last executing test programs: 2.37015561s ago: executing program 4 (id=12921): ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000080)={0x29e, 0x4, 0x10001, 0x0, 0x100, 0x5, 0x0, &(0x7f0000000000)=[{0x9, 0x101, 0xa6}, {0x7, 0xfe, 0x6}, {0x15, 0x101, 0x7ed}, {0x14, 0x101, 0x7}, {0x1c, 0x101, 0x3}]}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@private=0xa010101, @in=@remote, 0x4e22, 0x0, 0x4e23, 0x3, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x16fa, 0x1, 0x9, 0x3, 0xec36, 0x9, 0xec, 0x100000000}, {0x7, 0x2400000000, 0x8, 0x4}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x3506, 0x0, 0x1, 0x6, 0xb3, 0xed7, 0x6}}, 0xe8) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x10000, 0x8, 0x1, 0x81a, 0xffffffffffffffff]}, &(0x7f0000000380)=0x78) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f00000003c0)=']##i{\x00', 0x0, &(0x7f0000000400)={@align=0xfffffffffffffff4, {0x4, 0xaf, 0x9}}, 0xf, &(0x7f0000000440), &(0x7f0000000480)}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000500)={0x3, 0x7, "03a8cf", 0x7f, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x6, 0x0, 0x9, 0x8, r4, 0x8, '\x00', r1, r4, 0x6, 0x5, 0x5, 0x3}, 0x50) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r5, 0x40786e88, &(0x7f0000000800)={{&(0x7f0000000600)=[{0x1, 0x9, 0x9, {0x3, 0x400}, 0xb, 0x101, 0x8001}, {0xfffffffffffffffe, 0x4, 0xfffffffffffffffd, {0x8, 0xb2}, 0x7, 0x4, 0x5}, {0xffffffffffffffff, 0xb, 0x0, {0x8001, 0x6}, 0x3, 0x80000000, 0x2}], 0x3, 0x40, 0x7, 0x5}, {&(0x7f00000006c0)=[{0x0, 0x2}], 0x1, 0x10, 0x4, 0x1}, {&(0x7f0000000700)=[0x8000000000000001, 0x400, 0xa93, 0x8, 0x9, 0x2, 0x5], 0x7, 0x8, 0x6, 0x8000}, {&(0x7f0000000740)=[{0x423278e7, 0x2, 0x4, 0x3, 0x7c0a}, {0x3, 0xf, 0x4, 0x2, 0x8001}, {0x10, 0x3, 0x6, 0x8fd, 0x4}], 0x3, 0x28, 0x2, 0x100000001}, {&(0x7f00000007c0)=[0x2, 0x1, 0x8, 0x7, 0x6, 0x1, 0x7ff], 0x7, 0x8, 0x1, 0xd1}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r4, 0x58, &(0x7f0000000880)}, 0x10) getsockopt$inet6_int(r4, 0x29, 0xc9, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a00)={0x7, 0x8, 0x1, 0x7fff, 0x2, 0xb1, 0x268, 0x8}, &(0x7f0000000a40)=0x20) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000a80)={0x67, 0xa, 0x1, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}, 0x58) getsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000bc0)={r6, 0x1, 0x6, @local}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000c00)={r5}) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000c40)=0xf6, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000c80), &(0x7f0000000d00)=0x68) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3ff}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x76}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x35}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44005}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000e80)={0x3, 0x2, 0x3}) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$NILFS_IOCTL_GET_CPINFO(r8, 0x80186e82, &(0x7f0000001040)={&(0x7f0000000ec0)=[{0x3, 0x0, 0x5, 0xa49, 0x3, 0x8000000000000000, 0xffff, 0x5}, {0x3, 0x0, 0x3, 0xe, 0x9f28, 0x2, 0x9, 0xf42}, {0x0, 0x0, 0x7, 0x10000, 0x2, 0xffffffff, 0x6, 0x100000001}, {0x2, 0x0, 0x5, 0xf361, 0x0, 0x100000000, 0x2, 0x3}, {0x3, 0x0, 0xf6f1, 0x1, 0x80000000, 0x6, 0x8, 0x2}, {0x1, 0x0, 0x8000000000000001, 0x4, 0x0, 0x3, 0x8, 0x8}], 0x6}) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001080)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x32}, @hci={0x1f, 0x4, 0x2}, 0x200, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x401, 0xffff}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, 0x0, 0x210, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.080095308s ago: executing program 4 (id=12926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.028326476s ago: executing program 2 (id=12927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e24, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x27}, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0x3, 0x401, 0x1, 0x9, 0x7fffffff, 0x8000000000000543}, {0x5, 0x8000000000000001, 0x4}, {0x3}, 0x70bd2c, 0x3504, 0xa, 0x4, 0x0, 0x2d4363205ffec2a2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd27, 0x1, 0x70bd2d, 0x7}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "250466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x40080) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) (async) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x3c, r7, 0x731, 0x0, 0x20, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}, 0x1, 0x2}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x40, r10, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10000, 0x7d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xa}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xb4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x83}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xff}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x6f}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0xf5346c7ca7d1ae10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1403, 0x400, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.948480401s ago: executing program 4 (id=12929): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000017c0), 0x1, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0xcc40, &(0x7f00000000c0)={@align=0xcd6, {0x9, 0x3, 0xd, 0x682}}, 0x47, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x9, 0x4, 0x34, @mcast1, @private2, 0x7, 0x7800, 0x2, 0x7}}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xed5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.748533766s ago: executing program 1 (id=12932): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r1, 0x400, 0x0, 0x0, {0x7}}, 0x14}}, 0x20000880) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 1.748325783s ago: executing program 2 (id=12933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x56ad) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000200)={0xfffa, 0x6, 0x0, 0x4, 0x2, 0x12, 0x0, "0090c4a0a17feb6bf18b24e09d2f6acacb1cf562", "714a63daffc2f248f85a8e6a849e63c7ff5c29a9"}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa0, 0x52, 0x4, 0x0, 0x0, {0x1c}, [@nested={0x8c, 0x2e, 0x0, 0x1, [@nested={0x7a, 0x11b, 0x0, 0x1, [@generic="b8ecf75321b739a831f159f23ef816480024f6c995cf49ed1786246ef88659bf9410d72e2fca3f86b57a3253b808e8ace5e6362ec1ba957cbff7a7828ab44a30582fcb2fac0c33f85763d656f6bc8f975d6e727ca416e809977f2629b2ec5226447fc822aea4", @nested={0x4, 0x2c}, @nested={0x4, 0x2a}, @nested={0x4, 0x14}, @nested={0x4, 0x67}]}, @typed={0xc, 0xb0, 0x0, 0x0, @u64}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.670615208s ago: executing program 1 (id=12935): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000000001"], 0x30}, 0x4004804) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000080)={0x6, 0xfffffff8, 0xfffffffa, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{0x6, 0x101, 0x80000001}, {0x11, 0x101, 0xed}, {0x13, 0x101}]}) 1.559690734s ago: executing program 2 (id=12936): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x840, 0x78}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0xc001) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x40818) (async) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000000280)="a285f18b021e49349185dc51310f56700302620a035da0ccf17e32de445e05b9ed391173c0ed3381aaea3d685f21d78a9a9b133443cc7fb1eb64e9011a8353542b4ca8c04d817b34c19c598ce3bef28c488789e170fbd473af3f852030dc1fd1a3a3488036caf2a53c2f5c3a6ffd80180da5dcf898f297146e9287d65e225e307b6211afb7e55231b2778b84971d7f98052082cc71d4f6c37c3ecae04ec161dd502e0ca11323f927b707ec95b4", 0xad}, {&(0x7f0000000340)="6ba3218fd54878c8a77bde77202967e85f7dd8c576c14f5ab97a49e2c2f78cfc8befe45a9215c81da52e62ab619d549b0a2c9c35c3e83a817542f57ea5e6b41860bec67a47251a63cc074f5cb9b51a7c5e1fde5ff697646c173b9891cb4402fa09711e1668029a3c87fba29f1759750d7008b85413697bd8623e4a4218514b6d", 0x80}, {&(0x7f00000003c0)="9e2b6b1a75d9decf7bb07a178bb4e13d8c2d0813126510435462b1a9ca054777d0ffc4bbb6024db20f756b2fd8c44419f075eb043ea363cfc655e4671d21c75c969f91f8c3e22455527dfae2b0d522f168cd2213abba1d97e56af65e2f0c08f034ef695afe07bf156be7f0ae5a91ce6a346956d3e6cda33e3d91f7ede70470dbff83ffb98e7c165569814402df316c39b0ba0ea2106b6e70a7b95ddcc95b3dc0ea847aef11a6f1d40c6a4523b734aeb0103b298c2c2641921f2b95c7ac97883c33a337825615098a65e6265e53e69f299779e920b1fb99c862e25641ec67", 0xde}, {&(0x7f00000004c0)="c91db668ceb28721cd83692cb26663790e6bfc9d7cd1638003ba055b149ffe2c491ef393bbc191a685bfa8c9142e1f25e52c01f566123d27635dfde8ae63525f3dfe81ce1317433491f65e4b4ff7d279ee49f94d3cde9fe41fcbdb32db264f1d4d16b8f5bdd64214255a9e5456323a1d84", 0x71}, {&(0x7f0000000540)}], 0x5, 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x700, 0x700, 0x2, 0x9, {{0x44, 0x4, 0x1, 0x37, 0x110, 0x64, 0x0, 0x9, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xe0, 0x1, 0x4, [{@multicast1, 0xe4}, {@local, 0xf68}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x0, [{@empty, 0x3}]}, @cipso={0x86, 0x69, 0x0, [{0x6, 0x7, "35d166889e"}, {0x5, 0xa, "8be1395d8975843d"}, {0x1, 0xe, "63118751d0f384c8027120a1"}, {0x0, 0xe, "413cfb0b24c6347d6ee6f518"}, {0x6, 0xc, "e48fa2c2388619142cce"}, {0x0, 0x10, "33f4b6fcdd2f3ad8aec628489a61"}, {0x1, 0x8, "619e9d5d5cd9"}, {0x6, 0x6, "b818bbac"}, {0x5, 0x8, "88b6a3ad4f10"}, {0x1, 0x4, "15c9"}]}, @lsrr={0x83, 0x7, 0x4, [@local]}, @generic={0x89, 0x7, "dd2a29d975"}, @end, @generic={0x88, 0xc, "10b4a4cca7fc1f1b02ae"}, @lsrr={0x83, 0xf, 0xce, [@empty, @empty, @local]}, @ssrr={0x89, 0x1b, 0x3c, [@empty, @rand_addr=0x64010101, @broadcast, @multicast2, @loopback, @local]}, @timestamp={0x44, 0x1c, 0x2f, 0x0, 0x9, [0x5069fcd1, 0x1, 0xa5d6, 0xf510, 0x1bc, 0xbcb]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb1, 0xb1, 0x9, [@datasec={0x6, 0x5, 0x0, 0xf, 0x1, [{0x1, 0x6, 0x9}, {0x2, 0x3, 0x8}, {0x3, 0x2, 0x8}, {0x4, 0x5, 0x5}, {0x5, 0x3, 0x7fff}], '7'}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0x6, 0x2}, {0x2, 0x4}, {0xe}, {0x5, 0x2}, {0x7}, {0x4, 0x1}]}, @enum64={0x5, 0x1, 0x0, 0x13, 0x1, 0xd, [{0x8, 0x4e, 0x8}]}, @fwd={0xb}]}, {0x0, [0x30, 0x2e, 0x30, 0x0, 0x5f, 0x30, 0x0]}}, &(0x7f0000000940), 0xd5, 0x0, 0x1, 0x80, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3ff, 0x2, 0x3001, r4, 0xfffffcc4, '\x00', r5, r6, 0x2, 0x4, 0x5}, 0x50) (async) setsockopt(r2, 0x9, 0x0, &(0x7f0000000a40)="0c2196cbe24f9fb12034268b6bc9328ab7e5a9086a2f5b7b1ffde1", 0x1b) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r2) (async) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000ac0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, r10, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x57}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1aa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}], @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x7c}, {0x49}, {0x30}, {0x60}, {0x1, 0x1}, {0x30, 0x1}, {0x1b, 0x1}, {0x9}, {0x14}, {0x9}, {0x6}, {0x18}, {0x12}, {0x2}, {0x2a}, {0x1b}, {0x1}, {0x18, 0x1}, {0x16, 0x1}, {0x36, 0x1}, {0x5, 0x1}, {0x6c, 0x1}, {0x18}, {0xc}, {0x5, 0x1}, {0x6c}, {0x24, 0x1}, {0x1b}, {0x12, 0x1}, {0x2}, {0x48}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000095}, 0x8004) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), 0xffffffffffffffff) (rerun: 64) sendmsg$NFC_CMD_GET_TARGET(r12, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r13, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20048801) (async, rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r9) (rerun: 64) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r14, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r12) syz_genetlink_get_family_id$net_dm(&(0x7f0000000fc0), r12) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r15, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a363cc44f43f"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x5041) 1.518901255s ago: executing program 3 (id=12937): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x1, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.505945661s ago: executing program 1 (id=12938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000080", @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b0099000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10000000141475bb"], 0x10}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fddbdf2503000000080001000000000010000a00242d3a2bbe405d5b2c2c7b2c05000a003a00000005000a0098000000400007800c000180080001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 1.392263619s ago: executing program 2 (id=12939): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) listen(r2, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x2, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028006000e000300000008000700ac14142808000a00", @ANYRES32=r12, @ANYBLOB="290fcee30418db94db45deba8eb1ea57b930efd1350d11fd6d50a1f1ec0c2913c3570646d99ac34c5a0976b2e264dff297ee4658c4709d94baa8e1d8919ae14a468776d938c98e30c380fd53dba98b8d35d78301fa1ed5df3d99c05fec8de6e5a083f8ad3ef7a5c278e048b9e4aac66d0854f523ed2a85c023b531e1da60c56068020e9002d732b226a5cd21c83f7f6eecf71445a77a52643b82ce2b54ffa7dc7688be326f1dfa0e17513628cffd774d9aaf6ac2fe92429ca70548552acd3cde3b4f2ce3b604b77201f85f72670f2cff1331e54ef4a674e0f49f875cb2bc76ecaff40194875a362b511b38cb18397b8a0f4d0f3c7be3558fa09dd2134c1cd40d5cb95adedd7065dbbdbf19c9a0ba88718f3968c48e67c2d05be18045d960872ece22498f56d86dd1ebd3780bf0e3504ba3c01e794477b6ffebc494cb92cf22f74a4c46f073f97f7d4d5345533d868ab97bee3797cf901a2bfd06f5d799dc7f6f7b5f4231a4b6"], 0x4c}}, 0x0) 1.378396424s ago: executing program 3 (id=12941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) socket(0x2a, 0x2, 0x10000) 1.368147327s ago: executing program 0 (id=12942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x200000000003) sendmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000c"], 0x10}}], 0x1, 0x20000040) 1.308414126s ago: executing program 1 (id=12943): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) unshare(0x22020600) poll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) recvmsg$unix(r3, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeaa7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYRESDEC=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.274503085s ago: executing program 2 (id=12944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYBLOB="9b5be5def3e2f40b0fb466eead76df2f393f85f0303c8f89788ab8fc767782732f9c9124da4693505829a6bb25b55a2f9e74a1e5075c36e2c7ef583c4c22ad407cbe22f414f5200ba6c7d101f2332ac0b9a275d18341707114846d13a9ea080e9af7fe9f6662357fa5ca61dc8d68bdfa9b9c34bb14ddf840725d321cf0299962ff8ba4cd162af15db3da35e0188caee6073fe3e32400a763", @ANYRES16, @ANYRESOCT=r2, @ANYRES8, @ANYRES16, @ANYBLOB="bce4d130f89bed67aa16c7c766ed991154c2bb126fdb649518b3446919be59b48181416220c0b80c5f0cc98b9c478d6aed61958abcd484ebd3c414234311b03977d33e8e570479a447e872c1888e2b3b24651a12b886d359b84b29798926f04401c1bffeaf0d9cb2cbfc7eed1a52bf04fa7b3028586fd03182cd04485c8ffbf4ab0f4ef5c0585a8d4cc0314660ca3288f87cd4c2e667d20fe4c6bc97d3841a3ef26772f7ef9c13640a06f3a79c5a4ce9856fedcf"], &(0x7f0000000300)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x0, @val=@perf_event={0x5}}, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000580)=@newtclass={0x5c, 0x28, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xd}, {0x0, 0x4}, {0xffe0, 0xc}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x46}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xff}}, @TCA_RATE={0x6, 0x5, {0xac, 0x1}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x280000}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0x7, 0x2}}}}]}, 0xffffffffffffff68}, 0x1, 0x0, 0x0, 0x2400009c}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r8}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r8}, 0x38) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000"]}, 0x108) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x100000, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x5, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x2000001, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0x405a, 0xffffffff, 0x0, 0xfffffff2, 0x74, 0x400, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa5, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x2, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0xffffffff, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xc, 0x8, 0x77, 0x385, 0x3ff, 0x100, 0x2, 0x5, 0x4, 0x7, 0xb9, 0x7, 0x1, 0x6, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x4, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x5, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x1, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x0, 0x8, 0x410, 0x800, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x4, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x1, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff29, 0x6, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x4, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000040)=0x8) socket(0x7e3b5509ae880d8a, 0x2, 0x31c5f9d4) 1.261140921s ago: executing program 0 (id=12945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000040000000000f1850000007500000018480000fcffffff00000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000540)="cf2e0ddb7b935797a1ed736a09b2c43ed516bad852ff32cd149e9b31ad20983d237e642f4b8758c5de929c7650a41cb61c4d314bd65b190a925033fd8e2a013f940ba385a8deed3a1c7bf094629ff2e234f15a94eb18686e6b2a27731880baf1d36886b41217b9f25b362d29ca751cdfd61215548abce5ff7d4d57a8afc415af6308c6f381c6d929910ea8ce8f1bae24e84f4fd52d53f247cec5f111e4ea7e", 0x9f}, {&(0x7f0000000600)="87c2a03316c0ca74f56efd0360ce412e", 0x10}, {&(0x7f0000000640)="804d9429babb774bbfb00e36a3", 0xd}, {&(0x7f0000000680)="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", 0x1000}], 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r2) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@local, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x8000, 0x8, 0xb5, {{0x11, 0x4, 0x3, 0x34, 0x44, 0x64, 0x0, 0xf8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@timestamp={0x44, 0x8, 0x9a, 0x0, 0xf, [0x2]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x0, 0xe, "b57eb320e3b2710854152081"}, {0x7, 0x9, "f4318b71af5ca7"}]}, @ssrr={0x89, 0x7, 0x19, [@rand_addr=0x64010101]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200b}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000040}, 0x4000411) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000040000000000f1850000007500000018480000fcffffff00000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000540)="cf2e0ddb7b935797a1ed736a09b2c43ed516bad852ff32cd149e9b31ad20983d237e642f4b8758c5de929c7650a41cb61c4d314bd65b190a925033fd8e2a013f940ba385a8deed3a1c7bf094629ff2e234f15a94eb18686e6b2a27731880baf1d36886b41217b9f25b362d29ca751cdfd61215548abce5ff7d4d57a8afc415af6308c6f381c6d929910ea8ce8f1bae24e84f4fd52d53f247cec5f111e4ea7e", 0x9f}, {&(0x7f0000000600)="87c2a03316c0ca74f56efd0360ce412e", 0x10}, {&(0x7f0000000640)="804d9429babb774bbfb00e36a3", 0xd}, {&(0x7f0000000680)="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", 0x1000}], 