last executing test programs: 3.321466659s ago: executing program 3 (id=843): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000081000000000000008c20a590a40000000001000000000000008d557c58c08197a5c34a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x8}, &(0x7f0000000300)=0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x1000f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x5}}, [0x5, 0x4, 0x1fd, 0xff, 0x66, 0x7, 0x891f, 0xd, 0x97a, 0xfffffffffffffff9, 0x80000000, 0x0, 0x1ff, 0x6, 0x4]}, &(0x7f0000000440)=0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4", 0x50}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f32ddcf8ffffffb703000008000000b70400000100000085000000820000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(r8) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000180)={r10, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r10, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000540)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x55}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 3.076032498s ago: executing program 3 (id=845): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x2d3101, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x7, 0x3, 0xd}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200332fb00900000000000600000101"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRES64=r2], &(0x7f0000005d80)='GPL\x00', 0xb}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='reno', 0x4) sendmmsg$inet(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000cc0)="24acadd7f04daaa04e88680351d9ce53f67fd2a4afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab7037500acf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030000000c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea728b06e6155944b6c3554d553724c5419d45f633d97bc5988", 0x369}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a0000000e000000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000721d10b3210a636a3334000000000000000000000000000000000000b70298728907bbd2d0c0240d631dd732bfef00368f33e2c992e3e3b81a536d93f2897133f07940c7cc6eec75ea563d2c58e36bec0f7f5e4e35826067392b4135c5e99a159a2e9683e466db935e6c8f676855b34c75ca2d7c8d3d9f6e65fcb8ac19d8cdfa1a0956ba4bb8f8620cb810b52f7969a097f2ca9664735d07f9bdb4be87bf462cd947e732c3a662b94ab08bffefe65eb639ccbf174dcef33fd1e1628ec2159f3a2370ce7f121a661af436e5077719911972a01dc23eb1adebfb866747d56341289867"], 0x50) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd3, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0xfffffffffffffda9, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20}, 0x50) 2.793669132s ago: executing program 4 (id=849): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 2.684158243s ago: executing program 4 (id=850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x801) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close(r1) 2.407841837s ago: executing program 4 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xb6, 0x20000000, 0xffffffff, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000480)=@newtfilter={0x5ec, 0x2c, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xe, 0xffe0}, {0xc, 0x6}}, [@f_rsvp6={{0xa}, {0x5bc, 0x2, [@TCA_RSVP_ACT={0x598, 0x6, [@m_csum={0x68, 0xa, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xba, 0x10000000, 0x3, 0x7}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xff, 0xffbb64ef4d00e567, 0x1bc, 0x4}, 0x5d}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x140, 0x1a, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8809}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6000}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1ff, 0x663, 0x30000004, 0x7, 0x9}, 0x1}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd59b4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x171ad}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xf, 0x2, 0x4, 0x0, 0x3}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd9100}]}, {0xa3, 0x6, "bc757081b175ec8d8581fb60ad43c6f1f3779e3dea8afe61aa303166f1114c94fcad2b56ed44a4c3f311be833e65ac73a51cc103a8da8c2633e05b3c32f4a0b0370d61ddacbc9e43f6c5e331d047653a5fae0790cfc2fab6686678f97ea2483c0dfaa8273689dae97db116d3469d5baa0247910dfa430f7b85749e3d499eba09a1177b1fc18b8736da01b74e321a4ec30cd1df13d0f3b7abf659b40a836950"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x174, 0x4, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x220f, 0x2937aac0a3e23a28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xea1a, 0x6598b257, 0x7, 0xb, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc8, 0x1336, 0x4, 0xfffffc01, 0x8}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0xb4, 0xe, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x7, 0x8, 0x5, 0x787}}, @TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}]}, {0x64, 0x6, "8b40d917ed18ad716563efdb2b0e4eebac1929155f55ddb29d70c2ae8d1c1c1b9723f7095ab699d61bb6b27ab2343c0852fc14d777466de40e384d83d1fc6fe0270dfdb28a50f0246e40bd91659c3f2bf369433413209e197fb0392712dd90e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x120, 0x17, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc20}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3c2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeee}]}, {0xb9, 0x6, "2d5cb8bd4438424aea230e140046e8556bd616e4d8dcbd8440211f0f6101ee7b5b305a00e10f3f354291a8fb992135ab9d54f50ff251867d24fbfa984b174ec5c4cd0fec4b61204618e0389e7ab1bd645f14fa34cb46aed4b49188bcce1ab0789b540f09420a3a03fd9c2a2d792a29b71ed660c4a06c0da4617cd9e3bfe36c5c051c06e88e1f23b205628e2498c8ca5f82b02d26ad858134be4b7306722a81f086b904a033532487cb0686da307b2894ee6f135356"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xa4, 0x16, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3d9, 0x10001, 0xffffffffffffffff, 0x1, 0xd}, 0x5}}, @TCA_MPLS_BOS={0x5}]}, {0x54, 0x6, "b8cc8dddc5e9ecc1c83faecc236a75b3a40c4d776fd44d5212c6462f378577f9ef099b8e10a923e3b484dc4eaff8078c3be7a72f5a40b96a63b5391aaeb12513e02f68e1150bf52224513df989f05fc7"}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x80000000, 0x6}, {0x10001, 0x4f4bd97c, 0x200}, 0x7c, 0x3, 0x2}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x8001}, 0x880) 2.337908453s ago: executing program 0 (id=854): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a4", 0x1b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000004000000040000001100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003735f4c3685e3c1a04980ee45e32c0bf0ee2f9ea110578457a1a0c47968a774273a2eaa25d7c9d7d3528ebc3d831fb7f21326d9d5fc1e84102da5c4aa4afc2ea9688547529541752ac398430fc04cfb456b9b65aca1eb7752de66b78886b78a994048c529a741c74eaf6e46df16eb46dbbe719ec51c1b8884a26b06c3a18bfea9646662adb2374de77cae4ffcfb95c3f5ba5d43af7f0162a16b3000000000000f74ecc89d2a361c7f2eaa81bb201588f64a68ffe4c65c6491dc816ea456b860dda3a59767263b997563038a4d747", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000140), &(0x7f0000000280)=r8}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xd0}}, 0x0) 2.277708024s ago: executing program 4 (id=855): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}, 0x12}], 0x400000000000181, 0x9200000000000000) 2.145455755s ago: executing program 3 (id=856): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bc2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x2400d814) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.02529147s ago: executing program 0 (id=857): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (fail_nth: 32) 1.99468823s ago: executing program 2 (id=858): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.898537733s ago: executing program 4 (id=859): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="08001efbb07d", 0x6}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000000000000070000044809e235ab46f28749acd7240044041c330000000086e6b29903c527"], 0x18}, 0x20008814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001200)={&(0x7f0000000180), 0xc, 0x0}, 0x4040050) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) unshare(0x28000600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x29, 0x0, 0xfffffffd, 0x0, 0x10000, @value=r4}, 0x28) r5 = socket$kcm(0x23, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001240)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='ip6_vti0\x00', 0x6, 0x4, 0x3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x4010015) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f00005a6000/0x2000)=nil, 0x2000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 1.643401009s ago: executing program 3 (id=860): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000005600000000280012800b0001abbe00000000000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4044801) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4080, 0xff0}], 0x1, &(0x7f0000002a80)=[@rights={{0x10}}], 0x10}}], 0x1, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x5e, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r0], 0x30}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x28, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f00000000000000be0000001852000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183a00000300000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x74, &(0x7f0000000240)=""/116, 0x41100, 0x11, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0x9, 0x9a}, 0x10, 0x215d5, 0xffffffffffffffff, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, r3, 0x1], &(0x7f00000003c0)=[{0x3, 0x5, 0xd, 0xb}, {0x2, 0x4, 0x9, 0x8}, {0x3, 0x2, 0x4, 0x3}, {0x2, 0x1, 0xa, 0x1}, {0x5, 0x5, 0xf, 0xc}], 0x10, 0x4}, 0x94) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000500)={{r4}, 0xb4, 0x6, 0xffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000030800000000000000000060050000000500030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040014) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.468377842s ago: executing program 2 (id=861): socket$inet6(0xa, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000780), 0x12) socket$kcm(0x29, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8004) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x18, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x89, [@broadcast, @multicast1]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@remote}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@multicast2}]}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x12}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r9, 0x8004745a, &(0x7f0000000000)) 1.278999214s ago: executing program 2 (id=863): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) (async) r1 = getgid() (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000680)=0xe8) (async) r5 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) (async) r11 = accept$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs, &(0x7f0000000880)=0x6e) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000008c0)=0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) (async) r14 = accept4$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14, 0x800) (async) r16 = accept$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x14) (async) r17 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a80), 0x400, 0x0) r18 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000ac0)=0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000c00)=0xe8) r21 = getgid() (async) r22 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r23 = accept$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x2, 0x0, @initdev}, &(0x7f0000000c80)=0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2410c86b0da6748c19fef46e7eb90584aebb38643ceb26e18c51627e7527ae3c1611b38ee341cbeb47c01a14fe613f2ea44a82379e7d313a2e6d2de155be9fee1a036dbbe2ea3c748e1d4c9afdb02961ba09c4fb63630661efb25bb55ecf57a71f1d8682798416632ddf0197fd1a7c30ee42cbfc0201474c79d9d0da24a1d0f48d4e67e4ed98a3bbd39cfa30b60fb9b5e78e7214efd754e9472eaef425580e9a0c0c406151f580005a05289f886df0d25961219b290f9d5499d95cd03ce13113", 0xc0}, {&(0x7f00000000c0)="7820d39bb1fda2ac923efbfd50f53af312fb75076191af9b7e4433c8eb146075885296f422097f1a1157110f7e69f4420db4c48cd8eef988934533be3247934575394d3c724835f85b85db9ffe6591bb9623b834767f9bd65051026c230dfff4a3fb75ab1a6c0ce2e45e4704601f617d094eb34f56ecf5cbd733b398258a6ef0e6ab3d6005eeeeb545331715a65d5d23348016c6e5e8a847a3330fc254585bf7e4aa117b4eb06fc1dcde834b94e9d39f90", 0xb1}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="0990b5769d5d60bd9aea7784d5bb519075615741f80923871a455d283eda0a476e0ad5fb6deb5af65f5cce91bdabcd4e44622c22055e394ca1f32b06293fe38c46", 0x41}, {&(0x7f0000000240)="c4d3e3bbe4f0c34f3393d091be79c2790e20e88a1da8996c7daac58f9c5b71a4d55d4d333b6ced102db0e8b4e22545ca568368268b5de7d66745e185dd9dce8ec0e79cc21dbcc7b1", 0x48}, {&(0x7f00000002c0)="18ec135c463d98f5c4c0ec8f15ee9c37b7c853c661e791855a99bf2c958ef3b2caef6e4a91c4f28ba96e6081ebfb10d79afc4e63deb19b4126ec2e20e48535911d148950326326a74ebc8f7a46c3499da121277ca2d83ab726c930dbf5a2e0e3dc17c55c3893711090c034d0d0f3079f12ed36038dbf62a59c6282d12029e120655608f2f4a441a8e3f43868a9bf04297e71ca1ff730120d9142fc309a9ccdf757e16cbbff5d27f51ff2c2c0d5f2ad5e2803a33283c9257bbfce1a78426a571f", 0xc0}], 0x6, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r10}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, r13}}}, @rights={{0x24, 0x1, 0x1, [r14, 0xffffffffffffffff, r16, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r22, r23]}}], 0x100, 0x8000804}, 0x4004840) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000e40)=0xc) r26 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x50040800) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000e80)="4fd64c3dd48c7bda40baab2521ff1007e65aa662e4dfd484738ffff796e500df5e19985fbcee896c8f7be3205af9ddad3ffa5288f07d8c1b2d0e9ffaa75a6f7bda520bcb53f1c347e9c408e9ac27986532e88277031fec6c2877fa8cbbe84ade65b5a6a48cc2fa10d05a2a30a32e05b052c695bb560833eb758dbd1eb1c27c6b2844e63a114c4f14053f47ba6f55b33a60a2b8b6d763618d05574d0fee63454320d46dc742c4b50955086fe6e0bd4f5a9e204481f3c21bef3167cd5fb202bd66e802d82bcbee6baf", 0xc8, 0x41, 0x0, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r18, 0x0, 0x11, &(0x7f00000010c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000011c0)=0xe8) (async) r28 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x19, 0x27, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x99a0}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @exit, @generic={0x3, 0x9, 0x3, 0x7fff, 0x5}, @tail_call, @alu={0x4, 0x1, 0x6, 0xa, 0xb, 0x6, 0x4}, @generic={0xf8, 0x5, 0x7, 0x62, 0x1}, @ringbuf_query, @ldst={0x1, 0x1, 0x2, 0x3, 0x5, 0x20, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x5, 0x9, 0xa, 0xfffffffffffffffe, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001340)='GPL\x00', 0x7f, 0xb5, &(0x7f0000001380)=""/181, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0x5, 0xffff0000, 0x3}, 0x10, 0xffffffffffffffff, r18, 0x4, &(0x7f00000014c0)=[0x1, r23, 0xffffffffffffffff], &(0x7f0000001500)=[{0x0, 0x4, 0x5, 0x2}, {0x4, 0x4, 0xc, 0x5}, {0x1, 0x1, 0x8, 0xb}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x2}, 0x94) r29 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x5, 0xe, &(0x7f0000001600)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0xb1}, @jmp={0x5, 0x0, 0xb, 0x6, 0x5, 0x40, 0x4}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000001680)='syzkaller\x00', 0x9, 0x8b, &(0x7f00000016c0)=""/139, 0x41000, 0x14, '\x00', r15, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x4, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001800)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001840)=[{0x5, 0x1, 0x7, 0x1}], 0x10, 0x40}, 0x94) r30 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x3e, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @printk={@lli}, @ldst={0x1, 0x2, 0x2, 0xf, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b40)='GPL\x00', 0x8, 0x6b, &(0x7f0000001b80)=""/107, 0x82200, 0x29, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001c40)={0x4, 