last executing test programs: 3.540084501s ago: executing program 0 (id=3400): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180002005aab7014c01d565c71e5df85df9a5100600000000000"], 0x18}}, 0x0) 3.419678403s ago: executing program 0 (id=3402): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="5d3cfce4d86ab263e632cf1b03bdec55632fd4ef75445511dbf3488d738332bdca16f8a8947689f0160097547f18c63e770912f2b5eb0491ec0c4ce5d7e905b6a6e01bf31480b0f64859b5ddb81caa385113549bb09699008d74dad0a34b91c70ba79125", @ANYRES8=r0], &(0x7f0000000440)='GPL\x00', 0x800, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0, 0x6], 0x0, 0x0, 0x2}}, 0x40) sendfile(r1, r0, 0x0, 0x10000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x7c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000480)={r6, 0x1, 0x6, @remote}, 0x10) close(r4) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x46001) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000100039040200"/20, @ANYRES32=r8, @ANYBLOB="4010000000410400280010b000000900677265001c000280060011004e22000003000000060010004e200000040014003283570195bbb387d8813912e3f29e6273b66a3e01f7322a8a67d19b77907d0dc316a3d51f"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0xf03a0005) unshare(0x6000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x80000) setsockopt(r7, 0x0, 0xfffffffb, &(0x7f0000000540)="fc14838943cab823226df95056ba95d9c568e076cb1d22ef988089cd511ca5101a96f62c66410d84af0aeac2a374f31cb2ba26c3b18d318dd67bd39bb38e25edda0c157e16b044e2abb4f38c2881991877c21cd48c9a51544008af240841102ac6b01eef5e945bc7f27f71d6e3b5bf1888edf3d3608d892cbd870765f9b09e0903a28fa9689fa14f905d4de920609acec15b94ed19fb863b1c033109f9ba1060449bd8be62e3d99e963910456589cf266f76cf320d989830a3887925d4f2e0e456d31452358aa39750bb3a4db10da2d23eab18", 0xd3) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010053797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4008880}, 0x24008400) socket$nl_route(0x10, 0x3, 0x0) 2.247192972s ago: executing program 0 (id=3412): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x9, '\x00', r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x7, 0x0, 0xdad1124f55525050}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x9, '\x00', r0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x7, 0x0, 0xdad1124f55525050}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) (async) 2.161453521s ago: executing program 4 (id=3413): r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e1500000000ffffff00000000000000002e00"/69, @ANYRES8=r0], 0x0, 0x46}, 0x28) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68090}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf250a1453ac5f000000000000000000080018004e234e6314000200fc0200000000000000000000000000011400010020010000000000f0ffffffffffffff014e843525deb0817ce45a669365799b5b2b0957fbaedfc63cca755863cd16fa54e0ff"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0xb, &(0x7f0000000940)=ANY=[@ANYRES8], &(0x7f0000000140)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b5", 0x75}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r4, 0xfffff000) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8811) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0xb, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="f57e170e33313a01f5f105330280e374b5c43a1b803f08d8816fe8a7a7cca8ea1f75b45928b9f9b1817da08f", 0x2c}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df94beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e46baca4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a2092122000000000000000000b7a00000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_int(r6, 0x1, 0x3b, &(0x7f0000000000)=0x7fffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.758586321s ago: executing program 1 (id=3414): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x84}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0xd272ec7806a7567d) 1.638557137s ago: executing program 0 (id=3416): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x16, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ff9d, 0x220cc}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x78}}, 0xc080) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x6}}]}]}]}, 0x5c}}, 0x40000040) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200902, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'rose0\x00', @local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x5, 0xeea1, 0x2a, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x80, 0x5, 0x8000}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000) 1.621854392s ago: executing program 1 (id=3417): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x3b, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) 1.543938348s ago: executing program 4 (id=3419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 1.491085853s ago: executing program 3 (id=3420): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x800, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$packet(r0, &(0x7f0000000200)=""/162, 0xa2, 0x2, 0x0, 0x0) 1.388503496s ago: executing program 4 (id=3422): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000240)) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e", 0xad}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$inet(r1, &(0x7f00000001c0)=""/17, 0x11, 0x160, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f00000005c0)=""/235, 0xeb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/244, 0xf4}], 0x1}}], 0x2, 0x0, 0x0) 1.295234052s ago: executing program 0 (id=3424): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) pread64(r0, &(0x7f00000000c0)=""/207, 0xcf, 0xf5c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xffffff21}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xffffff21}, 0x94) 1.291867914s ago: executing program 2 (id=3425): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20022, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xd, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic="b2"]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_emit_ethernet(0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbdfb6bd878b41ce2e89bd07e0bbbbbbbbbbbbbbbbbb88b5117a30dee9376a27"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x21, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x6]}]}, 0x74}, 0x1, 0x0, 0x0, 0x894}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000080)={0x21, 0x1}) socket(0x1e, 0x4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x0, 0x8001, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x8, 0x2000752, 0x0, 0x3, 0x5, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x3, 0x33b, 0x5, 0x20006, 0x5, 0x10001, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x0, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000004001000600000000000000000000000400000007000000000000000000000000000000090000000000000002000000000000000000000000000000000000000000000080270000000000000000000000000000820e00000000000006000000000000000900000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000600000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000400000000000000ba0000000000000008000000000000000000000000000000000000000000000008000000000000000000000000000000f12e0000000000000600008000000000f7ffffffffffffff0000000000000000000000000000000000080000000000000000000000000000ee0600000000000058000000000000000803000000000000000000000000000000000000000000000210000000000000000000000000000002000000000000000a000000000000000180000000000000000000000000000000000000000000000200"/424]) 1.253093519s ago: executing program 3 (id=3426): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc804, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x140, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, @alu={0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 1.146680398s ago: executing program 0 (id=3427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f00000002c0)="22879d4a76", 0x5}, {&(0x7f0000000200)="ea1060", 0x3}, {&(0x7f0000000240)="43e96c", 0x3}], 0x3, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xa, 0x1, 0x8, 0x80010, r3, 0x6, '\x00', r4, r5, 0x4, 0x800000, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r5, &(0x7f00000003c0)=[{&(0x7f00000002c0)="22879d4a76", 0x5}, {&(0x7f0000000200)="ea1060", 0x3}, {&(0x7f0000000240)="43e96c", 0x3}], 0x3, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xa, 0x1, 0x8, 0x80010, r3, 0x6, '\x00', r4, r5, 0x4, 0x800000, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) 1.143971731s ago: executing program 2 (id=3428): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x76}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fc", 0xc3}], 0x1}, 0x4040004) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000006a00010025bd7000fddbdf250000f4ffffffffffffff010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004800) 1.06390894s ago: executing program 4 (id=3429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}}, 0x20040000) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000500)={r1, r1, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x2, 0x8, 'syz1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff68) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) 1.043285667s ago: executing program 3 (id=3430): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000440704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c"], 0x68}, 0x40400c4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180), 0x2ae, 0x0) read$nci(r2, &(0x7f0000000100)=""/140, 0x8c) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000300)={'dvmrp1\x00', {0x2, 0x0, @private}}) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) write(r3, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) r5 = accept4$tipc(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000240)={0x3, 'bond_slave_0\x00', {0x6}, 0x6}) 929.368723ms ago: executing program 2 (id=3431): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000001600)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1"], 0x254}}, 0x0) 904.342629ms ago: executing program 3 (id=3432): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb}, 0x10}, 0x94) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000010c0)=[{{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x40, 0xfffff83a, 0xd, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x700, 0x8000, 0x6, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00012cbd7000fedbdf250d000000200001800800030000000000140002007663616e3000000000000000000000000c00018008000100", @ANYRES32=r13, @ANYBLOB="53e15ab5f066784a77156d2191aeb9794f97cee11337776eec3a750879acf43600c71b8ebcb842926ab7eb34b4ae30ffbdf97c1010e2c53870c4a88d9c07d263cea93a70d0e1ae6bd9a4737a45651c7da0c791cc7f26d8799383d19e9f1ac6471949d3e493bcda3ba4f9a5cfb78b1ed7b53f6043b1fda5655f97a7a7e6d5ffe2984c10aa4003e8f54d48589943f798d6acded282efdf4bafc2027a2124ab3bee1fc774ec111b1e30548cfe597ec9718d073a849508f74e54592620bfcebf3cf63197dccd21d02d1f0a76eba63eba33aa0559d6bba22b"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x2000001c) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 835.347221ms ago: executing program 1 (id=3433): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4082, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0x1, 0xe9, 0x5, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xf, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0xfffffffd, 0x3, 0x2, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x806, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r12, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r13, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) 710.050082ms ago: executing program 4 (id=3434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "870f00", "3d8efa05fdffffff"}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e1406", 0x1b}], 0x1}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) (async) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) (async) ioctl$sock_proto_private(r2, 0x8b2c, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, &(0x7f0000002a00)}, 0x5}], 0x1, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)="2ea6", 0x2}], 0x1) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010100000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) 612.766374ms ago: executing program 2 (id=3435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xe5df1504f696f33b}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000015c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, r4, 0xa19666f64a5f03b5, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000015}, 0x80) r7 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="14000575577500001008a8245c00", 0xe}], 0x1}, 0x200040d5) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 456.022177ms ago: executing program 4 (id=3436): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 427.527699ms ago: executing program 3 (id=3437): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)={0x313c, 0x3f, 0x107, 0x70bd2d, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x3110, 0x2, 0x0, 0x1, [@nested={0x310c, 0x123, 0x0, 0x1, [@typed={0x1004, 0x11f, 0x0, 0x0, @binary="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"}, @nested={0x10bc, 0xbe, 0x0, 0x1, [@typed={0x4, 0x49}, @generic="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", @generic="de13b3dd09d67b7ea4b58d56d8402f7f82e0eac19797e5ef8e0f0fc3ea303b919243b28f8654fc5f907a0866792cd498aab548559c17e41031fa336340d259fdffaf2a76d382dc5712f01acf85f07bc89e1a8b1429506357c5585c7f01d0daffe4d0d5bf1b3476209b335fcd068666ced19b3dab46f3bd7591385d801a38aadac8bf313236bd7c5669b87e94793a2386603210b69dd1fd0f", @typed={0x8, 0x37, 0x0, 0x0, @u32=0x1e}, @typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x8, 0x12, 0x0, 0x0, @pid=r1}, @generic="799113be9f3af8451c749c7362a9", @generic="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", @generic="c7f2f029102b4d7c596fdaab707358bdc8ae98d5b255d6b65745da8337a30b2df6a7d1438ee66664024f0cdffbbea837f8fd"]}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x313c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 366.519955ms ago: executing program 2 (id=3438): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d16ab55}]}]}], {0x14}}, 0xc0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) (async) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713", 0x32}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1", 0x5a}, {&(0x7f0000000840)="396b0b2d92a081c10b00000001000000015ae169ced3036d77380fdfb4a449f37d3b3b69f6306c0a52aac4d6243e7bbe7faa4a1b07ee8d91d06cdc44210faf7d05755236638f2feb", 0x48}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813df407ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795736ed45429621b51fc18dc63218e25f3e78d6308e06b7e9be8620ae26f73aed8774085f407be383588ab40b4a484b7e58eb3f4fa4986201c553184dc50df0da7dd227dc629e5c4eca6a85653091218ed2ee524c822a0e24ea255037fca7ce779468e0695b0ea7ba0075572cf8306993b047c1c36a5e64ae6c3dea6278c8d5a987d2a493a3f070f6241", 0xc7}, {&(0x7f00000002c0)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff5708c88924e4ff8a5076d28e610007b056699eeb30f42451b99257e4e19157baff11811710a05bbd87e7911c77ff0172fcd4e83bd2644d6c92acde5cdcfa70eefccc0d73b31c7458c7b26bf7372cc551e7b2aa542261c950e2c885c8166fc4706575f7024f91acee2072768c0e2803c08d0f9b403b2faecba3d1fa1", 0xc9}], 0x6}}], 0x1, 0x40080) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 303.230463ms ago: executing program 1 (id=3439): syz_emit_ethernet(0x86, &(0x7f0000000c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0d0802", 0x0, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x1, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @pad1]}, @dstopts={0x84}]}}}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'rose0\x00', @ifru_ivalue=0x8a}}) 236.026952ms ago: executing program 3 (id=3440): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x3000, 0x100000000000000d) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="00000a00fada31e19c000000000000e4ffff00"/35, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r16, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="00042abd7000ffdbdf2505000000640007800c00018008000100", @ANYRES8=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0001802880f47bed872c0b2008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="700007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008020100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="340007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x11c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000844) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000004c0), 0x0, 0xf) 155.057765ms ago: executing program 2 (id=3441): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004390476e21008ffc86ef6d430d9d4ab41833bc4b4c75e451913e2ad181ad15a4cf882c47e0db687ca078aa9705c4bd0e3067b4d8fbb18f8221ab3abdd02c3f75a9f424dd8f1963a994b271ace7c907deceaade3e4f16d9284e573316a1f60edb67fa3a54590288e087f5c66aa0e5abc36be210000e096779ecb5d"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004390476e21008ffc86ef6d430d9d4ab41833bc4b4c75e451913e2ad181ad15a4cf882c47e0db687ca078aa9705c4bd0e3067b4d8fbb18f8221ab3abdd02c3f75a9f424dd8f1963a994b271ace7c907deceaade3e4f16d9284e573316a1f60edb67fa3a54590288e087f5c66aa0e5abc36be210000e096779ecb5d"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x7f, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'bond_slave_1\x00', 0x1}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'bond_slave_1\x00', 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/4099, 