, defaulting to 1000 [ 622.977431][T25680] [ 622.979817][T25680] ====================================================== [ 622.986912][T25680] WARNING: possible circular locking dependency detected [ 622.993941][T25680] syzkaller #0 Not tainted [ 622.998358][T25680] ------------------------------------------------------ [ 623.005398][T25680] syz.3.4848/25680 is trying to acquire lock: [ 623.011463][T25680] ffff88802526f800 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 623.020876][T25680] [ 623.020876][T25680] but task is already holding lock: [ 623.028241][T25680] ffff88802526f2c0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 623.038421][T25680] [ 623.038421][T25680] which lock already depends on the new lock. [ 623.038421][T25680] [ 623.048893][T25680] [ 623.048893][T25680] the existing dependency chain (in reverse order) is: [ 623.057892][T25680] [ 623.057892][T25680] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 623.066484][T25680] blk_alloc_queue+0x52f/0x610 [ 623.071756][T25680] __blk_mq_alloc_disk+0x197/0x390 [ 623.077463][T25680] nbd_dev_add+0x499/0xb50 [ 623.082405][T25680] nbd_init+0x168/0x1f0 [ 623.087119][T25680] do_one_initcall+0x250/0x840 [ 623.092402][T25680] do_initcall_level+0x104/0x190 [ 623.097939][T25680] do_initcalls+0x59/0xa0 [ 623.102780][T25680] kernel_init_freeable+0x2a6/0x3d0 [ 623.108532][T25680] kernel_init+0x1d/0x1d0 [ 623.113402][T25680] ret_from_fork+0x51b/0xa40 [ 623.118504][T25680] ret_from_fork_asm+0x1a/0x30 [ 623.123778][T25680] [ 623.123778][T25680] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 623.130978][T25680] fs_reclaim_acquire+0x71/0x100 [ 623.136426][T25680] kmem_cache_alloc_node_noprof+0x48/0x6f0 [ 623.142744][T25680] __alloc_skb+0x1d0/0x7d0 [ 623.147668][T25680] __ip6_append_data+0x2c27/0x3f50 [ 623.153296][T25680] ip6_append_data+0x1c0/0x380 [ 623.158581][T25680] rawv6_sendmsg+0x12d3/0x18e0 [ 623.163857][T25680] ____sys_sendmsg+0x894/0xad0 [ 623.169129][T25680] ___sys_sendmsg+0x2a5/0x360 [ 623.174315][T25680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 623.179759][T25680] do_syscall_64+0xe2/0xf80 [ 623.184779][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.191179][T25680] [ 623.191179][T25680] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 623.198988][T25680] lock_sock_nested+0x48/0x100 [ 623.204260][T25680] inet_shutdown+0x6a/0x390 [ 623.209270][T25680] nbd_mark_nsock_dead+0x2e9/0x560 [ 623.214892][T25680] sock_shutdown+0x15e/0x260 [ 623.220028][T25680] nbd_clear_sock+0x24/0x170 [ 623.225130][T25680] nbd_config_put+0x2dd/0x580 [ 623.230325][T25680] nbd_genl_connect+0x19d5/0x1cf0 [ 623.235877][T25680] genl_family_rcv_msg_doit+0x22a/0x330 [ 623.241932][T25680] genl_rcv_msg+0x61c/0x7a0 [ 623.246946][T25680] netlink_rcv_skb+0x232/0x4b0 [ 623.252220][T25680] genl_rcv+0x28/0x40 [ 623.256723][T25680] netlink_unicast+0x80f/0x9b0 [ 623.261998][T25680] netlink_sendmsg+0x813/0xb40 [ 623.267271][T25680] ____sys_sendmsg+0xa68/0xad0 [ 623.272543][T25680] ___sys_sendmsg+0x2a5/0x360 [ 623.277737][T25680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 623.283235][T25680] do_syscall_64+0xe2/0xf80 [ 623.288255][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.294654][T25680] [ 623.294654][T25680] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 623.302284][T25680] __mutex_lock+0x19f/0x1300 [ 623.307385][T25680] nbd_queue_rq+0x37b/0x1100 [ 623.312489][T25680] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 