last executing test programs: 19.089000701s ago: executing program 2 (id=3136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.863474458s ago: executing program 2 (id=3139): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001500)="01a2ad91001fa594", 0x8}], 0x1}}], 0x2, 0x4000) sendmsg(r0, &(0x7f0000001340)={&(0x7f0000000100)=@ethernet={0x1, @random="ea1c876705d0"}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000b9a58b3b3ec8ea9d4624f36cb0a9f2dc0698d0da363277967f60321f06f09d108a06e000b6aa820d2e34b4ef5f55c1a7c1c65c90453ed9f019ea5d3ed3f1e827b36265196dfcae4394f68c9b89784b92b1e0067c1e38ffa0317854ed010b00008b4d13d37b026038091b030a73ba64d17e1fe64bff181289cc2edd3643cbc57a121b0ec55e405ea5287dde1c249f89a28d649fd3d5c136d11859e7ad8a910f81a267ae5385fc217acf0de9735eda7a16f3253dac622daac32d4eca5d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000140)="20ad8c558dcb87b45be7e75dbab01a4b044c27d14a9b2aadec58d7d8601523d47b9306757d4cd229b171191b592fbd22f2f5480f54ec9432e27536450ede7e0009afe365209105366b216cba0de81543940f4a5e65c952c0b68cf9fe09239fbf669db0c584421ef3aa17db2da69feaaa3bb24db9f577ea", &(0x7f00000001c0)=""/153}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000140)="20ad8c558dcb87b45be7e75dbab01a4b044c27d14a9b2aadec58d7d8601523d47b9306757d4cd229b171191b592fbd22f2f5480f54ec9432e27536450ede7e0009afe365209105366b216cba0de81543940f4a5e65c952c0b68cf9fe09239fbf669db0c584421ef3aa17db2da69feaaa3bb24db9f577ea", &(0x7f00000001c0)=""/153}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000004"], 0x0, 0x52}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x1}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendto$packet(r7, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="9703d79289ddec7d45d705aaaaaaaaaaaa00000000000086dd61bc4a0600462f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000101008100db05000086dd88a888be000000031c0885140100000000007b40080022eb0000000223022309020000002000000300"], 0x0) (async) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="9703d79289ddec7d45d705aaaaaaaaaaaa00000000000086dd61bc4a0600462f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000101008100db05000086dd88a888be000000031c0885140100000000007b40080022eb0000000223022309020000002000000300"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 18.430330119s ago: executing program 2 (id=3144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004100)=@bloom_filter={0x1e, 0x3, 0x7, 0x60e, 0x65040, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xf}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000440)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18.098175197s ago: executing program 2 (id=3147): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x10, 0x8, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x65, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x27, 0x25, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010102, @multicast2, @multicast2]}]}}}}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000280)={{0xffffffffffffffff, &(0x7f0000000140)=',\xbe:\x19k$\x00', 0x200280, &(0x7f0000000180)={@align=0x7fffffffffffffff, {0x5, 0x9, 0xf8, 0x5}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x101}, {[0x1, 0x903, 0x2, 0x2]}, 0x3, 0xa, &(0x7f0000000240)=""/10}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0xa00000, 0x40, 0x1000, r0, 0x0, '\x00', r1, r2, 0x5, 0x5, 0x5, 0x8}, 0x50) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @random="2f46c6fb0e98"}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map=r3, 0x26, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = accept4$packet(r2, &(0x7f0000000980), &(0x7f00000009c0)=0x14, 0x81800) getsockname$packet(r5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000a80)='macvtap0\x00') ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000b00)={0x0, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, @nfc={0x27, 0x0, 0x0, 0x3}, @ethernet={0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000ac0)='pimreg\x00', 0x7, 0xfffffffffffffffb, 0x4}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b80), 0x400200, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001e80)={{r6, &(0x7f0000000bc0)='\x00', 0x82000, &(0x7f0000000c00)={@_ha_fsid={[0x4, 0x76f]}, {0x4, 0x8, 0xffff}}, 0x4, &(0x7f0000000c40), &(0x7f0000000c80)=0xfffffffd}, 0x3, &(0x7f0000001e00)=[{0x1, 0x3, &(0x7f0000000cc0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000d00)="117dacd8b3850e03ef9cc81736f9efbd52d2697c39c3e299d61c5f92bbf0c827ee200cf31df551cc0e15f1796a87da16e3", 0x31, 0x1394d0a1ae9e9f2c}, {0x1, 0x7, &(0x7f0000000d40)='erspan0\x00', &(0x7f0000000d80)="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", 0x1000, 0x32}, {0xe3f46cb2459bd38c, 0xffffff93, &(0x7f0000001d80)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000001dc0), 0x0, 0x1a}]}) r8 = accept4$packet(r2, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001f40)=0x14, 0x800) getsockname$packet(r8, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000002000)=0x0, &(0x7f0000002040)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0}, &(0x7f00000020c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002100)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x0, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x8, r9, r10}, {0x9d, 0x0, 0x5, 0x9, 0x4, 0x80, 0x4e3}, {0x6, 0x0, 0x2, 0x3a8a}, 0x3, 0x6e6bb2, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d6, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3507, 0x4, 0x0, 0x3a, 0x0, 0x0, 0x8}}, 0xe8) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCDELDLCI(r11, 0x8981, &(0x7f0000002200)={'batadv_slave_1\x00', 0x3}) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000002240)) r12 = socket$inet(0x2, 0x1, 0x3) setsockopt$inet_opts(r12, 0x0, 0xd, &(0x7f0000002280)="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", 0x1000) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000003280)) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f00000032c0)={'pimreg0\x00', {0x2, 0x0, @multicast2}}) epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000003300)={0x0, 0x8}, &(0x7f0000003340)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000003380)={r13, 0x84, "2f6565b4ba7a897e23458d51653e684d378b68ba9aaaa2041b57b1b906439d8ec0b59b54ab437c76ee1b72a7b9726aa9a2b6822ad6504d9b3adb3d2d28fadd6a07da0b6e529bd4a2d916626eb21f724e6f45862e64e4bd4fddf4e17f110822b0a158559dbd00a8f471aa5e807722e1b45c79ad74850e5e2dbb6c37e48092b1acd142cfe8"}, &(0x7f0000003440)=0x8c) 17.748485273s ago: executing program 2 (id=3151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x18, 0x38, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0xc000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x80000001, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.473962886s ago: executing program 2 (id=3153): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000810) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f0000000940)="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", 0x1000) (async) socket(0x21, 0x1, 0x81) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x8, 0x7, 0x1200}, 0x50) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) 12.417827432s ago: executing program 0 (id=3197): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113700000000001600000000001fff9500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000014) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x40106183, &(0x7f0000000040)={{r0, 0x0, 0x3010c0, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) 8.334012134s ago: executing program 0 (id=3227): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000002ec0)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="140000000000000040de4a5dc13566b50700000000090000800000070000009402060000000000000000"], 0x48}, 0xc044) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x548, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x317, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x800) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0xd, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="130000002402000000000000", @ANYRES32=r4, @ANYRES64=0x0], 0x20) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x40000044) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d0001007379"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r12 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r12, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) connect$inet6(r12, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) 7.894107345s ago: executing program 0 (id=3229): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}, {&(0x7f00000000c0)="527b239ffc0f7fdab81f20d2ce61dc4d090c84ca24ebefb09fd3936ee55c998e908817e980c12ecc5c71b2366a6df365034c9595bfabaf39f984ade1719f5b7399b1f5138516413bf7b0072a5c6552c3733a9de96bf015329a3e521887665967c07544f0532c5287246eae333e66e4c33ff99a4798734ff6b0f555ab43934391c2d0ec9fcb469dfaf6aa449207bfc48b7d4367c55e471d0252f196372f13b163f8004d550f5bd022899de0e011c878155dc57046a08a4911d2c7b34a720bd55e6d55326cd0d6a76cbc4e497cb49dadcb2d1a76bb955df1eeeb86fbd50546cc3faeddf7a6e6d0d3", 0xe7}], 0x2, 0x0, 0x0, 0x7a000000}, 0x0) 3.14346275s ago: executing program 1 (id=3252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000e80b0002800600180000000000"], 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xa4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x68, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xfcdd, 0x4, 0x8001}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0xef}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) 3.0172833s ago: executing program 0 (id=3253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000090000000000000080000000000000000000000000000000fcffffff00000000000000000000000004010500fc000000000000000000000000000004000000003c00000000000000000000000000000000000000000000000235000000020000000000000000000000000000fe8000000000000000000000000000bb000000003c0000000a000000ffffffff000000000000000018000000fbffffff04030000060000000008000000000000e0000002000000000000000000000000000000003300000000000000ff020000000000000000000000000001043500000002040000000000bb0a00000000000000000000000000000000000000000000000004d43200000000000000ac1414aa0000000000000000000000000400000000010800000000000000000000040000"], 0x1bc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000100)) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x13f}], 0x1}}], 0x1, 0x2090) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000000000)) r5 = socket(0x0, 0x1, 0x2) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001300)={0x4, {{0xa, 0x4e23, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x0, 0x9, [{{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x4e20, 0xb7, @empty, 0x7d98}}, {{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, {{0xa, 0x4e21, 0x8, @mcast2, 0x657c}}, {{0xa, 0x4e22, 0x3, @empty, 0x81}}, {{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {{0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {{0xa, 0x4e21, 0x400, @mcast1, 0x6}}, {{0xa, 0x4e22, 0x944, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}]}, 0x510) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000380)=0xe) (async) socket(0x400000000010, 0x3, 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000000480)) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) 2.60524246s ago: executing program 0 (id=3256): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x3, 0x6, @local}, 0x14) (async) r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x25dfdbfa, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0xff, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x8, 0x0, 0x5, 0x5, 0x81, 0x8000, 0x8, {0x0, @in6={{0xa, 0x4e23, 0x0, @remote, 0x8001}}, 0x2, 0x7, 0x1, 0xa0, 0x9}}, &(0x7f0000000480)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000380)={r4, 0x0, &(0x7f0000000580)}, &(0x7f00000004c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f00000000c0)=0x18) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x83}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x808) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) (async) r7 = socket(0x2d, 0x2, 0x0) sendmsg$nl_route_sched_retired(r7, 0x0, 0x40) bind$xdp(r7, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socket$packet(0x11, 0x3, 0x300) 2.46392662s ago: executing program 1 (id=3258): r0 = epoll_create(0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0xb0000001}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) read(r2, &(0x7f0000000200)=""/4110, 0x100e) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0xfffffe7d) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x4040010) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000040), 0x4) 2.347328052s ago: executing program 4 (id=3260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.137690441s ago: executing program 4 (id=3262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r5, &(0x7f00000014c0), 0x0}, 0x20) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r6, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r6, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.893394089s ago: executing program 4 (id=3264): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x125c}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000290, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0x5d, 0xfffffffffffffffe, 0xc3000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.606472515s ago: executing program 4 (id=3265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xfffffff5}, @TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x77c6) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x8, 0x4) 1.523541882s ago: executing program 1 (id=3266): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f00000025c0)=""/222, &(0x7f0000000000)=0xde) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@getqdisc={0x24, 0x26, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1, 0xfff7}, {0xa, 0xc}, {0xfff1, 0xfff3}}}, 0x24}}, 0x81) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0x5}, {0xf, 0x6}, {0x2, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x22020600) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x8}, 0x10}, 0x94) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r11, r12, 0x26, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r8, @ANYRES16=r8, @ANYRESOCT=r3], 0x4c}}, 0x6d75e43d1e37a701) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400009d07ba00", @ANYRES16=r8, @ANYBLOB="010025f405e10700df2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c0c8}, 0x4004801) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200029bd7000fddbdf2955000000080001003f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000005c000000"], 0x30}}, 0x40040) unshare(0x50000000) connect(r4, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8, 0x1}, 0x80) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.354388126s ago: executing program 4 (id=3268): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 1.197808002s ago: executing program 3 (id=3269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0xb, 0x60, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 957.50427ms ago: executing program 3 (id=3270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b7020058020000007b9af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 757.966432ms ago: executing program 1 (id=3271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="b9cc42f4b2640ecbb62078aef0d5d3a2ac", 0x11}], 0x1}}], 0x3, 0x20000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfffffff1, @dev={0xfe, 0x80, '\x00', 0x30}, 0xe}, 0x1c) unshare(0x8040480) writev(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) 727.338568ms ago: executing program 3 (id=3272): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) (async) close(r3) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x0, 0x5000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001980)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [0xff], 'veth1_virt_wifi\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x1, 0x28}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x5d0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000280), &(0x7f0000000440)=r6}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa10000000007010000f8ffffffbfa400000000000007040000f0dfffffb77b897b4a83da276f2f0200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 579.894042ms ago: executing program 1 (id=3273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="25a688a800a34400000012f2c834", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000000206010100000000000000000500000a0900020073797a300000000001000500ff00000005000500030000001c0007800500030006000000080017400000007f08001340000000010900020073797a300000000005000100070000000500040003000000ed1c79390875858896e7c632fad12a1956fc30cf0ec7025749a422cdd5eb4aa9392317569920f0e3b8cb0a01248c8a0ea3dafa0d8858f569f5232948e012b3"], 0x68}, 0x1, 0x0, 0x0, 0x240640c0}, 0x40001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) 417.953109ms ago: executing program 3 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000480)={0x0, 0xff5b, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000904000000000b0200000002000000000000120000000000005f00400000000000"], &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x2000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d0, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0x200, 0x0, 0x0, 0x8000, 0x0, 0x799, 0x0, 0x0, 0x8, 0x40000c, 0x5}}) 361.020909ms ago: executing program 0 (id=3275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xffffffff, 0x0, 0x5]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x100, 0x1, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b595153700", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff000000000800080070030000"], 