0x1003}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) tee(r3, r7, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="0dd78053ea3dd64200"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="0dd78053ea3dd64200"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES64=r7], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000007f000000000700000a20000000000a01020000000000000000010000000900010073797a300000000094000000160a01000000000000000000010000000900010073797a30000000000900020073797a310008000140000000000800024000e6000004540003801400010070696d3672656731000000000000000014000100776c616e3000000000000000000000001400010070696d367265673100000000000000001400010076657468310000000000000000b41caaf2000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000001c000380180003801400010070696d36726567310000000000000000140000001000010000000000000000000000000a"], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r9, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r11, r12+60000000}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r13, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000880}, 0x8040) socket$nl_audit(0x10, 0x3, 0x9) socket$phonet(0x23, 0x2, 0x1) 77.835926ms ago: executing program 1 (id=3442): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r4, &(0x7f0000000200)='THAWED\x00', 0x7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x3, 0x2, 0x8001, 0x0, 0x9, 0xc7, 0x9d8f, 0x8}, &(0x7f0000000600)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000000d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x22, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 0s ago: executing program 1 (id=3443): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a47", 0x43}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000280)=""/87, 0x57}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfc76) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) (async) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYRES16=0x0], 0x48) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) close(0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r2, @ANYRES16=r6, @ANYBLOB="000225bd6000fbdbdf256a0000608e97dd007ef5253692de7758914df29f2e61f03a74f26551351e9beaf7dfacb16938545574a5eed13eae09ace2215bcea86b11356c27c65abe5bc3220d492737e47bfe5460360ad6a518393fa932ac2dc947802b036d37264200d382831c52f202b3d8326cafdd0dfc239c753baad2ba82", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000500d20009000000"], 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg=0x7}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x1, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000540)) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="380000001800000000000000", @ANYRES32=r7, @ANYBLOB="6f9055d44446a39b2614b89db6f69576e25961330fbc7cc50f2ecf9f0b78d51069408b1675700cc805f87869fff152e80800e37127f7f7cc799b2ed3dc12c9138385e88e5301ee20ccf960704c8ced4b63e0e10000000000000000fcffffff006ea43a6d0938ab9a04ba1a67e71c1f084631228f30dfc4ab16bf631169fc25f75c3648f84bde6b95569cb2b8925dd50e805315bfb44fdf4106586cd37ae7c9d21e90", @ANYRES64=r8], 0x6) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'dummy0\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000100000f0300eb0200000000000000000300d023eef3057debfe2e2e00"/68], 0x0, 0x44, 0x0, 0x1}, 0x28) (async) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): ds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 341.051526][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 341.144622][T15290] netlink: 'syz.2.2373': attribute type 1 has an invalid length. [ 341.238378][T15299] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2375'. [ 341.246282][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2373'. [ 341.326340][T15290] 8021q: adding VLAN 0 to HW filter on device bond11 [ 341.453993][T15316] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 341.490808][T15316] netlink: 'syz.3.2378': attribute type 2 has an invalid length. [ 341.652150][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 341.666509][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 341.791256][T15328] syzkaller0: entered promiscuous mode [ 341.821131][T15328] syzkaller0: entered allmulticast mode [ 341.858596][T15326] tipc: Enabled bearer , priority 0 [ 341.935885][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2381'. [ 341.947728][T15326] tipc: Resetting bearer [ 342.015332][T15326] tipc: Disabling bearer [ 342.057286][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 342.085445][T15337] netlink: 'syz.4.2381': attribute type 30 has an invalid length. [ 342.134623][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 342.143779][T15333] netlink: 'syz.4.2381': attribute type 30 has an invalid length. [ 342.168983][T15339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.219746][T15337] vxlan2: entered promiscuous mode [ 342.236526][T15337] vxlan2: entered allmulticast mode [ 342.245440][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 342.248332][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 342.293398][T15346] netlink: 'syz.1.2382': attribute type 24 has an invalid length. [ 342.357198][T15333] vxlan3: entered promiscuous mode [ 342.361863][T15345] x_tables: duplicate entry at hook 3 [ 342.384189][T15333] vxlan3: entered allmulticast mode [ 342.417080][ T54] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.443210][T15350] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2386'. [ 342.454977][T15320] infiniband syz0: set active [ 342.457805][ T54] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.481161][T15320] infiniband syz0: added bond_slave_0 [ 342.489055][T15332] syzkaller1: entered promiscuous mode [ 342.505455][T15332] syzkaller1: entered allmulticast mode [ 342.526490][ T54] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.550038][ T54] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.557113][T15320] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 342.584813][T15320] infiniband syz0: Couldn't open port 1 [ 342.625315][T15320] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 342.665522][T15320] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 342.708487][T15320] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 342.863726][T15320] RDS/IB: syz0: added [ 342.888102][T15320] smc: adding ib device syz0 with port count 1 [ 342.914671][T15320] smc: ib device syz0 port 1 has no pnetid [ 343.217916][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 343.589806][T15386] netlink: 'syz.2.2396': attribute type 3 has an invalid length. [ 343.933285][T15398] ip6gre2: entered promiscuous mode [ 343.951598][T15398] ip6gre2: entered allmulticast mode [ 344.404270][T15415] netlink: 'syz.4.2405': attribute type 1 has an invalid length. [ 344.462782][T15415] syzkaller0: entered promiscuous mode [ 344.480139][T15415] syzkaller0: entered allmulticast mode [ 345.017439][T15421] syzkaller0: entered promiscuous mode [ 345.031614][T15421] syzkaller0: entered allmulticast mode [ 345.043423][T15433] __nla_validate_parse: 6 callbacks suppressed [ 345.043441][T15433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2410'. [ 345.063226][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 345.117447][T15434] netlink: 'syz.3.2409': attribute type 1 has an invalid length. [ 345.186671][T15434] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.459106][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 345.890378][ T1158] net_ratelimit: 13 callbacks suppressed [ 345.890482][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 345.910698][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 346.440484][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 346.455833][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 346.987293][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 347.001766][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.131994][T15430] bond10: (slave veth7): Enslaving as an active interface with a down link [ 347.361722][T15450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2415'. [ 347.421748][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 347.447325][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2416'. [ 347.537174][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 347.551910][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.693406][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2419'. [ 347.742509][T15476] tc_dump_action: action bad kind [ 347.873115][T15478] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 347.957173][T15484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2421'. [ 347.980260][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2422'. [ 348.097193][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 348.111586][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 348.170990][T15494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2426'. [ 348.323870][T15499] tipc: Enabled bearer , priority 0 [ 348.331708][T15499] syzkaller0: entered promiscuous mode [ 348.337744][T15499] syzkaller0: entered allmulticast mode [ 348.366215][ T29] audit: type=1800 audit(1783833970.632:25): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2428" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2539 res=0 errno=0 [ 348.425523][T15498] tipc: Resetting bearer [ 348.492839][T15498] tipc: Disabling bearer [ 348.983046][ T1158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.002862][ T1158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.028593][ T1158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.039372][ T1158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.320997][T15545] ±ÿ: renamed from lo (while UP) [ 350.031472][T15589] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 350.088398][T15592] sctp: [Deprecated]: syz.3.2455 (pid 15592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.088398][T15592] Use struct sctp_sack_info instead [ 350.153193][T15589] 8021q: adding VLAN 0 to HW filter on device bond16 [ 350.189619][T15596] bond16: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 350.219784][T15605] __nla_validate_parse: 13 callbacks suppressed [ 350.219802][T15605] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2456'. [ 350.252297][T15596] bond16: entered allmulticast mode [ 350.312573][T15597] bond16: (slave ip6gretap0): Enslaving as an active interface with an up link [ 350.658529][T15629] tipc: Enabling of bearer rejected, failed to enable media [ 350.697058][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 350.742741][T15639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2462'. [ 350.934422][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2467'. [ 351.016856][T15647] bond17 (unregistering): Released all slaves [ 351.057603][T15657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2470'. [ 351.086234][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2467'. [ 351.103050][T15658] net_ratelimit: 11 callbacks suppressed [ 351.103067][T15658] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 351.178488][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 351.228653][ T202] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 351.243100][ T202] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 351.312788][T15675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2474'. [ 351.343192][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2467'. [ 351.393160][T15683] ±ÿþ€: renamed from team_slave_1 [ 351.927458][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 351.941922][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 352.116009][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 352.213700][T15733] xt_limit: Overflow, try lower: 268435456/134217728 [ 352.213830][T15730] syzkaller0: entered promiscuous mode [ 352.234479][T15730] syzkaller0: entered allmulticast mode [ 352.529238][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 352.543705][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 353.097806][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 353.112262][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 353.412746][T15778] netlink: 'syz.4.2500': attribute type 18 has an invalid length. [ 353.487226][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.688989][ T202] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 354.316488][T15814] netlink: 'syz.2.2506': attribute type 1 has an invalid length. [ 354.375580][T15814] netlink: 'syz.2.2506': attribute type 7 has an invalid length. [ 354.416361][T15814] netlink: 'syz.2.2506': attribute type 8 has an invalid length. [ 354.486652][T15814] NCSI netlink: No device for ifindex 1073545264 [ 355.245773][T15858] __nla_validate_parse: 10 callbacks suppressed [ 355.245791][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 355.676470][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 355.771800][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 355.920181][T15893] netlink: 'syz.2.2529': attribute type 1 has an invalid length. [ 355.980895][T15893] bond12: entered promiscuous mode [ 355.986521][T15893] 8021q: adding VLAN 0 to HW filter on device bond12 [ 355.992786][T15889] nbd: nbd4 already in use [ 356.014789][T15889] block nbd4: NBD_DISCONNECT [ 356.032439][T15889] block nbd4: Send disconnect failed -32 [ 356.076457][T15889] block nbd4: Send disconnect failed -32 [ 356.107148][T15889] block nbd4: Send disconnect failed -32 [ 356.131407][T15889] block nbd4: shutting down sockets [ 356.200745][T15889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2528'. [ 356.299286][ T54] net_ratelimit: 9 callbacks suppressed [ 356.299305][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 356.319506][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 356.369975][T15915] bridge_slave_0: left allmulticast mode [ 356.375825][T15915] bridge_slave_0: left promiscuous mode [ 356.382298][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.391305][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2535'. [ 356.416825][T15915] bridge_slave_1: left allmulticast mode [ 356.432893][T15915] bridge_slave_1: left promiscuous mode [ 356.445106][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.474266][T15915] bond0: (slave bond_slave_0): Releasing backup interface [ 356.529963][T15915] team0: Port device team_slave_0 removed [ 356.551186][T15915] team0: Port device 26±ÿþ€ removed [ 356.573798][T15915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.711813][T15929] tipc: Enabled bearer , priority 0 [ 356.723744][T15931] netlink: 'syz.4.2541': attribute type 10 has an invalid length. [ 356.737491][T15929] syzkaller0: entered promiscuous mode [ 356.745779][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 356.765111][T15929] syzkaller0: entered allmulticast mode [ 356.775029][T15931] openvswitch: netlink: Message has 4 unknown bytes. [ 356.794193][T15929] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 356.877447][ T202] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 356.891948][ T202] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 356.911738][T15929] tipc: Resetting bearer [ 356.982055][T15929] tipc: Resetting bearer [ 357.018694][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'. [ 357.110558][T15929] tipc: Disabling bearer [ 357.192814][T15951] atomic_op ffff888034051198 conn xmit_atomic 0000000000000000 [ 357.384827][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 357.395605][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 357.405421][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2548'. [ 357.467237][ T202] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 357.481822][ T202] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 358.055681][ T202] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.088097][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 358.102490][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 358.134115][ T202] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.155094][ T202] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.207310][ T54] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.254784][T15991] batadv_slave_0: entered promiscuous mode [ 358.291921][T15990] batadv_slave_0: left promiscuous mode [ 358.307247][T15965] syzkaller1: entered promiscuous mode [ 358.323317][T15965] syzkaller1: entered allmulticast mode [ 358.359608][T15994] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 358.369796][T15994] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 358.395561][T15994] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 358.764319][T16014] xt_TCPMSS: Only works on TCP SYN packets [ 359.292516][T16034] x_tables: duplicate underflow at hook 2 [ 359.500842][T16040] netlink: 'syz.4.2570': attribute type 3 has an invalid length. [ 360.435621][T16079] __nla_validate_parse: 6 callbacks suppressed [ 360.435640][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 360.466052][T16087] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 360.498577][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 360.539112][T16079] netlink: 'syz.4.2582': attribute type 18 has an invalid length. [ 360.639800][T16090] bond13: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 360.695856][T16090] bond13 (unregistering): Released all slaves [ 361.039444][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 361.244216][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2594'. [ 361.284731][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2594'. [ 361.752174][ T54] net_ratelimit: 13 callbacks suppressed [ 361.752193][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 361.773337][ T54] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 361.946272][T16137] netlink: 'syz.3.2598': attribute type 21 has an invalid length. [ 361.975883][T16137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2598'. [ 362.082654][T16143] gtp1: entered allmulticast mode [ 362.213492][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2602'. [ 362.307107][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 