0x3, 0xfe1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000001cc0)=[{0x4, 0x1, 0xa, 0x4}, {0x5, 0x2, 0x4, 0x9}, {0x4, 0x5, 0x8, 0x2}, {0x4, 0x4, 0x8, 0x6}], 0x10, 0xffff}, 0x94) sendmmsg$unix(r11, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="2c59f4a82d5d7d4b15f74ed4c7a072d6969f2883a8f48d159f2b32ac64792bbeb33e10a01d9277d38f12748e1b4c3b2dabe606e20ebf58332b9c9fd8c3767d8cf0e3635a268e88bcb2816f2107f8afd39a3a443ba3b63bf40b5f59b70c9b7545229bf9785201ac5b9a7dd3b791d50c4e3988bac678a005fa671c7897a56d36a0c98b77660fe97c9f5d2bb4a81bb4a76530cd874b33b239514574522f8522e445329c21c96caf406105fba04690e24cba085be9f73bc8702749b124d8541d8ef6cd20a9b05f6878", 0xc7}], 0x1, &(0x7f0000001f00)=[@rights={{0x1c, 0x1, 0x1, [r23, r26, r11]}}, @cred={{0x1c, 0x1, 0x2, {r19, r27, r5}}}, @rights={{0x20, 0x1, 0x1, [r28, r29, r30, r16]}}, @rights={{0x1c, 0x1, 0x1, [r26, r11, r18]}}, @rights={{0x2c, 0x1, 0x1, [r22, r22, r18, r11, 0xffffffffffffffff, r26, r26]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff, r25}}}, @rights={{0x28, 0x1, 0x1, [r14, r18, 0xffffffffffffffff, r23, r14, r11]}}], 0x118, 0x8010}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002040)="08ac6fbce122a10c129b2a43b79b874573135100eafce71ef8624f685d56ab39a248c06caed15a2d6422cd072a446aab8f5bb1d9026a50f4d38586140fee1912798915762414043c5e1d5fde2efcf49f3b59ff3f15a071bbd1788f2e252e0a342f098df55deea593dce5840254b2c56bb415ed49a471ebb606b1821ee4ac498fac2640c1db8247cab5b75380d710040c1ccce6dbb162bc02055368e89ee3d215210bf8d632f59dcc02d0aa6a9ce43cc8583f1846c9ddb37e61079afd8d48c3ff9b6bdb", 0xc3}, {&(0x7f0000002140)="d0ff8adf0dea913cf58074f8b3e995b2319324b58acf0b2eabed644a7053f82d349c982f1f85ce1e84ae28f2ccc9ad8e5ebe56502a647e076701081fa0d3224feac5d0ef7770693b84e02d25bade8f6ee5d039aeb1a7a1b4a0987b8d82f39ad406a91a5c0e4f9be58a969b8f96a1c8426f16f65432dc7128c9a1850a68b4395735ca17e36c0d02b995c31d8a25deb7f6fb6cca72d9503eeb39675bfec05cdf15d72a3199d75f299870130c7e18af5284f1f713ba2989e0df9e266ecd676da61d7535f46b830eccf139d7f4", 0xcb}, {&(0x7f0000002240)="9f5b1b329068085c2bd326944a7e43587f25672d6189d5eec114eb7d50212ce08ce8af8dca05b9d6123b11006f3aa6b45dbb44170593e08b6c7cba26ac8ddaaeeb3919b75e4bd1a15ce86f1525e57f56c9fcadc1add6bceabebb5e8fe164654418e717619fe07da6d08667029eb76c8909eeac38152e287b9bea09f28d03c06f95e60eef7206d51a0a48a57a35e1fbbc2871692e287b17", 0x97}, {&(0x7f0000002300)="a5ba8e1de4003026d3aac37efeb2160a305b425a31206a0ba257c6b37376497f66178ca998f0c495efbea13a98af70da7c9d6f8c46070059020d08f5b591ebc630ad7badffaa", 0x46}, {&(0x7f0000002380)="cf8d800235b6d4d1135ccdebc680adb25619e0c153ce4a8a2d8120a76ad7f71249ba7b8092fce504b2600a82e9aca398794fef46", 0x34}, {&(0x7f00000023c0)="7361ed49be59f9f1e138a6f1b8fb1dcb481a87dd1789cf327c8c734e070d89", 0x1f}], 0x6, &(0x7f0000002680)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r2, r24, r25}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r21}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {r8, r4, r25}}}, @rights={{0x34, 0x1, 0x1, [r17, r26, r14, r17, 0xffffffffffffffff, r16, r16, 0xffffffffffffffff, r26]}}], 0xe8, 0x4000000}}], 0x2, 0x20004801) 1.131731714s ago: executing program 3 (id=865): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r1, 0x0, 0x0, 0x14, &(0x7f00000027c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40000}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x44004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000480)={r1, &(0x7f00000001c0)='ecb(camellia)\x00', 0x61c0, &(0x7f00000003c0)={@_ha_fsid={[0x0, 0x13]}, {0x2, 0x7, 0x40, 0x6}}, 0x9, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711858000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x28, 0x29, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x12f}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) socket$kcm(0x29, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.034288744s ago: executing program 0 (id=866): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "bff351ac485da7152f1fc04cb98002a8"}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x7fffffff}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) listen(r0, 0x8) 1.033935614s ago: executing program 2 (id=867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x1, 0x2c, 0x3, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, "17"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x19, 0xca, 0x0, 0x1000}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711097000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) 1.004335622s ago: executing program 0 (id=868): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x0, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) (rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xe0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428040000000000140035006d6163766c616e30000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x3c}}, 0x8000) r7 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000008, 0x13, r9, 0xb5e81000) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async) openat$cgroup_ro(r8, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) 842.138355ms ago: executing program 3 (id=870): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e1ff46bd3bf574b7c1f6f585862b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="6046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a1f8259cbe4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29044411d1e17912370b7070a"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 841.691087ms ago: executing program 2 (id=871): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 748.98801ms ago: executing program 2 (id=872): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 666.62419ms ago: executing program 4 (id=873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000fedbdf250d00667261153a153b5a00000540d6ee0000000000001a003d00000005001d001d0000000559170a001800010076c65b34190007000000e99be489e1402f0894496016"], 0x44}, 0x1, 0x0, 0x0, 0x20000880}, 0x44080) 601.980012ms ago: executing program 1 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f80"], 0x38}}, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000180)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe"], 0x20000600}}, 0x0) sendmsg$sock(r3, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) 482.410106ms ago: executing program 0 (id=875): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000100)=':+,\x00', 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x264, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x228, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x15c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000100)=':+,\x00', 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x264, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x228, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x15c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) 437.851642ms ago: executing program 1 (id=876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x4000020) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0xf5000000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f00000001c0)) 342.222064ms ago: executing program 1 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2074, 0x0, 0x0, 0x0, 0x5e09}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x640, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'batadv_slave_0\x00', {}, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010004b0400000000010000007a000000", @ANYRES32=0x0, @ANYBLOB="129c000000000000280012800b0000006272696467650000180002800a0014000180c200000300000600090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2074, 0x0, 0x0, 0x0, 0x5e09}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x640, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'batadv_slave_0\x00', {}, 0x6}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010004b0400000000010000007a000000", @ANYRES32=0x0, @ANYBLOB="129c000000000000280012800b0000006272696467650000180002800a0014000180c200000300000600090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 296.671362ms ago: executing program 1 (id=878): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x0) 260.234816ms ago: executing program 0 (id=879): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x73, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x224}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x1c000000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd482c71f5f89305b}, 0x8000000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 81.286409ms ago: executing program 1 (id=880): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd37}, 0x14}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000400)=0xfffffffc, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000200000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=881): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x36, 0x6, "d6d47ee5e1780433eeaebac0a0b59f22b29df97a4dd52d881a8636c1b798b36775ddf5e00ea4e5c792c1cf6b7db26160c504"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x10c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0xa9, 0xc, "c1669ac2c59af7d62f4d0bcc3d166410d20e940c6ff02d08e05f09ec37e49df4363c6275e4a5fec75ff4405428cecf7252e2b505cd5d203a837b07900270c84254fb3caf11e6190a055c693d798d746c135408566e97c09e68e766fc3414fa3073ae967144a804da3da0bdc8893692152bf71632c8ae6a08b07a23b2b82735852e250d11e7c0ee6ea1647bbe5779c9ddc8ce90e30646cd76e32a5ff6d107ba0767815e09dc"}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d7ec09c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c261c80}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x61, 0x6, "211b0319f99fafda1a63769d864dd64155e9552ab8c12a5dfeb3026c1c78db168ac5dcc08ee7aac7d444f124da47684ea8bbc42e4e6af25e1b43323697bf23b980da8291b8d22f30df35fe7484439011b0e74fcf5435023896977e4bbc"}]}], {0x14}}, 0x264}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000052000100000070d3c64d00000ae1ffff07"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 72.868476][ T5619] cgroup: Unknown subsys name 'net' [ 72.998551][ T5619] cgroup: Unknown subsys name 'cpuset' [ 73.007099][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.361101][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.427555][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.437382][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.445395][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.457785][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.467893][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.499313][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.514992][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.522729][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.537839][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.543915][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.546134][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.555958][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.567132][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.576925][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.585735][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.594030][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.595235][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.608979][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.617045][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.626117][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.626220][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.642358][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.651714][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.659261][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.661359][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.345819][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.352980][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.360446][ T5636] bridge_slave_0: entered allmulticast mode [ 78.367706][ T5636] bridge_slave_0: entered promiscuous mode [ 78.376454][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.383559][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.390858][ T5637] bridge_slave_0: entered allmulticast mode [ 78.397981][ T5637] bridge_slave_0: entered promiscuous mode [ 78.424614][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.431814][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.439036][ T5636] bridge_slave_1: entered allmulticast mode [ 78.446083][ T5636] bridge_slave_1: entered promiscuous mode [ 78.453359][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.460594][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.467911][ T5637] bridge_slave_1: entered allmulticast mode [ 78.474754][ T5637] bridge_slave_1: entered promiscuous mode [ 78.491079][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.498236][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.505868][ T5631] bridge_slave_0: entered allmulticast mode [ 78.512778][ T5631] bridge_slave_0: entered promiscuous mode [ 78.536043][ T5641] Bluetooth: hci0: command tx timeout [ 78.562433][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.570031][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.577327][ T5631] bridge_slave_1: entered allmulticast mode [ 78.584178][ T5631] bridge_slave_1: entered promiscuous mode [ 78.601378][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.640015][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.651012][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.668585][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.675843][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.682982][ T5646] bridge_slave_0: entered allmulticast mode [ 78.689494][ T5641] Bluetooth: hci2: command tx timeout [ 78.695446][ T5641] Bluetooth: hci4: command tx timeout [ 78.703265][ T5646] bridge_slave_0: entered promiscuous mode [ 78.720515][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.749512][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.756700][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.763973][ T5635] bridge_slave_0: entered allmulticast mode [ 78.770366][ T5641] Bluetooth: hci3: command tx timeout [ 78.770519][ T5641] Bluetooth: hci1: command tx timeout [ 78.782308][ T5635] bridge_slave_0: entered promiscuous mode [ 78.789564][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.797214][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.804353][ T5646] bridge_slave_1: entered allmulticast mode [ 78.811487][ T5646] bridge_slave_1: entered promiscuous mode [ 78.820383][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.847826][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.855015][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.863264][ T5635] bridge_slave_1: entered allmulticast mode [ 78.870199][ T5635] bridge_slave_1: entered promiscuous mode [ 78.886616][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.897890][ T5636] team0: Port device team_slave_0 added [ 78.908457][ T5637] team0: Port device team_slave_0 added [ 78.942514][ T5636] team0: Port device team_slave_1 added [ 78.950379][ T5637] team0: Port device team_slave_1 added [ 78.978865][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.017369][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.028865][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.047778][ T5631] team0: Port device team_slave_0 added [ 79.062670][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.069780][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.095860][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.109383][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.128516][ T5631] team0: Port device team_slave_1 added [ 