last executing test programs: 12.089135264s ago: executing program 0 (id=2739): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4082, 0xff2}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 11.79069045s ago: executing program 0 (id=2740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 11.532526998s ago: executing program 0 (id=2741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0xa, 0x7, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @empty, @loopback]}, @rr={0x7, 0xb, 0x78, [@loopback, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) 9.851267625s ago: executing program 1 (id=2746): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)={0x2, 0x10, 0x4, 0x5, 0xf, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb5, 0x7, {0x6, 0x110f9ed3dde05fab, 0xed, 0xca, 0x0, 0x38, 0x0, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_sa2={0x2, 0x13, 0x90, 0x0, 0x0, 0x70bd2b, 0x3502}]}, 0x78}}, 0x8000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) recvfrom$netrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00'], 0x70}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) 7.673896849s ago: executing program 2 (id=2750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0) unshare(0x28040680) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000050000000000020000000900020073797a310000000005000100070000002c000780180001801400024020010000000000000000000000000002060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 5.558066725s ago: executing program 4 (id=2751): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000480)) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.44097568s ago: executing program 2 (id=2752): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5.293495212s ago: executing program 4 (id=2754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 4.958646745s ago: executing program 0 (id=2755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) socket$inet6_udplite(0xa, 0x2, 0x88) listen(0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982900fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xfce) 4.791019915s ago: executing program 4 (id=2756): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001ec0)={0x6, 0x8209, 0x0, 0x3b3}, &(0x7f0000001f00)=0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmmsg$alg(r4, &(0x7f0000004180)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="fbc6a5886e8a141b4321b588bfd1adb3be4d7711b451dfece9da7d75d7d2c022f366af2f6d065df8c726662a61b12a668e76b98014a4b56def2960", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030, 0x8004}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)="297e797fd12ddf3661afede12d0bc3f3f20df3fd", 0x14}, {&(0x7f0000001d80)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="fc5dac1862c19466a87ad96dd8e6733ca130f1d23281983e4958bee165f25bed41d533552cf926e2328b5f53903a9432ade146449dae6815", 0x38}, {&(0x7f0000000a00)="d3270074e3a952234c898618733f743caef59645a3051a659ec02c9c31dd6739c1679ba2ed51f484d222be9dc704f8e3e6d47ce52454587d02e7240f7e4278563ada3d7dff3ad1696306b1f7bd9ef7034f787d54e95262b12707ad6b0245e663effbfc6bdf67ed2663631b8187cee5691ecee7a8da6b8f31d9a7c2da42b6ef9deaee234940d413ea8dd235445b518c2d9cc93a9017c273c7d9c6a8446a9b0bb8273bc81e3bedbd30b304c8c28713a42f35699f38ac890cce6262543ef87e245af92829d70fbe63eff66e96", 0xcb}], 0x7, 0x0, 0x0, 0x4000004}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="781304bf74068d012acad51e44e32ec2634ced568e6c82ce03f1ded0405de6579dc80713b9d96db31b2b70e8c9e84240b246d6efdb5a2a8dcab2edeb8913e02a283ba21d6c54305fe53eba93538550227fa5743f715df1867447c4b7d56179c96372c8b5072fa62f8d8a3675c9abca395d2c1ac2269c0ee812978544a027568f89e17663f9c36b065afcb971da9e8429c4fe958c535b0eb5ee1185fa44a4b0bde78db2abc9ece103b5680161f3642e3754da3c044a554565c790222748508bbec30777dceaca77f4881bf5091d6109aff9fd7063c1eeebb39a1baf7581efde944b0d", 0xe2}, {&(0x7f0000002d80)="b91e84c967d5615c5516f453314ecc238b97b5df3b4e4def440d0a12a5ae4e84c3adff92bc3e7ee9d143bf5f5ceccea92187485301f64ed857f5cb7a305f7e1f236341b1b6a084c623d120490b16ead2ef06616874fb1e832784583819e659bac0083408874e69961cbd17d082efafb316e08d3a8f21b44bb1ab813f", 0x7c}], 0x2, &(0x7f0000002e00)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x6c9}], 0x1060, 0x20000810}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000cc0)="cdcef075b1a1f7345903ee8436a601f9e6b39870c046cabcfd196ee7da30bcfecde0e9387c749e7fc0cf772a4a24", 0x2e}, {&(0x7f0000003e80)="2a5fe066dad3e50b9ba4157b1635f0f8a2bc70ead300c68c4aeb06f306cfec6df80cb5d89e28aca1a80057e07432f2656ce2a5fc4fe85fd95224e4fadb510d8f4d9d3de858b568da4440668f0bd5ee7d1f774d1e12d3ef4cc9608f6f7c39b8512d292f84547aeb9a1d66fcb186ccb0d5e7857839e9b9432c366b93942b3ffe69f5c5856a9eb98bd81fec19ad7f16201fc6b577459f4e9735d089256414939a34d3c74ddb876bac9f4b2b6feb291f9cc3a59142218e285ea12c081ef122d34842f5b830c3873d740bc09c6cf5944a", 0xce}], 0x2, &(0x7f0000003fc0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18}], 0x48, 0x800}, {0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004040)="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", 0xff}], 0x1, 0x0, 0x0, 0x4010}], 0x5, 0x4000180) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x48, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) nanosleep(&(0x7f0000000000), 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r10 = socket(0x2, 0x3, 0xff) bind$inet(r10, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) connect$inet(r10, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) write(r10, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20) 4.511349562s ago: executing program 4 (id=2757): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0) r0 = socket(0x8, 0x3, 0xb) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x3, 'syz1\x00', @default, 0x3, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) socket$nl_route(0x10, 0x3, 0x0) 4.326853976s ago: executing program 1 (id=2758): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0x800}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) unshare(0x10000400) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) 4.108630588s ago: executing program 0 (id=2760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r5 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}, 0x1, 0x0, 0x0, 0x4044051}, 0x0) 4.108226638s ago: executing program 3 (id=2761): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.868835434s ago: executing program 3 (id=2762): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 3.822948191s ago: executing program 4 (id=2763): unshare(0x400) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x39e) listen(0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB="14000100ff0500000000000000000000000000010800080002040000"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) 3.494435206s ago: executing program 3 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c451}, 0x44084) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000a00000029e8687294a0050000337d031e282c0c78527b0f62c6f43deece341fdcd8914ec3ba71521463b1f23e7dbd830c93890f1447360bcc7ec744ad81cd00299a73729f6f27e9d846cf20e51e1952338efcc8939def60b4373b31d1f1f300"/117, @ANYRES32=r5, @ANYBLOB="0c00238005001f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="68f6ffe16a6d677f00", @ANYRES32=r6, @ANYBLOB="0c0099007200000054000000080057000900000008009f00010000000800a1001000000008009f00050000000800570023000000080057000f000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0xfffffffffffffd46) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000414000227bd7000fcdbdf14000008000100003717f328c527e1cd9600000800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) close(r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000fb1fc5e68d1d927e4ab0d63a71f191e5dc48d0860654bac9e25ed9770841ccdde41f724494e344f572c2a636e9547973f5abf2291a71c5609092b465aeab4c585e66dcd03ebb1c4ef545b67e2a01026e5033a0839920f0325acce8ecc665da5813d0f1d6e81cdf05a4ef4a12b61ae72676a7a4167a1e2b3115a81ec04689f7cdfcc763de19cd95f7095c7a1a144b5a38e1f4dcad7647801aa3774d8ea11b265200a8012528fc4faba0"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'gretap0\x00'}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 3.152310258s ago: executing program 2 (id=2765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0xa, 0x7, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @empty, @loopback]}, @rr={0x7, 0xb, 0x78, [@loopback, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) 3.141956379s ago: executing program 3 (id=2766): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000006800010000000000000000000a000000000000001400060000000000000000000000000000000000040004"], 0x30}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5e3, 0x0, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x8, 0x8, {{0x8, 0x4, 0x1, 0x2d, 0x20, 0x65, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, {[@rr={0x7, 0xb, 0x8e, [@loopback, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r1, 0x0, 0x40) 3.014508773s ago: executing program 3 (id=2767): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.705067016s ago: executing program 1 (id=2768): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000cdf605efe7b5ece9accfbb00006d1b742936000000dbc2b11b49c374e5bef5373d3d78cdf1cfee8387ba6e71ab28ee523c95dec40351897161e06a574a52f71847ed54eea733c3323f8fabf12f45a970d46c1474553d681bcee88656dd9bf14a6db9120bab3e6a3fee8fe19d3e1a56804c4c5b46dfbd"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0xfffe, 0x200, 0x2}, {0x10000, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@loopback, 0x40000, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 1.977756228s ago: executing program 1 (id=2769): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000800)=[{0x3, 0x0, {0x1, 0x0, 0x3}, {0x0, 0xf0, 0x3}, 0xfd, 0xfe}, {0x9, 0x0, {0x1, 0x1, 0x2}, {0x0, 0x1, 0x4}, 0x0, 0x1}, {0x1, 0x0, {0x2}, {0x0, 0x1, 0x1}}, {0x3, 0x0, {0x0, 0xf0, 0x2}, {0x0, 0x0, 0x4}, 0xfd, 0x1}], 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x4) r5 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80800) read(r1, &(0x7f0000000240)=""/233, 0xe9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$rxrpc(r3, &(0x7f0000000440)="10fa07061815e196d5df16a9f0ba3da74ac3bd320b0f7fc5b7df13a2fd6cce47acfcb2d652a2bb7befdcb3c703eb6861c14566004a1ec53c04a25899c98b9cc79898f0d0da967808383cdfb4febcfce810c4100f1bca8d55a130bade8481a0d5bf273b17f716360c7da321281de2e8158defac3d3ffd9fe36ce05dd65a609bb4d226726cb854773a6c4992137af3a0cb22041873865335cb241ce771ab45db8ccb39b9c501ea296790a2134e288081e2a413f111b53aeffd27b6a62ed94161566b1885b5e79c46f6e54fd254c8e62d576ca9456e4aca7d02d28f64ad452d5c8ae5", 0xe1, 0x94, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, r7}, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}}) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r8, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 1.352054972s ago: executing program 3 (id=2770): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 978.314336ms ago: executing program 1 (id=2771): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000800)=[{0x3, 0x0, {0x1, 0x0, 0x3}, {0x0, 0xf0, 0x3}, 0xfd, 0xfe}, {0x9, 0x0, {0x1, 0x1, 0x2}, {0x0, 0x1, 0x4}, 0x0, 0x1}, {0x1, 0x0, {0x2}, {0x0, 0x1, 0x1}}, {0x3, 0x0, {0x0, 0xf0, 0x2}, {0x0, 0x0, 0x4}, 0xfd, 0x1}], 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r8, 0x0, 0x80, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = accept4$phonet_pipe(r9, 0x0, 0x0, 0x80800) read(r2, &(0x7f0000000240)=""/233, 0xe9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$rxrpc(r7, &(0x7f0000000440)="10fa07061815e196d5df16a9f0ba3da74ac3bd320b0f7fc5b7df13a2fd6cce47acfcb2d652a2bb7befdcb3c703eb6861c14566004a1ec53c04a25899c98b9cc79898f0d0da967808383cdfb4febcfce810c4100f1bca8d55a130bade8481a0d5bf273b17f716360c7da321281de2e8158defac3d3ffd9fe36ce05dd65a609bb4d226726cb854773a6c4992137af3a0cb22041873865335cb241ce771ab45db8ccb39b9c501ea296790a2134e288081e2a413f111b53aeffd27b6a62ed94161566b1885b5e79c46f6e54fd254c8e62d576ca9456e4aca7d02d28f64ad452d5c8ae5", 0xe1, 0x94, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, r12}, 0x14) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}}) write(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r13, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 591.228306ms ago: executing program 2 (id=2772): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) r0 = epoll_create(0x400) pipe(&(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8004}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dffffff"}) r3 = socket$inet6(0xa, 0x802, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002105, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) 536.418521ms ago: executing program 2 (id=2773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = accept$netrom(r2, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xffdd) close(0x4) accept4(r3, 0x0, 0x0, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) close(0x3) 139.873877ms ago: executing program 0 (id=2774): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 70.024364ms ago: executing program 2 (id=2775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0) unshare(0x28040680) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000050000000000020000000900020073797a310000000005000100070000002c000780180001801400024020010000000000000000000000000002060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 68.419424ms ago: executing program 4 (id=2776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0) unshare(0x28040680) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000050000000000020000000900020073797a310000000005000100070000002c000780180001801400024020010000000000000000000000000002060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 0s ago: executing program 1 (id=2777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$can_raw(r1, &(0x7f0000000640)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000000c40)=""/254, 0xfe}], 0x8, &(0x7f0000000e00)=""/183, 0xb7}, 0x60) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$bt_l2cap(r5, &(0x7f0000000ac0)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r7, 0x3f38e000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r9, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r9, 0x1) kernel console output (not intermixed with test programs): 2] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 294.360008][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 294.498585][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'. [ 298.204406][T10185] syzkaller0: entered promiscuous mode [ 298.210208][T10185] syzkaller0: entered allmulticast mode [ 298.269210][T10205] __nla_validate_parse: 1 callbacks suppressed [ 298.269224][T10205] netlink: 192 bytes leftover after parsing attributes in process `syz.0.831'. [ 298.285269][T10205] netlink: zone id is out of range [ 298.290546][T10205] netlink: zone id is out of range [ 298.297883][T10205] netlink: zone id is out of range [ 298.307209][T10205] netlink: zone id is out of range [ 298.314147][T10205] netlink: zone id is out of range [ 298.324614][T10205] netlink: zone id is out of range [ 298.329772][T10205] netlink: zone id is out of range [ 298.337208][T10205] netlink: zone id is out of range [ 298.345210][T10205] netlink: zone id is out of range [ 298.350553][T10205] netlink: zone id is out of range [ 298.624989][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 298.834091][T10218] netlink: 'syz.2.836': attribute type 10 has an invalid length. [ 298.846101][T10217] netlink: 3 bytes leftover after parsing attributes in process `syz.3.837'. [ 298.930324][T10226] netlink: 'syz.2.836': attribute type 10 has an invalid length. [ 298.930700][T10217] batadv1: entered promiscuous mode [ 298.938772][T10225] netlink: 'syz.0.839': attribute type 13 has an invalid length. [ 298.969830][T10225] netlink: 'syz.0.839': attribute type 17 has an invalid length. [ 298.995278][T10217] batadv1: entered allmulticast mode [ 299.061895][T10226] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 299.164175][T10218] bond0: (slave dummy0): Releasing backup interface [ 299.266342][T10218] team0: Port device dummy0 added [ 299.530873][T10225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.661308][T10234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.747012][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 299.770624][T10231] wg1 speed is unknown, defaulting to 1000 [ 300.045821][T10245] syzkaller0: entered promiscuous mode [ 300.051959][T10245] syzkaller0: entered allmulticast mode [ 300.662569][T10263] wg1 speed is unknown, defaulting to 1000 [ 301.235039][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 301.646933][T10283] !: renamed from dummy0 [ 302.201596][T10284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.849'. [ 302.236702][T10286] wg1 speed is unknown, defaulting to 1000 [ 302.755272][T10311] syzkaller0: entered promiscuous mode [ 302.760952][T10311] syzkaller0: entered allmulticast mode [ 302.870888][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 302.937281][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 303.399504][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 303.550373][T10337] wg1 speed is unknown, defaulting to 1000 [ 304.120080][T10354] wg1 speed is unknown, defaulting to 1000 [ 304.728735][T10369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.865'. [ 304.808147][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 305.149885][T10378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.866'. [ 305.194533][T10370] syz_tun (unregistering): left promiscuous mode [ 305.279903][T10375] vlan2: entered promiscuous mode [ 