last executing test programs: 4.14174992s ago: executing program 2 (id=7991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x394, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19a36d7d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23da8a06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe06c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c6f5e6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f573b28}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c22c8f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8698}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5735}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358ca3d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c264511}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63655e67}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fb4774d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe948}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc16c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x510f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacfa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab597f5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbba1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e12f31c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4534}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e06}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1da5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa447}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9313}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d24}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6260de7d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4723fe66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f8150b2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x454e0590}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75672fdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdad1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7815e92}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x454006f3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfc49160}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x216971da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6487}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x997f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58c81d9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d890d99}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x666e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c9cfd26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ed8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74062f32}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bcabf15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ab8a390}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2de48616}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70b009b0}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4651}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a55}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e3c6c83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7edd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5637}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4538}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4199f844}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14974028}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85d4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x340ea51c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa576}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ab3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff70}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7e4}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbd8d8d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x671}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46b0105f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12add363}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15d2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a5a915}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e65d33b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xded0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bd0}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b985857}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4226}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43bb4bac}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfccc}]}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000045) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000417001c0012800b00010062726964676500000c0002040000000000000000"], 0x3c}}, 0x0) 2.020920343s ago: executing program 2 (id=7994): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.988980664s ago: executing program 0 (id=7995): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x8a, 0x4, 0x6}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) 1.987578139s ago: executing program 1 (id=7996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x9) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0xc4ec, @rand_addr=' \x01\x00', 0xf0}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)='~', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) accept4$bt_l2cap(r4, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80000) (async) shutdown(r5, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0xfa, 0x81, 0x6, 0x7, 0xff, 0xb8, 0x5, 0x8, 0x9, 0xff, 0x3, 0xa, 0x6, 0xe}, 0xe) (async) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1407e8537184e2f6000000040605000000000000"], 0xffffff88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.886689128s ago: executing program 0 (id=7999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000c0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r3, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x1f, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x3, @mcast2, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="2caa711d9a8d6e678ff843909f9eb948c1607de894abfab2ce59bccc46451db1fb1b8d48b65e578a10f9e8fd6de29bf1118be184eaea959113d07cfe5272ab892043bf8147bc385c2f546a290b7a6de5a5210a8d7c", 0x55}], 