79.134696][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.141738][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.167847][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.180555][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.187568][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.213665][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.225295][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.232377][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.259054][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.280072][ T5646] team0: Port device team_slave_0 added [ 79.318376][ T5646] team0: Port device team_slave_1 added [ 79.336047][ T5635] team0: Port device team_slave_0 added [ 79.359686][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.366990][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.393025][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.413543][ T5635] team0: Port device team_slave_1 added [ 79.438438][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.445552][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.471510][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.508764][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.516092][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.542088][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.554657][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.562081][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.588209][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.606759][ T5637] hsr_slave_0: entered promiscuous mode [ 79.613492][ T5637] hsr_slave_1: entered promiscuous mode [ 79.632871][ T5636] hsr_slave_0: entered promiscuous mode [ 79.639163][ T5636] hsr_slave_1: entered promiscuous mode [ 79.645133][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 79.651003][ T5636] Cannot create hsr debugfs directory [ 79.675163][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.682204][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.708134][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.720513][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.727524][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.753425][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.819228][ T5646] hsr_slave_0: entered promiscuous mode [ 79.825776][ T5646] hsr_slave_1: entered promiscuous mode [ 79.831840][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 79.837797][ T5646] Cannot create hsr debugfs directory [ 79.883137][ T5631] hsr_slave_0: entered promiscuous mode [ 79.889455][ T5631] hsr_slave_1: entered promiscuous mode [ 79.895717][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 79.901492][ T5631] Cannot create hsr debugfs directory [ 79.966511][ T5635] hsr_slave_0: entered promiscuous mode [ 79.972710][ T5635] hsr_slave_1: entered promiscuous mode [ 79.978933][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 79.984658][ T5635] Cannot create hsr debugfs directory [ 80.427803][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.442463][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.451662][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.461665][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.469614][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.479646][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.495996][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.508328][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.571130][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.580725][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.589558][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.600967][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.605654][ T50] Bluetooth: hci0: command tx timeout [ 80.614032][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.623136][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.642605][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.651503][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.732947][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.743062][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.750975][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.760445][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.766293][ T5641] Bluetooth: hci2: command tx timeout [ 80.773262][ T50] Bluetooth: hci4: command tx timeout [ 80.791719][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.801251][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.819522][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.829745][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.845959][ T50] Bluetooth: hci1: command tx timeout [ 80.851912][ T5641] Bluetooth: hci3: command tx timeout [ 80.864974][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.924716][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.937289][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.944918][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.954921][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.963210][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.973186][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.991866][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.002706][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.012923][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.041551][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.049191][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.111330][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.118464][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.151510][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.160847][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.169855][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.180168][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.188908][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.198054][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.219217][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.228845][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.286566][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.344605][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.370810][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.378026][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.416952][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.424151][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.487730][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.550015][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.583118][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.590282][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.613131][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.638464][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.645712][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.679764][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.746488][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.773149][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.802974][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.810357][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.879176][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.886426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.900813][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.907995][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.941076][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.948304][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.979341][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.684657][ T5637] veth0_vlan: entered promiscuous mode [ 82.687934][ T5641] Bluetooth: hci0: command tx timeout [ 82.733619][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.768353][ T5637] veth1_vlan: entered promiscuous mode [ 82.846453][ T5641] Bluetooth: hci4: command tx timeout [ 82.851957][ T50] Bluetooth: hci2: command tx timeout [ 82.926585][ T50] Bluetooth: hci3: command tx timeout [ 82.932576][ T5641] Bluetooth: hci1: command tx timeout [ 82.944958][ T5637] veth0_macvtap: entered promiscuous mode [ 83.017698][ T5637] veth1_macvtap: entered promiscuous mode [ 83.042953][ T5646] veth0_vlan: entered promiscuous mode [ 83.110699][ T5646] veth1_vlan: entered promiscuous mode [ 83.141869][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.160912][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.172317][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.188208][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.198516][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.228697][ T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.239266][ T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.263831][ T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.272855][ T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.335150][ T5631] veth0_vlan: entered promiscuous mode [ 83.342694][ T5646] veth0_macvtap: entered promiscuous mode [ 83.369129][ T5646] veth1_macvtap: entered promiscuous mode [ 83.403181][ T5631] veth1_vlan: entered promiscuous mode [ 83.455903][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.470296][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.503809][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.529024][ T5635] veth0_vlan: entered promiscuous mode [ 83.539709][ T5636] veth0_vlan: entered promiscuous mode [ 83.549929][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.559629][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.570805][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.609767][ T5636] veth1_vlan: entered promiscuous mode [ 83.619975][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.629961][ T5631] veth0_macvtap: entered promiscuous mode [ 83.643827][ T5635] veth1_vlan: entered promiscuous mode [ 83.654404][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.658841][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.665673][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.690928][ T5631] veth1_macvtap: entered promiscuous mode [ 83.704858][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.811385][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.850794][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.869069][ T5635] veth0_macvtap: entered promiscuous mode [ 83.894824][ T5636] veth0_macvtap: entered promiscuous mode [ 83.936676][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.956669][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.978620][ T5635] veth1_macvtap: entered promiscuous mode [ 83.989419][ T5636] veth1_macvtap: entered promiscuous mode [ 84.001041][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.017078][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.044424][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.056157][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.248163][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.258630][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.261697][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.317310][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.358915][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.370944][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.399772][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.415968][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.439033][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.456973][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.493603][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.512090][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.552517][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.572522][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.586058][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.597870][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.609371][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.643421][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.684446][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.748353][ T5834] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 84.771268][ T5641] Bluetooth: hci0: command tx timeout [ 84.792851][ T5835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 84.927150][ T5641] Bluetooth: hci2: command tx timeout [ 84.932600][ T50] Bluetooth: hci4: command tx timeout [ 85.005522][ T50] Bluetooth: hci1: command tx timeout [ 85.011361][ T5641] Bluetooth: hci3: command tx timeout [ 85.020733][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.030441][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.094687][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.133526][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.226212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.250477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.259635][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.274230][ T5848] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9'. [ 85.288830][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.297465][ T5847] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 85.314265][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.322501][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.397383][ T5847] netlink: 'syz.3.8': attribute type 12 has an invalid length. [ 85.418655][ T5847] netlink: 'syz.3.8': attribute type 29 has an invalid length. [ 85.441543][ T5847] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8'. [ 85.476555][ T5847] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 85.500326][ T5847] netlink: 47 bytes leftover after parsing attributes in process `syz.3.8'. [ 85.565256][ T5858] tun0: tun_chr_ioctl cmd 1074025672 [ 85.601361][ T5858] tun0: ignored: set checksum disabled [ 85.729885][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 85.794506][ T5851] tun0: tun_chr_ioctl cmd 2147767519 [ 85.829983][ T5748] IPVS: starting estimator thread 0... [ 85.946989][ T5868] IPVS: using max 31 ests per chain, 74400 per kthread [ 86.032019][ T5871] Zero length message leads to an empty skb [ 86.129523][ T5874] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 86.203396][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.710973][ T9] cfg80211: failed to load regulatory.db [ 86.753654][ T5903] IPVS: lc: FWM 3 0x00000003 - no destination available [ 86.777331][ T5763] IPVS: starting estimator thread 0... [ 86.788566][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 86.854633][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 86.896138][ T5904] IPVS: using max 39 ests per chain, 93600 per kthread [ 86.967785][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 86.989980][ T5878] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 87.029857][ T5878] syzkaller0: entered promiscuous mode [ 87.047152][ T5878] syzkaller0: entered allmulticast mode [ 87.069468][ T5874] veth0_macvtap: left promiscuous mode [ 87.199093][ T5899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.210376][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.273061][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.304178][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.313148][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.854911][ T5939] erspan1: entered promiscuous mode [ 87.882243][ T5939] erspan1: entered allmulticast mode [ 88.653269][ T5965] warning: `syz.1.