0x34}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x6}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x30]}}, &(0x7f00000004c0)=""/160, 0x34, 0xa0, 0x1, 0x7}, 0x28) r11 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r11, 0x0, 0x800, 0x0) bind$pptp(r12, &(0x7f0000000280)={0x18, 0x2, {0x2, @local}}, 0x1e) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xe1, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r11, @ANYRES8=0x0, @ANYRES16, @ANYRES32=r10], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r13) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000001880)={0xfffffffffffffffc, 0x0, &(0x7f0000001840)={&(0x7f0000000680)=ANY=[@ANYBLOB="88110000", @ANYRES16=r15, @ANYBLOB="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"], 0x1188}, 0x1, 0x0, 0x0, 0x50084}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 261.780425ms ago: executing program 4 (id=3276): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0x0, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11, 0x1, 0x6d}, 0x0, 0x158, 0x180, 0x0, {0x100000000000000}, [@common=@ttl={{0x28}, {0xa45e9b0095a8efed}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}, [0xffffff00, 0xff000000, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xff], @ipv4=@remote, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x3, 0x2, 0x0, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x2800, 0x3020}, 0x200, 0x1080}}]}, @REJECT={0x28}}, {{@ip={@broadcast, @multicast2, 0xffffffff, 0xffffff00, 'veth0_to_hsr\x00', 'wg1\x00', {}, {0xff}, 0x67, 0x2, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0xff, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00', {}, {}, 0x2, 0x2}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x6a, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x2000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000004", "cffe06051000001d"}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x8}, 0xe, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa632, 0x23, 0x3, 0x40, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) sendto$packet(r2, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e26, @multicast1}, 0x10) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read$rfkill(r9, &(0x7f0000001780), 0x8) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 169.740335ms ago: executing program 3 (id=3277): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000080)=0x20, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000040c0)=ANY=[@ANYBLOB="240000003c0000e420f01f00000000017c1d000400fc800c00018006000600800a0000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000003f40), 0x4, 0x200000d0) 110.771412ms ago: executing program 1 (id=3278): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1304000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) (async) read$alg(r7, &(0x7f0000000000)=""/13, 0xd) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x40, 0x1405, 0x2a, 0x70bd2d, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4003}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000890}, 0x4000000) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10010, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x25, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 0s ago: executing program 3 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000cea573050200000928000480240001800b000100657874686472000014000280080007400000000008000640000000600900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): : adding VLAN 0 to HW filter on device batadv1 [ 287.521648][T13913] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 288.357977][T13953] netlink: 'syz.2.2093': attribute type 3 has an invalid length. [ 288.411234][T13957] netlink: 'syz.2.2093': attribute type 5 has an invalid length. [ 288.775565][ T9303] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.912571][ C1] net_ratelimit: 3873 callbacks suppressed [ 288.912600][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 288.929845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.930514][T13955] syzkaller0: entered promiscuous mode [ 288.938866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.954486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.964203][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 288.975652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.984141][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 288.995529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.004354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.013175][T13955] syzkaller0: entered allmulticast mode [ 289.013213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.207124][ T9303] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.922834][ C1] net_ratelimit: 16970 callbacks suppressed [ 293.922855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.938049][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.949451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.957851][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.969252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.977889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.986503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.995699][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 294.007087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.015453][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 295.729452][ T9303] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.742306][T13987] __nla_validate_parse: 14 callbacks suppressed [ 295.742325][T13987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2100'. [ 296.148349][ T9303] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.166298][T14006] IPVS: Error connecting to the multicast addr [ 296.438656][T14012] bridge0: port 1(vlan5) entered blocking state [ 296.544773][T14012] bridge0: port 1(vlan5) entered disabled state [ 296.565078][T14012] vlan5: entered allmulticast mode [ 296.570260][T14012] geneve0: entered allmulticast mode [ 296.887149][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2107'. [ 296.941471][T14029] netlink: 488 bytes leftover after parsing attributes in process `syz.4.2107'. [ 296.952686][T14029] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2107'. [ 296.979585][T14029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2107'. [ 297.015633][T14029] ip6tnl2: entered allmulticast mode [ 297.810193][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 297.839687][T14045] netlink: 'syz.3.2110': attribute type 2 has an invalid length. [ 297.882205][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2110'. [ 297.911727][T14045] netlink: 'syz.3.2110': attribute type 11 has an invalid length. [ 297.944212][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2110'. [ 298.089943][T14046] bond7: entered promiscuous mode [ 298.134675][T14046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.932646][ C1] net_ratelimit: 15461 callbacks suppressed [ 298.932665][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.950127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.958673][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.963123][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.970125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.986808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.995387][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 299.006815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.015685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.027293][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 299.167417][T14071] tap0: tun_chr_ioctl cmd 1074025692 [ 299.217000][T14076] netlink: 'syz.1.2115': attribute type 4 has an invalid length. [ 299.349107][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2115'. [ 299.469942][T14082] ip6gretap0: entered promiscuous mode [ 299.517555][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 301.709436][T14122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 301.791015][ T6466] veth1_to_hsr: entered promiscuous mode [ 301.999355][T14132] __nla_validate_parse: 1 callbacks suppressed [ 301.999373][T14132] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2127'. [ 302.085455][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2127'. [ 302.364451][T14137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2128'. [ 302.622111][T14142] netlink: 'syz.3.2129': attribute type 3 has an invalid length. [ 302.641406][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2130'. [ 302.657905][T14142] netlink: 'syz.3.2129': attribute type 3 has an invalid length. [ 302.897437][T14142] xt_CT: No such helper "netbios-ns" [ 303.465857][T14161] 8021q: VLANs not supported on gre0 [ 303.942569][ C1] net_ratelimit: 15209 callbacks suppressed [ 303.942590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.957385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.967009][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.978461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.987100][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.998523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.007147][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 304.018593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.027163][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 304.038600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.062834][T14170] macvlan0: entered allmulticast mode [ 304.099175][T14170] veth1_vlan: entered allmulticast mode [ 304.214977][T14168] macvlan0: entered promiscuous mode [ 304.263942][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2141'. [ 304.297174][T14184] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2141'. [ 304.470197][T14168] macvlan0: left promiscuous mode [ 304.489232][T14168] macvlan0: left allmulticast mode [ 304.509671][T14168] veth1_vlan: left allmulticast mode [ 306.507013][T14233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'. [ 306.634195][T14235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'. [ 308.952532][ C1] net_ratelimit: 15907 callbacks suppressed [ 308.952552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.967889][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.979227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.987944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.996340][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 309.007728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.016313][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 309.027749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.036270][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 309.047678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.814642][T14264] netlink: 'syz.2.2160': attribute type 1 has an invalid length. [ 313.303925][T14282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2164'. [ 313.361523][T14283] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2164'. [ 313.963594][ C1] net_ratelimit: 27501 callbacks suppressed [ 313.963616][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.980928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.989389][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.993790][ T9303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.010016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.018159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.026292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.034929][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 314.046386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.055017][ C1] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 314.813636][T14262] bridge0: port 4(vlan4) entered disabled state [ 314.820244][T14262] bridge0: port 3(vlan3) entered disabled state [ 314.826739][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.852971][T14262] bond_slave_0: left promiscuous mode [ 314.860406][T14262] bond_slave_1: left promiscuous mode [ 315.616077][T14283] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2164'. [ 315.739913][T14259] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.771542][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 315.818520][ T9661] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.845975][ T9661] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.858799][ T9661] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.868444][ T9661] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.960794][T14259] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.011334][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 316.035713][ T9661] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.053194][ T9661] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.075250][ T9661] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.101718][ T9661] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.204231][T14259] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.278635][T14330] 8021q: VLANs not supported on lo [ 316.284149][T14336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2172'. [ 316.324779][T14336] ip6gre1: entered promiscuous mode [ 316.350131][T14336] ip6gre1: entered allmulticast mode [ 316.391928][ T9661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.429142][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.439507][ T9661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.579296][T14259] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.661060][T14343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2174'. [ 316.701029][T14346] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 316.873390][ T6466] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.882490][ T9661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.897278][ T6466] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.955439][ T9662] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.052260][ T9662] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.098099][ T9662] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.186177][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.198250][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.264520][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2179'. [ 317.314434][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2179'. [ 317.409449][T14366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2180'. [ 317.433111][T14366] bond0: ARP target 170.170.170.170 is already present [ 317.469939][T14366] bond0: option arp_ip_target: invalid value (2863311530) [ 317.513576][T14372] netlink: 'syz.3.2183': attribute type 30 has an invalid length. [ 317.650060][T14379] lo: entered allmulticast mode [ 317.656565][T14379] lo: left allmulticast mode [ 317.671182][T14379] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 317.733969][T14381] netlink: 'syz.4.2186': attribute type 13 has an invalid length. [ 317.776044][T14381] netlink: 'syz.4.2186': attribute type 17 has an invalid length. [ 317.921957][T14381] ip6gre0: left allmulticast mode [ 317.952843][T14381] bridge0: entered promiscuous mode [ 317.977436][T14381] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.014569][T14381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.088289][T14381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.099415][T14381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.127798][T14395] netlink: 'syz.2.2189': attribute type 9 has an invalid length. [ 318.269458][T14406] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 318.526564][T14416] __nla_validate_parse: 3 callbacks suppressed [ 318.526589][T14416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2195'. [ 318.624855][T14420] tap0: tun_chr_ioctl cmd 1074025677 [ 318.648695][T14420] tap0: linktype set to 773 [ 318.759867][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2199'. [ 319.875955][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 319.893710][T14487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.921487][T14487] net_ratelimit: 3029 callbacks suppressed [ 319.921508][T14487] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 319.944254][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.369491][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 320.387844][T14516] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2215'. [ 320.638115][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'. [ 320.706694][T14530] ip6tnl4: entered allmulticast mode [ 320.740386][T14530] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 320.872615][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.052924][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.068666][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 321.104344][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 321.371144][T14564] netlink: 'syz.1.2229': attribute type 12 has an invalid length. [ 321.421051][T14564] netlink: 'syz.1.2229': attribute type 7 has an invalid length. [ 321.560121][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2231'. [ 321.660770][T14581] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 321.745775][T14581] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.760563][T14584] vlan3: entered promiscuous mode [ 321.766883][T14584] bond7: entered promiscuous mode [ 321.772137][T14584] vlan3: entered allmulticast mode [ 321.778124][T14584] bond7: entered allmulticast mode [ 321.826364][T14581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2233'. [ 321.921693][T14581] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.948389][T14581] bond7: (slave batadv1): making interface the new active one [ 321.979562][T14581] batadv1: entered promiscuous mode [ 321.993115][T14581] batadv1: entered allmulticast mode [ 322.000486][T14581] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 322.206379][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.588587][T14625] veth0_virtÿifi: entered promiscuous mode [ 