last executing test programs: 5m40.496956447s ago: executing program 0 (id=2810): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 5m40.292527202s ago: executing program 0 (id=2814): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x8, 0x3, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c", 0x2a, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 5m39.554006117s ago: executing program 0 (id=2828): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @mcast2, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xd, 0x4, [0xb, 0x9]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x25}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r3 = socket$kcm(0xa, 0x5, 0x0) socket(0x11, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) socket$kcm(0xa, 0x1, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @mcast2, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xd, 0x4, [0xb, 0x9]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x25}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) (async) socket$kcm(0xa, 0x5, 0x0) (async) socket(0x11, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) (async) 5m39.296148367s ago: executing program 0 (id=2833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r3, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x4a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) 5m39.164829392s ago: executing program 0 (id=2837): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff000008200110", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff000008200110", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(cbc(cast6),twofish-asm)\x00'}, 0x58) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000002c0)="211bca8c0682b7f9f24fdf259dc29e48ae54146346c712030bbad0873c7753143dd7d705df753f8498723f100ac9cb18bf251726a16136fbb2a988fdf7e86de0c56b3487fd083aac3753a9eb1d0b1a5dea23be9541d0f1ce3108a3a8d9dd7fa015bd0667f5acbd10da5526affd0ce500981f57d3293fda81be0d02730477e548d10e70272ca822fe7faadce2f35f30f7773407adc3bc8d074db1780fdfa9186ee7eb0face798aa41e142815e85d57ffd66cea57ec4e715f79a371317dc60cc5b1f57c324bf074bb3cc8657db78f2177a1032825843864bc2065549ccddaeed424bc02a4ce57f6b1ebf6f7d769cfb58ae51c093940497548d4790d5fba892ac4d") setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x800000000000000e) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/108, 0x6c}], 0x2}, 0x10100) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/108, 0x6c}], 0x2}, 0x10100) setsockopt(r1, 0x401, 0x5, &(0x7f0000000540)="d0086ea9483583abc751179d23a2bfb89827a9f5810a188079d2bee44002c66a8b890bd4e4bce826b28b6e71376aa36108e999902c5b2de40d5d2373ba12623d2d8054b0a1f3b1989121cb5d20bdf33b3c438838b87aa98b67d117ba809d4ba098f6", 0x62) (async) setsockopt(r1, 0x401, 0x5, &(0x7f0000000540)="d0086ea9483583abc751179d23a2bfb89827a9f5810a188079d2bee44002c66a8b890bd4e4bce826b28b6e71376aa36108e999902c5b2de40d5d2373ba12623d2d8054b0a1f3b1989121cb5d20bdf33b3c438838b87aa98b67d117ba809d4ba098f6", 0x62) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x3}, 0x6) close(r2) 5m38.858600502s ago: executing program 0 (id=2842): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a0000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 5m23.732131429s ago: executing program 32 (id=2842): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a0000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m33.385142262s ago: executing program 4 (id=6110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000100001b6b8df3c009d0afb01082400000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r0], 0x14c}}, 0x0) 2m33.279453078s ago: executing program 4 (id=6112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000440)={0x1f, 0x0, @any, 0x7ff}, 0xe) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010400"/20, @ANYRES32=0x0, @ANYBLOB="00aaaaaaaaaaaa000008000f0000000000"], 0x30}}, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r5, r0, 0x8, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5886, 0x801, 0x1, 0xa8, 'syz1\x00'}) 2m33.185382601s ago: executing program 4 (id=6115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 2m33.097378653s ago: executing program 4 (id=6117): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x60, 0x1403, 0x200, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0xfffefffe) 2m32.615167409s ago: executing program 4 (id=6127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d93c05d19187163908196e1d47e7e0badff300b370269b488cd3ddecbdc80b08b34bafc6d59b5f9e84af01c9e17f1687305af83ed18444bb778f9a17b2eacc262b", @ANYRES16=r5, @ANYBLOB="110000000000030000000f000000"], 0x14}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000180)="674666c8d14752e2f21eb62240d7a6729e83be14f7daa425c86a665748272960f5807de4f8214900c3906a2d793945a493c0040c33cd4ed1b8bca5ebb047f315c038e65cbe846c6d194c9600de6b0f63", 0x50}], 0x1}}], 0x1, 0x20000090) 2m32.319758592s ago: executing program 4 (id=6130): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) 2m17.202858683s ago: executing program 33 (id=6130): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) 11.228636606s ago: executing program 3 (id=7342): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x81800) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x10e, 0x1, 0x2, 0x9, 0x62, @random="b21c44c01fdf"}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x8}, 0x94) 11.222775554s ago: executing program 3 (id=7343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000fdde00040000001100009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0xc004}, 0x4004040) 11.151252292s ago: executing program 3 (id=7345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x7}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'pim6reg1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x68, "73bdec8cc259fcbb448b54e20c5982a27769eb62c0675676091b66a1f36ff758d6917fa9321b5bddd7955793007b73894403cac72c3d8b90e0d37795dd0df165059e4ebf62aa3a381101d4ac638d497d2784a27c64eb7e8a4bc62cf9336cd99beea68c793b0cfdac"}}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14008a836656b4f0457c00000000000009010000ec9433867d28067d70dec8dc7fc5e8746f33146bcd2999e481d2ac3515b5c0861772a56d4d88d01ae544515878fdae41927bca98ebb6fc30af050a3823a6f299f8a1b3bcdfb07b6159243ec1c94a79010716c6e4c303e88c21344fbe1c1c0f5cd98166bdb398ffbb31a99d91d668675c91f16cba609f8eac550fd71556af672397cda7e457a27d5799a2ce07fdb1ad76de38e3ef6906b9982c63d0ba4d06160e88cb"], 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x20000080) 11.04525241s ago: executing program 3 (id=7348): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000390400000000fcffffff98911d4a9ce43f9827db7b2172615de6c794666514cbb996da1b5bc8cd32cace2db8adb18ff1145d53611dc14b8eb6b5666a72b736fb94c8800430f01608bd6a7aa4c5110936d9ef37abea7d9859e0c0d0dd37f804a68e4df4780880e1a8cdf7cdcde1ba45a844215eafdc58c4e9d0749e89969cd54e859e521edb5b6caebb539b0ab067aaf3e2974d280c872aa6c25c1b81221f67f86deae84000"/180, @ANYRES32=r1, @ANYBLOB="01980000000000002800128008000100677265001c00028008000700ac1414bb050013000100000005000a0000000000"], 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x11}, 0x24}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000080020000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000f36bcedc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="1800005d3384fafecc890d3da7bb5ca0224eda7e1700000000000a00000000000000ffd5ef07b1bba36d1c17966d10c6c1852124a57af32c39f7e84c051329f792d16e0c6d193f7c1d1272662df7c350de5a3a7b25b41473ca1b8b7c646ab36b8871ba71ddea09e2901bbdf7742f823cdf3faddb0107d63b12e03dfc5a8a4453e7a38218a4d8d07a12480a59abe533bf756e77c721b6ab970b45057bd0ad2b3a2328ad938ae8b1e11596ffb7f01b57f514ca32e41501bfc7461d61a782281a7f8960cbc111449e55973812e348233dbbb76f49b51801e62b67f47ae0bfbd3a167795f8dc6d05e494e3e235a371e07ddcf6e4773c4c53"], 0x18}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000002000000040000000300000000000000", @ANYRES32=r8, @ANYBLOB="feffffff00000000000700000004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES16=r10, @ANYRES16=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000140)={0x18, 0x0, {0x20, @remote, 'xfrm0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f80)={0x50, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}, {0x2c, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x41, &(0x7f0000000080)=0x36, 0x4) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 10.295457553s ago: executing program 3 (id=7364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlinkprop={0x28, 0x6c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x34400, 0x10010}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff7, 0x2}, 0xe) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000280), &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) unshare(0x100000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtclass={0x44, 0x28, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff2, 0x9}, {0x0, 0xfff1}, {0xf, 0xa}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x44}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 10.257321781s ago: executing program 3 (id=7365): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x11e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x1, 0x0, 0x0, @uid=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg$unix(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt(r3, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r12, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0xa59dee6880eab1ba}, 0x20004891) sendto$packet(r3, &(0x7f00000004c0)="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", 0x1000, 0x4000001, 0x0, 0x0) 2.372372613s ago: executing program 5 (id=7518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="333343811000f1000000009500000004"], &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000"], 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r8}, 0x38) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) pwrite64(r2, &(0x7f0000000180)="7b501b5cf1cf79dd65eccc47d854d1190b99816ea57d393a02b68490d51dfbe4897bb205ea99822feaa3d8ae3e5f5c4c4cd4d075e0d8b3302b7240ed3bc204ec88f5d6", 0x43, 0xec29) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c0004800500030002"], 0x50}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xc06}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) accept4$x25(r5, 0x0, 0x0, 0x80000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800000010003704feffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="3b240400000000001800128008000100736974000c000280050009000400000077803b8b17fc08a5a02a5e45d10d655720a6507624d4e770cda6ecf8ea45aef0abb4dc85a2f150ddc5075e84e2ad39a9961e77c7567ba27d4522daf41f5ecf7645dca3f872665b2837764340ab1b80daa238f139566f5cc485226953bbc7ad0ccdd46bf56b296a1db95074c4a73b9a899b8043fc078ecc0133f1878521bf0dbc429f73635b36eedd21549e1b822f012eb8f2c749eacafc619ddcb864a831b018df0f5d74e93d"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x2, 0x2, 0x3}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x9, 0x7, 0x8, 0x2}, 0x4, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) 2.168196252s ago: executing program 5 (id=7522): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xf5af99b}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4ea1, 0x3, 'nq\x00', 0x9, 0x10000004, 0x8}, 0x2c) (async) r2 = socket$kcm(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}}], 0x1, 0x4000001) 2.058834602s ago: executing program 5 (id=7524): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x8040, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) tee(r0, r3, 0x9, 0x14) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) (async) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]}, 0x10) (async) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.398585405s ago: executing program 1 (id=7540): r0 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r0}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="000003e4fb92e70a10b538db2e91a5400000ea00"/32, @ANYRESDEC=r3, @ANYBLOB="03000000c310060020001280080001007369740014000280000300ac1414bb08000200ac14142d173d15c35d3267b8190f0ea59bd852492fdcaa3871b2af610546bd7a3236c31d19341c929356d9dd8031687d35f4a5f847ae7dc3c2348a81a7028ec3f42c9644320a08b294c19b1ab1cb18cf1bcf74e5559766409742e97e474e431fbc746437d8c7dc16e5e2568825dfbaac7956b7c80419a7c3845cf1b31f7760efbfa8f91d782693f52f", @ANYRES8=r2, @ANYRESDEC, @ANYRESDEC=r2], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.292741323s ago: executing program 1 (id=7542): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.22560493s ago: executing program 1 (id=7543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.165254041s ago: executing program 2 (id=7544): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x8, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r2, 0x7fff, 0xfffffffb, 0x8, 0x81, 0x9, 0x0, 0xc4c, {r1, @in={{0x2, 0x4e21, @broadcast}}, 0x6083, 0x8, 0x0, 0x5, 0x5}}, &(0x7f0000000240)=0xb0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x5, 0x7, 0xffffffffffffff8a}) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000480)={r4, &(0x7f0000000380)='\x00', 0x40200, &(0x7f00000003c0)={@_ha_fsid={[0xfffffffb, 0x5]}, {0x5, 0x81, 0x14, 0xffffffff}}, 0xf8f, &(0x7f0000000400), &(0x7f0000000440)=0x8}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000540)={0x3, 0x9b5d, "90d8d1", 0x80, 0x5}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0xff, 0x5, 0x10001, 0xc, 0x7f2c}, &(0x7f0000000640)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r5, 0x0, 0x0, 0xfff, 0x40, 0x6}, &(0x7f00000006c0)=0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000700)={0x2, 'veth0_vlan\x00', {0x2}, 0x1}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r3) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r6, 0x80705864, &(0x7f0000000880)) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r6, 0xc040583f, &(0x7f0000000980)={{@align=0x7, {0x4, 0x0, 0x15c, 0x7fff}}, {{[0x7fffffff, 0x3, 0x10, 0x2]}, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000900)=[{{@align=0x5, {0xd, 0x0, 0x9, 0x7}}, 0x2, 0x0, '(\x00'}, {{@align=0x7fffffff, {0x800, 0x0, 0xdb, 0x1}}, 0x4, 0x0, 'SEG6\x00'}]}}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000a00)=0x42, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000a40)={r5, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x1ef2, 0x7ff}, 0x90) r9 = accept4$inet6(r3, 0x0, &(0x7f0000000b00), 0x800) ioctl$NILFS_IOCTL_GET_SUSTAT(r9, 0x80306e85, &(0x7f0000000b40)) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r3}, 0x8) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) getpeername$packet(r3, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c00)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl1\x00', r11, 0x2f, 0x40, 0x6, 0x7f, 0x49, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x761, 0x10, 0x1ff, 0x3}}) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000d00)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000d40)={0x40, 0xfffd, 0x8, 0x7, 0x2, 0x2, 0x4, 0xb5, r2}, 0x20) 1.120685886s ago: executing program 1 (id=7545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002340)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84004}, 0x20000080) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x60}, 0x1, 0x7}, 0x801) 1.104439411s ago: executing program 5 (id=7546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x20, 0x40, 0x400, 0x80000001, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @local, {[@timestamp={0x44, 0x1c, 0x9, 0x0, 0xb, [0x74f714b7, 0x80000001, 0xc, 0xbfa9, 0x8, 0x5]}, @ssrr={0x89, 0x7, 0xbd, [@local]}, @ra={0x94, 0x4}, @generic={0x7, 0x3, "f3"}, @ssrr={0x89, 0xf, 0x8b, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0xfffffeeb, r5, 0x8, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x9, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008894}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x20, 0x40, 0x400, 0x80000001, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @local, {[@timestamp={0x44, 0x1c, 0x9, 0x0, 0xb, [0x74f714b7, 0x80000001, 0xc, 0xbfa9, 0x8, 0x5]}, @ssrr={0x89, 0x7, 0xbd, [@local]}, @ra={0x94, 0x4}, @generic={0x7, 0x3, "f3"}, @ssrr={0x89, 0xf, 0x8b, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0xfffffeeb, r5, 0x8, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x9, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{0xa}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008894}, 0x84) (async) 1.077666298s ago: executing program 2 (id=7547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000300)={0x3}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c9e3e260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00\x00\x00\x00x\x00\x00'], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x2, 0xff}) 1.065034245s ago: executing program 6 (id=7548): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x60}}, 0x8000) 988.653054ms ago: executing program 1 (id=7549): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async, rerun: 64) syz_emit_ethernet(0xbf, &(0x7f0000001280)={@multicast, @random="8a0a63cdec59", @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "143125", 0x85, 0x2, 0xff, @remote, @private1, {[@routing={0x6, 0x4, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}, @fragment={0x2c, 0x0, 0x47, 0x0, 0x0, 0x2, 0x64}], "cbc571637a1d4ab42470888b2b1e0aed26c2da5461feb3ae36fc4444e9d38e48b831e266cd3478b62f7212f027116a58f9d4f6400187bbc12c89f80c8330729b99f0c7c053837571821d30e3ad02e39657372896ab"}}}}}, 0x0) 978.065495ms ago: executing program 5 (id=7550): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000001000ffff27bf70000900000000000000", @ANYRESOCT=r2, @ANYBLOB="15010000009100002800128009000100766c0000000000000002001a0000001700000006000100010000000800050069b7ff8aa838efecb685d1a3cc7816d2dd03e276564d", @ANYRES32=r0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20040810}, 0x8048802) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x55, 0x101, 0xc, @mcast1, @mcast2, 0x8, 0x700, 0x10001, 0x5}}) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000005c0)=0x1040, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @multicast2}, &(0x7f00000004c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x7, 0x48, @mcast1, @mcast2, 0x700, 0x700, 0x2, 0x719d}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000940)={'syztnl0\x00', r2, 0x2f, 0x80, 0xb, 0x5, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2f, 0x7700, 0xfffffff8, 0x834}}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r0, @ANYBLOB="00002dbd7000ffdbdf25040000004c00018008000300020000001400020073797a6b616c6c657231000000000000140002007866726d30000000000000000000000008000100", @ANYRESOCT=r0, @ANYBLOB="0800015f", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="7800018008000300020000001400020073797a5f74756e000000000000000000140002006970766c616e31000000000000000000140002006261746164765f736c6176655f300000140002007767300000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="140002006e657464657673696d300000000000006000018008000300010000000800030002000000080003000100000008000300010000001400020064756d6d7930000000000000000000001400020065727370616e300000000000000000001400020076657468305f746f5f627269646765003800018014000200697036746e6c3000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000200000008000300020000002800018008000100", @ANYBLOB="6b9f058484752044e5ec79445d105fc713149c1cd44d18613ca5918c781f73c7399e652e69a5628a6099ed86afc5d75cc6990b5fe6d1754ab39b14c9f690195eddc5cf25fedbddd6862c0deb919d26f9ae2d59f1296ae6914452816972f9", @ANYBLOB="08000300020000001400020067656e65766531000000000000000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000005}, 0x2001) (async) r10 = socket$inet(0x2, 0xa, 0xd) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}, {&(0x7f00000000c0)="8064108e4009829d8fac1507cb5891996198b118e7b4fdf8e4a0f38f79c85582a4c836da004b9ab3a1e4e8f31dd75d9aa41bcd0702cd1fd503e632d1489239834f285b699dd8fb2805c31c51a908aed5a92cb779dddbfc106eeba79db10caadd5be7b826a8", 0x65}, {&(0x7f0000000140)="8bba91ac6123ae66192a46d3b97c3a91220d4da945f4da498e6bcda403d052138c819006e9cc3e9243698686bb98b0135559fe6d5f756a1b5bf2e581b8f7668b7f1518171e8d066ef187f75f54160e2a3ba4b55ee8336868b69380bf0aaab0182cdb576ff147e2d8ac6088b04a27d34c8a96919a10c162cb5a1eadb0539574ac2d71623c61d9b057252a29d9af6c34c5ac27a36803b4cfc8a082ddc945c3e1c893de0e0ee650ea45227c72f50236636915e8b6f64b6142154a785c14738a95f445eb768a22d54c6930c5839e0a6cf4178f956349a3ec5a", 0xd7}], 0x3, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x4040) (async) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r12, 0x107, 0x17, 0x0, &(0x7f0000000100)) getsockopt$inet_mreqsrc(r11, 0x0, 0x25, &(0x7f0000000000)={@remote, @multicast1}, &(0x7f0000000040)=0xc) setsockopt$inet_mreqsrc(r11, 0x0, 0x25, &(0x7f0000000080)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010102}, 0xc) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 