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.724947][ T29] audit: type=1800 audit(1780426354.398:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name="memory.events" dev="tmpfs" ino=53 res=0 errno=0 [ 88.766214][ T5985] netlink: 'syz.0.37': attribute type 4 has an invalid length. [ 88.820401][ T5981] netlink: 'syz.0.37': attribute type 4 has an invalid length. [ 88.897264][ T5989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.067333][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.076269][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.269218][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.286174][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.441496][ T5994] erspan1: left promiscuous mode [ 89.450552][ T5994] erspan1: left allmulticast mode [ 89.469317][ T141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.485836][ T141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.505075][ T141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.527869][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.700059][ T6018] __nla_validate_parse: 6 callbacks suppressed [ 89.700076][ T6018] netlink: 192 bytes leftover after parsing attributes in process `syz.1.45'. [ 89.745267][ T42] IPVS: starting estimator thread 0... [ 89.876499][ T6021] IPVS: using max 34 ests per chain, 81600 per kthread [ 90.099753][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 90.357902][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'. [ 90.451708][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.505152][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.665290][ T6057] syz.3.57 (6057) used greatest stack depth: 17944 bytes left [ 90.744185][ T6073] netlink: 'syz.3.62': attribute type 7 has an invalid length. [ 90.821955][ T6056] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 90.912842][ T6081] netlink: 240 bytes leftover after parsing attributes in process `syz.1.65'. [ 91.082065][ T6086] tipc: Started in network mode [ 91.089156][ T6086] tipc: Node identity be890e738eb4, cluster identity 4711 [ 91.096618][ T6086] tipc: Enabled bearer , priority 0 [ 91.157868][ T6086] syzkaller0: entered promiscuous mode [ 91.163377][ T6086] syzkaller0: entered allmulticast mode [ 91.180299][ T6086] tipc: Resetting bearer [ 91.199022][ T6085] tipc: Resetting bearer [ 92.335846][ T6085] tipc: Disabling bearer [ 92.364875][ T5761] tipc: Node number set to 809307763 [ 92.835818][ T6115] netlink: zone id is out of range [ 93.048624][ T6129] IPVS: Error connecting to the multicast addr [ 93.187187][ T6137] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 93.195837][ T6137] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.225010][ T6131] bond1: entered promiscuous mode [ 93.231892][ T6136] sctp: [Deprecated]: syz.0.81 (pid 6136) Use of int in max_burst socket option. [ 93.231892][ T6136] Use struct sctp_assoc_value instead [ 93.249703][ T6131] bond1: entered allmulticast mode [ 93.256027][ T6131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.266058][ T6129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.333741][ T6142] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 93.550034][ T6159] netlink: 'syz.4.88': attribute type 3 has an invalid length. [ 93.577529][ T6161] netlink: 'syz.3.83': attribute type 2 has an invalid length. [ 93.595691][ T6161] netlink: 'syz.3.83': attribute type 2 has an invalid length. [ 93.632549][ T6159] block nbd4: NBD_DISCONNECT [ 93.698929][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.740154][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.768985][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.797838][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.817285][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.828510][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.851626][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.858846][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.866611][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.873726][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.929193][ T6166] bond1: left promiscuous mode [ 93.933994][ T6166] bond1: left allmulticast mode [ 94.105853][ T6182] netlink: 'syz.4.95': attribute type 12 has an invalid length. [ 94.124725][ T6182] bond0: option arp_validate: invalid value (55553) [ 94.134565][ T48] bond0: (slave bond_slave_0): interface is now down [ 94.164444][ T48] bond0: (slave bond_slave_1): interface is now down [ 94.189477][ T48] bond0: now running without any active interface! [ 94.472521][ T6192] netlink: 'syz.1.99': attribute type 13 has an invalid length. [ 94.490291][ T6192] netlink: 'syz.1.99': attribute type 17 has an invalid length. [ 94.543585][ T6194] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 94.659565][ T6194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.681861][ T6203] bond1: entered allmulticast mode [ 94.909978][ T6194] bond1: (slave dummy0): making interface the new active one [ 94.923378][ T6194] dummy0: entered allmulticast mode [ 94.931101][ T6194] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 95.038131][ T6210] __nla_validate_parse: 72 callbacks suppressed [ 95.038148][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 95.077534][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 95.168916][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.201360][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.235009][ T6217] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 95.255076][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.275918][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.351717][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.105'. [ 95.378408][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 95.390595][ T6216] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.652343][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 95.947809][ T6247] netlink: 'syz.0.112': attribute type 178 has an invalid length. [ 95.961542][ T6247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.207809][ T6253] netlink: 'syz.3.115': attribute type 21 has an invalid length. [ 96.352588][ T6259] xt_hashlimit: size too large, truncated to 1048576 [ 96.407549][ T6261] xt_l2tp: v2 sid > 0xffff: 1114112 [ 96.439309][ T6264] Bluetooth: MGMT ver 1.23 [ 96.491461][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 96.889700][ T6292] netlink: 10 bytes leftover after parsing attributes in process `syz.0.125'. [ 97.163214][ T6305] netlink: 'syz.4.130': attribute type 16 has an invalid length. [ 97.201162][ T6305] netlink: 'syz.4.130': attribute type 17 has an invalid length. [ 97.320318][ T6316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.359560][ T6318] netlink: 80 bytes leftover after parsing attributes in process `syz.0.133'. [ 97.404957][ T6314] netlink: 132 bytes leftover after parsing attributes in process `syz.1.132'. [ 97.587324][ T6328] syzkaller0: entered promiscuous mode [ 97.601952][ T6328] syzkaller0: entered allmulticast mode [ 98.171623][ T6351] syzkaller0: entered promiscuous mode [ 98.178066][ T6351] syzkaller0: entered allmulticast mode [ 98.443222][ T6367] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 98.785749][ T6367] bond1: entered promiscuous mode [ 98.812270][ T6367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.845295][ T6394] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 98.916155][ T6381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.927317][ T6381] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 98.938780][ T6381] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 98.952537][ T6381] bond1: (slave vti0): making interface the new active one [ 98.963558][ T6403] netlink: 'syz.2.151': attribute type 6 has an invalid length. [ 98.972537][ T6381] vti0: entered promiscuous mode [ 98.982274][ T6381] bond1: (slave vti0): Enslaving as an active interface with an up link [ 99.120310][ T6405] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 99.197278][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 99.251673][ T6411] netlink: 'syz.3.153': attribute type 30 has an invalid length. [ 99.393896][ T6411] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 99.437965][ T6411] bond2 (unregistering): Released all slaves [ 116.354562][ T6437] __nla_validate_parse: 2 callbacks suppressed [ 116.354605][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 116.405945][ T6446] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 116.592453][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.162'. [ 116.855962][ T6446] veth3: entered promiscuous mode [ 116.894304][ T6462] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.963268][ T6462] bond1: (slave lo): Enslaving as an active interface with an up link [ 116.991937][ T6482] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 116.995641][ T6462] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 117.220220][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'. [ 117.252822][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 117.708455][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.723997][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.741791][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.754562][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.010780][ T6534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.264959][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 118.355180][ T6573] netlink: 332 bytes leftover after parsing attributes in process `syz.4.188'. [ 118.392520][ T6573] netlink: 'syz.4.188': attribute type 9 has an invalid length. [ 118.415388][ T6573] netlink: 108 bytes leftover after parsing attributes in process `syz.4.188'. [ 118.425000][ T6573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.188'. [ 118.753343][ T6600] netlink: 'syz.3.193': attribute type 9 has an invalid length. [ 118.831464][ T6605] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.195'. [ 118.912882][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 119.440724][ T9] bridge0: entered promiscuous mode [ 119.760140][ T6652] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 119.792839][ C0] Illegal XDP return value 16128 on prog (id 68) dev bond_slave_0, expect packet loss! [ 120.024030][ T6662] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 120.051362][ T6662] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 120.073803][ T6662] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 120.100849][ T6672] netlink: 'syz.0.212': attribute type 12 has an invalid length. [ 120.505077][ T6697] Bluetooth: MGMT ver 1.23 [ 120.653022][ T6702] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 121.051414][ T6727] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 121.138204][ T6727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.171182][ T6736] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 121.171249][ T6689] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.189186][ T6734] bond2: (slave geneve2): making interface the new active one [ 121.199214][ T6734] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 121.325901][ T6741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.340214][ T6743] netlink: 'syz.4.231': attribute type 13 has an invalid length. [ 121.348910][ T6743] netlink: 'syz.4.231': attribute type 17 has an invalid length. [ 121.368511][ T6736] bond3: entered promiscuous mode [ 121.374164][ T6736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.386004][ T6727] netlink: 'syz.0.229': attribute type 8 has an invalid length. [ 121.396239][ T6727] sch_fq: defrate 0 ignored. [ 121.512771][ T6755] Cannot find add_set index 0 as target [ 121.591425][ T6760] openvswitch: netlink: Key 6 has unexpected len 30 expected 2 [ 121.755794][ T6743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.782976][ T6743] veth3: left promiscuous mode [ 121.796590][ T6743] bond3: left promiscuous mode [ 121.844515][ T6759] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 121.881579][ T6770] __nla_validate_parse: 11 callbacks suppressed [ 121.881595][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 121.974715][ T6773] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 122.081453][ T6780] syzkaller0: entered promiscuous mode [ 122.114307][ T6780] syzkaller0: entered allmulticast mode [ 122.183819][ T6780] tipc: Started in network mode [ 122.196523][ T6780] tipc: Node identity fa1da16c592c, cluster identity 4711 [ 122.233763][ T6780] tipc: Enabled bearer , priority 0 [ 122.235584][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 122.269689][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 122.295965][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 122.327498][ T6796] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 122.496341][ T6796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.506798][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.247'. [ 122.558921][ T6797] bond3: (slave geneve2): making interface the new active one [ 122.569233][ T6797] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 122.569254][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 122.588549][ T6790] netlink: 'syz.3.247': attribute type 8 has an invalid length. [ 122.596630][ T6790] sch_fq: defrate 0 ignored. [ 122.602707][ T6779] tipc: Resetting bearer [ 122.628063][ T6779] tipc: Disabling bearer [ 122.796459][ T6809] tipc: Started in network mode [ 122.825195][ T6809] tipc: Node identity , cluster identity 4711 [ 122.839579][ T6809] tipc: Failed to set node id, please configure manually [ 122.847274][ T6821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.856417][ T6809] tipc: Enabling of bearer rejected, failed to enable media [ 122.889782][ T6818] netlink: 284 bytes leftover after parsing attributes in process `syz.0.251'. [ 122.901330][ T6813] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 123.156898][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 123.257293][ T6835] bridge3: entered promiscuous mode [ 123.269768][ T6835] bridge3: entered allmulticast mode [ 123.282967][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 123.309506][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'. [ 123.339705][ T6841] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 123.412884][ T6855] netlink: 'syz.4.263': attribute type 21 has an invalid length. [ 123.422421][ T6855] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.431792][ T6855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.440088][ T6855] IPv6: NLM_F_CREATE should be set when creating new route [ 123.447201][ T6852] netlink: 'syz.3.261': attribute type 21 has an invalid length. [ 123.448228][ T6855] IPv6: NLM_F_CREATE should be set when creating new route [ 123.462269][ T6855] IPv6: NLM_F_CREATE should be set when creating new route [ 123.486996][ T6852] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.491960][ T6841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.496066][ T6852] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 123.547404][ T6860] netlink: 'syz.0.259': attribute type 8 has an invalid length. [ 123.571808][ T6860] sch_fq: defrate 0 ignored. [ 124.365790][ T6906] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 124.790169][ T6917] bond3: entered promiscuous mode [ 124.802878][ T6917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.833100][ T6921] vlan0: entered promiscuous mode [ 124.907481][ T6917] bond3: (slave bridge1): making interface the new active one [ 124.941521][ T6917] bridge1: entered promiscuous mode [ 124.956593][ T6917] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 125.544256][ T6957] sctp: [Deprecated]: syz.1.290 (pid 6957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.544256][ T6957] Use struct sctp_sack_info instead [ 125.590370][ T6957] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 125.611899][ T6957] bond1 (unregistering): Released all slaves [ 125.736184][ T6960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.756720][ T6968] bond4: option lp_interval: invalid value (18446744073709551607) [ 125.764781][ T6968] bond4: option lp_interval: allowed values 1 - 2147483647 [ 126.792827][ T7012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.869349][ T7012] v: renamed from ip6gretap0 (while UP) [ 127.316475][ T7016] syzkaller1: entered promiscuous mode [ 127.330970][ T7016] syzkaller1: entered allmulticast mode [ 127.346673][ T7017] syzkaller1: left promiscuous mode [ 127.352818][ T7017] syzkaller1: left allmulticast mode [ 127.407643][ T7033] validate_nla: 