623.318539][T25680] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 623.325373][T25680] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 623.331860][T25680] blk_mq_run_hw_queue+0x348/0x4f0 [ 623.337487][T25680] blk_mq_dispatch_list+0xd16/0xe10 [ 623.343192][T25680] blk_mq_flush_plug_list+0x48d/0x570 [ 623.349174][T25680] __blk_flush_plug+0x3ed/0x4d0 [ 623.354605][T25680] __submit_bio+0x4c6/0x5d0 [ 623.359619][T25680] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 623.365758][T25680] block_read_full_folio+0x599/0x830 [ 623.371559][T25680] filemap_read_folio+0x137/0x3b0 [ 623.377095][T25680] do_read_cache_folio+0x358/0x590 [ 623.382732][T25680] read_part_sector+0xb6/0x2b0 [ 623.388010][T25680] adfspart_check_ICS+0xa5/0xa40 [ 623.393470][T25680] bdev_disk_changed+0x765/0x14c0 [ 623.399018][T25680] blkdev_get_whole+0x380/0x510 [ 623.404386][T25680] bdev_open+0x31e/0xd30 [ 623.409144][T25680] blkdev_open+0x470/0x610 [ 623.414077][T25680] do_dentry_open+0x7ce/0x1420 [ 623.419353][T25680] vfs_open+0x3b/0x340 [ 623.423938][T25680] path_openat+0x3486/0x3e20 [ 623.429138][T25680] do_filp_open+0x22d/0x490 [ 623.434170][T25680] do_sys_openat2+0x12f/0x220 [ 623.439358][T25680] __x64_sys_openat+0x138/0x170 [ 623.444731][T25680] do_syscall_64+0xe2/0xf80 [ 623.449745][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.456149][T25680] [ 623.456149][T25680] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 623.463358][T25680] __mutex_lock+0x19f/0x1300 [ 623.468547][T25680] nbd_queue_rq+0xc6/0x1100 [ 623.473563][T25680] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 623.479625][T25680] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 623.486551][T25680] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 623.493044][T25680] blk_mq_run_hw_queue+0x348/0x4f0 [ 623.498670][T25680] blk_mq_dispatch_list+0xd16/0xe10 [ 623.504378][T25680] blk_mq_flush_plug_list+0x48d/0x570 [ 623.510269][T25680] __blk_flush_plug+0x3ed/0x4d0 [ 623.515646][T25680] __submit_bio+0x4c6/0x5d0 [ 623.520663][T25680] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 623.526858][T25680] block_read_full_folio+0x599/0x830 [ 623.532660][T25680] filemap_read_folio+0x137/0x3b0 [ 623.538213][T25680] do_read_cache_folio+0x358/0x590 [ 623.543838][T25680] read_part_sector+0xb6/0x2b0 [ 623.549122][T25680] adfspart_check_ICS+0xa5/0xa40 [ 623.554577][T25680] bdev_disk_changed+0x765/0x14c0 [ 623.560111][T25680] blkdev_get_whole+0x380/0x510 [ 623.565475][T25680] bdev_open+0x31e/0xd30 [ 623.570226][T25680] blkdev_open+0x470/0x610 [ 623.575174][T25680] do_dentry_open+0x7ce/0x1420 [ 623.580444][T25680] vfs_open+0x3b/0x340 [ 623.585018][T25680] path_openat+0x3486/0x3e20 [ 623.590116][T25680] do_filp_open+0x22d/0x490 [ 623.595219][T25680] do_sys_openat2+0x12f/0x220 [ 623.600404][T25680] __x64_sys_openat+0x138/0x170 [ 623.605759][T25680] do_syscall_64+0xe2/0xf80 [ 623.610769][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.617208][T25680] [ 623.617208][T25680] -> #1 (set->srcu){.+.