861.581637ms ago: executing program 2 (id=7551): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000000)=0x9) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x294, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x206}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "35aa34c40de6b832a0a7954315120604100a06ce69d50ddb"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x101, @loopback, 0x24e3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private1, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x934}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "e900f3279b0c2ae0d6b1fe81bea08e9f667dec9fe65760e932d7b55f305c266e309aab965e4c4ed027b651405ad6f08dc6969ab69aaa38f2f84630df6281c35f98836cc1178d78d370ad4e3037c9c202"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e20, @private=0xa010101}}, 0x0, 0x0, 0x16, 0x0, "ff31708e603e9335033c17c1f8ecb4f7ac0139dd960379fa6710f3175b0229143c3c619a2df0d4aa88452b2e125624b35be3ad0f487375d677f0a6c01640072fda8b389c039546924425c763e1aaaf28"}, 0xd8) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640)=r5, 0x12) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000680)=0x9, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000006c0)) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000700)="04de098ff487a0a23e60067d1a858d9a32e2a2d7164f9b9f130e7d51cad933f91810bce0561439f720911577a65f50e0cce1721a3768334fd8e8d43b25ff4ad18abe7735139c63da1ec78592d848332f15f3ea90491ced41d6ce4bb8116c4d04df54b055561584ae2fd16369c663eac1963246b0ada5eee767ec4f6388f2a6e405a21bddc42dbf3bc6d4272a449a1bb84111a6bc18e2f29669a8310e1ea53a6a3793de9b81fbb986f400c98c0c99afcb05128cd925443fc5e3aa85a1c54c18714c1ae6eda03bf0bbc888761743750567bdd07fb292cc114f586c288d12a449ab") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, r8, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x6}, {0xe, 0x5}, {0x4, 0x4}, {0x8}, {0x4}, {0x7a, 0x7}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0x9, 0x7}, {0x4, 0x2}, {0x1, 0x6}, {0x4, 0x7}], "ce1ad4233606128c"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xb5, 0x3}, {0xc0, 0x1}, {0x4b, 0x1}, {0x6, 0x3}, {0x40, 0x3}, {0xcf}, {0x8, 0x3}, {0x60, 0x3}, {0x8, 0x2}, {0x7, 0x5}, {0xa}, {0x0, 0x3}, {0x9, 0x2}, {0x4, 0x4}, {0x1a, 0x1}, {0x7, 0x1}], "7588246382278e13"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xd, 0x2}, {0x3, 0x7}, {0xfd, 0x1}, {0x8c, 0x6}, {0x1}, {0x4, 0x3}, {0x2, 0x3}, {0xb}, {0x58, 0x2}, {0xa, 0x5}, {0xfd, 0x3}, {0x7, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0xd5, 0x5}, {0x0, 0x2}, {0x9, 0x3}, {0x80}], "dec6a48017ad4c27"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x57, 0x4}, {0x4b, 0x5}, {0x6, 0x7}, {0x9}, {0x29, 0x2}, {0x8, 0x3}, {0xdb, 0x4}, {0xff, 0x7}, {0x81, 0x7}, {0xa3, 0x4}, {0x2, 0x3}, {0xa, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x7, 0x7}, {0x4, 0x1}], "d4a80353d3241935"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x1e3bc0fd54ec2fec) syz_emit_ethernet(0x103, &(0x7f0000000a00)={@empty, @multicast, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x1ff, 0x0, 0x1}, {0xa3}, {0xff, 0x0, 0x1}, {0xc}, {}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}], @generic="6db152a9d96e1988f97a5728bf32e0ebb2346cc96f0060933cbecb29131d514c0f93456e9caa238036b3ef1d09fdba12d40c4a0e854fe59744df2fbacffe9965882612b2feaf991b75962f159fdd3ea93d6bc53360282a94992d387d26a673ef7458072315a95f2b1defb22f49cae671de691ff0e72a4a337aae4acf766c23525ca32c14bdbbf18c8f22ab3c54e1dc4db62501ad6976ec2e4960929adf2a00d86fe6cc94dd52737a069a8f6278b7e9bcae282f6d1c562c0429cc5175c00496a8b892eb71f55e036892aff9eb550aaff0f6"}}}}, &(0x7f0000000b40)={0x0, 0x1, [0x566, 0x496, 0xc0d, 0xf42]}) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000b80)) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000bc0)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000c00)={'mangle\x00', 0x0, [0x6, 0xfbd, 0x0, 0x6b16, 0x7]}, &(0x7f0000000c80)=0x54) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000d40)={@initdev, @multicast1, 0x0}, &(0x7f0000000d80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x71, 0x9, 0x6, 0x2, 0x40, @local, @private0, 0x20, 0x80, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xac, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x24004050) getpeername$llc(0xffffffffffffffff, &(0x7f0000000fc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001000)=0x10) 802.468264ms ago: executing program 6 (id=7552): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000080000000000000000000008d029dbe0f00000000000020"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000080000000000000000000008d029dbe0f00000000000020"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00fe000000000a961a00000100009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00fe000000000a961a00000100009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r5 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000280)={0x3}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x4000000a, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008}, 0xa000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000004c0)=@newtaction={0xd4, 0x30, 0x9, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_bpf={0xbc, 0x1, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x3e49, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x20000000, 0x9, 0x9f}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x3, 0xc, 0x8}, {0x9, 0xe, 0x24, 0x7fffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000004c0)=@newtaction={0xd4, 0x30, 0x9, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_bpf={0xbc, 0x1, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x3e49, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x20000000, 0x9, 0x9f}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x3, 0xc, 0x8}, {0x9, 0xe, 0x24, 0x7fffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x4, 0x1f, 0x80, 0x4, 0xd, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7800, 0x0, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000001b40)={&(0x7f00000006c0)={0x1464, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_WANTED={0x1130, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "21659afbea03030ab8dfea6c6cee4714585eb64df765ac470f1a475dc12a180b11a97474b047b10abe283764ca654c661775b4bc2212e74e38a99131030ab383fd58a324b9c94f3de2c590b5c8c80ddeca2eb364602026a0b69286ef78994074c833c25970401e09b96962ecc3aa6d72be17b55814965e82ce41eb310d05ce0d1810fb72000377564c84bdb3f2f91277f2197f7f2098a43f6109f152166a3734bf3777f1ae4f0d9efc43f58eac494284788ab69723f4b837f414f8dd7161e0796a98bf7993b7a57bfa8a54c5a0707e263951f8483b87850d53a4fab746757130b9c6855ae312fdc31b94df8bb1f26031b50fcc8dcef35f2ccd770751d6a8f3d16929fe0580722cb6dc41034128ad584bac5f8ac00b8e0bac7f2825c039b44c8504c71acf91eb2b0965d3ca3da9ae1b491779d2d71f2fd89113154e8bba8a9f0f2fd5e30703394d8417ed695874413dc5ed6836553bb675ace942ce0fd2851ccad21cbf9f315d306c339357c89ed78046622cfdc4903785db7fb2f9e0fb3a0be2ec08be0b15d6371e883c75233491cea2968ed6ab40ad021bf99a5e4d0fbe1bdd9df9ba9e1ce440000e2e1a6cebdc49c611f7d568874b9d8f03bd32ce1dfeee503e24c402ccd15a5fb1d0d9d89af8e3bccc9448defe0290644163ecd0e64ddfd3d1af9aa3e40db6e815f695e847d7491467f1cf1d2159ccd39b0a57c47d0080780521ee7df588574c8409c87c10ed764b33c15c3eacc971ee6b1c1623d2935f2e597b2085545eea2d633b482e4e9a2e15368d7ab292bfcb96e68be08d4c67ff1e4626431c932ffb81587e79327db0bc7535f9cf59026d4e0338ef400769175d5f2a876321583ec02e8bd3ae3bfd1a997528896ab604dda43f877af119f2b7e392f0d6a1ad0c41414404b716c44548a02358a1c5e01dfc2470c81a6e792ee815cbfa39b28f748febe4e18a5026151d9de60c515e1abf4285f793941e92052b5111f9d45146a9a55457f966aaf6798a70ad68f47cd9992b5428a09d02e7de6805fbcdc70648e27659dce8fe16dec9f8c5d1ec502fbb3b884d17f10748ac527f0c084cdfe27d6d2ef7c8169099040dc084f803bcb81272aebf4b617ce639ddf167e0e4f23af0f551456c78c0e1b79451ba988051c45b0cda6b3dd15df28ea4c0cae8dbbce75dc59083e72ac6169280ac98b52e12b41110f25cc9f95fcf50da7181269f34ff50cc2e232a443c3068b4c2630abeb5476faf64ea4057b194e8f04a9f9e3d4258fca130e60a1352b89ac80e00fb0cc2aec1dde4d355595242d04ee458cff83ba8c81a6b803b5d3172e2ba6cad0233318eed46ea3bd426af9922ab32e76f02cbf08f78f0afb98aea5dbc6a8672b33df699e17d2f81d409f346a530846c5db527ff91b0d04adc6516c03779ac0a9c89a37346f5e4925277474c259de4d663cba6ef4ba07c895b460b7333889b451d00224769c80bbefb86495fb702fc11c31dc8be85e3cc0d711c3a558032c1ad34742cd139f285b686cf6590c70573248b481bf5a869c3c3813367463966edd531d9aad909b791631ef1828a949200259dd61d90aa9a673fe0d2c1dce03d50bdb5e7fc72ab1a3e1d8f465b5f03fc13f1bc85de3a9ccd99914e7b9fdfe3821e60d62cb8f5ebbb6dc6cd95f4e00401c72c462150df41f0d8662cd3d384c0810a5a8dc8c895ab35686fb92a9d38dcfa18cbd88a9752e72b0718c6a8d5eb973d45a80ff96d81f46d1c2f37337b0450744d18628adea4a522bf73858b20b78cedd0a7c4fe7a081d8ed44012f6d38fef208e7805d53c33e7d5e1c973dcc76d62423acbe2b429c1af8e25731cf0649d795fdaac3ef15168f10f1d62b8613040d84173a979b899a257b038f5ae0e1f2133e938bc7bfb7b75b3af4c629f85e54359c0cb4511dc77d63030b6dbb5887c1398b972f62210bc284638af5a7aaf8b87985517f929598f2f02585ab2a05db9fabad1a431a1a722ec68fc5faa964f2813f354b7ab710e4a3a467739d763ab6e2e83a44c073b921416ba7b3e54f193ac8660b19a7d5b58d662ef344ca15f8ca3235f320330fac1c71861da5992b4f65b06ec9e5d22898dd106024b16476f783cbddbe2dce4e5525169222554264389eb16cc5e74492525389f8189f614cdd8cef1057045a0a000a74322890e109e4369b64a5ccd91ab37642979d111b5f02276ea19952aaacdada4b9399f3ddefd074d210800d18eea358a32e62190f16baba8d6705daed05fa1b72b5228fb145ac5cf579ae0f4d4451f6fc16b98419ed9e6d20be03e962e10b8ccc376acba1221c0fcb09c34fe90f6455825f052f7abe0c40e42899466db16f2181413cf66cbcfdab3392c7b7fd8a6ce785cdfedb3e679fbdff019677943f48c04f2a30a3aba0bcaf2a894717a7ee1e66b1dcd4cdf5c46741e401960d7385378e880fc56732d7420688361afefb818f63473339ff7e8d90f555f03008f1aa868c86ed39bdd64c30f57203ffa42b2109e483d248fec21bc3769f018948bbb6a750479905af022e7a05c8e7210cbd368699652798af8c83b3c7c46b06227a61b438a4b5581ead85dc60e0e275e3d3aa33a2f992656cf7412790b9e9556193318c8d93055a594167d8b6234c4410573cfdaa9d5b927690d0b2e54be772958f9a9825256974c61b57ba154344e1b0979e23a7a7b519c20d603855e750f76e13c8247ae4a350db4af0c1104e784fc3ee093af956fc54bc415d9eefce7236437fbd421432c0c2b50526c5e3e39b1e4ac8a206c6234225ae5ef4288de8b6107679d8f9d0eb2567ca65a0cd1fbb695305a0092e3a8ebd95609148b2d1b235506e0905f3be29c6f924a8d38022349b3baac0129f2a20fe50d734010313ddbc48c017e4424b403b962e4ddb568bdcaa1b211e61440d7f3aedcfb4faf8bc4bcc07541c6953081f82dd31dacbe974269e50e85b134ec498c976cc859509a84e9f00342238df5a452bf7a7c12fefe90d7fc0a9f3e5951685bb94bb962ee4b7c68a509e1a674761dcb5fc837075175e49e1a45ba04310daccc28a80152d8f18b6dca78c5d72687f3b31b8f7a1ddd51a66676e004cb710d79946bc5ff1f5ab5e7754532cd9d814bdbe798c0601fdaa84597c717387d1a44e2aec44ec929383e6a1f774813bc43ec2fd9e1dd6d06b03e387bbf5f985ee2e8c3fe044d27871e1a14844bfc0c70f3aaf7bbba4021d8ef3e67489ed5df865fd898c2892279c38817f23cb02dfda08d2de5461920c77f0b03d9d14c3e0be364b042815099bf2a51d4a9d62b78ea645ffdc1d34a210a7070170f256bb02d5abcc9a3b59824bcf7bc14f6466974292e1afc5b1d2874d18b68a8bac4e333b653c1d532c8e1ab9c384968eea86b88c50ab35dcaf8b5aa6ea1034bdaef7871dd4a0f0ac9975557907343cdbb950142ebd547bb59014d12815f18e6ffb2cc08b2681256211a09eb038d97e9ef3cbd8f131d944b3dcf3900db7dabbde9abb74aa69c772a21940f01ce6c4e2f67bcc01f10e2ff6c9a7afb260344ca8c73b83b81c1f5f7bd68817501b3708b0fb447f1a19b1ba59132f80cb9fc34982302988189dc9f20881abd077f55fac7eb258aadd6d0b4a8a205a4edda75e522c750a3215cb71e0cf06207a1fe0f0a07e98e3ad9b4db9a80726398fef6f3cbfc4c8b3e0785797c4707e89a295435959d8c3b642c4c408d959f651347e2b2f4f9e05da90015765221bd0b402a9cb4e1bda6837f50e4b1fb7775d8ec2bc68852a10732905a7d6ed94b8a5179d5b0f91d2cc7079b64ba37727b9103f66a73044f0a8637a0a387f420c29048f16e166cd1f99dcff0b60f2b3f5eb6a8e09586fd028b27c0ec465ccd6d6efda6f71af362cac928258fb599f01a1295f5805c47081fe132ce81017a2342f0ab39c223fd79db3655fa3e310059e87dea718410f01f91c232762b28f66c0d281f259ebe0cd957ea809847cb4f265debfb6fb27e679f30a20c82eda1e654eaf88a51c9f2b603ad248ce7c8eb3419fb0a3bca44e50f04c04940644e997112be83437168e5267e11e610d1d63a13f56c273fc3a3da4a2d24d304d4d93a0bd3a0662d61ef36c1a53b0bec1c0dd6feb6048006042560f21bc0e49678d0be5cc716acbaf72885ebf0da264add5d0845e2ced60c5e9b9adf206a353bed734b9214f33b1f469b1a266ac16300cca015ccb60e1c1dad70653fa2d479b461b2236c62ed15907f8a8b31bf476a79cf2c740b6681ca39f65ba189946615a4189e0092e3ff25db2c4bd8edba4bed9dc7d0c4ed4f6bfe49ad87d5a45c92c13508c646e3696b3e9e057b6f147db77ab16f33ba3c13015866ef5f9e9a898414d42c4f9171eb9e870c8f7fb34cd3ed5f09c8420db2c8535792054df0f5fbce3a98452249ad2a10b873bd3f46988090cffe8856ef358db84fb63c7e21e15b1735e9a9535f16b216f441fdca233045f410f98f82b00abf7b436bd14ec9aba7c8025c8f3d6a8e1dc2f5e20ea62370fc23a973d151859af748880f52f61f78b7ec26b188e4e282c229d5bfa687f0d074bef670a019bf8c1fa993a0338e7dcc1a63a1c1aacdb68b1fd7cc285ed80c1a205f7bfd33b297d567da63ee7dab501384614e9d092aa9e2e5b10c1bb2cb0c9ba6c02d1d3f7c5837045f9128d297bedc3cc5d1243d6b57b80d12fb463a1b9e4175562f9026bed57223c722e67e9a016c1608df3b9db58f88a982feff5e0952016452ad3963e1e8828cfe347d8cecc6bc6bb5202d8bcabc31f4b8ff9155284a69d1312434d67623a395a7fb29f7cd2f662942c34629b04d5c43b5d87554fa8afa384598cd3075a286749e1164f47c32c261e80092e7306804f5b7069535c405cd59cb54ea247b72848927febf27f3b5283046640ec16bc398587a8cf977371c9e8a9dfdf888c3f7d8eee969996281d21df548c3cb4ada24932d85d7f5906a4f2308264fbdcf81cc6c909fded04dbeca28da05f5f3cef10e5feb14945b17029640edabab2bfa12708bb0bbbd6ab74dab2d06dcfc1b908b0f6c2b407fd7c3ecbd289da0c59ec553370dc72a2fa9b6a05b4016ef0a90434a2a385f3958a27009ccc1b48182af6711c1f60973bbf45aff92e7677af6c6d76473cc82b1da60c864d981075852e7fd50b70c9cf202ad182acda6fb92672cfa1c5a8d0fd34501a466e2ac1da4f43379e3ec615d9c1cc7d5f394147f4d19c41dc2e78d25fbaaa1e3a7c806afc0f1c9d5f4e231574d490be226ba009b9464990d6e299c94429bbbfe6d8c35b80044ec65b1a05050a830c878991978b6bf87a74be7daaaeee32b676485b217110542524dfae5e30e70f1a9435916f6eb0a83dffb3910e92f8582ed76712ec74c8478c745548b05a77423e651377b4d2d145c3410dd9432b5867a64f2a81d20ebfd4c9d3450182e16bfe1b26540b9d88c3e61706b7bdf57e594538d81c3ba7c9f91ed3e42da1f9212c227d54dc01d5022021e8cd911f4a6a7158f6dc0669b39a895983642309c782c13daacf786411546d97d90535509c51e97393dc9b76c43fc2a238dead08f7e5531bac49ba6d3f8b5fcdf91e8096c95e35c9b7ad128f5f9672d867da50645738c5978368daa6434bccfee7d949225d7ea57de9f342c8f8b32c0c93b103111be43906b92892dd3b6787c466d9cb20de406291e85c2029352bd4e8db71dee6e4e4800471fe3964813ff12982982b6fedb9b1505276e49276fc23ff5a85b6dbe9a102e44aae02c995f0db0933a3208ece480336e9b1e6ed505eb2b0de5f808b5831c1f20"}, @ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "aec8977859e345b4eeb4711cb463c1ffdcfc31f137e86ff6c465a04c4cec95829584bc3051390ba6a71e3fd8e3010bfccd2e199f4a9da562657f47bb6c93a115a5b128c2529cc8b8abea9d99b5afdeb50c7742e48a63d1ef4e41f0dd24f7823307bb66d71509eeb7ad"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "51f57a640f5d735ef35ee119d3c72566ba419b662c6b8d0eb7eccd4c9ec1caed05f7ca01d38b1e99ecc4586abe2092899110f96bdaf15a6cafc05189136b8022f1f3785717139fd712ab7a047c934af3a22bc7ac9df7d4f1dc6d1d65e75628e520e74d284ac20426d90316840a53dcacea42176d62525f519df8ebd3593c8cb1fce63438e68bc572d358ccd2b3a4664787846398dcd719ab0016915d3df2"}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x288, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "5e4fde528e3b1d177ce3bec3e2496542dcc3b398a197132045fe40f6a81bb1df8321eaecb88a8a99c485599851a78b980c125c159db8f20b94368e7e9100da0013b1c7dc7c73450a9f0a42d711bd59032aceae3645cfb64126d794e7e813524c4d2db7cc648fee39fe98c9bd1ef7c71b9dc21b6e507e402655b7b2bf7808edc32930d62be059c7c26f7000433dd2ae06845513dcb47c83cd61"}, @ETHTOOL_A_BITSET_MASK={0xe7, 0x5, "483e7370eb23dacea6be3aabf8b76066ab36bfe8c88aa4d9522af0463b21fca5ad676a1babacdceab2d583cc8f39d807bbcd0541f2a26d8ec22a1766299b314639239208abda21e9ad358fd2fca0d715ed66acdd4b591d5a2d3efa47acb798734cbbb136b5ecf62d67f9ba3f5d2135a13b0b7b0442148d1719486e1aa732d90dcae3280fa02e232c98dc754f7a014fc3cf1e5c05ecf7b458b8b264cff63eb40d0bdfc77eefb7b35da43457882b464aabc59dac6777ba327fbd4c8395a5a8010c9af408f3a5b878d771a7feed9dd59fc126761b951f54dec79a81a243c9322795181117"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0f3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "0fc3be633783579eaf1600dc2a7bebfea4f5c2cf6bef48d92e17b8a380cec61ff2e9b4e661bd28a21a2e8bb5a79368c5419c707c78dd307b3bff6afe3a7386a520622c392d8911d39ae5c4d71e8f2e860bccfa511de0fad11e49138c06a22e7e8a187d4fd7db"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1431}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x62}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}]}, 0x1464}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r12 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r12, 0x89e0, &(0x7f0000000040)=0xfff7) 533.482885ms ago: executing program 6 (id=7553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040084) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000005c0)={{r0}, "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"}) 532.826152ms ago: executing program 2 (id=7554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x400000000000004) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) 489.745302ms ago: executing program 5 (id=7555): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) listen(r1, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) syz_init_net_socket$bt_l2cap(0x1f, 0x19a67134dd40893b, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x19a67134dd40893b, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000040000050027000600000008000834bc49254d8d8d70781515507d2e0000000400"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000040000050027000600000008000834bc49254d8d8d70781515507d2e0000000400"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x8919, &(0x7f0000000000)=0x10) socket$inet6(0xa, 0x80003, 0x0) (async) r7 = socket$inet6(0xa, 0x80003, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="b5e729bd7000fedbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="8e83051ec94b09f95b492e27f4585f47522d451f0a2b7f890a0a41e1098168df986f6720fe0000000000000000d4155427cd14310e2d2d0d2b4ebe6b5e18a87148768196d9fb0227f074a04f599ae14b4af1c2236bd105af85c974f73f4530c25bedece2a3f4f8d8c20e01601b7bdea05738102401100d"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f00000001c0)) (async) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f00000001c0)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000bbfc010000000000000000000000000000000107944e240000020020203a000000", @ANYRES32=0x0, @ANYRES8=r7, @ANYBLOB="7f000001000000000000000000000000000004d46c00000080000001000000000000000000000000000000000000000005000000000000000600000000000000ffff0000000000001c25080000000000050000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcb18e2d960000002abd700000000000020000fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000bbfc010000000000000000000000000000000107944e240000020020203a000000", @ANYRES32=0x0, @ANYRES8=r7, @ANYBLOB="7f000001000000000000000000000000000004d46c00000080000001000000000000000000000000000000000000000005000000000000000600000000000000ffff0000000000001c25080000000000050000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcb18e2d960000002abd700000000000020000fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="81e7a76642bebf010000001ec65ef9e5ad040200f2c8dc1b00000018000180c4f584004a6cdf31f4e11400020073717a5f74756e0022"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 444.269192ms ago: executing program 2 (id=7556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="080002000000000008000500"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 400.195695ms ago: executing program 6 (id=7557): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x23, &(0x7f0000000140)={0x0, {{0x29, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 239.209097ms ago: executing program 6 (id=7558): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x409, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 220.793253ms ago: executing program 2 (id=7559): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0) listen(r0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000140)=0x1, 0x4) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f00000002c0), 0x69) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000080)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000094) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$key(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x2, 0x15, 0x3f, 0x8, 0x6, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x3, 0xdb, 0xd4, 0x1, 0x60000001}, @sadb_x_sa2={0x2, 0x13, 0xde, 0x0, 0x0, 0x70bd29}]}, 0x30}}, 0x880) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r7) r8 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f00000000c0)={0x20000000}) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000003c0)={r2, &(0x7f0000000280)='lo\x00', 0x80002, &(0x7f0000000300)={@align=0x3ff, {0x1, 0x3ff, 0x10001, 0x3b3}}, 0xfffffffe, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x8c}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x2}, {0x48}, {0x30}, {0x9, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 