362.321479][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 362.887049][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 362.901472][ T8132] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 363.274312][T16185] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2614'. [ 363.304859][T16185] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2614'. [ 363.323210][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2615'. [ 363.457247][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 363.471707][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 364.017150][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 364.031573][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 365.258891][T16205] netlink: 'syz.0.2619': attribute type 15 has an invalid length. [ 365.444235][T16207] netlink: 'syz.3.2620': attribute type 2 has an invalid length. [ 365.462161][T16213] __nla_validate_parse: 1 callbacks suppressed [ 365.462175][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2622'. [ 365.490636][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2620'. [ 365.935751][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 365.950763][T16236] bond11: option mode: invalid value (254) [ 365.970810][T16236] bond11 (unregistering): Released all slaves [ 366.271450][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 366.397364][T16259] vlan4: entered allmulticast mode [ 366.405891][ T4938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.417923][ T4938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.427948][ T4938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.437109][T16259] bond0: entered allmulticast mode [ 366.443818][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.451103][T16259] bond_slave_0: entered allmulticast mode [ 366.457656][ T4938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.474295][T16259] bond_slave_1: entered allmulticast mode [ 366.506082][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.516531][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.528230][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.546069][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.557264][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.690662][T16265] 8021q: VLANs not supported on vxcan0 [ 367.107170][ T1158] net_ratelimit: 10 callbacks suppressed [ 367.107186][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 367.127241][ T1158] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 367.312885][T16290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2643'. [ 367.558655][T16302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2646'. [ 367.657254][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 367.671681][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 368.227048][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 368.241507][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 368.617333][ T5624] Bluetooth: hci5: command tx timeout [ 368.731810][T16331] pim6reg1: entered promiscuous mode [ 368.752274][T16331] pim6reg1: entered allmulticast mode [ 368.861166][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 368.875883][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 368.892659][T16261] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.900014][T16261] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.914426][T16261] bridge_slave_0: entered allmulticast mode [ 368.931509][T16261] bridge_slave_0: entered promiscuous mode [ 369.035518][T16261] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.054582][T16261] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.071327][T16261] bridge_slave_1: entered allmulticast mode [ 369.095249][T16261] bridge_slave_1: entered promiscuous mode [ 369.258252][T16261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.287509][T16261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.334722][T16360] ipip0: entered promiscuous mode [ 369.434571][T16376] FAULT_INJECTION: forcing a failure. [ 369.434571][T16376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.458427][T16377] netlink: 'syz.4.2661': attribute type 22 has an invalid length. [ 369.472251][T16377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'. [ 369.480100][T16376] CPU: 0 UID: 0 PID: 16376 Comm: syz.3.2664 Not tainted syzkaller #0 PREEMPT(full) [ 369.480124][T16376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.480141][T16376] Call Trace: [ 369.480222][T16376] [ 369.480294][T16376] dump_stack_lvl+0xe8/0x150 [ 369.480476][T16376] should_fail_ex+0x40c/0x560 [ 369.480605][T16376] _copy_from_iter+0x1d3/0x1660 [ 369.480684][T16376] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 369.480731][T16376] ? rcu_is_watching+0x15/0xb0 [ 369.480780][T16376] ? trace_kmem_cache_alloc+0x29/0xe0 [ 369.480803][T16376] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 369.480825][T16376] ? __pfx__copy_from_iter+0x10/0x10 [ 369.480846][T16376] ? __alloc_skb+0x276/0x7a0 [ 369.480958][T16376] ? __alloc_skb+0x276/0x7a0 [ 369.480987][T16376] ? netlink_sendmsg+0x650/0xb40 [ 369.481054][T16376] ? skb_put+0x112/0x210 [ 369.481081][T16376] netlink_sendmsg+0x6c0/0xb40 [ 369.481108][T16376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.481130][T16376] ? aa_sock_msg_perm+0xf1/0x1b0 [ 369.481240][T16376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.481255][T16376] sock_sendmsg_nosec+0x13a/0x180 [ 369.481311][T16376] ____sys_sendmsg+0x54e/0x850 [ 369.481368][T16376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.481401][T16376] ? import_iovec+0x73/0xa0 [ 369.481429][T16376] ___sys_sendmsg+0x2a5/0x360 [ 369.481456][T16376] ? __lock_acquire+0x683/0x2cf0 [ 369.481491][T16376] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.481549][T16376] ? __fget_files+0x2a/0x420 [ 369.481586][T16376] ? __fget_files+0x3a2/0x420 [ 369.481617][T16376] __x64_sys_sendmsg+0x1b1/0x290 [ 369.481647][T16376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.481691][T16376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.481725][T16376] do_syscall_64+0x174/0x580 [ 369.481831][T16376] ? trace_irq_disable+0x3b/0x140 [ 369.481868][T16376] ? clear_bhb_loop+0x40/0x90 [ 369.481891][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.481909][T16376] RIP: 0033:0x7f213879de59 [ 369.481933][T16376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.481949][T16376] RSP: 002b:00007f2139711028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.481968][T16376] RAX: ffffffffffffffda RBX: 00007f2138a26090 RCX: 00007f213879de59 [ 369.481982][T16376] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 000000000000000a [ 369.481994][T16376] RBP: 00007f2139711090 R08: 0000000000000000 R09: 0000000000000000 [ 369.482012][T16376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.482023][T16376] R13: 00007f2138a26128 R14: 00007f2138a26090 R15: 00007ffc5d0b48b8 [ 369.482052][T16376] [ 369.508379][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 369.573084][T16380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2665'. [ 369.573322][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 369.579597][T16377] netlink: 'syz.4.2661': attribute type 22 has an invalid length. [ 369.815113][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 369.834243][T16377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'. [ 369.835767][T16261] team0: Port device team_slave_0 added [ 369.851644][T16388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.864135][T16362] Cannot find add_set index 2 as target [ 369.869133][T16378] syzkaller1: entered promiscuous mode [ 369.879034][T16378] syzkaller1: entered allmulticast mode [ 369.901243][T16261] team0: Port device team_slave_1 added [ 369.986017][T16261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.998732][T16261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.056456][T16261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.081127][T16261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.088586][T16261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.120874][T16261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.348985][T16261] hsr_slave_0: entered promiscuous mode [ 370.363600][T16261] hsr_slave_1: entered promiscuous mode [ 370.382927][T16261] debugfs: 'hsr0' already exists in 'hsr' [ 370.393085][T16261] Cannot create hsr debugfs directory [ 370.670873][T16413] bond11 (unregistering): Released all slaves [ 370.687557][ T5624] Bluetooth: hci5: command tx timeout [ 370.779349][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.015504][T16426] tipc: Enabled bearer , priority 0 [ 371.037859][T16432] syzkaller0: entered promiscuous mode [ 371.059044][T16432] syzkaller0: entered allmulticast mode [ 371.104810][T16426] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 371.209081][T16442] netlink: 'syz.1.2678': attribute type 11 has an invalid length. [ 371.217744][T16407] __nla_validate_parse: 1 callbacks suppressed [ 371.217760][T16407] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2673'. [ 371.269759][T16437] ipip0: entered promiscuous mode [ 371.279286][T16426] tipc: Resetting bearer [ 371.356553][T16426] tipc: Resetting bearer [ 371.438786][T16426] tipc: Disabling bearer [ 371.646374][T16261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.779610][T16450] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 371.791930][T16450] bond17 (unregistering): Released all slaves [ 371.921694][T16465] netlink: 'syz.2.2683': attribute type 4 has an invalid length. [ 371.944980][T16465] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2683'. [ 371.973385][T16261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.089768][T16465] .`: renamed from bond0 [ 372.205178][T16261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.225839][T11416] net_ratelimit: 8 callbacks suppressed [ 372.225859][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 372.246272][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 372.345248][T16472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2685'. [ 372.370172][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 372.401586][T16478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2685'. [ 372.611329][T16261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.656265][T16491] ipt_ECN: cannot use operation on non-tcp rule [ 372.664682][T16491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2691'. [ 372.770106][ T5624] Bluetooth: hci5: command tx timeout [ 372.778960][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 372.793282][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 372.995187][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 373.026491][T16507] netlink: 'syz.3.2695': attribute type 10 has an invalid length. [ 373.048844][T16507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 373.134924][T16512] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2697'. [ 373.233813][ T29] audit: type=1800 audit(1783833995.502:26): pid=16517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2698" name="memory.events" dev="tmpfs" ino=2818 res=0 errno=0 [ 373.309736][ T29] audit: type=1804 audit(1783833995.502:27): pid=16517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2698" name="/newroot/545/memory.events" dev="tmpfs" ino=2818 res=1 errno=0 [ 373.343100][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 373.357556][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 373.430509][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2701'. [ 373.484419][T16261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.512640][T16261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.640722][T16523] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 373.720666][T16261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.800720][T16261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.816395][T16261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.927055][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 373.941663][ T82] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 374.067353][T16261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.433006][T16261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.450135][T16261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.487289][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 374.501991][T11416] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 374.635406][T16261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.663613][T16261] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.678034][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.685161][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.706515][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.713747][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.847222][ T5624] Bluetooth: hci5: command tx timeout [ 375.951306][T16261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.034559][T16604] tap0: tun_chr_ioctl cmd 1074025672 [ 376.041581][T16604] tap0: ignored: set checksum disabled [ 376.555654][T16617] __nla_validate_parse: 4 callbacks suppressed [ 376.555670][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 376.580735][T16261] veth0_vlan: entered promiscuous mode [ 376.606197][T16261] veth1_vlan: entered promiscuous mode [ 376.630844][T16619] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2721'. [ 376.642243][T16617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.707114][T16617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.726425][T16617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.783643][T16617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.793049][T16626] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2723'. [ 376.793971][T16617] batman_adv: batadv0: Interface deactivated: dummy0 [ 376.810088][T16617] batman_adv: batadv0: Removing interface: dummy0 [ 376.833002][T16617] batman_adv: batadv0: Interface deactivated: gretap2 [ 376.857965][T16617] batman_adv: batadv0: Removing interface: gretap2 [ 377.074687][T16261] veth0_macvtap: entered promiscuous mode [ 377.129615][T16261] veth1_macvtap: entered promiscuous mode [ 377.206726][T16643] syzkaller0: entered allmulticast mode [ 377.240583][T16261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.268113][T16643] IPVS: Unknown mcast interface: vcan0 [ 377.300873][T16261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.343083][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.361378][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.394681][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.404340][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.460132][T16655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2730'. [ 377.520217][T16658] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2731'. [ 377.568531][T16658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2731'. [ 377.570115][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 377.592730][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.601259][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.680489][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.696589][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.698437][T16666] netlink: 'syz.2.2733': attribute type 1 has an invalid length. [ 377.804835][T16666] bond0: entered promiscuous mode [ 377.828229][T16670] netlink: 'syz.0.2633': attribute type 24 has an invalid length. [ 377.842014][T16666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.871895][T16668] ipvlan4: entered allmulticast mode [ 377.883372][T16668] bond0: entered allmulticast mode [ 377.954563][T16666] ipvlan5: entered allmulticast mode [ 377.992712][T16666] bond0: (slave bridge6): making interface the new active one [ 378.001474][T16666] bridge6: entered promiscuous mode [ 378.008388][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 378.018470][T16666] bridge6: entered allmulticast mode [ 378.039037][T16666] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 378.075269][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 378.150492][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2738'. [ 378.174642][T16687] netlink: 'syz.0.2738': attribute type 30 has an invalid length. [ 378.194552][T16689] net_ratelimit: 48 callbacks suppressed [ 378.194568][T16689] openvswitch: netlink: Flow actions attr not present in new flow. [ 378.229339][T16693] netlink: 'syz.0.2738': attribute type 30 has an invalid length. [ 378.263918][T16687] vxlan0: entered promiscuous mode [ 378.269616][T16687] vxlan0: entered allmulticast mode [ 378.310759][T16693] vxlan1: entered promiscuous mode [ 378.315990][T16693] vxlan1: entered allmulticast mode [ 378.326200][ T202] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.348271][ T1158] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.408462][ T1158] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.441995][ T1158] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.533396][T16706] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 378.684642][T16706] bond17: entered promiscuous mode [ 378.708875][T16706] 8021q: adding VLAN 0 to HW filter on device bond17 [ 378.737593][T16715] block nbd4: server does not support multiple connections per device. [ 378.758282][T16715] block nbd4: shutting down sockets [ 378.778747][T16714] 8021q: adding VLAN 0 to HW filter on device bond17 [ 378.794673][T16714] bond17: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 378.806649][T16714] bond17: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 378.845970][T16714] bond17: (slave ip6gre1): making interface the new active one [ 378.861845][T16714] ip6gre1: entered promiscuous mode [ 378.873813][T16714] bond17: (slave ip6gre1): Enslaving as an active interface with an up link [ 378.973538][T16725] syzkaller1: entered