0x1, &(0x7f00000003c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x0, 0x3, 0x0, [@remote, @empty, @mcast1]}}}, @dstopts={{0x88, 0x29, 0x37, {0x16, 0xd, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0xc, 0xf, [0x7, 0x0]}}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x20, {0x3, 0x6, 0xf3, 0x1ff, [0xc, 0x7, 0x85a]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0xbc2a, [0x8, 0x5]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x2e, 0x9, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x10, 0x200, [0x9, 0x40, 0xffffffff00000000, 0x7]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x80, 0x4, [0x39, 0x7fffffffffffffff, 0xa2]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x232d6162}}, @rthdr={{0xa8, 0x29, 0x39, {0x0, 0x12, 0x2, 0x5, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x3b, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn, @jumbo={0xc2, 0x4, 0xfffff000}, @pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x38, {0x2, 0xc, 0x80, 0x6, [0x5, 0xc2e, 0x40, 0x9, 0x1, 0x6]}}, @pad1]}}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x1, 0x3, 0x0, [@empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x4, 0x5, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xfd, 0xaef3, [0x0, 0x7, 0x1000, 0x8000000000000000]}}]}}}], 0x310}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x200, @local, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="6b4e1ffe9f78d1b0", 0x8}], 0x1, &(0x7f00000009c0)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @hopopts={{0xb0, 0x29, 0x36, {0x2b, 0x12, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0xd}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x2, 0x14, 0x6, 0x4000, [0x88cc, 0x8, 0x8, 0x1, 0x8000000000000000, 0x1, 0xccea, 0xefd, 0x3, 0x8]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x3}]}}}, @rthdrdstopts={{0x258, 0x29, 0x37, {0x0, 0x47, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x90b}, @calipso={0x7, 0x50, {0x0, 0x12, 0x9, 0x0, [0x7ff, 0x5f, 0x9, 0x6f7, 0x9, 0x2, 0x6, 0x5, 0x3]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x3a, 0x2, [0xa, 0x8287, 0x9, 0x3, 0x9, 0x8]}}, @generic={0xf2, 0xb6, "31ff4c230167db0f52bb18b343244b61f008e8eb66b84b9a52e5a6b2095dd3d8a4865c08962df39109fb52ed7ccc55e118b563241decb001ca79bf0c763b5ab5e2c2713e321debdcb1ae82bbf0b34b0334e991a5466cbdea963a3cb60bd63f654dcc1657f5738997ccb5ed8a8e56d5b0a30ba50b70bb993c65d18b24744d9b80cdd7ca8ca4f9a62aa8532e102979641e3261894e44e25670c429854650a5b4933eada7cfdf3db136136794b10af28fb7bfe790063b81"}, @generic={0x50, 0xdf, "d6e611071495f4a17aa8693b49867b32d8af515889593892ff64c3b384b6d8e60f0f88add34f8a676b2d5c76b2af83d9b34bcec0a5e825e59c97367c0d2595bcec6efbc91bf9bfd785d3e89db0682a3a4b7db49119263d99494aa92272ab63cdf519a807c5caa8e1296c3c82dcad9cb4e5432550ffe9ab355fdf28f9f2654e7ce75b8e01d5ccd1c932720d7de03301e2ddb56a4b8c2d4c5b187ee9048c16a96505376cd97198e49055e355443b5e53e41c088ab9835cc0a66a70d33b975b7115740b311997ae2675702ce08d31cd5f856a811a27098d35886997186be78eae"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff3}}], 0x338}}], 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0xfc0c0000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0xcfc}, 0x28) 1.827452773s ago: executing program 2 (id=8000): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f00000001c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'veth1_to_batadv\x00'}) write$tun(r2, &(0x7f0000000240)={@val={0xa, 0x201}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x43, 0x100, @void}}}}}}}}}, 0x46) socket(0x8, 0x0, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000300)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz1\x00', @default, 0x7, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r5], 0x2c}}, 0x4000000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x3c, r8, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x20000081) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@mpls_newroute={0xac, 0x18, 0x10, 0x70bd24, 0x25dfdbfd, {0x1c, 0x20, 0x20, 0x2, 0xfc, 0x4, 0xff, 0x3, 0xa00}, [@RTA_MULTIPATH={0x5, 0x9, {0xb0c, 0x20, 0xc8}}, @RTA_NEWDST={0x84, 0x13, [{0xd174c}, {0x2, 0x0, 0x1}, {0x6}, {0x2}, {0xc59}, {0x4, 0x0, 0x1}, {0x1}, {0x8, 0x0, 0x1}, {0x9da54, 0x0, 0x1}, {}, {0x5, 0x0, 0x1}, {0x7}, {0x9, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xe812, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x2b8c7}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9}, {0x5}, {0x6, 0x0, 0x1}, {0xffff8}, {0x1, 0x0, 0x1}, {0xffffb}, {0xb26e}, {0x5}, {0x81}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.74590388s ago: executing program 1 (id=8001): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xf}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$ax25(r2, &(0x7f0000000000)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xf}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) connect$ax25(r2, &(0x7f0000000000)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) 1.69101352s ago: executing program 0 (id=8003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x816}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x654c}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xf7b63c68e963bcf6}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0xb, 0x101, 0x0, 0x0, {0x4, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, '&\x00'}, @NFTA_COMPAT_NAME={0xc, 0x1, 'ethtool\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8050) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000340)={r2, 0xa, 0xffffffff, 0x6}) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, 0x4, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xda526b5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6fa9e804}]}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "e80c23cee2d8e9d359e1cf299e49d0de1cece7449a5b6eca6e6d946fb5808d29bf47fe46bec8886df6d9d985ebb47667a3334d5985"}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59b4db15}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c180fac}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000011}, 