31.699531ms ago: executing program 1 (id=7560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) (async) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000140)={0x8, 'syz_tun\x00', {'team_slave_0\x00'}, 0x400}) (async) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xdbb8, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x6}], 0x10}}], 0x2, 0xc88c4) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 0s ago: executing program 6 (id=7561): r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x98, 0x168, 0xfeffffff, 0x98, 0x98, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0xc40, @port=0x4e28}}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r11 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf03027c00000c000180"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000390400000000000000df50bd22ee4ed345ce000000265b", @ANYBLOB="6309af3f831d8ea89a366bb79a24dc531653b4d5fa398ff0fd427ead2e6fa3533e7251877cc8a9a628afc814e0da332ce473a01276d0db1ef2bc9114b6026dd1b10e7b", @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) kernel console output (not intermixed with test programs): p_validate: mode dependency failed, not supported in mode balance-alb(6) [ 382.063044][T26656] bond0 (unregistering): Released all slaves [ 382.073720][T26667] openvswitch: netlink: Key 11 has unexpected len 13 expected 2 [ 382.227399][ T5623] Bluetooth: hci5: command tx timeout [ 382.275143][T26673] bond1 (unregistering): Released all slaves [ 382.500978][T26695] netlink: 'syz.3.5950': attribute type 10 has an invalid length. [ 382.542762][T26695] team0: Port device dummy0 added [ 382.574601][T26545] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.585091][T26545] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.596046][T26545] bridge_slave_0: entered allmulticast mode [ 382.604632][T26545] bridge_slave_0: entered promiscuous mode [ 382.683833][T26545] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.703343][T26545] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.720646][T26545] bridge_slave_1: entered allmulticast mode [ 382.758354][T26545] bridge_slave_1: entered promiscuous mode [ 382.771116][T26708] __nla_validate_parse: 7 callbacks suppressed [ 382.771143][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5953'. [ 382.810347][T26704] tipc: Started in network mode [ 382.816022][T26704] tipc: Node identity 9659ee51e2d3, cluster identity 4711 [ 382.824622][T26704] tipc: Enabled bearer , priority 0 [ 382.874498][T26707] syzkaller0: entered promiscuous mode [ 382.882804][T26707] syzkaller0: entered allmulticast mode [ 382.889849][T26707] tipc: Resetting bearer [ 382.925891][T26545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.963261][T26714] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 382.993842][T26714] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 383.003753][T26714] gretap3: entered promiscuous mode [ 383.009625][T26714] gretap3: entered allmulticast mode [ 383.020922][T26696] tipc: Resetting bearer [ 383.154607][T26696] tipc: Disabling bearer [ 383.175647][T26545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.232944][T26545] team0: Port device team_slave_0 added [ 383.264592][T26545] team0: Port device team_slave_1 added [ 383.271667][T26738] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5961'. [ 383.294186][T26739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5961'. [ 383.335453][T26545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.371144][T26545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.460587][T26545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.476749][T26545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.501565][T26545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.536907][T26545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.682801][T26545] hsr_slave_0: entered promiscuous mode [ 383.708719][T26545] hsr_slave_1: entered promiscuous mode [ 383.716955][T26545] debugfs: 'hsr0' already exists in 'hsr' [ 383.723049][T26545] Cannot create hsr debugfs directory [ 383.819042][T26771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5970'. [ 383.973187][T26545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.015499][T26545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.046798][T26545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.148480][T26545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.190414][T26545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.210254][T26545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.287719][T26808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5983'. [ 384.304695][T26545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.319360][ T5623] Bluetooth: hci5: command tx timeout [ 384.322948][T26545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.354111][T26545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.504571][T26545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.549634][T26545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.578156][T26545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.847410][T26851] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.206824][T26545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.216085][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.224382][T26545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.246710][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.270267][T26545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.305098][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.325387][T17393] smc: removing ib device syz0 [ 385.349087][T26545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.382103][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.384507][T17393] smbdirect: ib_dev[syz0] removed [ 385.544892][T26893] netlink: 'syz.1.6002': attribute type 3 has an invalid length. [ 385.619378][T26545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.653992][T26545] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.662823][T26895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6004'. [ 385.684990][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.692158][ T9104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.744639][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.751840][ T9104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.800192][T26545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.833406][T26545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.301032][T26916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6009'. [ 386.321592][T26925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6011'. [ 386.389842][ T49] Bluetooth: hci5: command tx timeout [ 386.521079][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6011'. [ 386.874393][T26954] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6019'. [ 387.050632][T26954] xt_CT: No such helper "snmp_trap" [ 387.076098][T26545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.245645][T26972] netlink: 'syz.1.6023': attribute type 4 has an invalid length. [ 387.279040][T26972] netlink: 'syz.1.6023': attribute type 1 has an invalid length. [ 387.569120][T26545] veth0_vlan: entered promiscuous mode [ 387.615528][T26545] veth1_vlan: entered promiscuous mode [ 387.644970][T26545] veth0_macvtap: entered promiscuous mode [ 387.674436][T26545] veth1_macvtap: entered promiscuous mode [ 387.731379][T26545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.767895][T26545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.802971][ T9106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.836042][ T9106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.877151][ T9106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.903543][ T9106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.064302][T21781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.098644][T21781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.173712][T17392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.193455][T17392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.329087][T27011] __nla_validate_parse: 1 callbacks suppressed [ 388.329106][T27011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6035'. [ 388.467396][ T49] Bluetooth: hci5: command tx timeout [ 388.583959][T27026] netlink: 'syz.1.6039': attribute type 1 has an invalid length. [ 388.611909][T27026] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6039'. [ 388.614641][T27018] syzkaller1: entered promiscuous mode [ 388.657649][T27018] syzkaller1: entered allmulticast mode [ 388.990277][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.999780][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.007563][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.015155][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.024194][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.130390][T27049] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 389.400062][T27071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6049'. [ 389.521914][T27071] bond20: option xmit_hash_policy: invalid value (64) [ 389.540568][T27071] bond20 (unregistering): Released all slaves [ 389.669513][T27046] lo speed is unknown, defaulting to 1000 [ 389.814956][T27103] openvswitch: netlink: IP tunnel TTL not specified. [ 389.846026][T27106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6059'. [ 389.853536][T27103] x_tables: unsorted underflow at hook 2 [ 390.108889][T27046] xfrm0 speed is unknown, defaulting to 1000 [ 390.203119][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6065'. [ 390.210156][T27134] tc_dump_action: action bad kind [ 390.257364][T27132] veth0_macvtap: left promiscuous mode [ 390.473577][T27144] syzkaller0: entered promiscuous mode [ 390.481746][T27144] syzkaller0: entered allmulticast mode [ 390.640274][T27166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.682428][T27164] gretap1: entered promiscuous mode [ 390.701124][T27164] batman_adv: batadv0: Adding interface: gretap1 [ 390.726032][T27164] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.754422][T27164] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 391.107262][ T5623] Bluetooth: hci1: command tx timeout [ 391.179345][T27198] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6083'. [ 391.311068][T27207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 391.313581][T27207] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6085'. [ 391.344375][T27203] netlink: 'syz.1.6084': attribute type 13 has an invalid length. [ 391.472222][T27046] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.489105][T27046] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.498586][T27046] bridge_slave_0: entered allmulticast mode [ 391.505586][T27046] bridge_slave_0: entered promiscuous mode [ 391.515073][T27046] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.522656][T27046] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.532293][T27046] bridge_slave_1: entered allmulticast mode [ 391.540487][T27046] bridge_slave_1: entered promiscuous mode [ 391.646554][T27046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.676576][T27046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.729011][T27046] team0: Port device team_slave_0 added [ 391.742087][T27046] team0: Port device team_slave_1 added [ 391.754095][T27230] syzkaller1: entered promiscuous mode [ 391.801232][T27046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.808691][T27046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.835400][T27046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.847512][T27046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.858695][T27241] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6093'. [ 391.868376][T27046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.868405][T27046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.900181][T27046] hsr_slave_0: entered promiscuous mode [ 391.921766][T27046] hsr_slave_1: entered promiscuous mode [ 391.929664][T27046] debugfs: 'hsr0' already exists in 'hsr' [ 391.935548][T27046] Cannot create hsr debugfs directory [ 391.973615][T27179] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 391.994038][T27179] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 392.103299][T27179] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 392.123551][T27179] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 392.199685][T27254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6098'. [ 392.221345][T27179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.232140][T27046] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.244579][T27179] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 392.277944][T27046] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.363996][T27046] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.412059][T27046] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.439437][T27266] netlink: 'syz.4.6100': attribute type 1 has an invalid length. [ 392.469475][T27266] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6100'. [ 392.481318][T27046] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.495978][T27266] NCSI netlink: No device for ifindex 0 [ 392.515029][T27046] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.613589][T27046] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.651826][T27046] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.865841][T27287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.905102][T27293] Cannot find add_set index 0 as target [ 392.911968][T27046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.940882][T27046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.990935][T27046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 393.039208][T27046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.064890][T27046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 393.095660][T27046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.108830][T27046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 393.119830][T27046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.281092][T27046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.342716][T27330] __nla_validate_parse: 6 callbacks suppressed [ 393.342733][T27330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6119'. [ 393.359487][T27328] bond1: option min_links: invalid value (18446744073709551614) [ 393.359521][T27328] bond1: option min_links: allowed values 0 - 2147483647 [ 393.375830][T27328] bond1 (unregistering): Released all slaves [ 393.444658][T27046] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.458508][T21782] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.465639][T21782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.548843][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.555989][ T9106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.899133][T27380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6129'. [ 393.923994][T27380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6129'. [ 393.955516][T27380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6129'. [ 394.412792][T27418] ip6t_srh: unknown srh invflags 4000 [ 394.485428][T27427] lo: Caught tx_queue_len zero misconfig [ 394.550241][T27046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.599818][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6142'. [ 394.651181][T27435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.719783][T27436] netlink: 264 bytes leftover after parsing attributes in process `syz.2.6142'. [ 394.735870][T27435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.765450][T27447] openvswitch: netlink: Missing key (keys=40, expected=80) [ 394.780425][T27447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.829761][T27452] erspan0: entered promiscuous mode [ 394.835523][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6145'. [ 395.086086][T27046] veth0_vlan: entered promiscuous mode [ 395.110607][T27046] veth1_vlan: entered promiscuous mode [ 395.161700][T27474] netlink: 'syz.1.6151': attribute type 4 has an invalid length. [ 395.173066][T27046] veth0_macvtap: entered promiscuous mode [ 395.179231][T27474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6151'. [ 395.199269][T27046] veth1_macvtap: entered promiscuous mode [ 395.240785][T27046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.281807][T27480] netlink: 'syz.3.6152': attribute type 1 has an invalid length. [ 395.291661][T27480] netlink: 'syz.3.6152': attribute type 2 has an invalid length. [ 395.298726][T27046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.308676][T27480] netlink: 'syz.3.6152': attribute type 1 has an invalid length. [ 395.313985][ T9111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.328282][T27480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6152'. [ 395.344797][ T9111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.370463][ T9111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.401956][ T9111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.503060][ T9106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.527878][ T9106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.585017][T27493] team0: No ports can be present during mode change [ 395.593372][T21782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.614094][T21782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.661799][T27493] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 395.686859][T27493] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.031320][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.040435][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.051419][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.064692][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.073738][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.237808][T27531] syzkaller0: entered promiscuous mode [ 396.243696][T27531] syzkaller0: entered allmulticast mode [ 396.275692][T27533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6168'. [ 396.285858][T27533] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 396.434506][T27542] netlink: 'syz.3.6170': attribute type 1 has an invalid length. [ 396.494215][T27542] bond1: entered promiscuous mode [ 396.499932][T27542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.518142][T27539] syzkaller1: entered promiscuous mode [ 396.523657][T27539] syzkaller1: entered allmulticast mode [ 396.628118][T27550] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 396.639403][T27550] bond2 (unregistering): Released all slaves [ 396.654787][T27517] lo speed is unknown, defaulting to 1000 [ 396.936649][T27517] xfrm0 speed is unknown, defaulting to 1000 [ 397.118782][T27582] tipc: Started in network mode [ 397.125788][T27582] tipc: Node identity ffffffff, cluster identity 4711 [ 397.134930][T27582] tipc: Node number set to 4294967295 [ 397.141535][T27571] lo speed is unknown, defaulting to 1000 [ 397.175636][T27571] lo speed is unknown, defaulting to 1000 [ 397.221250][T27571] lo speed is unknown, defaulting to 1000 [ 397.239958][T27571] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 397.255957][T27571] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 397.279747][T27571] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 397.300569][T27571] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 397.333030][T27588] sctp: [Deprecated]: syz.3.6184 (pid 27588) Use of int in maxseg socket option. [ 397.333030][T27588] Use struct sctp_assoc_value instead [ 397.349407][T27571] lo speed is unknown, defaulting to 1000 [ 397.366592][T27571] lo speed is unknown, defaulting to 1000 [ 397.373995][T27571] lo speed is unknown, defaulting to 1000 [ 397.380572][T27571] lo speed is unknown, defaulting to 1000 [ 397.390348][T27571] lo speed is unknown, defaulting to 1000 [ 397.417619][T27571] lo speed is unknown, defaulting to 1000 [ 397.452785][T27571] lo speed is unknown, defaulting to 1000 [ 397.461955][T27571] lo speed is unknown, defaulting to 1000 [ 397.473152][T27601] openvswitch: netlink: Flow key attr not present in new flow. [ 397.510724][T27571] lo speed is unknown, defaulting to 1000 [ 397.533245][T27571] lo speed is unknown, defaulting to 1000 [ 397.578866][T27571] lo speed is unknown, defaulting to 1000 [ 397.613361][T27571] lo speed is unknown, defaulting to 1000 [ 397.683663][T27571] lo speed is unknown, defaulting to 1000 [ 397.748264][T27517] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.762872][T27517] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.770882][T27517] bridge_slave_0: entered allmulticast mode [ 397.789228][T27517] bridge_slave_0: entered promiscuous mode [ 