0x4) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r2) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@local}, &(0x7f0000000300)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x8000, 0x8, 0xb5, {{0x11, 0x4, 0x3, 0x34, 0x44, 0x64, 0x0, 0xf8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@timestamp={0x44, 0x8, 0x9a, 0x0, 0xf, [0x2]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x0, 0xe, "b57eb320e3b2710854152081"}, {0x7, 0x9, "f4318b71af5ca7"}]}, @ssrr={0x89, 0x7, 0x19, [@rand_addr=0x64010101]}, @end]}}}}}) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200b}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000040}, 0x4000411) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) (async) 1.127624901s ago: executing program 3 (id=12946): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) connect$llc(r4, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000), 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r11, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86}, {0x5, 0x7, 0x1}}}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x3700}, {0x7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x20004014) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0xff, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xfe, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bb, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x7, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0xffffffff, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x80000, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x0, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x7, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0xff, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x1c73, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x3, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x101, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000004, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5ef, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800010, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x9, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x8, 0x1, 0x401, 0x1ff, 0x2, 0x9bce, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x30, 0x266, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x14000, 0x9, 0x1, 0x20000007, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x7, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffff8, 0x3, 0x1, 0x9, 0x3, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0xb, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0xfff, 0x0, 0xef28, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabc, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x3, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x2, 0xaf, 0x4, 0x9, 0x2000000}, {0x2, 0x0, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x34004800) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.127270865s ago: executing program 0 (id=12947): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) r3 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 1.03162818s ago: executing program 3 (id=12948): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3832, 0xffffffffffffffff, 0xe08b4000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 996.199279ms ago: executing program 4 (id=12949): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08204500001c00000001ac1414bb0800907800050003"], 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r12, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="3202020200000000fe800000008000000000000038000000"], 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f0000000200)=0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r14 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r14, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100030000000000000000dd00000080000000000c000200ff7f00"/42], 0x30}}, 0x20000000) 768.205106ms ago: executing program 0 (id=12950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000140)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x4008030) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000140)=0x5, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x4008030) (async) 681.684214ms ago: executing program 0 (id=12951): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1821040002200400280012800e000100697036677265746170000000140002800600020070061d3d9bd7564acf34a755"], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x40000c8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x1b, 0xffffffff, 0x1, 0x0, 0x10001}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x400, 0x1, {0x0, 0x0, 0x0, r7, 0x0, 0x14408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x840) 562.469745ms ago: executing program 4 (id=12952): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x4001c00) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000240)={@mcast1, r1}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f0000000240)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES16=r7], 0x138}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000d40)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f0000000780)="62a1d7f1af970345b38b76c634b7042e6315a7dfda3ccd4cf418456d5ffb598402b059a4c7507ac6b87599d4bb62862c65297080c2f19bba1dea748e3c6e16df4c1f6bdde379d29f45ff35ceada16c81a287e1fc22a799056b1516b58a2c8a44ad22a91217d777ee4d68c6c1bd09bc14fc5e58250dcab7cf39842c7da9a691b193d9739633bfeea66eb68a2dbda6cf3983ce6d6ab50ca286a040d2cacce74efcd11adbd975cbba33a389e54a253b6df2b3c4aa529dd0d9fbab8c29d471c99256094640d116ecda12b2c473388b8ec565ae", 0xd1}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)=[{&(0x7f00000011c0)="85a0200100000000000000c826065244fe9dddb2287f68215529bd4aef0358cfc1dc387d05d3b32e", 0x28}, {0x0}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) 360.473938ms ago: executing program 1 (id=12953): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6cf502, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000440)={r1, 0x2, 0xd}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x40047459, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 359.69614ms ago: executing program 3 (id=12954): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 209.757278ms ago: executing program 4 (id=12955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x50, r0, 0x5cfc6000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 149.980598ms ago: executing program 1 (id=12956): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netpci0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000580)={0x40000008}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) 99.687209ms ago: executing program 3 (id=12957): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 96.981042ms ago: executing program 0 (id=12958): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="010000005a7dec2a"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x100, 0x5, &(0x7f0000000200)="74bede6e8e", 0x6, 0xff, 0x5, 0x8, 0x0, 0x1, 0x1, 'syz1\x00'}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, 0x0, &(0x7f0000000040)) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r11, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fffffff, 0x1, 0x7, 0x80, 0x7fff, "a4aed576a9f4e8048f366d2f85e463ffb6cadc9adfa9644c9f92c5c383db68836c81358197bd8ca6ad24a6718277797141fca9f17b8e0e7b37e478136ca07b2fa53bc2fa28d8401d998abe5538adef084438ee5b05d6c54022a445b195fc63e4009f1ceb56487f930e9779c708d30e427244c4ff9763f8f246dbd443ef25d18e"}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xf4, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xfd, 0x6, 0x0, 0x2, 0x200, 0xb, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x4, 0x8, 0x6]}}, {{0x1c, 0x1, {0x7, 0x95, 0x0, 0x9, 0x0, 0x80000001, 0xff, 0x9}}, {0x16, 0x2, [0x1ff, 0x9566, 0x4, 0xfffc, 0x4, 0xfff9, 0x5, 0x9, 0x6]}}, {{0x1c, 0x1, {0x3, 0x24, 0x8, 0x3, 0x1a664d441b852f8, 0xfffffffc, 0x5, 0x6}}, {0x10, 0x2, [0xd, 0x1, 0x0, 0x9, 0x5, 0x9]}}, {{0x1c, 0x1, {0x2, 0x8, 0xffff, 0x1b45, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0xfff9]}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 0s ago: executing program 2 (id=12959): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)=ANY=[@ANYBLOB="14000000100001000000000000000035ef9a2f0a14000000000a00000034000000090a01040000100000000000010000050900020073797a32000000000900010073797a30000000000800054044190b66e18f0000041f340000000c0a01020000000000000000010000000900010073797a30000000000900020073797a32000000000800038004000080140000001000012000"/164], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x24, 0x2c, 0x200, 0x30bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x3, 0xfff3}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0xfd80}, 0x28) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r6, &(0x7f0000000240)={0x1a, 0xfffe, 0x0, 0x9, 0x2, 0x91, @random="4c01f01a4bb3"}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=r11, @ANYRESOCT=r6, @ANYRES64=r8, @ANYRES32=r0], 0xfe23) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="148400000001019026f80b01040000000000010000", @ANYBLOB="128dd7e4b045445266441613dd762a40275f34ddbe5bb1b916f7916483cadab0a60fbd097bcd57ff84dfef563ae1338d3f796e63260c717f95e13fe10037e780050b42f6f57bdf92c3ccfa3e61209ea40c1fdd5117a0e36f176291f258d6aae2d6f4a8f845875920514a9e893fe6b5a9d94f7ea3cea098dfb02a568fb7b22796094ea5a6c3aecd022184aa7152dc5cc21316399440e1d2e688561f865e54be7afed624db53cb50847e3ba529a23d76b3687189b28ea17926fbd115f9a38c8dca5cbcf5a04159f439562352ec2c8e71b4f18297ee"], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x48040) kernel console output (not intermixed with test programs): left promiscuous mode [ 1113.593883][T16191] pim6reg: entered allmulticast mode [ 1113.756445][T16199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11280'. [ 1113.883947][T14616] IPVS: stop unused estimator thread 0... [ 1115.367058][T16153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1115.396151][T16203] netlink: 'syz.4.11282': attribute type 1 has an invalid length. [ 1115.432996][T16203] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11282'. [ 1115.458266][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11282'. [ 1115.617766][T16206] syzkaller0: entered promiscuous mode [ 1115.630880][T16206] syzkaller0: entered allmulticast mode [ 1115.644309][T16214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11286'. [ 1115.652521][T16216] netlink: 'syz.4.11287': attribute type 3 has an invalid length. [ 1115.664370][T16206] netlink: 'syz.3.11283': attribute type 1 has an invalid length. [ 1115.674823][T16213] netlink: 'syz.3.11283': attribute type 1 has an invalid length. [ 1115.747444][T16221] netlink: 'syz.0.11288': attribute type 11 has an invalid length. [ 1116.215856][T16234] netlink: zone id is out of range [ 1116.239294][T16234] netlink: zone id is out of range [ 1116.253106][T16234] netlink: zone id is out of range [ 1116.263373][T16234] netlink: zone id is out of range [ 1116.271485][T16234] netlink: zone id is out of range [ 1116.286314][T16234] netlink: zone id is out of range [ 1116.291565][T16234] netlink: zone id is out of range [ 1116.298211][T16234] netlink: zone id is out of range [ 1116.305588][T16234] netlink: zone id is out of range [ 1116.317714][T16234] netlink: zone id is out of range [ 1116.368331][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11299'. [ 1116.568193][T16273] netlink: 'syz.4.11304': attribute type 2 has an invalid length. [ 1116.593438][T16273] netlink: 244 bytes leftover after parsing attributes in process `syz.4.11304'. [ 1116.683460][T16275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11305'. [ 1116.701913][T16281] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11308'. [ 1116.868299][T16288] syzkaller0: entered promiscuous mode [ 1116.874476][T16288] syzkaller0: entered allmulticast mode [ 1117.575507][T16335] pim6reg: left allmulticast mode [ 1117.618507][T16336] syzkaller0: entered promiscuous mode [ 1117.629440][T16336] syzkaller0: entered allmulticast mode [ 1117.777567][T16346] netlink: 'syz.2.11328': attribute type 10 has an invalid length. [ 1117.790413][T16346] netlink: 'syz.2.11328': attribute type 10 has an invalid length. [ 1118.103321][T16369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11336'. [ 1118.189224][T16371] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11337'. [ 1118.829314][T16392] bridge9: entered promiscuous mode [ 1118.854975][T16392] bridge9: entered allmulticast mode [ 1118.972990][T16397] tipc: Enabling of bearer rejected, failed to enable media [ 1119.023630][T16397] tipc: Enabling of bearer rejected, failed to enable media [ 1119.025940][T16394] xt_policy: too many policy elements [ 1119.078370][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11344'. [ 1119.197054][T16412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11348'. [ 1119.325097][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11352'. [ 1119.334927][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11352'. [ 1119.413286][T16430] netlink: 'syz.0.11352': attribute type 7 has an invalid length. [ 1119.440852][T16430] netlink: 'syz.0.11352': attribute type 8 has an invalid length. [ 1119.454932][T16425] veth9: entered allmulticast mode [ 1122.209325][T16427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1122.460754][T16491] veth1_to_bond: entered allmulticast mode [ 1122.470226][T16488] veth1_to_bond: left allmulticast mode [ 1122.510180][T16492] __nla_validate_parse: 4 callbacks suppressed [ 1122.510198][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11373'. [ 1122.765825][T16506] ipvlan0: Caught tx_queue_len zero misconfig [ 1123.064206][T16513] Bluetooth: MGMT ver 1.23 [ 1123.338720][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11383'. [ 1123.552736][T16530] bond9: entered promiscuous mode [ 1123.568168][T16530] bond9: entered allmulticast mode [ 1123.580440][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11384'. [ 1123.633649][T16532] bond9 (unregistering): Released all slaves [ 1123.711005][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11381'. [ 1124.669885][T16578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11397'. [ 1124.698595][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11398'. [ 1124.751923][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11398'. [ 1125.138923][T16599] ip_vti0: Master is either lo or non-ether device [ 1125.190836][T16595] lo speed is unknown, defaulting to 1000 [ 1125.251322][T16595] lo speed is unknown, defaulting to 1000 [ 1125.327976][T16595] lo speed is unknown, defaulting to 1000 [ 1125.430108][T16595] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1125.551001][T16595] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1125.586867][T16595] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1125.805291][T16595] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 1126.126186][T16595] lo speed is unknown, defaulting to 1000 [ 1126.203472][T16595] lo speed is unknown, defaulting to 1000 [ 1126.287853][T16595] lo speed is unknown, defaulting to 1000 [ 1126.351814][T16651] net_ratelimit: 240 callbacks suppressed [ 1126.351833][T16651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1126.367125][T16595] lo speed is unknown, defaulting to 1000 [ 1126.507084][T16595] lo speed is unknown, defaulting to 1000 [ 1126.572015][T16595] lo speed is unknown, defaulting to 1000 [ 1126.665696][T16595] lo speed is unknown, defaulting to 1000 [ 1126.728034][T16595] lo speed is unknown, defaulting to 1000 [ 1126.761507][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11419'. [ 1126.800715][T16595] lo speed is unknown, defaulting to 1000 [ 1126.815971][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11421'. [ 1126.890549][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11421'. [ 1127.016091][T16598] ±ÿª¨úrBº“: renamed from lo [ 1127.027836][T16595] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1127.585618][T16703] netlink: 'syz.0.11429': attribute type 18 has an invalid length. [ 1127.623961][T16703] netlink: 'syz.0.11429': attribute type 18 has an invalid length. [ 1127.625654][ T78] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.679677][ T78] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.714491][ T78] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.739202][ T78] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.915035][T16719] syzkaller0: entered promiscuous mode [ 1127.921661][T16719] syzkaller0: entered allmulticast mode [ 1127.993103][T16728] __nla_validate_parse: 3 callbacks suppressed [ 1127.993137][T16728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11432'. [ 1128.011416][T16728] dummy0: Caught tx_queue_len zero misconfig [ 1128.460323][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11436'. [ 1130.272389][T16686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1131.548330][T16809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11454'. [ 1131.581205][T16810] netlink: 'syz.0.11455': attribute type 1 has an invalid length. [ 1131.601698][T16810] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1132.197995][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11464'. [ 1132.280483][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11463'. [ 1132.611469][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11468'. [ 1132.810462][T16874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11473'. [ 1132.845533][T16874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.195862][T16890] netlink: 'syz.2.11477': attribute type 1 has an invalid length. [ 1133.331070][T16890] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1133.420306][T16894] bond10: (slave gretap4): making interface the new active one [ 1133.534009][T16894] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 1133.660330][T16908] netlink: 'syz.3.11482': attribute type 1 has an invalid length. [ 1133.848910][T16915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.880426][T16913] syzkaller0: entered promiscuous mode [ 1133.911998][T16913] syzkaller0: entered allmulticast mode [ 1133.996871][T16918] syzkaller0: entered promiscuous mode [ 1134.005794][T16918] syzkaller0: entered allmulticast mode [ 1134.106418][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11486'. [ 1134.326127][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11492'. [ 1134.519395][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11495'. [ 1134.548104][T16955] netlink: 'syz.3.11495': attribute type 18 has an invalid length. [ 1134.560078][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11495'. [ 1134.675738][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11496'. [ 1134.762906][T16966] netlink: 'syz.2.11497': attribute type 64 has an invalid length. [ 1134.796479][T16966] netlink: 'syz.2.11497': attribute type 64 has an invalid length. [ 1134.836202][T16966] netlink: 'syz.2.11497': attribute type 64 has an invalid length. [ 1134.876405][T16975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11497'. [ 1135.038693][T16982] netlink: 'syz.1.11500': attribute type 1 has an invalid length. [ 1135.066160][T16972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11498'. [ 1135.167867][T16988] bond14: (slave gretap3): making interface the new active one [ 