0x5) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x42}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x374d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r4) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x16}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x44850) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1a024000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0xc005) socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x13, "6b16de8e536e9d2f2407766ecbfe8ba9b7e875"}, &(0x7f0000000a00)=0x1b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000a40)={r7, 0x4, 0x400}, 0x8) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x9fb876edceb3bb9e}, 0x40084) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000c00)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002180)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f0000000c40)={0x14cc, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "02757f67c4d55115895b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1434, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "273010dde9efdb90aa39f7af32d4e854a5a521a24583a6f25a1b6685bd17f0bc7ed3fbba5da88291226a9b7c0db1"}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "9e813e6291b188341b055914fa87e40d1fec7843e12f2d867a66423f373333f5df4fed10e5fca4d531fcaf198ca83e4111ed9826f7043feb6631534bce062a4044183124a0e1fa4486359d51a330374b6b20c404f3c38690e2fba4a6ecd094681c9e26ec413199443dc3bb9da59bbcff926acee1c0727ee5ec084c3b741983896caaca40e1d750d3ca4920a9ab35d0744f566a7a2c8f25e9ebb34db3fc2f4ccb38f5c1ac982d424ce99bea24afd1a19d3582dba26d384a0f41072db63ae25c03dcdf77d000ada73a36ed2ef1b9a5d7910276793f882968c34585429e81de099e94b22854a9408b5d8704db2559f52ae5b0c65b1491b330a6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7f, 0x4, "16fe9bd848bf7941a0eb0696612f1b926ac743e951e47a058e3c0924188d8993008f41f29144d092a5d1631ae7c55cdce4884e8c1971f68c3a05c7a08cbebb28c7650fa051098a7fdc0acb67122d0aac57ef987d49a4d3004293df673a64b146ae15ceccae1692263b8daba8d686992fa81627104d9ecbe7b84708"}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '8)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':&)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*&\\^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',^})\xae\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 't-M.\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ')],]]#):%&/%:)-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x7d, 0x5, "b986c58c073fcd9ff961130fe173a34e52009406d39a545c9c7bfe8fc9238ef98330f66bdbb842c8a7e2e401eab4b4ffd7215452784ee837c6f1003fe0a19af8de41d56bd3a8e9a984452dcc74c9f794b9dde699f8245f1cbb7ff297bcc47b6c0a7cc107298278765c8251632d97ee75ca5a6a114571b62721"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'bb\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'bb\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%#@)!]@%+@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sed\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x14cc}, 0x1, 0x0, 0x0, 0x8000844}, 0x80) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x3c, r10, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000801) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000002300), r9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000002340)={r7, 0x0, 0x30}, &(0x7f0000002380)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000023c0)={r7, 0x3, 0x6, 0xfff8, 0x0, 0xf, 0x7f, 0x4, {r11, @in6={{0xa, 0x4e22, 0x3, @mcast1, 0x1}}, 0x9, 0x1000, 0x7, 0xbc, 0x10000}}, &(0x7f0000002480)=0xb0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x30, 0x1401, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000025c0)) 1.593438251s ago: executing program 0 (id=8006): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34837a00", @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34837a00", @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) unshare(0x20000400) (async) unshare(0x20000400) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r6) sendmmsg$unix(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000001c00)="11b8e2e95f", 0x5}, {&(0x7f0000001c40)="b65ede783a15f51188f244407b54032c8de25afb0afe506046e064644f2466c938a010a17fcb02b152f6fafc6a07c80e1748758b76ab0c765cc835d6bc3143018f56accc7455f32a5ded552d125de404258cf9a07cb2bb9df4cfc7a4878fae90f0f2add904f5f9fd5e2f0943af860ab4f794d3e60998d45fb240e3618e98cb897c73aef2860f4a3854cf598c9d23c56ed4923b56dd2484bcd17db02fb475ae043f50d95d527a8151ce0d49dad5978796e94f56deeee4a613358d170e0c1574fe0be3b4", 0xc3}, {&(0x7f0000001d40)="be5173b5faac7a921e735f22e37b4c89c5b395256ef33d740561b860ac4d892da8c4f613ad50893212b37a34bd18", 0x2e}, {&(0x7f0000002f40)="edcb47e6a89a35448916ef8ebe79d0feb594b2acdb1d1ef934dbaf81338fc0195bea3a23d4957a5a35512ce1d891f82850b09da2702856be8e8493ee649b57aeb62b3d9c03cd312e3f0fe654c9825f8da087d346a7f65037783aec233b320c9b6ffeecb6e30e6cc7ece99e6c4e19f0f034de1a2a46de008038fbc586e4d78da4739e657cd5f78bf057564063d60f0ef831d1db86e539c39743d54c6e3c3c8d8b1f513da969dbcee48499cf22b08d527c8bc0232084916e8522d5334eb93683fe5e57e9c9ebb7ca0b17d805fd7e6c04543b1d1964e4e56337", 0xd8}, {&(0x7f0000003040)="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", 0xe12}], 0x5}}], 0x1, 0x20000800) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x2000}, 0x4) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x2000}, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r9, &(0x7f0000000100)="da", 0x1, 0x4004070, &(0x7f0000000000)={0xa, 0x4e21, 0xffffff00, @local, 0x7}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 1.403087757s ago: executing program 0 (id=8007): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x6) socket$inet6(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x14, 0x2, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="186b00000c00000000000000070000009d1404001000000000b09efae7a6d134184b00000600000000000000000000006f6ddd8bda3d8ad17f88d718120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000033000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xc, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x2a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x22f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x0, 0x0, 0x0, 0x7, 0xc, 0xffffffffffffffe0, 0x14}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x989, 0xf9, &(0x7f0000000640)=""/249, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000000780)=[r3, r3, r3], 0x0, 0x10, 0x4}, 0x94) 1.400319346s ago: executing program 1 (id=8008): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000003080)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71", 0x8b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.215278849s ago: executing program 1 (id=8012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x140e, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) 1.152388149s ago: executing program 3 (id=8013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) r2 = socket(0x11, 0xa, 0x10000) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000140)={&(0x7f0000000040)=@ax25={{0x3, @default}, [@default, @remote, @default, @rose, @default, @netrom, @default, @bcast]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/38, 0x26}], 0x2}, 0x4000a000) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000008000204060003800006004514001c0000000009119078640100fcac14141400004e230008907800"], 0x2a) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) (async) socket(0x11, 0xa, 0x10000) (async) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$can_j1939(r2, &(0x7f0000000140)={&(0x7f0000000040)=@ax25={{0x3, @default}, [@default, @remote, @default, @rose, @default, @netrom, @default, @bcast]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/38, 0x26}], 0x2}, 0x4000a000) (async) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000008000204060003800006004514001c0000000009119078640100fcac14141400004e230008907800"], 0x2a) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)) (async) 1.143322879s ago: executing program 4 (id=8014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x80}]}}]}, 0x4c}}, 0x800) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) socket$nl_generic(0x10, 0x3, 0x10) 1.018611569s ago: executing program 1 (id=8015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002f80)={'filter\x00', 0x6002, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7f, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@arp={@dev, @multicast2, 0x0, 0xff000000, 0x10, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x518) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f00000002c0)) r6 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r6, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x6) close(r7) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f00000008c0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r5, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x38, r8, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\t'}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x38}}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r8, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x3d, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 972.524961ms ago: executing program 3 (id=8016): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) (async) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x30, r8, 0x1, 0x70bd2c, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0xffffffff, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040004) 820.116065ms ago: executing program 2 (id=8017): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x4, 0x65, 0x6, 0x4, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x53, 0x1, 0x5, [{@multicast2, 0x4e20ffff}]}, @timestamp_addr={0x44, 0x3c, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {@rand_addr=0x64010102}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast}, {@dev, 0x4}]}]}}}}}}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) 770.977476ms ago: executing program 4 (id=8018): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x3, 0x4da, [0x200000000080, 0x0, 0x0, 0x2000000002be, 0x2000000002ee], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x71, 0x22f0, 'bridge_slave_1\x00', 'tunl0\x00', 'ip6tnl0\x00', 'veth0_to_bridge\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0x4fce35710b75c88d], @remote, [0xff], 0x6e, 0x1d6, 0x20e, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xbdb9, 'system_u:object_r:modules_object_t:s0\x00'}}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x3, 0x10, 0x201, 'veth1_to_team\x00', 'wg0\x00', 'veth1_to_hsr\x00', 'batadv0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff], 0xee, 0x126, 0x15e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x6, 0x7fffffff, 0x1, 0x1}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x0, 0x6, 0x1, 0x1}}}], [@snat={'snat\x00', 0x10, {{@random="3844d524a7cf", 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}, {0x3, 0x12, 0x601d, 'bridge_slave_1\x00', 'ip6_vti0\x00', 'wlan0\x00', 'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@random="56410edcfee6", 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 0xfffffffffffffffd}}}}]}]}, 0x552) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000600)={'veth1_to_bridge\x00', {0x2, 0x4e24, @empty}}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001b40)=@broute={'broute\x00', 0x20, 0x4, 0x14b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000680], 0x0, &(0x7f0000000640), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x2, 0x6004, 'dvmrp0\x00', 'syzkaller1\x00', 'veth1_to_team\x00', 'bond0\x00', @multicast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x8c6, 0x946, 0x976, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'wg0\x00', {0xff}, 'hsr0\x00', {}, 0x6, 0xa}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x3}, {0x1, 0x2}, {0x6, 0x3}, {0x7fffffff, 0x2}, {0x0, 0x3}, {0x9, 0x3}, {0x7, 0x3}, {0x8, 0x1}, {}, {0x80000001, 0x3}, {0x10000}], [{0x10, 0x1}, {0x100, 0x3ff}, {0x6, 0x6}, {0x0, 0x9}, {0x1ff, 0x7fff}, {0x7, 0xfff}, {0x9, 0x9b50}, {0xd, 0xf2}, {0x0, 0xffffffff}, {0x4, 0xf}, {0x3, 0x8}], 0x8, 0x9}, {[{0x7}, {0x1fda, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x9, 0x2}, {0x1, 0x3}, {0x10001, 0x1}, {0xc}, {0x5, 0x1}, {0xe, 0x1}, {0x2}], [{0xffffff81, 0x3}, {0x40, 0xc}, {0x30, 0xf9a1}, {0x1, 0x1000}, {0xbf8, 0x8}, {0x6}, {0x400, 0x4}, {0x2}, {0xff, 0x5}, {0x3, 0x2}, {0x80, 0x8}], 0x7, 0x4}, {[{0xffffffff, 0x2}, {0xb}, {0x4, 0x1}, {0xdf4, 0x1}, {0x101, 0x3}, {0x1000}, {0x6, 0x3}, {0x2, 0x1}, {0x822, 0x3}, {0x6}, {0x7}], [{0x0, 0xa}, {0xfff, 0x9}, {0x7cf0, 0x1000}, {0x4}, {0x1ff, 0xfffffffd}, {0x10000, 0x5}, {0x10001, 0x76}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0xfffffffa}, {0x7, 