promiscuous mode [ 378.993656][T16725] syzkaller1: entered allmulticast mode [ 379.213713][T16743] netlink: 'syz.3.2754': attribute type 3 has an invalid length. [ 379.278395][T16745] ip6erspan0: entered promiscuous mode [ 379.579928][T16751] netlink: 'syz.0.2757': attribute type 3 has an invalid length. [ 380.115295][T16764] syzkaller0: entered promiscuous mode [ 380.132504][T16766] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 380.134609][T16764] syzkaller0: entered allmulticast mode [ 380.209977][T16764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.626140][T16789] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 380.862140][T16789] 8021q: adding VLAN 0 to HW filter on device bond18 [ 380.978010][T16797] bond18: (slave geneve3): making interface the new active one [ 380.992037][T16797] bond18: (slave geneve3): Enslaving as an active interface with an up link [ 381.024306][T11416] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.033114][T11416] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.051740][T11416] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.063800][T11416] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.237713][T16819] syzkaller1: entered promiscuous mode [ 381.261837][T16819] syzkaller1: entered allmulticast mode [ 381.878964][T16866] __nla_validate_parse: 11 callbacks suppressed [ 381.878982][T16866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2786'. [ 382.111666][T16874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2788'. [ 382.456699][T16891] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2792'. [ 382.804409][T16913] syzkaller1: entered promiscuous mode [ 382.830339][T16913] syzkaller1: entered allmulticast mode [ 383.146739][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 383.428408][T16955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'. [ 383.852513][T16985] netlink: zone id is out of range [ 383.887875][T16988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2815'. [ 383.910212][T16985] netlink: zone id is out of range [ 383.959410][T16985] netlink: zone id is out of range [ 384.013955][T16985] netlink: zone id is out of range [ 384.084476][T16985] netlink: zone id is out of range [ 384.192543][T16985] netlink: zone id is out of range [ 384.242482][T16985] netlink: zone id is out of range [ 384.268952][T16985] netlink: zone id is out of range [ 384.293859][T16985] netlink: zone id is out of range [ 384.325505][T16985] netlink: zone id is out of range [ 384.389330][T17015] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2818'. [ 384.460744][T17015] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2818'. [ 384.487893][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.496486][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.506214][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.514630][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.523004][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.531394][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.539780][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.548164][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.556517][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.564899][T17016] tc action pedit unable to extract header offset for header type (0x5) [ 384.731804][T17037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2825'. [ 385.096652][T17046] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2827'. [ 385.189628][T17046] syzkaller0: entered promiscuous mode [ 385.195255][T17046] syzkaller0: entered allmulticast mode [ 385.198844][T17056] netlink: 'syz.1.2831': attribute type 9 has an invalid length. [ 385.544303][T17058] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 385.815690][T17060] erspan0: entered promiscuous mode [ 385.833755][T17060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.842556][T17060] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.853836][T17060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.979006][T17060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.019114][T17060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.041941][T17060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.071443][T17075] sctp: [Deprecated]: syz.1.2835 (pid 17075) Use of int in max_burst socket option. [ 388.071443][T17075] Use struct sctp_assoc_value instead [ 388.073350][T17060] veth1_vlan: left promiscuous mode [ 388.092921][T17060] veth0_vlan: left promiscuous mode [ 388.099147][T17060] veth0_vlan: entered promiscuous mode [ 388.106081][T17060] veth1_vlan: entered promiscuous mode [ 388.115083][T17060] veth1_macvtap: left promiscuous mode [ 388.123240][T17060] veth0_macvtap: left promiscuous mode [ 388.129824][T17060] veth0_macvtap: entered promiscuous mode [ 388.136687][T17060] veth1_macvtap: entered promiscuous mode [ 388.148876][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.157036][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.165127][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.174174][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.186631][T17060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.194143][T17060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.201955][T17060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.212845][T17060] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.220501][T17060] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.228665][T17060] 8021q: adding VLAN 0 to HW filter on device bond6 [ 388.241778][T17060] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.251653][T17060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 388.264232][T17064] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 388.278528][T11416] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.285732][T11416] bridge0: port 2(bridge_slave_1) entered listening state [ 388.287129][T17064] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 388.316992][T17064] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 388.639175][T17084] syzkaller0: entered promiscuous mode [ 388.668768][T17084] syzkaller0: entered allmulticast mode [ 388.726633][T17097] __nla_validate_parse: 2 callbacks suppressed [ 388.726650][T17097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2843'. [ 388.919245][T17097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2843'. [ 388.979718][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2843'. [ 389.014724][T17107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2843'. [ 389.165770][T17122] sctp: [Deprecated]: syz.1.2845 (pid 17122) Use of int in maxseg socket option. [ 389.165770][T17122] Use struct sctp_assoc_value instead [ 389.708713][T17145] bridge8: entered promiscuous mode [ 389.724665][T17145] bridge8: entered allmulticast mode [ 389.771700][T17145] team0: Port device bridge8 added [ 389.947762][T17145] bridge9: entered promiscuous mode [ 389.960619][T17168] netlink: 'syz.3.2854': attribute type 12 has an invalid length. [ 390.002287][T17145] bridge9: entered allmulticast mode [ 390.058962][T17145] team0: Port device bridge9 added [ 390.244741][T17175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2856'. [ 390.305229][T17175] netlink: 'syz.4.2856': attribute type 1 has an invalid length. [ 390.331903][T17175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2856'. [ 390.371759][T17181] netlink: 'syz.4.2856': attribute type 4 has an invalid length. [ 390.380573][T17182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2857'. [ 390.412221][T17181] netlink: 'syz.4.2856': attribute type 8 has an invalid length. [ 390.423823][T17182] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2857'. [ 390.449985][T17181] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2856'. [ 390.848460][ T5624] Bluetooth: hci5: command tx timeout [ 390.999696][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2868'. [ 391.706060][T17258] net_ratelimit: 719 callbacks suppressed [ 391.706078][T17258] IPVS: dh: FWM 3 0x00000003 - no destination available [ 391.939833][T17264] 8021q: adding VLAN 0 to HW filter on device bond20 [ 391.959135][T17264] bond20 (unregistering): Released all slaves [ 391.995903][ T29] audit: type=1804 audit(1783834014.262:28): pid=17270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2881" name="/newroot/547/cgroup.controllers" dev="tmpfs" ino=2819 res=1 errno=0 [ 392.048748][ T29] audit: type=1800 audit(1783834014.262:29): pid=17270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2881" name="cgroup.controllers" dev="tmpfs" ino=2819 res=0 errno=0 [ 392.095579][T17273] syzkaller0: entered promiscuous mode [ 392.101791][T17273] syzkaller0: entered allmulticast mode [ 392.175828][T17273] TC_ACT_REPEAT abuse ? [ 392.265259][T17280] tipc: Enabled bearer , priority 0 [ 392.274467][T17275] syzkaller0: entered promiscuous mode [ 392.283483][T17275] syzkaller0: entered allmulticast mode [ 392.295535][T17275] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 392.335748][T17275] tipc: Resetting bearer [ 392.454412][T17285] nbd: nbd3 already in use [ 392.470778][T17274] tipc: Resetting bearer [ 392.537317][T17274] tipc: Disabling bearer [ 392.711381][T17292] erspan0: entered promiscuous mode [ 392.725221][T17292] erspan0: entered allmulticast mode [ 393.840311][T17316] __nla_validate_parse: 5 callbacks suppressed [ 393.840332][T17316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2893'. [ 393.920735][T17317] netlink: 'syz.3.2893': attribute type 4 has an invalid length. [ 393.947280][T17317] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2893'. [ 395.125406][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2891'. [ 395.152829][T17303] erspan0: entered promiscuous mode [ 395.175118][T17303] 8021q: adding VLAN 0 to HW filter on device .` [ 395.186777][T17303] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.208894][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2895'. [ 395.238309][T17303] veth0_vlan: left promiscuous mode [ 395.244640][T17303] veth0_vlan: entered promiscuous mode [ 395.255945][T17303] veth0_macvtap: left promiscuous mode [ 395.262821][T17303] veth0_macvtap: entered promiscuous mode [ 395.264652][T17324] netlink: 'syz.4.2895': attribute type 10 has an invalid length. [ 395.274935][T17303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.284615][T17303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.296132][T17303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.304237][T17303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.315515][T17303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.323423][T17303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.332944][T17303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.341125][T17303] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 395.350635][T17303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.361126][T17303] veth1: entered promiscuous mode [ 395.374322][T17303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.405490][T17303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.419379][T17303] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.430818][T17303] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.444244][T17303] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 395.452814][T17303] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 395.563265][T17317] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 395.591822][T17304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2891'. [ 395.744668][ T1158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.782149][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.814460][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 395.833452][T17330] netlink: 'syz.1.2897': attribute type 11 has an invalid length. [ 395.843093][ T1158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.858212][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.876257][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 395.896128][ T1158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.915189][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.935144][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 396.013567][ T1158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.045178][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.080660][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 396.172780][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.212502][ T1158] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.240009][T17345] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 396.257477][T17345] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 396.292864][T17345] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 396.416644][T17345] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 396.708980][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 396.749461][T17369] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2906'. [ 396.789458][ T48] smbdirect: ib_dev[syz2] removed [ 396.823202][T17374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.998683][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2909'. [ 397.026646][T17376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.068307][T17376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.185543][T17388] netlink: 'syz.2.2913': attribute type 9 has an invalid length. [ 397.274943][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.296508][T17395] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2915'. [ 397.296754][T17394] netlink: 'syz.4.2915': attribute type 11 has an invalid length. [ 397.317392][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.353383][T17394] netlink: 'syz.4.2915': attribute type 11 has an invalid length. [ 397.362426][T17394] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2915'. [ 397.459626][T17401] netlink: 'syz.1.2917': attribute type 23 has an invalid length. [ 397.638795][T17416] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 397.817771][T17416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.846832][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2920'. [ 397.916069][T17416] bond1: (slave geneve2): making interface the new active one [ 397.932779][T17416] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 398.031354][T17429] netlink: 'syz.3.2923': attribute type 11 has an invalid length. [ 398.066319][T17425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.132071][ T5626] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.543885][T17471] syzkaller0: entered promiscuous mode [ 398.549666][T17471] syzkaller0: entered allmulticast mode [ 398.577677][T17471] netlink: 'syz.0.2933': attribute type 2 has an invalid length. [ 398.600172][T17471] : entered promiscuous mode [ 398.881000][T17481] +: renamed from syzkaller0 [ 400.993922][T17438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.007411][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 401.232153][T17491] __nla_validate_parse: 7 callbacks suppressed [ 401.232170][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 401.282128][T17497] netlink: 1371 bytes leftover after parsing attributes in process `syz.4.2936'. [ 401.671878][T17516] openvswitch: netlink: Missing valid actions attribute. [ 401.698267][T17516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.930407][T17525] xt_TCPMSS: Only works on TCP SYN packets [ 401.936382][ T5624] block nbd4: Receive control failed (result -32) [ 402.036760][T17525] erspan0: left promiscuous mode [ 402.115628][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.133617][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.142219][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.185166][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.192987][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.215173][T17525] veth1_vlan: left promiscuous mode [ 402.234969][T17525] veth0_vlan: left promiscuous mode [ 402.258984][T17525] veth0_vlan: entered promiscuous mode [ 402.266747][T17525] veth1_vlan: entered promiscuous mode [ 402.279176][T17525] tipc: Resetting bearer [ 402.284888][T17525] veth1_macvtap: left promiscuous mode [ 402.292174][T17525] veth0_macvtap: left promiscuous mode [ 402.299098][T17525] veth0_macvtap: entered promiscuous mode [ 402.306801][T17525] veth1_macvtap: entered promiscuous mode [ 402.333241][T17525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.361996][T17525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.372252][T17525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.381807][T17525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.419668][T17525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.427898][T17525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.435733][T17525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.458092][T17525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 402.472217][T17525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.495343][T17525] 8021q: adding VLAN 0 to HW filter on device bond6 [ 402.519609][T17525] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.528640][T17525] 8021q: adding VLAN 0 to HW filter on device bond8 [ 402.538852][T17525] 8021q: adding VLAN 0 to HW filter on device bond9 [ 402.556378][T17525] veth0_to_team: entered promiscuous mode [ 402.564296][T17525] bond10: left promiscuous mode [ 402.569933][T17525] vti0: left promiscuous mode [ 402.582253][T17525] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.636856][T17525] 8021q: adding VLAN 0 to HW filter on device bond11 [ 402.646447][T17525] bond12: left promiscuous mode [ 402.652131][T17525] 8021q: adding VLAN 0 to HW filter on device bond12 [ 402.660662][T17525] ip6gre1: left promiscuous mode [ 402.669397][T17525] veth9: left promiscuous mode [ 402.677796][T17525] 