305.359389][T10375] macvtap0: entered promiscuous mode [ 305.440789][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 305.493266][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 305.657582][T10382] syzkaller0: entered promiscuous mode [ 305.680995][T10382] syzkaller0: entered allmulticast mode [ 305.740120][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 305.783600][T10398] netlink: 'syz.0.869': attribute type 21 has an invalid length. [ 305.956642][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 305.996795][T10406] netlink: 147804 bytes leftover after parsing attributes in process `syz.0.869'. [ 306.352301][T10423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.874'. [ 306.419591][T10411] syzkaller0: entered promiscuous mode [ 306.425462][T10411] syzkaller0: entered allmulticast mode [ 306.446978][T10419] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 306.472180][T10422] tipc: Resetting bearer [ 307.200232][T10445] wg1 speed is unknown, defaulting to 1000 [ 307.840199][T10461] siw: device registration error -23 [ 308.404944][T10484] __nla_validate_parse: 2 callbacks suppressed [ 308.404967][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 308.898940][T10502] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.936054][T10502] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 308.960802][T10502] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 309.140642][T10507] tipc: Enabled bearer , priority 0 [ 309.167493][T10507] tipc: Resetting bearer [ 309.218457][T10506] tipc: Disabling bearer [ 309.297687][T10513] wg1 speed is unknown, defaulting to 1000 [ 309.569144][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'. [ 309.994670][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 310.029146][T10542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.893'. [ 310.049745][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 310.063034][T10542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.893'. [ 310.104139][T10545] netlink: 'syz.1.893': attribute type 16 has an invalid length. [ 310.123910][T10542] netlink: 5 bytes leftover after parsing attributes in process `syz.1.893'. [ 310.141430][T10545] netlink: 'syz.1.893': attribute type 17 has an invalid length. [ 310.246951][T10542] IPv6: NLM_F_REPLACE set, but no existing node found! [ 310.567909][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 310.720363][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 311.152665][T10566] netem: change failed [ 311.377279][T10581] tipc: Enabling of bearer rejected, already enabled [ 311.422487][T10580] lo speed is unknown, defaulting to 1000 [ 311.442370][T10580] lo speed is unknown, defaulting to 1000 [ 311.452928][T10580] lo speed is unknown, defaulting to 1000 [ 311.521847][T10580] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 311.592813][T10588] tipc: Enabled bearer , priority 0 [ 311.612715][T10588] syzkaller0: entered promiscuous mode [ 311.618257][T10588] syzkaller0: entered allmulticast mode [ 311.687149][T10580] lo speed is unknown, defaulting to 1000 [ 311.746332][T10580] lo speed is unknown, defaulting to 1000 [ 311.764025][T10588] tipc: Resetting bearer [ 311.793183][T10580] lo speed is unknown, defaulting to 1000 [ 311.815589][T10580] lo speed is unknown, defaulting to 1000 [ 311.835068][T10580] lo speed is unknown, defaulting to 1000 [ 311.912845][ T1165] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 312.089905][T10604] team0: Unable to change to the same mode the team is in [ 312.119792][T10578] tipc: Resetting bearer [ 312.208425][T10578] tipc: Disabling bearer [ 312.385129][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 312.544600][T10615] bridge0: entered allmulticast mode [ 312.568887][T10623] bridge0 (unregistering): left allmulticast mode [ 312.636069][T10624] tipc: Enabling of bearer rejected, already enabled [ 312.796831][T10630] tipc: Enabled bearer , priority 0 [ 312.809343][T10630] tipc: Resetting bearer [ 313.018460][T10629] tipc: Disabling bearer [ 313.399134][T10654] netlink: 'syz.2.922': attribute type 6 has an invalid length. [ 313.492013][T10654] netlink: 'syz.2.922': attribute type 12 has an invalid length. [ 313.499833][T10654] __nla_validate_parse: 1 callbacks suppressed [ 313.499850][T10654] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.922'. [ 313.598525][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'. [ 313.671611][ T5181] Bluetooth: hci4: command 0x0405 tx timeout [ 313.840575][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'. [ 313.876909][T10671] tipc: Enabled bearer , priority 0 [ 313.977114][T10675] tipc: Resetting bearer [ 314.040481][T10670] tipc: Disabling bearer [ 314.400363][T10680] net_ratelimit: 29 callbacks suppressed [ 314.400385][T10680] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 314.810941][T10687] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 314.991972][T10690] tipc: Enabled bearer , priority 0 [ 315.025478][T10690] syzkaller0: entered promiscuous mode [ 315.045212][T10690] syzkaller0: entered allmulticast mode [ 315.113208][T10689] tipc: Resetting bearer [ 315.274087][T10689] tipc: Disabling bearer [ 315.645172][T10696] lo speed is unknown, defaulting to 1000 [ 315.751283][ T5181] Bluetooth: hci4: command 0x0405 tx timeout [ 316.149849][T10708] netlink: 'syz.2.936': attribute type 11 has an invalid length. [ 316.250699][T10708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.936'. [ 316.322704][T10711] lo speed is unknown, defaulting to 1000 [ 316.578209][T10718] tipc: Enabling of bearer rejected, already enabled [ 316.808135][T10722] ip6tnl3: entered promiscuous mode [ 316.836775][T10722] ip6tnl3: entered allmulticast mode [ 316.882496][T10722] team0: Refused to change device type [ 317.299962][T10728] lo speed is unknown, defaulting to 1000 [ 317.831464][ T5181] Bluetooth: hci4: command 0x0405 tx timeout [ 318.003645][T10738] netlink: 452 bytes leftover after parsing attributes in process `syz.1.943'. [ 320.012722][T10771] syzkaller0: entered promiscuous mode [ 320.018278][T10771] syzkaller0: entered allmulticast mode [ 320.176163][T10773] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 320.214262][ T30] audit: type=1800 audit(1756523895.118:6): pid=10768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.948" name="memory.events" dev="tmpfs" ino=1079 res=0 errno=0 [ 320.369998][T10775] syzkaller0: entered promiscuous mode [ 320.392151][T10775] syzkaller0: entered allmulticast mode [ 320.582627][T10777] syzkaller0: entered promiscuous mode [ 320.601608][T10777] syzkaller0: entered allmulticast mode [ 320.721616][T10778] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 320.812107][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 320.853407][T10782] geneve2: entered promiscuous mode [ 320.873227][T10782] geneve2: entered allmulticast mode [ 320.911568][ T1165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.952882][ T1165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.000228][ T1165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.022730][ T1165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.329145][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 321.589794][T10798] batadv1: entered promiscuous mode [ 322.676361][T10813] syzkaller0: entered promiscuous mode [ 322.683607][T10813] syzkaller0: entered allmulticast mode [ 322.720680][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.961'. [ 322.768150][T10811] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.164158][T10819] lo speed is unknown, defaulting to 1000 [ 323.400516][T10831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.967'. [ 323.433107][T10831] netlink: 43 bytes leftover after parsing attributes in process `syz.1.967'. [ 323.496768][T10831] netlink: 'syz.1.967': attribute type 5 has an invalid length. [ 323.556473][T10831] netlink: 43 bytes leftover after parsing attributes in process `syz.1.967'. [ 323.678794][T10840] netlink: 192 bytes leftover after parsing attributes in process `syz.1.967'. [ 323.840859][ T1165] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.861874][ T1165] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.870304][ T1165] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.899666][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 323.927305][ T1165] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.957267][T10831] lo speed is unknown, defaulting to 1000 [ 324.017070][T10842] geneve2: entered promiscuous mode [ 324.023325][T10842] geneve2: entered allmulticast mode [ 324.137404][ T1165] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.146608][ T1165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.259888][ T1165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.284925][ T1165] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.685253][T10847] lo speed is unknown, defaulting to 1000 [ 325.047824][T10862] lo speed is unknown, defaulting to 1000 [ 325.145886][T10867] netlink: 452 bytes leftover after parsing attributes in process `syz.3.974'. [ 325.971010][T10875] syzkaller0: entered promiscuous mode [ 325.978556][T10875] syzkaller0: entered allmulticast mode [ 326.735456][T10887] lo speed is unknown, defaulting to 1000 [ 327.271424][ T5181] Bluetooth: hci4: command 0x0405 tx timeout [ 327.415795][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 327.433514][T10898] geneve2: entered promiscuous mode [ 327.438917][T10898] geneve2: entered allmulticast mode [ 327.449571][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.459246][ T6017] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.484614][ T6017] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.533159][ T6017] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.797414][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 328.849097][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 329.746450][T10925] syzkaller0: entered promiscuous mode [ 329.761247][T10925] syzkaller0: entered allmulticast mode [ 329.969009][T10932] netlink: 788 bytes leftover after parsing attributes in process `syz.3.990'. [ 330.186429][T10935] lo speed is unknown, defaulting to 1000 [ 330.804716][T10949] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.994'. [ 331.339876][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 331.758238][T10961] lo speed is unknown, defaulting to 1000 [ 331.874757][T10970] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 331.990950][T10970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.070684][T10965] lo speed is unknown, defaulting to 1000 [ 332.276091][T10972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.341836][T10972] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 332.442189][T10972] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 332.697794][T10970] veth7: entered promiscuous mode [ 332.758290][T10970] bond3: (slave veth7): Enslaving as an active interface with a down link [ 332.919310][T10982] tipc: Enabling of bearer rejected, already enabled [ 334.297455][T11021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1006'. [ 334.384898][T11021] tipc: Invalid UDP bearer configuration [ 334.384970][T11021] tipc: Enabling of bearer rejected, failed to enable media [ 334.456415][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 334.767529][T11039] tipc: Enabled bearer , priority 0 [ 334.793868][T11039] syzkaller0: entered promiscuous mode [ 334.825986][T11039] syzkaller0: entered allmulticast mode [ 334.854124][T11036] lo speed is unknown, defaulting to 1000 [ 334.923394][T11044] syz_tun: entered allmulticast mode [ 334.960797][T11037] tipc: Resetting bearer [ 335.005898][T11044] dvmrp8: entered allmulticast mode [ 335.181569][T11037] tipc: Resetting bearer [ 335.282450][T11037] tipc: Disabling bearer [ 335.345498][T11042] syz_tun: left allmulticast mode [ 335.356433][T11042] dvmrp8: left allmulticast mode [ 335.460868][T11050] syzkaller0: entered promiscuous mode [ 335.468022][T11050] syzkaller0: entered allmulticast mode [ 335.516689][T11051] tipc: Enabled bearer , priority 0 [ 335.529531][T11050] tipc: Resetting bearer [ 335.555137][T11048] tipc: Resetting bearer [ 335.627906][T11048] tipc: Disabling bearer [ 335.658288][T11059] tipc: Enabling of bearer rejected, failed to enable media [ 335.775392][T11061] syz_tun: entered allmulticast mode [ 335.883137][T11061] netlink: 'syz.3.1016': attribute type 23 has an invalid length. [ 336.151776][T11059] syzkaller0: entered promiscuous mode [ 336.159722][T11059] syzkaller0: entered allmulticast mode [ 336.175705][T11058] lo speed is unknown, defaulting to 1000 [ 336.396587][T11069] lo speed is unknown, defaulting to 1000 [ 336.657077][T11057] syz_tun: left allmulticast mode [ 337.740542][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 337.874733][T11083] tipc: Resetting bearer [ 337.892213][T11083] syzkaller0: left promiscuous mode [ 337.897492][T11083] syzkaller0: left allmulticast mode [ 337.936887][T11083] geneve2: left promiscuous mode [ 337.962924][T11083] geneve2: left allmulticast mode [ 338.020149][T11087] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.194815][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.218211][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.246989][T11087] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.294450][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.309626][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.428920][T11087] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.577360][T11087] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.813379][ T6017] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.239395][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.273912][T11122] syzkaller0: entered promiscuous mode [ 339.279450][T11122] syzkaller0: entered allmulticast mode [ 339.380143][ T6017] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.493855][ T6024] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.633653][T11129] lo speed is unknown, defaulting to 1000 [ 339.788737][T11136] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1032'. [ 339.940392][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 339.957070][T11145] syzkaller0: entered promiscuous mode [ 339.971759][T11145] syzkaller0: entered allmulticast mode [ 340.257130][T11139] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 340.283913][T11153] batadv1: entered promiscuous mode [ 340.384053][T11147] lo speed is unknown, defaulting to 1000 [ 341.017745][T11172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.176172][T11173] geneve2: left promiscuous mode [ 341.239862][T11173] geneve2: left allmulticast mode [ 341.280480][ T6024] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.416503][ T6024] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.438310][ T6024] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.465305][ T6024] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.799616][T11184] syzkaller0: entered promiscuous mode [ 341.847758][T11184] syzkaller0: entered allmulticast mode [ 342.125009][T11195] lo speed is unknown, defaulting to 1000 [ 342.338917][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 342.449988][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 342.698058][T11213] batadv1: entered promiscuous mode [ 343.234204][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1050'. [ 343.266389][T11226] lo speed is unknown, defaulting to 1000 [ 343.340097][T11230] netlink: zone id is out of range [ 343.346001][T11230] netlink: zone id is out of range [ 343.351405][T11230] netlink: zone id is out of range [ 343.356565][T11230] netlink: zone id is out of range [ 343.362696][T11230] netlink: zone id is out of range [ 343.367864][T11230] netlink: zone id is out of range [ 343.379768][T11230] netlink: zone id is out of range [ 343.427580][T11230] netlink: zone id is out of range [ 343.481682][T11230] netlink: zone id is out of range [ 343.496752][T11230] netlink: zone id is out of range [ 343.747447][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 343.888958][T11247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1053'. [ 344.239887][T11253] syzkaller0: entered promiscuous mode [ 344.255332][T11253] syzkaller0: entered allmulticast mode [ 344.436979][T11254] lo speed is unknown, defaulting to 1000 [ 344.768185][T11264] lo speed is unknown, defaulting to 1000 [ 344.965341][T11279] netlink: 'syz.2.1059': attribute type 13 has an invalid length. [ 344.978808][T11279] netlink: 'syz.2.1059': attribute type 17 has an invalid length. [ 345.304065][T11279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.343846][T11279] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.603791][T11280] lo speed is unknown, defaulting to 1000 [ 345.703834][T11283] lo speed is unknown, defaulting to 1000 [ 345.779697][T11277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.822067][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1061'. [ 345.841627][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 346.219043][T11294] bridge0 (unregistering): left allmulticast mode [ 346.759646][T11311] netlink: 'syz.4.1065': attribute type 4 has an invalid length. [ 346.822282][T11313] netlink: 'syz.4.1065': attribute type 4 has an invalid length. [ 346.889778][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 347.089846][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1066'. [ 347.976067][T11324] syz_tun: entered allmulticast mode [ 348.035481][T11324] dvmrp8: entered allmulticast mode [ 348.107357][T11324] lo speed is unknown, defaulting to 1000 [ 348.134433][T11326] netlink: 'syz.2.1068': attribute type 23 has an invalid length. [ 