397.838936][T27517] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.871743][T27517] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.903720][T27517] bridge_slave_1: entered allmulticast mode [ 397.916663][T27517] bridge_slave_1: entered promiscuous mode [ 398.048981][T27517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.084278][T27517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.114549][T27638] netlink: 'syz.3.6194': attribute type 13 has an invalid length. [ 398.135555][T27517] team0: Port device team_slave_0 added [ 398.146360][ T49] Bluetooth: hci3: command tx timeout [ 398.153746][T27638] macsec0: entered allmulticast mode [ 398.182640][T27517] team0: Port device team_slave_1 added [ 398.190938][T27639] netlink: 'syz.5.6193': attribute type 63 has an invalid length. [ 398.205517][T27517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.213259][T27517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.242184][T27517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.257005][T27517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.278295][T27517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.316087][T27642] sctp: [Deprecated]: syz.3.6194 (pid 27642) Use of int in max_burst socket option deprecated. [ 398.316087][T27642] Use struct sctp_assoc_value instead [ 398.343079][T27640] sctp: [Deprecated]: syz.3.6194 (pid 27640) Use of int in max_burst socket option deprecated. [ 398.343079][T27640] Use struct sctp_assoc_value instead [ 398.364053][T27517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.420931][ T808] bridge0: entered promiscuous mode [ 398.529726][T27517] hsr_slave_0: entered promiscuous mode [ 398.552762][T27517] hsr_slave_1: entered promiscuous mode [ 398.581535][T27517] debugfs: 'hsr0' already exists in 'hsr' [ 398.597923][T27670] __nla_validate_parse: 7 callbacks suppressed [ 398.597939][T27670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6199'. [ 398.617543][T27517] Cannot create hsr debugfs directory [ 398.677523][T27664] netlink: 'syz.5.6199': attribute type 1 has an invalid length. [ 398.790680][T17392] bond0: (slave bond_slave_0): interface is now down [ 398.809007][T17392] bond0: (slave bond_slave_1): interface is now down [ 398.930665][T27517] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.950660][T27517] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.965188][T27690] netlink: 'syz.5.6206': attribute type 1 has an invalid length. [ 398.990393][T27690] netlink: 'syz.5.6206': attribute type 1 has an invalid length. [ 399.052694][T27517] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.075438][T27517] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.227431][T27702] bond21: option all_slaves_active: invalid value (222) [ 399.250244][T27702] bond21 (unregistering): Released all slaves [ 399.278676][T27517] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.291261][T27517] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.352262][T27517] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.406508][T27517] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.423119][T27709] tipc: Enabling of bearer rejected, failed to enable media [ 399.533975][T27716] bond0: (slave bond_slave_1): Releasing backup interface [ 399.549498][T27517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.566817][T27517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.587634][T27517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.620586][T27517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.647660][T27517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.663415][T27517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.669861][T27719] netlink: 'syz.3.6213': attribute type 1 has an invalid length. [ 399.687606][T27517] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 399.698995][T27517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.703410][T27719] netlink: 'syz.3.6213': attribute type 1 has an invalid length. [ 399.885622][T27729] mac80211_hwsim hwsim72 ÿ: renamed from wlan1 (while UP) [ 399.990288][T27517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.002465][T27733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6217'. [ 400.144382][T27736] veth0_to_team: entered promiscuous mode [ 400.164849][ T5724] lo speed is unknown, defaulting to 1000 [ 400.173961][T27517] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.205554][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.213078][ T9106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.228931][ T49] Bluetooth: hci3: command tx timeout [ 400.279286][T17392] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.286854][T17392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.312416][ T1889] block nbd5: Connection timed out, retrying (0/2 alive) [ 400.320417][ T1889] block nbd5: Connection timed out, retrying (0/2 alive) [ 400.327715][ T1889] block nbd5: Connection timed out, retrying (0/2 alive) [ 400.334791][ T1889] block nbd5: Connection timed out, retrying (0/2 alive) [ 400.343329][ T1889] block nbd5: Dead connection, failed to find a fallback [ 400.351040][ T1889] block nbd5: shutting down sockets [ 400.356437][ T1889] blk_print_req_error: 138 callbacks suppressed [ 400.356451][ T1889] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.372886][ T1889] buffer_io_error: 138 callbacks suppressed [ 400.372981][ T1889] Buffer I/O error on dev nbd5, logical block 3, async page read [ 400.387514][ T1889] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.397583][ T1889] Buffer I/O error on dev nbd5, logical block 2, async page read [ 400.405357][ T1889] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.414834][ T1889] Buffer I/O error on dev nbd5, logical block 1, async page read [ 400.423300][ T1889] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.433226][ T1889] Buffer I/O error on dev nbd5, logical block 0, async page read [ 400.441494][ T5609] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.453427][ T5609] Buffer I/O error on dev nbd5, logical block 0, async page read [ 400.474393][ T5609] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.492119][ T5609] Buffer I/O error on dev nbd5, logical block 1, async page read [ 400.512791][ T5609] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.530792][ T5609] Buffer I/O error on dev nbd5, logical block 2, async page read [ 400.547114][ T5609] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.566540][ T5609] Buffer I/O error on dev nbd5, logical block 3, async page read [ 400.586933][ T5609] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.607278][ T5609] Buffer I/O error on dev nbd5, logical block 0, async page read [ 400.618894][ T5609] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 400.661856][ T5609] Buffer I/O error on dev nbd5, logical block 1, async page read [ 400.712529][ T5609] ldm_validate_partition_table(): Disk read failed. [ 400.750462][ T5609] Dev nbd5: unable to read RDB block 0 [ 400.775174][ T5609] nbd5: unable to read partition table [ 400.822516][ T5609] ldm_validate_partition_table(): Disk read failed. [ 400.871209][ T5609] Dev nbd5: unable to read RDB block 0 [ 400.921711][ T5609] nbd5: unable to read partition table [ 400.959471][T27763] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6225'. [ 400.994077][T27763] Cannot find set identified by id 0 to match [ 401.351255][T17392] bond0: (slave bond_slave_0): interface is now down [ 401.375917][T17392] bond0: (slave bond_slave_1): interface is now down [ 401.395220][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6231'. [ 401.637806][T27517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.708233][T27796] netlink: 'syz.3.6234': attribute type 1 has an invalid length. [ 401.739670][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6234'. [ 401.759643][T27517] veth0_vlan: entered promiscuous mode [ 401.781328][T27796] netlink: 'syz.3.6234': attribute type 1 has an invalid length. [ 401.809230][T27517] veth1_vlan: entered promiscuous mode [ 401.901630][T27517] veth0_macvtap: entered promiscuous mode [ 401.921295][T27517] veth1_macvtap: entered promiscuous mode [ 401.959604][T27517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.000993][T27517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.022922][T17393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.039944][T17393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.063812][T17393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.104302][T17393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.198515][T27809] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6238'. [ 402.203443][ T9106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.217947][ T9106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.291000][ T9111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.307702][ T49] Bluetooth: hci3: command tx timeout [ 402.308197][ T9111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.400476][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6240'. [ 402.421344][T27817] smc: net device team0 applied user defined pnetid SYZ2 [ 402.426345][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6240'. [ 402.472114][T27816] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 402.510355][T27820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6162'. [ 402.545132][T27820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6162'. [ 402.709948][T27825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.993265][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.002272][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.010265][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.019674][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.027461][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.237949][T16064] syz_tun (unregistering): left allmulticast mode [ 403.269331][T16064] syz_tun (unregistering): left promiscuous mode [ 403.285370][T16064] bridge0: port 4(syz_tun) entered disabled state [ 403.368599][T27852] syzkaller0: entered promiscuous mode [ 403.384628][T27852] syzkaller0: entered allmulticast mode [ 403.465334][T27860] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 403.587669][T27837] lo speed is unknown, defaulting to 1000 [ 403.698685][T27865] __nla_validate_parse: 1 callbacks suppressed [ 403.698715][T27865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6253'. [ 403.746356][T27865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6253'. [ 403.770742][T27837] xfrm0 speed is unknown, defaulting to 1000 [ 403.898426][T27837] lo speed is unknown, defaulting to 1000 [ 403.907876][T21781] bond0: (slave bond_slave_0): interface is now down [ 403.919363][T21781] bond0: (slave bond_slave_1): interface is now down [ 404.181794][T17397] team0: left allmulticast mode [ 404.192898][T17397] team_slave_0: left allmulticast mode [ 404.199018][T17397] team_slave_1: left allmulticast mode [ 404.204671][T17397] geneve1: left allmulticast mode [ 404.211754][T17397] team0: left promiscuous mode [ 404.217465][T17397] team_slave_0: left promiscuous mode [ 404.223096][T17397] team_slave_1: left promiscuous mode [ 404.230376][T17397] geneve1: left promiscuous mode [ 404.235980][T17397] bridge0: port 3(team0) entered disabled state [ 404.244300][T17397] bridge_slave_1: left allmulticast mode [ 404.251425][T17397] bridge_slave_1: left promiscuous mode [ 404.257621][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.266523][T17397] bridge_slave_0: left allmulticast mode [ 404.284438][T17397] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.304910][T17397] gre0: left allmulticast mode [ 404.315720][T17397] pimreg3: left allmulticast mode [ 404.325084][T17397] tipc: Resetting bearer [ 404.386401][ T49] Bluetooth: hci3: command tx timeout [ 404.479183][T17397] tipc: Disabling bearer [ 404.521327][T17397] team0: Port device geneve1 removed [ 404.544374][T17397] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 404.553527][T17397] bridge2 (unregistering): left promiscuous mode [ 404.568774][T17397] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 404.589627][T17397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.599126][T17397] bond_slave_0: left promiscuous mode [ 404.608235][T17397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.619127][T17397] bond_slave_1: left promiscuous mode [ 404.625923][T17397] bond0 (unregistering): Released all slaves [ 404.635800][T17397] bond1 (unregistering): Released all slaves [ 404.648844][T17397] bond2 (unregistering): Released all slaves [ 404.660111][T17397] bond4 (unregistering): Released all slaves [ 404.672097][T17397] bond3 (unregistering): Released all slaves [ 404.683921][T17397] bond5 (unregistering): Released all slaves [ 404.704538][T17397] bond6 (unregistering): Released all slaves [ 404.731105][T17397] bond7 (unregistering): Released all slaves [ 404.750270][T17397] bond8 (unregistering): Released all slaves [ 404.765155][T17397] bond9 (unregistering): Released all slaves [ 404.777091][T27837] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.784229][T27837] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.795266][T27837] bridge_slave_0: entered allmulticast mode [ 404.803855][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6256'. [ 404.810727][T27837] bridge_slave_0: entered promiscuous mode [ 404.844670][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6256'. [ 404.892946][T27837] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.911993][T27837] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.920580][T27837] bridge_slave_1: entered allmulticast mode [ 404.928602][T27837] bridge_slave_1: entered promiscuous mode [ 404.952818][T17397] : left promiscuous mode [ 405.011539][T27837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.032387][T27837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.064096][T17397] tipc: Disabling bearer [ 405.073092][T27896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6261'. [ 405.085430][T17397] tipc: Left network mode [ 405.097071][T17397] IPVS: stopping master sync thread 10346 ... [ 405.108557][ T49] Bluetooth: hci4: command tx timeout [ 405.115725][T27837] team0: Port device team_slave_0 added [ 405.137058][T27896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.165033][T27837] team0: Port device team_slave_1 added [ 405.191836][T27896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6261'. [ 405.225245][T27905] netlink: 'syz.5.6263': attribute type 1 has an invalid length. [ 405.239441][T27901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.248678][T27901] bond2: (slave bond3): Enslaving as an active interface with an up link [ 405.272516][T27896] bond2 (unregistering): (slave bond3): Releasing backup interface [ 405.283116][T27896] bond2 (unregistering): Released all slaves [ 405.333461][T27837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.340878][T27837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.368491][T27837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.380724][T27837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.388736][T27837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.419447][T27837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.520190][T27837] hsr_slave_0: entered promiscuous mode [ 405.528705][T27917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6267'. [ 405.538879][T27837] hsr_slave_1: entered promiscuous mode [ 405.539384][T27837] debugfs: 'hsr0' already exists in 'hsr' [ 405.539400][T27837] Cannot create hsr debugfs directory [ 405.552879][T27914] syzkaller0: entered promiscuous mode [ 405.552900][T27914] syzkaller0: entered allmulticast mode [ 405.744720][T27920] netlink: 'syz.5.6268': attribute type 1 has an invalid length. [ 405.754486][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6268'. [ 405.769653][T27920] netlink: 'syz.5.6268': attribute type 1 has an invalid length. [ 405.931097][T27928] sctp: [Deprecated]: syz.3.6271 (pid 27928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.931097][T27928] Use struct sctp_sack_info instead [ 406.061401][T27939] sctp: [Deprecated]: syz.5.6273 (pid 27939) Use of int in max_burst socket option. [ 406.061401][T27939] Use struct sctp_assoc_value instead [ 406.138889][T27837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 406.168795][T27943] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6272'. [ 406.196432][T27837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.236060][T27837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 406.299146][T27837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.329384][T27837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 406.363960][T27837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.429890][T27837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.452121][T27837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.490077][T17392] bond0: (slave bond_slave_0): interface is now down [ 406.499111][T17392] bond0: (slave bond_slave_1): interface is now down [ 406.505194][T27950] IPVS: Scheduler module ip_vs_sip not found [ 406.512136][T17392] bond0: now running without any active interface! [ 406.541428][T17397] hsr_slave_0: left promiscuous mode [ 406.548619][T17397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.556024][T17397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.573879][T17397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.597418][T17397] veth1_to_batadv: left allmulticast mode [ 406.610137][T17397] veth1_to_batadv: left promiscuous mode [ 406.616023][T17397] veth1_to_team: left allmulticast mode [ 406.622755][T17397] veth1_to_team: left promiscuous mode [ 406.628928][T17397] veth1_macvtap: left promiscuous mode [ 406.634426][T17397] veth0_macvtap: left promiscuous mode [ 406.683104][T17397] team0 (unregistering): Port device macvlan3 removed [ 406.704129][T17397] team0 (unregistering): Port device macvlan2 removed [ 406.756034][T17397] team0 (unregistering): Port device team_slave_1 removed [ 406.775153][T17397] team0 (unregistering): Port device team_slave_0 removed [ 406.793105][T27968] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6278'. [ 406.928555][T27976] 8021q: VLANs not supported on gre0 [ 406.951245][T27976] 8021q: VLANs not supported on gre0 [ 406.997631][T27980] netlink: 'syz.3.6280': attribute type 1 has an invalid length. [ 407.003049][T27837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.045539][T27980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.098135][T27837] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.125888][T17392] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.133065][T17392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.185889][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.193046][ T9106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.204815][ T49] Bluetooth: hci4: command tx timeout [ 407.689698][T28030] netlink: 'syz.5.6291': attribute type 24 has an invalid length. [ 407.852654][ T9] IPVS: starting estimator thread 0... [ 407.920183][T27837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.967155][T28042] IPVS: using max 46 ests per chain, 110400 per kthread [ 408.093771][T28049] bond4: Invalid ad_actor_system MAC address. [ 408.116330][T28049] bond4: option ad_actor_system: invalid value (1) [ 408.124564][T28049] bond4 (unregistering): Released all slaves [ 408.158024][T27837] veth0_vlan: entered promiscuous mode [ 408.187415][T27837] veth1_vlan: entered promiscuous mode [ 408.274502][T27837] veth0_macvtap: entered promiscuous mode [ 408.307920][T27837] veth1_macvtap: entered promiscuous mode [ 408.371911][T27837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.405696][T27837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.459168][T21781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.474473][T28066] bridge0: port 3(syz_tun) entered blocking state [ 408.484794][T28066] bridge0: port 3(syz_tun) entered disabled state [ 408.492821][T28066] syz_tun: entered allmulticast mode [ 408.501006][T28066] syz_tun: entered promiscuous mode [ 408.510038][T28066] bridge0: port 3(syz_tun) entered blocking state [ 408.516601][T28066] bridge0: port 3(syz_tun) entered forwarding state [ 408.525698][T21781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.543133][T21781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.554748][T21781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.709469][ T9106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.737798][ T9106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.772020][T21781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.781222][T21781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.010765][T28091] __nla_validate_parse: 11 callbacks suppressed [ 409.010792][T28091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6309'. [ 409.036074][T28091] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 