+}-{0:0}: [ 623.624321][T25680] __synchronize_srcu+0xca/0x3e0 [ 623.629859][T25680] elevator_switch+0x1e8/0x750 [ 623.635128][T25680] elevator_change+0x2cc/0x450 [ 623.640401][T25680] elevator_set_default+0x36c/0x430 [ 623.646101][T25680] blk_register_queue+0x34e/0x3f0 [ 623.651633][T25680] __add_disk+0x677/0xd50 [ 623.656475][T25680] add_disk_fwnode+0xfb/0x480 [ 623.661659][T25680] nbd_dev_add+0x72c/0xb50 [ 623.666579][T25680] nbd_init+0x168/0x1f0 [ 623.671259][T25680] do_one_initcall+0x250/0x840 [ 623.676528][T25680] do_initcall_level+0x104/0x190 [ 623.681974][T25680] do_initcalls+0x59/0xa0 [ 623.686828][T25680] kernel_init_freeable+0x2a6/0x3d0 [ 623.692534][T25680] kernel_init+0x1d/0x1d0 [ 623.697367][T25680] ret_from_fork+0x51b/0xa40 [ 623.702467][T25680] ret_from_fork_asm+0x1a/0x30 [ 623.707738][T25680] [ 623.707738][T25680] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 623.715543][T25680] __lock_acquire+0x15a5/0x2cf0 [ 623.720909][T25680] lock_acquire+0x106/0x330 [ 623.725924][T25680] __mutex_lock+0x19f/0x1300 [ 623.731026][T25680] elevator_change+0x1b3/0x450 [ 623.736300][T25680] elevator_set_none+0xb5/0x140 [ 623.741657][T25680] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 623.747971][T25680] nbd_start_device+0x17f/0xb10 [ 623.753338][T25680] nbd_genl_connect+0x165b/0x1cf0 [ 623.758870][T25680] genl_family_rcv_msg_doit+0x22a/0x330 [ 623.764926][T25680] genl_rcv_msg+0x61c/0x7a0 [ 623.769940][T25680] netlink_rcv_skb+0x232/0x4b0 [ 623.775211][T25680] genl_rcv+0x28/0x40 [ 623.779701][T25680] netlink_unicast+0x80f/0x9b0 [ 623.784982][T25680] netlink_sendmsg+0x813/0xb40 [ 623.790250][T25680] ____sys_sendmsg+0xa68/0xad0 [ 623.795521][T25680] ___sys_sendmsg+0x2a5/0x360 [ 623.800705][T25680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 623.806153][T25680] do_syscall_64+0xe2/0xf80 [ 623.811176][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.817576][T25680] [ 623.817576][T25680] other info that might help us debug this: [ 623.817576][T25680] [ 623.827791][T25680] Chain exists of: [ 623.827791][T25680] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 623.827791][T25680] [ 623.841517][T25680] Possible unsafe locking scenario: [ 623.841517][T25680] [ 623.848959][T25680] CPU0 CPU1 [ 623.854308][T25680] ---- ---- [ 623.859655][T25680] lock(&q->q_usage_counter(io)#53); [ 623.865019][T25680] lock(fs_reclaim); [ 623.871592][T25680] lock(&q->q_usage_counter(io)#53); [ 623.879510][T25680] lock(&q->elevator_lock); [ 623.884096][T25680] [ 623.884096][T25680] *** DEADLOCK *** [ 623.884096][T25680] [ 623.892230][T25680] 6 locks held by syz.3.4848/25680: [ 623.897413][T25680] #0: ffffffff8fa1a470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 623.905588][T25680] #1: ffffffff8fa1a288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 623.914550][T25680] #2: ffff8880254411d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 623.926040][T25680] #3: ffff8880254410d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 623.937003][T25680] #4: ffff88802526f2c0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 623.947614][T25680] #5: ffff88802526f2f8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 623.958484][T25680] [ 623.958484][T25680] stack backtrace: [ 623.964359][T25680] CPU: 0 UID: 0 PID: 25680 Comm: syz.3.4848 Not tainted syzkaller #0 PREEMPT(full) [ 623.964376][T25680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 623.964385][T25680] Call Trace: [ 623.964392][T25680] [ 623.964401][T25680] dump_stack_lvl+0xe8/0x150 [ 623.964420][T25680] print_circular_bug+0x2e1/0x300 [ 623.964437][T25680] check_noncircular+0x12e/0x150 [ 623.964453][T25680] __lock_acquire+0x15a5/0x2cf0 [ 623.964479][T25680] ? elevator_change+0x1b3/0x450 [ 623.964491][T25680] lock_acquire+0x106/0x330 [ 623.964508][T25680] ? elevator_change+0x1b3/0x450 [ 