348.487940][T11338] lo speed is unknown, defaulting to 1000 [ 348.614818][T11332] lo speed is unknown, defaulting to 1000 [ 348.811862][T11323] syz_tun: left allmulticast mode [ 348.827731][T11323] dvmrp8: left allmulticast mode [ 349.374126][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'. [ 349.441301][T11354] netem: change failed [ 349.455579][T11360] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1076'. [ 350.022185][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 350.381728][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 350.542239][T11375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1078'. [ 351.128128][T11389] syzkaller0: entered promiscuous mode [ 351.158931][T11389] syzkaller0: entered allmulticast mode [ 351.704826][T11407] netlink: 'syz.4.1087': attribute type 13 has an invalid length. [ 351.730590][T11407] netlink: 'syz.4.1087': attribute type 17 has an invalid length. [ 352.107060][T11407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.169071][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 352.428948][T11415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.207681][T11407] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.331534][T11407] net_ratelimit: 12 callbacks suppressed [ 353.331547][T11407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.445273][T11423] netem: change failed [ 353.616977][T11443] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 353.627339][T11443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1092'. [ 353.656273][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 353.660845][T11412] lo speed is unknown, defaulting to 1000 [ 353.736677][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1092'. [ 353.807282][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 353.886013][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1093'. [ 354.445270][T11461] syzkaller0: entered promiscuous mode [ 354.450980][T11461] syzkaller0: entered allmulticast mode [ 354.480872][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1096'. [ 354.599459][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 354.961665][T11476] lo speed is unknown, defaulting to 1000 [ 354.975942][T11478] syzkaller0: entered promiscuous mode [ 355.009252][T11478] syzkaller0: entered allmulticast mode [ 355.257037][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 355.317997][T11488] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 355.740644][T11498] netlink: 'syz.1.1105': attribute type 13 has an invalid length. [ 355.771459][T11498] netlink: 'syz.1.1105': attribute type 17 has an invalid length. [ 355.805294][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 355.916516][T11498] erspan0: left promiscuous mode [ 356.063738][T11498] 8021q: adding VLAN 0 to HW filter on device à [ 356.119085][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.137511][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.167699][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.188601][T11498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.288907][ T959] lo speed is unknown, defaulting to 1000 [ 356.295571][ T959] syz2: Port: 1 Link ACTIVE [ 356.334699][T11506] syzkaller0: entered promiscuous mode [ 356.340663][T11506] syzkaller0: entered allmulticast mode [ 356.376544][T11521] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 356.487793][T11500] lo speed is unknown, defaulting to 1000 [ 356.750295][T11538] syzkaller0: entered promiscuous mode [ 356.758623][T11538] syzkaller0: entered allmulticast mode [ 356.905695][T11541] team0: Port device dummy0 removed [ 356.930429][T11541] bond3: (slave veth7): Releasing active interface [ 356.968210][ T1165] tipc: Resetting bearer [ 356.996521][T11541] tipc: Resetting bearer [ 357.076364][T11548] vxcan4: entered promiscuous mode [ 357.240601][T11545] tipc: Cannot configure node identity twice [ 357.516910][T11561] __nla_validate_parse: 7 callbacks suppressed [ 357.516930][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 357.700293][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 357.719410][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 357.831256][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 357.885964][T11578] netlink: 'syz.0.1118': attribute type 12 has an invalid length. [ 357.950989][T11578] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1118'. [ 358.425172][T11583] lo speed is unknown, defaulting to 1000 [ 358.495143][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1123'. [ 358.858381][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 358.910852][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 358.915232][T11597] lo speed is unknown, defaulting to 1000 [ 359.391997][T11583] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1121'. [ 359.660124][T11616] lo speed is unknown, defaulting to 1000 [ 359.936146][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 360.767982][T11628] lo speed is unknown, defaulting to 1000 [ 361.237835][T11639] lo speed is unknown, defaulting to 1000 [ 362.224887][T11666] lo speed is unknown, defaulting to 1000 [ 362.226033][T11682] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 362.351549][T11682] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 362.859825][T11701] __nla_validate_parse: 2 callbacks suppressed [ 362.859845][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 362.883742][T11692] lo speed is unknown, defaulting to 1000 [ 363.538357][T11710] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1141'. [ 363.745259][T11718] tipc: Enabling of bearer rejected, failed to enable media [ 363.943129][T11723] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 363.976589][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 364.037914][T11720] lo speed is unknown, defaulting to 1000 [ 364.063150][T11722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1145'. [ 365.088397][T11744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.140941][T11744] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1763850688/1763850690 [ 365.269934][T11744] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1763850688/1763850690 [ 365.328620][T11744] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1763850688/1763850690 [ 365.365036][T11746] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1150'. [ 365.949222][T11762] lo speed is unknown, defaulting to 1000 [ 366.012460][T11763] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1154'. [ 366.246683][T11763] lo speed is unknown, defaulting to 1000 [ 367.371453][T11786] lo speed is unknown, defaulting to 1000 [ 367.793145][T11808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.828259][T11805] lo speed is unknown, defaulting to 1000 [ 368.306165][T11808] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1163'. [ 369.969276][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 370.028425][T11844] sctp: [Deprecated]: syz.0.1168 (pid 11844) Use of int in max_burst socket option deprecated. [ 370.028425][T11844] Use struct sctp_assoc_value instead [ 370.114742][T11848] tipc: Enabling of bearer rejected, already enabled [ 370.259827][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 370.369432][T11855] lo speed is unknown, defaulting to 1000 [ 370.498690][T11860] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1173'. [ 370.844801][T11860] lo speed is unknown, defaulting to 1000 [ 370.976272][T11857] lo speed is unknown, defaulting to 1000 [ 371.066280][T11872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1175'. [ 371.466183][T11879] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 371.481779][T11879] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1177'. [ 372.284164][T11886] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 372.938762][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 373.028282][T11905] tipc: Enabled bearer , priority 0 [ 373.036633][T11905] syzkaller0: entered promiscuous mode [ 373.050166][T11905] syzkaller0: entered allmulticast mode [ 373.067931][T11905] tipc: Resetting bearer [ 373.081466][T11904] tipc: Resetting bearer [ 373.132142][T11904] tipc: Disabling bearer [ 373.178252][T11909] vxcan2: entered promiscuous mode [ 373.344444][T11919] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 373.447879][T11919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.583607][T11927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.590954][T11927] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 373.604625][T11927] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 373.738287][T11919] veth9: entered promiscuous mode [ 373.767511][T11919] bond4: (slave veth9): Enslaving as an active interface with a down link [ 373.801462][T11933] syzkaller0: entered promiscuous mode [ 373.806998][T11933] syzkaller0: entered allmulticast mode [ 374.096999][T11950] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1194'. [ 374.156447][T11950] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1194'. [ 375.095549][T11976] tap0: tun_chr_ioctl cmd 1074025677 [ 375.123293][T11976] tap0: linktype set to 805 [ 375.204140][T11979] lo speed is unknown, defaulting to 1000 [ 375.402133][T11982] lo speed is unknown, defaulting to 1000 [ 376.200424][T11986] IPVS: Scheduler module ip_vs_sip not found [ 376.893381][T12003] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.132007][T12005] lo speed is unknown, defaulting to 1000 [ 377.358091][T12012] netlink: 'syz.3.1207': attribute type 1 has an invalid length. [ 377.388411][T12012] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1207'. [ 377.462539][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 377.576186][T12022] vxcan0: entered promiscuous mode [ 377.620216][T12011] lo speed is unknown, defaulting to 1000 [ 377.883838][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 377.945744][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 377.960694][T12038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1214'. [ 377.972178][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 377.974373][T12034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'. [ 377.994755][T12038] tipc: Resetting bearer [ 378.017558][T12038] bond4: (slave veth9): Releasing active interface [ 378.466221][T12047] syzkaller1: entered allmulticast mode [ 378.734737][T12049] lo speed is unknown, defaulting to 1000 [ 379.699669][T12067] netlink: 'syz.3.1221': attribute type 13 has an invalid length. [ 379.707671][T12067] netlink: 'syz.3.1221': attribute type 17 has an invalid length. [ 379.893308][T12067] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.949262][T12067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.171897][T12069] lo speed is unknown, defaulting to 1000 [ 380.291823][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 380.460693][T12080] vlan0: entered allmulticast mode [ 380.469669][T12080] bridge0: entered allmulticast mode [ 380.482807][T12080] bridge0: port 1(vlan0) entered blocking state [ 380.489407][T12080] bridge0: port 1(vlan0) entered disabled state [ 380.558924][T12083] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 380.598847][T12082] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1225'. [ 380.850738][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1227'. [ 380.868522][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1227'. [ 380.898387][T12096] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 380.966545][T12092] lo speed is unknown, defaulting to 1000 [ 381.133299][T12102] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1228'. [ 381.151627][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 381.200523][T12102] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1228'. [ 381.296381][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 381.336334][T12102] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1228'. [ 381.556012][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 382.381818][T12133] netlink: 'syz.0.1239': attribute type 5 has an invalid length. [ 382.579887][T12150] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0 [ 382.600016][T12144] lo speed is unknown, defaulting to 1000 [ 382.699915][T12153] tipc: Resetting bearer [ 382.705838][T12153] tipc: Resetting bearer [ 382.726574][T12153] veth7: left promiscuous mode [ 382.732017][T12153] veth9: left promiscuous mode [ 382.913965][T12153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 383.431535][T12174] bridge0: port 1(veth11) entered blocking state [ 383.438083][T12174] bridge0: port 1(veth11) entered disabled state [ 383.455192][T12174] veth11: entered allmulticast mode [ 383.467301][T12174] veth11: entered promiscuous mode [ 383.493167][T12172] bridge0: port 2(veth0_to_bond) entered blocking state [ 383.685889][T12172] bridge0: port 2(veth0_to_bond) entered disabled state [ 383.713792][T12172] veth0_to_bond: entered allmulticast mode [ 383.738809][T12172] veth0_to_bond: entered promiscuous mode [ 383.814810][T12182] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 383.942551][T12182] nbd0: detected capacity change from 0 to 127 [ 383.980241][ T5868] block nbd0: Receive control failed (result -32) [ 383.982370][ T6190] block nbd0: Send control failed (result -32) [ 384.048108][ T6190] block nbd0: Request send failed, requeueing [ 384.052842][T12172] vlan2: entered allmulticast mode [ 384.059987][T12172] veth1: entered allmulticast mode [ 384.065814][T12172] bridge0: port 3(vlan2) entered blocking state [ 384.076248][T12172] bridge0: port 3(vlan2) entered disabled state [ 384.098272][ T126] block nbd0: Dead connection, failed to find a fallback [ 384.109141][ T126] block nbd0: shutting down sockets [ 384.118263][ T126] blk_print_req_error: 138 callbacks suppressed [ 384.118281][ T126] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.120765][T12172] vlan2: entered promiscuous mode [ 384.125092][ T126] buffer_io_error: 138 callbacks suppressed [ 384.125106][ T126] Buffer I/O error on dev nbd0, logical block 0, async page read [ 384.164407][ T6190] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.174714][ T6190] Buffer I/O error on dev nbd0, logical block 1, async page read [ 384.186193][ T6190] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.195552][ T6190] Buffer I/O error on dev nbd0, logical block 2, async page read [ 384.203723][ T6190] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.213014][ T6190] Buffer I/O error on dev nbd0, logical block 3, async page read [ 384.221558][ T6190] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.230806][ T6190] Buffer I/O error on dev nbd0, logical block 0, async page read [ 384.239452][ T6190] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.261240][ T6190] Buffer I/O error on dev nbd0, logical block 1, async page read [ 384.269218][ T6190] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.292601][ T6190] Buffer I/O error on dev nbd0, logical block 2, async page read [ 384.299365][T12172] veth1: entered promiscuous mode [ 384.300807][ T6190] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.341208][ T6190] Buffer I/O error on dev nbd0, logical block 3, async page read [ 384.359894][ T6190] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.392287][ T6190] Buffer I/O error on dev nbd0, logical block 0, async page read [ 384.415138][ T6190] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.451243][ T6190] Buffer I/O error on dev nbd0, logical block 1, async page read [ 384.467297][ T6190] ldm_validate_partition_table(): Disk read failed. [ 384.503595][ T6190] Dev nbd0: unable to read RDB block 0 [ 384.522851][ T6190] nbd0: unable to read partition table [ 384.556832][ T6190] ldm_validate_partition_table(): Disk read failed. [ 384.593493][ T6190] Dev nbd0: unable to read RDB block 0 [ 384.652707][ T6190] nbd0: unable to read partition table [ 384.690062][T12192] netlink: 'syz.2.1253': attribute type 5 has an invalid length. [ 384.721504][ T6190] ldm_validate_partition_table(): Disk read failed. [ 384.723983][T12195] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 384.730215][ T6190] Dev nbd0: unable to read RDB block 0 [ 384.751857][T12195] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 384.763345][ T6190] nbd0: unable to read partition table [ 384.843982][ T6190] ldm_validate_partition_table(): Disk read failed. [ 384.855971][T12198] lo speed is unknown, defaulting to 1000 [ 384.900529][ T6190] Dev nbd0: unable to read RDB block 0 [ 384.937380][T12195] netlink: 'syz.0.1254': attribute type 37 has an invalid length. [ 384.941812][ T6190] nbd0: unable to read partition table [ 385.310076][T12220] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 385.318670][T12220] __nla_validate_parse: 12 callbacks suppressed [ 385.318688][T12220] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1258'. [ 385.338855][T12220] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1258'. [ 385.434860][T12224] veth1_to_bond: entered allmulticast mode [ 385.478739][T12224] bond_slave_1: entered promiscuous mode [ 385.506065][T12224] bond_slave_1: left promiscuous mode [ 385.514171][T12224] veth1_to_bond: left allmulticast mode [ 386.227812][T12241] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1266'. [ 386.240139][T12241] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1266'. [ 386.251456][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 386.254099][T12241] netlink: 'syz.4.1266': attribute type 5 has an invalid length. [ 386.270739][T12241] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1266'. [ 386.330078][T12245] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1268'. [ 386.506537][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 386.589330][T12253] vxcan0: entered promiscuous mode [ 386.629556][T12241] lo speed is unknown, defaulting to 1000 [ 387.102076][T12270] veth0_to_bond: left allmulticast mode [ 387.129713][T12270] veth0_to_bond: left promiscuous mode [ 387.148796][T12270] bridge0: port 2(veth0_to_bond) entered disabled state [ 387.192185][T12270] veth11: left allmulticast mode [ 387.201261][T12270] veth11: left promiscuous mode [ 387.217989][T12270] bridge0: port 1(veth11) entered disabled state [ 387.236313][T12270] vlan2: left promiscuous mode [ 387.245887][T12270] veth1: left promiscuous mode [ 387.254406][T12270] bridge0: port 3(vlan2) entered disabled state [ 387.308752][T12282] syzkaller0: left promiscuous mode [ 387.319473][T12282] syzkaller0: left allmulticast mode [ 387.403216][T12277] lo speed is unknown, defaulting to 1000 [ 387.492844][T12272] lo speed is unknown, defaulting to 1000 [ 388.287714][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1280'. [ 388.356944][T12277] netlink: 'syz.2.1273': attribute type 6 has an invalid length. [ 388.383875][T12307] lo speed is unknown, defaulting to 1000 [ 388.563672][T12315] lo speed is unknown, defaulting to 1000 [ 389.043018][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1282'. [ 389.798222][T12338] lo speed is unknown, defaulting to 1000 [ 390.314302][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 390.401793][T12350] __nla_validate_parse: 1 callbacks suppressed [ 390.401813][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 390.872472][T12348] lo speed is unknown, defaulting to 1000 [ 391.367969][T12358] tipc: Resetting bearer [ 391.427823][T12358] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 391.656085][T12367] lo speed is unknown, defaulting to 1000 [ 392.106186][T12375] lo speed is unknown, defaulting to 1000 [ 392.665872][T12388] vxcan2: entered promiscuous mode [ 392.739075][T12391] vxcan0: entered promiscuous mode [ 392.943540][T12397] lo speed is unknown, defaulting to 1000 [ 393.096979][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1296'. [ 393.112635][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 393.126699][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1296'. [ 393.196035][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 393.205816][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1296'. [ 393.897310][T12407] tipc: Resetting bearer [ 393.920277][T12404] vxcan0: entered promiscuous mode [ 394.196070][T12424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1303'. [ 394.251902][T12424] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1303'. [ 394.346486][T12424] netlink: 'syz.1.1303': attribute type 5 has an invalid length. [ 394.471744][T12424] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1303'. [ 394.666698][T12431] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 394.778688][T12436] netlink: 'syz.2.1304': attribute type 4 has an invalid length. [ 395.093635][T12432] lo speed is unknown, defaulting to 1000 [ 395.452103][T12438] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1305'. [ 395.475487][T12438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1305'. [ 395.673435][T12451] tipc: Enabling of bearer rejected, failed to enable media [ 395.836731][T12465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1309'. [ 395.858477][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 395.875429][T12465] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1309'. [ 395.896132][T12455] syzkaller0: entered promiscuous mode [ 395.905746][T12455] syzkaller0: entered allmulticast mode [ 395.986829][T12465] bond2: (slave geneve2): Releasing active interface [ 396.227349][T12471] lo speed is unknown, defaulting to 1000 [ 396.253973][T12471] lo speed is unknown, defaulting to 1000 [ 396.260875][T12471] lo speed is unknown, defaulting to 1000 [ 396.363197][T12478] vxcan4: entered promiscuous mode [ 396.580795][T12481] lo speed is unknown, defaulting to 1000 [ 396.813475][T12497] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 396.887739][T12501] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1316'. [ 397.060734][T12491] geneve2: left promiscuous mode [ 397.388955][ T43] lo speed is unknown, defaulting to 1000 [ 397.395805][T12471] infiniband syz0: set down [ 397.400711][T12471] infiniband syz0: added lo [ 397.407591][T12471] syz0: rxe_create_cq: returned err = -12 [ 397.414595][T12471] infiniband syz0: Couldn't create ib_mad CQ [ 397.420822][T12471] infiniband syz0: Couldn't open port 1 [ 397.469891][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 397.483309][T12471] RDS/IB: syz0: added [ 397.488080][T12471] smc: adding ib device syz0 with port count 1 [ 397.496225][T12471] smc: ib device syz0 port 1 has pnetid [ 397.644650][T12488] netlink: 'syz.2.1314': attribute type 6 has an invalid length. [ 397.654648][ T43] lo speed is unknown, defaulting to 1000 [ 397.664041][T12471] lo speed is unknown, defaulting to 1000 [ 397.987381][T12515] lo speed is unknown, defaulting to 1000 [ 398.598589][T12528] tipc: Enabling of bearer rejected, failed to enable media [ 398.610467][T12528] syzkaller0: entered promiscuous mode [ 398.616561][T12528] syzkaller0: entered allmulticast mode [ 398.813222][T12533] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 398.915422][T12533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.065207][T12538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.096117][T12538] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 399.119933][T12538] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 399.170080][T12550] netlink: 'syz.2.1329': attribute type 4 has an invalid length. [ 399.223986][T12552] netlink: 'syz.2.1329': attribute type 4 has an invalid length. [ 399.315243][T12543] veth3: entered promiscuous mode [ 399.373902][T12543] bond3: (slave veth3): Enslaving as an active interface with a down link [ 399.424160][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 399.462084][T12515] lo speed is unknown, defaulting to 1000 [ 400.319488][T12471] lo speed is unknown, defaulting to 1000 [ 400.827941][T12471] lo speed is unknown, defaulting to 1000 [ 401.127045][T12573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'. [ 401.190800][T12471] lo speed is unknown, defaulting to 1000 [ 401.560206][T12579] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 401.565132][T12582] netlink: 'syz.0.1336': attribute type 4 has an invalid length. [ 401.607320][T12471] lo speed is unknown, defaulting to 1000 [ 401.846925][T12588] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 401.860483][T12588] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 401.884079][T12471] lo speed is unknown, defaulting to 1000 [ 402.080188][T12471] lo speed is unknown, defaulting to 1000 [ 402.253537][T12555] lo speed is unknown, defaulting to 1000 [ 402.530923][T12591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.704157][T12590] lo speed is unknown, defaulting to 1000 [ 402.826215][T12590] lo speed is unknown, defaulting to 1000 [ 403.944241][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 404.649047][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1349'. [ 404.692627][T12621] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1349'. [ 404.732553][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1349'. [ 404.820045][T12625] bond3: (slave veth3): Releasing active interface [ 405.276579][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 405.687627][T12638] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 405.898164][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 405.942142][T12646] sctp: [Deprecated]: syz.4.1352 (pid 12646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.942142][T12646] Use struct sctp_sack_info instead [ 405.966370][T12612] lo speed is unknown, defaulting to 1000 [ 406.111679][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 406.127530][T12612] lo speed is unknown, defaulting to 1000 [ 406.605867][T12667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1361'. [ 406.633290][T12667] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1361'. [ 406.643020][T12667] netlink: 'syz.1.1361': attribute type 5 has an invalid length. [ 406.650925][T12667] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1361'. [ 406.863468][T12671] lo speed is unknown, defaulting to 1000 [ 407.100012][T12671] lo speed is unknown, defaulting to 1000 [ 407.162216][T12680] lo speed is unknown, defaulting to 1000 [ 407.562644][T12680] lo speed is unknown, defaulting to 1000 [ 410.750152][T12703] lo speed is unknown, defaulting to 1000 [ 410.792938][T12703] lo speed is unknown, defaulting to 1000 [ 410.802245][T12705] lo speed is unknown, defaulting to 1000 [ 411.069797][T12713] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1376'. [ 411.261558][T12716] lo speed is unknown, defaulting to 1000 [ 411.775938][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 412.086685][T12705] lo speed is unknown, defaulting to 1000 [ 412.514085][T12716] lo speed is unknown, defaulting to 1000 [ 413.031706][T12754] netlink: 'syz.3.1390': attribute type 30 has an invalid length. [ 413.062421][T12754] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 413.091314][T12754] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 413.198275][T12752] lo speed is unknown, defaulting to 1000 [ 413.237758][T12752] lo speed is unknown, defaulting to 1000 [ 413.429619][T12762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1392'. [ 413.438818][T12762] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1392'. [ 413.454128][T12762] netlink: 'syz.2.1392': attribute type 5 has an invalid length. [ 413.521399][T12762] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1392'. [ 413.598732][T12762] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1392'. [ 413.880791][T12772] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1395'. [ 413.928927][T12769] netlink: 'syz.1.1389': attribute type 6 has an invalid length. [ 414.039798][T12771] lo speed is unknown, defaulting to 1000 [ 414.304063][T12771] lo speed is unknown, defaulting to 1000 [ 414.325877][T12772] lo speed is unknown, defaulting to 1000 [ 414.809604][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 414.930026][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 415.001508][T12772] lo speed is unknown, defaulting to 1000 [ 415.879049][T12779] lo speed is unknown, defaulting to 1000 [ 415.916527][T12800] netlink: 'syz.0.1402': attribute type 32 has an invalid length. [ 415.954552][T12779] lo speed is unknown, defaulting to 1000 [ 416.390662][T12811] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1407'. [ 416.717124][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 416.789220][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1409'. [ 417.682542][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 418.075581][T12848] tipc: Enabled bearer , priority 0 [ 418.097188][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 418.113214][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 418.124035][T12848] syzkaller0: entered promiscuous mode [ 418.129811][T12848] syzkaller0: entered allmulticast mode [ 418.144249][T12851] geneve2: entered promiscuous mode [ 418.149640][T12851] geneve2: entered allmulticast mode [ 418.179539][T12848] tipc: Resetting bearer [ 418.193123][ T1165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.220232][ T1165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.235977][T12846] tipc: Resetting bearer [ 418.279835][T12846] tipc: Disabling bearer [ 418.307596][ T1165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.330670][ T1165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.544469][T12859] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.653060][T12859] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.725677][T12867] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1432'. [ 418.742244][T12859] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.812507][T12859] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.974077][ T6017] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.974248][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 419.008255][ T6017] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.033751][T12882] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 419.059163][T12882] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 419.147003][ T1165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.212378][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.528429][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1445'. [ 419.649634][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 420.002727][T12910] lo speed is unknown, defaulting to 1000 [ 420.041660][T12910] lo speed is unknown, defaulting to 1000 [ 420.314241][T12923] vxcan4: entered promiscuous mode [ 420.337240][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1458'. [ 420.353971][T12928] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1458'. [ 420.689219][T12941] netlink: 'syz.1.1463': attribute type 8 has an invalid length. [ 421.192683][T12958] vxcan4: entered promiscuous mode [ 421.648127][T12977] syzkaller0: entered promiscuous mode [ 421.664086][T12977] syzkaller0: entered allmulticast mode [ 421.731548][T12971] lo speed is unknown, defaulting to 1000 [ 421.824595][T12971] lo speed is unknown, defaulting to 1000 [ 422.311949][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 422.665858][T13000] lo speed is unknown, defaulting to 1000 [ 423.285525][T13019] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 423.327798][T13019] __nla_validate_parse: 2 callbacks suppressed [ 423.327818][T13019] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1488'. [ 423.404146][T13019] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 423.435169][T13019] netlink: 'syz.1.1488': attribute type 2 has an invalid length. [ 423.605815][T13000] lo speed is unknown, defaulting to 1000 [ 424.369013][T13045] vxcan4: entered promiscuous mode [ 424.624227][T13053] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1503'. [ 425.651651][T13086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'. [ 425.777839][T13088] vxcan2: entered promiscuous mode [ 425.816489][T13091] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1516'. [ 425.936743][T13095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1518'. [ 425.995710][T13095] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1518'. [ 426.031765][T13095] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1518'. [ 426.100154][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 426.153116][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1520'. [ 426.243630][T13108] batadv1: entered promiscuous mode [ 426.681120][T13124] lo speed is unknown, defaulting to 1000 [ 426.689322][T13124] lo speed is unknown, defaulting to 1000 [ 427.415047][T13142] vxcan0: entered promiscuous mode [ 427.728272][T13150] netem: change failed [ 428.027069][T13159] vxcan0: entered promiscuous mode [ 428.473879][T13172] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1550'. [ 428.514877][T13172] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 428.602031][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 428.687213][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 428.982607][T13196] syzkaller0: entered promiscuous mode [ 429.009895][T13196] syzkaller0: entered allmulticast mode [ 429.128325][T13206] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1563'. [ 429.292621][T13216] netem: change failed [ 429.430708][T13218] lo speed is unknown, defaulting to 1000 [ 429.440026][T13218] lo speed is unknown, defaulting to 1000 [ 430.431885][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 430.518924][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1570'. [ 431.087013][T13258] lo speed is unknown, defaulting to 1000 [ 431.123466][T13258] lo speed is unknown, defaulting to 1000 [ 431.213454][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 431.228838][T13270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1580'. [ 431.568397][T13279] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1584'. [ 431.578133][T13279] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1584'. [ 431.587660][T13279] netlink: 'syz.3.1584': attribute type 5 has an invalid length. [ 431.720546][T13281] lo speed is unknown, defaulting to 1000 [ 431.939045][T13281] lo speed is unknown, defaulting to 1000 [ 434.187168][T13342] __nla_validate_parse: 3 callbacks suppressed [ 434.187192][T13342] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1604'. [ 434.347144][T13345] lo speed is unknown, defaulting to 1000 [ 434.389345][T13345] lo speed is unknown, defaulting to 1000 [ 434.803621][T13357] netem: change failed [ 435.957476][T13385] tipc: Enabled bearer , priority 0 [ 436.014040][T13385] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 436.230248][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 436.885459][T13427] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1636'. [ 436.895283][T13427] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1636'. [ 436.930581][T13427] netlink: 'syz.2.1636': attribute type 5 has an invalid length. [ 436.970901][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 436.971220][T13427] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1636'. [ 437.071235][ T43] tipc: Node number set to 2921961211 [ 437.118093][T13432] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1636'. [ 437.212828][T13427] lo speed is unknown, defaulting to 1000 [ 437.230754][T13427] lo speed is unknown, defaulting to 1000 [ 437.387085][T13451] tipc: Enabling of bearer rejected, already