409.082634][T28097] netlink: 'syz.5.6308': attribute type 4 has an invalid length. [ 409.091748][T28097] netlink: 'syz.5.6308': attribute type 1 has an invalid length. [ 409.101891][T28097] netlink: 'syz.5.6308': attribute type 3 has an invalid length. [ 409.115470][T28097] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6308'. [ 409.132010][T28097] nbd: couldn't find a device at index 131077 [ 409.223534][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.232916][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.241120][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.250141][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.259173][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.271713][ T5623] Bluetooth: hci4: command tx timeout [ 409.323808][T28110] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6313'. [ 409.705425][T28100] lo speed is unknown, defaulting to 1000 [ 409.798258][T28100] xfrm0 speed is unknown, defaulting to 1000 [ 409.887068][T28100] lo speed is unknown, defaulting to 1000 [ 410.070494][T28100] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.077893][T28100] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.085164][T28100] bridge_slave_0: entered allmulticast mode [ 410.093169][T28100] bridge_slave_0: entered promiscuous mode [ 410.102867][T28100] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.110528][T28100] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.119178][T28100] bridge_slave_1: entered allmulticast mode [ 410.126481][T28100] bridge_slave_1: entered promiscuous mode [ 410.153332][T28100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.165616][T28100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.192982][T28100] team0: Port device team_slave_0 added [ 410.200849][T28100] team0: Port device team_slave_1 added [ 410.223142][T28100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.230815][T28100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.260025][T28100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.273286][T28100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.280546][T28100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.308373][T28100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.347453][T28100] hsr_slave_0: entered promiscuous mode [ 410.353865][T28100] hsr_slave_1: entered promiscuous mode [ 410.360889][T28100] debugfs: 'hsr0' already exists in 'hsr' [ 410.368236][T28100] Cannot create hsr debugfs directory [ 410.583642][T28155] netlink: 'syz.5.6321': attribute type 1 has an invalid length. [ 410.608955][T28155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.628942][T28155] veth3: entered allmulticast mode [ 411.346357][ T49] Bluetooth: hci4: command tx timeout [ 411.346634][ T5623] Bluetooth: hci0: command tx timeout [ 412.394630][T28113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.415243][T28100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 412.478887][T28100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.505163][T28100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 412.537536][T28100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.545034][T28173] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6325'. [ 412.571250][T28173] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6325'. [ 412.575138][T28180] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 412.599015][T28100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 412.621948][T28181] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 412.636834][T28183] netlink: 'syz.1.6329': attribute type 1 has an invalid length. [ 412.645779][T28181] netlink: 'syz.5.6326': attribute type 2 has an invalid length. [ 412.680808][T28100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.689210][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6326'. [ 412.700696][T28100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.725691][T28100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.754514][T28187] 8021q: VLANs not supported on wg2 [ 412.806454][T28187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6329'. [ 412.863568][T28187] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 412.905463][T28187] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 412.915629][T28187] gretap1: entered promiscuous mode [ 412.915873][T28204] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6335'. [ 412.922828][T28187] gretap1: entered allmulticast mode [ 412.943801][T28195] bond0: option ad_select: unable to set because the bond device is up [ 413.091746][T28218] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6337'. [ 413.234652][T28223] syzkaller0: entered promiscuous mode [ 413.252711][T28223] syzkaller0: entered allmulticast mode [ 413.293294][T28100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.320268][T28223] tipc: Started in network mode [ 413.338863][T28223] tipc: Node identity fe13137d07a3, cluster identity 4711 [ 413.379068][T28223] tipc: Enabled bearer , priority 0 [ 413.402060][T28240] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6343'. [ 413.423110][T28221] tipc: Resetting bearer [ 413.434136][ T5623] Bluetooth: hci0: command tx timeout [ 413.463288][T28221] tipc: Disabling bearer [ 413.551077][T28100] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.630429][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.637785][ T9104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.683165][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.690342][ T9104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.715159][T28255] netlink: 'syz.1.6347': attribute type 1 has an invalid length. [ 414.079478][T28271] bond1: entered promiscuous mode [ 414.093110][T28271] bond1: entered allmulticast mode [ 414.243015][T28293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.703494][T28332] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 414.824794][T28100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.995011][T28354] __nla_validate_parse: 1 callbacks suppressed [ 414.995039][T28354] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6372'. [ 415.108024][T28100] veth0_vlan: entered promiscuous mode [ 415.144731][T28100] veth1_vlan: entered promiscuous mode [ 415.205183][T28100] veth0_macvtap: entered promiscuous mode [ 415.225923][T28100] veth1_macvtap: entered promiscuous mode [ 415.245256][T28100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.275579][T28100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.303197][ T1124] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.324657][T17392] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.355950][T17392] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.363032][T28372] tipc: Failed to remove unknown binding: 66,0,0/0:1442819559/1442819560 [ 415.370083][T17392] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.390439][T28372] tipc: Failed to remove unknown binding: 66,0,0/0:1442819559/1442819560 [ 415.506307][ T5623] Bluetooth: hci0: command tx timeout [ 417.588277][ T49] Bluetooth: hci0: command tx timeout [ 417.678371][T28329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.764769][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.786086][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.798756][T28406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6384'. [ 417.807638][T28406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6384'. [ 417.862602][T17392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.876401][T17392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.930456][T28419] nbd: nbd3 already in use [ 418.093908][T28430] netlink: 'syz.6.6310': attribute type 13 has an invalid length. [ 418.110996][T28430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6310'. [ 418.164794][T21781] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.182840][T28437] netlink: 71 bytes leftover after parsing attributes in process `syz.6.6310'. [ 418.193169][T21781] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.211067][T21781] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.235549][T21781] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.307455][T28433] lo speed is unknown, defaulting to 1000 [ 418.323949][T28443] netlink: 'syz.3.6394': attribute type 49 has an invalid length. [ 418.367914][T28446] openvswitch: netlink: IPv4 tun info is not correct [ 418.391815][T28446] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6395'. [ 418.652791][T28433] xfrm0 speed is unknown, defaulting to 1000 [ 418.841212][T28470] netlink: 'syz.3.6400': attribute type 32 has an invalid length. [ 418.900448][T28470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6400'. [ 419.013844][T28493] netlink: 412 bytes leftover after parsing attributes in process `syz.1.6404'. [ 419.078148][T28470] bond4: option coupled_control: invalid value (2) [ 419.095545][T28498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6406'. [ 419.114925][T28470] bond4 (unregistering): Released all slaves [ 419.282832][T28506] xt_hashlimit: size too large, truncated to 1048576 [ 419.344462][T28507] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.400597][T28507] bridge_slave_0 (unregistering): left allmulticast mode [ 419.437525][T28507] bridge_slave_0 (unregistering): left promiscuous mode [ 419.467683][T28507] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.520345][T28433] lo speed is unknown, defaulting to 1000 [ 419.591822][T28526] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6412'. [ 419.801180][T28539] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 420.417552][T28571] __nla_validate_parse: 1 callbacks suppressed [ 420.417568][T28571] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6426'. [ 420.473306][T28578] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6427'. [ 420.515556][T28581] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6429'. [ 420.607930][T28584] bond2: Unable to set up delay as MII monitoring is disabled [ 420.638354][T28584] bond2 (unregistering): Released all slaves [ 420.797671][T28595] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 420.880011][T28605] syzkaller0: entered promiscuous mode [ 420.897509][T28605] syzkaller0: entered allmulticast mode [ 420.911518][T28606] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6436'. [ 421.475855][T28656] openvswitch: netlink: IP tunnel dst address not specified [ 421.637720][T28662] netlink: 'syz.6.6453': attribute type 11 has an invalid length. [ 421.672045][T28668] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6454'. [ 421.687722][T28662] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6453'. [ 421.712162][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6453'. [ 421.747170][T28670] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6453'. [ 421.778623][T28672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6455'. [ 421.803295][T28677] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 421.855363][T28682] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6457'. [ 422.286214][T28716] bond4: option lp_interval: invalid value (0) [ 422.292488][T28716] bond4: option lp_interval: allowed values 1 - 2147483647 [ 422.350452][T28716] bond4 (unregistering): Released all slaves [ 422.388347][T28715] ip6gre1: entered allmulticast mode [ 425.147899][T28705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.561238][T28763] netlink: 'syz.3.6482': attribute type 5 has an invalid length. [ 425.580740][T28765] __nla_validate_parse: 3 callbacks suppressed [ 425.580758][T28765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6484'. [ 425.602542][T28765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6484'. [ 425.886026][T28773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6487'. [ 425.898752][T28777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6487'. [ 426.022250][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6489'. [ 426.321148][T28798] netlink: 'syz.5.6494': attribute type 1 has an invalid length. [ 426.330222][T28798] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6494'. [ 426.344297][T28798] netlink: 'syz.5.6494': attribute type 4 has an invalid length. [ 426.353263][T28798] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6494'. [ 426.434967][T28800] Bluetooth: MGMT ver 1.23 [ 426.578423][T28809] xt_bpf: check failed: parse error [ 426.613781][T28813] netlink: 'syz.6.6498': attribute type 12 has an invalid length. [ 426.664464][T28813] netlink: 'syz.6.6498': attribute type 29 has an invalid length. [ 426.719238][T28813] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6498'. [ 426.784976][T28813] netlink: 59 bytes leftover after parsing attributes in process `syz.6.6498'. [ 426.834125][T28816] netlink: 'syz.6.6498': attribute type 12 has an invalid length. [ 426.867139][T28816] netlink: 'syz.6.6498': attribute type 29 has an invalid length. [ 426.900958][T28816] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6498'. [ 427.180561][T28849] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.264288][T28849] bridge_slave_0 (unregistering): left allmulticast mode [ 427.279766][T28849] bridge_slave_0 (unregistering): left promiscuous mode [ 427.305232][T28849] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.130643][T28880] syzkaller0: entered promiscuous mode [ 428.140180][T28880] syzkaller0: entered allmulticast mode [ 428.193248][T28880] syzkaller0: create flow: hash 4167310181 index 1 [ 428.435570][T28879] syzkaller0: delete flow: hash 4167310181 index 1 [ 428.641162][T28747] Set syz1 is full, maxelem 65536 reached [ 428.686053][T28915] Bluetooth: MGMT ver 1.23 [ 428.706446][T28903] netlink: 'syz.3.6525': attribute type 4 has an invalid length. [ 428.765360][T28907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.795411][T28917] xt_hashlimit: size too large, truncated to 1048576 [ 428.864426][T28926] netlink: 'syz.1.6531': attribute type 1 has an invalid length. [ 428.989430][T28932] netlink: 'syz.6.6533': attribute type 13 has an invalid length. [ 429.340076][T28951] bond4 (unregistering): Released all slaves [ 429.513973][T28968] Cannot find del_set index 3 as target [ 429.527694][T28972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.866089][T28991] Cannot find set identified by id 0 to match [ 430.375229][T29018] openvswitch: netlink: Invalid VLAN frame [ 430.460749][T29024] bridge4: entered promiscuous mode [ 430.467246][T29024] bridge4: entered allmulticast mode [ 430.572979][T29028] validate_nla: 3 callbacks suppressed [ 430.572996][T29028] netlink: 'syz.5.6563': attribute type 64 has an invalid length. [ 430.602878][T29028] __nla_validate_parse: 17 callbacks suppressed [ 430.602892][T29028] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6563'. [ 430.756731][T29039] sctp: [Deprecated]: syz.1.6567 (pid 29039) Use of int in maxseg socket option. [ 430.756731][T29039] Use struct sctp_assoc_value instead [ 431.073205][T29060] netlink: 'syz.1.6576': attribute type 17 has an invalid length. [ 431.093419][T29065] netlink: 'syz.5.6578': attribute type 10 has an invalid length. [ 431.116300][T29068] netlink: 'syz.5.6578': attribute type 10 has an invalid length. [ 431.133679][T29060] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.6576'. [ 431.172363][T29068] team0: Port device dummy0 added [ 431.291205][T29075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6581'. [ 431.432907][T29085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6584'. [ 431.473060][T29091] netlink: 'syz.5.6586': attribute type 11 has an invalid length. [ 431.542964][T29099] netlink: 'syz.6.6585': attribute type 1 has an invalid length. [ 431.736517][T29112] tipc: Started in network mode [ 431.746624][T29112] tipc: Node identity ca2687eb7d34, cluster identity 4711 [ 431.763794][T29112] tipc: Enabled bearer , priority 0 [ 431.873535][T29112] syzkaller0: entered promiscuous mode [ 431.881195][T29112] syzkaller0: entered allmulticast mode [ 431.888100][T29124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6593'. [ 431.888209][T29112] tipc: Resetting bearer [ 431.990915][T29131] netlink: 'syz.1.6596': attribute type 10 has an invalid length. [ 432.000204][T29131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6596'. [ 432.018816][T29131] dummy0: entered promiscuous mode [ 432.285758][T17392] tipc: Resetting bearer [ 432.479981][T29107] tipc: Resetting bearer [ 432.599865][T29173] netlink: 'syz.1.6611': attribute type 4 has an invalid length. [ 432.608444][T29173] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6611'. [ 432.637965][T29107] tipc: Disabling bearer [ 432.671834][T29173] .`: renamed from bond0 (while UP) [ 432.857153][T29188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6612'. [ 432.912110][T29191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6612'. [ 432.925440][T29188] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6612'. [ 433.013851][T29191] geneve2: entered promiscuous mode [ 433.255996][T29223] atomic_op ffff888084ec5998 conn xmit_atomic 0000000000000000 [ 433.427744][T29238] syzkaller0: entered promiscuous mode [ 433.438538][T29238] syzkaller0: entered allmulticast mode [ 433.801105][ T5623] block nbd7: Receive control failed (result -107) [ 433.836303][T29243] nbd7: detected capacity change from 0 to 63 [ 433.849016][ T49] block nbd7: Receive control failed (result -32) [ 433.849660][ T5609] block nbd7: Send control failed (result -32) [ 433.878180][ T5609] block nbd7: Request send failed, requeueing [ 433.884851][ T1889] block nbd7: Dead connection, failed to find a fallback [ 433.893206][ T1889] block nbd7: shutting down sockets [ 433.898602][ T1889] blk_print_req_error: 138 callbacks suppressed [ 433.898618][ T1889] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.914114][ T1889] buffer_io_error: 138 callbacks suppressed [ 433.914129][ T1889] Buffer I/O error on dev nbd7, logical block 0, async page read [ 433.941287][ T5609] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.943025][T29257] netlink: 'syz.2.6635': attribute type 12 has an invalid length. [ 433.953332][ T5609] Buffer I/O error on dev nbd7, logical block 1, async page read [ 433.967560][ T5609] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.977750][ T5609] Buffer I/O error on dev nbd7, logical block 2, async page read [ 433.985563][ T5609] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.995621][ T5609] Buffer I/O error on dev nbd7, logical block 3, async page read [ 434.003491][ T5609] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.025201][ T5609] Buffer I/O error on dev nbd7, logical block 0, async page read [ 434.044678][ T5609] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.050012][T29257] netlink: 'syz.2.6635': attribute type 29 has an invalid length. [ 434.054500][ T5609] Buffer I/O error on dev nbd7, logical block 1, async page read [ 434.072730][ T5609] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.086676][ T5609] Buffer I/O error on dev nbd7, logical block 2, async page read [ 434.094507][ T5609] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.108593][ T5609] Buffer I/O error on dev nbd7, logical block 3, async page read [ 434.113484][T29267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.119548][ T5609] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.139332][ T5609] Buffer I/O error on dev nbd7, logical block 0, async page read [ 434.160486][ T5609] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.186888][ T5609] Buffer I/O error on dev nbd7, logical block 1, async page read [ 434.232068][ T5609] ldm_validate_partition_table(): Disk read failed. [ 434.274424][ T5609] Dev nbd7: unable to read RDB block 0 [ 434.301389][ T5609] nbd7: unable to read partition table [ 434.333586][ T5609] ldm_validate_partition_table(): Disk read failed. [ 434.348862][ T5609] Dev nbd7: unable to read RDB block 0 [ 434.359127][ T5609] nbd7: unable to read partition table [ 434.523941][T29294] syzkaller0: entered promiscuous mode [ 434.532963][T29294] syzkaller0: entered allmulticast mode [ 434.609405][T29301] SET target dimension over the limit! [ 434.929857][T29310] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 434.941854][T29310] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 435.310674][T29343] veth0_to_bond: default FDB implementation only supports local addresses [ 435.358542][T11910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.429707][T29344] veth1_macvtap: entered promiscuous mode [ 435.435708][T29344] veth1_macvtap: entered allmulticast mode [ 435.488292][T29344] batman_adv: batadv0: Interface activated: gretap1 [ 435.500492][T29344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.516941][T29344] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 435.550600][ T1124] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 435.582088][ T1124] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.600870][ T1124] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 435.640454][T29367] validate_nla: 2 callbacks suppressed [ 435.640481][T29367] netlink: 'syz.5.6669': attribute type 9 has an invalid length. [ 435.641603][T29366] __nla_validate_parse: 13 callbacks suppressed [ 435.641617][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6670'. [ 435.720776][T29372] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6671'. [ 435.732354][T29370] bond1 (unregistering): Released all slaves [ 435.758218][T29376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.779626][T29376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.827081][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.904877][T29390] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.917742][T29390] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.932899][T29390] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.946277][T29390] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.979034][T29366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.140945][T29403] netlink: 576 bytes leftover after parsing attributes in process `syz.3.6678'. [ 436.183414][T29405] netlink: 67 bytes leftover after parsing attributes in process `syz.5.6679'. [ 436.324414][T29412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6680'. [ 436.386799][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.427215][T29416] syzkaller0: entered promiscuous mode [ 436.442959][T29416] syzkaller0: entered allmulticast mode [ 436.590385][T29427] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6686'. [ 436.624071][T29431] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6685'. [ 436.646535][T29431] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6685'. [ 436.658006][T29427] veth0_vlan: mtu less than device minimum [ 436.664068][T29432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6687'. [ 436.845001][T29450] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6693'. [ 436.976897][T29461] openvswitch: netlink: IP tunnel dst address not specified [ 437.252939][T29477] smc: removing net device team0 with user defined pnetid SYZ2 [ 437.301927][T29477] team0 (unregistering): Port device team_slave_0 removed [ 437.361509][T29489] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 437.363837][T29477] team0 (unregistering): Port device team_slave_1 removed [ 437.401765][T29477] team0 (unregistering): Port device dummy0 removed [ 437.462382][T29494] netlink: 'syz.1.6704': attribute type 2 has an invalid length. [ 437.479850][T29476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.644611][T29510] syzkaller0: entered promiscuous mode [ 437.651248][T29510] syzkaller0: entered allmulticast mode [ 437.777290][T29516] netlink: 'syz.3.6709': attribute type 21 has an invalid length. [ 437.785809][T29516] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.864124][T29519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.039376][T29537] netlink: 'syz.1.6714': attribute type 1 has an invalid length. [ 438.134759][T29544] netlink: 'syz.2.6717': attribute type 1 has an invalid length. [ 438.165890][T29547] netlink: 'syz.2.6717': attribute type 1 has an invalid length. [ 438.180489][T29537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.277434][T29547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.358950][T29553] bond2: (slave ip6erspan0): making interface the new active one [ 438.381774][T29556] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 438.403511][T29553] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 438.431327][T29556] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 438.575380][T29569] syzkaller0: entered promiscuous mode [ 438.592292][T29569] syzkaller0: entered allmulticast mode [ 438.637701][T29568] veth0_to_batadv: entered promiscuous mode [ 438.649563][T29568] veth0_to_batadv: entered allmulticast mode [ 438.885454][T29591] Cannot find add_set index 0 as target [ 438.913315][T29591] syzkaller1: entered promiscuous mode [ 438.922726][T29591] syzkaller1: entered allmulticast mode [ 439.068437][T29603] veth0_to_bridge: entered promiscuous mode [ 439.204607][T29606] veth0_to_bridge: left promiscuous mode [ 439.426587][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 439.444175][ T5724] IPVS: starting estimator thread 0... [ 439.542175][T29639] bond2: entered promiscuous mode [ 439.551967][T29640] IPVS: using max 51 ests per chain, 122400 per kthread [ 439.596450][T29639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.608052][T17577] udevd[17577]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 439.625160][T29647] syzkaller0: entered promiscuous mode [ 439.635681][ T5609] udevd[5609]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 439.651748][T29647] syzkaller0: entered allmulticast mode [ 439.666614][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.763310][T29662] netlink: 'syz.2.6751': attribute type 13 has an invalid length. [ 439.777135][T29662] veth1_macvtap: left promiscuous mode [ 439.791759][T29662] macsec0: entered allmulticast mode [ 439.832565][T29670] netlink: 'syz.3.6752': attribute type 1 has an invalid length. [ 439.999127][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 440.190486][T29703] netlink: 'syz.1.6759': attribute type 1 has an invalid length. [ 440.340693][T29703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.402042][T29705] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 440.412162][T29707] dummy0: left promiscuous mode [ 440.416310][T29703] netlink: 'syz.1.6759': attribute type 10 has an invalid length. [ 440.444181][T29718] net_ratelimit: 7 callbacks suppressed [ 440.444198][T29718] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 440.473254][T29707] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 440.483778][T29718] xt_l2tp: invalid flags combination: 8 [ 440.523889][T29703] dummy0: entered promiscuous mode [ 440.547573][ T9106] bond1: (slave dummy0): link status up again after 0 ms [ 440.555728][T11910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.558159][ T9106] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 440.589480][T29703] bond1: (slave dummy0): Removing an active aggregator [ 440.604967][ T9106] bond1: (slave dummy0): link status up again after 0 ms [ 440.633836][T29703] bond1: (slave dummy0): Releasing backup interface [ 440.657421][T29718] syzkaller1: entered promiscuous mode [ 440.671264][T29718] syzkaller1: entered allmulticast mode [ 440.771524][T29728] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 440.809310][T29728] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 440.833135][T29734] __nla_validate_parse: 22 callbacks suppressed [ 440.833151][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6769'. [ 440.866497][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6769'. [ 441.023606][T29747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6774'. [ 441.120158][T29754] xt_hashlimit: size too large, truncated to 1048576 [ 441.129643][T29747] bridge5: port 1(veth7) entered blocking state [ 441.148622][T29747] bridge5: port 1(veth7) entered disabled state [ 441.171507][T29747] veth7: entered allmulticast mode [ 441.188433][T29747] veth7: entered promiscuous mode [ 441.204462][T29758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6777'. [ 441.204693][T29755] bridge5: port 2(veth0_to_bond) entered blocking state [ 441.232700][T29755] bridge5: port 2(veth0_to_bond) entered disabled state [ 441.242672][T29762] x_tables: duplicate underflow at hook 1 [ 441.255221][T29755] veth0_to_bond: entered allmulticast mode [ 441.263476][T29755] veth0_to_bond: entered promiscuous mode [ 441.278360][T29755] bridge5: port 2(veth0_to_bond) entered blocking state [ 441.281277][T29761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6779'. [ 441.285435][T29755] bridge5: port 2(veth0_to_bond) entered forwarding state [ 441.348174][T29761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6779'. [ 441.364959][T29767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6777'. [ 441.588312][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.908380][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.027882][T29806] validate_nla: 1 callbacks suppressed [ 442.027901][T29806] netlink: 'syz.6.6788': attribute type 29 has an invalid length. [ 442.042736][T29807] netlink: 'syz.6.6788': attribute type 29 has an invalid length. [ 442.052648][T29807] netlink: 'syz.6.6788': attribute type 29 has an invalid length. [ 442.062230][T29807] netlink: 'syz.6.6788': attribute type 29 has an invalid length. [ 442.072782][T29807] netlink: 'syz.6.6788': attribute type 29 has an invalid length. [ 442.083126][T29807] netlink: 'syz.6.6788': attribute type 29 has an invalid length. [ 442.091949][T29807] netlink: 'syz.6.6788': attribute type 29 has an invalid length. [ 442.241494][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6790'. [ 442.250545][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6790'. [ 442.455213][T29816] openvswitch: netlink: IP tunnel dst address not specified [ 442.561484][T29820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6792'. [ 442.600362][T29822] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 442.630408][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.653804][T29824] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 444.237402][T29761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.462461][T29834] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 444.614592][T29856] netlink: 'syz.5.6803': attribute type 2 has an invalid length. [ 444.879728][T29876] syzkaller0: entered promiscuous mode [ 444.892120][T29876] syzkaller0: entered allmulticast mode [ 445.098633][T29887] bond4: entered promiscuous mode [ 445.121734][T29887] bond4: entered allmulticast mode [ 445.439014][T29918] netlink: 'syz.3.6823': attribute type 12 has an invalid length. [ 445.461744][T29922] net_ratelimit: 4 callbacks suppressed [ 445.461774][T29922] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 445.474962][T29918] netlink: 'syz.3.6823': attribute type 29 has an invalid length. [ 445.494375][T29922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.690480][T29937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.748503][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.069832][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.584076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.661466][T30017] __nla_validate_parse: 11 callbacks suppressed [ 446.661494][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6851'. [ 446.673544][T30020] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6850'. [ 446.787641][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.879326][T30032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.983956][T30032] macsec0: left allmulticast mode [ 446.990812][T30032] veth1_macvtap: left allmulticast mode [ 447.026334][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 447.042216][T30032] gretap1: left promiscuous mode [ 447.049575][T30032] bond1: left promiscuous mode [ 447.071171][T30032] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 447.135683][T30045] tipc: Started in network mode [ 447.141548][T30045] tipc: Node identity a2159608676a, cluster identity 4711 [ 447.150693][T30045] tipc: Enabled bearer , priority 0 [ 447.162237][T30046] syzkaller0: entered promiscuous mode [ 447.169175][T30046] syzkaller0: entered allmulticast mode [ 447.182130][T30045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 447.183363][T30048] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20004 [ 447.208666][T30045] tipc: Resetting bearer [ 447.222023][T30044] tipc: Resetting bearer [ 447.231444][T30044] tipc: Disabling bearer [ 447.435957][T30059] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6866'. [ 447.535436][T30065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6869'. [ 447.746330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.754633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.790716][T30081] validate_nla: 7 callbacks suppressed [ 447.790742][T30081] netlink: 'syz.3.6875': attribute type 3 has an invalid length. [ 447.836567][T30081] netlink: 'syz.3.6875': attribute type 1 has an invalid length. [ 447.869677][T30081] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6875'. [ 447.907163][ T9111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.937579][ T5724] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.947636][ T9111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.987977][ T9111] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 448.012686][ T9111] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 448.023492][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 448.067299][T17397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 448.094604][T17397] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 448.104765][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 448.140424][T30089] syzkaller0: entered promiscuous mode [ 448.161223][T30089] syzkaller0: entered allmulticast mode [ 448.255434][T30110] Bluetooth: MGMT ver 1.23 [ 448.265913][T30113] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6885'. [ 448.278475][T30110] netlink: 'syz.5.6884': attribute type 1 has an invalid length. [ 448.313680][T30113] netlink: 1196 bytes leftover after parsing attributes in process `syz.6.6885'. [ 448.408308][T30122] ip6tnl1: entered promiscuous mode [ 448.453842][T30125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6888'. [ 448.620374][T30136] nbd: must specify an index to disconnect [ 448.655162][T30145] nbd: must specify an index to disconnect [ 448.754401][T30136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.808439][T30149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.872695][T30158] netlink: 'syz.3.6896': attribute type 1 has an invalid length. [ 448.945741][T30158] bond5: entered promiscuous mode [ 448.953162][T30158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.968095][T30159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.975192][T30159] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 448.987554][T30159] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 449.010026][T30159] bond5: (slave ip6gre3): making interface the new active one [ 449.043741][T30159] ip6gre3: entered promiscuous mode [ 449.050876][T30159] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 449.062572][T30168] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 449.089392][T30177] xt_socket: unknown flags 0x50 [ 449.241149][T30188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6901'. [ 449.257781][T30189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6901'. [ 449.384774][T30196] ipt_REJECT: TCP_RESET invalid for non-tcp [ 449.868115][T30223] netlink: 'syz.3.6911': attribute type 4 has an invalid length. [ 449.881720][T30223] .`: renamed from bond0 (while UP) [ 450.079520][T30252] bond0: Unable to set down delay as MII monitoring is disabled [ 450.090605][T30252] bond0 (unregistering): Released all slaves [ 450.147735][T30257] netlink: 'syz.1.6923': attribute type 1 has an invalid length. [ 450.181690][T30257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.270277][T30269] netlink: 'syz.3.6924': attribute type 10 has an invalid length. [ 450.334091][T30269] team0: Port device geneve1 added [ 450.475727][T30279] netlink: 'syz.3.6928': attribute type 2 has an invalid length. [ 450.495382][T30279] netlink: 'syz.3.6928': attribute type 2 has an invalid length. [ 450.509619][T30279] netlink: 'syz.3.6928': attribute type 2 has an invalid length. [ 450.946686][ T6386] net_ratelimit: 67 callbacks suppressed [ 450.946716][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.508264][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.666428][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 451.986636][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.150746][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.387794][ C0] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 452.387825][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 452.476435][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 452.858329][T30237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.954414][T30321] __nla_validate_parse: 14 callbacks suppressed [ 452.954433][T30321] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.6941'. [ 453.042435][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.052698][T30334] validate_nla: 62 callbacks suppressed [ 453.052717][T30334] netlink: 'syz.5.6945': attribute type 1 has an invalid length. [ 453.090024][T30335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6942'. [ 453.297609][T30355] tipc: Enabling of bearer rejected, failed to enable media [ 453.385885][T30365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6953'. [ 453.774863][T30396] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 453.792761][T30394] syzkaller1: entered promiscuous mode [ 453.801094][T30396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6963'. [ 453.815258][T30394] syzkaller1: entered allmulticast mode [ 453.837458][T30397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6961'. [ 454.030895][T30413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6966'. [ 454.067466][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.125188][T30413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6966'. [ 454.161371][T30419] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6968'. [ 454.240224][T30422] netlink: 428 bytes leftover after parsing attributes in process `syz.2.6969'. [ 454.253080][T30422] openvswitch: netlink: Flow key attr not present in new flow. [ 454.346346][T30424] gre0: Master is either lo or non-ether device [ 454.482337][T30436] syzkaller0: entered promiscuous mode [ 454.502778][T30436] syzkaller0: entered allmulticast mode [ 454.855740][T30465] openvswitch: netlink: Duplicate key (type 2). [ 455.111663][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.175800][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6990'. [ 455.183543][T30496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.223581][T30494] netlink: 'syz.1.6990': attribute type 12 has an invalid length. [ 455.235167][T30494] netlink: 'syz.1.6990': attribute type 29 has an invalid length. [ 455.305639][T30502] bond3: entered promiscuous mode [ 455.312874][T30502] bond3: entered allmulticast mode [ 455.318795][T30502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.779025][T30541] sctp: [Deprecated]: syz.5.7005 (pid 30541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.779025][T30541] Use struct sctp_sack_info instead [ 456.147892][ T6386] net_ratelimit: 6 callbacks suppressed [ 456.147927][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.198119][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.268249][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.227620][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.237111][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.187170][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 459.277019][T11910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.317524][T11910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.116400][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 461.124747][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.346739][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.756574][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 462.386867][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.437273][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.148743][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.467726][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.947802][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.516682][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.546693][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.867164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.187625][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.586678][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.626695][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.677180][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.226760][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.711289][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.346360][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.757849][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.788617][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.840441][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.906416][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.386884][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.546536][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.866863][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.917712][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.947261][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.426719][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.746770][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 