1135.178100][T16988] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 1135.274247][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11504'. [ 1135.323139][T17002] netlink: 'syz.2.11503': attribute type 1 has an invalid length. [ 1135.477989][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11504'. [ 1135.489152][ T6551] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1135.501396][T17009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11508'. [ 1135.510718][ T6551] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1135.510762][ T6551] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1135.510798][ T6551] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1135.556757][T17012] netlink: 'syz.0.11508': attribute type 1 has an invalid length. [ 1135.614900][T17012] netlink: 'syz.0.11508': attribute type 1 has an invalid length. [ 1135.860007][T17017] tipc: Invalid UDP bearer configuration [ 1135.860063][T17017] tipc: Enabling of bearer rejected, failed to enable media [ 1135.900476][T17019] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1226518301/1226518303 [ 1135.925830][T17019] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1226518301/1226518302 [ 1135.957935][T17019] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1226518301/1226518303 [ 1135.968940][T17019] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1226518301/1226518302 [ 1136.016716][T17023] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1136.219257][T17031] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1136.373259][T17032] syzkaller0: entered promiscuous mode [ 1136.384235][T17032] syzkaller0: entered allmulticast mode [ 1137.668236][T17105] macvlan1: mtu less than device minimum [ 1137.860763][T17109] bond0: Caught tx_queue_len zero misconfig [ 1137.944207][T17112] bridge0: port 1(ipvlan2) entered blocking state [ 1137.963334][T17112] bridge0: port 1(ipvlan2) entered disabled state [ 1138.003855][T17112] ipvlan2: entered allmulticast mode [ 1138.034620][T17112] bridge0: entered allmulticast mode [ 1138.070260][T17112] ipvlan2: left allmulticast mode [ 1138.089709][T17112] bridge0: left allmulticast mode [ 1138.444721][T17133] nbd: illegal input index 65508 [ 1139.129399][T17173] __nla_validate_parse: 34 callbacks suppressed [ 1139.129417][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11555'. [ 1139.427723][T17185] validate_nla: 1 callbacks suppressed [ 1139.427741][T17185] netlink: 'syz.3.11561': attribute type 11 has an invalid length. [ 1139.609119][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11562'. [ 1139.609734][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11562'. [ 1139.750870][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11563'. [ 1139.762972][T17192] netlink: 'syz.2.11563': attribute type 19 has an invalid length. [ 1139.771992][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11563'. [ 1142.754917][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11563'. [ 1142.780898][T17192] netlink: 'syz.2.11563': attribute type 19 has an invalid length. [ 1142.807390][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11563'. [ 1142.945714][T17204] netlink: 'syz.0.11566': attribute type 1 has an invalid length. [ 1143.061177][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11567'. [ 1143.080703][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11568'. [ 1143.195729][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11570'. [ 1143.298286][T17225] nbd: must specify a device to reconfigure [ 1143.507342][T17229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.893661][T17251] netlink: 'syz.2.11581': attribute type 6 has an invalid length. [ 1143.936360][T17251] netlink: 'syz.2.11581': attribute type 5 has an invalid length. [ 1143.973492][T17252] netlink: 'syz.2.11581': attribute type 6 has an invalid length. [ 1144.001067][T17252] netlink: 'syz.2.11581': attribute type 5 has an invalid length. [ 1144.055664][T17262] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 1144.143790][T17262] bond12 (unregistering): Released all slaves [ 1144.846233][T17282] gtp0: entered allmulticast mode [ 1144.879917][T17282] team0: Device gtp0 is of different type [ 1145.291722][T17291] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 1145.316663][T17291] bond12 (unregistering): Released all slaves [ 1145.671944][T17319] netlink: 'syz.4.11599': attribute type 8 has an invalid length. [ 1145.790326][T17325] netlink: 'syz.4.11599': attribute type 16 has an invalid length. [ 1145.813994][T17324] netlink: 'syz.3.11600': attribute type 24 has an invalid length. [ 1145.838337][T17325] netlink: 'syz.4.11599': attribute type 17 has an invalid length. [ 1146.000955][T17327] bond12: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1146.069194][T17327] bond12 (unregistering): Released all slaves [ 1146.161671][T17325] ±ÿª¨úrBº“: left allmulticast mode [ 1146.171657][T17325] tunl0: left allmulticast mode [ 1146.181537][T17325] gre0: left allmulticast mode [ 1146.190828][T17325] gretap0: left allmulticast mode [ 1146.197431][T17325] erspan0: left promiscuous mode [ 1146.203092][T17325] erspan0: left allmulticast mode [ 1146.209944][T17325] ip_vti0: left allmulticast mode [ 1146.217698][T17325] ip6_vti0: left allmulticast mode [ 1146.227195][T17325] sit0: left allmulticast mode [ 1146.233683][T17325] ip6tnl0: left allmulticast mode [ 1146.239799][T17325] ip6gre0: left allmulticast mode [ 1146.247473][T17325] syz_tun: left allmulticast mode [ 1146.280580][T17341] __nla_validate_parse: 9 callbacks suppressed [ 1146.280596][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11604'. [ 1146.320426][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11604'. [ 1146.337543][T17325] veth0_virt_wifi: left promiscuous mode [ 1146.348364][T17325] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1146.519852][T17314] xfrm0 speed is unknown, defaulting to 1000 [ 1146.540589][T17314] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1146.772457][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1146.911989][T17354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11607'. [ 1146.998033][T17354] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11607'. [ 1147.038083][T17360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11609'. [ 1147.150253][T17355] syzkaller0: entered promiscuous mode [ 1147.156797][T17355] syzkaller0: entered allmulticast mode [ 1147.491334][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11613'. [ 1147.521168][T17376] netlink: 'syz.4.11615': attribute type 1 has an invalid length. [ 1147.522558][T17373] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1147.706575][T17387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11617'. [ 1147.813975][T17373] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1148.938050][T17401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11620'. [ 1149.095396][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11620'. [ 1149.158017][T17404] netlink: 'syz.0.11620': attribute type 21 has an invalid length. [ 1151.069520][T17376] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1151.199612][T17404] netlink: 'syz.0.11620': attribute type 6 has an invalid length. [ 1151.479699][T17421] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1151.503741][T17423] __nla_validate_parse: 2 callbacks suppressed [ 1151.503759][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11627'. [ 1151.726267][T17443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11631'. [ 1151.860097][T17446] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11632'. [ 1151.928310][T17453] netlink: 'syz.0.11635': attribute type 28 has an invalid length. [ 1151.964583][T17453] netlink: 'syz.0.11635': attribute type 3 has an invalid length. [ 1152.006696][T17453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11635'. [ 1152.154309][T17466] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 1152.193339][T17469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.198822][T17470] netlink: 'syz.1.11638': attribute type 1 has an invalid length. [ 1152.237872][T17473] netlink: 'syz.1.11638': attribute type 1 has an invalid length. [ 1152.252060][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11639'. [ 1152.268309][T17469] netlink: 'syz.3.11639': attribute type 10 has an invalid length. [ 1152.279355][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11641'. [ 1152.279383][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11639'. [ 1152.317441][T17476] netlink: 'syz.0.11642': attribute type 3 has an invalid length. [ 1152.322082][T17469] geneve4: entered promiscuous mode [ 1152.333474][T17469] geneve4: entered allmulticast mode [ 1152.337907][T17476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11642'. [ 1152.415040][T17481] netlink: 'syz.1.11643': attribute type 13 has an invalid length. [ 1152.436285][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11641'. [ 1152.443233][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11643'. [ 1152.885747][T17505] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1153.438930][T17530] bond12: Invalid ad_actor_system MAC address. [ 1153.446114][T17530] bond12: option ad_actor_system: invalid value (1) [ 1153.461076][T17530] bond12 (unregistering): Released all slaves [ 1153.533152][T17546] xt_l2tp: wrong L2TP version: 0 [ 1154.006901][T17565] xt_hashlimit: size too large, truncated to 1048576 [ 1154.084150][T17568] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1154.166309][T17568] 0ªX¹¦Dö»: entered allmulticast mode [ 1154.604486][T17549] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1154.621046][T17549] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1154.704239][T17549] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1154.711718][T17549] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1154.804713][T17549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1154.811691][T17590] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1154.844475][T17549] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1154.853611][T17590] syzkaller1: Refused to change device type [ 1154.939650][T17549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1154.977367][T17549] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1155.187474][T17601] lo: Caught tx_queue_len zero misconfig [ 1155.768332][T17626] netlink: 'syz.1.11683': attribute type 32 has an invalid length. [ 1155.773679][T17635] syzkaller1: entered promiscuous mode [ 1155.794536][T17635] syzkaller1: entered allmulticast mode [ 1155.897603][T17626] bond15: Setting coupled_control to off (0) [ 1155.921554][T17638] netlink: 'syz.4.11688': attribute type 27 has an invalid length. [ 1156.130059][T17654] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1156.536235][T17672] __nla_validate_parse: 16 callbacks suppressed [ 1156.536271][T17672] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11696'. [ 1156.588574][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11696'. [ 1156.666550][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11696'. [ 1156.871470][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11702'. [ 1156.931862][T17693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1157.126371][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11706'. [ 1157.499390][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11710'. [ 1157.552754][T14616] bond0: (slave bond_slave_0): interface is now down [ 1157.568393][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11710'. [ 1157.593964][T14616] bond0: (slave bond_slave_1): interface is now down [ 1157.669081][T14616] bond0: now running without any active interface! [ 1157.799318][T17731] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1157.904061][T17737] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11714'. [ 1158.115022][T17727] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1158.136482][T17727] bond11 (unregistering): Released all slaves [ 1158.142892][T17743] netlink: 'syz.4.11717': attribute type 1 has an invalid length. [ 1158.196874][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11717'. [ 1158.242069][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11717'. [ 1158.311791][T17743] bond12: entered promiscuous mode [ 1158.347120][T17743] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1158.850548][T17754] bond11: option xmit_hash_policy: invalid value (64) [ 1158.876778][T17754] bond11 (unregistering): Released all slaves [ 1159.005047][T17765] veth0_to_bond: entered promiscuous mode [ 1159.020250][T17765] veth0_to_bond: entered allmulticast mode [ 1159.144066][T17779] xt_l2tp: wrong L2TP version: 0 [ 1159.250394][T17783] gtp0: entered allmulticast mode [ 1159.286672][T17783] team0: Device gtp0 is of different type [ 1159.381773][T17789] netlink: 'syz.1.11734': attribute type 13 has an invalid length. [ 1159.397952][ T30] audit: type=1107 audit(1783152826.958:18): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 1159.796828][T17812] xt_TCPMSS: Only works on TCP SYN packets [ 1160.051132][T17828] netlink: 'syz.4.11744': attribute type 7 has an invalid length. [ 1160.088229][T17829] netlink: 'syz.3.11743': attribute type 2 has an invalid length. [ 1161.259218][T17874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.289152][T17874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.756605][T17895] __nla_validate_parse: 12 callbacks suppressed [ 1161.756623][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11760'. [ 1161.816726][T17895] netlink: 'syz.1.11760': attribute type 32 has an invalid length. [ 1161.836311][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11761'. [ 1161.877353][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11760'. [ 1161.886823][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11762'. [ 1161.912719][T17902] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1161.921299][ T9372] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1161.949718][T17898] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 1161.978389][T17898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11761'. [ 1162.038598][T17895] bond16: option coupled_control: invalid value (109) [ 1162.089561][T17895] bond16 (unregistering): Released all slaves [ 1162.155502][T17907] sctp: [Deprecated]: syz.3.11762 (pid 17907) Use of int in max_burst socket option deprecated. [ 1162.155502][T17907] Use struct sctp_assoc_value instead [ 1162.357744][T17919] xt_cluster: node mask cannot exceed total number of nodes [ 1162.539663][T17924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11767'. [ 1162.825159][T17935] veth0: mtu less than device minimum [ 1162.856712][T17938] lo: Caught tx_queue_len zero misconfig [ 1163.119881][T17950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11776'. [ 1163.202675][T17957] syzkaller0: left promiscuous mode [ 1163.218152][T17957] syzkaller0: left allmulticast mode [ 1163.300642][T17959] team0 (unregistering): Port device team_slave_1 removed [ 1163.301868][T17964] netlink: 'syz.3.11782': attribute type 1 has an invalid length. [ 1163.323791][T17964] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11782'. [ 1163.698364][T17979] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1163.774324][T17987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11788'. [ 1163.847696][T17988] netlink: 'syz.1.11788': attribute type 1 has an invalid length. [ 1163.901721][T17987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11788'. [ 1163.943857][T17988] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1164.881912][T18044] openvswitch: netlink: IP tunnel dst address not specified [ 1165.275663][T18067] team0 (unregistering): Port device team_slave_0 removed [ 1165.338678][T18067] team0 (unregistering): Port device team_slave_1 removed [ 1165.381735][T18067] team0 (unregistering): Port device geneve1 removed [ 1165.416859][T18067] team0 (unregistering): Port device dummy0 removed [ 1166.034900][T18076] syzkaller0: entered promiscuous mode [ 1166.058224][T18076] syzkaller0: entered allmulticast mode [ 1169.666751][T18105] __nla_validate_parse: 36 callbacks suppressed [ 1169.666784][T18105] netlink: 404 bytes leftover after parsing attributes in process `syz.3.11816'. [ 1169.684955][T18105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11816'. [ 1169.703952][T18105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11816'. [ 1169.720651][T18105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11816'. [ 1170.013512][T18135] atomic_op ffff88803dc6d998 conn xmit_atomic 0000000000000000 [ 1170.215334][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11821'. [ 1170.359007][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11824'. [ 1170.386155][T18152] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11823'. [ 1170.396465][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11824'. [ 1170.409189][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11823'. [ 1170.420371][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11823'. [ 1171.399899][T18215] netlink: 'syz.4.11839': attribute type 9 has an invalid length. [ 1171.740804][T18234] netlink: 'syz.0.11847': attribute type 10 has an invalid length. [ 1171.850212][T18240] syzkaller0: entered promiscuous mode [ 1171.860563][T18240] syzkaller0: entered allmulticast mode [ 1171.931452][T18245] team0: Device syz_tun is of different type [ 1172.590293][T18269] tipc: Enabled bearer , priority 0 [ 1172.668677][T18268] bond18 (unregistering): Released all slaves [ 1172.890576][T18265] syzkaller0: entered promiscuous mode [ 1172.897492][T18265] syzkaller0: entered allmulticast mode [ 1172.909889][T18265] tipc: Resetting bearer [ 1172.996915][T18264] tipc: Resetting bearer [ 1173.183648][T18300] SET target dimension over the limit! [ 1173.189811][T18299] SET target dimension over the limit! [ 1176.264444][T18264] tipc: Disabling bearer [ 1176.567283][T18319] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1176.927768][T18339] netlink: 'syz.1.11870': attribute type 24 has an invalid length. [ 1176.959544][T18342] __nla_validate_parse: 38 callbacks suppressed [ 1176.959562][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11871'. [ 1177.255156][T18348] bridge5: port 1(veth15) entered blocking state [ 1177.282483][T18348] bridge5: port 1(veth15) entered disabled state [ 1177.304020][T18348] veth15: entered allmulticast mode [ 1177.375400][T18348] veth15: entered promiscuous mode [ 1178.002718][T17893] tipc: Subscription rejected, illegal request [ 1182.045904][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.055265][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.062880][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.069360][T18433] gre0: Master is either lo or non-ether device [ 1182.078943][T18432] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1182.087873][T18438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11893'. [ 1182.103170][T18433] gre0: Master is either lo or non-ether device [ 1182.124108][T18436] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1182.150295][T18432] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1182.284291][T18432] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1182.336536][T18432] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1182.382101][T18456] syzkaller0: entered promiscuous mode [ 1182.396766][T18456] syzkaller0: entered allmulticast mode [ 1182.479967][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.535628][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.559114][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.638870][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.746236][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.840802][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1182.963225][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1183.009915][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1183.013368][T18480] netlink: 'syz.3.11904': attribute type 1 has an invalid length. [ 1183.051145][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1183.093909][T18432] wlan1 speed is unknown, defaulting to 1000 [ 1183.424593][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11910'. [ 1183.624288][T18494] syzkaller0: entered promiscuous mode [ 1183.659198][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1183.661609][T18494] syzkaller0: entered allmulticast mode [ 1183.701240][T18516] netlink: 'syz.1.11912': attribute type 30 has an invalid length. [ 1183.807032][T18519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11915'. [ 1184.207997][T18537] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1187.627772][T17890] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.638566][T18530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11917'. [ 1187.648212][T18530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11917'. [ 1187.659394][T18543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11920'. [ 1187.770855][T14616] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.828402][T14616] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.879293][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11922'. [ 1187.893234][T17890] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.428895][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11931'. [ 1188.478116][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1188.491716][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11931'. [ 1188.689136][T18602] netlink: 'syz.2.11934': attribute type 4 has an invalid length. [ 1188.740475][T18602] netlink: 'syz.2.11934': attribute type 4 has an invalid length. [ 1188.784670][T18596] can: request_module (can-proto-0) failed. [ 1188.802065][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11935'. [ 1189.039302][T18619] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11938'. [ 1189.228292][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11941'. [ 1189.437168][T18635] xt_hashlimit: invalid rate [ 1189.570895][T17893] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.481385][T18694] syzkaller0: left promiscuous mode [ 1190.491512][T18694] syzkaller0: left allmulticast mode [ 1191.367818][T18736] netlink: 'syz.1.11975': attribute type 1 has an invalid length. [ 1192.146140][T18765] syzkaller1: entered promiscuous mode [ 1192.164033][T18765] syzkaller1: entered allmulticast mode [ 1192.204018][ T30] audit: type=1800 audit(1783152859.758:19): pid=18765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11983" name="memory.events" dev="tmpfs" ino=2611 res=0 errno=0 [ 1192.516039][T18770] xfrm0 speed is unknown, defaulting to 1000 [ 1192.522723][ T30] audit: type=1804 audit(1783152860.078:20): pid=18765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.11983" name="/newroot/507/memory.events" dev="tmpfs" ino=2611 res=1 errno=0 [ 1192.614963][T18770] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1192.665682][T18770] wlan1 speed is unknown, defaulting to 1000 [ 1193.630949][T18817] ¾x9ÿ: renamed from bridge_slave_0 [ 1193.816657][T18835] __nla_validate_parse: 8 callbacks suppressed [ 1193.816703][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11998'. [ 1194.302461][T18847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12002'. [ 1194.741628][T18876] syzkaller1: entered promiscuous mode [ 1194.770679][T18876] syzkaller1: entered allmulticast mode [ 1195.088905][T18889] team0: Device syz_tun is of different type [ 1195.103833][T18889] syzkaller1: entered promiscuous mode [ 1195.118357][T18889] syzkaller1: entered allmulticast mode [ 1196.542607][T18928] syzkaller0: entered promiscuous mode [ 1196.561771][T18928] syzkaller0: entered allmulticast mode [ 1196.618237][T18941] syzkaller0: entered promiscuous mode [ 1196.636267][T18941] syzkaller0: entered allmulticast mode [ 1196.680259][T18943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.799997][T18948] netlink: 'syz.3.12030': attribute type 2 has an invalid length. [ 1196.811966][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12030'. [ 1199.938545][T18948] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1200.081079][T18964] erspan0: entered promiscuous mode [ 1200.134144][T18959] netlink: 'syz.0.12033': attribute type 1 has an invalid length. [ 1200.146435][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12032'. [ 1200.163753][T18959] netlink: 'syz.0.12033': attribute type 2 has an invalid length. [ 1200.189409][T18966] netlink: 'syz.0.12033': attribute type 1 has an invalid length. [ 1200.220531][T18966] netlink: 'syz.0.12033': attribute type 2 has an invalid length. [ 1200.264477][T18973] netlink: 'syz.1.12037': attribute type 12 has an invalid length. [ 1200.645842][T18988] tipc: Disabling bearer [ 1200.805987][T18996] syzkaller1: entered promiscuous mode [ 1200.851714][T18996] syzkaller1: entered allmulticast mode [ 1201.210460][T19012] netlink: 'syz.0.12050': attribute type 11 has an invalid length. [ 1201.234018][T19012] netlink: 'syz.0.12050': attribute type 11 has an invalid length. [ 1201.243738][T19012] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12050'. [ 1201.267959][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12050'. [ 1201.488041][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12055'. [ 1202.198561][T19066] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1202.327833][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12069'. [ 1202.717842][T19090] veth0_macvtap: entered allmulticast mode [ 1202.753526][T19090] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1202.891956][T19100] bridge0: port 1(gretap0) entered blocking state [ 1202.901887][T19100] bridge0: port 1(gretap0) entered disabled state [ 1202.912472][T19100] gretap0: entered allmulticast mode [ 1202.921699][T19100] gretap0: entered promiscuous mode [ 1202.930453][T19100] bridge0: port 1(gretap0) entered blocking state [ 1202.937837][T19100] bridge0: port 1(gretap0) entered listening state [ 1203.418518][T19130] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1203.430188][T19130] syzkaller0: entered promiscuous mode [ 1203.439151][T19130] syzkaller0: entered allmulticast mode [ 1203.557790][T19134] xt_socket: unknown flags 0x8 [ 1203.701989][T19136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.801350][T19146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.930276][T19153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1203.938454][T19153] IPv6: NLM_F_CREATE should be set when creating new route [ 1203.946495][T19153] IPv6: NLM_F_CREATE should be set when creating new route [ 1203.954517][T19153] IPv6: NLM_F_CREATE should be set when creating new route [ 1204.039938][T19153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1204.163261][T19158] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12093'. [ 1204.366299][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12096'. [ 1204.446258][T19172] syzkaller1: entered promiscuous mode [ 1204.484718][T19172] syzkaller1: entered allmulticast mode [ 1204.849026][T19190] netlink: 'syz.4.12102': attribute type 8 has an invalid length. [ 1205.087841][T19204] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1205.558645][T19232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12113'. [ 1205.591545][T19235] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1205.618104][T19234] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12114'. [ 1205.628136][T19232] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12113'. [ 1205.628190][T19232] openvswitch: netlink: Message has 512 unknown bytes. [ 1205.849459][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12117'. [ 1205.901201][T19248] bond13: option lp_interval: invalid value (0) [ 1205.925351][T19248] bond13: option lp_interval: allowed values 1 - 2147483647 [ 1205.955402][T19248] bond13 (unregistering): Released all slaves [ 1206.007562][T19255] vlan0: mtu greater than device maximum [ 1206.429547][T19271] dvmrp0: entered allmulticast mode [ 1206.531709][T19279] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1206.847164][T19291] syzkaller0: entered promiscuous mode [ 1206.853863][T19291] syzkaller0: entered allmulticast mode [ 1206.995574][T19296] netlink: 'syz.4.12133': attribute type 1 has an invalid length. [ 1207.010233][T19296] netlink: 'syz.4.12133': attribute type 2 has an invalid length. [ 1207.165618][T19307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12137'. [ 1207.302264][T19316] tipc: Resetting bearer [ 1207.341569][T19316] team0: Port device xfrm0 added [ 1207.427843][T19320] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12142'. [ 1207.491501][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12141'. [ 1208.051200][T19348] netlink: 'syz.1.12149': attribute type 1 has an invalid length. [ 1208.178442][T19348] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1208.296091][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1208.317454][T19349] bond18: (slave gretap4): making interface the new active one [ 1208.326139][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1208.337401][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1208.350052][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1208.360395][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1208.398944][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1208.405446][T19349] bond18: (slave gretap4): Enslaving as an active interface with an up link [ 1208.433814][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1208.445111][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1208.455120][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1208.476745][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1208.818197][T19363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12154'. [ 1208.974430][T19371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12155'. [ 1209.679750][T19395] netlink: 'syz.4.12160': attribute type 39 has an invalid length. [ 1210.241570][T14616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.386498][T19355] xfrm0 speed is unknown, defaulting to 1000 [ 1210.572486][ T5625] Bluetooth: hci3: command tx timeout [ 1210.637814][T19418] syzkaller0: entered promiscuous mode [ 1210.645061][T19418] syzkaller0: entered allmulticast mode [ 1210.656978][T19355] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1210.944182][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12172'. [ 1210.976753][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12172'. [ 1211.014700][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12172'. [ 1211.101468][T19451] Bluetooth: MGMT ver 1.23 [ 1211.254375][T19456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12173'. [ 1211.372039][T19461] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1212.658329][ T5625] Bluetooth: hci3: command tx timeout [ 1214.509955][T19355] wlan1 speed is unknown, defaulting to 1000 [ 1214.544976][T14616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.576857][T14616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.588169][T14616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1214.649740][T19451] macsec1: entered promiscuous mode [ 1214.668634][T19451] batadv0: entered promiscuous mode [ 1214.681459][T19451] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1214.690716][T19451] batadv0: left promiscuous mode [ 1214.732705][ T5625] Bluetooth: hci3: command tx timeout [ 1214.945993][T14616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.960770][T14616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.987540][T14616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1215.037494][T19496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1215.288878][T14616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.301336][T14616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.330466][T14616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1215.478777][T19520] netlink: 'syz.4.12185': attribute type 4 has an invalid length. [ 1215.606455][T19518] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12184'. [ 1215.689318][T18740] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.710933][T17893] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.811030][T19513] syzkaller1: entered promiscuous mode [ 1215.825318][T19513] syzkaller1: entered allmulticast mode [ 1215.833321][ T6542] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.902848][T14616] gretap0: left allmulticast mode [ 1215.908081][T14616] gretap0: left promiscuous mode [ 1215.915819][T14616] bridge0: port 1(gretap0) entered disabled state [ 1215.964091][T14616] dvmrp0: left allmulticast mode [ 1215.969169][T14616] pimreg3: left allmulticast mode [ 1215.978301][T14616] tipc: Resetting bearer [ 1216.813050][ T5625] Bluetooth: hci3: command tx timeout [ 1218.306190][T19520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1218.563336][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12189'. [ 1218.584706][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12190'. [ 1219.315772][T14616] team0: Port device xfrm0 removed [ 1219.328107][T14616] tipc: Disabling bearer [ 1219.359054][T14616] bond3 (unregistering): (slave vti0): Releasing backup interface [ 1219.373682][T14616] vti0 (unregistering): left promiscuous mode [ 1219.516292][T14616] bond10 (unregistering): (slave geneve3): Releasing active interface [ 1219.619538][T14616] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1219.670022][T14616] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 1219.678428][T14616] bridge0 (unregistering): left promiscuous mode [ 1219.685736][T14616] bridge0 (unregistering): left allmulticast mode [ 1219.759996][T14616] bond0 (unregistering): Released all slaves [ 1219.777269][T14616] bond1 (unregistering): Released all slaves [ 1219.824604][T14616] bond2 (unregistering): Released all slaves [ 1219.856874][T14616] bond3 (unregistering): Released all slaves [ 1219.878124][T14616] bond4 (unregistering): Released all slaves [ 1219.900424][T14616] bond5 (unregistering): Released all slaves [ 1219.925293][T14616] bond6 (unregistering): Released all slaves [ 1219.955208][T14616] bond7 (unregistering): Released all slaves [ 1219.975622][T14616] bond8 (unregistering): Released all slaves [ 1220.001848][T14616] bond9 (unregistering): Released all slaves [ 1220.022462][T14616] bond10 (unregistering): Released all slaves [ 1220.053245][T14616] bond11 (unregistering): Released all slaves [ 1220.086415][ T2592] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.430973][T14616] : left promiscuous mode [ 1220.657874][T19574] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1220.709140][T14616] tipc: Left network mode [ 1221.025556][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12203'. [ 1221.301513][T19605] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1221.509283][T19612] netlink: 'syz.4.12203': attribute type 1 has an invalid length. [ 1221.560614][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12203'. [ 1221.838760][T19612] bond13: entered promiscuous mode [ 1221.846263][T19612] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1221.888198][T19618] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.12207'. [ 1222.124731][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12208'. [ 1222.206612][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12208'. [ 1222.327874][T19646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12211'. [ 1222.440565][T19355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.450257][T19355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.460986][T19355] bridge_slave_0: entered allmulticast mode [ 1222.478258][T19355] bridge_slave_0: entered promiscuous mode [ 1222.501508][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1222.552429][T19355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.584051][T19355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.608241][T19355] bridge_slave_1: entered allmulticast mode [ 1222.635439][T19355] bridge_slave_1: entered promiscuous mode [ 1222.743707][T14616] hsr_slave_0: left promiscuous mode [ 1222.750102][T19660] netlink: 'syz.1.12214': attribute type 83 has an invalid length. [ 1222.779693][T14616] hsr_slave_1: left promiscuous mode [ 1222.787387][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1222.799917][T14616] batadv0: left promiscuous mode [ 1222.818560][T14616] veth0_macvtap: left promiscuous mode [ 1222.882091][T19668] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12216'. [ 1223.429083][T19682] tipc: Failed to remove unknown binding: 66,1,1/0:3217535463/3217535465 [ 1223.544880][T19682] netlink: 'syz.1.12218': attribute type 7 has an invalid length. [ 1223.718346][T19355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.736262][T19664] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1223.738527][T19668] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1223.775784][T19668] __nla_validate_parse: 1 callbacks suppressed [ 1223.775802][T19668] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12216'. [ 1223.809651][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12218'. [ 1223.906115][T19678] pim6reg: entered allmulticast mode [ 1223.929511][T19355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.099555][T19355] team0: Port device team_slave_0 added [ 1224.141819][T19355] team0: Port device team_slave_1 added [ 1224.347367][T19355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.444587][T19355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.546115][T19355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.600488][T19355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.652358][T19355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.656100][T10887] IPVS: ip_vs_send_async error -101 [ 1224.707977][T19712] netlink: 'syz.4.12226': attribute type 1 has an invalid length. [ 1224.731703][T19712] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12226'. [ 1224.775973][T19355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.970211][T14616] IPVS: stop unused estimator thread 0... [ 1225.056786][T19727] xt_hashlimit: size too large, truncated to 1048576 [ 1225.095819][T19355] hsr_slave_0: entered promiscuous mode [ 1225.119112][T19355] hsr_slave_1: entered promiscuous mode [ 1225.339669][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12231'. [ 1225.617291][T19745] netlink: 596 bytes leftover after parsing