0xd}], 0x7, 0x4}, {[{0x0, 0x1}, {0x7, 0x2}, {0x0, 0x3}, {0x3ff}, {0x9, 0x3}, {0x0, 0x3}, {0x8}, {0x848}, {0x54, 0x1}, {0x6, 0x3}, {0xff}], [{0x7, 0x1}, {0x54, 0x80000000}, {0x8, 0x6}, {0x0, 0x9}, {0x10, 0x5}, {0x9, 0x4}, {0x7fffffff, 0x4}, {0x15, 0x2deb}, {0x1, 0x80b}, {0x4, 0x1}, {0x80000000, 0x6}], 0x3, 0x9}, {[{0x8, 0x3}, {0x2, 0x2}, {0x7, 0x2}, {0xf29, 0x3}, {0x40}, {0x6}, {0x100, 0x3}, {0x5, 0x2}, {0x1b8, 0x3}, {0x8, 0x3}, {0x6, 0x1}], [{0x400, 0x5}, {0x800, 0x2}, {0x43, 0x6195}, {0xfffff800, 0x8}, {0x7, 0x2}, {0x9, 0x7d}, {0x10, 0x200}, {0x40, 0x46c8914e}, {0x1, 0x200}, {0x37, 0xfffffffd}, {0xf68, 0x3}], 0x2, 0x4}, {[{0x3, 0x1}, {0x4, 0x2}, {0x200, 0x1}, {0x1ba6, 0xe976f404fd7dc500}, {0xd91a}, {0x3, 0xa206eb645dcd53e6}, {0x7ff, 0x2}, {0x2, 0x3}, {0x1}, {0x9, 0x3}, {0x2, 0x2}], [{0x4, 0xfffffff7}, {0x3, 0x6}, {0xd, 0x6}, {0x8001, 0xfffffffb}, {0x68, 0x2}, {0x2, 0x21f}, {0xfffffff8, 0xffff}, {0x0, 0x8d5}, {0x20, 0x2}, {0x3, 0x9}, {0x7, 0xff}], 0x9, 0xa}, {[{0x8}, {0x9}, {0x2, 0x2}, {0x7ff, 0x2}, {0xffffffff}, {0xdcb, 0x2}, {0xfff, 0x1}, {0x0, 0x1}, {0xc3e7, 0x2}, {0xc, 0x2}, {0x100, 0x3}], [{0x200, 0x400}, {0xa635, 0x4}, {0xf95, 0x7}, {0x3, 0xb774}, {0x3, 0x6}, {0x9, 0x1ff}, {0x5, 0x2}, {0xfffffff9, 0x8}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x6}], 0x2, 0x8}, {[{0x200, 0x2}, {0xb, 0x3}, {0x470b, 0x2}, {0x1, 0x2}, {0x9, 0x3}, {0x5}, {0x3}, {0x3}, {0x3, 0x2}, {0xa, 0x1}, {0x2c4ac6f6, 0x3}], [{0x5, 0x1ff}, {0xecab, 0x3}, {0x1, 0x3}, {0x6f1d, 0x1}, {0xffffffbc, 0x7}, {0xfffffe00, 0xffffff00}, {0x1ff, 0x101}, {0x9, 0x2}, {0xfffffff8, 0x9dc1}, {0x8bb7, 0x7}, {0x4, 0x7}], 0x6, 0x6}, {[{0x3}, {0x7f}, {0x7fff}, {0x8}, {}, {}, {0x1}, {0x9}, {0x40, 0x3}, {0x9, 0x1}, {0x0, 0x3}], [{0x1, 0x7}, {0x0, 0x9}, {0x2}, {0x7, 0x9}, {0xffffffff, 0xe4}, {0x5, 0x2}, {0x0, 0x4}, {0x2642, 0xde5fbb6}, {0x1, 0x4}, {0x5dd1879d}, {0x0, 0x80000000}], 0x7, 0x6}, {[{0x9, 0x1}, {0x3, 0x2}, {0x7}, {0xc70, 0x3}, {0xc0b, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x55f, 0x1}, {0x8}], [{0x4, 0x8}, {0x7, 0x7}, {0x400, 0x5}, {0xfffffff1, 0x7}, {0x2, 0xa9}, {0x8, 0xe}, {0x0, 0x3}, {0x8, 0x80000001}, {0xfff, 0x2}, {0x9}, {0x7, 0x9}], 0x7, 0x9}, {[{0x101}, {0xbfe, 0x2}, {0x9, 0x1}, {0x9}, {0x1, 0x1}, {0x200, 0x2}, {0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x8, 0x3}, {0x9, 0x2}], [{0x6, 0xfffffffe}, {0x7, 0x3}, {0x2f24, 0x7}, {0x10001, 0x5}, {0x1, 0x3}, {0xf6}, {0x8, 0x7}, {0x5, 0x80}, {0x3, 0x5}, {0x4, 0xf77}, {0x9}], 0x3, 0xa}], 0xa, 0x1}}}], [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x7, {0x6c}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x9bfe, 'nr0\x00', 'pim6reg\x00', 'gretap0\x00', 'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, [0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x234d9adf}}}], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}, {0x3, 0x1a, 0x17, 'veth0_to_hsr\x00', '\x00', 'bond_slave_0\x00', 'pim6reg1\x00', @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="24096216986b", [0x0, 0xff], 0xe6, 0x11e, 0x14e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xff, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 0x40, 0x88, 0x20, 0x0, 0x4e23, 0x4e22, 0x4e21, 0x4e20}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xffffffffffffffec}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x20, 0x8847, 'nicvf0\x00', 'bridge_slave_1\x00', 'pimreg0\x00', 'bond0\x00', @local, [0xff, 0xff, 0xff, 0xf478305dc282008e, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, [0xff, 0xff], 0x856, 0x856, 0x88e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x2}, {0x4, 0x2}, {0x8}, {0x6, 0x1}, {0x3}, {0x4, 0x2}, {0x3, 0x1}, {0xffff, 0x1}, {0xfffffff7, 0x1}, {0xfffffffe, 0x70db5e7cd9e973a}, {0x2}], [{0x3, 0x8}, {0x0, 0x7}, {0xe1e7, 0xd}, {0x6, 0x3}, {0x4d8, 0x8}, {0x10, 0x7}, {0x236, 0x80000001}, {0x8000, 0x3}, {0x3, 0xe}, {0x5, 0xb}, {0x1, 0x4}], 0x8, 0x8}, {[{0x4, 0x2}, {0x0, 0x2}, {0xfffff8a5, 0x3}, {0x4000, 0x3}, {0x401, 0x3}, {0x6, 0x2}, {0x5, 0x2}, {0x81, 0x1}, {0x2}, {0x1, 0x1}, {0x3f}], [{0x4, 0x5}, {0xe, 0xa649}, {0x0, 0x7}, {0x10, 0x4}, {0xe, 0xff}, {0x5, 0x7}, {0xd, 0x4}, {0xffffff01, 0xb81}, {0x10000, 0xfffffff8}, {0x9, 0x100}, {0x8ae}], 0x2, 0x4}, {[{0xee4d, 0x1}, {0x7, 0x2}, {0x3, 0x1}, {0x9, 0x2}, {0x4, 0x2}, {0x80}, {0x60a, 0x2}, {}, {0x8000, 0x3}, {0x5}, {0x1}], [{0x800, 0x4}, {0xb, 0x7}, {0x0, 0x100}, {0x401, 0xe}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x10000, 0x5}, {0x6, 0x5}, {0x3, 0x3}], 0xb, 0xb}, {[{0x6bc, 0x1}, {0x1, 0x1}, {0xe43}, {0x5, 0x2}, {0x9, 0x3}, {0xc6}, {0x1e, 0x1}, {0x0, 0x3}, {0x6}, {0xff}, {0x232, 0x42a24b8f50f44bd2}], [{0xc342, 0x6}, {0x3, 0xf0d}, {0x3, 0xb236}, {0x6, 0x98b9}, {0x81, 0x8001}, {0x3, 0xce}, {0x3dce82a9, 0x8}, {0x6, 0xa}, {0x4, 0x525}, {0xa9e4, 0x3}, {0x3, 0x5}], 0x9, 0x3}, {[{0xf, 0x1}, {0x7, 0x2}, {0x4}, {0x4, 0x3}, {0x456b, 0x5}, {0x7fff, 0x2}, {0x2}, {0x2, 0x2}, {0x8, 0x3}, {0x3, 0x2}, {0x6, 0x1}], [{0x1000, 0x1}, {0xf63, 0x7}, {0x400, 0x8}, {0x2}, {0xfffffffe, 0x2}, {0x81, 0x1}, {0x4, 0x3}, {0xa, 0x18}, {0xa35, 0x8}, {0x400, 0x1}, {0x25, 0x6}], 0x8, 0x7}, {[{0x8, 0x3}, {0x1}, {0xfffffff7, 0x2}, {0x2, 0x1}, {0x8000, 0x2}, {0x3ff, 0x2}, {0x100, 0x2}, {0xd36, 0x1}, {0xf, 0x1}, {0x1a73, 0x1}, {0x7fff, 0x1}], [{0x80, 0x10001}, {0x0, 0xffffffff}, {0x6c, 0x9}, {0xb2f, 0x680}, {0x200, 0x9}, {0x3, 0x80000001}, {0x7, 0xffffffff}, {0x8, 0x4}, {0xb0, 0x2}, {0xfffffb54, 0x7fffffff}, {0x7, 0xa1f}], 0x9, 0x7}, {[{0x80000000, 0x2}, {0x7fffffff}, {0x5, 0x2}, {0x6, 0x3}, {0x9, 0x2}, {0x2, 0x1}, {0x5, 0x3}, {0xd}, {0x4, 0x3}, {0x5}, {0x9503, 0x2}], [{0x7fff, 0xffffffff}, {0x4, 0xc}, {0x1, 0x3208b3f8}, {0x8, 0x800}, {0xa8a, 0x7fffffff}, {0x1, 0x7fffffff}, {0x6, 0x8}, {0x5, 0x9}, {0x3, 0x7f}, {0x9, 0x8}, {0xdd5, 0x80000000}], 0xa, 0x6}, {[{0x7, 0x3}, {0x7, 0x1}, {0xf, 0x3}, {0x4, 0x3}, {0xa, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x9, 0x2}, {0x4, 0x2}, {0x6, 0x3}], [{0x6937, 0x101}, {0xc24c8ead, 0x4}, {0x7ff, 0x8}, {0x80000000, 0x8000}, {0x100, 0x7}, {0x4, 0xfffffffd}, {0x8000, 0x2}, {0x31, 0x4}, {0x8, 0x10001}, {0x2, 0x2}, {0x7, 0x4d7c}], 0xa, 0x1}, {[{0xdf, 0x2}, {0x100, 0x2}, {0x0, 0x1}, {0x77d9, 0x3}, {0x7, 0x2}, {0xffffff81}, {0x4000, 0x1}, {0xffffffff}, {0x5}, {0xc957, 0x3}, {0x3, 0x3}], [{0x0, 0x7}, {0xa78, 