322.663422][T14601] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 323.344485][ T9303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.494452][T14652] syzkaller0: entered promiscuous mode [ 323.516463][T14652] syzkaller0: entered allmulticast mode [ 323.565917][T14653] netlink: 'syz.3.2250': attribute type 1 has an invalid length. [ 323.712044][T14662] __nla_validate_parse: 5 callbacks suppressed [ 323.712063][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2254'. [ 324.212291][T14691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 324.212873][ T5635] Bluetooth: hci4: link tx timeout [ 324.237367][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.451205][T14698] syzkaller0: entered promiscuous mode [ 324.463622][T14698] syzkaller0: entered allmulticast mode [ 324.483027][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.522135][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2264'. [ 324.678599][T14710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2267'. [ 324.684840][T14711] netlink: 'syz.4.2268': attribute type 1 has an invalid length. [ 324.819892][T14716] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 324.843908][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2268'. [ 324.859908][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.978847][T14711] bond5: entered promiscuous mode [ 324.985672][T14711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.006862][T14716] bond0: (slave batadv2): Opening slave failed [ 325.025244][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 325.070014][T14711] bond5: (slave bridge7): making interface the new active one [ 325.077868][T14711] bridge7: entered promiscuous mode [ 325.084819][T14711] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 325.097133][T14713] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 325.127304][T14713] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 325.396669][T14754] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 325.592853][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.646905][T14768] netlink: 'syz.3.2281': attribute type 2 has an invalid length. [ 325.679314][T14768] tipc: Started in network mode [ 325.701898][T14768] tipc: Node identity 340008, cluster identity 4711 [ 325.728121][T14768] tipc: Node number set to 3407880 [ 325.780891][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 325.989597][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2286'. [ 325.998842][T14792] nbd: couldn't find a device at index 65546 [ 326.005561][T14792] ÿ: renamed from bond_slave_0 [ 326.238789][T14802] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 326.272155][T14802] bond11: entered promiscuous mode [ 326.279632][T14802] bond11: entered allmulticast mode [ 326.285419][T14802] 8021q: adding VLAN 0 to HW filter on device bond11 [ 326.305121][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 326.588663][T14811] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2291'. [ 326.688411][T14821] xt_hashlimit: size too large, truncated to 1048576 [ 326.752646][ T9654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.788562][T14799] netlink: 'syz.2.2288': attribute type 2 has an invalid length. [ 326.809494][T14799] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 326.826101][T14799] netlink: 'syz.2.2288': attribute type 2 has an invalid length. [ 326.853223][T14799] netlink: 'syz.2.2288': attribute type 2 has an invalid length. [ 326.884106][T14799] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 327.104965][T14840] netlink: 14704 bytes leftover after parsing attributes in process `syz.3.2298'. [ 327.469548][T14854] xt_l2tp: missing protocol rule (udp|l2tpip) [ 327.657975][T14864] xt_CT: No such helper "snmp" [ 327.863399][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 327.883440][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.907133][T14879] xt_TCPMSS: Only works on TCP SYN packets [ 328.822050][T14915] __nla_validate_parse: 5 callbacks suppressed [ 328.822068][T14915] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2321'. [ 328.861424][T14915] openvswitch: netlink: Flow key attr not present in new flow. [ 328.884040][T14918] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2321'. [ 328.913778][T14923] validate_nla: 2 callbacks suppressed [ 328.913801][T14923] netlink: 'syz.4.2325': attribute type 1 has an invalid length. [ 328.942367][T14918] tc_dump_action: action bad kind [ 328.990860][T14923] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 329.024238][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.160968][T14933] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 329.292149][T14932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.314740][T14953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'. [ 329.316134][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2331'. [ 329.328580][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2330'. [ 329.609043][T14962] IPVS: length: 156 != 8 [ 329.850432][T14976] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2337'. [ 329.859875][T14974] geneve4: entered promiscuous mode [ 329.889825][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.016616][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.197355][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.290943][T14987] bond6: entered promiscuous mode [ 330.297650][T14987] bond6: entered allmulticast mode [ 330.304050][T14987] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.450447][T14997] IPVS: Unknown mcast interface: vcan0 [ 330.595054][T15005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2345'. [ 331.017904][T15033] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2349'. [ 331.077612][T15027] "syz.1.2349" (15027) uses obsolete ecb(arc4) skcipher [ 331.286389][T15048] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 331.323249][ T9303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.411630][T15041] syzkaller0: entered promiscuous mode [ 331.431022][T15041] syzkaller0: entered allmulticast mode [ 331.465998][T15044] macvtap0: entered promiscuous mode [ 331.471673][T15044] macvtap0: entered allmulticast mode [ 331.477872][T15044] veth1_vlan: entered allmulticast mode [ 331.599044][T15061] block nbd2: server does not support multiple connections per device. [ 331.634626][T15061] block nbd2: shutting down sockets [ 331.904981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.442845][ T9303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.612730][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.147371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.654698][T15066] veth1_to_hsr: left promiscuous mode [ 334.735246][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.071648][T15086] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 335.081767][T15086] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 335.168846][ T35] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.218675][ T35] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.237834][ T35] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.311643][ T35] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.531847][T15118] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 335.653997][T15118] bond8: entered promiscuous mode [ 335.662300][T15118] bond8: entered allmulticast mode [ 335.668263][T15118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.688120][T15124] erspan1: entered allmulticast mode [ 335.697717][T15124] bond8: (slave erspan1): making interface the new active one [ 335.722619][T15124] erspan1: entered promiscuous mode [ 335.731558][T15124] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 335.851212][T15142] tipc: Trying to set illegal importance in message [ 335.863476][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.919726][T15146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'. [ 335.931411][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2378'. [ 335.945062][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2375'. [ 336.009531][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 336.986122][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.930886][T15126] vlan0: entered promiscuous mode [ 338.087404][T15153] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2380'. [ 338.101193][ T9311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.121296][T15157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.144297][T15155] nbd: must specify at least one socket [ 338.168686][T15157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.197301][T15157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.383060][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2385'. [ 338.719709][ T35] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.747138][ T35] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.850752][T15172] syzkaller0: entered promiscuous mode [ 338.857868][T15172] syzkaller0: entered allmulticast mode [ 338.870803][ T35] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.894704][ T35] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.962458][T15203] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 339.147010][T15192] netlink: 'syz.0.2389': attribute type 5 has an invalid length. [ 340.796111][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 341.513932][T15226] tipc: Enabled bearer , priority 0 [ 341.960181][T15247] bond12: Removing last ns target with arp_interval on [ 342.079466][T15263] 8021q: VLANs not supported on wg2 [ 342.125988][T15264] tipc: Enabled bearer , priority 0 [ 342.139693][T15264] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 342.171466][T15264] tipc: Resetting bearer [ 342.244608][T15276] xt_TPROXY: Can be used only with -p tcp or -p udp [ 342.257642][T15277] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2412'. [ 342.269280][T15277] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2412'. [ 342.306812][T15279] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 342.343112][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.491281][T15290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2415'. [ 342.633418][ T6431] tipc: Node number set to 2835752561 [ 342.745709][T15300] tipc: Enabling of bearer rejected, failed to enable media [ 342.783536][ T6469] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.908383][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 342.946000][T15310] netlink: 'syz.2.2420': attribute type 10 has an invalid length. [ 342.962189][T15310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2420'. [ 343.004661][T15310] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 343.027966][T15315] IPv6: Can't replace route, no match found [ 343.052813][T15315] IPv6: Can't replace route, no match found [ 343.186874][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 343.217122][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 343.285646][ T6431] tipc: Node number set to 3463135942 [ 343.296204][T15324] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2423'. [ 343.480840][T15329] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2425'. [ 343.519627][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 343.588165][T15331] atomic_op ffff88807a617998 conn xmit_atomic 0000000000000000 [ 343.948338][T15354] bond7: entered allmulticast mode [ 344.002152][T15354] bond7: left allmulticast mode [ 344.250449][T15367] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 344.448307][T15367] 8021q: adding VLAN 0 to HW filter on device bond14 [ 344.458184][T15367] bond13: (slave bond14): making interface the new active one [ 344.466386][T15367] bond13: (slave bond14): Enslaving as an active interface with an up link [ 344.476976][T15371] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.760269][T15390] tc_dump_action: action bad kind [ 345.186430][T15416] bridge0: port 2(team0) entered blocking state [ 345.217031][T15416] bridge0: port 2(team0) entered disabled state [ 345.231637][T15416] team0: entered allmulticast mode [ 345.264650][T15416] veth1_to_hsr: entered allmulticast mode [ 345.297251][T15416] team0: left allmulticast mode [ 345.302174][T15416] veth1_to_hsr: left allmulticast mode [ 345.533392][T15426] tipc: Resetting bearer [ 345.871656][T15438] macsec2: entered promiscuous mode [ 345.883976][T15438] batadv0: entered promiscuous mode [ 345.901675][T15438] macsec2: entered allmulticast mode [ 345.914268][T15438] batadv0: entered allmulticast mode [ 345.956274][T15438] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 345.976741][T15438] batadv0: left allmulticast mode [ 345.985446][T15438] batadv0: left promiscuous mode [ 346.015547][T15441] pim6reg: entered allmulticast mode [ 346.111339][T15455] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.146815][T15455] bond8: (slave lo): Enslaving as an active interface with an up link [ 346.203704][T15455] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 346.284977][T15462] sit0: entered promiscuous mode [ 346.305001][T15462] netlink: 'syz.0.2460': attribute type 1 has an invalid length. [ 346.455482][T15469] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 346.470078][T15469] bond9 (unregistering): Released all slaves [ 347.221910][T15510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.232590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.243726][T15515] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 347.285282][T15520] ipt_REJECT: ECHOREPLY no longer supported. [ 347.292024][T15510] __nla_validate_parse: 23 callbacks suppressed [ 347.292043][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2469'. [ 347.655654][T15532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2476'. [ 347.665794][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2478'. [ 347.692735][T15532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2476'. [ 347.703320][T15532] netlink: 58 bytes leftover after parsing attributes in process `syz.1.2476'. [ 347.721281][T15532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2476'. [ 347.757957][T15546] syzkaller0: entered promiscuous mode [ 347.800740][T15546] syzkaller0: entered allmulticast mode [ 347.991590][T15556] netlink: 'syz.1.2482': attribute type 1 has an invalid length. [ 348.154536][T15563] pim6reg: entered allmulticast mode [ 348.206288][T15575] netlink: 'syz.3.2485': attribute type 1 has an invalid length. [ 348.224391][T15575] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2485'. [ 348.236425][T15566] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2482'. [ 348.285809][T15560] syzkaller0: entered promiscuous mode [ 348.291367][T15560] syzkaller0: entered allmulticast mode [ 348.348738][T15556] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.358149][T15556] bond9: (slave bond10): making interface the new active one [ 348.369035][T15556] bond9: (slave bond10): Enslaving as an active interface with an up link [ 348.378560][T15575] 8021q: VLANs not supported on ip6tnl0 [ 348.680250][T15600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2487'. [ 349.182745][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.471157][T15633] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 351.049793][T15602] tipc: Enabled bearer , priority 0 [ 351.060959][T15605] syzkaller0: entered promiscuous mode [ 351.079709][T15605] syzkaller0: entered allmulticast mode [ 351.134297][T15609] tipc: Resetting bearer [ 351.225507][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2494'. [ 351.236004][T15609] tipc: Resetting bearer [ 351.258212][T15646] netlink: 'syz.0.2495': attribute type 11 has an invalid length. [ 351.273300][T15609] tipc: Disabling bearer [ 351.528682][T15663] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.569948][T15715] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 352.625361][T15720] xt_hashlimit: size too large, truncated to 1048576 [ 352.794815][T15710] bond7: (slave gretap4): making interface the new active one [ 352.828494][T15710] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 352.862191][T15715] macvlan3: entered promiscuous mode [ 352.877063][T15715] macvlan3: entered allmulticast mode [ 352.894959][T15715] bond7: entered promiscuous mode [ 352.902836][T15715] gretap4: entered promiscuous mode [ 352.910434][T15715] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 352.920155][T15715] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 352.940352][T15715] bond7: left promiscuous mode [ 352.952832][T15715] gretap4: left promiscuous mode [ 352.981542][T15729] ip_vti0: entered promiscuous mode [ 352.988166][T15729] __nla_validate_parse: 6 callbacks suppressed [ 352.988183][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 353.061791][T15710] syz.4.2509 (15710) used greatest stack depth: 16768 bytes left [ 353.234549][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 353.251282][T15748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.292120][T15748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.323401][T15748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.335173][T15744] bond12: Invalid ad_actor_system MAC address. [ 353.341455][T15744] bond12: option ad_actor_system: invalid value (7) [ 353.352780][T15744] bond12 (unregistering): Released all slaves [ 353.443445][T15755] bridge0: port 1(macsec3) entered blocking state [ 353.458952][T15755] bridge0: port 1(macsec3) entered disabled state [ 353.480930][T15755] macsec3: entered allmulticast mode [ 353.497618][T15755] bridge0: entered allmulticast mode [ 353.526487][T15755] macsec3: left allmulticast mode [ 353.549423][T15755] bridge0: left allmulticast mode [ 353.864895][T15736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.909996][T15736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.926575][T15787] xt_l2tp: unknown flags: 51 [ 354.200009][T15798] tipc: Enabling of bearer rejected, failed to enable media [ 354.340203][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 