enabled [ 437.787697][T13465] lo speed is unknown, defaulting to 1000 [ 437.962301][T13465] lo speed is unknown, defaulting to 1000 [ 438.095484][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 439.173324][T13496] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1659'. [ 439.197662][T13494] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1659'. [ 439.862980][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 440.531556][T13535] pimreg: tun_chr_ioctl cmd 1074812118 [ 440.540676][T13532] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1674'. [ 440.550867][T13532] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1674'. [ 440.565242][T13532] netlink: 'syz.1.1674': attribute type 5 has an invalid length. [ 440.577329][T13532] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1674'. [ 440.756371][T13543] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1674'. [ 440.757279][T13532] lo speed is unknown, defaulting to 1000 [ 440.843876][T13532] lo speed is unknown, defaulting to 1000 [ 441.062668][T13553] vxcan4: entered promiscuous mode [ 441.347307][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 441.357624][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 441.779190][T13571] tipc: Enabled bearer , priority 0 [ 441.789301][T13570] syzkaller0: entered promiscuous mode [ 441.795260][T13570] syzkaller0: entered allmulticast mode [ 441.829271][T13570] tipc: Resetting bearer [ 441.855643][T13569] tipc: Resetting bearer [ 441.911894][T13569] tipc: Disabling bearer [ 442.746638][T13592] vxcan2: entered promiscuous mode [ 443.335976][T13615] syzkaller1: entered promiscuous mode [ 443.353976][T13615] syzkaller1: entered allmulticast mode [ 444.539974][T13638] tipc: Enabling of bearer rejected, already enabled [ 445.100693][T13655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 445.494871][T13673] tipc: Enabling of bearer rejected, already enabled [ 446.208743][T13695] vxcan4: entered promiscuous mode [ 446.259522][T13699] tipc: Enabled bearer , priority 0 [ 446.270638][T13699] syzkaller0: entered promiscuous mode [ 446.280688][T13699] syzkaller0: entered allmulticast mode [ 446.316551][T13699] tipc: Resetting bearer [ 446.353436][T13698] tipc: Resetting bearer [ 446.398730][T13698] tipc: Disabling bearer [ 446.624561][T13709] tipc: Enabled bearer , priority 0 [ 446.646758][T13709] syzkaller0: entered promiscuous mode [ 446.668145][T13709] syzkaller0: entered allmulticast mode [ 446.767093][T13714] sch_tbf: peakrate 4 is lower than or equals to rate 6 ! [ 446.788776][T13709] tipc: Resetting bearer [ 446.808781][T13706] tipc: Resetting bearer [ 446.847710][T13706] tipc: Disabling bearer [ 447.378190][T13725] lo speed is unknown, defaulting to 1000 [ 447.404969][T13725] lo speed is unknown, defaulting to 1000 [ 447.581824][T13731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1749'. [ 449.379935][T13752] lo speed is unknown, defaulting to 1000 [ 449.402092][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 449.407434][T13752] lo speed is unknown, defaulting to 1000 [ 450.063436][T13772] tipc: Enabled bearer , priority 0 [ 450.086522][T13772] syzkaller0: entered promiscuous mode [ 450.092445][T13772] syzkaller0: entered allmulticast mode [ 450.160289][T13772] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 450.200288][T13772] tipc: Resetting bearer [ 450.223001][T13771] tipc: Resetting bearer [ 450.250268][T13771] tipc: Disabling bearer [ 451.354990][T13804] syzkaller1: entered promiscuous mode [ 451.360562][T13804] syzkaller1: entered allmulticast mode [ 451.500744][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 451.580336][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1778'. [ 452.025610][T13827] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1783'. [ 452.036455][T13827] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1783'. [ 452.046178][T13827] netlink: 'syz.4.1783': attribute type 5 has an invalid length. [ 452.054600][T13827] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1783'. [ 452.107052][T13827] lo speed is unknown, defaulting to 1000 [ 452.115925][T13827] lo speed is unknown, defaulting to 1000 [ 452.140326][T13832] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1783'. [ 452.454457][T13843] vxcan0: entered promiscuous mode [ 453.093054][T13865] vxcan2: entered promiscuous mode [ 453.397733][T13877] lo speed is unknown, defaulting to 1000 [ 453.432582][T13877] lo speed is unknown, defaulting to 1000 [ 454.344040][T13916] tipc: Enabled bearer , priority 0 [ 454.365422][T13903] syzkaller0: entered promiscuous mode [ 454.372551][T13903] syzkaller0: entered allmulticast mode [ 454.448617][T13903] tipc: Resetting bearer [ 454.492365][T13903] tipc: Resetting bearer [ 454.543394][T13903] tipc: Disabling bearer [ 454.957168][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 455.082332][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1820'. [ 455.158908][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 455.390232][T13939] pim6reg1: entered promiscuous mode [ 455.419507][T13939] pim6reg1: entered allmulticast mode [ 455.627519][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 455.908319][T13956] syzkaller1: entered promiscuous mode [ 455.924715][T13956] syzkaller1: entered allmulticast mode [ 455.945120][T13958] tipc: Enabled bearer , priority 0 [ 455.962206][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 456.028388][T13958] syzkaller0: entered promiscuous mode [ 456.035677][T13958] syzkaller0: entered allmulticast mode [ 456.073028][T13958] tipc: Resetting bearer [ 456.087986][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1834'. [ 456.137173][T13958] tipc: Resetting bearer [ 456.238649][T13958] tipc: Disabling bearer [ 456.738260][T13995] syzkaller1: entered promiscuous mode [ 456.781388][T13995] syzkaller1: entered allmulticast mode [ 457.016604][T14004] netem: change failed [ 457.272648][T14011] tipc: Enabled bearer , priority 0 [ 457.291899][T14011] syzkaller0: entered promiscuous mode [ 457.310813][T14011] syzkaller0: entered allmulticast mode [ 457.510768][T14014] tipc: Resetting bearer [ 457.595070][T14011] tipc: Resetting bearer [ 457.625877][T14011] tipc: Disabling bearer [ 457.921701][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1855'. [ 458.165393][T14032] lo speed is unknown, defaulting to 1000 [ 458.211000][T14035] vxcan4: entered promiscuous mode [ 458.372774][T14032] lo speed is unknown, defaulting to 1000 [ 459.607807][T14067] vxcan4: entered promiscuous mode [ 460.211737][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 460.249004][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1872'. [ 460.423300][T14086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1873'. [ 460.451477][T14086] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1873'. [ 460.452134][T14082] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1874'. [ 460.520654][T14086] bond0: (slave wlan1): Releasing backup interface [ 460.805821][T14100] netem: change failed [ 460.980976][T14103] lo speed is unknown, defaulting to 1000 [ 460.989614][T14103] lo speed is unknown, defaulting to 1000 [ 462.036799][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 462.053255][T14124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1883'. [ 462.981041][T14154] tipc: Enabled bearer , priority 0 [ 463.010816][T14154] syzkaller0: entered promiscuous mode [ 463.030876][T14154] syzkaller0: entered allmulticast mode [ 463.078009][T14154] tipc: Resetting bearer [ 463.096494][T14153] tipc: Resetting bearer [ 463.164478][T14153] tipc: Disabling bearer [ 463.225247][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 463.250833][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1895'. [ 463.324949][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 464.144676][T14201] netem: change failed [ 465.054032][T14234] vxcan4: entered promiscuous mode [ 465.191482][ T43] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec [ 465.493843][T14253] __nla_validate_parse: 6 callbacks suppressed [ 465.493864][T14253] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1928'. [ 465.507072][T14249] lo speed is unknown, defaulting to 1000 [ 465.587249][T14249] lo speed is unknown, defaulting to 1000 [ 465.722767][T14256] lo speed is unknown, defaulting to 1000 [ 466.040900][T14271] netlink: 'syz.3.1937': attribute type 29 has an invalid length. [ 466.063387][T14271] netlink: 'syz.3.1937': attribute type 29 has an invalid length. [ 466.092261][T14271] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1937'. [ 466.107545][T14256] lo speed is unknown, defaulting to 1000 [ 466.664270][T14290] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1941'. [ 467.387102][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 468.097447][T14326] vxcan4: entered promiscuous mode [ 468.398702][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 468.463746][T14349] vxcan0: entered promiscuous mode [ 468.529358][T14350] lo speed is unknown, defaulting to 1000 [ 468.539777][T14350] lo speed is unknown, defaulting to 1000 [ 468.697262][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 469.533378][T14378] lo speed is unknown, defaulting to 1000 [ 469.570362][T14379] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1969'. [ 469.632567][T14378] lo speed is unknown, defaulting to 1000 [ 469.855001][T14387] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1972'. [ 469.878018][T14383] lo speed is unknown, defaulting to 1000 [ 469.928302][T14391] lo speed is unknown, defaulting to 1000 [ 470.202285][ T6026] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 470.338869][T14383] lo speed is unknown, defaulting to 1000 [ 470.668505][T14414] vxcan0: entered promiscuous mode [ 470.955976][T14391] lo speed is unknown, defaulting to 1000 [ 471.090013][T14424] netlink: 'syz.2.1985': attribute type 22 has an invalid length. [ 471.100425][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 471.139099][T14424] netlink: 'syz.2.1985': attribute type 22 has an invalid length. [ 471.151738][ T56] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.153223][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 471.170484][ T56] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.244283][ T56] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.262084][ T56] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.622805][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1991'. [ 471.639932][T14439] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1991'. [ 471.686693][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1991'. [ 471.705466][T14437] tipc: Enabled bearer , priority 0 [ 471.829548][T14442] vxcan0: entered promiscuous mode [ 471.867887][T14437] syzkaller0: entered promiscuous mode [ 471.884105][T14437] syzkaller0: entered allmulticast mode [ 471.998632][T14448] sch_tbf: peakrate 4 is lower than or equals to rate 6 ! [ 472.031759][T14437] tipc: Resetting bearer [ 472.051736][T14441] tipc: Resetting bearer [ 472.116204][T14441] tipc: Disabling bearer [ 472.303728][T14455] batadv1: entered promiscuous mode [ 472.724512][T14470] lo speed is unknown, defaulting to 1000 [ 472.753894][T14470] lo speed is unknown, defaulting to 1000 [ 473.023515][T14479] veth0: entered promiscuous mode [ 473.060172][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 473.080724][T14478] vxcan0: entered promiscuous mode [ 473.123349][T14479] veth0 (unregistering): left promiscuous mode [ 474.346194][T14522] syzkaller1: entered promiscuous mode [ 474.355484][T14522] syzkaller1: entered allmulticast mode [ 474.978938][T14555] netem: change failed [ 475.157294][T14564] lo speed is unknown, defaulting to 1000 [ 475.166865][T14564] lo speed is unknown, defaulting to 1000 [ 475.458429][T14569] vxcan4: entered promiscuous mode [ 475.664952][T14575] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2035'. [ 476.164916][T14590] netlink: 'syz.1.2037': attribute type 13 has an invalid length. [ 476.194928][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 476.269332][ T6026] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.269437][T14590] netlink: 'syz.1.2037': attribute type 13 has an invalid length. [ 476.287225][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 476.297084][ T6026] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.330684][ T6026] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.350516][ T6026] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.502195][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 476.538829][T14595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2042'. [ 476.722380][T14601] batadv1: entered promiscuous mode [ 476.908397][T14607] vxcan4: entered promiscuous mode [ 476.922473][T14609] lo speed is unknown, defaulting to 1000 [ 476.929771][T14609] lo speed is unknown, defaulting to 1000 [ 477.129663][T14617] netem: change failed [ 477.718270][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2049'. [ 479.123082][T14668] lo speed is unknown, defaulting to 1000 [ 479.130641][T14668] lo speed is unknown, defaulting to 1000 [ 479.420038][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2064'. [ 479.452808][T14673] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2064'. [ 479.512561][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2064'. [ 479.658395][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 479.735174][T14683] lo speed is unknown, defaulting to 1000 [ 479.800154][T14683] lo speed is unknown, defaulting to 1000 [ 479.943387][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2070'. [ 480.111744][T14692] netlink: 'syz.2.2071': attribute type 21 has an invalid length. [ 480.120232][T14692] netlink: 'syz.2.2071': attribute type 21 has an invalid length. [ 480.844655][T14706] lo speed is unknown, defaulting to 1000 [ 480.868324][T14706] lo speed is unknown, defaulting to 1000 [ 480.872936][T14709] lo speed is unknown, defaulting to 1000 [ 481.176653][T14709] lo speed is unknown, defaulting to 1000 [ 481.251117][T14719] lo speed is unknown, defaulting to 1000 [ 481.363591][T14722] __nla_validate_parse: 3 callbacks suppressed [ 481.363614][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 481.654365][T14727] batadv1: entered promiscuous mode [ 481.707413][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 482.126802][T14719] lo speed is unknown, defaulting to 1000 [ 482.658096][T14753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2092'. [ 482.669719][T14753] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2092'. [ 482.684305][T14753] netlink: 'syz.4.2092': attribute type 5 has an invalid length. [ 482.693054][T14753] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2092'. [ 482.826323][T14755] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2092'. [ 483.182425][T14753] lo speed is unknown, defaulting to 1000 [ 483.227408][T14759] vxcan0: entered promiscuous mode [ 483.254308][T14753] lo speed is unknown, defaulting to 1000 [ 483.597703][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 483.953908][T14771] lo speed is unknown, defaulting to 1000 [ 484.003356][T14771] lo speed is unknown, defaulting to 1000 [ 484.296024][T14782] batadv1: entered promiscuous mode [ 484.542404][T14793] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2104'. [ 484.992582][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2110'. [ 485.016917][T14808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2110'. [ 485.410928][T14820] vxcan0: entered promiscuous mode [ 486.339062][T14847] netem: incorrect gi model size [ 486.373221][T14847] netem: change failed [ 486.403709][T14851] __nla_validate_parse: 2 callbacks suppressed [ 486.403730][T14851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 486.436186][T14851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2127'. [ 486.472066][T14851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 486.607846][T14859] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2128'. [ 486.958071][T14877] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2135'. [ 487.569062][T14897] netlink: 'syz.2.2140': attribute type 4 has an invalid length. [ 487.584695][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 488.001587][T14913] batadv1: entered promiscuous mode [ 488.136475][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 488.265876][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2147'. [ 488.547646][T14931] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2153'. [ 488.571328][T14931] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2153'. [ 488.608146][T14931] netlink: 'syz.0.2153': attribute type 5 has an invalid length. [ 488.695241][T14931] lo speed is unknown, defaulting to 1000 [ 488.714059][T14931] lo speed is unknown, defaulting to 1000 [ 491.504124][T15037] __nla_validate_parse: 12 callbacks suppressed [ 491.504148][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 491.646842][T15044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2190'. [ 491.666194][T15044] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2190'. [ 492.253879][T15064] lo speed is unknown, defaulting to 1000 [ 492.277576][T15064] lo speed is unknown, defaulting to 1000 [ 492.302214][T15069] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2200'. [ 492.337710][T15069] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2200'. [ 492.372442][T15069] netlink: 'syz.2.2200': attribute type 5 has an invalid length. [ 492.392321][T15069] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2200'. [ 492.513223][T15077] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2200'. [ 492.554584][T15069] lo speed is unknown, defaulting