0x5}, {0x1, 0x7ff}, {0xe85f, 0x3}, {0x1000, 0x400}, {0x5, 0xc658}, {0x8000, 0xb}, {0x7, 0x8}, {0x9, 0x1f}, {0x6, 0x2378}, {0x80000001}], 0xb, 0x2}, {[{0x3}, {0xffffffff}, {0x7, 0x1}, {0x4}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x3, 0x1}, {0x2}], [{0x6, 0x9}, {0x0, 0x4}, {0x6ac, 0x4}, {0x2}, {0xf, 0x3}, {}, {0x10001, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x5, 0xc4b}, {0x0, 0x6}], 0x3, 0xa}, {[{0x6, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x10001}, {0x7fffffff}, {0x2d, 0x2}, {0x1c9e, 0x2}, {0x7f, 0x3}, {0xb, 0x2}, {0x101, 0x1}, {0x4}], [{0x8, 0xdc46}, {0x6300, 0x81}, {0x2446, 0x8}, {0x5, 0x8}, {0x6, 0x830}, {0x4, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x10001}, {0x100, 0x7}, {0x10001, 0x7}], 0x5, 0x8}], 0x4, 0x1}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}}]}]}, 0x1530) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000001bc0), &(0x7f0000001c00)=0xc) r2 = socket(0x1d, 0x6, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000001c40)) pipe(&(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x58, 0x3e, 0x100, 0x70bd28, 0x25dfdbff, {0x18}, [@generic="19e4a40eca740f630c33c038a2fde4ac0a9c119a38a6ea7cf678cfa77e27261a213e6770e0b1a0f77876e071ee9a298cbf5f7c9ad2241d90653d0d2cb4d6b1d6cd3017"]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0xc000) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000001e00)=[{{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x1}, {0x3, 0x1}}, {{}, {0x2, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}], 0x38) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001e40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000002240)={{r1}, {@val={r6}, @max}}) getsockname$packet(r2, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000022c0)=0x14) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002300)={'veth0_to_hsr\x00'}) poll(&(0x7f0000002340)=[{r1, 0xb73550f5a99ac81d}, {r7, 0x1001}, {r0, 0x1040}], 0x3, 0x2) connect$pppoe(r3, &(0x7f0000002380)={0x18, 0x0, {0x1, @broadcast, 'vlan0\x00'}}, 0x1e) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x58, 0x1404, 0x0, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) getsockopt$MRT6(r4, 0x29, 0xd0, &(0x7f0000002500), &(0x7f0000002540)=0x4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000025c0), r4) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x78, r8, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40040d0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000002700)="8d2e9e9c4bba40474ed94f79933cceabf379ae8a7e2815ec214127439af693e6375e0b03419af1080c5bce92fd59c2322e06a7e53cf2a63fe167af1211d1974d2bba2037643977b1ea906fa84310a304e903038b09a8845779a334dffa050640479f8e", 0x63) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "35b7d8ca601f76d8ef3829f838ea6aef"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6bb576e5f1171a44fe21d197b4950dae"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "161cd2918c4f4bd581a94afb509681a9"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048804}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x14, r10, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000002a00)) 769.92265ms ago: executing program 3 (id=8019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0xff, 0x2, 0x6, 0x401}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 602.908568ms ago: executing program 2 (id=8020): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@broadcast, @local, @remote}, &(0x7f0000000080)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x139}], 0x1}}], 0x1, 0x81) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000fddbdf25050000000500220001000000050014004000000006001a004e210000487647eeda4cc755f7cf2359975bd30817eecf5839a289373609cec003548a96db69762a72cf78840db616edf0421e2257ebeef57fee95ae7b7d8b87da3a4ec1"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40081) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d800500280001000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x34}}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x2e8, 0x50}], 0x1, 0x40800) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r10 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x8085) 540.85095ms ago: executing program 0 (id=8021): r0 = socket$isdn(0x22, 0x2, 0x24) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0x80, 0x4) (async, rerun: 64) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async, rerun: 64) close(r0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 495.419341ms ago: executing program 4 (id=8022): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x20}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r2 = socket(0x11, 0x800, 0xf28) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getuid() setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r5, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, 0x0, 0x202, 0x70bd28, 0x2, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x175a}, @ETHTOOL_A_LINKMODES_OURS={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',{\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%@\\-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x7fX+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "7220d13064840b2c7411484203ac55b3a1c31a0359c3dcfb16e97233cb63940ab4d3e3b1de2f71b29e0f2e0487624ac99fc4f39c6ed5a5c1de770a03fe2ed080605f9a9b0bb7984cc1"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000007f00000000000000050007000000000008000900000000000500210000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb08000a0003000000"], 0x64}}, 0x4810) socket(0x2, 0x800, 0x8001) 416.529598ms ago: executing program 4 (id=8023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6e4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x7f, r6}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x9, '\x00', r7, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) 387.106571ms ago: executing program 3 (id=8024): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'macvlan1\x00'}) 258.864031ms ago: executing program 3 (id=8025): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000007c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @remote}], 0x30) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) recvmsg$unix(r1, &(0x7f0000000780)={&(0x7f00000000c0), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/73, 