8021q: adding VLAN 0 to HW filter on device bond13 [ 402.702301][T17525] ipip0: left promiscuous mode [ 402.785021][T11419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.797540][T11419] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 402.843637][T11419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.865899][T11419] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 402.909517][T11419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.943243][T11419] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 402.972212][T11419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.014033][T11419] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 403.029331][T17551] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 403.062640][T17551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.112075][T17559] tipc: Enabling of bearer rejected, failed to enable media [ 403.216956][ C0] Dropped outbound packet type=88ca [ 403.389848][T17576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 403.766560][T17593] tipc: Enabled bearer , priority 0 [ 403.784826][T17593] syzkaller0: entered promiscuous mode [ 403.798929][T17593] syzkaller0: entered allmulticast mode [ 403.822933][T17593] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 403.881508][T17593] tipc: Resetting bearer [ 403.946641][T17591] tipc: Resetting bearer [ 404.188772][T17591] tipc: Disabling bearer [ 404.286975][ C0] Dropped outbound packet type=88ca [ 404.292570][ T4938] Bluetooth: hci0: command tx timeout [ 404.886330][T17608] Bluetooth: MGMT ver 1.23 [ 404.952529][T17614] bond2: option downdelay: invalid value (18446744073709551487) [ 404.960319][T17614] bond2: option downdelay: allowed values 0 - 2147483647 [ 404.971226][T17614] bond2 (unregistering): Released all slaves [ 405.221753][T17624] bond14 (unregistering): Released all slaves [ 405.290478][T17631] sch_tbf: peakrate 2 is lower than or equals to rate 325138726220226081 ! [ 405.337329][ C0] Dropped outbound packet type=88ca [ 405.405673][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 405.564190][T17644] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 405.790593][T17653] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2975'. [ 405.841647][T17653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2975'. [ 405.866492][T17535] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.874634][T17535] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.882730][T17535] bridge_slave_0: entered allmulticast mode [ 405.891220][T17535] bridge_slave_0: entered promiscuous mode [ 405.900163][T17535] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.907698][T17535] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.916678][T17535] bridge_slave_1: entered allmulticast mode [ 405.924733][T17535] bridge_slave_1: entered promiscuous mode [ 405.932216][T17661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2975'. [ 406.020536][T17535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.060043][T17535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.152463][T17535] team0: Port device team_slave_0 added [ 406.162115][T17535] team0: Port device team_slave_1 added [ 406.221929][T17535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.230264][T17535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.257293][T17535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.273273][T17535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.280772][T17535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.318761][T17535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.366948][ C0] Dropped outbound packet type=88ca [ 406.372500][ T4938] Bluetooth: hci0: command tx timeout [ 406.465616][T17675] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 406.525585][T17675] bond12 (unregistering): Released all slaves [ 406.814753][T17535] hsr_slave_0: entered promiscuous mode [ 406.829160][T17535] hsr_slave_1: entered promiscuous mode [ 406.842931][T17535] debugfs: 'hsr0' already exists in 'hsr' [ 406.863270][T17535] Cannot create hsr debugfs directory [ 407.228407][T17702] netlink: 'syz.0.2988': attribute type 11 has an invalid length. [ 407.406949][ C0] Dropped outbound packet type=88ca [ 407.548924][T17714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.617392][T17535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.639048][T17535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.663134][T17535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 407.771878][T17719] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 407.926183][T17719] 8021q: adding VLAN 0 to HW filter on device bond14 [ 408.100775][T17535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.117114][T17535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.128081][T17535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 408.194820][T17723] tipc: Started in network mode [ 408.225952][T17723] tipc: Node identity faea0c2e51e8, cluster identity 4711 [ 408.260023][T17723] tipc: Enabled bearer , priority 0 [ 408.279034][T17727] syzkaller0: entered promiscuous mode [ 408.294942][T17727] syzkaller0: entered allmulticast mode [ 408.322688][T17736] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 408.447006][ C0] Dropped outbound packet type=88ca [ 408.453805][ T4938] Bluetooth: hci0: command tx timeout [ 408.463268][T17535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.504621][T17754] xt_hashlimit: overflow, try lower: 6/0 [ 408.514464][T17535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.527785][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 408.560762][T17535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 408.595674][T17763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2998'. [ 408.612767][T17723] tipc: Resetting bearer [ 408.632541][T17722] tipc: Resetting bearer [ 408.708488][T17722] tipc: Disabling bearer [ 408.786006][T17535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.798775][T17535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.825322][T17769] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3000'. [ 408.846142][T17535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 409.002576][T17778] sctp: [Deprecated]: syz.4.3003 (pid 17778) Use of int in maxseg socket option. [ 409.002576][T17778] Use struct sctp_assoc_value instead [ 409.289556][T17787] tipc: Enabled bearer , priority 0 [ 409.307406][T17787] syzkaller0: entered promiscuous mode [ 409.314907][T17787] syzkaller0: entered allmulticast mode [ 409.395420][T17787] tipc: Resetting bearer [ 409.405469][T17787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.425155][T17535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.440644][T17535] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.448926][T17786] tipc: Resetting bearer [ 409.478999][T17786] tipc: Disabling bearer [ 409.496940][ C0] Dropped outbound packet type=88ca [ 409.506540][T17535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.535923][T17535] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.557289][T17792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3007'. [ 409.576559][T17792] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3007'. [ 409.604714][T17792] tipc: Invalid UDP bearer configuration [ 409.604770][T17792] tipc: Enabling of bearer rejected, failed to enable media [ 409.622705][T17535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.644220][T17535] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.662959][T17535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.692021][T17535] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.943411][T17535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.025421][T17535] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.063412][T11419] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.070631][T11419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.110484][T17820] tipc: Enabling of bearer rejected, failed to enable media [ 410.125513][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.132706][T11419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.232287][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'. [ 410.334151][T17832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.526979][ C0] Dropped outbound packet type=88ca [ 410.533160][ T4938] Bluetooth: hci0: command tx timeout [ 410.801546][T17857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3024'. [ 410.845693][T17857] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3024'. [ 411.022773][T17863] netlink: 'syz.4.3026': attribute type 210 has an invalid length. [ 411.040291][T17869] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 411.179916][T17883] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3027'. [ 411.521950][T17535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.567107][ C0] Dropped outbound packet type=88ca [ 411.744779][T17535] veth0_vlan: entered promiscuous mode [ 411.788193][T17535] veth1_vlan: entered promiscuous mode [ 411.894624][T17535] veth0_macvtap: entered promiscuous mode [ 411.961637][T17535] veth1_macvtap: entered promiscuous mode [ 412.013618][T17913] netlink: 'syz.0.3034': attribute type 12 has an invalid length. [ 412.085500][T17535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.189218][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 412.223488][T17535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.253824][T17914] macsec0: entered promiscuous mode [ 412.284868][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 412.300642][T11416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.331988][T11416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.387164][T11416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.399840][T11416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.423133][T17914] veth1_macvtap: left promiscuous mode [ 412.463755][T17914] macsec0 (unregistering): left promiscuous mode [ 412.495104][T17918] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 412.525217][T17917] netlink: 'syz.3.3035': attribute type 12 has an invalid length. [ 412.607021][ C0] Dropped outbound packet type=88ca [ 413.001053][T17924] tipc: Enabled bearer , priority 0 [ 413.027203][T17930] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 413.059791][T17924] syzkaller0: entered promiscuous mode [ 413.065313][T17924] syzkaller0: entered allmulticast mode [ 413.071640][T17924] tipc: Resetting bearer [ 413.079694][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.089154][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.254141][ T202] tipc: Resetting bearer [ 413.383038][T17927] tipc: Resetting bearer [ 413.655116][ C0] Dropped outbound packet type=88ca [ 414.696957][ C0] Dropped outbound packet type=88ca [ 415.288084][T17927] tipc: Disabling bearer [ 415.300393][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.308393][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.316538][ T1242] tipc: Node number set to 2869038126 [ 415.490898][T17950] bridge0: port 3(vlan3) entered blocking state [ 415.510123][T17950] bridge0: port 3(vlan3) entered disabled state [ 415.526596][T17956] __nla_validate_parse: 2 callbacks suppressed [ 415.526610][T17956] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3048'. [ 415.544810][T17950] vlan3: entered allmulticast mode [ 415.550920][T17950] geneve0: entered allmulticast mode [ 415.558683][T17950] vlan3: entered promiscuous mode [ 415.565569][T17950] geneve0: entered promiscuous mode [ 415.726963][ C0] Dropped outbound packet type=88ca [ 415.892150][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3050'. [ 416.016148][T17966] erspan0: left allmulticast mode [ 416.325594][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.345877][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.362746][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.371114][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.379083][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.450842][T17966] pimreg1: port 2(bridge_slave_1) entered disabled state [ 416.458277][T17966] pimreg1: port 1(bridge_slave_0) entered disabled state [ 416.490431][T17966] pimreg1: left allmulticast mode [ 416.521562][ T5636] block nbd5: Receive control failed (result -32) [ 416.564106][ T4938] block nbd5: Receive control failed (result -32) [ 416.574042][ T5624] block nbd5: Receive control failed (result -32) [ 416.736529][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 416.766942][ C0] Dropped outbound packet type=88ca [ 417.118260][T18004] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 417.375730][T17966] tipc: Resetting bearer [ 417.840491][T17966] ip6gre1: left allmulticast mode [ 417.951410][T17966] gtp1: left allmulticast mode [ 418.114642][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 418.153112][ T54] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.180102][ T54] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.201796][ T54] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.212123][ T54] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.221421][ T54] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.230392][ T54] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.242794][ T54] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.251875][ T54] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.260980][ T54] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.287180][ T54] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.306235][ T54] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.325846][ T54] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.411772][ T1158] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.448745][ T5624] Bluetooth: hci4: command tx timeout [ 418.471794][ T1158] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.661000][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 418.768455][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 418.824501][ T1158] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.856232][ T1158] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.911719][T18009] IPVS: starting estimator thread 0... [ 418.917870][T18025] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 419.027912][T18037] IPVS: using max 27 ests per chain, 64800 per kthread [ 419.032735][ T1158] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.072779][ T1158] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.093623][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'. [ 419.138471][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'. [ 419.167198][T18039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3062'. [ 419.228032][ T1158] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.257359][ T1158] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.608296][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3068'. [ 420.032594][T18067] veth3: entered allmulticast mode [ 420.157554][T18088] x_tables: duplicate underflow at hook 1 [ 420.191392][ T1158] bond5: left allmulticast mode [ 420.199933][T18088] x_tables: duplicate underflow at hook 1 [ 420.206157][ T1158] bond5: left promiscuous mode [ 420.220150][ T1158] bridge0: port 3(bond5) entered disabled state [ 420.368352][ T1158] bond16 (unregistering): (slave ip6gretap0): Releasing active interface [ 420.384813][ T1158] bond17 (unregistering): (slave ip6gre1): Releasing backup interface [ 420.417118][ T1158] ip6gre1 (unregistering): left promiscuous mode [ 420.527215][ T5624] Bluetooth: hci4: command tx timeout [ 420.680993][T18104] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3077'. [ 420.863248][T18108] x_tables: duplicate underflow at hook 2 [ 420.871704][T18108] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 420.894221][ T1158] bond18 (unregistering): (slave geneve3): Releasing active interface [ 421.086873][ T1158] bond0 (unregistering): Released all slaves [ 421.106128][ T1158] bond1 (unregistering): Released all slaves [ 421.126745][ T1158] bond2 (unregistering): Released all slaves [ 421.141436][ T1158] bond3 (unregistering): Released all slaves [ 421.156799][ T1158] bond4 (unregistering): (slave veth9): Releasing active interface [ 421.165687][ T1158] bond4 (unregistering): Released all slaves [ 421.189889][ T1158] bond5 (unregistering): Released all slaves [ 421.203500][ T1158] bond6 (unregistering): Released all slaves [ 421.220900][ T1158] bond7 (unregistering): Released all slaves [ 421.240375][ T1158] bond8 (unregistering): Released all slaves [ 421.255518][ T1158] bond9 (unregistering): Released all slaves [ 421.269109][ T1158] bond10 (unregistering): Released all slaves [ 421.290687][ T1158] bond11 (unregistering): Released all slaves [ 421.304527][ T1158] bond12 (unregistering): Released all slaves [ 421.319943][ T1158] bond13 (unregistering): Released all slaves [ 421.341525][ T1158] bond14 (unregistering): Released all slaves [ 421.359398][ T1158] bond15 (unregistering): (slave veth13): Releasing backup interface [ 421.369197][ T1158] bond15 (unregistering): Released all slaves [ 421.383041][ T1158] bond16 (unregistering): Released all slaves [ 421.403305][ T1158] bond17 (unregistering): Released all slaves [ 421.421868][ T1158] bond18 (unregistering): Released all slaves [ 421.442648][ T1158] bond19 (unregistering): Released all slaves [ 421.528769][T18123] bond1: option arp_all_targets: invalid value (3) [ 421.545320][T18123] bond1 (unregistering): Released all slaves [ 421.830315][ T1158] tipc: Left network mode [ 421.994162][T18139] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 422.013933][T18142] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3087'. [ 422.044338][T18142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3087'. [ 422.494170][T18157] syzkaller0: entered promiscuous mode [ 422.500384][T18157] syzkaller0: entered allmulticast mode [ 422.622961][ T5624] Bluetooth: hci4: command tx timeout [ 423.038106][T18184] --map-set only usable from mangle table [ 423.162109][T18188] x_tables: duplicate entry at hook 1 [ 423.260411][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 423.893481][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 424.527215][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.697069][ T5624] Bluetooth: hci4: command tx timeout [ 424.891040][T18181] syz_tun: entered allmulticast mode [ 424.927297][T18182] syz_tun (unregistering): left allmulticast mode [ 424.941967][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 424.951552][T18184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3093'. [ 424.980274][T18190] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 425.064002][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3096'. [ 425.114916][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3096'. [ 425.350450][T17982] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.375585][T17982] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.383076][T17982] bridge_slave_0: entered allmulticast mode [ 425.390859][T17982] bridge_slave_0: entered promiscuous mode [ 425.400785][T18216] netlink: 'syz.2.3099': attribute type 16 has an invalid length. [ 425.416722][T17982] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.449450][T17982] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.458868][T17982] bridge_slave_1: entered allmulticast mode [ 425.476056][T17982] bridge_slave_1: entered promiscuous mode [ 425.733805][T17982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.801166][T17982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.949648][T18244] netlink: 'syz.2.3107': attribute type 2 has an invalid length. [ 426.200081][T17982] team0: Port device team_slave_0 added [ 426.231026][T17982] team0: Port device team_slave_1 added [ 426.277405][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3108'. [ 426.432317][ T1158] hsr_slave_0: left promiscuous mode [ 426.453252][ T1158] hsr_slave_1: left promiscuous mode [ 426.951624][T18279] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3111'. [ 428.181223][T18257] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 428.207306][ T4938] Bluetooth: hci4: command 0x0405 tx timeout [ 428.251698][T18263] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 428.289341][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 428.391973][T17982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.417930][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'. [ 428.429652][T17982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.510435][T17982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.528414][T17982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.535407][T17982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.564487][T17982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.765337][T17982] hsr_slave_0: entered promiscuous mode [ 428.805059][T17982] hsr_slave_1: entered promiscuous mode [ 428.823131][T17982] debugfs: 'hsr0' already exists in 'hsr' [ 428.836348][T17982] Cannot create hsr debugfs directory [ 428.922035][ T1158] IPVS: stop unused estimator thread 0... [ 429.042584][T18311] syzkaller0: entered promiscuous mode [ 429.057044][T18311] syzkaller0: entered allmulticast mode [ 429.885519][T18353] atomic_op ffff888052cd1998 conn xmit_atomic 0000000000000000 [ 429.910934][T18326] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 429.970922][T18354] IPVS: set_ctl: invalid protocol: 7210 10.1.1.2:20001 [ 430.129515][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 430.191101][T18363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3126'. [ 430.246123][T18334] syzkaller0: entered promiscuous mode [ 430.252576][T18334] syzkaller0: entered allmulticast mode [ 430.410232][T18373] netlink: 'syz.2.3129': attribute type 1 has an invalid length. [ 432.335329][T18373] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 432.647390][T18397] netlink: 352 bytes leftover after parsing attributes in process `syz.1.3133'. [ 432.703427][T18381] netlink: 'syz.3.3130': attribute type 1 has an invalid length. [ 432.716107][T18397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3133'. [ 432.761199][T18381] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3130'. [ 432.882633][T18392] syzkaller0: entered promiscuous mode [ 432.905261][T18392] syzkaller0: entered allmulticast mode [ 433.963983][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'. [ 434.070423][T17982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.140045][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.173359][T17982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.220580][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.246965][T17982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.273653][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.323081][T17982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.909670][T18483] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.918054][T18483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.927037][T18483] IPv6: NLM_F_CREATE should be set when creating new route [ 435.021980][T17982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.356757][T18488] syzkaller0: entered promiscuous mode [ 435.376310][T18488] syzkaller0: entered allmulticast mode [ 435.824467][T17982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.901865][T17982] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.935102][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.942293][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.011563][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.018754][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.275250][T18534] Cannot find del_set index 4 as target [ 436.869654][T18564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3159'. [ 436.923798][T18564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3159'. [ 437.149818][T18581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3161'. [ 437.178508][T18581] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3161'. [ 437.201153][T17982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.531076][T18601] openvswitch: netlink: Actions may not be safe on all matching packets [ 438.159733][T18635] netlink: 'syz.2.3171': attribute type 1 has an invalid length. [ 438.232765][T18635] gretap1: entered allmulticast mode [ 438.324309][T17982] veth0_vlan: entered promiscuous mode [ 438.361353][T17982] veth1_vlan: entered promiscuous mode [ 438.478533][T17982] veth0_macvtap: entered promiscuous mode [ 438.523756][T17982] veth1_macvtap: entered promiscuous mode [ 438.602499][T17982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.667235][T17982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.819190][ T8124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.862654][ T8124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.911917][ T8124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.952408][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 438.957779][ T8124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.046119][T18671] bond2: entered promiscuous mode [ 439.055341][T18671] bond2: entered allmulticast mode [ 439.159910][T18680] netlink: 'syz.2.3178': attribute type 11 has an invalid length. [ 439.209899][T18680] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3178'. [ 439.230073][T18670] bond12: option resend_igmp: invalid value (2878) [ 439.260857][T18670] bond12: option resend_igmp: allowed values 0 - 255 [ 439.300249][T18689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.312466][T18670] bond12 (unregistering): Released all slaves [ 439.334051][T18680] netlink: 'syz.2.3178': attribute type 10 has an invalid length. [ 439.348978][T18689] x_tables: duplicate underflow at hook 2 [ 439.382271][T18689] x_tables: duplicate underflow at hook 1 [ 439.400232][T18685] tipc: Enabling of bearer rejected, failed to enable media [ 439.468334][T18680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.494043][T18680] team0: Port device netdevsim1 added [ 439.898900][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.992824][ T8134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.028987][ T8134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.148027][ T4938] block nbd6: Receive control failed (result -32) [ 440.261708][ T8132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.303941][ T8132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.462597][T18744] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 440.634732][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 440.712607][T18744] bond12: entered promiscuous mode [ 440.744303][T18744] bond12: entered allmulticast mode [ 440.758842][T18744] 8021q: adding VLAN 0 to HW filter on device bond12 [ 440.981241][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 441.077311][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.090228][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.101074][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.112682][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.125963][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.524601][T18800] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3203'. [ 442.559573][T18802] netlink: 'syz.3.3201': attribute type 15 has an invalid length. [ 442.652094][T18802] block nbd7: server does not support multiple connections per device. [ 442.674823][T18802] block nbd7: shutting down sockets [ 442.750320][T18803] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 443.153712][ T8124] bridge_slave_1: left allmulticast mode [ 443.167084][ T5624] Bluetooth: hci2: command tx timeout [ 443.175988][ T8124] bridge_slave_1: left promiscuous mode [ 443.185631][ T8124] pimreg1: port 2(bridge_slave_1) entered disabled state [ 443.260660][T18828] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3208'. [ 443.532943][ T8124] bridge_slave_0: left allmulticast mode [ 443.549345][ T8124] bridge_slave_0: left promiscuous mode [ 443.568557][ T8124] pimreg1: port 1(bridge_slave_0) entered disabled state [ 443.665467][ T8124] dvmrp0: left allmulticast mode [ 443.680468][ T8124] dvmrp8: left allmulticast mode [ 443.841629][T18851] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3213'. [ 443.878286][T18851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3213'. [ 443.888406][ T8124] bond10 (unregistering): (slave vti0): Releasing backup interface [ 444.165302][ T8124] bond11 (unregistering): (slave geneve2): Releasing active interface [ 444.252150][ T8124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.262076][ T8124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.274026][ T8124] bond0 (unregistering): Released all slaves [ 444.284357][ T8124] bond1 (unregistering): Released all slaves [ 444.301608][ T8124] bond2 (unregistering): Released all slaves [ 444.316091][ T8124] bond3 (unregistering): Released all slaves [ 444.333045][ T8124] bond4 (unregistering): Released all slaves [ 444.354516][ T8124] bond5 (unregistering): Released all slaves [ 444.373000][ T8124] bond6 (unregistering): (slave veth3): Releasing active interface [ 444.383441][ T8124] bond6 (unregistering): (slave veth5): Releasing active interface [ 444.394339][ T8124] bond6 (unregistering): Released all slaves [ 444.412232][ T8124] bond7 (unregistering): (slave bond8): Releasing backup interface [ 444.421367][ T8124] bond7 (unregistering): Released all slaves [ 444.435120][ T8124] bond8 (unregistering): Released all slaves [ 444.452085][ T8124] bond9 (unregistering): Released all slaves [ 444.469338][ T8124] bond10 (unregistering): Released all slaves [ 444.483263][ T8124] bond11 (unregistering): Released all slaves [ 444.499765][ T8124] bond12 (unregistering): Released all slaves [ 444.516773][ T8124] bond13 (unregistering): Released all slaves [ 444.535992][ T8124] bond14 (unregistering): Released all slaves [ 444.574470][T18859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.591631][T18859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.625320][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 444.745611][ T8124] tipc: Disabling bearer [ 444.781669][ T8124] tipc: Disabling bearer [ 444.820199][ T8124] tipc: Left network mode [ 445.204896][T18769] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.216098][T18769] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.223654][T18769] bridge_slave_0: entered allmulticast mode [ 445.233785][T18769] bridge_slave_0: entered promiscuous mode [ 445.257334][T18769] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.266047][ T5624] Bluetooth: hci2: command tx timeout [ 445.269998][T18769] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.279283][T18769] bridge_slave_1: entered allmulticast mode [ 445.289540][T18769] bridge_slave_1: entered promiscuous mode [ 445.380933][T18769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.415966][T18769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.446078][T18769] team0: Port device team_slave_0 added [ 445.459346][T18769] team0: Port device team_slave_1 added [ 445.523631][T18769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.532214][T18769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.558983][T18769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.571703][T18769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.580185][T18769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.606773][T18769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.688509][T18769] hsr_slave_0: entered promiscuous mode [ 445.694783][T18769] hsr_slave_1: entered promiscuous mode [ 445.701180][T18769] debugfs: 'hsr0' already exists in 'hsr' [ 445.707051][T18769] Cannot create hsr debugfs directory [ 445.923940][ T8124] hsr_slave_0: left promiscuous mode [ 445.933563][ T8124] hsr_slave_1: left promiscuous mode [ 446.110073][T18822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.329817][T18892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3221'. [ 446.361049][ T8124] team0 (unregistering): Port device 26±ÿþ€ removed [ 446.370363][T18897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3224'. [ 446.370707][T18892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.388149][T18892] IPv6: NLM_F_CREATE should be set when creating new route [ 446.424555][ T8124] team0 (unregistering): Port device team_slave_0 removed [ 446.643822][T18906] IPVS: length: 158 != 24 [ 446.971190][T18936] netlink: 'syz.2.3229': attribute type 63 has an invalid length. [ 447.086215][T18899] syzkaller0: entered promiscuous mode [ 447.111681][T18899] syzkaller0: entered allmulticast mode [ 447.331716][ T5624] Bluetooth: hci2: command tx timeout [ 448.847701][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.855094][ C1] bridge0: topology change detected, propagating [ 449.407750][ T5624] Bluetooth: hci2: command tx timeout [ 449.850046][ T8124] IPVS: stop unused estimator thread 0... [ 450.126662][T19000] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 450.261175][T19004] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3240'. [ 450.801180][T19025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3244'. [ 450.832127][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3244'. [ 451.064047][T18769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.079828][T19033] xt_l2tp: v2 tid > 0xffff: 37482740 [ 451.089215][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.106548][T19035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3246'. [ 451.149513][T18769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.175979][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.206341][T18769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.233793][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.250303][T19035] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 451.282025][T18769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 451.331621][T18769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.447494][T19054] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3249'. [ 451.664439][T18769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.758011][T18769] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.783509][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.790685][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.863791][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.871017][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.202945][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3256'. [ 452.388604][T19100] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 452.435668][T19099] syzkaller0: entered promiscuous mode [ 452.475031][T19099] syzkaller0: entered allmulticast mode [ 452.691508][T19101] netlink: 'syz.4.3258': attribute type 2 has an invalid length. [ 452.837722][T19101] þ: entered promiscuous mode [ 452.975441][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'. [ 453.020147][T19125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'. [ 453.339522][T19135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.396582][T18769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.418923][T19135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.538398][T18769] veth0_vlan: entered promiscuous mode [ 453.582954][T18769] veth1_vlan: entered promiscuous mode [ 453.691884][T18769] veth0_macvtap: entered promiscuous mode [ 453.704446][T18769] veth1_macvtap: entered promiscuous mode [ 453.770787][T18769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.791835][T19154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.798087][T19155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3267'. [ 