to 1000 [ 493.054172][T15069] lo speed is unknown, defaulting to 1000 [ 493.196857][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 494.535823][T15103] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 495.179076][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 495.614058][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2221'. [ 495.712110][T15143] lo speed is unknown, defaulting to 1000 [ 495.720176][T15143] lo speed is unknown, defaulting to 1000 [ 495.893601][ T6031] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.912227][ T6031] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.946213][ T6031] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.987775][ T6031] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.075194][T15184] __nla_validate_parse: 5 callbacks suppressed [ 497.075215][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 497.159493][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 497.229361][ T6031] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.266473][ T6031] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.285766][ T6031] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.325419][ T6031] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.489242][T15193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2240'. [ 497.513722][T15193] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2240'. [ 497.536744][T15193] netlink: 'syz.4.2240': attribute type 5 has an invalid length. [ 497.563678][T15193] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2240'. [ 497.695879][T15197] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2240'. [ 497.732982][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 497.747848][T15193] lo speed is unknown, defaulting to 1000 [ 497.806273][T15193] lo speed is unknown, defaulting to 1000 [ 498.195301][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2245'. [ 498.688618][T15219] lo speed is unknown, defaulting to 1000 [ 498.709887][T15219] lo speed is unknown, defaulting to 1000 [ 498.717596][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 498.849427][T15229] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 499.170277][T15237] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2254'. [ 499.833763][T15248] syzkaller0: entered promiscuous mode [ 499.843578][T15248] syzkaller0: entered allmulticast mode [ 499.867766][T15248] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 500.746335][T15262] lo speed is unknown, defaulting to 1000 [ 500.763465][T15262] lo speed is unknown, defaulting to 1000 [ 500.938348][T15284] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.029774][T15284] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.032752][T15286] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 4294967272. macoff=96 [ 501.208621][T15284] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.318860][T15284] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.647863][ T6024] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.945581][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.017648][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.063022][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.130183][T15307] lo speed is unknown, defaulting to 1000 [ 502.190820][T15307] lo speed is unknown, defaulting to 1000 [ 502.369722][T15315] __nla_validate_parse: 3 callbacks suppressed [ 502.369742][T15315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2282'. [ 502.546693][T15320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'. [ 502.587078][T15320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2284'. [ 502.599919][T15320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'. [ 502.859374][T15327] lo speed is unknown, defaulting to 1000 [ 502.954453][T15327] lo speed is unknown, defaulting to 1000 [ 503.006385][T15332] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2287'. [ 503.229743][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 503.909169][T15352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2293'. [ 504.127956][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 504.259024][T15358] syzkaller1: entered promiscuous mode [ 504.275608][T15358] syzkaller1: entered allmulticast mode [ 504.678255][T15365] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2297'. [ 504.692537][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 505.724169][T15409] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 505.756496][T15408] lo speed is unknown, defaulting to 1000 [ 505.786308][T15408] lo speed is unknown, defaulting to 1000 [ 506.279522][T15421] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.289733][T15421] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.400263][T15421] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.421240][T15421] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.670759][T15421] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.685496][T15421] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.889208][T15424] lo speed is unknown, defaulting to 1000 [ 506.929257][T15424] lo speed is unknown, defaulting to 1000 [ 506.966937][T15421] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.980661][T15421] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.185083][ T56] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.193896][ T56] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.228062][ T56] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.247278][ T56] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.291833][ T56] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.314297][ T56] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.346346][ T56] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.371336][ T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.558431][T15464] syzkaller1: entered promiscuous mode [ 508.564729][T15464] syzkaller1: entered allmulticast mode [ 508.596418][T15467] syzkaller1: entered promiscuous mode [ 508.603652][T15467] syzkaller1: entered allmulticast mode [ 508.690909][T15459] __nla_validate_parse: 4 callbacks suppressed [ 508.690931][T15459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2325'. [ 508.949416][T15475] syzkaller1: entered promiscuous mode [ 508.975681][T15475] syzkaller1: entered allmulticast mode [ 508.995871][T15477] only policy match revision 0 supported [ 508.995896][T15477] unable to load match [ 509.283165][T15489] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2337'. [ 509.301354][T15489] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2337'. [ 509.320388][T15489] netlink: 'syz.2.2337': attribute type 5 has an invalid length. [ 509.350165][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2338'. [ 509.371009][T15489] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2337'. [ 509.390563][T15491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2338'. [ 509.420570][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2338'. [ 509.490620][T15492] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2337'. [ 509.589412][T15489] lo speed is unknown, defaulting to 1000 [ 509.635133][T15489] lo speed is unknown, defaulting to 1000 [ 509.802767][T15502] vxcan0: entered promiscuous mode [ 510.039196][T15507] lo speed is unknown, defaulting to 1000 [ 510.063273][T15510] vxcan0: entered promiscuous mode [ 510.317355][T15517] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.340649][T15517] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.386987][T15507] lo speed is unknown, defaulting to 1000 [ 510.447079][T15517] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.491427][T15517] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.597889][T15517] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.611154][T15517] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.847827][T15517] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.871017][T15517] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.023135][ T6031] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.051154][ T6031] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.087585][ T6031] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.107896][ T6031] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.306083][ T6031] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.333210][ T6031] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.456836][ T6031] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.467918][ T6031] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.495807][T15546] vxcan0: entered promiscuous mode [ 512.057388][T15555] vxcan0: entered promiscuous mode [ 512.218349][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 512.344581][T15565] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2360'. [ 512.863175][T15574] netlink: 'syz.3.2364': attribute type 5 has an invalid length. [ 513.048346][T15576] lo speed is unknown, defaulting to 1000 [ 513.089026][T15576] lo speed is unknown, defaulting to 1000 [ 513.838342][T15591] vxcan0: entered promiscuous mode [ 514.785955][T15613] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.801828][T15613] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.007603][T15613] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.046042][T15613] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.099702][T15622] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.136989][T15622] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.237523][T15613] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.281175][T15613] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.365130][T15622] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.389857][T15622] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.466886][T15613] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.492699][T15613] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.564228][T15622] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.591439][T15622] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.783979][T15622] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.833882][T15622] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.975531][T15637] batadv1: entered promiscuous mode [ 516.129906][ T6024] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.162723][ T6024] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.242183][ T6024] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.259305][ T6024] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.316863][ T6024] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.331259][ T6024] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.387168][ T6017] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.403381][ T6017] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.575362][T15654] __nla_validate_parse: 4 callbacks suppressed [ 516.575383][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 516.619014][T15656] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2389'. [ 516.644377][T15654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2390'. [ 516.664546][T15656] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2389'. [ 516.728948][T15656] netlink: 'syz.1.2389': attribute type 5 has an invalid length. [ 516.796970][T15656] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2389'. [ 516.808277][T15661] vxcan4: entered promiscuous mode [ 516.845654][T15656] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2389'. [ 516.932318][T15659] lo speed is unknown, defaulting to 1000 [ 516.963628][T15659] lo speed is unknown, defaulting to 1000 [ 517.651942][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 517.908227][T15683] lo speed is unknown, defaulting to 1000 [ 517.935206][T15683] lo speed is unknown, defaulting to 1000 [ 518.324311][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 518.579757][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2402'. [ 518.670519][T15701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2402'. [ 518.779240][T15704] netlink: 'syz.2.2403': attribute type 7 has an invalid length. [ 519.540352][T15724] lo speed is unknown, defaulting to 1000 [ 519.554039][T15724] lo speed is unknown, defaulting to 1000 [ 520.581812][T15751] lo speed is unknown, defaulting to 1000 [ 520.599036][T15751] lo speed is unknown, defaulting to 1000 [ 521.192580][T15753] lo speed is unknown, defaulting to 1000 [ 521.282735][T15753] lo speed is unknown, defaulting to 1000 [ 521.335095][T15764] lo speed is unknown, defaulting to 1000 [ 521.981523][T15764] lo speed is unknown, defaulting to 1000 [ 522.599129][T15787] lo speed is unknown, defaulting to 1000 [ 524.553828][T15774] lo speed is unknown, defaulting to 1000 [ 524.590446][T15774] lo speed is unknown, defaulting to 1000 [ 524.736944][T15793] vxcan0: entered promiscuous mode [ 524.960911][T15801] __nla_validate_parse: 6 callbacks suppressed [ 524.960933][T15801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2430'. [ 524.986574][T15801] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2430'. [ 525.019007][T15787] lo speed is unknown, defaulting to 1000 [ 525.524433][T15814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.531841][T15814] IPv6: NLM_F_CREATE should be set when creating new route [ 525.539117][T15814] IPv6: NLM_F_CREATE should be set when creating new route [ 525.596086][T15814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.903831][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 525.919876][T15818] lo speed is unknown, defaulting to 1000 [ 525.996683][T15818] lo speed is unknown, defaulting to 1000 [ 526.589492][T15828] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.609969][T15828] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.762670][T15828] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.772814][T15828] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.041429][T15828] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.057096][T15828] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.145838][T15828] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.171584][T15828] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.466917][ T6026] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.485809][ T6026] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.553881][ T6017] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.571804][ T6017] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.584818][ T6017] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.594409][ T6017] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.651563][ T6026] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.670075][ T6026] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.721382][T15838] lo speed is unknown, defaulting to 1000 [ 527.735287][T15838] lo speed is unknown, defaulting to 1000 [ 527.821580][T15840] vxcan0: entered promiscuous mode [ 528.839975][T15878] tipc: Failed to remove unknown binding: 66,1,1/2886997007:49242765/49242767 [ 528.853891][T15878] tipc: Failed to remove unknown binding: 66,1,1/2886997007:49242765/49242767 [ 529.065808][T15885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2455'. [ 529.148060][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 529.280993][T15888] vxcan0: entered promiscuous mode [ 529.634476][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2462'. [ 529.708886][T15903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2462'. [ 530.057654][T15914] lo speed is unknown, defaulting to 1000 [ 530.076931][T15914] lo speed is unknown, defaulting to 1000 [ 530.136886][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2468'. [ 530.341600][T15926] vxcan0: entered promiscuous mode [ 530.865615][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'. [ 530.998998][T15946] vlan3: entered promiscuous mode [ 531.014034][T15946] syz_tun: entered promiscuous mode [ 531.784600][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 532.070980][T15989] vxcan0: entered promiscuous mode [ 532.321907][T15999] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2490'. [ 532.348037][T15996] lo speed is unknown, defaulting to 1000 [ 532.399063][T15996] lo speed is unknown, defaulting to 1000 [ 532.475856][T15999] lo speed is unknown, defaulting to 1000 [ 532.956604][T15999] lo speed is unknown, defaulting to 1000 [ 533.875899][T16036] vxcan4: entered promiscuous mode [ 534.164388][T16043] vxcan0: entered promiscuous mode [ 534.247791][T16046] syzkaller0: left promiscuous mode [ 534.261163][T16046] syzkaller0: left allmulticast mode [ 534.283897][T16046] tipc: Enabling of bearer rejected, already enabled [ 534.584747][T16059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2509'. [ 534.597690][T16059] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2509'. [ 534.616312][T16059] netlink: 'syz.3.2509': attribute type 5 has an invalid length. [ 534.625533][T16059] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2509'. [ 534.768783][T16062] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2509'. [ 534.924495][T16059] lo speed is unknown, defaulting to 1000 [ 534.950637][T16059] lo speed is unknown, defaulting to 1000 [ 534.953040][T16066] lo speed is unknown, defaulting to 1000 [ 534.957565][T16067] pim6reg1: entered promiscuous mode [ 534.988276][T16067] pim6reg1: entered allmulticast mode [ 535.047680][T16078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.055093][T16078] IPv6: NLM_F_CREATE should be set when creating new route [ 535.266485][T16066] lo speed is unknown, defaulting to 1000 [ 535.478155][T16088] lo speed is unknown, defaulting to 1000 [ 535.936601][T16085] lo speed is unknown, defaulting to 1000 [ 536.158249][T16088] lo speed is unknown, defaulting