0x49}, {&(0x7f0000000400)=""/158, 0x9e}], 0x5, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x100) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 220.577198ms ago: executing program 3 (id=8026): socketpair(0x28, 0x80000, 0x3, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffb}]}, 0x48}}, 0x8010) 184.989511ms ago: executing program 2 (id=8027): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0c0) (async) sendmmsg$inet6(r0, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0c0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) read$rfkill(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x3dd1c21b865461b5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000040)=0x7964, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x5e22, 0xead, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}]}, &(0x7f0000000140)=0x10) 57.524866ms ago: executing program 4 (id=8028): r0 = socket$unix(0x1, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) r3 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r3) (async) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) (async) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close(r0) 55.846412ms ago: executing program 1 (id=8029): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x8014) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept4(r1, &(0x7f0000000800)=@qipcrtr, &(0x7f0000000880)=0x80, 0x800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="100026bd7000fbdbdf250600000005001300060000001df9065054d60f03001c13856c9a77de5cebca3b3d0e423cac014b7e00aa53f89579379cad5b57fb8cdd02e056d71e09e9c229ee95791a2519b9aa9afc8550ad5809363945809cc4f7211698f84b70dcde0dee9555b32213902bd37c135176913463eb7303b238b9a49b6923576e616343e76211d8a5249764cf6725adc24f69c18e125434901d6642182c2c1acb4b4bd66d2d39bff17394086a55d8c0b6482981"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004041) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x190, 0x0, 0x0, 0x388, 0x190, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x6, 0x8, 0x6}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@rand_addr=0x64010102, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0xfffffffe, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0, @mcast2, @private0, @empty, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@mcast1, 0x23, 0x29, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 0s ago: executing program 4 (id=8030): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000001c0)={0xc, 0x8, [0x2f3, 0x2, 0x8738, 0x4], &(0x7f0000000180)=[0x0]}) (async) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000340)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000440)=0x1c, 0x800) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000480)=0x1000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000a717301ff84ab674731ea00010000000000fcdbdf250100002c"], 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="030b0000edf3e6077586f7574cfc4047045a725e9d9d986d9d6aa04ed84a206e092c22f1dfefff3106a55a969fe48e4891cc9ece2d1a440307b9aaebf3ba290b3539e614fcc76445", @ANYRES16=r2, @ANYBLOB="010027bd7000000000000c000000200001801400020076657468315f746f5f626174616476000800030002000000180003801400038010000180080001000200000004000300"], 0x4c}}, 0x804) (async) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): - 0 [ 800.047907][T28326] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.077100][T28518] syzkaller1: entered promiscuous mode [ 800.082641][T28518] syzkaller1: entered allmulticast mode [ 800.100941][T28515] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 800.131782][T28326] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.146221][ T5144] Bluetooth: hci5: command tx timeout [ 800.165376][T28326] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.227534][T28326] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.245061][T28326] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.336139][T28326] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.348971][T28326] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.434020][T28526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6027'. [ 800.973992][T28326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 801.008550][T28326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 801.016051][T28546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6033'. [ 801.030695][T28546] netlink: 'syz.1.6033': attribute type 7 has an invalid length. [ 801.039566][T28546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6033'. [ 801.046352][T28326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 801.140057][T28546] erspan0: entered promiscuous mode [ 801.178825][T28546] gretap0: entered promiscuous mode [ 801.191876][T28326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 801.469867][T28326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.561913][T28574] openvswitch: netlink: Flow key attr not present in new flow. [ 801.571132][T28326] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.602671][T26361] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.610119][T26361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.693252][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.700704][ T6416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.994713][T28588] syzkaller0: create flow: hash 2367831854 index 1 [ 802.099109][T28584] syzkaller0: delete flow: hash 2367831854 index 1 [ 802.226445][ T5144] Bluetooth: hci5: command tx timeout [ 802.627294][T28602] netlink: 'syz.2.6046': attribute type 1 has an invalid length. [ 804.246836][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6044'. [ 804.305154][ T5144] Bluetooth: hci5: command tx timeout [ 804.427428][T28614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6049'. [ 804.463368][T28326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.544314][T28616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.693021][T28326] veth0_vlan: entered promiscuous mode [ 804.727145][T28326] veth1_vlan: entered promiscuous mode [ 804.769014][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6055'. [ 804.829302][T28326] veth0_macvtap: entered promiscuous mode [ 804.841092][T28631] syzkaller0: entered