attributes in process `syz.4.12232'. [ 1225.685163][T19748] netlink: 'syz.4.12232': attribute type 10 has an invalid length. [ 1225.837808][T19748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.857127][T19748] batadv0: entered allmulticast mode [ 1225.868656][T19748] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1226.051790][T19752] xfrm0 speed is unknown, defaulting to 1000 [ 1226.095643][T19752] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1226.231050][T19745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.269230][T19745] bond_slave_0: left allmulticast mode [ 1226.300749][T19745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.326014][T19745] bond_slave_1: left allmulticast mode [ 1226.361511][T19745] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1226.378619][T19745] batadv0: left allmulticast mode [ 1226.452674][T19745] bond0 (unregistering): Released all slaves [ 1226.634432][T19752] wlan1 speed is unknown, defaulting to 1000 [ 1226.749453][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1226.788020][T19355] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.057571][T19355] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.557490][T19355] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.778929][T19355] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.081356][T19826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12250'. [ 1228.615786][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12255'. [ 1228.657665][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12255'. [ 1228.704730][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12253'. [ 1228.774941][T19840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12253'. [ 1228.891136][T19355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1228.926648][T19355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1228.966999][T19355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1229.027206][T19355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1229.090524][T19355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1229.174962][T19355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1229.201644][T19355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1229.260768][T19355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1229.731771][T19355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.833654][T19355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.931290][T18740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.939318][T18740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.067898][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.075105][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.365278][T19915] tipc: Enabled bearer , priority 0 [ 1230.694422][T19915] syzkaller0: entered promiscuous mode [ 1230.707657][T19915] syzkaller0: entered allmulticast mode [ 1230.727060][T19915] tipc: Resetting bearer [ 1230.965016][ T78] tipc: Resetting bearer [ 1231.030548][T19914] tipc: Resetting bearer [ 1235.691638][T19914] tipc: Disabling bearer [ 1235.733394][ T1669] tipc: Node number set to 2622822046 [ 1235.865917][T20025] dvmrp0: left allmulticast mode [ 1235.956030][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12282'. [ 1236.112654][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12285'. [ 1236.136141][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12284'. [ 1236.267813][T20040] 8021q: VLANs not supported on ip_vti0 [ 1236.297861][T20043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12287'. [ 1236.344446][T20043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12287'. [ 1236.746370][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12293'. [ 1236.800994][T20071] netlink: 'syz.1.12293': attribute type 21 has an invalid length. [ 1236.847538][T20071] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12293'. [ 1237.076425][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12295'. [ 1237.289667][T19355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.467208][T19355] veth0_vlan: entered promiscuous mode [ 1237.509609][T20091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12299'. [ 1237.518693][T19355] veth1_vlan: entered promiscuous mode [ 1237.610615][T20091] syzkaller0: entered promiscuous mode [ 1237.628249][T20091] syzkaller0: entered allmulticast mode [ 1237.690800][T20102] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 1237.693716][T19355] veth0_macvtap: entered promiscuous mode [ 1237.698571][T12684] IPVS: starting estimator thread 0... [ 1237.769644][T19355] veth1_macvtap: entered promiscuous mode [ 1237.824091][T20104] IPVS: using max 29 ests per chain, 69600 per kthread [ 1237.836453][T20098] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12300'. [ 1238.000707][T20113] netlink: 'syz.2.12305': attribute type 1 has an invalid length. [ 1238.027045][T20115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.035715][T19355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.078102][T19355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.143454][ T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.181079][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.221372][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.237384][T20118] sock: sock_set_timeout: `syz.2.12307' (pid 20118) tries to set negative timeout [ 1238.290742][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.422793][T20121] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1238.440669][T20121] bond0: (slave bond10): Enslaving as an active interface with an up link [ 1238.590769][T20130] syzkaller0: entered promiscuous mode [ 1238.641162][T20130] syzkaller0: entered allmulticast mode [ 1238.860850][T20140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1238.891881][T14616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.914841][T14616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.991418][T20162] syzkaller1: entered promiscuous mode [ 1240.998813][T20162] syzkaller1: entered allmulticast mode [ 1241.006907][T20162] __nla_validate_parse: 3 callbacks suppressed [ 1241.006924][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12317'. [ 1241.024670][T20162] netlink: 'syz.2.12317': attribute type 7 has an invalid length. [ 1241.032883][T20162] netlink: 'syz.2.12317': attribute type 8 has an invalid length. [ 1241.040786][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12317'. [ 1241.609648][T20137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1241.758418][T18740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.777277][T18740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.061852][T20184] ipt_rpfilter: unknown options [ 1242.087219][T20184] netlink: 'syz.0.12323': attribute type 1 has an invalid length. [ 1242.315697][T20184] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1242.446809][T20196] bond11: (slave gretap1): making interface the new active one [ 1242.480686][T20196] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1242.859527][T20202] bridge0: entered promiscuous mode [ 1242.885536][T20202] bridge0: entered allmulticast mode [ 1243.111564][T20212] bridge0: port 2(ipvlan4) entered blocking state [ 1243.146326][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1243.164440][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1243.177471][T20212] bridge0: port 2(ipvlan4) entered disabled state [ 1243.184857][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1243.198884][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1243.210610][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1243.225730][T20212] ipvlan4: entered allmulticast mode [ 1243.231554][T20212] bridge0: entered allmulticast mode [ 1243.274770][T20212] ipvlan4: left allmulticast mode [ 1243.321246][T20212] bridge0: left allmulticast mode [ 1243.764781][T20234] netlink: 'syz.4.12334': attribute type 3 has an invalid length. [ 1243.781963][T20238] tap0: tun_chr_ioctl cmd 2148553947 [ 1244.115631][T20215] xfrm0 speed is unknown, defaulting to 1000 [ 1244.198559][T20215] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1244.222815][T20215] wlan1 speed is unknown, defaulting to 1000 [ 1244.338993][T20257] sctp: [Deprecated]: syz.3.12339 (pid 20257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1244.338993][T20257] Use struct sctp_sack_info instead [ 1244.366428][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12340'. [ 1244.366496][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12340'. [ 1245.095365][T20281] sctp: [Deprecated]: syz.3.12344 (pid 20281) Use of int in maxseg socket option. [ 1245.095365][T20281] Use struct sctp_assoc_value instead [ 1245.293002][ T5625] Bluetooth: hci4: command tx timeout [ 1245.413502][T20215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.420739][T20215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.428098][T20215] bridge_slave_0: entered allmulticast mode [ 1245.437430][T20215] bridge_slave_0: entered promiscuous mode [ 1245.446430][T20215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.453818][T20215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.461317][T20215] bridge_slave_1: entered allmulticast mode [ 1245.470927][T20215] bridge_slave_1: entered promiscuous mode [ 1245.518497][T20215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.532019][T20215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.671813][T20215] team0: Port device team_slave_0 added [ 1245.721328][T20215] team0: Port device team_slave_1 added [ 1245.741579][T20298] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1245.850064][T20215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.870981][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.871636][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1245.910661][T20215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.958087][T20215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.976338][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.026906][T20309] netlink: 'syz.1.12349': attribute type 39 has an invalid length. [ 1246.043808][T20215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.171322][T20317] netlink: 952 bytes leftover after parsing attributes in process `syz.3.12355'. [ 1246.182501][T20304] syzkaller0: entered promiscuous mode [ 1246.193604][T20304] syzkaller0: entered allmulticast mode [ 1246.203647][T20317] openvswitch: netlink: Flow key attr not present in new flow. [ 1246.237261][T20319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12354'. [ 1246.345268][T20215] hsr_slave_0: entered promiscuous mode [ 1246.368519][T20215] hsr_slave_1: entered promiscuous mode [ 1246.388789][T20215] debugfs: 'hsr0' already exists in 'hsr' [ 1246.402184][T20215] Cannot create hsr debugfs directory [ 1246.431583][ T6542] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1246.470088][ T1669] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1246.478166][ T6542] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1246.548439][T20327] netlink: 'syz.3.12358': attribute type 4 has an invalid length. [ 1246.635023][ T1669] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1246.803371][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12360'. [ 1247.096824][T20215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.148176][ T1669] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1247.376746][ T5625] Bluetooth: hci4: command tx timeout [ 1247.388493][T20215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.467394][T20356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12365'. [ 1247.488107][T20215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.646106][T20215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.813936][T20370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12369'. [ 1248.246404][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12371'. [ 1248.482931][T20215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1248.525538][T20215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1248.547225][T20215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1248.568065][T20215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1248.581962][T20215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1248.593549][T20215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.610270][T20215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1248.667127][T20215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1249.042764][T20409] netlink: 'syz.3.12378': attribute type 1 has an invalid length. [ 1249.158501][T20215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.338547][T20215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.419250][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.427371][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.455872][ T5625] Bluetooth: hci4: command tx timeout [ 1249.561255][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.569282][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.734818][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12383'. [ 1249.757480][T20433] netlink: 'syz.3.12382': attribute type 21 has an invalid length. [ 1249.916923][T20433] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12382'. [ 1250.172525][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1250.730977][T20470] syzkaller0: entered promiscuous mode [ 1250.768969][T20470] syzkaller0: entered allmulticast mode [ 1250.986388][T20470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12394'. [ 1251.407588][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12402'. [ 1251.532968][ T5625] Bluetooth: hci4: command tx timeout [ 1251.609292][T20505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12404'. [ 1251.640289][T20505] IPVS: Unknown mcast interface: vcan0 [ 1251.728246][T20510] netlink: 'syz.3.12406': attribute type 28 has an invalid length. [ 1251.755177][T20510] netlink: 'syz.3.12406': attribute type 3 has an invalid length. [ 1251.787348][T20510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12406'. [ 1251.804216][T20215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.825054][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12405'. [ 1251.874316][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12405'. [ 1252.058264][T20522] netlink: 'syz.2.12408': attribute type 21 has an invalid length. [ 1252.127575][T20522] netlink: 'syz.2.12408': attribute type 6 has an invalid length. [ 1252.153831][T20522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12408'. [ 1252.179023][T14919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.279030][T20215] veth0_vlan: entered promiscuous mode [ 1252.355257][T20215] veth1_vlan: entered promiscuous mode [ 1252.473039][T20535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1252.571751][T20215] veth0_macvtap: entered promiscuous mode [ 1252.630473][T20215] veth1_macvtap: entered promiscuous mode [ 1252.633190][T20542] IPv6: NLM_F_CREATE should be specified when creating new route [ 1252.664538][T14919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.748951][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12413'. [ 1252.807693][T20215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.860083][T20215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.912821][T17893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.948042][T17893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.960853][T17893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.009375][ T6566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.139631][T20549] tc action pedit 'at' offset 9 out of bounds [ 1253.219194][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.314396][T20553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12416'. [ 1253.367204][T20553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12416'. [ 1253.520281][ T6542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.553837][ T6542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.714620][T17893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.759060][T17893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.252736][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.324530][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12420'. [ 1254.365884][T20567] netlink: 'syz.2.12420': attribute type 2 has an invalid length. [ 1254.603718][T20573] tipc: Started in network mode [ 1254.643183][T20573] tipc: Node identity e0000001, cluster identity 4711 [ 1254.667694][T20573] tipc: Enabling of bearer rejected, failed to enable media [ 1255.304233][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.316901][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1255.338304][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1255.347837][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1255.363309][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1255.371923][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.568452][T20593] netlink: 'syz.2.12425': attribute type 15 has an invalid length. [ 1255.647196][ T6566] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1255.674648][T20593] netlink: 'syz.2.12425': attribute type 15 has an invalid length. [ 1255.682787][T18740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1255.703200][T14931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.758106][T18740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1256.044950][ T7901] bond5: (slave syz_tun): Removing an active aggregator [ 1256.056793][T17892] bond5: Warning: Found an uninitialized port [ 1256.078834][ T7901] bond5: (slave syz_tun): Releasing backup interface [ 1256.334142][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.459530][T20614] __nla_validate_parse: 8 callbacks suppressed [ 1256.459562][T20614] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12430'. [ 1256.535144][T14616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.536633][T20619] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12430'. [ 1256.546952][T14616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.567282][T20618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12432'. [ 1256.632593][T20618] netlink: 'syz.3.12432': attribute type 10 has an invalid length. [ 1256.641568][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12432'. [ 1256.675679][T20618] geneve2: entered promiscuous mode [ 1256.694615][T20618] geneve2: entered allmulticast mode [ 1256.778271][T20614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.785690][T20614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.839353][T20619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.850365][T20619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.858578][T20619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.866678][T20619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.885835][T20619] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12430'. [ 1256.981924][T14616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.024323][T14616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.065463][T20619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.072758][T20619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.376974][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.401319][T14616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.448148][T14616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.465826][ T5625] Bluetooth: hci1: command tx timeout [ 1257.537344][T20588] xfrm0 speed is unknown, defaulting to 1000 [ 1257.569961][T20588] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1257.603703][T14616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.617307][T14616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.681799][T20588] wlan1 speed is unknown, defaulting to 1000 [ 1257.958097][T20643] netlink: 'syz.2.12437': attribute type 1 has an invalid length. [ 1257.998775][T20644] netlink: 'syz.2.12437': attribute type 1 has an invalid length. [ 1258.018909][T20643] netlink: 'syz.2.12437': attribute type 2 has an invalid length. [ 1258.036598][T20644] netlink: 'syz.2.12437': attribute type 2 has an invalid length. [ 1258.392640][ T2592] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.422372][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1258.434362][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.434621][T20654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12441'. [ 1258.470477][T20651] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12439'. [ 1258.566310][T17893] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.685644][ T2592] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.735115][ T9372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.856758][T20674] xt_TCPMSS: Only works on TCP SYN packets [ 1259.119562][T20676] hsr0: entered promiscuous mode [ 1259.159692][T20676] hsr0: entered allmulticast mode [ 1259.173394][T20676] hsr_slave_0: entered allmulticast mode [ 1259.190771][T20676] hsr_slave_1: entered allmulticast mode [ 1259.267676][T17893] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.319913][T14616] bridge_slave_1: left promiscuous mode [ 1259.345731][T20695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.349716][T14616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.452862][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.535763][ T5625] Bluetooth: hci1: command tx timeout [ 1259.595751][T14616] pim6reg: left allmulticast mode [ 1259.660802][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12448'. [ 1260.006116][T14616] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 1260.135391][T20718] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1260.239955][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12448'. [ 1260.335311][T14934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.390804][T14616] bond14 (unregistering): (slave gretap3): Releasing active interface [ 1260.454176][T14616] bond18 (unregistering): (slave gretap4): Releasing active interface [ 1260.493683][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.661423][T14616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.671058][T14616] bond0 (unregistering): Released all slaves [ 1260.687632][T14616] bond1 (unregistering): Released all slaves [ 1260.711523][T14616] bond2 (unregistering): Released all slaves [ 1260.731057][T14616] bond3 (unregistering): Released all slaves [ 1260.758500][T14616] bond4 (unregistering): Released all slaves [ 1260.780886][T14616] bond5 (unregistering): Released all slaves [ 1260.804780][T14616] bond6 (unregistering): Released all slaves [ 1260.828263][T14616] bond7 (unregistering): Released all slaves [ 1260.848366][T14616] bond8 (unregistering): Released all slaves [ 1260.870450][T14616] bond9 (unregistering): Released all slaves [ 1260.897584][T14616] bond10 (unregistering): Released all slaves [ 1260.927052][T14616] bond11 (unregistering): Released all slaves [ 1260.955403][T14616] bond12 (unregistering): (slave veth5): Releasing active interface [ 1260.964413][T14616] batadv2: entered promiscuous mode [ 1260.978176][T14934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.990537][T14616] bond12 (unregistering): (slave batadv2): Releasing active interface [ 1261.004204][T14616] bond12 (unregistering): (slave veth7): Releasing active interface [ 1261.017035][T14616] bond12 (unregistering): Released all slaves [ 1261.038041][T14616] bond13 (unregistering): Released all slaves [ 1261.075729][T14616] bond14 (unregistering): Released all slaves [ 1261.098958][T14616] bond15 (unregistering): Released all slaves [ 1261.121769][T14616] bond16 (unregistering): Released all slaves [ 1261.142784][T14616] bond17 (unregistering): Released all slaves [ 1261.170904][T14616] bond18 (unregistering): Released all slaves [ 1261.256855][T20701] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1261.318239][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1261.435531][T20712] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1261.543065][ T1669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.615079][ T5634] Bluetooth: hci1: command tx timeout [ 1261.728241][T14616] tipc: Left network mode [ 1261.756812][T20734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12452'. [ 1261.850232][T20740] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1261.860028][T14616] IPVS: stopping backup sync thread 9549 ... [ 1262.250455][T20588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.261742][T20588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.299045][T20588] bridge_slave_0: entered allmulticast mode [ 1262.315170][T20588] bridge_slave_0: entered promiscuous mode [ 1262.418207][T20588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.447747][T20588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.476211][T20588] bridge_slave_1: entered allmulticast mode [ 1262.518461][T20588] bridge_slave_1: entered promiscuous mode [ 1262.574944][T14918] net_ratelimit: 1 callbacks suppressed [ 1262.574962][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.839366][T20588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.936420][T20588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.304028][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12462'. [ 1263.350361][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12462'. [ 1263.469881][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12466'. [ 1263.483699][T20794] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12465'. [ 1263.489308][T20588] team0: Port device team_slave_0 added [ 1263.612063][T20588] team0: Port device team_slave_1 added [ 1263.627029][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.693906][ T5634] Bluetooth: hci1: command tx timeout [ 1263.883149][T20805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12467'. [ 1263.898329][T20798] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12466'. [ 1263.967285][T20588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.980482][T20588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.043611][T20588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.059334][T20588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.096119][T20588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.154674][T20588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.652878][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.710107][T20813] bridge1: entered promiscuous mode [ 1264.721242][T20813] bridge1: entered allmulticast mode [ 1264.814489][ T9372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.829122][T14934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.853628][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1265.109561][T20826] sctp: [Deprecated]: syz.4.12474 (pid 20826) Use of int in maxseg socket option. [ 1265.109561][T20826] Use struct sctp_assoc_value instead [ 1265.130576][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12474'. [ 1265.149746][T20828] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1265.166053][T20828] syzkaller1: Refused to change device type [ 1265.199706][T20588] hsr_slave_0: entered promiscuous mode [ 1265.217849][T20588] hsr_slave_1: entered promiscuous mode [ 1265.239423][T20588] debugfs: 'hsr0' already exists in 'hsr' [ 1265.245564][T20588] Cannot create hsr debugfs directory [ 1265.289428][T14616] hsr_slave_0: left promiscuous mode [ 1265.316832][T14616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.352517][T14616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.394263][T14616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.420486][T14616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.430662][T20841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.446685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.609237][T14616] vlan0: left allmulticast mode [ 1265.615161][T14616] veth0_vlan: left allmulticast mode [ 1265.623155][T14616] vlan0: left promiscuous mode [ 1265.633313][T14616] veth1_macvtap: left promiscuous mode [ 1265.639790][T14616] veth0_macvtap: left promiscuous mode [ 1265.647511][T14616] veth1_vlan: left promiscuous mode [ 1265.653947][T14616] veth0_vlan: left promiscuous mode [ 1265.698458][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.098721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.737142][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.112952][T20857] tipc: New replicast peer: 255.255.255.255 [ 1267.153577][T20857] tipc: Enabled bearer , priority 10 [ 1267.535832][T20878] netlink: 'syz.2.12484': attribute type 1 has an invalid length. [ 1267.775605][T12684] net_ratelimit: 1 callbacks suppressed [ 1267.775622][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.828803][T14616] IPVS: stop unused estimator thread 0... [ 1267.857310][T14931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.014344][T14931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.037257][T20588] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.318229][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12487'. [ 1268.406339][T20899] team0 (unregistering): Port device team_slave_0 removed [ 1268.454463][T20899] team0 (unregistering): Port device team_slave_1 removed [ 1268.517987][T14931] tipc: Node number set to 3758096385 [ 1268.561602][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1268.785385][T20588] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.813763][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.845841][T20911] syz_tun: refused to change device tx_queue_len [ 1269.019207][T20588] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.067710][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12493'. [ 1269.091412][T20921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12494'. [ 1269.224560][T20588] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.854080][ T1669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.151267][T20971] x_tables: duplicate underflow at hook 3 [ 1270.231499][T20588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1270.250584][T20976] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12508'. [ 1270.285885][T20588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1270.300995][T20979] netlink: 'syz.2.12510': attribute type 1 has an invalid length. [ 1270.322711][T20588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1270.350500][T20979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12510'. [ 1270.375347][T20588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1270.396677][T20588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1270.425285][T20588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1270.473210][T20588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1270.501038][T20993] x_tables: unsorted underflow at hook 3 [ 1270.551731][T20588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1270.606218][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12511'. [ 1270.893785][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.970235][T20588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.053097][T14931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.165978][T21029] netlink: 'syz.4.12518': attribute type 8 has an invalid length. [ 1271.254573][T21033] netlink: 'syz.4.12518': attribute type 2 has an invalid length. [ 1271.274263][T21033] netlink: 'syz.4.12518': attribute type 8 has an invalid length. [ 1271.355421][T20588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.407285][T14616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.414503][T14616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.464949][T14616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.472176][T14616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.729866][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12521'. [ 1271.934040][T14919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.180096][T21069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12525'. [ 1272.240041][T21072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1272.247327][T21072] IPv6: NLM_F_CREATE should be set when creating new route [ 1272.412936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.423334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.514372][T21082] netlink: 'syz.0.12526': attribute type 1 has an invalid length. [ 1272.564270][T21082] netlink: 'syz.0.12526': attribute type 4 has an invalid length. [ 1272.609231][T21082] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.12526'. [ 1272.648364][T21091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12528'. [ 1272.870721][T21104] pim6reg: entered allmulticast mode [ 1272.900481][T20588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.936057][T21100] pim6reg: left allmulticast mode [ 1273.003097][T12684] net_ratelimit: 1 callbacks suppressed [ 1273.003114][T12684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.366196][T21126] syzkaller1: entered allmulticast mode [ 1273.420529][T20588] veth0_vlan: entered promiscuous mode [ 1273.450560][T21135] netlink: 'syz.4.12539': attribute type 16 has an invalid length. [ 1273.481536][T21135] netlink: 'syz.4.12539': attribute type 17 has an invalid length. [ 1273.519988][T20588] veth1_vlan: entered promiscuous mode [ 1273.552788][T21135] 0ªX¹¦Dö»: left allmulticast mode [ 1273.596738][T21135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.677481][T21135] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1273.731607][T21135] mac80211_hwsim hwsim72 wlan0: left promiscuous mode [ 1273.751473][T21135] bond1: left promiscuous mode [ 1273.767621][T21135] ipvlan2: left allmulticast mode [ 1273.793571][T21135] batadv_slave_1: left allmulticast mode [ 1273.853403][T21135] geneve2: left promiscuous mode [ 1273.873374][T21135] geneve2: left allmulticast mode [ 1273.900471][T21135] macvtap1: left promiscuous mode [ 1273.911704][T21160] __nla_validate_parse: 2 callbacks suppressed [ 1273.911721][T21160] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12544'. [ 1273.913836][T21135] macvtap1: left allmulticast mode [ 1273.944053][T21135] veth1_vlan: left allmulticast mode [ 1273.951775][T21135] veth0_macvtap: entered promiscuous mode [ 1273.963978][T21135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1273.965002][T21163] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12544'. [ 1273.978681][T21135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1273.989360][T21135] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1274.023779][T14918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.034048][T21135] bridge0: port 1(dummy0) entered blocking state [ 1274.040501][T21135] bridge0: port 1(dummy0) entered listening state [ 1274.053811][T21135] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 1274.079575][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12545'. [ 1274.087762][T14919] wlan1 speed is unknown, defaulting to 1000 [ 1274.098565][T14931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.138446][ T6542] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1274.180750][ T6542] bond7: (slave veth5): making interface the new active one [ 1274.219388][ T6542] bond7: active interface up! [ 1274.263057][T21170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.272717][T21170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.281702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.300948][T21170] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12546'. [ 1274.303891][T20588] veth0_macvtap: entered promiscuous mode [ 1274.412339][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1274.429037][T21181] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12549'. [ 1274.454116][T20588] veth1_macvtap: entered promiscuous mode [ 1274.537673][T20588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.575561][T20588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.601465][T17892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.621385][T17892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.666004][T17892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.705535][T17892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.898169][T17892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.933038][T17892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.953410][T21195] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 1275.040954][T21195] netlink: 'syz.4.12554': attribute type 2 has an invalid length. [ 1275.056025][T14919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.078440][T21195] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12554'. [ 1275.093121][T17892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.115408][T17892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.183564][T21209] netlink: 'syz.0.12557': attribute type 2 has an invalid length. [ 1275.199116][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12559'. [ 1275.401133][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.638812][T21229] netlink: 232 bytes leftover after parsing attributes in process `syz.3.12564'. [ 1275.817538][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1275.839549][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1275.850396][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1275.861192][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1275.870284][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1276.035705][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12568'. [ 1276.219647][T21252] syzkaller1: entered promiscuous mode [ 1276.236184][T21252] syzkaller1: entered allmulticast mode [ 1276.285958][T21254] netlink: 'syz.1.12569': attribute type 1 has an invalid length. [ 1276.329102][T21254] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12569'. [ 1276.468155][T21247] syzkaller0: entered allmulticast mode [ 1276.861805][T21235] xfrm0 speed is unknown, defaulting to 1000 [ 1276.890479][T21235] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1276.921586][T21235] wlan1 speed is unknown, defaulting to 1000 [ 1277.395335][T21302] xfrm0 speed is unknown, defaulting to 1000 [ 1277.433375][T21302] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1277.435830][T21303] netlink: 'syz.0.12581': attribute type 2 has an invalid length. [ 1277.476847][T21302] wlan1 speed is unknown, defaulting to 1000 [ 1277.693007][T17892] wlan1: Trigger new scan to find an IBSS to join [ 1277.736596][T21235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.744130][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.756552][T21235] bridge_slave_0: entered allmulticast mode [ 1277.775696][T21235] bridge_slave_0: entered promiscuous mode [ 1277.807754][T21235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.833446][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.855871][T21235] bridge_slave_1: entered allmulticast mode [ 1277.870945][T21235] bridge_slave_1: entered promiscuous mode [ 1277.935580][ T5634] Bluetooth: hci0: command tx timeout [ 1278.115369][T21235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.141773][T21235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.191609][T21235] team0: Port device team_slave_0 added [ 1278.216098][T21235] team0: Port device team_slave_1 added [ 1278.298818][T21235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.311660][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.341828][T21235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.382821][T21235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.390060][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.440972][T21235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.552623][T21346] syzkaller0: entered promiscuous mode [ 1278.558541][T21346] syzkaller0: entered allmulticast mode [ 1278.789245][T21235] hsr_slave_0: entered promiscuous mode [ 1278.799717][T21235] hsr_slave_1: entered promiscuous mode [ 1278.810556][T21235] debugfs: 'hsr0' already exists in 'hsr' [ 1278.820322][T21235] Cannot create hsr debugfs directory [ 1279.127461][T21367] __nla_validate_parse: 4 callbacks suppressed [ 1279.127479][T21367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12600'. [ 1279.143769][T21367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12600'. [ 1279.174694][T21367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12600'. [ 1279.201888][T21367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12600'. [ 1279.405489][T21235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1279.419315][T21235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1279.430541][T21235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.476067][T21385] netlink: 'syz.1.12605': attribute type 19 has an invalid length. [ 1279.490852][T14616] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.490866][T21385] netlink: 'syz.1.12605': attribute type 19 has an invalid length. [ 1279.490895][T14616] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.525416][T14616] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.539012][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12604'. [ 1279.542952][T14616] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.743045][T21235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1279.784944][T21235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1279.802933][T21398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12608'. [ 1279.812189][T21235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.015676][ T5634] Bluetooth: hci0: command tx timeout [ 1280.067387][T21235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1280.086488][T21235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1280.099397][T21235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.186283][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12612'. [ 1280.478612][T21235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1280.511790][T21235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1280.544512][T21235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.748801][ T2592] wlan1: Trigger new scan to find an IBSS to join [ 1280.988143][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12622'. [ 1281.026331][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12623'. [ 1281.065100][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12623'. [ 1281.273161][T21235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1281.313425][T21235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1281.337616][T21235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1281.375390][T21235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1281.409460][T21451] geneve2: entered promiscuous mode [ 1281.417845][T21455] netlink: 'syz.0.12628': attribute type 1 has an invalid length. [ 1281.438060][T21235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1281.449921][T21235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1281.509609][T21235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1281.517206][T21461] netlink: 'syz.2.12630': attribute type 83 has an invalid length. [ 1281.551815][T21235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1281.644194][T21463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.651577][T21463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.687134][T17892] wlan1: Creating new IBSS network, BSSID 96:8a:f2:0f:0e:f1 [ 1281.763054][ T9372] wlan1 speed is unknown, defaulting to 1000 [ 1281.786570][ T9372] syz1: Port: 1 Link ACTIVE [ 1281.936021][T21235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.976261][T21235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1281.988254][T21481] netlink: 'syz.1.12636': attribute type 27 has an invalid length. [ 1281.998689][T17892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.005853][T17892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.008492][T21481] netlink: 'syz.1.12636': attribute type 4 has an invalid length. [ 1282.023453][T17892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.030591][T17892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.094229][ T5634] Bluetooth: hci0: command tx timeout [ 1282.271203][T21491] net_ratelimit: 6 callbacks suppressed [ 1282.271222][T21491] openvswitch: netlink: IP tunnel TTL not specified. [ 1282.697422][T21514] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode [ 1282.723361][T21514] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode [ 1282.766859][T21515] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 1282.814169][T21515] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1282.852829][T21515] gretap5: entered promiscuous mode [ 1282.863465][T21515] gretap5: entered allmulticast mode [ 1283.207344][T21235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.366620][T21545] openvswitch: netlink: Unknown key attributes 20 [ 1283.913543][T21235] veth0_vlan: entered promiscuous mode [ 1283.949164][T21235] veth1_vlan: entered promiscuous mode [ 1283.994953][T21580] netlink: 'syz.0.12664': attribute type 1 has an invalid length. [ 1284.033671][T21235] veth0_macvtap: entered promiscuous mode [ 1284.100926][T21580] bond2: entered promiscuous mode [ 1284.107610][T21580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1284.120933][T21235] veth1_macvtap: entered promiscuous mode [ 1284.171671][T21235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.184035][ T5634] Bluetooth: hci0: command tx timeout [ 1284.212095][T21235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.271378][T18741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.299396][T21593] __nla_validate_parse: 8 callbacks suppressed [ 1284.299413][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12668'. [ 1284.323713][T18741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.343624][T18741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.376879][ T6542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.488708][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12672'. [ 1284.521228][T21602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12670'. [ 1284.608947][ T6542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.619817][T21607] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20000 [ 1284.631003][ T6542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.706808][ T6542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.726719][ T6542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.785577][T21612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12674'. [ 1284.900238][T21612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12674'. [ 1284.976405][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12677'. [ 1285.019798][T21622] veth1_to_bond: entered allmulticast mode [ 1285.064852][T21622] veth1_to_bond: entered promiscuous mode [ 1285.092055][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12677'. [ 1285.120972][T21630] IPv6: addrconf: prefix option has invalid lifetime [ 1285.198558][T21622] veth1_to_bond (unregistering): left allmulticast mode [ 1285.216726][T21622] veth1_to_bond (unregistering): left promiscuous mode [ 1285.238250][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12562'. [ 1285.297993][T21622] bond0: (slave bond_slave_1): Releasing backup interface [ 1285.559433][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12680'. [ 1285.580013][T21640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1285.597172][T21639] netlink: 'syz.4.12680': attribute type 1 has an invalid length. [ 1285.652607][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1285.667888][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1285.686378][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1285.723368][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1285.735647][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1286.138904][T21670] can: request_module (can-proto-5) failed. [ 1286.361611][T21682] netlink: 'syz.3.12688': attribute type 1 has an invalid length. [ 1286.378178][T21682] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12688'. [ 1286.539488][T21644] xfrm0 speed is unknown, defaulting to 1000 [ 1286.549246][T21690] netlink: 'syz.4.12690': attribute type 1 has an invalid length. [ 1286.569239][T21644] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1286.604084][T21644] wlan1 speed is unknown, defaulting to 1000 [ 1286.798071][T21703] ip6gretap0: entered promiscuous mode [ 1286.847293][T21695] veth3: entered allmulticast mode [ 1286.994889][T21710] syzkaller1: entered allmulticast mode [ 1287.468704][T21644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.528222][T21644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.549206][T21644] bridge_slave_0: entered allmulticast mode [ 1287.560680][T21644] bridge_slave_0: entered promiscuous mode [ 1287.580062][T21644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.619843][T21644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.641114][T21644] bridge_slave_1: entered allmulticast mode [ 1287.668208][T21644] bridge_slave_1: entered promiscuous mode [ 1287.830629][T21768] lo: entered allmulticast mode [ 1287.851742][T21644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.861503][ T5625] Bluetooth: hci5: command tx timeout [ 1287.885200][T21768] netlink: 'syz.0.12709': attribute type 83 has an invalid length. [ 1287.931469][T21644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.050855][T21644] team0: Port device team_slave_0 added [ 1288.069117][T21644] team0: Port device team_slave_1 added [ 1288.170759][T21644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.194909][T21644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.230384][T21644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.260375][T21644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.269814][T21644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.298356][T21644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.323259][T21788] batadv_slave_0: entered promiscuous mode [ 1288.336365][T21787] batadv_slave_0: left promiscuous mode [ 1288.428283][T21644] hsr_slave_0: entered promiscuous mode [ 1288.437408][T21644] hsr_slave_1: entered promiscuous mode [ 1288.445260][T21644] debugfs: 'hsr0' already exists in 'hsr' [ 1288.451010][T21644] Cannot create hsr debugfs directory [ 1288.614587][T21799] hsr0: left allmulticast mode [ 1288.619620][T21799] hsr_slave_0: left allmulticast mode [ 1288.625418][T21799] hsr_slave_1: left allmulticast mode [ 1288.779690][T21804] openvswitch: netlink: EtherType 0 is less than min 600 [ 1288.880679][T21644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1288.898704][T21644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.135486][ C1] bridge0: port 1(dummy0) entered learning state [ 1289.195626][T21644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1289.207013][T21819] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 1289.239927][T21821] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 1289.241810][T21644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.297452][T21829] bond1: Invalid ad_actor_system MAC address. [ 1289.303715][T21829] bond1: option ad_actor_system: invalid value (1) [ 1289.314715][T21829] bond1 (unregistering): Released all slaves [ 1289.440727][T21644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1289.496698][T21644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.835979][T21851] veth1_to_bond: entered allmulticast mode [ 1289.846641][T21853] veth1_to_bond: entered promiscuous mode [ 1289.942372][ T5625] Bluetooth: hci5: command tx timeout [ 1290.126029][T21848] veth1_to_bond: left promiscuous mode [ 1290.142505][T21848] veth1_to_bond: left allmulticast mode [ 1290.436842][T21875] __nla_validate_parse: 13 callbacks suppressed [ 1290.436861][T21875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12741'. [ 1290.455411][T21644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1290.468444][T21874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12743'. [ 1290.489762][T21644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1290.517656][T21644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1290.548818][T21644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1290.570125][T21644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1290.620753][T21644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1290.647425][T21877] xfrm0 speed is unknown, defaulting to 1000 [ 1290.702033][T21644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1290.714672][T21644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1290.730308][T21877] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1290.751884][T21893] xt_l2tp: wrong L2TP version: 0 [ 1290.753252][T21887] sctp: Trying to GSO but underlying device doesn't support it. [ 1290.787418][T21877] wlan1 speed is unknown, defaulting to 1000 [ 1290.884057][T21898] netlink: 'syz.0.12748': attribute type 25 has an invalid length. [ 1291.059448][T21644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.098979][T21907] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12752'. [ 1291.101349][T21644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.108865][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12752'. [ 1291.123554][T21908] netlink: 'syz.3.12750': attribute type 10 has an invalid length. [ 1291.136522][T21908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12750'. [ 1291.151952][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.159107][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.199377][T21908] team0: Port device geneve1 added [ 1291.220952][T18741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.228057][T18741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.282019][T21915] netlink: 'syz.0.12753': attribute type 1 has an invalid length. [ 1291.750839][T21935] syzkaller1: entered promiscuous mode [ 1291.772982][T21935] syzkaller1: entered allmulticast mode [ 1291.930760][T21948] netlink: 'syz.4.12759': attribute type 5 has an invalid length. [ 1292.012678][ T5625] Bluetooth: hci5: command tx timeout [ 1292.396396][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12767'. [ 1292.605448][T21984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1292.702968][T21994] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12771'. [ 1292.788568][T21644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.917177][T21644] veth0_vlan: entered promiscuous mode [ 1292.973943][T21644] veth1_vlan: entered promiscuous mode [ 1293.047924][T22017] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12776'. [ 1293.109162][T22016] macsec1: entered promiscuous mode [ 1293.245431][T21644] veth0_macvtap: entered promiscuous mode [ 1293.263205][T21644] veth1_macvtap: entered promiscuous mode [ 1293.337857][T21644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.409478][T21644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.449508][T18741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.471841][T22036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12783'. [ 1293.477290][T18741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.497539][T22032] Bluetooth: MGMT ver 1.23 [ 1293.513359][T18741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.544667][T18741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.092427][ T5625] Bluetooth: hci5: command tx timeout [ 1294.475357][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12788'. [ 1295.026240][T22048] vlan0: mtu greater than device maximum [ 1295.081939][T18741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.114188][T18741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.270016][T17893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.304681][T17893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.448571][T22089] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1295.488069][T22089] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1295.503461][T22089] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1295.507843][T22087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1295.655064][T22098] bond1: entered promiscuous mode [ 1295.724954][T22105] __nla_validate_parse: 2 callbacks suppressed [ 1295.724971][T22105] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12800'. [ 1295.738465][T22103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12799'. [ 1295.842013][T22110] C: renamed from lo (while UP) [ 1295.854261][T22110] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1296.284385][T22134] netlink: 148 bytes leftover after parsing attributes in process `syz.4.12810'. [ 1296.354384][T22143] netlink: 576 bytes leftover after parsing attributes in process `syz.3.12809'. [ 1296.629634][T22156] vlan2: entered allmulticast mode [ 1296.642222][T22156] bond0: entered allmulticast mode [ 1296.674610][T22156] bond_slave_0: entered allmulticast mode [ 1296.708036][T22156] bond_slave_1: entered allmulticast mode [ 1296.829479][T22165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12818'. [ 1297.087336][T22178] netlink: 372 bytes leftover after parsing attributes in process `syz.0.12822'. [ 1297.099317][T22171] bond1: entered promiscuous mode [ 1297.540427][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12826'. [ 1297.601074][T22195] netlink: 'syz.0.12826': attribute type 83 has an invalid length. [ 1297.954751][T22217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12833'. [ 1298.245860][T22234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12836'. [ 1298.276278][T22234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12836'. [ 1298.509035][T22242] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1298.894891][T22257] netlink: 'syz.0.12844': attribute type 10 has an invalid length. [ 1298.983932][T22257] veth0_to_bond: entered