623.964525][T25680] __mutex_lock+0x19f/0x1300 [ 623.964542][T25680] ? elevator_change+0x1b3/0x450 [ 623.964557][T25680] ? rcu_is_watching+0x15/0xb0 [ 623.964571][T25680] ? elevator_change+0x1b3/0x450 [ 623.964585][T25680] ? __pfx___mutex_lock+0x10/0x10 [ 623.964600][T25680] ? enable_work+0x17f/0x230 [ 623.964613][T25680] ? lockdep_hardirqs_on+0x7a/0x110 [ 623.964631][T25680] ? __cancel_work_sync+0xf7/0x110 [ 623.964645][T25680] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 623.964661][T25680] elevator_change+0x1b3/0x450 [ 623.964676][T25680] elevator_set_none+0xb5/0x140 [ 623.964689][T25680] ? __pfx_elevator_set_none+0x10/0x10 [ 623.964703][T25680] ? xa_load+0x1db/0x210 [ 623.964721][T25680] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 623.964742][T25680] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 623.964757][T25680] ? kernfs_add_one+0x46f/0x5c0 [ 623.964776][T25680] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 623.964795][T25680] ? sysfs_add_file_mode_ns+0x259/0x300 [ 623.964813][T25680] nbd_start_device+0x17f/0xb10 [ 623.964834][T25680] ? device_create_file+0xf4/0x1b0 [ 623.964852][T25680] nbd_genl_connect+0x165b/0x1cf0 [ 623.964879][T25680] ? __pfx_nbd_genl_connect+0x10/0x10 [ 623.964900][T25680] ? rcu_is_watching+0x15/0xb0 [ 623.964914][T25680] ? __nla_parse+0x40/0x60 [ 623.964931][T25680] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 623.964952][T25680] genl_family_rcv_msg_doit+0x22a/0x330 [ 623.964972][T25680] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 623.964993][T25680] ? __lock_acquire+0x6b5/0x2cf0 [ 623.965011][T25680] genl_rcv_msg+0x61c/0x7a0 [ 623.965029][T25680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.965045][T25680] ? __pfx_nbd_genl_connect+0x10/0x10 [ 623.965066][T25680] netlink_rcv_skb+0x232/0x4b0 [ 623.965080][T25680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.965096][T25680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 623.965108][T25680] ? genl_rcv+0x19/0x40 [ 623.965130][T25680] ? down_read+0x272/0x2e0 [ 623.965145][T25680] ? genl_rcv+0xd/0x40 [ 623.965161][T25680] genl_rcv+0x28/0x40 [ 623.965175][T25680] netlink_unicast+0x80f/0x9b0 [ 623.965191][T25680] ? __pfx_netlink_unicast+0x10/0x10 [ 623.965203][T25680] ? netlink_sendmsg+0x650/0xb40 [ 623.965217][T25680] ? skb_put+0x11b/0x210 [ 623.965233][T25680] netlink_sendmsg+0x813/0xb40 [ 623.965250][T25680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.965265][T25680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 623.965281][T25680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 623.965295][T25680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.965308][T25680] ____sys_sendmsg+0xa68/0xad0 [ 623.965324][T25680] ? __might_fault+0xaf/0x130 [ 623.965344][T25680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.965362][T25680] ? import_iovec+0x73/0xa0 [ 623.965381][T25680] ___sys_sendmsg+0x2a5/0x360 [ 623.965396][T25680] ? __lock_acquire+0x6b5/0x2cf0 [ 623.965413][T25680] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.965431][T25680] ? futex_wait+0x29a/0x380 [ 623.965452][T25680] ? __fget_files+0x2a/0x420 [ 623.965465][T25680] ? __fget_files+0x3a0/0x420 [ 623.965481][T25680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 623.965498][T25680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 623.965517][T25680] ? rcu_is_watching+0x15/0xb0 [ 623.965532][T25680] do_syscall_64+0xe2/0xf80 [ 