477.987455][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.026468][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 479.035178][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.067232][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.469192][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.106876][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.147801][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.186549][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.506805][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.146685][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.227546][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.267555][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.317308][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.547687][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.357420][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.397208][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.437988][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.587289][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.476991][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.517151][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.547098][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.627828][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.588059][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.746572][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.636913][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.668375][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.676540][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.716977][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.756762][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.708026][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.797689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.827688][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.876755][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.748576][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.906563][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.716341][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.947002][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.349092][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.996854][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.786426][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.027251][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.077722][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.698747][T17397] bridge_slave_1: left allmulticast mode [ 506.704437][T17397] bridge_slave_1: left promiscuous mode [ 506.710547][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.720104][T17397] bridge_slave_0: left allmulticast mode [ 506.725781][T17397] bridge_slave_0: left promiscuous mode [ 506.732073][T17397] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.868504][T17397] bond10 (unregistering): (slave ip6gretap1): Releasing backup interface [ 506.877910][T17397] bond10 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a2:fe:fb:e0:3c:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 506.960535][T17397] bond8 (unregistering): (slave geneve3): Releasing active interface [ 506.974329][T17397] bond7 (unregistering): (slave geneve2): Releasing active interface [ 507.021135][T17397] bond1 (unregistering): Released all slaves [ 507.041682][T17397] bond2 (unregistering): Released all slaves [ 507.054337][T17397] bond3 (unregistering): Released all slaves [ 507.065848][T17397] bond4 (unregistering): Released all slaves [ 507.081176][T17397] bond5 (unregistering): (slave veth3): Releasing active interface [ 507.093340][T17397] bond5 (unregistering): Released all slaves [ 507.107528][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.116502][T17397] bond0 (unregistering): Released all slaves [ 507.127777][T17397] bond6 (unregistering): Released all slaves [ 507.143688][T17397] bond7 (unregistering): Released all slaves [ 507.157689][T17397] bond8 (unregistering): Released all slaves [ 507.170118][T17397] bond9 (unregistering): Released all slaves [ 507.182062][T17397] bond10 (unregistering): (slave veth5): Releasing backup interface [ 507.194592][T17397] bond10 (unregistering): Released all slaves [ 507.280704][T17397] tipc: Left network mode [ 507.300478][T17397] IPVS: stopping backup sync thread 11544 ... [ 507.604272][T17397] veth1_macvtap: left promiscuous mode [ 507.610839][T17397] veth1_vlan: left promiscuous mode [ 507.757728][T17397] team0 (unregistering): Port device team_slave_1 removed [ 507.772007][T17397] team0 (unregistering): Port device team_slave_0 removed [ 507.827514][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.979726][T17397] IPVS: stop unused estimator thread 0... [ 508.156645][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.196479][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.756557][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 510.237081][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.866352][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.276674][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.680889][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 511.707604][T17392] pimreg3: left allmulticast mode [ 511.718608][T17392] batman_adv: batadv0: Interface deactivated: gretap2 [ 511.828479][T17392] batman_adv: batadv0: Removing interface: gretap2 [ 511.843896][T17392] bond4 (unregistering): (slave gretap4): Releasing active interface [ 511.862847][T17392] bond7 (unregistering): (slave gretap5): Releasing active interface [ 511.892439][T17392] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 511.908732][T17392] team0: Port device bridge3 removed [ 511.935955][T17392] bond0 (unregistering): Released all slaves [ 511.945419][T17392] bond1 (unregistering): Released all slaves [ 511.957337][T17392] bond2 (unregistering): Released all slaves [ 511.970004][T17392] bond3 (unregistering): Released all slaves [ 511.990820][T17392] bond4 (unregistering): Released all slaves [ 512.003308][T17392] bond5 (unregistering): Released all slaves [ 512.014586][T17392] bond6 (unregistering): Released all slaves [ 512.025771][T17392] bond7 (unregistering): Released all slaves [ 512.040145][T17392] bond8 (unregistering): Released all slaves [ 512.060027][T17392] bond9 (unregistering): Released all slaves [ 512.121239][T17392] tipc: Disabling bearer [ 512.126817][T17392] tipc: Left network mode [ 512.307110][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.539966][T17392] veth1_vlan: left allmulticast mode [ 512.545703][T17392] veth1_macvtap: left promiscuous mode [ 512.551672][T17392] veth0_macvtap: left promiscuous mode [ 512.557315][T17392] veth1_vlan: left promiscuous mode [ 512.562589][T17392] veth0_vlan: left promiscuous mode [ 512.948255][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.091570][T17392] IPVS: stop unused estimator thread 0... [ 513.350985][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.906397][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.397571][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.427076][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.477160][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.791435][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.947282][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.506495][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.547310][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.572372][T30572] xt_cgroup: invalid path, errno=-2 [ 518.579642][T30573] netlink: 'syz.3.7013': attribute type 39 has an invalid length. [ 518.772826][T30591] netlink: 'syz.6.7017': attribute type 1 has an invalid length. [ 518.809159][T30591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.848819][T30591] bond4: (slave gretap2): making interface the new active one [ 518.858676][T30591] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 518.869125][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 519.214502][T30623] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 519.425255][T30632] netlink: 'syz.6.7027': attribute type 5 has an invalid length. [ 519.493972][T30639] __nla_validate_parse: 5 callbacks suppressed [ 519.493991][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7030'. [ 519.515299][T30641] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7031'. [ 519.532543][T30639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7030'. [ 519.544184][T30642] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7031'. [ 519.572274][T30639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7030'. [ 519.589068][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.618110][T30639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7030'. [ 519.760684][T30657] netlink: 'syz.5.7036': attribute type 4 has an invalid length. [ 519.986625][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.159283][T30696] netlink: 'syz.3.7046': attribute type 1 has an invalid length. [ 520.176799][T30696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7046'. [ 520.210329][T30698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7041'. [ 520.223305][T30696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7046'. [ 520.530026][T30716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7051'. [ 520.544616][T30711] netlink: 'syz.5.7050': attribute type 4 has an invalid length. [ 520.562096][T30719] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = -2147352564, id = 0 [ 520.627812][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.718082][T30667] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.745713][T30667] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 520.773100][T30667] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.797766][T30667] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 521.145908][T30751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.155355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.503656][T30776] xt_hashlimit: size too large, truncated to 1048576 [ 521.515620][T30778] xt_hashlimit: size too large, truncated to 1048576 [ 521.660642][T30790] Bluetooth: MGMT ver 1.23 [ 521.675455][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.736546][T30796] netlink: 'syz.5.7076': attribute type 10 has an invalid length. [ 521.773925][T30798] lo: entered promiscuous mode [ 521.785394][T30798] netlink: 'syz.2.7077': attribute type 2 has an invalid length. [ 521.797494][T30798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.881708][T30813] netlink: 'syz.2.7083': attribute type 1 has an invalid length. [ 523.448405][T30832] syzkaller0: entered promiscuous mode [ 523.454394][T30832] syzkaller0: entered allmulticast mode [ 523.817189][T30862] netlink: 'syz.3.7097': attribute type 4 has an invalid length. [ 524.261346][T30902] netlink: 'syz.3.7109': attribute type 64 has an invalid length. [ 524.507786][T30921] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 524.562558][T30921] __nla_validate_parse: 11 callbacks suppressed [ 524.562577][T30921] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.7116'. [ 524.616663][T30930] bond0: Removing last arp target with arp_interval on [ 524.736894][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7122'. [ 524.748486][T30933] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7121'. [ 524.781057][T30940] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 525.011186][T30957] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.7128'. [ 525.051577][T30957] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 525.225596][T30960] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 525.245965][T30970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7130'. [ 525.269070][T30961] netlink: 'syz.5.7129': attribute type 1 has an invalid length. [ 525.290116][T30961] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7129'. [ 525.302112][T30961] netlink: 'syz.5.7129': attribute type 1 has an invalid length. [ 525.314165][T30961] netlink: 'syz.5.7129': attribute type 8 has an invalid length. [ 525.324329][T30961] netlink: 606 bytes leftover after parsing attributes in process `syz.5.7129'. [ 525.334132][T30974] vlan0: entered allmulticast mode [ 525.334154][T30974] veth1_virt_wifi: entered allmulticast mode [ 525.356496][T30961] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7129'. [ 525.422660][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7130'. [ 525.512478][T30978] team0 (unregistering): Port device team_slave_0 removed [ 525.522175][T30991] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.7138'. [ 525.574490][T30978] team0 (unregistering): Port device team_slave_1 removed [ 525.727248][T30996] veth3: entered allmulticast mode [ 525.743397][T30996] bond5: (slave veth3): Enslaving as an active interface with an up link [ 525.890890][T31027] x_tables: unsorted entry at hook 3 [ 525.963785][T31036] C: renamed from lo (while UP) [ 526.000407][T31036] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 526.023381][T31040] netlink: 'syz.5.7150': attribute type 1 has an invalid length. [ 526.130514][T31040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.193720][T31045] bond2: (slave gretap1): making interface the new active one [ 526.202981][T31045] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 526.214965][T31036] syzkaller0: entered promiscuous mode [ 526.229720][T31036] syzkaller0: entered allmulticast mode [ 526.768539][T31088] netlink: 'syz.5.7165': attribute type 1 has an invalid length. [ 526.828247][T31090] netlink: get zone limit has 4 unknown bytes [ 526.959701][T31093] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.025082][T31093] bond3: (slave lo): Enslaving as an active interface with an up link [ 527.051198][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.058746][T31093] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 527.090904][T31109] netlink: 'syz.5.7171': attribute type 97 has an invalid length. [ 527.120809][T21781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.130944][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.141605][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.384082][T31133] netlink: 'syz.1.7179': attribute type 12 has an invalid length. [ 527.396380][T31133] netlink: 'syz.1.7179': attribute type 29 has an invalid length. [ 527.586025][T31146] syzkaller0: entered promiscuous mode [ 527.600228][T31146] syzkaller0: entered allmulticast mode [ 527.838593][T31172] xt_recent: Unsupported userspace flags (000000b1) [ 527.899236][T31176] ip6tnl1: entered promiscuous mode [ 527.963273][T31178] Cannot find add_set index 4 as target [ 528.257614][T31201] macvlan0: entered promiscuous mode [ 528.382474][T31210] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 528.960641][T31251] validate_nla: 5 callbacks suppressed [ 528.960670][T31251] netlink: 'syz.1.7211': attribute type 10 has an invalid length. [ 528.975217][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035286400: rx timeout, send abort [ 528.985071][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035286800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 529.359762][T31275] netlink: 'syz.5.7218': attribute type 5 has an invalid length. [ 529.394370][ T1124] bridge5: port 2(veth0_to_bond) entered disabled state [ 529.484780][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035286400: abort rx timeout. Force session deactivation [ 529.580659][T31294] __nla_validate_parse: 26 callbacks suppressed [ 529.580691][T31294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7224'. [ 529.623647][T31299] netlink: 'syz.6.7226': attribute type 2 has an invalid length. [ 529.685175][T31302] netlink: 'syz.6.7228': attribute type 1 has an invalid length. [ 529.772176][T31302] 8021q: adding VLAN 0 to HW filter on device bond6 [ 529.821642][T31312] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 530.084083][T31329] macvlan0: entered promiscuous mode [ 530.400921][T31354] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 530.658488][T31378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7253'. [ 530.714609][T31382] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 530.755776][T31378] pim6reg1: entered promiscuous mode [ 530.770570][T31388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.779270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.790873][T31382] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 530.810883][T31378] pim6reg1: entered allmulticast mode [ 530.810998][T31382] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 530.834757][T31382] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 530.844053][T31388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.852940][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.869697][T31378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7253'. [ 530.899438][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.909071][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.918449][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.920600][T31384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7253'. [ 530.931030][T31391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.946392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.972879][T31395] openvswitch: netlink: Missing key (keys=40, expected=80) [ 531.148276][T31404] xt_TCPMSS: Only works on TCP SYN packets [ 531.211554][T31414] netlink: 'syz.3.7265': attribute type 29 has an invalid length. [ 531.226187][T31414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7265'. [ 531.260370][T31412] netlink: 'syz.5.7264': attribute type 1 has an invalid length. [ 531.312016][T31423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7266'. [ 531.375746][T31414] netlink: 268 bytes leftover after parsing attributes in process `syz.3.7265'. [ 531.463396][T31428] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7267'. [ 531.503681][T31430] netlink: 'syz.5.7268': attribute type 1 has an invalid length. [ 531.514020][ T5623] block nbd8: Receive control failed (result -32) [ 531.548993][T17392] smbdirect: ib_dev[syz2] removed [ 531.811659][T31453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7272'. [ 531.918072][T31458] veth0_to_bridge: entered promiscuous mode [ 532.011220][T31459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7275'. [ 532.144740][T31448] veth0_to_bridge: left promiscuous mode [ 532.584856][T31500] syzkaller0: entered promiscuous mode [ 532.597401][T31500] syzkaller0: entered allmulticast mode [ 532.802265][T31515] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 533.599398][T31575] syzkaller1: entered promiscuous mode [ 533.622569][T31575] syzkaller1: entered allmulticast mode [ 533.840710][T31595] netlink: 'syz.5.7310': attribute type 1 has an invalid length. [ 533.988095][T31611] netlink: 'syz.2.7316': attribute type 21 has an invalid length. [ 534.034518][T31613] netlink: 'syz.5.7317': attribute type 3 has an invalid length. [ 534.088209][T31613] netlink: 'syz.5.7317': attribute type 3 has an invalid length. [ 534.150253][T31622] netlink: 'syz.2.7321': attribute type 9 has an invalid length. [ 534.161855][T31623] : entered promiscuous mode [ 534.235257][T31627] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 534.262369][T31627] bond5 (unregistering): Released all slaves [ 534.607522][T31659] netlink: 'syz.3.7334': attribute type 12 has an invalid length. [ 534.653783][T31659] __nla_validate_parse: 13 callbacks suppressed [ 534.653814][T31659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7334'. [ 534.693314][T31659] batadv0: entered promiscuous mode [ 534.699631][T31659] macsec1: entered promiscuous mode [ 534.715985][T31659] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 534.771449][T31671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7335'. [ 534.840582][T31671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7335'. [ 534.859646][T31682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7340'. [ 534.870838][T31682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7340'. [ 534.881598][T31682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7340'. [ 534.892113][T31682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7340'. [ 534.964957][T31686] syzkaller0: entered promiscuous mode [ 534.980066][T31686] syzkaller0: entered allmulticast mode [ 535.298142][T31710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7348'. [ 