453.826360][T18769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.863728][ T8124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.879671][ T8124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.933325][ T8124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.955956][ T8124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.972721][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 454.189818][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.222093][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.338943][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.352769][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.396165][ T24] IPVS: starting estimator thread 0... [ 454.507048][T19172] IPVS: using max 29 ests per chain, 69600 per kthread [ 454.533295][T19174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3273'. [ 454.555072][T19179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3274'. [ 454.555961][T19178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3275'. [ 454.596398][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3275'. [ 454.615266][T19184] syzkaller0: entered promiscuous mode [ 454.620879][T19184] syzkaller0: entered allmulticast mode [ 454.666789][T19178] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.3275'. [ 454.947718][T19197] netlink: 'syz.0.3278': attribute type 23 has an invalid length. [ 455.052730][ T202] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.107302][T19201] erspan0: entered promiscuous mode [ 455.131514][T19201] macvtap1: entered promiscuous mode [ 455.154234][T19201] macvtap1: entered allmulticast mode [ 455.169054][T19201] erspan0: entered allmulticast mode [ 455.325151][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.344465][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.354521][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.369412][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.380611][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.682554][T19221] vlan2: entered allmulticast mode [ 455.705984][T19221] bond0: entered allmulticast mode [ 455.738309][T19221] bond_slave_0: entered allmulticast mode [ 455.762254][T19221] bond_slave_1: entered allmulticast mode [ 455.965973][T19243] netlink: 'syz.1.3288': attribute type 4 has an invalid length. [ 456.603184][T19249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.843176][T19265] __nla_validate_parse: 5 callbacks suppressed [ 456.843192][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 456.871286][T19270] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 456.897010][T19270] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3294'. [ 457.269311][T19287] syzkaller0: entered promiscuous mode [ 457.274846][T19287] syzkaller0: entered allmulticast mode [ 457.290664][T19287] TC_ACT_REPEAT abuse ? [ 457.463486][T19291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3299'. [ 457.486977][ T5624] Bluetooth: hci3: command tx timeout [ 457.910243][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 457.979927][T19296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'. [ 458.296058][T19321] netlink: 'syz.2.3307': attribute type 10 has an invalid length. [ 458.349088][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3306'. [ 458.403004][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 458.714902][T19211] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.732211][T19211] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.742077][T19211] bridge_slave_0: entered allmulticast mode [ 458.751254][T19211] bridge_slave_0: entered promiscuous mode [ 458.764750][T19211] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.783718][T19211] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.797350][T19211] bridge_slave_1: entered allmulticast mode [ 458.810051][T19211] bridge_slave_1: entered promiscuous mode [ 458.959653][T19211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.999642][T19211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.186337][T19211] team0: Port device team_slave_0 added [ 459.213481][T19211] team0: Port device team_slave_1 added [ 459.323799][T19211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.354538][T19211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.354985][T19347] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 459.423966][T19211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.451215][T19349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3316'. [ 459.467433][T19347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3315'. [ 459.568228][ T5624] Bluetooth: hci3: command tx timeout [ 459.666201][T19211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.685794][T19211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.721947][T19211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.754574][T19351] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3316'. [ 459.914054][T19211] hsr_slave_0: entered promiscuous mode [ 459.925223][T19211] hsr_slave_1: entered promiscuous mode [ 459.932209][T19211] debugfs: 'hsr0' already exists in 'hsr' [ 459.942443][T19211] Cannot create hsr debugfs directory [ 460.668157][T19377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.675456][T19377] IPv6: NLM_F_CREATE should be set when creating new route [ 460.685085][T19377] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 460.811296][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.819083][T19377] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.895894][T19377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.912320][T19377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.995049][T19382] bridge1: entered promiscuous mode [ 461.000835][T19382] bridge1: entered allmulticast mode [ 461.013016][T19382] team0: Port device bridge1 added [ 461.026686][T19384] vlan4: entered promiscuous mode [ 461.032118][T19384] team0: entered promiscuous mode [ 461.037660][T19384] team_slave_0: entered promiscuous mode [ 461.044788][T19384] team_slave_1: entered promiscuous mode [ 461.095509][T11419] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.121945][T11419] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.294355][T19211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.315203][T19211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.343102][T11419] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.353916][T19391] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 461.355134][T11419] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.422270][T19402] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 461.528695][T19211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.542105][T19211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.563608][T19408] netlink: 'syz.0.3335': attribute type 2 has an invalid length. [ 461.575729][T19410] netlink: 'syz.0.3335': attribute type 2 has an invalid length. [ 461.620398][T19211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.631324][T19211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.651274][ T5624] Bluetooth: hci3: command tx timeout [ 461.750054][T19211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.762704][T19211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.795431][T19415] tipc: Enabled bearer , priority 0 [ 461.804286][T19415] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 461.825066][T19420] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.833082][T19420] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.881992][T19412] tipc: Disabling bearer [ 462.185090][T19211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.194370][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.202793][T19211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.214555][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.222827][T19211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.232442][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.240743][T19211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.249915][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.343060][T19211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.361953][T19211] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.374882][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.381981][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.396183][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.403273][T11419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.682144][T19211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.723919][T19211] veth0_vlan: entered promiscuous mode [ 462.735726][T19211] veth1_vlan: entered promiscuous mode [ 462.789698][T19211] veth0_macvtap: entered promiscuous mode [ 462.822200][T19449] netlink: 'syz.1.3343': attribute type 1 has an invalid length. [ 462.843207][T19211] veth1_macvtap: entered promiscuous mode [ 462.874210][T19448] tipc: Enabled bearer , priority 0 [ 462.921809][T19211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.992689][T19448] tipc: Disabling bearer [ 463.040561][T19211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.093388][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.132942][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.162196][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.180401][T19465] __nla_validate_parse: 8 callbacks suppressed [ 463.180417][T19465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 463.183123][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 463.190146][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.240481][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 463.293804][T19473] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3350'. [ 463.729273][ T5624] Bluetooth: hci3: command tx timeout [ 463.840603][T19480] tipc: Started in network mode [ 463.856923][T19480] tipc: Node identity ba7bb6e0eb63, cluster identity 4711 [ 463.871664][T19480] tipc: Enabled bearer , priority 0 [ 463.887017][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.896591][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.919134][T19480] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 463.932301][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'. [ 464.079380][T19479] tipc: Disabling bearer [ 464.108829][T19488] lo speed is unknown, defaulting to 1000 [ 464.115633][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.130788][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.140389][T19488] lo speed is unknown, defaulting to 1000 [ 464.185744][T19488] lo speed is unknown, defaulting to 1000 [ 464.238621][T19488] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 464.271695][T19488] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 464.339585][T19488] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 464.435286][T19488] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 464.552211][T19488] lo speed is unknown, defaulting to 1000 [ 464.646231][T19500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3357'. [ 464.772665][T19492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.811558][T19488] lo speed is unknown, defaulting to 1000 [ 464.818862][T19507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3359'. [ 464.835828][T19488] lo speed is unknown, defaulting to 1000 [ 464.853798][T19488] lo speed is unknown, defaulting to 1000 [ 464.872451][T19488] lo speed is unknown, defaulting to 1000 [ 464.892375][T19488] lo speed is unknown, defaulting to 1000 [ 464.956723][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 465.004373][T19492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.109160][T19488] lo speed is unknown, defaulting to 1000 [ 465.135258][T19488] lo speed is unknown, defaulting to 1000 [ 465.363908][T19492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.425806][T19521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3363'. [ 465.426645][T19524] tipc: Enabled bearer , priority 0 [ 465.457160][T19519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3363'. [ 465.463091][T19524] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 465.783710][T19537] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 465.799792][T19523] tipc: Disabling bearer [ 465.849345][T19541] netlink: 'syz.3.3369': attribute type 11 has an invalid length. [ 465.976258][T19492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.233553][T19567] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 468.264480][T19567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 468.294989][T19567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 468.451984][T19596] __nla_validate_parse: 2 callbacks suppressed [ 468.452001][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'. [ 468.505451][T19599] tipc: Started in network mode [ 468.510543][T19599] tipc: Node identity 5e0f24c6052d, cluster identity 4711 [ 468.520188][T19599] tipc: Enabled bearer , priority 0 [ 468.533178][T11416] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.556362][T19594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 468.604672][ T202] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.716128][T19593] tipc: Disabling bearer [ 468.750570][T11416] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.787439][ T202] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.936729][T19613] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 469.455346][T19628] openvswitch: netlink: IP tunnel TTL not specified. [ 469.545641][T19632] netlink: 'syz.4.3392': attribute type 1 has an invalid length. [ 469.696024][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3394'. [ 469.801268][T19632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.804146][T19646] xt_connbytes: Forcing CT accounting to be enabled [ 469.880801][T19635] vlan2: entered allmulticast mode [ 469.903969][T19632] netlink: 'syz.4.3392': attribute type 51 has an invalid length. [ 469.926986][T19635] bond1: entered allmulticast mode [ 470.018790][T19639] bond1: (slave geneve2): making interface the new active one [ 470.033809][T19639] geneve2: entered allmulticast mode [ 470.055741][T19639] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 470.079011][T19651] C: renamed from veth1_to_team (while UP) [ 470.084899][T19615] lo speed is unknown, defaulting to 1000 [ 470.107379][T19651] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 470.122200][T19651] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 470.135530][T19651] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3394'. [ 470.167028][T19651] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 470.202842][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3396'. [ 470.262281][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3396'. [ 470.314321][ T29] audit: type=1107 audit(1783834092.582:30): pid=19656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 470.537261][T19664] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 470.564832][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 470.606822][T19664] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 470.742871][T19679] batadv_slave_0: entered promiscuous mode [ 470.803898][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 471.129055][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 471.438678][T19702] netlink: 'syz.3.3406': attribute type 1 has an invalid length. [ 471.463822][T19706] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 471.600058][T19702] bond1: entered promiscuous mode [ 471.626413][T19702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.671293][T19674] batadv_slave_0: left promiscuous mode [ 471.999224][T19727] netlink: 'syz.4.3413': attribute type 4 has an invalid length. [ 472.051430][T19728] netlink: 'syz.4.3413': attribute type 4 has an invalid length. [ 472.120364][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3413'. [ 472.190616][T19723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3413'. [ 472.531559][T19746] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 472.576492][T19750] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 472.581196][T19746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.714807][T19764] openvswitch: netlink: Unknown key attributes 20 [ 472.733620][T19750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.782215][T19766] openvswitch: netlink: Message has 1 unknown bytes. [ 472.865864][ T8134] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 472.882019][T19757] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 472.932421][T19762] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 472.970189][T19762] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 473.000853][T19762] bond1 (unregistering): Released all slaves [ 473.064424][T19782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 473.301592][T19775] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.313269][T19775] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.379427][T19793] tipc: Started in network mode [ 473.404509][T19793] tipc: Node identity ac14140f, cluster identity 4711 [ 473.417554][T19793] tipc: New replicast peer: 255.255.255.255 [ 473.441648][T19793] tipc: Enabled bearer , priority 26 [ 473.466775][T19794] __nla_validate_parse: 2 callbacks suppressed [ 473.466791][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3432'. [ 473.519486][T19775] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.537753][T19775] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.760899][T19775] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.788591][T19775] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.929745][T19825] nbd7: detected capacity change from 0 to 63 [ 473.964842][T19826] block nbd3: NBD_DISCONNECT [ 473.968854][T19825] sctp: [Deprecated]: syz.3.3440 (pid 19825) Use of int