623.965547][T25680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.965559][T25680] ? trace_irq_disable+0x37/0x100 [ 623.965571][T25680] ? clear_bhb_loop+0x60/0xb0 [ 623.965585][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.965598][T25680] RIP: 0033:0x7efd6439aeb9 [ 623.965611][T25680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.965622][T25680] RSP: 002b:00007efd625f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.965636][T25680] RAX: ffffffffffffffda RBX: 00007efd64615fa0 RCX: 00007efd6439aeb9 [ 623.965646][T25680] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 623.965654][T25680] RBP: 00007efd64408c1f R08: 0000000000000000 R09: 0000000000000000 [ 623.965663][T25680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.965671][T25680] R13: 00007efd64616038 R14: 00007efd64615fa0 R15: 00007ffefa996298 [ 623.965686][T25680] [ 624.086969][T25686] lo speed is unknown, defaulting to 1000 [ 624.475618][ T5835] block nbd4: Receive control failed (result -32) [ 624.475857][T21873] block nbd4: Receive control failed (result -32) [ 624.482770][ T5835] block nbd4: Receive control failed (result -32) [ 624.488738][T21873] block nbd4: Receive control failed (result -32) [ 624.526378][T25680] nbd4: detected capacity change from 0 to 127 [ 624.533623][T25040] block nbd4: Dead connection, failed to find a fallback [ 624.553010][T25040] block nbd4: shutting down sockets [ 624.558582][T25040] blk_print_req_error: 138 callbacks suppressed [ 624.558596][T25040] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.581263][T25040] buffer_io_error: 138 callbacks suppressed [ 624.581278][T25040] Buffer I/O error on dev nbd4, logical block 0, async page read [ 624.597840][T25040] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.608489][T25040] Buffer I/O error on dev nbd4, logical block 1, async page read [ 624.618563][T25040] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.628341][T25040] Buffer I/O error on dev nbd4, logical block 2, async page read [ 624.636493][T25040] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.646597][T25040] Buffer I/O error on dev nbd4, logical block 3, async page read [ 624.655081][T25040] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.664934][T25040] Buffer I/O error on dev nbd4, logical block 0, async page read [ 624.672795][T25040] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.682411][T25040] Buffer I/O error on dev nbd4, logical block 1, async page read [ 624.702645][T25040] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.718538][T25040] Buffer I/O error on dev nbd4, logical block 2, async page read [ 624.743183][T25040] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.759168][T25040] Buffer I/O error on dev nbd4, logical block 3, async page read [ 624.774510][T25040] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.784847][T25040] Buffer I/O error on dev nbd4, logical block 0, async page read [ 624.792966][T25040] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.802853][T25040] Buffer I/O error on dev nbd4, logical block 1, async page read [ 624.811658][T25040] ldm_validate_partition_table(): Disk read failed. [ 624.819032][T25040] Dev nbd4: unable to read RDB block 0 [ 624.824937][T25040] nbd4: unable to read partition table [ 624.837647][T25040] ldm_validate_partition_table(): Disk read failed. [ 624.845415][T25040] Dev nbd4: unable to read RDB block 0 [ 624.851915][T25040] nbd4: unable to read partition table