6 callbacks suppressed [ 127.407659][ T7033] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 127.519665][ T7040] __nla_validate_parse: 6 callbacks suppressed [ 127.519681][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 127.777240][ T7038] bond5: (slave bridge2): making interface the new active one [ 127.787031][ T7038] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 128.264116][ T7067] Cannot find add_set index 0 as target [ 128.417820][ T7075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.433822][ T7078] netlink: 14 bytes leftover after parsing attributes in process `syz.1.318'. [ 128.489784][ T7079] Cannot find add_set index 0 as target [ 129.473554][ T7091] dvmrp0: entered allmulticast mode [ 129.646703][ T7102] netlink: 76 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.659233][ T7102] netlink: 6 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.678503][ T7102] netlink: 6 bytes leftover after parsing attributes in process `syz.4.324'. [ 130.058858][ T7124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.327'. [ 130.129276][ T7096] syz.3.322 (7096) used greatest stack depth: 17320 bytes left [ 130.906994][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 130.954888][ T7126] veth0_macvtap: left promiscuous mode [ 131.228696][ T7165] netlink: 'syz.0.330': attribute type 2 has an invalid length. [ 131.858729][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 131.889264][ T7195] openvswitch: netlink: IP tunnel attribute has 192 unknown bytes. [ 132.183249][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 132.222318][ T7212] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 132.264204][ T7219] netlink: 41 bytes leftover after parsing attributes in process `syz.2.343'. [ 132.297332][ T7212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.436862][ T7212] netlink: 'syz.3.342': attribute type 8 has an invalid length. [ 132.473404][ T7212] sch_fq: defrate 0 ignored. [ 132.769624][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.816461][ T7234] __nla_validate_parse: 4 callbacks suppressed [ 132.816494][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 132.827986][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 132.940540][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 133.248705][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 133.269776][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.351'. [ 133.323540][ T7253] netlink: 'syz.0.351': attribute type 4 has an invalid length. [ 133.373422][ T7258] netlink: 'syz.0.351': attribute type 4 has an invalid length. [ 133.436210][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 133.506747][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 133.662432][ T5296] veth0_macvtap: entered promiscuous mode [ 135.882534][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 136.148873][ T7336] vlan1: entered promiscuous mode [ 136.166792][ T7336] geneve1: entered promiscuous mode [ 136.179894][ T7336] vlan1: entered allmulticast mode [ 136.207407][ T7336] geneve1: entered allmulticast mode [ 136.429267][ T7355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.366'. [ 137.266069][ T7386] syzkaller0: entered promiscuous mode [ 137.271778][ T7386] syzkaller0: entered allmulticast mode [ 137.331191][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 137.390594][ T7397] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 137.599066][ T7404] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 137.624485][ T7408] netlink: 'syz.0.380': attribute type 3 has an invalid length. [ 137.671063][ T7408] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 137.838940][ T7414] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 137.869077][ T7414] __nla_validate_parse: 1 callbacks suppressed [ 137.869095][ T7414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.380'. [ 137.973201][ T7413] bond1: (slave dummy0): Releasing active interface [ 138.005790][ T7413] dummy0: left allmulticast mode [ 138.043831][ T7414] dummy0: entered promiscuous mode [ 138.407160][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 138.457651][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 138.621470][ T29] audit: type=1804 audit(1780426404.298:3): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.388" name="/newroot/87/memory.events" dev="tmpfs" ino=465 res=1 errno=0 [ 138.651706][ T29] audit: type=1800 audit(1780426404.328:4): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.388" name="memory.events" dev="tmpfs" ino=465 res=0 errno=0 [ 138.699837][ T29] audit: type=1804 audit(1780426404.328:5): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.388" name="/newroot/87/memory.events" dev="tmpfs" ino=465 res=1 errno=0 [ 138.867134][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 138.967359][ T7429] syzkaller0: entered promiscuous mode [ 138.981512][ T7429] syzkaller0: entered allmulticast mode [ 139.072156][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 141.864398][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 141.878160][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 141.944017][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 141.971174][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 141.999719][ T7486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 142.056326][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 142.140512][ T7493] xt_hashlimit: max too large, truncated to 1048576 [ 142.302321][ T7486] bond6 (unregistering): Released all slaves [ 142.422181][ T7489] sch_fq: defrate 8 ignored. [ 142.550132][ T7506] bond4: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 142.580397][ T7506] bond4: entered promiscuous mode [ 142.700913][ T7515] tipc: Started in network mode [ 142.713846][ T7515] tipc: Node identity fc02, cluster identity 4711 [ 142.722782][ T7515] tipc: Enabling of bearer rejected, failed to enable media [ 142.837088][ T7524] syzkaller0: entered promiscuous mode [ 142.843312][ T7524] syzkaller0: entered allmulticast mode [ 142.889163][ T7524] __nla_validate_parse: 1 callbacks suppressed [ 142.889197][ T7524] netlink: 256 bytes leftover after parsing attributes in process `syz.0.407'. [ 142.943063][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 142.962332][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 143.003080][ T7527] netlink: 'syz.2.408': attribute type 12 has an invalid length. [ 143.046530][ T7527] netlink: 'syz.2.408': attribute type 13 has an invalid length. [ 143.455268][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 143.544053][ T7559] netlink: 'syz.4.412': attribute type 9 has an invalid length. [ 143.599242][ T7558] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 143.640629][ T7558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.733320][ T7559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.781186][ T7573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 143.810770][ T7571] bridge0: port 3(syz_tun) entered blocking state [ 143.864414][ T7571] bridge0: port 3(syz_tun) entered disabled state [ 143.926429][ T7571] syz_tun: entered allmulticast mode [ 144.028255][ T7571] syz_tun: entered promiscuous mode [ 144.040673][ T7571] bridge0: port 3(syz_tun) entered blocking state [ 144.048445][ T7571] bridge0: port 3(syz_tun) entered listening state [ 144.290682][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 144.311410][ T7598] nftables ruleset with unbound set [ 144.327134][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 144.364482][ T7601] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 144.405196][ T7601] geneve1: entered promiscuous mode [ 144.501732][ T7606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.504476][ T7601] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 144.576054][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 144.594646][ T7602] nbd: must specify at least one socket [ 144.605920][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 144.621813][ T7602] nbd: must specify at least one socket [ 145.633600][ T7646] FAULT_INJECTION: forcing a failure. [ 145.633600][ T7646] name failslab, interval 1, probability 0, space 0, times 1 [ 145.665019][ T7646] CPU: 1 UID: 0 PID: 7646 Comm: syz.0.435 Not tainted syzkaller #0 PREEMPT(full) [ 145.665042][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.665058][ T7646] Call Trace: [ 145.665068][ T7646] [ 145.665076][ T7646] dump_stack_lvl+0xe8/0x150 [ 145.665107][ T7646] should_fail_ex+0x412/0x560 [ 145.665129][ T7646] should_failslab+0xa8/0x100 [ 145.665147][ T7646] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 145.665168][ T7646] ? __lock_acquire+0x6b5/0x2cf0 [ 145.665184][ T7646] ? __alloc_skb+0x1d0/0x7d0 [ 145.665204][ T7646] __alloc_skb+0x1d0/0x7d0 [ 145.665219][ T7646] ? __asan_memset+0x22/0x50 [ 145.665242][ T7646] tipc_buf_acquire+0x2b/0xe0 [ 145.665264][ T7646] tipc_msg_build+0x5a7/0xf00 [ 145.665288][ T7646] ? net_generic+0x1e/0x240 [ 145.665312][ T7646] ? __pfx_tipc_msg_build+0x10/0x10 [ 145.665329][ T7646] ? net_generic+0x1e/0x240 [ 145.665347][ T7646] ? net_generic+0x1e/0x240 [ 145.665375][ T7646] ? tipc_group_bc_cong+0x15f/0x210 [ 145.665396][ T7646] tipc_send_group_bcast+0x7db/0xad0 [ 145.665436][ T7646] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 145.665469][ T7646] ? __pfx_woken_wake_function+0x10/0x10 [ 145.665493][ T7646] ? __lock_acquire+0x6b5/0x2cf0 [ 145.665519][ T7646] __tipc_sendmsg+0x33b/0x2bc0 [ 145.665553][ T7646] ? ktime_get+0x45/0x220 [ 145.665572][ T7646] ? lock_acquire+0x106/0x350 [ 145.665590][ T7646] ? __pfx___tipc_sendmsg+0x10/0x10 [ 145.665615][ T7646] ? ktime_get+0x45/0x220 [ 145.665637][ T7646] ? ktime_get+0x45/0x220 [ 145.665657][ T7646] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 145.665679][ T7646] ? ktime_get+0x1f5/0x220 [ 145.665700][ T7646] ? lapic_next_event+0x11/0x20 [ 145.665716][ T7646] ? clockevents_program_event+0x491/0x630 [ 145.665733][ T7646] ? __hrtimer_rearm_deferred+0x99/0x450 [ 145.665755][ T7646] ? __lock_acquire+0x6b5/0x2cf0 [ 145.665782][ T7646] ? irqentry_exit+0x218/0x8b0 [ 145.665799][ T7646] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.665815][ T7646] ? irqentry_exit+0x218/0x8b0 [ 145.665829][ T7646] ? trace_irq_disable+0x3b/0x140 [ 145.665869][ T7646] ? tipc_sendmsg+0x47/0x70 [ 145.665887][ T7646] ? __local_bh_enable_ip+0xd0/0x130 [ 145.665907][ T7646] tipc_sendmsg+0x55/0x70 [ 145.665923][ T7646] ____sys_sendmsg+0x972/0x9f0 [ 145.665941][ T7646] ? __might_fault+0xaf/0x130 [ 145.665967][ T7646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.665995][ T7646] ? import_iovec+0x73/0xa0 [ 145.666017][ T7646] ___sys_sendmsg+0x2a5/0x360 [ 145.666033][ T7646] ? __lock_acquire+0x6b5/0x2cf0 [ 145.666053][ T7646] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.666076][ T7646] ? kstrtouint+0x6e/0xe0 [ 145.666124][ T7646] ? __fget_files+0x2a/0x420 [ 145.666141][ T7646] ? __fget_files+0x3a0/0x420 [ 145.666167][ T7646] __sys_sendmmsg+0x27c/0x4e0 [ 145.666188][ T7646] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.666203][ T7646] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 145.666246][ T7646] ? ksys_write+0x242/0x270 [ 145.666268][ T7646] ? __pfx_ksys_write+0x10/0x10 [ 145.666295][ T7646] __x64_sys_sendmmsg+0xa0/0xc0 [ 145.666313][ T7646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.666329][ T7646] do_syscall_64+0x174/0x580 [ 145.666344][ T7646] ? trace_irq_disable+0x3b/0x140 [ 145.666371][ T7646] ? clear_bhb_loop+0x40/0x90 [ 145.666390][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.666405][ T7646] RIP: 0033:0x7fade559ce59 [ 145.666432][ T7646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.666445][ T7646] RSP: 002b:00007fade37d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.666466][ T7646] RAX: ffffffffffffffda RBX: 00007fade5816090 RCX: 00007fade559ce59 [ 145.666477][ T7646] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 145.666488][ T7646] RBP: 00007fade37d5090 R08: 0000000000000000 R09: 0000000000000000 [ 145.666496][ T7646] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.666504][ T7646] R13: 00007fade5816128 R14: 00007fade5816090 R15: 00007ffe36726e88 [ 145.666530][ T7646] [ 146.080513][ T7633] nicvf0: tun_chr_ioctl cmd 21731 [ 146.219501][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.439'. [ 146.598743][ T7680] ip6gre1: entered promiscuous mode [ 146.649958][ T7680] ip6gre1: entered allmulticast mode [ 146.727857][ T7690] syz_tun: entered allmulticast mode [ 146.951705][ T7680] syz_tun: left allmulticast mode [ 147.277102][ T7717] bond6 (unregistering): Released all slaves [ 147.409112][ T7733] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 147.433090][ T7733] team0 (unregistering): Port device team_slave_0 removed [ 147.455701][ T7733] team0 (unregistering): Port device team_slave_1 removed [ 147.567252][ T7143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.607054][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.625942][ T7143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.869436][ T7748] netlink: 'syz.1.457': attribute type 32 has an invalid length. [ 147.945872][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.114282][ T7757] __nla_validate_parse: 5 callbacks suppressed [ 148.114314][ T7757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.461'. [ 148.272077][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 148.310367][ T7755] bond6 (unregistering): Released all slaves [ 148.369878][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.480006][ T7760] vlan2: entered promiscuous mode [ 148.508964][ T5740] hsr0: entered promiscuous mode [ 148.701473][ T7781] netlink: 180 bytes leftover after parsing attributes in process `syz.2.467'. [ 148.779875][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 148.791475][ T7783] netlink: 292 bytes leftover after parsing attributes in process `syz.3.468'. [ 148.843238][ T7783] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.468'. [ 149.099965][ T50] block nbd0: Receive control failed (result -22) [ 149.126013][ T7795] syzkaller0: entered promiscuous mode [ 149.159934][ T7795] syzkaller0: entered allmulticast mode [ 149.160848][ T7786] nbd0: detected capacity change from 0 to 32 [ 149.186161][ T6493] block nbd0: Dead connection, failed to find a fallback [ 149.204006][ T7799] netlink: 68 bytes leftover after parsing attributes in process `syz.4.474'. [ 149.221889][ T6493] block nbd0: shutting down sockets [ 149.230081][ T7799] netlink: 68 bytes leftover after parsing attributes in process `syz.4.474'. [ 149.248060][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.275236][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.295220][ T7801] : renamed from bond_slave_0 [ 149.313242][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.350424][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.376057][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.403186][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.422771][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.439048][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.448782][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.458701][ T7808] batadv_slave_0: entered promiscuous mode [ 149.517874][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.531148][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 149.552098][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.573337][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.595580][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.619461][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.663829][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.710678][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.732787][ T6493] ldm_validate_partition_table(): Disk read failed. [ 149.753335][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.768442][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.782767][ T7807] batadv_slave_0: left promiscuous mode [ 149.802333][ T6493] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.832299][ T6493] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.849779][ T7821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.872452][ T6493] Dev nbd0: unable to read RDB block 0 [ 149.894541][ T6493] nbd0: unable to read partition table [ 149.969014][ T6493] ldm_validate_partition_table(): Disk read failed. [ 150.015996][ T6493] Dev nbd0: unable to read RDB block 0 [ 150.044602][ T7827] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 150.065258][ T6493] nbd0: unable to read partition table [ 150.400854][ T7827] bond6: entered promiscuous mode [ 150.429208][ T7827] 8021q: adding VLAN 0 to HW filter on device bond6 [ 150.613832][ T7839] bond6: (slave veth5): making interface the new active one [ 150.672230][ T7839] veth5: entered promiscuous mode [ 150.854384][ T7839] bond6: (slave veth5): Enslaving as an active interface with an up link [ 151.495612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.771676][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 151.879206][ T7898] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 152.120873][ T7903] netlink: 'syz.4.488': attribute type 3 has an invalid length. [ 152.591246][ T7923] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 152.631718][ T7924] syzkaller0: entered promiscuous mode [ 152.651344][ T7924] syzkaller0: entered allmulticast mode [ 152.814313][ T7931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.926790][ T7941] Bluetooth: MGMT ver 1.23 [ 153.138553][ T7951] __nla_validate_parse: 5 callbacks suppressed [ 153.138571][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 153.200513][ T7951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.681304][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 153.750614][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 153.811634][ T7991] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 153.880139][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 154.048407][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 154.064762][ T7991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.110805][ T7993] bond4: (slave geneve2): making interface the new active one [ 154.127451][ T7993] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 154.139713][ T7983] netlink: 'syz.2.513': attribute type 8 has an invalid length. [ 154.149700][ T7999] netlink: 180 bytes leftover after parsing attributes in process `syz.4.514'. [ 154.167997][ T7999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.514'. [ 154.180939][ T7983] sch_fq: defrate 0 ignored. [ 154.356712][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.515'. [ 154.373743][ T8007] netlink: 68 bytes leftover after parsing attributes in process `syz.2.515'. [ 154.430195][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.515'. [ 154.457302][ T7961] syzkaller0: delete flow: hash 2192257791 index 2 [ 154.948866][ T8024] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 157.107399][ T141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.179403][ T7143] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.197390][ T7143] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.232536][ T7143] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.324304][ T8041] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 157.497310][ T8054] netlink: 'syz.1.526': attribute type 18 has an invalid length. [ 157.526280][ T8041] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.587690][ T8052] netlink: 'syz.2.525': attribute type 8 has an invalid length. [ 157.636170][ T8052] sch_fq: defrate 0 ignored. [ 157.703622][ T8055] team0: Port device team_slave_0 removed [ 157.992690][ T8066] bond6: Unable to set up delay as MII monitoring is disabled [ 158.063863][ T8066] bond6 (unregistering): Released all slaves [ 158.325648][ T8089] netlink: zone id is out of range [ 158.350245][ T8089] netlink: zone id is out of range [ 158.384491][ T8089] netlink: zone id is out of range [ 158.436310][ T8091] netlink: 'syz.3.536': attribute type 6 has an invalid length. [ 158.485439][ T8089] netlink: zone id is out of range [ 158.501026][ T8089] netlink: zone id is out of range [ 158.516518][ T8091] __nla_validate_parse: 5 callbacks suppressed [ 158.516534][ T8091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.536'. [ 158.547236][ T8095] netlink: 'syz.2.538': attribute type 6 has an invalid length. [ 158.567896][ T8089] netlink: zone id is out of range [ 158.633406][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 159.148246][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'. [ 159.202118][ T8100] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 159.347981][ T8100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.360473][ T8106] netlink: 'syz.3.539': attribute type 8 has an invalid length. [ 159.375541][ T8106] sch_fq: defrate 0 ignored. [ 159.427875][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.539'. [ 159.553998][ T8108] xt_TCPMSS: Only works on TCP SYN packets [ 159.647138][ C1] bridge0: port 3(syz_tun) entered learning state [ 159.655777][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.804203][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 159.833120][ T8122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.545'. [ 159.862188][ T8124] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 159.873655][ T8122] tipc: Can't bind to reserved service type 0 [ 159.897038][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 159.910716][ T8122] tipc: Failed to remove unknown binding: 66,0,0/0:2201662399/2201662400 [ 159.930771][ T8124] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 159.949152][ T8122] tipc: Failed to remove unknown binding: 66,0,0/0:2201662399/2201662400 [ 159.974410][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 160.241293][ T8124] syzkaller1: entered promiscuous mode [ 160.259473][ T8124] syzkaller1: entered allmulticast mode [ 160.265929][ T8138] netlink: 'syz.4.547': attribute type 11 has an invalid length. [ 160.426930][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.548'. [ 160.618764][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 160.664076][ T8150] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 160.807558][ T8150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 160.884307][ T8161] bond7: (slave geneve3): making interface the new active one [ 160.909005][ T8161] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 160.935478][ T8163] sch_fq: defrate 0 ignored. [ 173.734487][ T8178] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 173.763785][ T8176] veth0: entered promiscuous mode [ 173.791985][ T8176] __nla_validate_parse: 1 callbacks suppressed [ 173.792003][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 173.818522][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 173.833581][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 173.860443][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 174.292309][ T8202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.561'. [ 174.641047][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 174.754950][ T8222] validate_nla: 1 callbacks suppressed [ 174.754967][ T8222] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 174.895110][ T8222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.903663][ T8213] netlink: 'syz.3.564': attribute type 8 has an invalid length. [ 174.917735][ T8213] sch_fq: defrate 0 ignored. [ 174.932192][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.564'. [ 174.999103][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 175.015413][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 175.022112][ C1] bridge0: topology change detected, propagating [ 175.299541][ T8239] netlink: 'syz.3.568': attribute type 10 has an invalid length. [ 175.311657][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 175.324480][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 175.417985][ T8248] syzkaller1: entered promiscuous mode [ 175.424959][ T8248] syzkaller1: entered allmulticast mode [ 175.478294][ T8252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.645611][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.985488][ T8281] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 176.384632][ T50] block nbd0: Receive control failed (result -107) [ 176.401963][ T8294] block nbd0: reconnected socket [ 176.523240][ T8304] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 176.600149][ T8304] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 177.470763][ T8340] netlink: 'syz.3.588': attribute type 13 has an invalid length. [ 177.731943][ T8352] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.171636][ T8365] netlink: 'syz.3.597': attribute type 29 has an invalid length. [ 178.705255][ T8396] xt_l2tp: invalid flags combination: 8 [ 179.040611][ T8412] nbd: must specify a device to reconfigure [ 179.164965][ T8416] __nla_validate_parse: 10 callbacks suppressed [ 179.164984][ T8416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.608'. [ 179.352279][ T8420] netlink: 148 bytes leftover after parsing attributes in process `syz.3.609'. [ 179.728894][ T8438] netlink: 'syz.3.612': attribute type 142 has an invalid length. [ 179.932226][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 180.063549][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 180.176385][ T8455] dummy0: left promiscuous mode [ 180.615290][ T8478] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 180.790105][ T8481] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 180.957776][ T8481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.072548][ T24] IPVS: starting estimator thread 0... [ 181.101905][ T8489] bond6: (slave veth1): Enslaving as an active interface with a down link [ 181.103113][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.623'. [ 181.144176][ T8503] tipc: Enabled bearer , priority 0 [ 181.162472][ T8503] tipc: Resetting bearer [ 181.185466][ T8501] IPVS: using max 33 ests per chain, 79200 per kthread [ 181.257289][ T8496] bond6: (slave veth3): Enslaving as an active interface with a down link [ 181.353291][ T8481] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 181.442442][ T8510] tipc: Resetting bearer [ 181.481244][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'. [ 181.500575][ T8515] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 181.594414][ T8515] 8021q: adding VLAN 0 to HW filter on device bond8 [ 181.663299][ T8515] netlink: 'syz.4.630': attribute type 8 has an invalid length. [ 181.698373][ T8515] sch_fq: defrate 0 ignored. [ 181.735131][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.630'. [ 181.897323][ T8529] syzkaller0: entered promiscuous mode [ 181.904911][ T8529] syzkaller0: entered allmulticast mode [ 181.938393][ T8532] netlink: 738 bytes leftover after parsing attributes in process `syz.3.636'. [ 182.038032][ T8533] ip6gre1: entered promiscuous mode [ 182.063798][ T8533] ip6gre1: entered allmulticast mode [ 182.254490][ T8545] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 182.293119][ T8545] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.357361][ T8545] bond7: (slave veth3): Enslaving as an active interface with a down link [ 182.389905][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 182.400100][ T8545] bond7: (slave batadv1): making interface the new active one [ 182.413208][ T8545] batadv1: entered promiscuous mode [ 182.421383][ T8545] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 182.458933][ T8545] bond7 (unregistering): (slave veth3): Releasing active interface [ 182.470619][ T8545] bond7 (unregistering): (slave batadv1): Releasing active interface [ 182.486385][ T8545] bond7 (unregistering): Released all slaves [ 183.393750][ T8590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.447248][ T8590] IPVS: lc: FWM 3 0x00000003 - no destination available [ 183.480741][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 183.815429][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.655'. [ 183.956706][ T8611] netlink: 'syz.2.656': attribute type 21 has an invalid length. [ 184.283872][ T8620] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 184.319296][ T8618] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 184.395864][ T8618] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 184.840037][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'. [ 184.915601][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'. [ 186.013178][ T8667] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 186.123260][ T8674] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 186.274467][ T8674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.464077][ T8675] bond1: (slave veth5): Enslaving as an active interface with a down link [ 186.899128][ T8694] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 186.899128][ T8694] 3UH5rBn [ 186.969956][ T8701] IPVS: length: 15 != 8 [ 187.755986][ T8740] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 187.966243][ T8755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.012300][ T8740] 8021q: adding VLAN 0 to HW filter on device bond9 [ 188.052294][ T8756] netlink: 'syz.4.686': attribute type 8 has an invalid length. [ 188.094947][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.686'. [ 188.114976][ T8756] sch_fq: defrate 0 ignored. [ 188.572743][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.690'. [ 188.615971][ T8764] netlink: 128 bytes leftover after parsing attributes in process `syz.0.690'. [ 188.629846][ T8764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.018629][ T8779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.695'. [ 190.134562][ T8798] syzkaller0: entered promiscuous mode [ 190.140515][ T8798] syzkaller0: entered allmulticast mode [ 190.253892][ T8801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.703'. [ 190.320038][ T8724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.343081][ T8801] netlink: 116 bytes leftover after parsing attributes in process `syz.3.703'. [ 190.731192][ T8815] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 190.768274][ T8815] netlink: 224 bytes leftover after parsing attributes in process `syz.0.704'. [ 190.872856][ T8807] netlink: 'syz.2.706': attribute type 2 has an invalid length. [ 190.908327][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 190.922761][ T8819] netlink: 'syz.1.707': attribute type 2 has an invalid length. [ 190.941771][ T8819] netlink: 228 bytes leftover after parsing attributes in process `syz.1.707'. [ 191.244002][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 191.277994][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.709'. [ 191.532705][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 191.553308][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 191.575245][ T8840] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.714'. [ 191.607783][ T8843] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 191.846411][ T8843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.866355][ T8840] bond7: (slave veth0_to_bond): making interface the new active one [ 191.877555][ T8854] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 191.888980][ T8840] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.023873][ T8854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.090765][ T8858] netlink: 'syz.2.715': attribute type 8 has an invalid length. [ 192.107865][ T8858] sch_fq: defrate 0 ignored. [ 192.146471][ T8862] netlink: 'syz.4.712': attribute type 21 has an invalid length. [ 192.262278][ T8847] Cannot find set identified by id 0 to match [ 192.473144][ T8874] batman_adv: batadv0: Adding interface: dummy0 [ 192.495399][ T8874] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.556645][ T8874] batman_adv: batadv0: Interface