in max_burst socket option deprecated. [ 473.968854][T19825] Use struct sctp_assoc_value instead [ 473.995177][T19826] block nbd3: Send disconnect failed -32 [ 474.001287][T19826] block nbd3: shutting down sockets [ 474.031412][T19775] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.048225][T19775] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.098795][T19775] [ 474.101149][T19775] ====================================================== [ 474.108189][T19775] WARNING: possible circular locking dependency detected [ 474.115213][T19775] syzkaller #0 Not tainted [ 474.119621][T19775] ------------------------------------------------------ [ 474.126698][T19775] syz.0.3427/19775 is trying to acquire lock: [ 474.132755][T19775] ffff88801c28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 474.142715][T19775] [ 474.142715][T19775] but task is already holding lock: [ 474.150075][T19775] ffffffff8f5e37c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 474.158883][T19775] [ 474.158883][T19775] which lock already depends on the new lock. [ 474.158883][T19775] [ 474.169282][T19775] [ 474.169282][T19775] the existing dependency chain (in reverse order) is: [ 474.178299][T19775] [ 474.178299][T19775] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 474.185596][T19775] __mutex_lock+0x19d/0x1550 [ 474.190776][T19775] get_device_parent+0x16f/0x3a0 [ 474.196267][T19775] device_add+0x2d4/0xb80 [ 474.201106][T19775] device_create+0x269/0x300 [ 474.206199][T19775] msr_device_create+0x33/0x50 [ 474.211491][T19775] cpuhp_invoke_callback+0x434/0x810 [ 474.217311][T19775] cpuhp_thread_fun+0x362/0x780 [ 474.222674][T19775] smpboot_thread_fn+0x57c/0xa80 [ 474.228125][T19775] kthread+0x388/0x470 [ 474.232712][T19775] ret_from_fork+0x514/0xb70 [ 474.237840][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.243113][T19775] [ 474.243113][T19775] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 474.250743][T19775] cpuhp_thread_fun+0x127/0x780 [ 474.256110][T19775] smpboot_thread_fn+0x57c/0xa80 [ 474.261562][T19775] kthread+0x388/0x470 [ 474.266147][T19775] ret_from_fork+0x514/0xb70 [ 474.271247][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.276519][T19775] [ 474.276519][T19775] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 474.284233][T19775] cpus_read_lock+0x42/0x160 [ 474.289328][T19775] static_key_slow_inc+0x12/0x30 [ 474.294802][T19775] tcp_md5_do_add+0x1d4/0x390 [ 474.300069][T19775] tcp_v6_parse_md5_keys+0x550/0x670 [ 474.305924][T19775] do_tcp_setsockopt+0x1250/0x1f80 [ 474.311576][T19775] do_sock_setsockopt+0x17c/0x1b0 [ 474.317123][T19775] __x64_sys_setsockopt+0x13d/0x1b0 [ 474.322830][T19775] do_syscall_64+0x174/0x580 [ 474.327931][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.334329][T19775] [ 474.334329][T19775] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 474.342045][T19775] lock_sock_nested+0x41/0x100 [ 474.347314][T19775] inet_shutdown+0x6a/0x390 [ 474.352387][T19775] nbd_mark_nsock_dead+0x2cb/0x550 [ 474.358080][T19775] recv_work+0x1cee/0x1e10 [ 474.363011][T19775] process_scheduled_works+0xa8e/0x14e0 [ 474.369079][T19775] worker_thread+0xa47/0xfb0 [ 474.374178][T19775] kthread+0x388/0x470 [ 474.378758][T19775] ret_from_fork+0x514/0xb70 [ 474.383858][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.389128][T19775] [ 474.389128][T19775] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 474.396757][T19775] __mutex_lock+0x19d/0x1550 [ 474.401863][T19775] nbd_queue_rq+0x373/0x1150 [ 474.406971][T19775] blk_mq_dispatch_rq_list+0x499/0x1990 [ 474.413183][T19775] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 474.420063][T19775] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 474.426560][T19775] blk_mq_run_work_fn+0x16c/0x300 [ 474.432090][T19775] process_scheduled_works+0xa8e/0x14e0 [ 474.438142][T19775] worker_thread+0xa47/0xfb0 [ 474.443238][T19775] kthread+0x388/0x470 [ 474.447814][T19775] ret_from_fork+0x514/0xb70 [ 474.452915][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.458186][T19775] [ 474.458186][T19775] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 474.465385][T19775] __mutex_lock+0x19d/0x1550 [ 474.470489][T19775] nbd_queue_rq+0xc1/0x1150 [ 474.475502][T19775] blk_mq_dispatch_rq_list+0x499/0x1990 [ 474.481555][T19775] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 474.488393][T19775] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 474.494880][T19775] blk_mq_run_work_fn+0x16c/0x300 [ 474.500407][T19775] process_scheduled_works+0xa8e/0x14e0 [ 474.506458][T19775] worker_thread+0xa47/0xfb0 [ 474.511553][T19775] kthread+0x388/0x470 [ 474.516133][T19775] ret_from_fork+0x514/0xb70 [ 474.521230][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.526497][T19775] [ 474.526497][T19775] -> #5 (set->srcu){.+.+}-{0:0}: [ 474.533606][T19775] __synchronize_srcu+0xc9/0x2f0 [ 474.539059][T19775] elevator_switch+0x1e8/0x7b0 [ 474.544404][T19775] elevator_change+0x2fa/0x480 [ 474.549672][T19775] elevator_set_default+0x375/0x440 [ 474.555377][T19775] blk_register_queue+0x3f3/0x4e0 [ 474.560950][T19775] __add_disk+0x6cb/0xe30 [ 474.565819][T19775] add_disk_fwnode+0xfb/0x4b0 [ 474.570999][T19775] nbd_dev_add+0x733/0xb60 [ 474.575924][T19775] nbd_init+0x15f/0x1e0 [ 474.580662][T19775] do_one_initcall+0x250/0x870 [ 474.585937][T19775] do_initcall_level+0x10a/0x1a0 [ 474.591403][T19775] do_initcalls+0x59/0xa0 [ 474.596243][T19775] kernel_init_freeable+0x29d/0x3e0 [ 474.601948][T19775] kernel_init+0x1d/0x1d0 [ 474.606783][T19775] ret_from_fork+0x514/0xb70 [ 474.611881][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.617147][T19775] [ 474.617147][T19775] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 474.624948][T19775] __mutex_lock+0x19d/0x1550 [ 474.630051][T19775] elevator_change+0x1af/0x480 [ 474.635322][T19775] elevator_set_none+0xb5/0x140 [ 474.640677][T19775] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 474.646992][T19775] nbd_start_device+0x189/0xb30 [ 474.652355][T19775] nbd_genl_connect+0x1597/0x1c10 [ 474.657887][T19775] genl_family_rcv_msg_doit+0x233/0x340 [ 474.664003][T19775] genl_rcv_msg+0x614/0x7a0 [ 474.669016][T19775] netlink_rcv_skb+0x226/0x4a0 [ 474.674295][T19775] genl_rcv+0x28/0x40 [ 474.678966][T19775] netlink_unicast+0x7bb/0x940 [ 474.684237][T19775] netlink_sendmsg+0x813/0xb40 [ 474.689502][T19775] sock_sendmsg_nosec+0x13a/0x180 [ 474.695033][T19775] ____sys_sendmsg+0x54e/0x850 [ 474.700311][T19775] ___sys_sendmsg+0x2a5/0x360 [ 474.705497][T19775] __x64_sys_sendmsg+0x1b1/0x290 [ 474.710944][T19775] do_syscall_64+0x174/0x580 [ 474.716047][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.722445][T19775] [ 474.722445][T19775] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 474.731034][T19775] blk_alloc_queue+0x544/0x690 [ 474.736308][T19775] __blk_mq_alloc_disk+0x194/0x390 [ 474.741927][T19775] nbd_dev_add+0x494/0xb60 [ 474.746850][T19775] nbd_init+0x15f/0x1e0 [ 474.751513][T19775] do_one_initcall+0x250/0x870 [ 474.756789][T19775] do_initcall_level+0x10a/0x1a0 [ 474.762237][T19775] do_initcalls+0x59/0xa0 [ 474.767077][T19775] kernel_init_freeable+0x29d/0x3e0 [ 474.772785][T19775] kernel_init+0x1d/0x1d0 [ 474.777617][T19775] ret_from_fork+0x514/0xb70 [ 474.782715][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.787982][T19775] [ 474.787982][T19775] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 474.795179][T19775] fs_reclaim_acquire+0x71/0x100 [ 474.800655][T19775] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 474.806883][T19775] alloc_inode+0xb8/0x1b0 [ 474.811726][T19775] iget_locked+0x131/0x6a0 [ 474.816648][T19775] kernfs_get_inode+0x4f/0x770 [ 474.821918][T19775] kernfs_get_tree+0x5cd/0x980 [ 474.827187][T19775] vfs_get_tree+0x92/0x2a0 [ 474.832106][T19775] do_new_mount+0x319/0xdc0 [ 474.837117][T19775] __se_sys_mount+0x31d/0x420 [ 474.842299][T19775] do_syscall_64+0x174/0x580 [ 474.847400][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.853796][T19775] [ 474.853796][T19775] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 474.861771][T19775] down_write+0x96/0x200 [ 474.866527][T19775] kernfs_remove_by_name_ns+0x4e/0x140 [ 474.872508][T19775] device_links_driver_bound+0x4ab/0x1440 [ 474.878742][T19775] driver_bound+0xd8/0x2e0 [ 474.883732][T19775] really_probe+0x774/0xae0 [ 474.888739][T19775] __driver_probe_device+0x1e8/0x360 [ 474.894526][T19775] driver_probe_device+0x4f/0x240 [ 474.900057][T19775] __device_attach_driver+0x270/0x410 [ 474.905932][T19775] bus_for_each_drv+0x258/0x2f0 [ 474.911290][T19775] __device_attach+0x2c4/0x450 [ 474.916555][T19775] device_initial_probe+0xa1/0xd0 [ 474.922083][T19775] bus_probe_device+0x12a/0x220 [ 474.927440][T19775] device_add+0x7d7/0xb80 [ 474.932292][T19775] faux_device_create_with_groups+0x1a5/0x2b0 [ 474.938919][T19775] regulator_dummy_init+0x19/0x40 [ 474.944480][T19775] regulator_init+0xca/0x110 [ 474.949573][T19775] do_one_initcall+0x250/0x870 [ 474.954847][T19775] do_initcall_level+0x10a/0x1a0 [ 474.960294][T19775] do_initcalls+0x59/0xa0 [ 474.965132][T19775] kernel_init_freeable+0x29d/0x3e0 [ 474.970840][T19775] kernel_init+0x1d/0x1d0 [ 474.975679][T19775] ret_from_fork+0x514/0xb70 [ 474.980778][T19775] ret_from_fork_asm+0x1a/0x30 [ 474.986049][T19775] [ 474.986049][T19775] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 474.994631][T19775] __lock_acquire+0x1520/0x2cf0 [ 474.999999][T19775] lock_acquire+0x106/0x350 [ 475.005029][T19775] down_read+0x4a/0x330 [ 475.009688][T19775] kernfs_remove+0x35/0x80 [ 475.014612][T19775] __kobject_del+0xe0/0x310 [ 475.019716][T19775] kobject_del+0x45/0x60 [ 475.024460][T19775] cleanup_glue_dir+0x1a3/0x220 [ 475.029812][T19775] device_del+0x77d/0x8f0 [ 475.034647][T19775] unregister_netdevice_many_notify+0x1be4/0x2150 [ 475.041613][T19775] unregister_netdevice_queue+0x2f5/0x340 [ 475.047836][T19775] nsim_destroy+0x275/0x800 [ 475.052905][T19775] __nsim_dev_port_del+0x14e/0x200 [ 475.058562][T19775] nsim_dev_reload_destroy+0x288/0x490 [ 475.064529][T19775] nsim_dev_reload_down+0x8a/0xc0 [ 475.070062][T19775] devlink_reload+0x1c5/0x890 [ 475.075315][T19775] devlink_nl_reload_doit+0xa9c/0xc80 [ 475.081196][T19775] genl_family_rcv_msg_doit+0x233/0x340 [ 475.087250][T19775] genl_rcv_msg+0x614/0x7a0 [ 475.092257][T19775] netlink_rcv_skb+0x226/0x4a0 [ 475.097532][T19775] genl_rcv+0x28/0x40 [ 475.102021][T19775] netlink_unicast+0x7bb/0x940 [ 475.107302][T19775] netlink_sendmsg+0x813/0xb40 [ 475.112581][T19775] sock_sendmsg_nosec+0x13a/0x180 [ 475.118117][T19775] ____sys_sendmsg+0x54e/0x850 [ 475.123391][T19775] ___sys_sendmsg+0x2a5/0x360 [ 475.128576][T19775] __x64_sys_sendmsg+0x1b1/0x290 [ 475.134025][T19775] do_syscall_64+0x174/0x580 [ 475.139122][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.145519][T19775] [ 475.145519][T19775] other info that might help us debug this: [ 475.145519][T19775] [ 475.155723][T19775] Chain exists of: [ 475.155723][T19775] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 475.155723][T19775] [ 475.169089][T19775] Possible unsafe locking scenario: [ 475.169089][T19775] [ 475.176587][T19775] CPU0 CPU1 [ 475.181982][T19775] ---- ---- [ 475.187422][T19775] lock(gdp_mutex); [ 475.191303][T19775] lock(cpuhp_state-up); [ 475.198134][T19775] lock(gdp_mutex); [ 475.204554][T19775] rlock(&root->kernfs_supers_rwsem); [ 475.209999][T19775] [ 475.209999][T19775] *** DEADLOCK *** [ 475.209999][T19775] [ 475.218184][T19775] 5 locks held by syz.0.3427/19775: [ 475.223362][T19775] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.231569][T19775] #1: ffff888033b9e128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 475.241909][T19775] #2: ffff888033b9a258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 475.253037][T19775] #3: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 475.262000][T19775] #4: ffffffff8f5e37c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 475.271144][T19775] [ 475.271144][T19775] stack backtrace: [ 475.277030][T19775] CPU: 1 UID: 0 PID: 19775 Comm: syz.0.3427 Not tainted syzkaller #0 PREEMPT(full) [ 475.277050][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.277060][T19775] Call Trace: [ 475.277066][T19775] [ 475.277072][T19775] dump_stack_lvl+0xe8/0x150 [ 475.277097][T19775] print_circular_bug+0x2e1/0x300 [ 475.277113][T19775] check_noncircular+0x12e/0x150 [ 475.277137][T19775] __lock_acquire+0x1520/0x2cf0 [ 475.277163][T19775] ? kernfs_remove+0x35/0x80 [ 475.277184][T19775] lock_acquire+0x106/0x350 [ 475.277201][T19775] ? kernfs_remove+0x35/0x80 [ 475.277225][T19775] down_read+0x4a/0x330 [ 475.277238][T19775] ? kernfs_remove+0x35/0x80 [ 475.277259][T19775] kernfs_remove+0x35/0x80 [ 475.277278][T19775] __kobject_del+0xe0/0x310 [ 475.277295][T19775] kobject_del+0x45/0x60 [ 475.277309][T19775] cleanup_glue_dir+0x1a3/0x220 [ 475.277324][T19775] device_del+0x77d/0x8f0 [ 475.277340][T19775] ? __pfx_device_del+0x10/0x10 [ 475.277352][T19775] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 475.277432][T19775] ? netdev_unregister_kobject+0x347/0x450 [ 475.277521][T19775] unregister_netdevice_many_notify+0x1be4/0x2150 [ 475.277543][T19775] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 475.277559][T19775] ? __mutex_lock+0x30d/0x1550 [ 475.277580][T19775] ? __kfree_rcu_sheaf+0x1f/0x5e0 [ 475.277597][T19775] ? lock_acquire+0x106/0x350 [ 475.277615][T19775] ? __kfree_rcu_sheaf+0x1f/0x5e0 [ 475.277636][T19775] unregister_netdevice_queue+0x2f5/0x340 [ 475.277653][T19775] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 475.277671][T19775] nsim_destroy+0x275/0x800 [ 475.277692][T19775] __nsim_dev_port_del+0x14e/0x200 [ 475.277714][T19775] nsim_dev_reload_destroy+0x288/0x490 [ 475.277737][T19775] nsim_dev_reload_down+0x8a/0xc0 [ 475.277758][T19775] devlink_reload+0x1c5/0x890 [ 475.277779][T19775] ? __pfx_devlink_reload+0x10/0x10 [ 475.277798][T19775] ? devlink_resources_validate+0xa7/0xd0 [ 475.277845][T19775] ? devlink_resources_validate+0xa7/0xd0 [ 475.277865][T19775] devlink_nl_reload_doit+0xa9c/0xc80 [ 475.277886][T19775] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 475.277905][T19775] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 475.277924][T19775] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 475.277945][T19775] genl_family_rcv_msg_doit+0x233/0x340 [ 475.277965][T19775] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 475.277988][T19775] ? bpf_lsm_capable+0x9/0x20 [ 475.278016][T19775] ? security_capable+0x7e/0x2c0 [ 475.278090][T19775] genl_rcv_msg+0x614/0x7a0 [ 475.278108][T19775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.278125][T19775] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 475.278142][T19775] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 475.278160][T19775] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 475.278178][T19775] ? __pfx_ref_tracker_free+0x10/0x10 [ 475.278228][T19775] ? __asan_memcpy+0x40/0x70 [ 475.278252][T19775] ? __skb_clone+0x5c/0x6c0 [ 475.278275][T19775] netlink_rcv_skb+0x226/0x4a0 [ 475.278297][T19775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.278314][T19775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.278340][T19775] ? down_read+0x2be/0x330 [ 475.278354][T19775] genl_rcv+0x28/0x40 [ 475.278369][T19775] netlink_unicast+0x7bb/0x940 [ 475.278392][T19775] netlink_sendmsg+0x813/0xb40 [ 475.278410][T19775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.278425][T19775] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.278440][T19775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.278453][T19775] sock_sendmsg_nosec+0x13a/0x180 [ 475.278471][T19775] ____sys_sendmsg+0x54e/0x850 [ 475.278499][T19775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.278523][T19775] ? import_iovec+0x73/0xa0 [ 475.278544][T19775] ___sys_sendmsg+0x2a5/0x360 [ 475.278565][T19775] ? __lock_acquire+0x683/0x2cf0 [ 475.278584][T19775] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.278606][T19775] ? futex_wake+0x51b/0x5f0 [ 475.278640][T19775] ? __fget_files+0x2a/0x420 [ 475.278657][T19775] ? __fget_files+0x3a2/0x420 [ 475.278678][T19775] __x64_sys_sendmsg+0x1b1/0x290 [ 475.278700][T19775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.278727][T19775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.278742][T19775] do_syscall_64+0x174/0x580 [ 475.278762][T19775] ? trace_irq_disable+0x3b/0x140 [ 475.278779][T19775] ? clear_bhb_loop+0x40/0x90 [ 475.278796][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.278810][T19775] RIP: 0033:0x7f01e9d9de59 [ 475.278825][T19775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.278838][T19775] RSP: 002b:00007f01eacd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.278855][T19775] RAX: ffffffffffffffda RBX: 00007f01ea025fa0 RCX: 00007f01e9d9de59 [ 475.278866][T19775] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 475.278876][T19775] RBP: 00007f01e9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 475.278885][T19775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.278894][T19775] R13: 00007f01ea026038 R14: 00007f01ea025fa0 R15: 00007ffec42f6048 [ 475.278910][T19775] [ 475.766943][ T5624] block nbd7: Receive control failed (result -104) [ 475.848057][ T5354] tipc: Node number set to 2886997007 [ 475.919280][ T8132] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.928100][ T8132] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.941086][T11419] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.949331][T11419] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.961162][T11419] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.969449][T11419] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.981050][T11419] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.989436][T11419] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0