allmulticast mode [ 1299.038801][T22257] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1299.102958][T22260] syzkaller1: entered promiscuous mode [ 1299.140693][T22260] syzkaller1: entered allmulticast mode [ 1299.335353][T22278] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1299.374648][ T5625] Bluetooth: hci4: command tx timeout [ 1300.633972][ T5625] block nbd3: Receive control failed (result -32) [ 1300.634896][ T5634] block nbd3: Receive control failed (result -107) [ 1300.712659][T22289] nbd3: detected capacity change from 0 to 63 [ 1300.721545][T22306] netlink: 'syz.2.12856': attribute type 1 has an invalid length. [ 1300.789369][ T1609] block nbd3: Dead connection, failed to find a fallback [ 1300.799470][ T1609] block nbd3: shutting down sockets [ 1300.807560][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1300.824424][ T1609] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1300.833218][ T1609] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1300.843004][ T1609] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1300.852578][ T1609] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1300.860382][ T1609] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1300.871475][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1300.880804][ T1609] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1300.889748][ T1609] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1300.901525][ T1609] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1300.909572][ T1609] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1300.918902][ T1609] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1300.930357][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1300.939593][ T1609] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1300.947780][ T1609] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1300.956783][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1300.966406][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1300.978606][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1300.989674][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1301.003493][ T1609] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1301.008629][T22320] __nla_validate_parse: 8 callbacks suppressed [ 1301.008644][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12859'. [ 1301.013570][T22317] ldm_validate_partition_table(): Disk read failed. [ 1301.065663][T22317] Dev nbd3: unable to read RDB block 0 [ 1301.091259][T22317] nbd3: unable to read partition table [ 1301.209864][T22317] ldm_validate_partition_table(): Disk read failed. [ 1301.215468][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12862'. [ 1301.256023][T22317] Dev nbd3: unable to read RDB block 0 [ 1301.267237][T22317] nbd3: unable to read partition table [ 1301.286060][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12861'. [ 1301.335674][T22334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12862'. [ 1301.376915][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12861'. [ 1301.413440][T22340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12861'. [ 1301.430142][T22336] netlink: 'syz.2.12864': attribute type 12 has an invalid length. [ 1301.644649][T22345] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.12866'. [ 1302.414217][T22385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1302.429927][T22389] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1302.440845][T22388] sctp: [Deprecated]: syz.3.12878 (pid 22388) Use of int in max_burst socket option deprecated. [ 1302.440845][T22388] Use struct sctp_assoc_value instead [ 1302.480194][T22386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12879'. [ 1302.864277][T22407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12885'. [ 1302.958740][T22416] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1303.050779][T22424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.090080][T22426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1303.123996][T22426] netlink: 'syz.4.12891': attribute type 9 has an invalid length. [ 1303.587933][T22448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12899'. [ 1303.738644][T22454] gre2: entered promiscuous mode [ 1303.744156][T22454] gre2: entered allmulticast mode [ 1304.493530][ C1] bridge0: port 1(dummy0) entered forwarding state [ 1304.500097][ C1] bridge0: topology change detected, propagating [ 1304.796369][T17893] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1304.884820][T17893] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1304.918950][T17893] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1304.988056][T17893] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.804982][T22595] openvswitch: netlink: IP tunnel dst address not specified [ 1305.829814][T22595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.418976][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1306.456270][T22618] __nla_validate_parse: 12 callbacks suppressed [ 1306.456288][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12951'. [ 1306.575315][T22622] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12951'. [ 1306.612700][T22622] 8021q: VLANs not supported on ip_vti0 [ 1306.650729][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12952'. [ 1306.678800][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12952'. [ 1306.951348][T22633] netlink: 'syz.3.12957': attribute type 1 has an invalid length. [ 1307.026020][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12958'. [ 1307.089125][T22633] bond2: entered promiscuous mode [ 1307.111619][T22633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1307.163141][ T187] hid-generic 0005:0005:0008.0004: item fetching failed at offset 4/5 [ 1307.174719][ T187] hid-generic 0005:0005:0008.0004: probe with driver hid-generic failed with error -22 [ 1307.184897][ T187] [ 1307.187234][ T187] ====================================================== [ 1307.194246][ T187] WARNING: possible circular locking dependency detected [ 1307.201257][ T187] syzkaller #0 Not tainted [ 1307.205653][ T187] ------------------------------------------------------ [ 1307.212650][ T187] kworker/0:2/187 is trying to acquire lock: [ 1307.218614][ T187] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0 [ 1307.228833][ T187] [ 1307.228833][ T187] but task is already holding lock: [ 1307.236182][ T187] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1307.246442][ T187] [ 1307.246442][ T187] which lock already depends on the new lock. [ 1307.246442][ T187] [ 1307.256829][ T187] [ 1307.256829][ T187] the existing dependency chain (in reverse order) is: [ 1307.265823][ T187] [ 1307.265823][ T187] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1307.273843][ T187] down_write+0x96/0x200 [ 1307.278656][ T187] kernfs_add_one+0x41/0x5e0 [ 1307.283757][ T187] kernfs_create_dir_ns+0x1a1/0x230 [ 1307.289465][ T187] internal_create_group+0x440/0x1180 [ 1307.295349][ T187] cpuhp_invoke_callback+0x434/0x810 [ 1307.301226][ T187] cpuhp_issue_call+0x3f0/0x750 [ 1307.306587][ T187] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1307.313159][ T187] __cpuhp_setup_state+0x3f/0x60 [ 1307.318604][ T187] do_one_initcall+0x250/0x870 [ 1307.323883][ T187] do_initcall_level+0x10a/0x1a0 [ 1307.329450][ T187] do_initcalls+0x59/0xa0 [ 1307.334295][ T187] kernel_init_freeable+0x29d/0x3e0 [ 1307.340023][ T187] kernel_init+0x1d/0x1d0 [ 1307.344868][ T187] ret_from_fork+0x514/0xb70 [ 1307.350063][ T187] ret_from_fork_asm+0x1a/0x30 [ 1307.355332][ T187] [ 1307.355332][ T187] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1307.363137][ T187] [ 1307.363137][ T187] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1307.370852][ T187] cpus_read_lock+0x42/0x160 [ 1307.375950][ T187] static_key_slow_inc+0x12/0x30 [ 1307.381437][ T187] nbd_genl_reconfigure+0x1301/0x1e80 [ 1307.387450][ T187] genl_family_rcv_msg_doit+0x233/0x340 [ 1307.393625][ T187] genl_rcv_msg+0x614/0x7a0 [ 1307.398672][ T187] netlink_rcv_skb+0x226/0x4a0 [ 1307.403992][ T187] genl_rcv+0x28/0x40 [ 1307.408479][ T187] netlink_unicast+0x7bb/0x940 [ 1307.413756][ T187] netlink_sendmsg+0x813/0xb40 [ 1307.419030][ T187] sock_sendmsg_nosec+0x13a/0x180 [ 1307.424624][ T187] ____sys_sendmsg+0x54e/0x850 [ 1307.429897][ T187] ___sys_sendmsg+0x2a5/0x360 [ 1307.435082][ T187] __x64_sys_sendmsg+0x1b1/0x290 [ 1307.440532][ T187] do_syscall_64+0x174/0x580 [ 1307.445635][ T187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.452037][ T187] [ 1307.452037][ T187] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1307.459669][ T187] __mutex_lock+0x19d/0x1550 [ 1307.464775][ T187] nbd_queue_rq+0x373/0x1150 [ 1307.469888][ T187] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1307.476050][ T187] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1307.482947][ T187] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1307.489441][ T187] blk_mq_run_work_fn+0x16c/0x300 [ 1307.494992][ T187] process_scheduled_works+0xa8e/0x14e0 [ 1307.501049][ T187] worker_thread+0xa47/0xfb0 [ 1307.506145][ T187] kthread+0x388/0x470 [ 1307.510751][ T187] ret_from_fork+0x514/0xb70 [ 1307.515852][ T187] ret_from_fork_asm+0x1a/0x30 [ 1307.521122][ T187] [ 1307.521122][ T187] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1307.528325][ T187] __mutex_lock+0x19d/0x1550 [ 1307.533436][ T187] nbd_queue_rq+0xc1/0x1150 [ 1307.538463][ T187] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1307.544527][ T187] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1307.551370][ T187] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1307.557860][ T187] blk_mq_run_work_fn+0x16c/0x300 [ 1307.563437][ T187] process_scheduled_works+0xa8e/0x14e0 [ 1307.569489][ T187] worker_thread+0xa47/0xfb0 [ 1307.574588][ T187] kthread+0x388/0x470 [ 1307.579169][ T187] ret_from_fork+0x514/0xb70 [ 1307.584327][ T187] ret_from_fork_asm+0x1a/0x30 [ 1307.589601][ T187] [ 1307.589601][ T187] -> #4 (set->srcu){.+.+}-{0:0}: [ 1307.596758][ T187] __synchronize_srcu+0xc9/0x2f0 [ 1307.602245][ T187] elevator_switch+0x1e8/0x7b0 [ 1307.607560][ T187] elevator_change+0x2fa/0x480 [ 1307.612831][ T187] elevator_set_default+0x375/0x440 [ 1307.618537][ T187] blk_register_queue+0x3f3/0x4e0 [ 1307.624125][ T187] __add_disk+0x6cb/0xe30 [ 1307.628958][ T187] add_disk_fwnode+0xfb/0x4b0 [ 1307.634144][ T187] nbd_dev_add+0x733/0xb60 [ 1307.639073][ T187] nbd_init+0x15f/0x1e0 [ 1307.643784][ T187] do_one_initcall+0x250/0x870 [ 1307.649072][ T187] do_initcall_level+0x10a/0x1a0 [ 1307.654518][ T187] do_initcalls+0x59/0xa0 [ 1307.659355][ T187] kernel_init_freeable+0x29d/0x3e0 [ 1307.665059][ T187] kernel_init+0x1d/0x1d0 [ 1307.669893][ T187] ret_from_fork+0x514/0xb70 [ 1307.675001][ T187] ret_from_fork_asm+0x1a/0x30 [ 1307.680278][ T187] [ 1307.680278][ T187] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1307.688097][ T187] __mutex_lock+0x19d/0x1550 [ 1307.693215][ T187] elevator_change+0x1af/0x480 [ 1307.698510][ T187] elevator_set_none+0xb5/0x140 [ 1307.703877][ T187] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1307.710200][ T187] nbd_start_device+0x189/0xb30 [ 1307.715563][ T187] nbd_genl_connect+0x1597/0x1c10 [ 1307.721096][ T187] genl_family_rcv_msg_doit+0x233/0x340 [ 1307.727152][ T187] genl_rcv_msg+0x614/0x7a0 [ 1307.732162][ T187] netlink_rcv_skb+0x226/0x4a0 [ 1307.737443][ T187] genl_rcv+0x28/0x40 [ 1307.741930][ T187] netlink_unicast+0x7bb/0x940 [ 1307.747201][ T187] netlink_sendmsg+0x813/0xb40 [ 1307.752477][ T187] sock_sendmsg_nosec+0x13a/0x180 [ 1307.758015][ T187] ____sys_sendmsg+0x54e/0x850 [ 1307.763288][ T187] ___sys_sendmsg+0x2a5/0x360 [ 1307.768475][ T187] __x64_sys_sendmsg+0x1b1/0x290 [ 1307.773922][ T187] do_syscall_64+0x174/0x580 [ 1307.779021][ T187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.785418][ T187] [ 1307.785418][ T187] -> #2 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 1307.794015][ T187] blk_alloc_queue+0x544/0x690 [ 1307.799292][ T187] __blk_mq_alloc_disk+0x194/0x390 [ 1307.804914][ T187] nbd_dev_add+0x494/0xb60 [ 1307.809844][ T187] nbd_genl_connect+0x992/0x1c10 [ 1307.815292][ T187] genl_family_rcv_msg_doit+0x233/0x340 [ 1307.821344][ T187] genl_rcv_msg+0x614/0x7a0 [ 1307.826364][ T187] netlink_rcv_skb+0x226/0x4a0 [ 1307.831639][ T187] genl_rcv+0x28/0x40 [ 1307.836127][ T187] netlink_unicast+0x7bb/0x940 [ 1307.841397][ T187] netlink_sendmsg+0x813/0xb40 [ 1307.846672][ T187] sock_sendmsg_nosec+0x13a/0x180 [ 1307.852207][ T187] ____sys_sendmsg+0x54e/0x850 [ 1307.857481][ T187] ___sys_sendmsg+0x2a5/0x360 [ 1307.862668][ T187] __x64_sys_sendmsg+0x1b1/0x290 [ 1307.868116][ T187] do_syscall_64+0x174/0x580 [ 1307.873217][ T187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.879650][ T187] [ 1307.879650][ T187] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1307.886848][ T187] fs_reclaim_acquire+0x71/0x100 [ 1307.892307][ T187] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1307.898198][ T187] __kernfs_iattrs+0xdd/0x380 [ 1307.903392][ T187] kernfs_iop_setattr+0xe6/0x3f0 [ 1307.908838][ T187] notify_change+0xbba/0xea0 [ 1307.913933][ T187] do_truncate+0x1c2/0x250 [ 1307.918920][ T187] path_openat+0x2fed/0x3830 [ 1307.924025][ T187] do_file_open+0x23e/0x4a0 [ 1307.929041][ T187] do_sys_openat2+0x115/0x200 [ 1307.934225][ T187] __x64_sys_openat+0x138/0x170 [ 1307.939583][ T187] do_syscall_64+0x174/0x580 [ 1307.944683][ T187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.951086][ T187] [ 1307.951086][ T187] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1307.959596][ T187] __lock_acquire+0x1520/0x2cf0 [ 1307.964963][ T187] lock_acquire+0x106/0x350 [ 1307.969979][ T187] down_write+0x96/0x200 [ 1307.974734][ T187] __kernfs_remove+0x174/0x8e0 [ 1307.980009][ T187] kernfs_remove_by_name_ns+0xc0/0x140 [ 1307.985981][ T187] really_probe+0x36e/0xae0 [ 1307.991081][ T187] __driver_probe_device+0x1e8/0x360 [ 1307.996874][ T187] driver_probe_device+0x4f/0x240 [ 1308.002406][ T187] __device_attach_driver+0x270/0x410 [ 1308.008294][ T187] bus_for_each_drv+0x258/0x2f0 [ 1308.013700][ T187] __device_attach+0x2c4/0x450 [ 1308.018969][ T187] device_initial_probe+0xa1/0xd0 [ 1308.024498][ T187] bus_probe_device+0x12a/0x220 [ 1308.029859][ T187] device_add+0x7d7/0xb80 [ 1308.034700][ T187] hid_add_device+0x272/0x3e0 [ 1308.040048][ T187] hidp_session_dev_work+0x45/0x160 [ 1308.045814][ T187] process_scheduled_works+0xa8e/0x14e0 [ 1308.051870][ T187] worker_thread+0xa47/0xfb0 [ 1308.056969][ T187] kthread+0x388/0x470 [ 1308.061547][ T187] ret_from_fork+0x514/0xb70 [ 1308.066644][ T187] ret_from_fork_asm+0x1a/0x30 [ 1308.071911][ T187] [ 1308.071911][ T187] other info that might help us debug this: [ 1308.071911][ T187] [ 1308.082121][ T187] Chain exists of: [ 1308.082121][ T187] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1308.082121][ T187] [ 1308.096554][ T187] Possible unsafe locking scenario: [ 1308.096554][ T187] [ 1308.103985][ T187] CPU0 CPU1 [ 1308.109342][ T187] ---- ---- [ 1308.114687][ T187] lock(&root->kernfs_rwsem); [ 1308.119442][ T187] lock(cpuhp_state_mutex); [ 1308.126538][ T187] lock(&root->kernfs_rwsem); [ 1308.133806][ T187] lock(&root->kernfs_iattr_rwsem); [ 1308.139073][ T187] [ 1308.139073][ T187] *** DEADLOCK *** [ 1308.139073][ T187] [ 1308.147199][ T187] 5 locks held by kworker/0:2/187: [ 1308.152289][ T187] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1308.163242][ T187] #1: ffffc9000304fc40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1308.175574][ T187] #2: ffff8880346e5a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1308.184783][ T187] #3: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1308.196086][ T187] #4: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1308.206791][ T187] [ 1308.206791][ T187] stack backtrace: [ 1308.212675][ T187] CPU: 0 UID: 0 PID: 187 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 1308.212693][ T187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1308.212704][ T187] Workqueue: events hidp_session_dev_work [ 1308.212723][ T187] Call Trace: [ 1308.212729][ T187] [ 1308.212736][ T187] dump_stack_lvl+0xe8/0x150 [ 1308.212759][ T187] print_circular_bug+0x2e1/0x300 [ 1308.212776][ T187] check_noncircular+0x12e/0x150 [ 1308.212800][ T187] __lock_acquire+0x1520/0x2cf0 [ 1308.212823][ T187] ? __lock_acquire+0x683/0x2cf0 [ 1308.212843][ T187] ? __lock_acquire+0x683/0x2cf0 [ 1308.212864][ T187] ? __kernfs_remove+0x174/0x8e0 [ 1308.212884][ T187] lock_acquire+0x106/0x350 [ 1308.212902][ T187] ? __kernfs_remove+0x174/0x8e0 [ 1308.212927][ T187] down_write+0x96/0x200 [ 1308.212953][ T187] ? __kernfs_remove+0x174/0x8e0 [ 1308.212973][ T187] ? __pfx_down_write+0x10/0x10 [ 1308.212993][ T187] ? kernfs_root+0x1c/0x230 [ 1308.213011][ T187] ? kernfs_root+0x1c/0x230 [ 1308.213028][ T187] ? kernfs_root+0x1ea/0x230 [ 1308.213047][ T187] __kernfs_remove+0x174/0x8e0 [ 1308.213068][ T187] ? kernfs_find_ns+0x59f/0x600 [ 1308.213089][ T187] kernfs_remove_by_name_ns+0xc0/0x140 [ 1308.213112][ T187] really_probe+0x36e/0xae0 [ 1308.213131][ T187] __driver_probe_device+0x1e8/0x360 [ 1308.213148][ T187] driver_probe_device+0x4f/0x240 [ 1308.213165][ T187] __device_attach_driver+0x270/0x410 [ 1308.213182][ T187] bus_for_each_drv+0x258/0x2f0 [ 1308.213202][ T187] ? __pfx___device_attach_driver+0x10/0x10 [ 1308.213218][ T187] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1308.213238][ T187] ? lockdep_hardirqs_on+0x7a/0x110 [ 1308.213257][ T187] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1308.213338][ T187] __device_attach+0x2c4/0x450 [ 1308.213354][ T187] ? __pfx___device_attach+0x10/0x10 [ 1308.213371][ T187] ? _raw_spin_unlock+0x28/0x50 [ 1308.213387][ T187] device_initial_probe+0xa1/0xd0 [ 1308.213403][ T187] bus_probe_device+0x12a/0x220 [ 1308.213424][ T187] device_add+0x7d7/0xb80 [ 1308.213448][ T187] hid_add_device+0x272/0x3e0 [ 1308.213465][ T187] ? hidp_session_dev_work+0x1e/0x160 [ 1308.213481][ T187] hidp_session_dev_work+0x45/0x160 [ 1308.213496][ T187] ? process_scheduled_works+0xa20/0x14e0 [ 1308.213512][ T187] process_scheduled_works+0xa8e/0x14e0 [ 1308.213538][ T187] ? __pfx_process_scheduled_works+0x10/0x10 [ 1308.213556][ T187] ? assign_work+0x3cf/0x5d0 [ 1308.213573][ T187] worker_thread+0xa47/0xfb0 [ 1308.213594][ T187] ? __kthread_parkme+0x71/0x1f0 [ 1308.213616][ T187] kthread+0x388/0x470 [ 1308.213635][ T187] ? __pfx_worker_thread+0x10/0x10 [ 1308.213650][ T187] ? __pfx_kthread+0x10/0x10 [ 1308.213670][ T187] ret_from_fork+0x514/0xb70 [ 1308.213692][ T187] ? __pfx_ret_from_fork+0x10/0x10 [ 1308.213712][ T187] ? __switch_to+0xc89/0x1420 [ 1308.213753][ T187] ? __pfx_kthread+0x10/0x10 [ 1308.213772][ T187] ret_from_fork_asm+0x1a/0x30 [ 1308.213792][ T187] [ 1308.578338][T22644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1308.588640][T22644] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1308.599020][T22644] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1308.611348][T22644] bond2: (slave vti0): making interface the new active one [ 1308.619246][T22644] vti0: entered promiscuous mode [ 1308.625574][T22644] vti0: left promiscuous mode [ 1314.093750][T14616] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)