to 1000 [ 536.548619][T16104] vxcan0: entered promiscuous mode [ 536.586080][T16085] lo speed is unknown, defaulting to 1000 [ 537.086292][T16111] tipc: Enabled bearer , priority 0 [ 537.101645][T16110] tipc: Resetting bearer [ 538.117421][ T8985] tipc: Node number set to 3455088149 [ 539.272966][T16110] tipc: Disabling bearer [ 539.435387][T16119] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2522'. [ 539.544887][T16117] lo speed is unknown, defaulting to 1000 [ 539.564421][T16117] lo speed is unknown, defaulting to 1000 [ 539.594336][T16119] lo speed is unknown, defaulting to 1000 [ 539.808728][T16131] vxcan0: entered promiscuous mode [ 539.847031][T16119] lo speed is unknown, defaulting to 1000 [ 540.014110][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 540.471893][T16140] vxcan4: entered promiscuous mode [ 540.789352][T16147] netlink: 'syz.4.2532': attribute type 7 has an invalid length. [ 540.818253][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'. [ 541.079418][T16146] bridge6: port 1(bond5) entered blocking state [ 541.098683][T16146] bridge6: port 1(bond5) entered disabled state [ 541.116145][T16146] bond5: entered allmulticast mode [ 541.397574][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2533'. [ 541.927836][T16157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2535'. [ 541.937147][T16157] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2535'. [ 541.951411][T16157] netlink: 'syz.1.2535': attribute type 5 has an invalid length. [ 541.984575][T16157] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2535'. [ 542.107373][T16165] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2535'. [ 542.122137][T16157] lo speed is unknown, defaulting to 1000 [ 542.211224][T16157] lo speed is unknown, defaulting to 1000 [ 542.408895][T16170] lo speed is unknown, defaulting to 1000 [ 542.516658][T16170] lo speed is unknown, defaulting to 1000 [ 543.112536][T16183] vxcan0: entered promiscuous mode [ 544.132823][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 544.196137][T16205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2546'. [ 545.211394][T16224] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 545.402284][T16231] lo speed is unknown, defaulting to 1000 [ 545.410033][T16231] lo speed is unknown, defaulting to 1000 [ 545.754921][T16242] vxcan4: entered promiscuous mode [ 545.763959][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'. [ 546.684528][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2569'. [ 546.694380][T16275] lo speed is unknown, defaulting to 1000 [ 546.702803][T16275] lo speed is unknown, defaulting to 1000 [ 546.732550][T16274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2569'. [ 546.838417][T16279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2571'. [ 546.875602][T16279] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2571'. [ 546.927337][T16279] netlink: 'syz.0.2571': attribute type 5 has an invalid length. [ 546.971151][T16279] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2571'. [ 547.056419][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 547.082313][T16279] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2571'. [ 547.461228][T16285] lo speed is unknown, defaulting to 1000 [ 548.012949][T16300] vxcan4: entered promiscuous mode [ 548.197885][T16285] lo speed is unknown, defaulting to 1000 [ 548.257288][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2583'. [ 548.380790][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 548.429226][T16315] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.447729][T16315] bond6: (slave bond7): Enslaving as an active interface with an up link [ 548.570152][T16312] bond6 (unregistering): (slave bond7): Releasing backup interface [ 548.599153][T16312] bond6 (unregistering): Released all slaves [ 548.862994][T16317] lo speed is unknown, defaulting to 1000 [ 548.872369][T16317] lo speed is unknown, defaulting to 1000 [ 550.137011][T16339] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.210595][T16339] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.295685][T16339] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.409620][T16339] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.493831][T16346] vxcan4: entered promiscuous mode [ 550.821774][T16352] __nla_validate_parse: 2 callbacks suppressed [ 550.821796][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2595'. [ 550.840641][T16355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2597'. [ 550.850437][T16355] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2597'. [ 550.865568][ T6024] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.999986][ T6017] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.017412][ T6017] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.043839][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 551.083061][ T6024] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.106952][T16363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'. [ 551.195729][T16367] netlink: 'syz.0.2599': attribute type 10 has an invalid length. [ 551.290590][T16371] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2601'. [ 551.411609][T16376] syz_tun: entered allmulticast mode [ 551.438505][T16374] dvmrp8: entered allmulticast mode [ 551.454554][T16374] syz_tun: left allmulticast mode [ 551.459918][T16374] dvmrp8: left allmulticast mode [ 551.520124][T16378] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2603'. [ 551.534038][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 551.585769][T16380] lo speed is unknown, defaulting to 1000 [ 551.605362][T16380] lo speed is unknown, defaulting to 1000 [ 551.877735][T16390] vxcan0: entered promiscuous mode [ 552.685973][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 552.937018][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 553.749098][T16435] lo speed is unknown, defaulting to 1000 [ 553.758517][T16435] lo speed is unknown, defaulting to 1000 [ 554.023728][T16441] netlink: 'syz.2.2622': attribute type 5 has an invalid length. [ 554.150094][T16445] lo speed is unknown, defaulting to 1000 [ 554.626579][T16445] lo speed is unknown, defaulting to 1000 [ 554.862584][T16458] syzkaller1: entered promiscuous mode [ 554.868311][T16458] syzkaller1: entered allmulticast mode [ 556.277674][T16480] vxcan4: entered promiscuous mode [ 556.388147][T16482] lo speed is unknown, defaulting to 1000 [ 556.414494][T16482] lo speed is unknown, defaulting to 1000 [ 556.497606][T16486] __nla_validate_parse: 7 callbacks suppressed [ 556.497627][T16486] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2631'. [ 556.567744][T16491] syzkaller1: entered promiscuous mode [ 556.590346][T16491] syzkaller1: entered allmulticast mode [ 556.900919][T16495] netem: change failed [ 556.918563][T16486] lo speed is unknown, defaulting to 1000 [ 556.958102][T16486] lo speed is unknown, defaulting to 1000 [ 557.169981][T16510] lo speed is unknown, defaulting to 1000 [ 557.187190][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 557.251696][T16515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 557.275349][T16515] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2639'. [ 557.289300][T16511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2638'. [ 557.467760][T16515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 557.506123][T16518] bond5: left allmulticast mode [ 557.531160][T16518] bridge6: port 1(bond5) entered disabled state [ 557.755499][T16510] lo speed is unknown, defaulting to 1000 [ 558.013680][T16528] vxcan4: entered promiscuous mode [ 558.516932][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 558.899570][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'. [ 558.958869][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'. [ 559.275691][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2647'. [ 559.618582][T16555] lo speed is unknown, defaulting to 1000 [ 559.622246][T16556] netem: change failed [ 559.784771][T16555] lo speed is unknown, defaulting to 1000 [ 560.672245][T16572] lo speed is unknown, defaulting to 1000 [ 560.715419][T16572] lo speed is unknown, defaulting to 1000 [ 561.446348][T16587] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.524647][T16587] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.704581][T16587] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.727070][T16592] lo speed is unknown, defaulting to 1000 [ 561.735484][T16592] lo speed is unknown, defaulting to 1000 [ 561.790913][T16587] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.887715][ T6017] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.925522][ T6017] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.965323][ T6017] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.000522][ T6017] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.417413][T16620] __nla_validate_parse: 4 callbacks suppressed [ 563.417432][T16620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2668'. [ 563.917581][ T6024] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.938380][ T6024] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.967256][ T6024] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.985533][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2672'. [ 563.990429][ T6024] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.007781][T16631] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2672'. [ 564.028412][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.039569][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.103921][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2672'. [ 564.156820][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.176586][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.425427][T16645] lo speed is unknown, defaulting to 1000 [ 564.438540][T16645] lo speed is unknown, defaulting to 1000 [ 564.486752][T16647] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2675'. [ 564.521211][T16647] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2675'. [ 564.544905][T16647] netlink: 'syz.2.2675': attribute type 5 has an invalid length. [ 564.579683][T16647] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2675'. [ 564.703445][T16654] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2675'. [ 564.809511][T16647] lo speed is unknown, defaulting to 1000 [ 565.337917][T16647] lo speed is unknown, defaulting to 1000 [ 565.510772][T16663] vxcan0: entered promiscuous mode [ 565.918249][T16671] lo speed is unknown, defaulting to 1000 [ 566.109796][T16671] lo speed is unknown, defaulting to 1000 [ 566.602604][T16688] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.627752][T16688] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.746162][T16688] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.756809][T16688] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.880323][T16688] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.890698][T16688] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.013482][T16688] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.029543][T16688] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.051748][T16692] lo speed is unknown, defaulting to 1000 [ 567.058991][T16692] lo speed is unknown, defaulting to 1000 [ 567.121533][ T6017] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.139074][ T6017] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.162547][ T6024] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.174272][ T6024] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.200017][ T6024] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.223106][ T6024] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.281420][ T6024] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.307925][ T6024] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.804469][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'. [ 567.889999][T16706] lo speed is unknown, defaulting to 1000 [ 567.930834][T16706] lo speed is unknown, defaulting to 1000 [ 568.503009][T16721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 568.521449][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 568.534415][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 568.657932][T16719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2694'. [ 568.967287][T16740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2698'. [ 568.979085][T16740] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2698'. [ 569.004993][T16740] netlink: 'syz.2.2698': attribute type 5 has an invalid length. [ 569.054476][T16740] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2698'. [ 569.153552][T16744] lo speed is unknown, defaulting to 1000 [ 569.161872][T16744] lo speed is unknown, defaulting to 1000 [ 569.249746][T16749] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2698'. [ 569.413905][T16740] lo speed is unknown, defaulting to 1000 [ 569.473546][T16740] lo speed is unknown, defaulting to 1000 [ 569.961970][T16761] vxcan0: entered promiscuous mode [ 570.373250][T16769] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2705'. [ 570.382592][T16769] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2705'. [ 570.392311][T16769] netlink: 'syz.4.2705': attribute type 5 has an invalid length. [ 570.638419][T16771] lo speed is unknown, defaulting to 1000 [ 570.646757][T16771] lo speed is unknown, defaulting to 1000 [ 571.284422][T16785] vlan3: entered promiscuous mode [ 571.308076][T16785] syz_tun: entered promiscuous mode [ 571.694056][T16797] lo speed is unknown, defaulting to 1000 [ 571.726138][T16797] lo speed is unknown, defaulting to 1000 [ 572.258874][T16814] tipc: Enabled bearer , priority 0 [ 572.274061][T16814] syzkaller0: entered promiscuous mode [ 572.305983][T16814] syzkaller0: entered allmulticast mode [ 572.377519][T16814] tipc: Resetting bearer [ 572.421655][T16815] lo speed is unknown, defaulting to 1000 [ 572.486731][T16813] tipc: Resetting bearer [ 572.515673][T16813] tipc: Disabling bearer [ 572.598447][T16815] lo speed is unknown, defaulting to 1000 [ 574.242162][T16839] __nla_validate_parse: 10 callbacks suppressed [ 574.242186][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 574.318027][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2725'. [ 574.327564][T16845] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2725'. [ 574.373236][T16839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2723'. [ 574.382581][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2725'. [ 574.757023][T16857] block nbd3: NBD_DISCONNECT [ 574.934716][T16863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2730'. [ 574.948582][T16863] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2730'. [ 574.968967][T16863] netlink: 'syz.3.2730': attribute type 5 has an invalid length. [ 574.999675][T16863] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2730'. [ 575.051695][T16860] lo speed is unknown, defaulting to 1000 [ 575.059985][T16860] lo speed is unknown, defaulting to 1000 [ 575.182768][T16867] netlink: 'syz.2.2731': attribute type 12 has an invalid length. [ 575.228682][T16863] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2730'. [ 575.266726][T16866] lo speed is unknown, defaulting to 1000 [ 575.379243][T16866] lo speed is unknown, defaulting to 1000 [ 575.388840][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 575.942146][T16884] lo speed is unknown, defaulting to 1000 [ 575.985972][T16888] vxcan0: entered promiscuous mode [ 576.218521][T16884] lo speed is unknown, defaulting to 1000 [ 577.049899][T16913] lo speed is unknown, defaulting to 1000 [ 577.058212][T16913] lo speed is unknown, defaulting to 1000 [ 578.707289][T16935] lo speed is unknown, defaulting to 1000 [ 578.762317][T16935] lo speed is unknown, defaulting to 1000 [ 579.057171][T16939] lo speed is unknown, defaulting to 1000 [ 579.110412][T16941] lo speed is unknown, defaulting to 1000 [ 579.615660][T16953] __nla_validate_parse: 4 callbacks suppressed [ 579.615681][T16953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2747'. [ 579.655541][T16953] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2747'. [ 579.686136][T16953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2747'. [ 579.745140][T16939] lo speed is unknown, defaulting to 1000 [ 580.349359][T16941] lo speed is unknown, defaulting to 1000 [ 580.616188][T16965] Bluetooth: MGMT ver 1.23 [ 582.714244][T16969] vxcan0: entered promiscuous mode [ 582.869562][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2751'. [ 582.890388][T16974] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 583.129219][T16980] netlink: 'syz.4.2754': attribute type 3 has an invalid length. [ 583.141477][T16980] netlink: 'syz.4.2754': attribute type 3 has an invalid length. [ 583.480980][T16983] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 583.507693][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'. [ 584.075540][T16994] lo speed is unknown, defaulting to 1000 [ 584.083599][T16994] lo speed is unknown, defaulting to 1000 [ 584.296279][T16997] lo speed is unknown, defaulting to 1000 [ 584.355211][T16997] lo speed is unknown, defaulting to 1000 [ 584.392936][T17004] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2760'. [ 584.438678][T17004] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2760'. [ 584.486605][T17004] netlink: 'syz.0.2760': attribute type 5 has an invalid length. [ 584.541148][T17004] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2760'. [ 584.645625][T17006] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2760'. [ 584.874436][T17004] lo speed is unknown, defaulting to 1000 [ 584.888444][T17015] lo speed is unknown, defaulting to 