activated: dummy0 [ 192.652560][ T8876] batadv0: mtu less than device minimum [ 192.660936][ T8876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.673999][ T8876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.685766][ T8876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.697491][ T8876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.709231][ T8876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.720993][ T8876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.732707][ T8876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.829130][ T8926] tipc: Started in network mode [ 193.834249][ T8926] tipc: Node identity b68ca039b4a1, cluster identity 4711 [ 193.842391][ T8926] tipc: Enabled bearer , priority 0 [ 193.850497][ T8926] syzkaller0: entered promiscuous mode [ 193.856796][ T8926] syzkaller0: entered allmulticast mode [ 193.865955][ T8926] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 193.911152][ T8926] tipc: Resetting bearer [ 194.062430][ T8925] tipc: Resetting bearer [ 194.120049][ T8925] tipc: Disabling bearer [ 194.219884][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.355247][ T8938] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 194.573251][ T8938] 8021q: adding VLAN 0 to HW filter on device bond7 [ 194.644312][ T8945] netlink: 'syz.3.740': attribute type 8 has an invalid length. [ 194.656422][ T8945] sch_fq: defrate 0 ignored. [ 195.140344][ T8976] hsr_slave_0: left promiscuous mode [ 195.173674][ T8976] hsr_slave_1: left promiscuous mode [ 195.306453][ T8984] __nla_validate_parse: 9 callbacks suppressed [ 195.306486][ T8984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'. [ 195.360273][ T8987] tipc: Enabling of bearer rejected, failed to enable media [ 195.628798][ T8997] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 195.732702][ T9002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'. [ 195.750660][ T8992] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 196.024886][ T9003] macvlan2: entered promiscuous mode [ 196.048858][ T9003] macvlan2: entered allmulticast mode [ 196.068250][ T9003] bond2: entered promiscuous mode [ 196.092385][ T9003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.141623][ T9003] bond2: left promiscuous mode [ 196.308650][ T9016] x_tables: ip_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 196.569787][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 196.625904][ T9026] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 196.703766][ T9026] 8021q: adding VLAN 0 to HW filter on device bond8 [ 196.818359][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 196.887816][ T9026] netlink: 'syz.3.756': attribute type 8 has an invalid length. [ 196.933140][ T9026] sch_fq: defrate 0 ignored. [ 197.732640][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.764'. [ 197.777537][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 198.061532][ T9106] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 198.070347][ T9106] netlink: 96 bytes leftover after parsing attributes in process `syz.3.767'. [ 198.087745][ T9106] netlink: 658 bytes leftover after parsing attributes in process `syz.3.767'. [ 198.098956][ T9106] netlink: 1 bytes leftover after parsing attributes in process `syz.3.767'. [ 198.396798][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.770'. [ 198.433401][ T9117] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 198.505848][ T9117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.534348][ T9117] netlink: 'syz.2.770': attribute type 8 has an invalid length. [ 198.574752][ T9117] sch_fq: defrate 0 ignored. [ 198.880654][ T9135] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 198.924638][ T9140] net_ratelimit: 12 callbacks suppressed [ 198.924658][ T9140] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 199.261797][ T9148] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 199.397074][ T9153] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 199.706411][ T9156] IPVS: lc: FWM 3 0x00000003 - no destination available [ 199.799462][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 200.641467][ T9184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.723774][ T9193] __nla_validate_parse: 7 callbacks suppressed [ 200.723792][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 201.405944][ T5648] Bluetooth: hci3: command 0x0406 tx timeout [ 201.412557][ T4952] Bluetooth: hci2: command 0x0406 tx timeout [ 201.419408][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 201.535051][ T9214] netlink: 'syz.2.792': attribute type 11 has an invalid length. [ 201.582238][ T9214] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 201.599658][ T9214] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.792'. [ 201.843787][ T9222] syzkaller1: entered promiscuous mode [ 201.855662][ T9222] syzkaller1: entered allmulticast mode [ 201.876589][ T9222] netlink: 209808 bytes leftover after parsing attributes in process `syz.4.796'. [ 201.889158][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'. [ 201.996986][ T9228] ip6gre2: entered promiscuous mode [ 202.003057][ T9228] ip6gre2: entered allmulticast mode [ 202.207209][ T9240] syzkaller0: entered promiscuous mode [ 202.220879][ T9240] syzkaller0: entered allmulticast mode [ 202.249892][ T9241] veth1_macvtap: left promiscuous mode [ 202.300398][ T9241] macsec0: entered promiscuous mode [ 202.336023][ T9241] macsec0: entered allmulticast mode [ 202.672495][ T9251] syzkaller1: entered promiscuous mode [ 202.701350][ T9251] syzkaller1: entered allmulticast mode [ 202.739591][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 202.782358][ T9251] netlink: 2 bytes leftover after parsing attributes in process `syz.2.801'. [ 202.933353][ T9258] tipc: Resetting bearer [ 203.009473][ T9261] dvmrp0: left allmulticast mode [ 203.493692][ T9270] vlan0: entered promiscuous mode [ 203.773524][ T9278] netlink: 393 bytes leftover after parsing attributes in process `syz.4.812'. [ 204.262262][ T9298] bridge0: port 3(batadv1) entered blocking state [ 204.298792][ T9298] bridge0: port 3(batadv1) entered disabled state [ 204.360647][ T9298] batadv1: entered allmulticast mode [ 204.393867][ T9298] batadv1: entered promiscuous mode [ 204.736448][ T9063] batman_adv: batadv1: IGMP Querier appeared [ 204.743859][ T9063] batman_adv: batadv1: MLD Querier appeared [ 205.010865][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 205.151760][ T9324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'. [ 205.774915][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 205.776607][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 206.007728][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 206.053745][ T9369] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.832'. [ 206.182539][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 206.200274][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.835'. [ 206.973735][ T9405] netlink: 'syz.3.843': attribute type 29 has an invalid length. [ 206.982088][ T5761] IPVS: starting estimator thread 0... [ 207.011488][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 207.020024][ T9408] bond10: option mode: invalid value (254) [ 207.032613][ T9408] bond10 (unregistering): Released all slaves [ 207.063372][ T9411] hsr0: entered promiscuous mode [ 207.076340][ T9405] netlink: 65 bytes leftover after parsing attributes in process `syz.3.843'. [ 207.097115][ T9407] IPVS: using max 40 ests per chain, 96000 per kthread [ 207.289509][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 207.645770][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.885935][ T9441] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 207.951554][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 207.968691][ T9441] bond3: entered promiscuous mode [ 207.974655][ T9441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.982565][ T9448] bond3: entered allmulticast mode [ 208.170735][ T9448] bond3: (slave bridge5): making interface the new active one [ 208.205153][ T9448] bridge5: entered promiscuous mode [ 208.229503][ T9448] bridge5: entered allmulticast mode [ 208.259212][ T9448] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 208.281098][ T9459] FAULT_INJECTION: forcing a failure. [ 208.281098][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 208.341106][ T9459] CPU: 0 UID: 0 PID: 9459 Comm: syz.0.857 Not tainted syzkaller #0 PREEMPT(full) [ 208.341128][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.341135][ T9459] Call Trace: [ 208.341141][ T9459] [ 208.341146][ T9459] dump_stack_lvl+0xe8/0x150 [ 208.341167][ T9459] should_fail_ex+0x412/0x560 [ 208.341185][ T9459] should_failslab+0xa8/0x100 [ 208.341199][ T9459] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 208.341216][ T9459] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 208.341237][ T9459] ? __alloc_skb+0x1d0/0x7d0 [ 208.341257][ T9459] __alloc_skb+0x1d0/0x7d0 [ 208.341276][ T9459] tipc_buf_acquire+0x2b/0xe0 [ 208.341299][ T9459] tipc_msg_build+0x8d7/0xf00 [ 208.341324][ T9459] ? __pfx_tipc_msg_build+0x10/0x10 [ 208.341343][ T9459] ? net_generic+0x1e/0x240 [ 208.341359][ T9459] ? net_generic+0x1e/0x240 [ 208.341379][ T9459] ? tipc_group_bc_cong+0x15f/0x210 [ 208.341400][ T9459] tipc_send_group_bcast+0x7db/0xad0 [ 208.341440][ T9459] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 208.341470][ T9459] ? irqentry_exit+0x218/0x8b0 [ 208.341490][ T9459] ? __pfx_woken_wake_function+0x10/0x10 [ 208.341526][ T9459] __tipc_sendmsg+0x33b/0x2bc0 [ 208.341549][ T9459] ? up_write+0x10c/0x410 [ 208.341575][ T9459] ? up_write+0x1ab/0x410 [ 208.341598][ T9459] ? __pfx___tipc_sendmsg+0x10/0x10 [ 208.341625][ T9459] ? process_measurement+0x195e/0x1c80 [ 208.341644][ T9459] ? aa_label_sk_perm+0x532/0x6e0 [ 208.341674][ T9459] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 208.341694][ T9459] ? __pfx_process_measurement+0x10/0x10 [ 208.341713][ T9459] ? tomoyo_check_open_permission+0x38e/0x470 [ 208.341737][ T9459] ? __lock_acquire+0x6b5/0x2cf0 [ 208.341793][ T9459] ? tipc_sendmsg+0x47/0x70 [ 208.341811][ T9459] ? __local_bh_enable_ip+0xd0/0x130 [ 208.341831][ T9459] tipc_sendmsg+0x55/0x70 [ 208.341847][ T9459] ____sys_sendmsg+0x972/0x9f0 [ 208.341872][ T9459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.341895][ T9459] ? import_iovec+0x73/0xa0 [ 208.341916][ T9459] ___sys_sendmsg+0x2a5/0x360 [ 208.341932][ T9459] ? __lock_acquire+0x6b5/0x2cf0 [ 208.341950][ T9459] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.342003][ T9459] ? __fget_files+0x2a/0x420 [ 208.342020][ T9459] ? __fget_files+0x3a0/0x420 [ 208.342048][ T9459] __sys_sendmmsg+0x27c/0x4e0 [ 208.342072][ T9459] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.342098][ T9459] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 208.342132][ T9459] ? __irq_exit_rcu+0xca/0x220 [ 208.342149][ T9459] ? lockdep_softirqs_on+0x11d/0x180 [ 208.342166][ T9459] ? handle_softirqs+0x715/0x840 [ 208.342188][ T9459] __x64_sys_sendmmsg+0xa0/0xc0 [ 208.342206][ T9459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.342223][ T9459] do_syscall_64+0x174/0x580 [ 208.342241][ T9459] ? clear_bhb_loop+0x40/0x90 [ 208.342261][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.342276][ T9459] RIP: 0033:0x7fade559ce59 [ 208.342292][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.342304][ T9459] RSP: 002b:00007fade37d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.342321][ T9459] RAX: ffffffffffffffda RBX: 00007fade5816090 RCX: 00007fade559ce59 [ 208.342332][ T9459] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 208.342343][ T9459] RBP: 00007fade37d5090 R08: 0000000000000000 R09: 0000000000000000 [ 208.342352][ T9459] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.342362][ T9459] R13: 00007fade5816128 R14: 00007fade5816090 R15: 00007ffe36726e88 [ 208.342390][ T9459] [ 208.768793][ T9462] @0: renamed from bond_slave_1 (while UP) [ 208.881573][ T9463] netlink: 'syz.3.860': attribute type 15 has an invalid length. [ 208.997308][ T9064] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.033439][ T9064] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.057852][ T9064] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.067345][ T9064] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.165834][ T9481] IPv6: NLM_F_REPLACE set, but no existing node found! [ 209.355284][ T9488] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 210.044197][ T9532] bond8: Unable to set up delay as MII monitoring is disabled [ 210.062351][ T9532] bond8 (unregistering): Released all slaves [ 210.348670][ T9505] [ 210.351041][ T9505] ====================================================== [ 210.358056][ T9505] WARNING: possible circular locking dependency detected [ 210.365090][ T9505] syzkaller #0 Not tainted [ 210.369509][ T9505] ------------------------------------------------------ [ 210.376538][ T9505] syz.2.872/9505 is trying to acquire lock: [ 210.382438][ T9505] ffff888026e9bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 210.391834][ T9505] [ 210.391834][ T9505] but task is already holding lock: [ 210.399184][ T9505] ffff888026e9b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 210.409356][ T9505] [ 210.409356][ T9505] which lock already depends on the new lock. [ 210.409356][ T9505] [ 210.419747][ T9505] [ 210.419747][ T9505] the existing dependency chain (in reverse order) is: [ 210.428748][ T9505] [ 210.428748][ T9505] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 210.437343][ T9505] blk_alloc_queue+0x546/0x680 [ 210.442626][ T9505] __blk_mq_alloc_disk+0x197/0x390 [ 210.448247][ T9505] nbd_dev_add+0x499/0xb50 [ 210.453174][ T9505] nbd_init+0x168/0x1f0 [ 210.457837][ T9505] do_one_initcall+0x250/0x870 [ 210.463108][ T9505] do_initcall_level+0x104/0x190 [ 210.468562][ T9505] do_initcalls+0x59/0xa0 [ 210.473407][ T9505] kernel_init_freeable+0x2a6/0x3e0 [ 210.479115][ T9505] kernel_init+0x1d/0x1d0 [ 210.483956][ T9505] ret_from_fork+0x514/0xb70 [ 210.489052][ T9505] ret_from_fork_asm+0x1a/0x30 [ 210.494323][ T9505] [ 210.494323][ T9505] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 210.501523][ T9505] fs_reclaim_acquire+0x71/0x100 [ 210.506970][ T9505] __kmalloc_cache_node_noprof+0x46/0x6b0 [ 210.513199][ T9505] create_worker+0x113/0x7e0 [ 210.518300][ T9505] workqueue_prepare_cpu+0xe4/0x170 [ 210.524009][ T9505] cpuhp_invoke_callback+0x445/0x860 [ 210.529801][ T9505] _cpu_up+0x2ce/0x5b0 [ 210.534382][ T9505] cpu_up+0x1d2/0x220 [ 210.538867][ T9505] cpuhp_bringup_mask+0xb2/0x1a0 [ 210.544316][ T9505] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 210.550625][ T9505] bringup_nonboot_cpus+0x17/0x30 [ 210.556164][ T9505] smp_init+0x32/0x110 [ 210.560759][ T9505] kernel_init_freeable+0x288/0x3e0 [ 210.566489][ T9505] kernel_init+0x1d/0x1d0 [ 210.571338][ T9505] ret_from_fork+0x514/0xb70 [ 210.576449][ T9505] ret_from_fork_asm+0x1a/0x30 [ 210.581724][ T9505] [ 210.581724][ T9505] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 210.589444][ T9505] cpus_read_lock+0x42/0x160 [ 210.594551][ T9505] static_key_slow_inc+0x12/0x30 [ 210.600000][ T9505] nbd_genl_reconfigure+0x132f/0x1ea0 [ 210.605889][ T9505] genl_family_rcv_msg_doit+0x22a/0x330 [ 210.611961][ T9505] genl_rcv_msg+0x61c/0x7a0 [ 210.616975][ T9505] netlink_rcv_skb+0x232/0x4b0 [ 210.622247][ T9505] genl_rcv+0x28/0x40 [ 210.626736][ T9505] netlink_unicast+0x75c/0x8e0 [ 210.632002][ T9505] netlink_sendmsg+0x813/0xb40 [ 210.637274][ T9505] ____sys_sendmsg+0x972/0x9f0 [ 210.642545][ T9505] ___sys_sendmsg+0x2a5/0x360 [ 210.647743][ T9505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 210.653187][ T9505] do_syscall_64+0x174/0x580 [ 210.658284][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.664686][ T9505] [ 210.664686][ T9505] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 210.672322][ T9505] __mutex_lock+0x1a3/0x1550 [ 210.677434][ T9505] nbd_queue_rq+0x37b/0x1100 [ 210.682546][ T9505] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 210.688613][ T9505] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 210.695453][ T9505] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 210.701949][ T9505] blk_mq_run_hw_queue+0x348/0x4f0 [ 210.707565][ T9505] blk_mq_dispatch_list+0xd16/0xe10 [ 210.713272][ T9505] blk_mq_flush_plug_list+0x48d/0x570 [ 210.719148][ T9505] __blk_flush_plug+0x3ed/0x4d0 [ 210.724506][ T9505] __submit_bio+0x28d/0x580 [ 210.729518][ T9505] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 210.735659][ T9505] block_read_full_folio+0x7b7/0x830 [ 210.741479][ T9505] filemap_read_folio+0x137/0x3b0 [ 210.747014][ T9505] do_read_cache_folio+0x358/0x590 [ 210.752636][ T9505] read_part_sector+0xb6/0x2b0 [ 210.757907][ T9505] adfspart_check_ICS+0xb1/0x960 [ 210.763359][ T9505] bdev_disk_changed+0x817/0x1770 [ 210.768892][ T9505] blkdev_get_whole+0x380/0x510 [ 210.774257][ T9505] bdev_open+0x31e/0xd30 [ 210.779011][ T9505] blkdev_open+0x470/0x610 [ 210.783940][ T9505] do_dentry_open+0x822/0x13a0 [ 210.789211][ T9505] vfs_open+0x3b/0x340 [ 210.793786][ T9505] path_openat+0x2e08/0x3860 [ 210.798884][ T9505] do_file_open+0x23e/0x4a0 [ 210.803911][ T9505] do_sys_openat2+0x113/0x200 [ 210.809096][ T9505] __x64_sys_openat+0x138/0x170 [ 210.814454][ T9505] do_syscall_64+0x174/0x580 [ 210.819552][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.825952][ T9505] [ 210.825952][ T9505] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 210.833156][ T9505] __mutex_lock+0x1a3/0x1550 [ 210.838259][ T9505] nbd_queue_rq+0xc6/0x1100 [ 210.843271][ T9505] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 210.849326][ T9505] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 210.856162][ T9505] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 210.862649][ T9505] blk_mq_run_hw_queue+0x348/0x4f0 [ 210.868264][ T9505] blk_mq_dispatch_list+0xd16/0xe10 [ 210.873986][ T9505] blk_mq_flush_plug_list+0x48d/0x570 [ 210.879865][ T9505] __blk_flush_plug+0x3ed/0x4d0 [ 210.885230][ T9505] __submit_bio+0x28d/0x580 [ 210.890242][ T9505] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 210.896393][ T9505] block_read_full_folio+0x7b7/0x830 [ 210.902185][ T9505] filemap_read_folio+0x137/0x3b0 [ 210.907718][ T9505] do_read_cache_folio+0x358/0x590 [ 210.913342][ T9505] read_part_sector+0xb6/0x2b0 [ 210.918615][ T9505] adfspart_check_ICS+0xb1/0x960 [ 210.924064][ T9505] bdev_disk_changed+0x817/0x1770 [ 210.929594][ T9505] blkdev_get_whole+0x380/0x510 [ 210.934977][ T9505] bdev_open+0x31e/0xd30 [ 210.939725][ T9505] blkdev_open+0x470/0x610 [ 210.944652][ T9505] do_dentry_open+0x822/0x13a0 [ 210.949924][ T9505] vfs_open+0x3b/0x340 [ 210.954501][ T9505] path_openat+0x2e08/0x3860 [ 210.959610][ T9505] do_file_open+0x23e/0x4a0 [ 210.964623][ T9505] do_sys_openat2+0x113/0x200 [ 210.969805][ T9505] __x64_sys_openat+0x138/0x170 [ 210.975684][ T9505] do_syscall_64+0x174/0x580 [ 210.980783][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.987209][ T9505] [ 210.987209][ T9505] -> #1 (set->srcu){.+.+}-{0:0}: [ 210.994331][ T9505] __synchronize_srcu+0xca/0x300 [ 210.999781][ T9505] elevator_switch+0x1e8/0x7a0 [ 211.005052][ T9505] elevator_change+0x2cc/0x450 [ 211.010324][ T9505] elevator_set_default+0x36c/0x430 [ 211.016034][ T9505] blk_register_queue+0x3e9/0x4e0 [ 211.021567][ T9505] __add_disk+0x677/0xd50 [ 211.026415][ T9505] add_disk_fwnode+0xfb/0x480 [ 211.031598][ T9505] nbd_dev_add+0x72c/0xb50 [ 211.036521][ T9505] nbd_init+0x168/0x1f0 [ 211.041181][ T9505] do_one_initcall+0x250/0x870 [ 211.046449][ T9505] do_initcall_level+0x104/0x190 [ 211.051915][ T9505] do_initcalls+0x59/0xa0 [ 211.056772][ T9505] kernel_init_freeable+0x2a6/0x3e0 [ 211.062487][ T9505] kernel_init+0x1d/0x1d0 [ 211.067330][ T9505] ret_from_fork+0x514/0xb70 [ 211.072434][ T9505] ret_from_fork_asm+0x1a/0x30 [ 211.077711][ T9505] [ 211.077711][ T9505] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 211.085524][ T9505] __lock_acquire+0x15a5/0x2cf0 [ 211.090895][ T9505] lock_acquire+0x106/0x350 [ 211.095908][ T9505] __mutex_lock+0x1a3/0x1550 [ 211.101008][ T9505] elevator_change+0x1b3/0x450 [ 211.106282][ T9505] elevator_set_none+0xb5/0x140 [ 211.111636][ T9505] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 211.117952][ T9505] nbd_start_device+0x17f/0xb10 [ 211.123318][ T9505] nbd_genl_connect+0x165b/0x1cf0 [ 211.128855][ T9505] genl_family_rcv_msg_doit+0x22a/0x330 [ 211.134915][ T9505] genl_rcv_msg+0x61c/0x7a0 [ 211.139927][ T9505] netlink_rcv_skb+0x232/0x4b0 [ 211.145201][ T9505] genl_rcv+0x28/0x40 [ 211.149691][ T9505] netlink_unicast+0x75c/0x8e0 [ 211.154958][ T9505] netlink_sendmsg+0x813/0xb40 [ 211.160228][ T9505] ____sys_sendmsg+0x972/0x9f0 [ 211.165498][ T9505] ___sys_sendmsg+0x2a5/0x360 [ 211.170681][ T9505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.176128][ T9505] do_syscall_64+0x174/0x580 [ 211.181224][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.187622][ T9505] [ 211.187622][ T9505] other info that might help us debug this: [ 211.187622][ T9505] [ 211.197835][ T9505] Chain exists of: [ 211.197835][ T9505] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 211.197835][ T9505] [ 211.211563][ T9505] Possible unsafe locking scenario: [ 211.211563][ T9505] [ 211.218998][ T9505] CPU0 CPU1 [ 211.224348][ T9505] ---- ---- [ 211.229697][ T9505] lock(&q->q_usage_counter(io)#50); [ 211.235067][ T9505] lock(fs_reclaim); [ 211.241553][ T9505] lock(&q->q_usage_counter(io)#50); [ 211.249440][ T9505] lock(&q->elevator_lock); [ 211.254016][ T9505] [ 211.254016][ T9505] *** DEADLOCK *** [ 211.254016][ T9505] [ 211.262149][ T9505] 6 locks held by syz.2.872/9505: [ 211.267167][ T9505] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 211.275348][ T9505] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 211.284312][ T9505] #2: ffff888026e8f1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 211.295704][ T9505] #3: ffff888026e8f0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 211.306664][ T9505] #4: ffff888026e9b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 211.317273][ T9505] #5: ffff888026e9b878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 211.328137][ T9505] [ 211.328137][ T9505] stack backtrace: [ 211.334014][ T9505] CPU: 1 UID: 0 PID: 9505 Comm: syz.2.872 Not tainted syzkaller #0 PREEMPT(full) [ 211.334029][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 211.334037][ T9505] Call Trace: [ 211.334046][ T9505] [ 211.334053][ T9505] dump_stack_lvl+0xe8/0x150 [ 211.334069][ T9505] print_circular_bug+0x2e1/0x300 [ 211.334089][ T9505] check_noncircular+0x12e/0x150 [ 211.334107][ T9505] __lock_acquire+0x15a5/0x2cf0 [ 211.334129][ T9505] ? elevator_change+0x1b3/0x450 [ 211.334143][ T9505] lock_acquire+0x106/0x350 [ 211.334156][ T9505] ? elevator_change+0x1b3/0x450 [ 211.334175][ T9505] __mutex_lock+0x1a3/0x1550 [ 211.334189][ T9505] ? elevator_change+0x1b3/0x450 [ 211.334204][ T9505] ? rcu_is_watching+0x15/0xb0 [ 211.334221][ T9505] ? work_grab_pending+0x3d1/0x990 [ 211.334234][ T9505] ? elevator_change+0x1b3/0x450 [ 211.334250][ T9505] ? __pfx___mutex_lock+0x10/0x10 [ 211.334261][ T9505] ? enable_work+0x17f/0x230 [ 211.334277][ T9505] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.334291][ T9505] ? __cancel_work_sync+0xf7/0x110 [ 211.334306][ T9505] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 211.334325][ T9505] elevator_change+0x1b3/0x450 [ 211.334343][ T9505] elevator_set_none+0xb5/0x140 [ 211.334356][ T9505] ? __pfx_elevator_set_none+0x10/0x10 [ 211.334373][ T9505] ? xa_load+0x1db/0x210 [ 211.334389][ T9505] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 211.334412][ T9505] ? kernfs_add_one+0x477/0x5c0 [ 211.334429][ T9505] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 211.334450][ T9505] ? sysfs_add_file_mode_ns+0x259/0x300 [ 211.334466][ T9505] nbd_start_device+0x17f/0xb10 [ 211.334487][ T9505] ? device_create_file+0xf4/0x1b0 [ 211.334507][ T9505] nbd_genl_connect+0x165b/0x1cf0 [ 211.334524][ T9505] ? __pfx___nla_validate_parse+0x10/0x10 [ 211.334545][ T9505] ? __pfx_nbd_genl_connect+0x10/0x10 [ 211.334561][ T9505] ? rcu_is_watching+0x15/0xb0 [ 211.334578][ T9505] ? trace_kmalloc+0x2a/0xf0 [ 211.334595][ T9505] ? __nla_parse+0x40/0x60 [ 211.334612][ T9505] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 211.334629][ T9505] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 211.334649][ T9505] genl_family_rcv_msg_doit+0x22a/0x330 [ 211.334670][ T9505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.334689][ T9505] ? __lock_acquire+0x6b5/0x2cf0 [ 211.334707][ T9505] genl_rcv_msg+0x61c/0x7a0 [ 211.334724][ T9505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.334741][ T9505] ? __pfx_nbd_genl_connect+0x10/0x10 [ 211.334761][ T9505] netlink_rcv_skb+0x232/0x4b0 [ 211.334777][ T9505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.334798][ T9505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.334817][ T9505] ? down_read+0x270/0x2e0 [ 211.334837][ T9505] ? genl_rcv+0xd/0x40 [ 211.334853][ T9505] genl_rcv+0x28/0x40 [ 211.334869][ T9505] netlink_unicast+0x75c/0x8e0 [ 211.334884][ T9505] netlink_sendmsg+0x813/0xb40 [ 211.334902][ T9505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.334916][ T9505] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.334937][ T9505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.334954][ T9505] ____sys_sendmsg+0x972/0x9f0 [ 211.334971][ T9505] ? __might_fault+0xaf/0x130 [ 211.334988][ T9505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.335006][ T9505] ? import_iovec+0x73/0xa0 [ 211.335020][ T9505] ___sys_sendmsg+0x2a5/0x360 [ 211.335035][ T9505] ? __lock_acquire+0x6b5/0x2cf0 [ 211.335048][ T9505] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.335066][ T9505] ? futex_wake+0x4ac/0x580 [ 211.335096][ T9505] ? __fget_files+0x2a/0x420 [ 211.335110][ T9505] ? __fget_files+0x3a0/0x420 [ 211.335129][ T9505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.335143][ T9505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.335161][ T9505] ? rcu_is_watching+0x15/0xb0 [ 211.335177][ T9505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.335192][ T9505] do_syscall_64+0x174/0x580 [ 211.335204][ T9505] ? trace_irq_disable+0x3b/0x140 [ 211.335223][ T9505] ? clear_bhb_loop+0x40/0x90 [ 211.335238][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.335250][ T9505] RIP: 0033:0x7f8c63f9ce59 [ 211.335265][ T9505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.335275][ T9505] RSP: 002b:00007f8c64dc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.335289][ T9505] RAX: ffffffffffffffda RBX: 00007f8c64215fa0 RCX: 00007f8c63f9ce59 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 211.335300][ T9505] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 211.335308][ T9505] RBP: 00007f8c64032d6f R08: 0000000000000000 R09: 0000000000000000 [ 211.335316][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.335325][ T9505] R13: 00007f8c64216038 R14: 00007f8c64215fa0 R15: 00007ffc6662bc48 [ 211.335342][ T9505] [ 211.896022][ T50] block nbd1: Receive control failed (result -32) [ 211.903444][ T50] block nbd1: Receive control failed (result -32) [ 212.483043][ T9545] bridge0: port 3(syz_tun) entered disabled state [ 212.497176][ T9545] syz_tun (unregistering): left allmulticast mode [ 212.527250][ T9545] syz_tun (unregistering): left promiscuous mode [ 212.544157][ T9545] bridge0: port 3(syz_tun) entered disabled state [ 212.991380][ T9060] bridge_slave_1: left allmulticast mode [ 212.997240][ T9060] bridge_slave_1: left promiscuous mode [ 213.002960][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.013661][ T9060] bridge_slave_0: left allmulticast mode [ 213.020757][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.150646][ T9060] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 213.160215][ T9060] bridge5 (unregistering): left promiscuous mode [ 213.166644][ T9060] bridge5 (unregistering): left allmulticast mode [ 213.184198][ T9060] bond0 (unregistering): (slave 07): Releasing backup interface [ 213.193772][ T9060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.203506][ T9060] bond0 (unregistering): Released all slaves [ 213.213535][ T9060] bond1 (unregistering): (slave veth5): Releasing active interface [ 213.222852][ T9060] bond1 (unregistering): Released all slaves [ 213.234627][ T9060] bond2 (unregistering): Released all slaves [ 213.245912][ T9060] bond3 (unregistering): Released all slaves [ 213.298227][ T9060] tipc: Disabling bearer [ 213.313267][ T9060] tipc: Left network mode [ 213.558706][ T9060] hsr_slave_0: left promiscuous mode [ 213.564753][ T9060] hsr_slave_1: left promiscuous mode [ 213.571718][ T9060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.763424][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.979258][ T9060] IPVS: stop unused estimator thread 0... [ 214.082140][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 214.101684][ T9060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 214.112022][ T9060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.182513][ T9060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 214.193754][ T9060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.224544][ T9060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 214.235944][ T9060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.302693][ T9060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 214.314114][ T9060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.452693][ T9060] bridge_slave_1: left allmulticast mode [ 214.458518][ T9060] bridge_slave_1: left promiscuous mode [ 214.465287][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.476844][ T9060] bridge_slave_0: left allmulticast mode [ 214.482759][ T9060] bridge_slave_0: left promiscuous mode [ 214.489340][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.554679][ T9060] bond1 (unregistering): (slave vti0): Releasing backup interface [ 214.563010][ T9060] vti0 (unregistering): left promiscuous mode [ 214.587300][ T9060] bond3 (unregistering): (slave geneve2): Releasing active interface [ 214.632707][ T9060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.643501][ T9060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.653547][ T9060] bond0 (unregistering): Released all slaves [ 214.662634][ T9060] bond1 (unregistering): Released all slaves [ 214.674455][ T9060] bond2 (unregistering): Released all slaves [ 214.689127][ T9060] bond3 (unregistering): Released all slaves [ 214.700247][ T9060] bond4 (unregistering): Released all slaves [ 214.711415][ T9060] bond5 (unregistering): Released all slaves [ 214.722654][ T9060] bond6 (unregistering): Released all slaves [ 214.735063][ T9060] bond7 (unregistering): Released all slaves [ 214.749040][ T9060] bond8 (unregistering): Released all slaves [ 214.763901][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 214.842882][ T9060] tipc: Left network mode [ 214.869606][ T9060] IPVS: stopping backup sync thread 8178 ... [ 215.142597][ T9060] hsr_slave_0: left promiscuous mode [ 215.148611][ T9060] hsr_slave_1: left promiscuous mode [ 215.154343][ T9060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.162497][ T9060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.173172][ T9060] veth1_macvtap: left promiscuous mode [ 215.181270][ T9060] veth0_macvtap: left promiscuous mode [ 215.276831][ T9060] team0 (unregistering): Port device team_slave_1 removed [ 215.350530][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 215.622406][ T9060] IPVS: stop unused estimator thread 0... [ 215.713115][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 216.034909][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 216.335740][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 216.643909][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8