535.415516][T31727] netlink: 'syz.5.7352': attribute type 9 has an invalid length. [ 535.441488][T31727] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7352'. [ 535.708692][T31742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7355'. [ 535.850182][T31750] netlink: 'syz.6.7358': attribute type 1 has an invalid length. [ 536.094052][T31758] veth0: entered promiscuous mode [ 536.156935][T31759] netlink: 'syz.6.7358': attribute type 1 has an invalid length. [ 536.182262][T31759] netlink: 'syz.6.7358': attribute type 2 has an invalid length. [ 536.460318][T31799] xt_l2tp: invalid flags combination: 0 [ 536.570246][T31808] net_ratelimit: 68 callbacks suppressed [ 536.570265][T31808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.591182][T31808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.645618][T31808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.659583][T31808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.672583][T31808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.724103][T31756] veth0: left promiscuous mode [ 536.844808][T31822] xt_TCPMSS: Only works on TCP SYN packets [ 537.269145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.911780][T31917] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 538.170735][T31932] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 538.189135][T31934] netlink: 'syz.2.7412': attribute type 17 has an invalid length. [ 538.204653][T31932] bond0: (slave lo): Error: Device can not be enslaved while up [ 538.282300][T31934] erspan0: entered promiscuous mode [ 538.323740][T31934] gretap0: entered promiscuous mode [ 538.471086][T31959] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.478507][T31959] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.551887][T17392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.565624][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.585809][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.604896][T31964] lo speed is unknown, defaulting to 1000 [ 538.819277][T31964] xfrm0 speed is unknown, defaulting to 1000 [ 538.918346][T31964] lo speed is unknown, defaulting to 1000 [ 539.720360][T32023] xt_TCPMSS: Only works on TCP SYN packets [ 539.758891][T32029] __nla_validate_parse: 22 callbacks suppressed [ 539.758910][T32029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7437'. [ 539.818406][T32034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7436'. [ 539.850741][T32037] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7439'. [ 539.913337][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7436'. [ 539.940426][T32026] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 539.993525][T32049] Cannot find add_set index 46338 as target [ 540.174044][T32054] netlink: 'syz.2.7446': attribute type 1 has an invalid length. [ 540.199082][T32054] netlink: 'syz.2.7446': attribute type 1 has an invalid length. [ 540.545901][T32093] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7458'. [ 540.663084][T32106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7461'. [ 540.672989][T32106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7461'. [ 540.687543][T32106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7461'. [ 540.696844][T32106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7461'. [ 540.801893][T32112] netlink: 'syz.5.7464': attribute type 1 has an invalid length. [ 540.851842][T32112] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.888080][T32112] bond5: (slave ip6gretap1): making interface the new active one [ 540.909925][T32112] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 540.943677][T32121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7466'. [ 541.031119][ T5744] IPVS: starting estimator thread 0... [ 541.047687][T32133] netlink: 'syz.5.7469': attribute type 7 has an invalid length. [ 541.136214][T32131] IPVS: using max 53 ests per chain, 127200 per kthread [ 541.749241][ T5744] net_ratelimit: 71 callbacks suppressed [ 541.749259][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.843776][T32177] ipt_REJECT: ECHOREPLY no longer supported. [ 541.898307][T32182] netlink: 'syz.1.7484': attribute type 1 has an invalid length. [ 541.930751][T32183] batman_adv: batadv0: Adding interface: dummy0 [ 541.957489][T32180] can: request_module (can-proto-0) failed. [ 541.971091][T32183] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.004286][T32191] netlink: 'syz.6.7489': attribute type 1 has an invalid length. [ 542.008950][T32183] batman_adv: batadv0: Interface activated: dummy0 [ 542.039373][T32182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.065601][T32180] batadv0: mtu less than device minimum [ 542.069379][T32196] openvswitch: netlink: Flow key attr not present in new flow. [ 542.073526][T32180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.080883][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.089950][T32180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.108800][T32180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.119806][T32180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.130765][T32180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.141721][T32180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 542.264966][T32202] lo: left promiscuous mode [ 542.533935][T32214] x_tables: duplicate underflow at hook 1 [ 542.539942][T32213] bridge4: entered promiscuous mode [ 542.545478][T32213] bridge4: entered allmulticast mode [ 543.606380][T32272] netlink: 'syz.5.7512': attribute type 3 has an invalid length. [ 543.969517][T32289] netlink: 'syz.6.7517': attribute type 11 has an invalid length. [ 544.042500][T32300] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 544.331477][T32325] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 544.759431][T32360] veth0: entered allmulticast mode [ 544.973474][T32376] syzkaller0: entered promiscuous mode [ 544.980033][T32376] syzkaller0: entered allmulticast mode [ 545.275722][T32399] netlink: 'syz.6.7548': attribute type 58 has an invalid length. [ 545.289460][T32399] __nla_validate_parse: 22 callbacks suppressed [ 545.289478][T32399] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7548'. [ 545.318351][T32394] netlink: 74 bytes leftover after parsing attributes in process `syz.2.7547'. [ 545.912988][T32430] syzkaller0: entered promiscuous mode [ 545.923009][T32430] syzkaller0: entered allmulticast mode [ 545.970548][T32432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7556'. [ 546.119378][T32448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7558'. [ 546.140796][T32448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7558'. [ 546.228337][ T30] INFO: task syz.4.6130:27385 blocked for more than 143 seconds. [ 546.242771][ T30] Not tainted syzkaller #0 [ 546.250625][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.262189][ T30] task:syz.4.6130 state:D stack:27568 pid:27385 tgid:27384 ppid:26545 task_flags:0x400040 flags:0x00080002 [ 546.275477][ T30] Call Trace: [ 546.280930][ T30] [ 546.283925][ T30] __schedule+0x17d9/0x56c0 [ 546.288713][ T30] ? trace_irq_enable+0x3b/0x140 [ 546.293691][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 546.301277][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 546.306591][ T30] ? genl_rcv+0x28/0x40 [ 546.310783][ T30] ? __pfx___schedule+0x10/0x10 [ 546.315665][ T30] ? rcu_is_watching+0x15/0xb0 [ 546.320508][ T30] ? rcu_is_watching+0x15/0xb0 [ 546.325286][ T30] ? lock_release+0x4b/0x3c0 [ 546.330849][ T30] ? rcu_is_watching+0x15/0xb0 [ 546.335652][ T30] schedule+0x164/0x360 [ 546.339908][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.345381][ T30] __mutex_lock+0x7bf/0x1550 [ 546.350520][ T30] ? __mutex_lock+0x5d4/0x1550 [ 546.358019][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 546.364131][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.369611][ T30] ? __nlmsg_put+0xef/0x1b0 [ 546.374213][ T30] ? genlmsg_put+0x137/0x2e0 [ 546.378919][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 546.384589][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 546.391970][ T30] ? __nla_parse+0x40/0x60 [ 546.396617][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 546.403586][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 546.410117][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 546.415709][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 546.422834][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 546.428477][ T30] genl_rcv_msg+0x614/0x7a0 [ 546.433119][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.438270][ T30] ? ref_tracker_free+0x689/0x830 [ 546.449760][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 546.457889][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 546.463798][ T30] netlink_rcv_skb+0x226/0x4a0 [ 546.469586][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.475305][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.481032][ T30] ? down_read+0x2be/0x330 [ 546.485560][ T30] genl_rcv+0x28/0x40 [ 546.489773][ T30] netlink_unicast+0x7bb/0x940 [ 546.494587][ T30] netlink_sendmsg+0x813/0xb40 [ 546.499481][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.504825][ T30] ? futex_unqueue+0x22/0x240 [ 546.510569][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.515547][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.520945][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.526312][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 546.531204][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.537474][ T30] ? lock_release+0x4b/0x3c0 [ 546.542117][ T30] ? import_iovec+0x73/0xa0 [ 546.546814][ T30] ___sys_sendmsg+0x2a5/0x360 [ 546.554037][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.559353][ T30] ? futex_wait+0x2a2/0x390 [ 546.563915][ T30] ? __fget_files+0x2a/0x420 [ 546.569667][ T30] ? __fget_files+0x3a2/0x420 [ 546.574394][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 546.579801][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.585338][ T30] ? rcu_is_watching+0x15/0xb0 [ 546.590331][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.597466][ T30] do_syscall_64+0x174/0x580 [ 546.602121][ T30] ? trace_irq_disable+0x3b/0x140 [ 546.607242][ T30] ? clear_bhb_loop+0x40/0x90 [ 546.614299][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.622911][ T30] RIP: 0033:0x7f46b279ce59 [ 546.629894][ T30] RSP: 002b:00007f46b3618028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.640049][ T30] RAX: ffffffffffffffda RBX: 00007f46b2a15fa0 RCX: 00007f46b279ce59 [ 546.649388][ T30] RDX: 0000000004040090 RSI: 0000200000000000 RDI: 0000000000000003 [ 546.659651][ T30] RBP: 00007f46b2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 546.673520][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.682296][ T30] R13: 00007f46b2a16038 R14: 00007f46b2a15fa0 R15: 00007ffd9e68b498 [ 546.691937][ T30] [ 546.695205][ T30] INFO: lockdep is turned off. [ 546.701366][ T30] NMI backtrace for cpu 0 [ 546.701393][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 546.701412][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.701421][ T30] Call Trace: [ 546.701428][ T30] [ 546.701435][ T30] dump_stack_lvl+0xe8/0x150 [ 546.701459][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 546.701551][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 546.701611][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 546.701630][ T30] sys_info+0x135/0x170 [ 546.701645][ T30] watchdog+0xfd7/0x1030 [ 546.701673][ T30] ? watchdog+0x1c7/0x1030 [ 546.701692][ T30] kthread+0x388/0x470 [ 546.701708][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.701725][ T30] ? __pfx_kthread+0x10/0x10 [ 546.701739][ T30] ret_from_fork+0x514/0xb70 [ 546.701767][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 546.701782][ T30] ? __switch_to+0xc89/0x1420 [ 546.701803][ T30] ? __pfx_kthread+0x10/0x10 [ 546.701818][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.701841][ T30] [ 546.701890][ T30] Sending NMI from CPU 0 to CPUs 1: [ 546.786012][T32473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7561'. [ 546.786034][T32473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7561'. [ 546.787474][T32473] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7561'. [ 546.791238][ C1] NMI backtrace for cpu 1 [ 546.791254][ C1] CPU: 1 UID: 0 PID: 32473 Comm: syz.6.7561 Not tainted syzkaller #0 PREEMPT(full) [ 546.791273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.791283][ C1] RIP: 0010:delay_tsc+0x5b/0xc0 [ 546.791308][ C1] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 42 15 ed f5 65 8b 05 8b d7 93 07 85 c0 74 1c f3 90 01 00 00 00 e8 8b 13 ed f5 e8 36 79 01 00 39 c5 75 0e 0f 01 f9 [ 546.791323][ C1] RSP: 0018:ffffc9000f57e8a8 EFLAGS: 00000002 [ 546.791338][ C1] RAX: 0000000000000002 RBX: 0000000000000899 RCX: 0000000000000000 [ 546.791349][ C1] RDX: 000000000000011d RSI: ffffffff8c291100 RDI: 00000000ffffffff [ 546.791361][ C1] RBP: 0000000000000001 R08: ffff888140ec8237 R09: 1ffff110281d9046 [ 546.791373][ C1] R10: dffffc0000000000 R11: ffffffff8ba66850 R12: 1ffffffff34f5fde [ 546.791385][ C1] R13: 00000000ffffffff R14: 0000011de7fc8a90 R15: 000000000000062e [ 546.791397][ C1] FS: 00007f305c5d96c0(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 546.791412][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.791423][ C1] CR2: 000000110c39fed0 CR3: 0000000077e34000 CR4: 00000000003526f0 [ 546.791439][ C1] Call Trace: [ 546.791445][ C1] [ 546.791453][ C1] wait_for_lsr+0x147/0x2f0 [ 546.791594][ C1] serial8250_console_write+0x1373/0x1bd0 [ 546.791621][ C1] ? rcu_is_watching+0x15/0xb0 [ 546.791642][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 546.791665][ C1] ? rcu_is_watching+0x15/0xb0 [ 546.791681][ C1] ? lock_acquire+0x5f/0x350 [ 546.791707][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 546.791726][ C1] ? console_flush_all+0x123/0xaf0 [ 546.791746][ C1] console_flush_all+0x6ea/0xaf0 [ 546.791767][ C1] ? console_flush_all+0x123/0xaf0 [ 546.791788][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 546.791809][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 546.791832][ C1] console_unlock+0xd1/0x1c0 [ 546.791850][ C1] ? __pfx_console_unlock+0x10/0x10 [ 546.791867][ C1] ? vprintk_emit+0x1f0/0x560 [ 546.791883][ C1] ? vprintk_emit+0x455/0x560 [ 546.791900][ C1] ? vprintk_emit+0x2cf/0x560 [ 546.791916][ C1] ? vprintk_emit+0x2cf/0x560 [ 546.791933][ C1] vprintk_emit+0x485/0x560 [ 546.791949][ C1] ? unwind_get_return_address+0x4d/0x90 [ 546.791970][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 546.791998][ C1] _printk+0xdd/0x130 [ 546.792027][ C1] ? __pfx__printk+0x10/0x10 [ 546.792048][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 546.792068][ C1] ? ___ratelimit+0x584/0x8e0 [ 546.792090][ C1] __nla_validate_parse+0x2574/0x2d50 [ 546.792110][ C1] ? __x64_sys_sendmsg+0x1b1/0x290 [ 546.792134][ C1] ? do_syscall_64+0x174/0x580 [ 546.792154][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.792177][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 546.792206][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 546.792240][ C1] __nla_parse+0x40/0x60 [ 546.792261][ C1] rtnl_newlink+0x202/0x1bd0 [ 546.792316][ C1] ? kasan_save_track+0x4f/0x80 [ 546.792335][ C1] ? kasan_save_track+0x3e/0x80 [ 546.792355][ C1] ? kasan_save_free_info+0x40/0x50 [ 546.792372][ C1] ? __kasan_slab_free+0x5c/0x80 [ 546.792392][ C1] ? kmem_cache_free+0x182/0x650 [ 546.792414][ C1] ? dev_hard_start_xmit+0x2cd/0x830 [ 546.792464][ C1] ? __netlink_deliver_tap+0x5b4/0x860 [ 546.792488][ C1] ? netlink_deliver_tap+0x19c/0x1b0 [ 546.792510][ C1] ? netlink_unicast+0x77f/0x940 [ 546.792530][ C1] ? netlink_sendmsg+0x813/0xb40 [ 546.792553][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 546.792573][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.792601][ C1] ? rcu_is_watching+0x15/0xb0 [ 546.792618][ C1] ? trace_irq_enable+0x3b/0x140 [ 546.792641][ C1] ? nlmon_xmit+0xb0/0x100 [ 546.792730][ C1] ? kmem_cache_free+0x182/0x650 [ 546.792756][ C1] ? dev_hard_start_xmit+0x7c7/0x830 [ 546.792779][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 546.792795][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 546.792809][ C1] ? rcu_is_watching+0x15/0xb0 [ 546.792825][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 546.792840][ C1] ? trace_irq_enable+0x3b/0x140 [ 546.792860][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 546.792875][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 546.792889][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 546.792916][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 546.792933][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 546.792954][ C1] ? rcu_is_watching+0x15/0xb0 [ 546.792969][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 546.792996][ C1] ? rcu_is_watching+0x15/0xb0 [ 546.793012][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 546.793031][ C1] ? lock_release+0x4b/0x3c0 [ 546.793053][ C1] ? bpf_lsm_capable+0x9/0x20 [ 546.793067][ C1] ? security_capable+0x7e/0x2c0 [ 546.793158][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 546.793178][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 546.793200][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 546.793221][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 546.793241][ C1] ? ref_tracker_free+0x689/0x830 [ 546.793259][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 546.793282][ C1] netlink_rcv_skb+0x226/0x4a0 [ 546.793304][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 546.793326][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.793354][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.793379][ C1] netlink_unicast+0x7bb/0x940 [ 546.793404][ C1] netlink_sendmsg+0x813/0xb40 [ 546.793431][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.793455][ C1] ? futex_unqueue+0x22/0x240 [ 546.793470][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.793486][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.793505][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.793529][ C1] ____sys_sendmsg+0x9b9/0xa20 [ 546.793555][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.793578][ C1] ? lock_release+0x4b/0x3c0 [ 546.793602][ C1] ? import_iovec+0x73/0xa0 [ 546.793625][ C1] ___sys_sendmsg+0x2a5/0x360 [ 546.793650][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.793674][ C1] ? futex_wait+0x2a2/0x390 [ 546.793705][ C1] ? __fget_files+0x2a/0x420 [ 546.793722][ C1] ? __fget_files+0x3a2/0x420 [ 546.793743][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 546.793767][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.793795][ C1] ? rcu_is_watching+0x15/0xb0 [ 546.793812][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.793829][ C1] do_syscall_64+0x174/0x580 [ 546.793849][ C1] ? trace_irq_disable+0x3b/0x140 [ 546.793871][ C1] ? clear_bhb_loop+0x40/0x90 [ 546.793888][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.793905][ C1] RIP: 0033:0x7f305b79ce59 [ 546.793920][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.793934][ C1] RSP: 002b:00007f305c5d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.793951][ C1] RAX: ffffffffffffffda RBX: 00007f305ba16630 RCX: 00007f305b79ce59 [ 546.793964][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000d [ 546.793974][ C1] RBP: 00007f305b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 546.793984][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.794000][ C1] R13: 00007f305ba166c8 R14: 00007f305ba16630 R15: 00007ffce08e6418 [ 546.794019][ C1] [ 546.794512][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 546.794532][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 546.794551][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.794561][ T30] Call Trace: [ 546.794569][ T30] [ 546.794576][ T30] vpanic+0x56c/0xa60 [ 546.794597][ T30] ? __pfx___schedule+0x10/0x10 [ 546.794617][ T30] ? __pfx_vpanic+0x10/0x10 [ 546.794638][ T30] panic+0xc5/0xd0 [ 546.794654][ T30] ? __pfx_panic+0x10/0x10 [ 546.794669][ T30] ? preempt_schedule_common+0x82/0xd0 [ 546.794687][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 546.794709][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 546.794727][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 546.794745][ T30] watchdog+0x1030/0x1030 [ 546.794769][ T30] ? watchdog+0x1c7/0x1030 [ 546.794790][ T30] kthread+0x388/0x470 [ 546.794805][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.794827][ T30] ? __pfx_kthread+0x10/0x10 [ 546.794842][ T30] ret_from_fork+0x514/0xb70 [ 546.794860][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 546.794875][ T30] ? __switch_to+0xc89/0x1420 [ 546.794898][ T30] ? __pfx_kthread+0x10/0x10 [ 546.794913][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.794936][ T30] [ 546.797449][ T30] Kernel Offset: disabled