1000 [ 584.913885][T17018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2764'. [ 584.930680][T17018] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2764'. [ 584.959064][T17018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2764'. [ 585.287232][T17015] lo speed is unknown, defaulting to 1000 [ 585.497092][T17030] lo speed is unknown, defaulting to 1000 [ 585.662398][T17034] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 585.938491][T17004] lo speed is unknown, defaulting to 1000 [ 586.677620][T17030] lo speed is unknown, defaulting to 1000 [ 588.417357][T17068] vxcan4: entered promiscuous mode [ 588.464431][T17064] [ 588.466832][T17064] ====================================================== [ 588.473947][T17064] WARNING: possible circular locking dependency detected [ 588.481242][T17064] syzkaller #0 Not tainted [ 588.485676][T17064] ------------------------------------------------------ [ 588.492695][T17064] syz.0.2774/17064 is trying to acquire lock: [ 588.498777][T17064] ffff888024c1d468 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 588.508227][T17064] [ 588.508227][T17064] but task is already holding lock: [ 588.515610][T17064] ffff888024c1cf28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 588.525836][T17064] [ 588.525836][T17064] which lock already depends on the new lock. [ 588.525836][T17064] [ 588.536859][T17064] [ 588.536859][T17064] the existing dependency chain (in reverse order) is: [ 588.546227][T17064] [ 588.546227][T17064] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 588.554994][T17064] lock_acquire+0x120/0x360 [ 588.560151][T17064] blk_alloc_queue+0x538/0x620 [ 588.565471][T17064] __blk_mq_alloc_disk+0x15c/0x340 [ 588.571458][T17064] nbd_dev_add+0x46c/0xae0 [ 588.576428][T17064] nbd_init+0x168/0x1f0 [ 588.581116][T17064] do_one_initcall+0x233/0x820 [ 588.586495][T17064] do_initcall_level+0x104/0x190 [ 588.592093][T17064] do_initcalls+0x59/0xa0 [ 588.596955][T17064] kernel_init_freeable+0x334/0x4b0 [ 588.602780][T17064] kernel_init+0x1d/0x1d0 [ 588.607739][T17064] ret_from_fork+0x3f9/0x770 [ 588.612852][T17064] ret_from_fork_asm+0x1a/0x30 [ 588.618231][T17064] [ 588.618231][T17064] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 588.625453][T17064] lock_acquire+0x120/0x360 [ 588.630484][T17064] fs_reclaim_acquire+0x72/0x100 [ 588.635942][T17064] __kmalloc_cache_noprof+0x41/0x3d0 [ 588.641747][T17064] virtio_transport_do_socket_init+0x57/0x2f0 [ 588.648344][T17064] vsock_assign_transport+0x5ae/0x770 [ 588.654236][T17064] vsock_connect+0x5ab/0xe20 [ 588.659356][T17064] __sys_connect+0x313/0x440 [ 588.664576][T17064] __x64_sys_connect+0x7a/0x90 [ 588.669877][T17064] do_syscall_64+0xfa/0x3b0 [ 588.674907][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.681344][T17064] [ 588.681344][T17064] -> #4 (sk_lock-AF_VSOCK){+.+.}-{0:0}: [ 588.689094][T17064] lock_acquire+0x120/0x360 [ 588.694170][T17064] lock_sock_nested+0x48/0x100 [ 588.699461][T17064] vsock_shutdown+0x67/0x2a0 [ 588.704567][T17064] nbd_mark_nsock_dead+0x2e9/0x560 [ 588.710283][T17064] sock_shutdown+0x15e/0x260 [ 588.715390][T17064] nbd_config_put+0x342/0x790 [ 588.720591][T17064] nbd_genl_connect+0x167c/0x18f0 [ 588.726229][T17064] genl_family_rcv_msg_doit+0x215/0x300 [ 588.732389][T17064] genl_rcv_msg+0x60e/0x790 [ 588.737416][T17064] netlink_rcv_skb+0x205/0x470 [ 588.742722][T17064] genl_rcv+0x28/0x40 [ 588.747225][T17064] netlink_unicast+0x82c/0x9e0 [ 588.752528][T17064] netlink_sendmsg+0x805/0xb30 [ 588.757857][T17064] __sock_sendmsg+0x219/0x270 [ 588.763059][T17064] ____sys_sendmsg+0x505/0x830 [ 588.768347][T17064] ___sys_sendmsg+0x21f/0x2a0 [ 588.773540][T17064] __x64_sys_sendmsg+0x19b/0x260 [ 588.778998][T17064] do_syscall_64+0xfa/0x3b0 [ 588.784018][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.790458][T17064] [ 588.790458][T17064] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 588.798220][T17064] lock_acquire+0x120/0x360 [ 588.803251][T17064] __mutex_lock+0x187/0x1350 [ 588.808382][T17064] nbd_queue_rq+0x257/0xf10 [ 588.813411][T17064] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 588.819476][T17064] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 588.826518][T17064] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.833160][T17064] blk_mq_run_hw_queue+0x348/0x4f0 [ 588.838813][T17064] blk_mq_dispatch_list+0xd0c/0xe00 [ 588.844549][T17064] blk_mq_flush_plug_list+0x469/0x550 [ 588.850447][T17064] __blk_flush_plug+0x3d3/0x4b0 [ 588.855820][T17064] __submit_bio+0x2d3/0x5a0 [ 588.860844][T17064] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 588.867087][T17064] block_read_full_folio+0x599/0x830 [ 588.872982][T17064] filemap_read_folio+0x114/0x380 [ 588.878525][T17064] do_read_cache_folio+0x350/0x590 [ 588.884158][T17064] read_part_sector+0xb6/0x2b0 [ 588.889446][T17064] adfspart_check_ICS+0xa4/0xa50 [ 588.894913][T17064] bdev_disk_changed+0x75c/0x14b0 [ 588.900479][T17064] blkdev_get_whole+0x380/0x510 [ 588.905883][T17064] bdev_open+0x31e/0xd30 [ 588.910660][T17064] blkdev_open+0x3a8/0x510 [ 588.915613][T17064] do_dentry_open+0x953/0x13f0 [ 588.920901][T17064] vfs_open+0x3b/0x340 [ 588.925509][T17064] path_openat+0x2ee5/0x3830 [ 588.930641][T17064] do_filp_open+0x1fa/0x410 [ 588.935695][T17064] do_sys_openat2+0x121/0x1c0 [ 588.940989][T17064] __x64_sys_openat+0x138/0x170 [ 588.946363][T17064] do_syscall_64+0xfa/0x3b0 [ 588.951393][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.957815][T17064] [ 588.957815][T17064] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 588.965028][T17064] lock_acquire+0x120/0x360 [ 588.970055][T17064] __mutex_lock+0x187/0x1350 [ 588.975195][T17064] nbd_queue_rq+0xc8/0xf10 [ 588.980174][T17064] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 588.986305][T17064] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 588.993268][T17064] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.999809][T17064] blk_mq_run_hw_queue+0x348/0x4f0 [ 589.005476][T17064] blk_mq_dispatch_list+0xd0c/0xe00 [ 589.011309][T17064] blk_mq_flush_plug_list+0x469/0x550 [ 589.017321][T17064] __blk_flush_plug+0x3d3/0x4b0 [ 589.022720][T17064] __submit_bio+0x2d3/0x5a0 [ 589.027743][T17064] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 589.033960][T17064] block_read_full_folio+0x599/0x830 [ 589.039856][T17064] filemap_read_folio+0x114/0x380 [ 589.045502][T17064] do_read_cache_folio+0x350/0x590 [ 589.051166][T17064] read_part_sector+0xb6/0x2b0 [ 589.056471][T17064] adfspart_check_ICS+0xa4/0xa50 [ 589.061929][T17064] bdev_disk_changed+0x75c/0x14b0 [ 589.067562][T17064] blkdev_get_whole+0x380/0x510 [ 589.072937][T17064] bdev_open+0x31e/0xd30 [ 589.077712][T17064] blkdev_open+0x3a8/0x510 [ 589.082648][T17064] do_dentry_open+0x953/0x13f0 [ 589.087981][T17064] vfs_open+0x3b/0x340 [ 589.092565][T17064] path_openat+0x2ee5/0x3830 [ 589.097759][T17064] do_filp_open+0x1fa/0x410 [ 589.102782][T17064] do_sys_openat2+0x121/0x1c0 [ 589.107975][T17064] __x64_sys_openat+0x138/0x170 [ 589.113429][T17064] do_syscall_64+0xfa/0x3b0 [ 589.118462][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.124893][T17064] [ 589.124893][T17064] -> #1 (set->srcu){.+.+}-{0:0}: [ 589.132162][T17064] lock_sync+0xba/0x160 [ 589.136850][T17064] __synchronize_srcu+0x96/0x3a0 [ 589.142344][T17064] elevator_switch+0x12b/0x640 [ 589.147650][T17064] elevator_change+0x2d4/0x450 [ 589.152952][T17064] elevator_set_default+0x186/0x260 [ 589.158672][T17064] blk_register_queue+0x34e/0x3f0 [ 589.164218][T17064] __add_disk+0x677/0xd50 [ 589.169088][T17064] add_disk_fwnode+0xfc/0x480 [ 589.174461][T17064] nbd_dev_add+0x717/0xae0 [ 589.179407][T17064] nbd_init+0x168/0x1f0 [ 589.184089][T17064] do_one_initcall+0x233/0x820 [ 589.189373][T17064] do_initcall_level+0x104/0x190 [ 589.194837][T17064] do_initcalls+0x59/0xa0 [ 589.199780][T17064] kernel_init_freeable+0x334/0x4b0 [ 589.205499][T17064] kernel_init+0x1d/0x1d0 [ 589.210694][T17064] ret_from_fork+0x3f9/0x770 [ 589.215813][T17064] ret_from_fork_asm+0x1a/0x30 [ 589.221107][T17064] [ 589.221107][T17064] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 589.228940][T17064] validate_chain+0xb9b/0x2140 [ 589.234335][T17064] __lock_acquire+0xab9/0xd20 [ 589.239571][T17064] lock_acquire+0x120/0x360 [ 589.244704][T17064] __mutex_lock+0x187/0x1350 [ 589.249854][T17064] elevator_change+0x19b/0x450 [ 589.255249][T17064] elevator_set_none+0x42/0xb0 [ 589.260568][T17064] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 589.266946][T17064] nbd_start_device+0x17f/0xb10 [ 589.272354][T17064] nbd_genl_connect+0x135b/0x18f0 [ 589.278261][T17064] genl_family_rcv_msg_doit+0x215/0x300 [ 589.284339][T17064] genl_rcv_msg+0x60e/0x790 [ 589.289394][T17064] netlink_rcv_skb+0x205/0x470 [ 589.294676][T17064] genl_rcv+0x28/0x40 [ 589.299198][T17064] netlink_unicast+0x82c/0x9e0 [ 589.304484][T17064] netlink_sendmsg+0x805/0xb30 [ 589.309767][T17064] __sock_sendmsg+0x219/0x270 [ 589.314964][T17064] ____sys_sendmsg+0x505/0x830 [ 589.320247][T17064] ___sys_sendmsg+0x21f/0x2a0 [ 589.325440][T17064] __x64_sys_sendmsg+0x19b/0x260 [ 589.330911][T17064] do_syscall_64+0xfa/0x3b0 [ 589.335935][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.342433][T17064] [ 589.342433][T17064] other info that might help us debug this: [ 589.342433][T17064] [ 589.352656][T17064] Chain exists of: [ 589.352656][T17064] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 589.352656][T17064] [ 589.366390][T17064] Possible unsafe locking scenario: [ 589.366390][T17064] [ 589.373830][T17064] CPU0 CPU1 [ 589.379199][T17064] ---- ---- [ 589.384553][T17064] lock(&q->q_usage_counter(io)#50); [ 589.389929][T17064] lock(fs_reclaim); [ 589.396438][T17064] lock(&q->q_usage_counter(io)#50); [ 589.404335][T17064] lock(&q->elevator_lock); [ 589.409013][T17064] [ 589.409013][T17064] *** DEADLOCK *** [ 589.409013][T17064] [ 589.417146][T17064] 6 locks held by syz.0.2774/17064: [ 589.422339][T17064] #0: ffffffff8f59e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 589.430527][T17064] #1: ffffffff8f59e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 589.439548][T17064] #2: ffff888025151188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 589.450994][T17064] #3: ffff8880251510d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 589.462232][T17064] #4: ffff888024c1cf28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 589.472863][T17064] #5: ffff888024c1cf60 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 589.483762][T17064] [ 589.483762][T17064] stack backtrace: [ 589.489733][T17064] CPU: 1 UID: 0 PID: 17064 Comm: syz.0.2774 Not tainted syzkaller #0 PREEMPT(full) [ 589.489752][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.489761][T17064] Call Trace: [ 589.489770][T17064] [ 589.489778][T17064] dump_stack_lvl+0x189/0x250 [ 589.489799][T17064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.489815][T17064] ? __pfx__printk+0x10/0x10 [ 589.489836][T17064] ? print_lock_name+0xde/0x100 [ 589.489856][T17064] print_circular_bug+0x2ee/0x310 [ 589.489881][T17064] check_noncircular+0x134/0x160 [ 589.489899][T17064] validate_chain+0xb9b/0x2140 [ 589.489922][T17064] __lock_acquire+0xab9/0xd20 [ 589.489944][T17064] ? elevator_change+0x19b/0x450 [ 589.489963][T17064] lock_acquire+0x120/0x360 [ 589.489982][T17064] ? elevator_change+0x19b/0x450 [ 589.490006][T17064] __mutex_lock+0x187/0x1350 [ 589.490020][T17064] ? elevator_change+0x19b/0x450 [ 589.490041][T17064] ? xa_find_after+0xae/0x430 [ 589.490060][T17064] ? xa_find_after+0x402/0x430 [ 589.490075][T17064] ? elevator_change+0x19b/0x450 [ 589.490093][T17064] ? xa_find_after+0xae/0x430 [ 589.490110][T17064] ? __pfx___mutex_lock+0x10/0x10 [ 589.490127][T17064] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 589.490153][T17064] elevator_change+0x19b/0x450 [ 589.490173][T17064] ? elevator_set_none+0x37/0xb0 [ 589.490194][T17064] elevator_set_none+0x42/0xb0 [ 589.490215][T17064] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 589.490237][T17064] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 589.490259][T17064] ? sysfs_add_file_mode_ns+0x259/0x300 [ 589.490284][T17064] nbd_start_device+0x17f/0xb10 [ 589.490307][T17064] ? device_create_file+0xf4/0x1c0 [ 589.490322][T17064] nbd_genl_connect+0x135b/0x18f0 [ 589.490346][T17064] ? __pfx_nbd_genl_connect+0x10/0x10 [ 589.490377][T17064] ? __nla_parse+0x40/0x60 [ 589.490400][T17064] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 589.490428][T17064] genl_family_rcv_msg_doit+0x215/0x300 [ 589.490449][T17064] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.490472][T17064] ? stack_trace_save+0x9c/0xe0 [ 589.490491][T17064] genl_rcv_msg+0x60e/0x790 [ 589.490510][T17064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.490527][T17064] ? __pfx_nbd_genl_connect+0x10/0x10 [ 589.490552][T17064] netlink_rcv_skb+0x205/0x470 [ 589.490565][T17064] ? __lock_acquire+0xab9/0xd20 [ 589.490584][T17064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.490601][T17064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.490621][T17064] ? down_read+0x1ad/0x2e0 [ 589.490637][T17064] genl_rcv+0x28/0x40 [ 589.490652][T17064] netlink_unicast+0x82c/0x9e0 [ 589.490675][T17064] ? __pfx_netlink_unicast+0x10/0x10 [ 589.490695][T17064] ? netlink_sendmsg+0x642/0xb30 [ 589.490708][T17064] ? skb_put+0x11b/0x210 [ 589.490724][T17064] netlink_sendmsg+0x805/0xb30 [ 589.490741][T17064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.490756][T17064] ? aa_sock_msg_perm+0xf1/0x1d0 [ 589.490770][T17064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.490785][T17064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.490799][T17064] __sock_sendmsg+0x219/0x270 [ 589.490820][T17064] ____sys_sendmsg+0x505/0x830 [ 589.490838][T17064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.490870][T17064] ? import_iovec+0x74/0xa0 [ 589.490893][T17064] ___sys_sendmsg+0x21f/0x2a0 [ 589.490909][T17064] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.490937][T17064] ? __fget_files+0x2a/0x420 [ 589.490949][T17064] ? __fget_files+0x3a0/0x420 [ 589.490965][T17064] __x64_sys_sendmsg+0x19b/0x260 [ 589.490988][T17064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.491012][T17064] ? rcu_is_watching+0x15/0xb0 [ 589.491028][T17064] ? do_syscall_64+0xbe/0x3b0 [ 589.491044][T17064] do_syscall_64+0xfa/0x3b0 [ 589.491057][T17064] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.491070][T17064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.491084][T17064] ? clear_bhb_loop+0x60/0xb0 [ 589.491100][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.491115][T17064] RIP: 0033:0x7f59f898ebe9 [ 589.491130][T17064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.491143][T17064] RSP: 002b:00007f59f6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.491159][T17064] RAX: ffffffffffffffda RBX: 00007f59f8bc6090 RCX: 00007f59f898ebe9 [ 589.491170][T17064] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 589.491180][T17064] RBP: 00007f59f8a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 589.491189][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.491198][T17064] R13: 00007f59f8bc6128 R14: 00007f59f8bc6090 R15: 00007ffd7e96f8d8 [ 589.491214][T17064] [ 589.995367][T17070] vxcan0: entered promiscuous mode [ 590.017234][ T5868] block nbd1: Receive control failed (result -32) [ 590.017713][T17069] lo speed is unknown, defaulting to 1000 [ 590.025361][ T5868] block nbd1: Receive control failed (result -32) [ 590.030463][T17069] lo speed is unknown, defaulting to 1000 [ 590.061102][T17064] nbd1: detected capacity change from 0 to 127 [ 590.134975][T17076] block nbd1: Dead connection, failed to find a fallback [ 590.165925][T17076] block nbd1: shutting down sockets [ 590.172127][T17076] blk_print_req_error: 286 callbacks suppressed [ 590.172142][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.192639][T17076] buffer_io_error: 286 callbacks suppressed [ 590.192656][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.208385][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.219354][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.227590][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.238921][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.247297][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.263138][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.271287][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.280344][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.288285][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.297556][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.305728][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.320410][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.328450][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.337714][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.345797][T17076] ldm_validate_partition_table(): Disk read failed. [ 590.354029][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.363225][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.372628][T17076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.382354][T17076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.390341][T17076] Dev nbd1: unable to read RDB block 0 [ 590.396539][T17076] nbd1: unable to read partition table [ 590.409116][T16972] ldm_validate_partition_table(): Disk read failed. [ 590.416634][T16972] Dev nbd1: unable to read RDB block 0 [ 590.423854][T16972] nbd1: unable to read partition table [ 590.436521][T16972] ldm_validate_partition_table(): Disk read failed. [ 590.444009][T16972] Dev nbd1: unable to read RDB block 0 [ 590.450252][T16972] nbd1: unable to read partition table