354.360642][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 354.406118][T15805] ip6gretap0: entered allmulticast mode [ 354.417542][T15805] ip6gretap0: left allmulticast mode [ 354.426919][T15805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2525'. [ 355.138851][T15842] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 355.156241][T15845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2535'. [ 355.164892][T15842] netlink: 'syz.1.2533': attribute type 4 has an invalid length. [ 355.209095][T15842] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2533'. [ 355.272045][T15843] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 355.314838][T15843] netlink: 'syz.1.2533': attribute type 4 has an invalid length. [ 355.351088][T15843] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2533'. [ 355.497777][T15860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.506428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.541917][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 355.617210][ T9657] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.640626][ T9657] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.669879][ T9657] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.698590][ T9657] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.175749][T15866] infiniband uyz0: set down [ 356.187958][T15866] infiniband uyz0: added bridge_slave_1 [ 356.235861][T15866] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 356.251820][T15866] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 356.281283][T15866] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 356.368099][T15866] RDS/IB: uyz0: added [ 356.379254][T15866] smc: adding ib device uyz0 with port count 1 [ 356.386444][T15866] smc: ib device uyz0 port 1 has no pnetid [ 356.387689][T15881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2543'. [ 358.115177][T15847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.338420][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 358.399200][T15894] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2547'. [ 358.499881][T15905] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2550'. [ 358.579277][T15901] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:0 [ 358.599809][T15902] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.638455][T15910] veth1_vlan: left allmulticast mode [ 358.721963][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 358.757666][T15902] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.794317][T15917] tipc: Enabling of bearer rejected, failed to enable media [ 359.029060][T15902] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.061582][T15921] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 359.167062][T15902] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.201229][T15932] macvlan0: entered promiscuous mode [ 359.210433][T15932] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2558'. [ 359.590013][ T9658] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.938032][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 360.170475][ T9657] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.302941][ T9657] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.362981][ T9654] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.403788][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2569'. [ 361.053389][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.064452][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.075072][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.086324][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.095816][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.107036][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.116309][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.125132][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.134656][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.143274][T16013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.195307][T15997] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 361.237814][T15997] syzkaller0: entered promiscuous mode [ 361.246044][T15997] syzkaller0: entered allmulticast mode [ 361.341883][T16015] ip6tnl3: entered allmulticast mode [ 361.873437][T16046] tipc: Enabling of bearer rejected, failed to enable media [ 361.903949][T16046] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2590'. [ 361.922309][T16049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2591'. [ 361.936684][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2591'. [ 362.105752][T16059] netlink: 'syz.0.2593': attribute type 1 has an invalid length. [ 362.241924][T16059] 8021q: adding VLAN 0 to HW filter on device bond12 [ 362.674340][T16083] sctp: [Deprecated]: syz.1.2601 (pid 16083) Use of int in maxseg socket option. [ 362.674340][T16083] Use struct sctp_assoc_value instead [ 363.078622][T16106] netlink: 'syz.3.2609': attribute type 1 has an invalid length. [ 363.087174][T16111] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 363.134230][T16106] bond9: entered promiscuous mode [ 363.139879][T16106] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.244926][T16111] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.320032][T16115] vlan3: entered promiscuous mode [ 363.327574][T16115] bond8: entered promiscuous mode [ 363.334011][T16115] vlan3: entered allmulticast mode [ 363.339290][T16115] bond8: entered allmulticast mode [ 363.347564][T16113] bond9: entered allmulticast mode [ 363.367669][T16111] bond8: (slave bridge9): making interface the new active one [ 363.376628][T16111] bridge9: entered promiscuous mode [ 363.382132][T16111] bridge9: entered allmulticast mode [ 363.395332][T16111] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 363.488327][T16113] bond9: (slave bridge8): making interface the new active one [ 363.510959][T16113] bridge8: entered promiscuous mode [ 363.524864][T16113] bridge8: entered allmulticast mode [ 363.545268][T16113] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 363.755107][T16149] netlink: 'syz.3.2620': attribute type 1 has an invalid length. [ 363.795264][T16147] __nla_validate_parse: 3 callbacks suppressed [ 363.795283][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 363.853670][T16151] netlink: 'syz.0.2622': attribute type 13 has an invalid length. [ 363.962242][T16164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2623'. [ 363.977143][T16151] netlink: 'syz.0.2622': attribute type 13 has an invalid length. [ 364.011358][ T9658] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.045975][ T9658] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.056158][T16164] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001 [ 364.082138][ T9658] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.130182][T16155] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.349449][T16182] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2629'. [ 364.633942][T16197] netlink: 'syz.3.2632': attribute type 1 has an invalid length. [ 364.674162][T16201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2633'. [ 365.168325][T16226] netlink: 'syz.2.2638': attribute type 21 has an invalid length. [ 365.193513][T16226] netlink: 'syz.2.2638': attribute type 22 has an invalid length. [ 365.212496][T16226] netlink: 'syz.2.2638': attribute type 23 has an invalid length. [ 365.245558][T16226] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2638'. [ 365.343688][T16237] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2642'. [ 365.429898][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2640'. [ 365.672145][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'. [ 365.736376][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2649'. [ 365.838918][T16262] 8021q: adding VLAN 0 to HW filter on device bond13 [ 365.888490][T16268] gretap3: entered allmulticast mode [ 365.940304][T16268] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 366.008526][T16260] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 366.050102][T16275] bond13 (unregistering): (slave gretap3): Releasing backup interface [ 366.073496][T16275] bond13 (unregistering): Released all slaves [ 369.466262][T16346] net_ratelimit: 1018 callbacks suppressed [ 369.466279][T16346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.508779][T16346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.558753][T16346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.567839][T16346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.576756][T16346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.631260][T16346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.667413][T16358] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2665'. [ 369.810446][T16365] openvswitch: netlink: Flow key attr not present in new flow. [ 370.020396][T16371] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2670'. [ 370.060756][T16371] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 370.089731][T16382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2673'. [ 370.132840][T16386] openvswitch: netlink: IP tunnel dst address not specified [ 370.876579][T16434] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2689'. [ 370.920697][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 371.177957][T16446] tap0: tun_chr_ioctl cmd 1074025677 [ 371.185155][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 371.201210][T16446] tap0: linktype set to 773 [ 371.260579][T16459] xt_hashlimit: overflow, rate too high: 0 [ 371.486879][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2700'. [ 371.496122][T16478] bridge_slave_1: entered allmulticast mode [ 371.525407][T16478] 8021q: adding VLAN 0 to HW filter on device bond13 [ 371.532995][T16478] bridge0: port 1(bond13) entered blocking state [ 371.539552][T16478] bridge0: port 1(bond13) entered disabled state [ 371.546283][T16478] bond13: entered allmulticast mode [ 371.554891][T16478] bond13: entered promiscuous mode [ 371.673309][T16484] syzkaller0: entered promiscuous mode [ 371.679112][T16484] syzkaller0: entered allmulticast mode [ 371.696377][T16484] 0: reclassify loop, rule prio 0, protocol 800 [ 371.759875][T16488] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2703'. [ 371.819970][T16484] bond0: left promiscuous mode [ 371.854212][ T9311] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.863521][ T9311] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.872034][ T9311] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.881959][ T9311] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.989706][T16450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.178585][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2704'. [ 372.195770][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2704'. [ 372.214075][T16503] validate_nla: 3 callbacks suppressed [ 372.214090][T16503] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 372.239197][T16503] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 372.287444][T16504] syzkaller1: entered promiscuous mode [ 372.293474][T16504] syzkaller1: entered allmulticast mode [ 372.437909][T16515] netlink: 'syz.3.2711': attribute type 1 has an invalid length. [ 372.798513][T16526] netlink: 'syz.1.2715': attribute type 12 has an invalid length. [ 373.419816][T16548] netlink: 'syz.2.2723': attribute type 61 has an invalid length. [ 373.458193][T16548] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 373.467222][T16548] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 373.742266][T16568] netlink: 'syz.2.2727': attribute type 3 has an invalid length. [ 373.825307][T16571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 373.880321][T16579] bridge10: entered promiscuous mode [ 373.899977][T16579] bridge10: entered allmulticast mode [ 373.911772][T16579] team0: Port device bridge10 added [ 374.937939][T16609] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 374.990882][T16613] Unknown options in mask 6 [ 375.607937][T16620] veth0_macvtap: Caught tx_queue_len zero misconfig [ 375.662731][ C0] net_ratelimit: 1 callbacks suppressed [ 375.662745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.678487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.707222][T16568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.925472][T16631] netlink: zone id is out of range [ 376.938447][T16631] netlink: zone id is out of range [ 376.940174][T16633] netlink: 'syz.3.2744': attribute type 1 has an invalid length. [ 376.953552][T16631] netlink: zone id is out of range [ 376.960536][T16638] __nla_validate_parse: 7 callbacks suppressed [ 376.960552][T16638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'. [ 376.974977][T16634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2744'. [ 376.976635][T16631] netlink: zone id is out of range [ 377.022116][T16633] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 377.026898][T16631] netlink: zone id is out of range [ 377.072335][T16631] netlink: zone id is out of range [ 377.095884][T16649] syzkaller1: entered promiscuous mode [ 377.120686][T16649] syzkaller1: entered allmulticast mode [ 377.160128][T16631] netlink: zone id is out of range [ 377.183956][T16655] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2749'. [ 377.185707][T16631] netlink: zone id is out of range [ 377.430512][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 377.453892][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2751'. [ 377.484673][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'. [ 377.600856][T16678] xt_hashlimit: size too large, truncated to 1048576 [ 377.694631][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'. [ 377.697391][T16692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2759'. [ 377.718727][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 377.731660][T16690] netlink: 'syz.1.2758': attribute type 14 has an invalid length. [ 377.736253][T16684] netlink: 'syz.0.2757': attribute type 1 has an invalid length. [ 377.743369][T16692] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2759'. [ 377.760289][T16694] x_tables: duplicate underflow at hook 3 [ 378.551265][T16704] netlink: 'syz.1.2760': attribute type 13 has an invalid length. [ 378.622172][T16704] netlink: 'syz.1.2760': attribute type 13 has an invalid length. [ 378.637722][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.668556][ T9311] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.686674][ T9311] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.755007][ T9311] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.781595][ T9311] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.100363][T16736] xt_CT: No such helper "snmp_trap" [ 379.257080][T16720] dvmrp0: entered allmulticast mode [ 379.902183][T16750] bond0: Caught tx_queue_len zero misconfig [ 380.086491][T16753] netlink: 'syz.1.2773': attribute type 2 has an invalid length. [ 382.115672][T16745] batadv0: entered promiscuous mode [ 382.121605][T16745] veth1_to_batadv: entered promiscuous mode [ 382.128755][T16745] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 382.139227][T16745] hsr1: Slave B (veth1_to_batadv) is not up; please bring it up to get a fully working HSR network [ 382.154265][T16745] hsr1: entered allmulticast mode [ 382.159347][T16745] batadv0: entered allmulticast mode [ 382.165174][T16745] veth1_to_batadv: entered allmulticast mode [ 382.299467][T16761] __nla_validate_parse: 2 callbacks suppressed [ 382.299486][T16761] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2776'. [ 382.570273][T16768] syzkaller1: entered promiscuous mode [ 382.611487][T16768] syzkaller1: entered allmulticast mode [ 382.912755][ T9611] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.932602][ T9611] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.965585][ T9611] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.995878][ T9611] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.166346][T16802] C: renamed from veth1_to_team [ 383.348246][T16802] netlink: 'syz.3.2783': attribute type 3 has an invalid length. [ 383.362618][T16802] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2783'. [ 383.383119][T16802] net_ratelimit: 694 callbacks suppressed [ 383.383136][T16802] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 384.257139][T16841] netlink: 'syz.3.2798': attribute type 4 has an invalid length. [ 384.331818][T16845] hsr0: entered promiscuous mode [ 384.381354][T16837] hsr0: left promiscuous mode [ 384.447956][T16853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2801'. [ 384.777441][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2802'. [ 384.816244][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2802'. [ 384.837036][T16858] netlink: 58 bytes leftover after parsing attributes in process `syz.0.2802'. [ 385.334308][ T9657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 385.371555][ T9657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 385.381244][ T9657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 385.400113][T16886] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.447074][T16886] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 385.548122][T16899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2810'. [ 385.598855][T16886] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.601412][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'. [ 385.626184][T16886] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 385.642106][T16902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2811'. [ 385.688462][T16886] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.704822][T16886] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 385.729595][T16886] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.753388][T16886] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 385.819545][T16892] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 385.960317][T16918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'. [ 386.302641][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.398322][T16942] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 386.447927][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.460781][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.474799][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.492646][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.506237][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.617387][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.625826][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.658926][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.676182][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.686913][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.011364][T16971] bond14: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 387.048574][T16971] bond14: entered promiscuous mode [ 387.326590][T16989] ip6tnl4: entered allmulticast mode [ 387.403699][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.671379][T17008] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 387.720488][T17008] __nla_validate_parse: 7 callbacks suppressed [ 387.720506][T17008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'. [ 387.813611][T17019] xt_hashlimit: size too large, truncated to 1048576 [ 387.881828][T17017] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2840'. [ 387.962965][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 388.207971][T17032] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 388.236417][T17032] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 388.262644][T17032] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 388.434180][ T9311] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.501318][ T9657] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.617583][ T9661] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.644996][T17046] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2846'. [ 388.765108][ T9657] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.782702][ T50] Bluetooth: hci5: command tx timeout [ 388.824936][ T9310] vlan5: left allmulticast mode [ 388.841059][ T9310] geneve0: left allmulticast mode [ 388.852026][ T9310] bridge0: port 1(vlan5) entered disabled state [ 388.916869][ T9310] dvmrp0: left allmulticast mode [ 389.291051][ T9310] bond8 (unregistering): (slave erspan1): Releasing active interface [ 389.301078][ T9310] erspan1 (unregistering): left promiscuous mode [ 389.339331][ T9310] bond6 (unregistering): (slave gretap1): Releasing active interface [ 389.396030][ T9310] bond2 (unregistering): (slave geneve2): Releasing active interface [ 389.470859][ T9310] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 389.479090][ T9310] bridge8 (unregistering): left promiscuous mode [ 389.488958][ T9310] bridge8 (unregistering): left allmulticast mode [ 389.507656][ T9310] bond0 (unregistering): Released all slaves [ 389.520720][ T9310] bond1 (unregistering): Released all slaves [ 389.573053][ T9310] bond2 (unregistering): Released all slaves [ 389.611551][ T9310] bond3 (unregistering): Released all slaves [ 389.647612][ T9310] bond4 (unregistering): Released all slaves [ 389.752727][ T9310] bond5 (unregistering): Released all slaves [ 389.816675][ T9310] bond6 (unregistering): Released all slaves [ 389.860287][ T9310] bond7 (unregistering): Released all slaves [ 389.868273][T17081] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 389.882333][T17081] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 389.893636][ T9310] bond8 (unregistering): Released all slaves [ 389.919783][ T9310] bond9 (unregistering): Released all slaves [ 389.946555][ T9310] bond10 (unregistering): Released all slaves [ 390.002186][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 390.150541][ T9310] : left promiscuous mode [ 390.275728][ T9310] tipc: Left network mode [ 390.862556][ T50] Bluetooth: hci5: command tx timeout [ 391.364229][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 391.421660][T17112] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 391.636406][T17127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.771418][T16943] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.781410][T16943] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.789024][T16943] bridge_slave_0: entered allmulticast mode [ 391.798449][T16943] bridge_slave_0: entered promiscuous mode [ 391.807214][T16943] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.815248][T16943] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.823037][T16943] bridge_slave_1: entered allmulticast mode [ 391.830923][T16943] bridge_slave_1: entered promiscuous mode [ 392.066593][T17148] netlink: 'syz.0.2861': attribute type 22 has an invalid length. [ 392.109545][T17148] bond0: option ad_select: invalid value (16) [ 392.135757][T16943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.210711][T16943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.401621][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 392.414777][T17155] sctp: [Deprecated]: syz.2.2863 (pid 17155) Use of int in maxseg socket option. [ 392.414777][T17155] Use struct sctp_assoc_value instead [ 392.421041][T17165] netlink: 'syz.4.2865': attribute type 12 has an invalid length. [ 392.440897][T17162] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2866'. [ 392.469816][T16943] team0: Port device team_slave_0 added [ 392.489970][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 392.523458][T16943] team0: Port device team_slave_1 added [ 392.590756][T17155] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.816944][T16943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.848731][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.933970][T17188] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2871'. [ 392.944305][ T50] Bluetooth: hci5: command tx timeout [ 392.952435][T16943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.020602][ T9310] hsr_slave_0: left promiscuous mode [ 393.030549][T17196] openvswitch: netlink: Message has 5 unknown bytes. [ 393.051202][ T9310] hsr_slave_1: left promiscuous mode [ 393.086097][ T9310] pim6reg (unregistering): left allmulticast mode [ 395.027035][ T50] Bluetooth: hci5: command tx timeout [ 395.355373][ T9310] team0 (unregistering): Port device veth1_to_hsr removed [ 395.509319][T16943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.516883][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.543445][T16943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.573538][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 395.747943][T16943] hsr_slave_0: entered promiscuous mode [ 395.756226][T17217] openvswitch: netlink: Message has 4 unknown bytes. [ 395.763574][T17217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.793928][T16943] hsr_slave_1: entered promiscuous mode [ 395.807356][T17214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.101025][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 396.383882][ T9310] IPVS: stop unused estimator thread 0... [ 396.646032][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2882'. [ 396.725765][T16943] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.841287][T17274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.859323][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.883072][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.027728][T16943] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.062324][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'. [ 397.250527][T17288] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2888'. [ 397.270911][T16943] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.321207][T17292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2888'. [ 397.387618][T16943] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.468306][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2889'. [ 397.621032][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2891'. [ 397.665512][T17308] tipc: Enabling of bearer rejected, failed to enable media [ 397.680600][T17304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2890'. [ 397.940219][T16943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.990399][T16943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.016476][T16943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.055223][T17331] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2896'. [ 398.068692][T16943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.092312][T16943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.168932][T16943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.199817][T16943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.256734][T16943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.584182][T16943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.676202][T16943] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.730871][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.738129][ T9311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.821233][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.828448][ T9661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.874128][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2902'. [ 398.943245][ T9310] wlan1: Trigger new scan to find an IBSS to join [ 399.370353][T17387] veth1_to_bond: entered allmulticast mode [ 399.403142][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 399.454323][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'. [ 399.475328][T17387] veth1_to_bond (unregistering): left allmulticast mode [ 399.495012][T17392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2906'. [ 399.567177][T17398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2907'. [ 399.576461][T17391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2905'. [ 399.621993][T17387] bond0: (slave bond_slave_1): Releasing backup interface [ 399.870891][T17405] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 399.944111][T17405] bond9 (unregistering): Released all slaves [ 400.116690][T17403] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 400.146153][T17403] bond9 (unregistering): Released all slaves [ 400.399783][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 400.435687][T17432] netlink: 'syz.2.2911': attribute type 13 has an invalid length. [ 400.456600][T17432] netlink: 'syz.2.2911': attribute type 17 has an invalid length. [ 400.608717][T17432] erspan0: left promiscuous mode [ 400.651969][T17432] ip_vti0: left promiscuous mode [ 400.704326][T17432] ip6gretap0: entered promiscuous mode [ 400.739054][T17432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.798027][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.806449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.814721][ T9310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.819082][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 400.823838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.846440][ T9654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.858932][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.867121][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.875270][ T6432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.883431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.894533][ T6469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.913264][T17462] netlink: 'syz.1.2914': attribute type 1 has an invalid length. [ 400.981997][T17432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.997061][T17432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.037729][T17432] veth1_vlan: left promiscuous mode [ 401.046033][T17432] veth0_vlan: left promiscuous mode [ 401.053115][T17432] veth0_vlan: entered promiscuous mode [ 401.064734][T17432] veth1_vlan: entered promiscuous mode [ 401.078501][T17432] veth1_macvtap: left promiscuous mode [ 401.086118][T17432] veth0_macvtap: left promiscuous mode [ 401.094327][T17432] veth0_macvtap: entered promiscuous mode [ 401.112055][T17432] veth1_macvtap: entered promiscuous mode [ 401.122744][T17432] bridge0: port 3(vlan3) entered blocking state [ 401.129158][T17432] bridge0: port 3(vlan3) entered forwarding state [ 401.137829][T17432] bridge0: port 4(vlan4) entered blocking state [ 401.144265][T17432] bridge0: port 4(vlan4) entered forwarding state [ 401.155136][T17432] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 401.170611][T17432] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 401.186200][T17432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.195337][T17432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.251358][T17432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.266889][T17432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.285775][T17432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.298937][T17432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.325569][T17432] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.338688][T17432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 401.353317][T17432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.363863][T17432] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.384260][T17432] 8021q: adding VLAN 0 to HW filter on device eth0 [ 401.401950][T17432] 8021q: adding VLAN 0 to HW filter on device eth1 [ 401.420321][T17432] 8021q: adding VLAN 0 to HW filter on device eth2 [ 401.437469][T17432] 8021q: adding VLAN 0 to HW filter on device eth3 [ 401.453481][T17432] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.461626][T17432] erspan0: entered promiscuous mode [ 401.469943][T17432] 8021q: adding VLAN 0 to HW filter on device bond10 [ 401.485202][T17432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 401.498282][T17432] 8021q: adding VLAN 0 to HW filter on device bond11 [ 401.510419][T17432] ip6gre1: left promiscuous mode [ 401.515805][T17432] ip6gre1: left allmulticast mode [ 401.526140][T17432] ip6tnl4: left allmulticast mode [ 401.543034][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.551751][T17432] 8021q: adding VLAN 0 to HW filter on device bond12 [ 401.599170][T17447] netlink: 'syz.4.2915': attribute type 3 has an invalid length. [ 401.651779][ T6431] ÿ: entered promiscuous mode [ 401.695887][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.703112][ T9611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.798044][ T9654] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.822449][ T9654] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.835631][ T9654] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 401.854895][ T9654] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.863875][ T9654] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.891590][ T9654] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 401.908991][ T9654] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.918141][ T9654] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.927899][ T9654] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 402.034110][T17487] netlink: 'syz.0.2917': attribute type 11 has an invalid length. [ 402.059441][ T9654] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.107570][ T9654] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.134198][ T9654] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 402.167853][ T9657] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 402.298233][T16943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.417100][ T9311] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 402.437728][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 402.447737][ T9311] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 402.465780][ T6432] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.884301][T16943] veth0_vlan: entered promiscuous mode [ 403.169093][T16943] veth1_vlan: entered promiscuous mode [ 403.447866][ T9311] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.457462][ T9311] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.559279][T17527] nbd2: detected capacity change from 0 to 63 [ 403.601443][ T50] block nbd2: Receive control failed (result -32) [ 403.659922][T14078] block nbd2: Dead connection, failed to find a fallback [ 403.674942][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.691216][T17533] block nbd2: NBD_DISCONNECT [ 403.745898][T17533] block nbd2: Send disconnect failed -32 [ 403.790447][T14078] block nbd2: shutting down sockets [ 403.834763][T14078] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.894919][T14078] Buffer I/O error on dev nbd2, logical block 0, async page read [ 403.913349][ T9310] wlan1: Trigger new scan to find an IBSS to join [ 404.098541][T17548] __nla_validate_parse: 1 callbacks suppressed [ 404.098559][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'. [ 404.813884][ T9658] wlan1: Creating new IBSS network, BSSID fe:f9:10:83:a3:b2 [ 405.265219][T17545] pimreg: entered allmulticast mode [ 405.802751][ C0] net_ratelimit: 13211 callbacks suppressed [ 405.802766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.817265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.826540][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 405.837928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.846246][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 405.857622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.866284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.874831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.883820][ C0] bridge0: received packet on vlan4 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 405.895162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.911481][ T1686] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 405.923319][ T1686] Buffer I/O error on dev nbd2, logical block 1, async page read [ 405.934547][ T1686] Buffer I/O error on dev nbd2, logical block 2, async page read [ 405.942783][ T1686] Buffer I/O error on dev nbd2, logical block 3, async page read [ 405.956914][T14078] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.969077][T14078] Buffer I/O error on dev nbd2, logical block 0, async page read [ 405.993577][T14078] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.003341][T14078] Buffer I/O error on dev nbd2, logical block 1, async page read [ 406.013517][T14078] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.023615][T14078] Buffer I/O error on dev nbd2, logical block 2, async page read [ 406.031603][T14078] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.041503][T14078] Buffer I/O error on dev nbd2, logical block 3, async page read [ 406.049774][T14078] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.060082][T14078] Buffer I/O error on dev nbd2, logical block 0, async page read [ 406.069178][T14078] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.081201][T14078] Buffer I/O error on dev nbd2, logical block 1, async page read [ 406.089911][T14078] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.111281][T14078] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.142241][T14078] ldm_validate_partition_table(): Disk read failed. [ 406.208296][T14078] Dev nbd2: unable to read RDB block 0 [ 406.238870][T14078] nbd2: unable to read partition table [ 406.304424][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 406.510128][T14078] ldm_validate_partition_table(): Disk read failed. [ 406.525054][T14078] Dev nbd2: unable to read RDB block 0 [ 406.535628][T14078] nbd2: unable to read partition table [ 406.704186][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 407.263424][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.524724][T16943] veth0_macvtap: entered promiscuous mode [ 407.558431][T16943] veth1_macvtap: entered promiscuous mode [ 407.648493][T16943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.679598][T16943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.697417][ T9657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.710527][ T9657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.729475][ T9657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.741312][T17571] mac80211_hwsim hwsim10 ªªªªª;: renamed from wlan0 [ 407.797505][ T9657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.041062][ T9657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.076782][ T9657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.255312][ T9661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.274623][ T9661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.094657][T17581] bridge0: port 4(vlan4) entered disabled state [ 409.101314][T17581] bridge0: port 3(vlan3) entered disabled state [ 409.107788][T17581] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.119190][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 409.130094][T17611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2941'. [ 409.140207][T17581] ÿ: left promiscuous mode [ 409.849614][ T9657] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.879641][ T9657] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.912104][ T9657] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 409.957741][ T9657] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.979633][ T9657] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.996400][ T9657] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 410.027914][ T9657] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.037547][ T9657] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.046850][ T9657] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 410.074152][ T9657] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.090718][ T9657] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.099922][ T9657] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 410.480549][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.494077][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.503591][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 410.514544][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 410.522159][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.701873][T17649] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2950'. [ 410.746783][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 411.229474][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2953'. [ 411.374660][T17673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2953'. [ 411.444731][T17685] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.2955'. [ 411.871759][T17707] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 411.887816][T17707] syzkaller1: linktype set to 776 [ 411.905732][T17707] syzkaller1: tun_chr_ioctl cmd 21731 [ 411.921685][T17707] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2959'. [ 411.943130][T17707] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2959'. [ 412.199269][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 412.361795][T17726] net_ratelimit: 9256 callbacks suppressed [ 412.361816][T17726] netlink: zone id is out of range [ 412.622911][ T50] Bluetooth: hci2: command tx timeout [ 412.669141][T17729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.704946][T17733] syzkaller1: entered promiscuous mode [ 412.711069][T17733] syzkaller1: entered allmulticast mode [ 412.888326][T17729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.047556][T17750] netlink: 'syz.4.2968': attribute type 2 has an invalid length. [ 413.082523][T17750] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 413.113213][T17729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.414452][T17729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.434679][T17754] xt_CT: No such helper "netbios-ns" [ 413.540252][T17636] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.566343][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.594724][T17636] bridge_slave_0: entered allmulticast mode [ 413.615769][T17636] bridge_slave_0: entered promiscuous mode [ 413.635353][T17636] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.652734][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.662907][T17636] bridge_slave_1: entered allmulticast mode [ 413.676569][T17636] bridge_slave_1: entered promiscuous mode [ 413.813956][T17636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.833838][T17636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.950649][ T9311] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.082314][ T9311] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.128207][T17636] team0: Port device team_slave_0 added [ 414.140093][ T9311] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.153515][T17775] 8021q: VLANs not supported on wg2 [ 414.167274][T17636] team0: Port device team_slave_1 added [ 414.274426][ T9661] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.292054][T17777] netlink: 'syz.1.2975': attribute type 7 has an invalid length. [ 414.375318][T17636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.397014][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.452281][T17636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.466793][T17781] __nla_validate_parse: 3 callbacks suppressed [ 414.466810][T17781] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2977'. [ 414.496650][T17781] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2977'. [ 414.506826][T17781] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2977'. [ 414.523428][T17636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.531456][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.561346][T17636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.580223][T17783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.636385][T17781] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2977'. [ 414.646920][T17781] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 414.702722][ T50] Bluetooth: hci2: command tx timeout [ 414.710283][T17789] syzkaller0: entered promiscuous mode [ 414.716422][T17789] syzkaller0: entered allmulticast mode [ 414.747942][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'. [ 414.833858][T17636] hsr_slave_0: entered promiscuous mode [ 414.847572][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'. [ 414.871691][T17636] hsr_slave_1: entered promiscuous mode [ 414.882907][T17636] debugfs: 'hsr0' already exists in 'hsr' [ 414.912684][T17636] Cannot create hsr debugfs directory [ 415.383402][T17636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.415211][T17636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 415.437517][T17822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2988'. [ 415.628196][T17636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.671305][T17636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 415.760826][T17827] pim6reg0: tun_chr_ioctl cmd 35111 [ 415.789303][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 415.877695][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'. [ 415.882291][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 415.945466][T17636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.966718][T17636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 416.295760][T17850] syzkaller0: entered promiscuous mode [ 416.312853][T17850] syzkaller0: entered allmulticast mode [ 416.617818][T17877] netlink: 'syz.4.3002': attribute type 2 has an invalid length. [ 416.767976][T17885] ipip0: entered promiscuous mode [ 416.782783][ T50] Bluetooth: hci2: command tx timeout [ 416.826051][T17636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.859465][T17636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.876326][T17636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.910115][T17636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.932974][T17636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.984847][T17636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.013041][T17636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.082927][T17636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.284811][T17915] syzkaller1: entered promiscuous mode [ 417.302100][T17915] syzkaller1: entered allmulticast mode [ 417.568908][T17930] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 417.580230][T17926] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 417.607153][T17636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.683812][T17636] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.803206][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.810420][ T9654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.829405][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.836620][ T9654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.476916][T17971] netlink: 'syz.4.3024': attribute type 1 has an invalid length. [ 418.759905][T17636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.863911][ T50] Bluetooth: hci2: command tx timeout [ 418.945028][T17636] veth0_vlan: entered promiscuous mode [ 419.047701][T17636] veth1_vlan: entered promiscuous mode [ 419.179967][T18005] 8021q: adding VLAN 0 to HW filter on device eth0 [ 419.200563][T18005] 8021q: adding VLAN 0 to HW filter on device eth1 [ 419.216864][T18005] 8021q: adding VLAN 0 to HW filter on device eth2 [ 419.228192][T18005] 8021q: adding VLAN 0 to HW filter on device eth3 [ 419.251928][T18005] ipip0: left promiscuous mode [ 419.340992][ T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.455006][T18031] pimreg: entered allmulticast mode [ 419.477129][T18034] __nla_validate_parse: 10 callbacks suppressed [ 419.477147][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'. [ 419.495740][T17636] veth0_macvtap: entered promiscuous mode [ 419.535276][T17636] veth1_macvtap: entered promiscuous mode [ 419.600959][T18034] syzkaller0: entered promiscuous mode [ 419.618804][T18034] syzkaller0: entered allmulticast mode [ 419.646057][T17636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.703942][T17636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.729582][T18042] 8021q: VLANs not supported on wg2 [ 419.749606][ T9311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.764797][ T9311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.789591][T18045] sctp: [Deprecated]: syz.3.3043 (pid 18045) Use of int in max_burst socket option deprecated. [ 419.789591][T18045] Use struct sctp_assoc_value instead [ 419.813936][ T9661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.827847][T18048] xt_TPROXY: Can be used only with -p tcp or -p udp [ 419.836996][ T9661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.025871][T18051] dvmrp0: entered allmulticast mode [ 420.089019][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.105861][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.208679][ T9654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.232589][ T9654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.575778][T18067] ip6erspan0: entered allmulticast mode [ 420.653642][T18076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.028316][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.043391][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.053362][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.066555][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.079807][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.158202][T18094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3054'. [ 421.370701][ T30] audit: type=1804 audit(1780296952.410:10): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3054" name="/newroot/25/memory.events" dev="tmpfs" ino=147 res=1 errno=0 [ 421.432519][ T30] audit: type=1800 audit(1780296952.410:11): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3054" name="memory.events" dev="tmpfs" ino=147 res=0 errno=0 [ 421.482693][ T30] audit: type=1804 audit(1780296952.420:12): pid=18094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3054" name="/newroot/25/memory.events" dev="tmpfs" ino=147 res=1 errno=0 [ 423.182782][ T50] Bluetooth: hci0: command tx timeout [ 423.662923][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 425.263452][ T50] Bluetooth: hci0: command tx timeout [ 426.550833][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3058'. [ 426.897572][T18148] netlink: 'syz.3.3064': attribute type 2 has an invalid length. [ 427.204522][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'. [ 427.317383][T18165] netlink: 'syz.3.3071': attribute type 1 has an invalid length. [ 427.342704][ T50] Bluetooth: hci0: command tx timeout [ 427.491114][T18165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.574040][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3071'. [ 427.601387][T18172] veth0_virt_wifi: entered promiscuous mode [ 427.617632][T18165] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3071'. [ 427.646774][T18172] bond1: (slave veth0_virt_wifi): making interface the new active one [ 427.671942][T18172] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 427.710270][T18179] bond1: (slave veth0_virt_wifi): Releasing active interface [ 427.960365][T18200] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 428.437517][T18225] team0: No ports can be present during mode change [ 428.468544][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'. [ 428.510395][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 428.558205][T18223] : renamed from bond0 (while UP) [ 428.568465][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 428.620803][T18236] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3078'. [ 428.717903][T18228] team1: entered promiscuous mode [ 428.724312][T18228] team1: entered allmulticast mode [ 428.730103][T18228] 8021q: adding VLAN 0 to HW filter on device team1 [ 428.798294][T18235] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 428.847470][T18235] team2: entered promiscuous mode [ 428.852743][T18235] team2: entered allmulticast mode [ 428.858514][T18235] 8021q: adding VLAN 0 to HW filter on device team2 [ 429.179316][T18264] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 429.187650][T18088] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.204417][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'. [ 429.219401][T18088] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.239978][T18088] bridge_slave_0: entered allmulticast mode [ 429.267915][T18088] bridge_slave_0: entered promiscuous mode [ 429.319806][T18088] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.336048][T18088] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.352619][T18088] bridge_slave_1: entered allmulticast mode [ 429.369817][T18088] bridge_slave_1: entered promiscuous mode [ 429.393287][T18277] netlink: 'syz.0.3088': attribute type 13 has an invalid length. [ 429.426923][ T50] Bluetooth: hci0: command tx timeout [ 429.527152][T18088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.569718][T18088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.686013][T18293] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 429.697274][T18293] netlink: 'syz.0.3093': attribute type 2 has an invalid length. [ 429.776407][T18088] team0: Port device team_slave_0 added [ 429.799669][T18088] team0: Port device team_slave_1 added [ 429.938845][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3096'. [ 429.976487][T18088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.002922][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.063809][T18088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.117306][T18088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.139275][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.226886][T18088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.539852][T18330] hmac(sha224: entered promiscuous mode [ 430.597425][T18088] hsr_slave_0: entered promiscuous mode [ 430.629236][T18088] hsr_slave_1: entered promiscuous mode [ 430.661099][T18088] debugfs: 'hsr0' already exists in 'hsr' [ 430.686054][T18088] Cannot create hsr debugfs directory [ 430.790341][T18346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.830995][T18346] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 430.870717][T18349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.910994][T18353] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 431.138153][T18364] netlink: 'syz.2.3106': attribute type 1 has an invalid length. [ 432.383218][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 432.913976][T18420] veth0: entered promiscuous mode [ 432.973219][T18420] veth0: left promiscuous mode [ 433.310335][T18088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.340816][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.368191][T18088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 433.392204][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.497304][T18088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 433.560988][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.596942][T18088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 433.627390][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.912247][T18448] syzkaller0: entered promiscuous mode [ 433.925738][T18448] syzkaller0: entered allmulticast mode [ 433.943876][T18453] __nla_validate_parse: 7 callbacks suppressed [ 433.943894][T18453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3120'. [ 433.997844][T18454] IPv6: sit1: Disabled Multicast RS [ 434.019108][T18454] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3121'. [ 434.180650][T18463] ipip0: entered promiscuous mode [ 434.258512][T18463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3122'. [ 434.278734][T18474] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.370113][T18470] dvmrp0: entered allmulticast mode [ 434.452324][T18088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.509170][T18088] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.555055][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.562225][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.571784][T18484] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 434.637386][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.644701][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.721181][T17618] IPVS: starting estimator thread 0... [ 434.733568][T18489] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 434.813439][T18494] IPVS: using max 34 ests per chain, 81600 per kthread [ 434.833889][ T9661] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.064150][T18503] tc_dump_action: action bad kind [ 435.776135][T18536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3133'. [ 435.839335][T18536] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3133'. [ 436.060820][T18088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.285302][T18088] veth0_vlan: entered promiscuous mode [ 436.341759][T18088] veth1_vlan: entered promiscuous mode [ 436.494327][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 436.513855][T18564] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3139'. [ 436.520371][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 436.536162][T18088] veth0_macvtap: entered promiscuous mode [ 436.539384][T18559] openvswitch: netlink: EtherType 50a is less than min 600 [ 436.547725][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3139'. [ 436.551040][T18558] openvswitch: netlink: EtherType 50a is less than min 600 [ 436.566234][T18088] veth1_macvtap: entered promiscuous mode [ 436.590689][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 436.743337][T18577] macvtap1: entered promiscuous mode [ 436.765544][T18577] macvtap1: entered allmulticast mode [ 436.771256][T18577] veth1_vlan: entered allmulticast mode [ 436.790327][T18088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.840540][T18578] macvtap2: entered promiscuous mode [ 436.850795][T18578] macvtap2: entered allmulticast mode [ 436.928633][T18579] macvtap2: entered promiscuous mode [ 436.935678][T18579] macvtap2: entered allmulticast mode [ 436.967403][T18088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.996907][ T9661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.020493][ T9661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.059618][ T9661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.088110][ T9661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.357669][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.386022][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.566389][ T9661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.595095][ T9661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.394348][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.410459][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.426206][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.440912][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.451462][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.202031][T18683] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.036165][ T9661] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.065643][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230669][T18736] macvtap0: left promiscuous mode [ 440.254466][T18736] mac80211_hwsim hwsim10 ªªªªª;: left promiscuous mode [ 440.286856][T18736] mac80211_hwsim hwsim10 ªªªªª;: left allmulticast mode [ 440.315985][T18742] netlink: 'syz.4.3180': attribute type 1 has an invalid length. [ 440.346610][T18736] bond1: left allmulticast mode [ 440.390414][T18736] gretap2: left allmulticast mode [ 440.404488][T18746] __nla_validate_parse: 5 callbacks suppressed [ 440.404500][T18746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3182'. [ 440.413064][T18736] xfrm1: left allmulticast mode [ 440.448806][T18736] wireguard0: left allmulticast mode [ 440.462315][T18736] wireguard1: left allmulticast mode [ 440.475240][T18736] bridge4: left promiscuous mode [ 440.487977][T18736] macvlan2: left promiscuous mode [ 440.500481][T18736] gretap3: left promiscuous mode [ 440.511872][T18736] gretap3: left allmulticast mode [ 440.529886][T18736] ip6tnl2: left allmulticast mode [ 440.542667][ T50] Bluetooth: hci3: command tx timeout [ 440.558859][T18736] bond5: left promiscuous mode [ 440.564891][T18736] bridge7: left promiscuous mode [ 440.576870][T18736] bond6: left promiscuous mode [ 440.581811][T18736] bond6: left allmulticast mode [ 440.587827][T18736] ip6tnl3: left allmulticast mode [ 440.593294][T18736] vlan3: left promiscuous mode [ 440.598297][T18736] bond8: left promiscuous mode [ 440.603396][T18736] bridge9: left promiscuous mode [ 440.608850][T18736] vlan3: left allmulticast mode [ 440.614246][T18736] bond8: left allmulticast mode [ 440.619317][T18736] bridge9: left allmulticast mode [ 440.625451][T18736] bridge10: left promiscuous mode [ 440.630709][T18736] bridge10: left allmulticast mode [ 440.644490][T18728] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.718068][T18755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.737188][T18755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.751012][T18755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.881773][ T9652] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.004167][T18765] Bluetooth: MGMT ver 1.23 [ 441.021021][ T9654] vlan4: left allmulticast mode [ 441.038721][ T9654] vlan4: left promiscuous mode [ 441.062934][ T9654] bridge0: port 4(vlan4) entered disabled state [ 441.075753][ T9654] vlan3: left allmulticast mode [ 441.084419][ T9654] geneve0: left allmulticast mode [ 441.089634][ T9654] vlan3: left promiscuous mode [ 441.095135][ T9654] geneve0: left promiscuous mode [ 441.102882][ T9654] bridge0: port 3(vlan3) entered disabled state [ 441.110960][ T9654] bridge_slave_1: left promiscuous mode [ 441.117484][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.136440][ T9654] dvmrp0: left allmulticast mode [ 441.480302][ T9654] bond2 (unregistering): (slave bridge2): Releasing active interface [ 441.596319][ T9654] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 441.612044][ T9654] bond0 (unregistering): Released all slaves [ 441.626481][ T9654] bond1 (unregistering): Released all slaves [ 441.640583][ T9654] bond2 (unregistering): Released all slaves [ 441.655887][ T9654] bond3 (unregistering): Released all slaves [ 441.681403][ T9654] bond4 (unregistering): Released all slaves [ 441.717977][ T9654] bond5 (unregistering): Released all slaves [ 441.743472][ T9654] bond6 (unregistering): Released all slaves [ 441.774065][ T9654] bond7 (unregistering): (slave veth5): Releasing active interface [ 441.782111][ T9654] batadv0: entered promiscuous mode [ 441.783966][T18783] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3189'. [ 441.799580][ T9654] bond7 (unregistering): (slave batadv0): Releasing active interface [ 441.808892][ T9654] bond7 (unregistering): Released all slaves [ 441.822793][ T9654] bond8 (unregistering): Released all slaves [ 441.847308][ T9654] bond9 (unregistering): Released all slaves [ 441.862322][ T9654] bond10 (unregistering): (slave veth7): Releasing backup interface [ 441.872246][ T9654] bond10 (unregistering): (slave batadv1): Releasing backup interface [ 441.881407][ T9654] bond10 (unregistering): Released all slaves [ 441.897529][ T9654] bond11 (unregistering): Released all slaves [ 441.916545][ T9654] bond12 (unregistering): Released all slaves [ 441.935175][ T9654] bond13 (unregistering): (slave bond14): Releasing backup interface [ 441.945504][ T9654] bond13 (unregistering): Released all slaves [ 441.959293][ T9654] bond14 (unregistering): Released all slaves [ 441.987319][ T751] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.019769][T18783] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.029648][T18783] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.174298][T18791] netlink: 'syz.0.3190': attribute type 1 has an invalid length. [ 442.416284][T18801] netlink: 'syz.3.3193': attribute type 11 has an invalid length. [ 442.478545][ T9654] tipc: Left network mode [ 442.623889][ T50] Bluetooth: hci3: command tx timeout [ 442.645824][T18805] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3193'. [ 442.672452][T18805] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 442.911925][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 443.257850][ T9654] IPVS: stopping backup sync thread 11922 ... [ 443.331627][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.341143][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.349132][T18647] bridge_slave_0: entered allmulticast mode [ 443.357421][T18647] bridge_slave_0: entered promiscuous mode [ 443.366818][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.374571][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.381879][T18647] bridge_slave_1: entered allmulticast mode [ 443.390950][T18647] bridge_slave_1: entered promiscuous mode [ 443.570455][T18839] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3202'. [ 443.592741][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.649400][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.939438][T18852] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3205'. [ 444.007287][T18647] team0: Port device team_slave_0 added [ 444.106515][T18647] team0: Port device team_slave_1 added [ 444.119456][T18857] netlink: 'syz.4.3207': attribute type 8 has an invalid length. [ 444.129851][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 444.148258][T18855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 444.295496][T18855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 444.308712][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.336697][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.398963][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3208'. [ 444.408221][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.470069][T18870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3208'. [ 444.624824][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.631895][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.660407][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.702956][ T50] Bluetooth: hci3: command tx timeout [ 444.715855][T18866] team3: entered promiscuous mode [ 444.721119][T18866] team3: entered allmulticast mode [ 444.728879][T18866] 8021q: adding VLAN 0 to HW filter on device team3 [ 444.768216][T18870] team4: entered promiscuous mode [ 444.773921][T18870] team4: entered allmulticast mode [ 444.779686][T18870] 8021q: adding VLAN 0 to HW filter on device team4 [ 445.472015][T18647] hsr_slave_0: entered promiscuous mode [ 445.490773][T18647] hsr_slave_1: entered promiscuous mode [ 445.546551][T18647] debugfs: 'hsr0' already exists in 'hsr' [ 445.567350][T18647] Cannot create hsr debugfs directory [ 445.615313][T18915] __nla_validate_parse: 1 callbacks suppressed [ 445.615331][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'. [ 445.648543][T18920] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3215'. [ 446.606864][T18951] openvswitch: netlink: IP tunnel dst address not specified [ 446.708146][T18951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3223'. [ 446.736162][T18951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3223'. [ 446.782934][ T50] Bluetooth: hci3: command tx timeout [ 446.847617][T18954] nbd3: detected capacity change from 0 to 63 [ 446.856321][T18955] block nbd3: NBD_DISCONNECT [ 446.876861][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 446.893714][T18955] block nbd3: Disconnected due to user request. [ 446.928390][T18955] block nbd3: shutting down sockets [ 446.982968][ C0] blk_print_req_error: 136 callbacks suppressed [ 446.982986][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.998380][ C0] buffer_io_error: 138 callbacks suppressed [ 446.998405][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 447.017854][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.028999][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.038099][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 447.045905][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.054956][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 447.062740][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.071843][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 447.079744][T18107] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.091951][T18107] Buffer I/O error on dev nbd3, logical block 0, async page read [ 447.092306][T18959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.100093][T18107] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.120688][T18107] Buffer I/O error on dev nbd3, logical block 1, async page read [ 447.129701][T18107] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.141595][T18107] Buffer I/O error on dev nbd3, logical block 2, async page read [ 447.149586][T18107] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.160620][T18107] Buffer I/O error on dev nbd3, logical block 3, async page read [ 447.164995][T18960] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 447.169081][T18107] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.204250][T18107] Buffer I/O error on dev nbd3, logical block 0, async page read [ 447.213518][T18107] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.224140][T18107] Buffer I/O error on dev nbd3, logical block 1, async page read [ 447.236206][T18107] ldm_validate_partition_table(): Disk read failed. [ 447.245805][T18107] Dev nbd3: unable to read RDB block 0 [ 447.273746][T18107] nbd3: unable to read partition table [ 447.294167][T18107] ldm_validate_partition_table(): Disk read failed. [ 447.315995][T18107] Dev nbd3: unable to read RDB block 0 [ 447.324037][T18107] nbd3: unable to read partition table [ 447.354285][T18974] nbd: nbd1 already in use [ 447.364712][T18975] nbd: nbd1 already in use [ 447.383173][T18974] block nbd0: NBD_DISCONNECT [ 447.388373][T18974] block nbd0: Send disconnect failed -32 [ 447.413999][T18974] block nbd0: Send disconnect failed -32 [ 447.432584][T18974] block nbd0: shutting down sockets [ 447.639661][T18647] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.913102][T18993] veth1: entered promiscuous mode [ 447.990354][T18647] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.457406][T18647] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.490177][T19015] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 448.805261][T18647] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.844225][T19036] netlink: 'syz.4.3236': attribute type 1 has an invalid length. [ 449.022842][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 449.080429][ T9654] hsr_slave_0: left promiscuous mode [ 449.090532][ T9654] hsr_slave_1: left promiscuous mode [ 449.137100][T19049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3238'. [ 449.421707][T19037] bond10: (slave geneve2): making interface the new active one [ 449.441141][T19037] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 449.469796][ T9655] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.480317][ T9655] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.527892][ T9655] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.543627][ T9655] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 450.335401][T19066] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.343133][T19066] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.527168][T19097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3245'. [ 450.549161][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'. [ 450.780016][T19066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.335310][T19080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.367881][T19097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3245'. [ 451.388912][ T751] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.426069][ T751] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.440926][ T751] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.479978][ T751] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.544068][T19118] netlink: 'syz.3.3247': attribute type 58 has an invalid length. [ 451.553159][T19118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3247'. [ 451.677278][ T9654] IPVS: stop unused estimator thread 0... [ 451.776728][T19137] syzkaller0: entered promiscuous mode [ 451.792562][T19137] syzkaller0: entered allmulticast mode [ 452.004550][T18647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.042126][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.074723][T18647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.141862][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.146984][T19151] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 452.219863][T18647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.254218][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.280760][T18647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.349046][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.438991][T19170] netlink: 'syz.4.3251': attribute type 10 has an invalid length. [ 452.483255][T19154] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 452.532727][T19154] bond1 (unregistering): Released all slaves [ 452.599267][T19160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3252'. [ 452.900762][T19198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.999398][T19196] geneve2: entered promiscuous mode [ 453.044135][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.122158][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.161680][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.168887][ T9656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.211007][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.218222][ T9656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.365443][T19218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3263'. [ 453.968687][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3268'. [ 454.671330][T19272] netlink: 'syz.3.3272': attribute type 4 has an invalid length. [ 454.737546][ T50] block nbd0: Receive control failed (result -1) [ 454.798678][T18647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.939746][T18647] veth0_vlan: entered promiscuous mode [ 454.998799][T18647] veth1_vlan: entered promiscuous mode [ 455.171325][T19292] xt_hl: Unknown TTL match mode: 237 [ 455.178850][T18647] veth0_macvtap: entered promiscuous mode [ 455.209393][T18647] veth1_macvtap: entered promiscuous mode [ 455.276921][T18647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.330446][T19301] [ 455.332814][T19301] ====================================================== [ 455.339839][T19301] WARNING: possible circular locking dependency detected [ 455.346884][T19301] syzkaller #0 Not tainted [ 455.351302][T19301] ------------------------------------------------------ [ 455.358332][T19301] syz.4.3276/19301 is trying to acquire lock: [ 455.364406][T19301] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 455.373666][T19301] [ 455.373666][T19301] but task is already holding lock: [ 455.381047][T19301] ffff88802df3d8f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 455.390562][T19301] [ 455.390562][T19301] which lock already depends on the new lock. [ 455.390562][T19301] [ 455.400967][T19301] [ 455.400967][T19301] the existing dependency chain (in reverse order) is: [ 455.409987][T19301] [ 455.409987][T19301] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 455.417569][T19301] __might_fault+0xcb/0x130 [ 455.422617][T19301] _copy_from_user+0x28/0xb0 [ 455.427945][T19301] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 455.434668][T18647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.434559][T19301] ip_generic_getfrag+0x149/0x2d0 [ 455.447400][T19301] __ip6_append_data+0x39cd/0x3f60 [ 455.453119][T19301] ip6_append_data+0x10f/0x280 [ 455.458408][T19301] rawv6_sendmsg+0x12d3/0x18e0 [ 455.463807][T19301] ____sys_sendmsg+0x80a/0x9f0 [ 455.469147][T19301] ___sys_sendmsg+0x2a5/0x360 [ 455.474335][T19301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.479785][T19301] do_syscall_64+0x174/0x580 [ 455.484992][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.491432][T19301] [ 455.491432][T19301] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 455.499156][T19301] lock_sock_nested+0x41/0x100 [ 455.504491][T19301] inet_shutdown+0x6a/0x390 [ 455.509576][T19301] nbd_mark_nsock_dead+0x2e9/0x560 [ 455.515263][T19301] recv_work+0x1c2e/0x1d40 [ 455.520189][T19301] process_scheduled_works+0xb5d/0x1860 [ 455.526281][T19301] worker_thread+0xa53/0xfc0 [ 455.531388][T19301] kthread+0x389/0x470 [ 455.535979][T19301] ret_from_fork+0x514/0xb70 [ 455.541128][T19301] ret_from_fork_asm+0x1a/0x30 [ 455.546426][T19301] [ 455.546426][T19301] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 455.554065][T19301] __mutex_lock+0x1a3/0x1550 [ 455.559232][T19301] nbd_queue_rq+0x37b/0x1100 [ 455.564337][T19301] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 455.570454][T19301] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 455.577324][T19301] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 455.583816][T19301] blk_mq_run_hw_queue+0x348/0x4f0 [ 455.589439][T19301] blk_mq_dispatch_list+0xd16/0xe10 [ 455.595319][T19301] blk_mq_flush_plug_list+0x48d/0x570 [ 455.601207][T19301] __blk_flush_plug+0x3ed/0x4d0 [ 455.606673][T19301] __submit_bio+0x28d/0x580 [ 455.611698][T19301] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 455.617842][T19301] block_read_full_folio+0x599/0x830 [ 455.623669][T19301] filemap_read_folio+0x137/0x3b0 [ 455.629236][T19301] do_read_cache_folio+0x358/0x590 [ 455.634875][T19301] read_part_sector+0xb6/0x2b0 [ 455.640207][T19301] adfspart_check_ICS+0xb1/0x960 [ 455.645660][T19301] bdev_disk_changed+0x817/0x1770 [ 455.651193][T19301] blkdev_get_whole+0x380/0x510 [ 455.656627][T19301] bdev_open+0x31e/0xd30 [ 455.661378][T19301] blkdev_open+0x470/0x610 [ 455.666317][T19301] do_dentry_open+0x822/0x13a0 [ 455.671643][T19301] vfs_open+0x3b/0x340 [ 455.676237][T19301] path_openat+0x2e08/0x3860 [ 455.681345][T19301] do_file_open+0x23e/0x4a0 [ 455.686364][T19301] do_sys_openat2+0x113/0x200 [ 455.691589][T19301] __x64_sys_openat+0x138/0x170 [ 455.696963][T19301] do_syscall_64+0x174/0x580 [ 455.702073][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.708480][T19301] [ 455.708480][T19301] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 455.715701][T19301] __mutex_lock+0x1a3/0x1550 [ 455.720966][T19301] nbd_queue_rq+0xc6/0x1100 [ 455.725984][T19301] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 455.732048][T19301] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 455.738891][T19301] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 455.745386][T19301] blk_mq_run_hw_queue+0x348/0x4f0 [ 455.751008][T19301] blk_mq_dispatch_list+0xd16/0xe10 [ 455.756718][T19301] blk_mq_flush_plug_list+0x48d/0x570 [ 455.762614][T19301] __blk_flush_plug+0x3ed/0x4d0 [ 455.767970][T19301] __submit_bio+0x28d/0x580 [ 455.772983][T19301] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 455.779120][T19301] block_read_full_folio+0x599/0x830 [ 455.784919][T19301] filemap_read_folio+0x137/0x3b0 [ 455.790464][T19301] do_read_cache_folio+0x358/0x590 [ 455.796089][T19301] read_part_sector+0xb6/0x2b0 [ 455.801362][T19301] adfspart_check_ICS+0xb1/0x960 [ 455.806807][T19301] bdev_disk_changed+0x817/0x1770 [ 455.812338][T19301] blkdev_get_whole+0x380/0x510 [ 455.817710][T19301] bdev_open+0x31e/0xd30 [ 455.822461][T19301] blkdev_open+0x470/0x610 [ 455.827388][T19301] do_dentry_open+0x822/0x13a0 [ 455.832667][T19301] vfs_open+0x3b/0x340 [ 455.837255][T19301] path_openat+0x2e08/0x3860 [ 455.842365][T19301] do_file_open+0x23e/0x4a0 [ 455.847387][T19301] do_sys_openat2+0x113/0x200 [ 455.852573][T19301] __x64_sys_openat+0x138/0x170 [ 455.857932][T19301] do_syscall_64+0x174/0x580 [ 455.863029][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.869438][T19301] [ 455.869438][T19301] -> #3 (set->srcu){.+.+}-{0:0}: [ 455.876554][T19301] __synchronize_srcu+0xca/0x300 [ 455.882046][T19301] elevator_switch+0x1e8/0x7a0 [ 455.887318][T19301] elevator_change+0x2cc/0x450 [ 455.892591][T19301] elevator_set_default+0x36c/0x430 [ 455.898300][T19301] blk_register_queue+0x3e9/0x4e0 [ 455.903837][T19301] __add_disk+0x677/0xd50 [ 455.908682][T19301] add_disk_fwnode+0xfb/0x480 [ 455.913873][T19301] nbd_dev_add+0x72c/0xb50 [ 455.918803][T19301] nbd_init+0x168/0x1f0 [ 455.923636][T19301] do_one_initcall+0x250/0x870 [ 455.928913][T19301] do_initcall_level+0x104/0x190 [ 455.934440][T19301] do_initcalls+0x59/0xa0 [ 455.939290][T19301] kernel_init_freeable+0x2a6/0x3e0 [ 455.945005][T19301] kernel_init+0x1d/0x1d0 [ 455.949849][T19301] ret_from_fork+0x514/0xb70 [ 455.954977][T19301] ret_from_fork_asm+0x1a/0x30 [ 455.960254][T19301] [ 455.960254][T19301] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 455.968065][T19301] __mutex_lock+0x1a3/0x1550 [ 455.973168][T19301] elevator_change+0x1b3/0x450 [ 455.978449][T19301] elevator_set_none+0xb5/0x140 [ 455.983809][T19301] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 455.990129][T19301] nbd_start_device+0x17f/0xb10 [ 455.995496][T19301] nbd_genl_connect+0x165b/0x1cf0 [ 456.001038][T19301] genl_family_rcv_msg_doit+0x22a/0x330 [ 456.007200][T19301] genl_rcv_msg+0x61c/0x7a0 [ 456.012213][T19301] netlink_rcv_skb+0x232/0x4b0 [ 456.017484][T19301] genl_rcv+0x28/0x40 [ 456.021984][T19301] netlink_unicast+0x75c/0x8e0 [ 456.027251][T19301] netlink_sendmsg+0x813/0xb40 [ 456.032530][T19301] ____sys_sendmsg+0x972/0x9f0 [ 456.037905][T19301] ___sys_sendmsg+0x2a5/0x360 [ 456.043094][T19301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 456.048537][T19301] do_syscall_64+0x174/0x580 [ 456.053632][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.060031][T19301] [ 456.060031][T19301] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 456.068627][T19301] blk_alloc_queue+0x546/0x680 [ 456.073900][T19301] __blk_mq_alloc_disk+0x197/0x390 [ 456.079527][T19301] nbd_dev_add+0x499/0xb50 [ 456.084457][T19301] nbd_init+0x168/0x1f0 [ 456.089123][T19301] do_one_initcall+0x250/0x870 [ 456.094396][T19301] do_initcall_level+0x104/0x190 [ 456.099845][T19301] do_initcalls+0x59/0xa0 [ 456.104684][T19301] kernel_init_freeable+0x2a6/0x3e0 [ 456.110392][T19301] kernel_init+0x1d/0x1d0 [ 456.115231][T19301] ret_from_fork+0x514/0xb70 [ 456.120332][T19301] ret_from_fork_asm+0x1a/0x30 [ 456.125604][T19301] [ 456.125604][T19301] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 456.132804][T19301] __lock_acquire+0x15a5/0x2cf0 [ 456.138199][T19301] lock_acquire+0x106/0x350 [ 456.143209][T19301] fs_reclaim_acquire+0x71/0x100 [ 456.148663][T19301] prepare_alloc_pages+0x152/0x650 [ 456.154290][T19301] __alloc_frozen_pages_noprof+0x12f/0x380 [ 456.160602][T19301] alloc_pages_mpol+0x235/0x490 [ 456.165999][T19301] folio_alloc_mpol_noprof+0x39/0x160 [ 456.171876][T19301] vma_alloc_folio_noprof+0xe1/0x1e0 [ 456.177666][T19301] do_pte_missing+0x159d/0x33f0 [ 456.183028][T19301] handle_mm_fault+0x1bf2/0x3170 [ 456.188486][T19301] do_user_addr_fault+0x75b/0x1340 [ 456.194144][T19301] exc_page_fault+0x6a/0xc0 [ 456.199200][T19301] asm_exc_page_fault+0x26/0x30 [ 456.204565][T19301] rep_movs_alternative+0x33/0x90 [ 456.210109][T19301] _copy_to_user+0x8a/0xb0 [ 456.215037][T19301] rfkill_fop_read+0x2fe/0x520 [ 456.220388][T19301] vfs_read+0x20c/0xa70 [ 456.225058][T19301] ksys_read+0x150/0x270 [ 456.229830][T19301] do_syscall_64+0x174/0x580 [ 456.234931][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.241337][T19301] [ 456.241337][T19301] other info that might help us debug this: [ 456.241337][T19301] [ 456.251553][T19301] Chain exists of: [ 456.251553][T19301] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 456.251553][T19301] [ 456.264151][T19301] Possible unsafe locking scenario: [ 456.264151][T19301] [ 456.271586][T19301] CPU0 CPU1 [ 456.276935][T19301] ---- ---- [ 456.282285][T19301] rlock(&mm->mmap_lock); [ 456.286695][T19301] lock(sk_lock-AF_INET6); [ 456.293706][T19301] lock(&mm->mmap_lock); [ 456.300543][T19301] lock(fs_reclaim); [ 456.304518][T19301] [ 456.304518][T19301] *** DEADLOCK *** [ 456.304518][T19301] [ 456.312645][T19301] 2 locks held by syz.4.3276/19301: [ 456.317828][T19301] #0: ffff88805470fe80 (&data->mtx){+.+.}-{4:4}, at: rfkill_fop_read+0xbf/0x520 [ 456.326962][T19301] #1: ffff88802df3d8f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 456.336889][T19301] [ 456.336889][T19301] stack backtrace: [ 456.342785][T19301] CPU: 1 UID: 0 PID: 19301 Comm: syz.4.3276 Not tainted syzkaller #0 PREEMPT(full) [ 456.342804][T19301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.342821][T19301] Call Trace: [ 456.342830][T19301] [ 456.342837][T19301] dump_stack_lvl+0xe8/0x150 [ 456.342857][T19301] print_circular_bug+0x2e1/0x300 [ 456.342879][T19301] check_noncircular+0x12e/0x150 [ 456.342900][T19301] __lock_acquire+0x15a5/0x2cf0 [ 456.342918][T19301] ? is_bpf_text_address+0x292/0x2b0 [ 456.342964][T19301] ? is_bpf_text_address+0x26/0x2b0 [ 456.342979][T19301] ? kernel_text_address+0xa5/0xe0 [ 456.343001][T19301] ? __kernel_text_address+0xd/0x30 [ 456.343023][T19301] ? prepare_alloc_pages+0x152/0x650 [ 456.343045][T19301] lock_acquire+0x106/0x350 [ 456.343059][T19301] ? prepare_alloc_pages+0x152/0x650 [ 456.343088][T19301] ? stack_trace_save+0xa9/0x100 [ 456.343117][T19301] fs_reclaim_acquire+0x71/0x100 [ 456.343138][T19301] ? prepare_alloc_pages+0x152/0x650 [ 456.343158][T19301] prepare_alloc_pages+0x152/0x650 [ 456.343182][T19301] __alloc_frozen_pages_noprof+0x12f/0x380 [ 456.343198][T19301] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 456.343222][T19301] ? __pfx_policy_nodemask+0x10/0x10 [ 456.343238][T19301] ? __lock_acquire+0x6b5/0x2cf0 [ 456.343254][T19301] alloc_pages_mpol+0x235/0x490 [ 456.343270][T19301] folio_alloc_mpol_noprof+0x39/0x160 [ 456.343285][T19301] vma_alloc_folio_noprof+0xe1/0x1e0 [ 456.343300][T19301] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 456.343315][T19301] ? __pte_offset_map+0x29/0x240 [ 456.343334][T19301] ? __pte_offset_map+0x29/0x240 [ 456.343352][T19301] do_pte_missing+0x159d/0x33f0 [ 456.343378][T19301] ? handle_mm_fault+0xf1/0x3170 [ 456.343397][T19301] handle_mm_fault+0x1bf2/0x3170 [ 456.343420][T19301] ? handle_mm_fault+0xf1/0x3170 [ 456.343439][T19301] ? __pfx_handle_mm_fault+0x10/0x10 [ 456.343463][T19301] ? lock_mm_and_find_vma+0xa7/0x340 [ 456.343485][T19301] do_user_addr_fault+0x75b/0x1340 [ 456.343505][T19301] exc_page_fault+0x6a/0xc0 [ 456.343522][T19301] asm_exc_page_fault+0x26/0x30 [ 456.343536][T19301] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 456.343557][T19301] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 456.343571][T19301] RSP: 0018:ffffc90005a5fb48 EFLAGS: 00050246 [ 456.343586][T19301] RAX: 0000000800000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 456.343597][T19301] RDX: 0000000000000000 RSI: ffff8880345225d0 RDI: 0000200000001780 [ 456.343608][T19301] RBP: ffffc90005a5fc90 R08: ffff8880345225d7 R09: 1ffff110068a44ba [ 456.343619][T19301] R10: dffffc0000000000 R11: ffffed10068a44bb R12: 0000200000001788 [ 456.343630][T19301] R13: 00007ffffffff000 R14: ffff8880345225d0 R15: 0000200000001780 [ 456.343648][T19301] _copy_to_user+0x8a/0xb0 [ 456.343667][T19301] rfkill_fop_read+0x2fe/0x520 [ 456.343685][T19301] ? __pfx_rfkill_fop_read+0x10/0x10 [ 456.343699][T19301] ? apparmor_file_permission+0x1f4/0x300 [ 456.343781][T19301] ? bpf_lsm_file_permission+0x9/0x20 [ 456.343811][T19301] ? security_file_permission+0x75/0x260 [ 456.343882][T19301] ? rw_verify_area+0x2a6/0x4d0 [ 456.343903][T19301] ? __pfx_rfkill_fop_read+0x10/0x10 [ 456.343918][T19301] vfs_read+0x20c/0xa70 [ 456.343941][T19301] ? __pfx_vfs_read+0x10/0x10 [ 456.343961][T19301] ? __fget_files+0x2a/0x420 [ 456.343979][T19301] ? __fget_files+0x2a/0x420 [ 456.343996][T19301] ? __fget_files+0x3a0/0x420 [ 456.344013][T19301] ? __fget_files+0x2a/0x420 [ 456.344033][T19301] ksys_read+0x150/0x270 [ 456.344054][T19301] ? __pfx_ksys_read+0x10/0x10 [ 456.344082][T19301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.344097][T19301] do_syscall_64+0x174/0x580 [ 456.344112][T19301] ? trace_irq_disable+0x3b/0x140 [ 456.344135][T19301] ? clear_bhb_loop+0x40/0x90 [ 456.344151][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.344166][T19301] RIP: 0033:0x7f9f9019ce59 [ 456.344180][T19301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.344193][T19301] RSP: 002b:00007f9f91101028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 456.344208][T19301] RAX: ffffffffffffffda RBX: 00007f9f90416180 RCX: 00007f9f9019ce59 [ 456.344220][T19301] RDX: 0000000000000008 RSI: 0000200000001780 RDI: 000000000000000c [ 456.344230][T19301] RBP: 00007f9f90232d6f R08: 0000000000000000 R09: 0000000000000000 [ 456.344239][T19301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.344248][T19301] R13: 00007f9f90416218 R14: 00007f9f90416180 R15: 00007fff23d45088 [ 456.344265][T19301] [ 456.356902][T18728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.945130][T18728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.959136][T18728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.007856][T18728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.049871][T18647] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 457.083364][ T9656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.088400][T18647] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 457.091262][ T9656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.137052][T18728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.147971][T18728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50