promiscuous mode [ 804.848878][T28631] syzkaller0: entered allmulticast mode [ 804.860556][T28637] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6057'. [ 804.879448][T28326] veth1_macvtap: entered promiscuous mode [ 805.020071][T28326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.090022][T28326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.129598][T28648] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6060'. [ 805.165257][ T6416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.179575][ T6416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.200215][ T6416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.247345][ T6416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.461110][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.494598][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.595797][ T6416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.621985][ T6416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.733311][T28673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6067'. [ 805.743249][T28674] netlink: 'syz.4.6068': attribute type 12 has an invalid length. [ 805.769948][T28673] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 805.779823][T28673] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 805.800062][T28673] team0: Failed to send options change via netlink (err -105) [ 805.808884][T28673] team0: Port device batadv1 added [ 805.826868][T28646] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 805.887904][T28674] bond12: Unable to set down delay as MII monitoring is disabled [ 805.917538][T28674] bond12 (unregistering): Released all slaves [ 806.102656][T28683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6069'. [ 806.154812][T28682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6069'. [ 806.612072][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 806.623086][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 806.632774][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 806.641332][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 806.651707][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 807.303277][T28703] ip6_vti0 speed is unknown, defaulting to 1000 [ 807.493013][T26361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.537003][T28757] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6087'. [ 807.777942][T26361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.806802][T28762] netlink: 'syz.0.6091': attribute type 1 has an invalid length. [ 807.850985][T28771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.944283][T28766] syzkaller0: entered promiscuous mode [ 807.955910][T28766] syzkaller0: entered allmulticast mode [ 807.998610][T26361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.006021][T28777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6095'. [ 808.020654][T28777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6095'. [ 808.033418][T28777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6095'. [ 808.053260][T28767] gretap2: entered promiscuous mode [ 808.103837][T26361] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.590957][T28799] netlink: 'syz.0.6099': attribute type 1 has an invalid length. [ 808.643869][T28799] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 808.707035][ T5144] Bluetooth: hci1: command tx timeout [ 808.753185][T26361] dummy0: left allmulticast mode [ 808.780687][T26361] dummy0: left promiscuous mode [ 808.791432][T26361] bridge0: port 3(dummy0) entered disabled state [ 808.826905][T26361] bridge_slave_1: left allmulticast mode [ 808.832605][T26361] bridge_slave_1: left promiscuous mode [ 808.883052][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.918003][T26361] bridge_slave_0: left allmulticast mode [ 808.923848][T26361] bridge_slave_0: left promiscuous mode [ 808.931280][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.314031][T26361] bond2 (unregistering): (slave gretap1): Releasing active interface [ 809.418732][T26361] dvmrp0 (unregistering): left allmulticast mode [ 809.817737][T28829] __nla_validate_parse: 1 callbacks suppressed [ 809.817753][T28829] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6106'. [ 810.216665][T26361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.229690][T26361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.240214][T26361] bond0 (unregistering): Released all slaves [ 810.367936][T26361] bond1 (unregistering): (slave veth3): Releasing active interface [ 810.376739][T26361] bond1 (unregistering): Released all slaves [ 810.391290][T26361] bond2 (unregistering): Released all slaves [ 810.527495][T26361] bond3 (unregistering): Released all slaves [ 810.669349][T26361] bond4 (unregistering): (slave veth9): Releasing active interface [ 810.678331][T26361] bond4 (unregistering): Released all slaves [ 810.785692][ T5144] Bluetooth: hci1: command tx timeout [ 810.823939][T26361] bond5 (unregistering): Released all slaves [ 810.964720][T26361] bond6 (unregistering): Released all slaves [ 811.093193][T26361] bond7 (unregistering): Released all slaves [ 811.229039][T26361] bond8 (unregistering): Released all slaves [ 811.242471][T26361] bond9 (unregistering): Released all slaves [ 811.255673][T26361] bond10 (unregistering): Released all slaves [ 811.395744][T26361] bond11 (unregistering): Released all slaves [ 811.409409][T28703] chnl_net:caif_netlink_parms(): no params data found [ 811.444079][T28833] syzkaller1: entered promiscuous mode [ 811.474936][T28833] syzkaller1: entered allmulticast mode [ 811.617448][T28840] netlink: 'syz.2.6108': attribute type 1 has an invalid length. [ 811.747173][T26361] tipc: Disabling bearer [ 811.756203][T26361] tipc: Disabling bearer [ 811.762096][T26361] tipc: Left network mode [ 811.821683][T28840] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 811.895521][T28703] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.970563][T28703] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.982983][T28703] bridge_slave_0: entered allmulticast mode [ 812.020660][T28703] bridge_slave_0: entered promiscuous mode [ 812.038748][T28703] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.095832][T28703] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.123588][T28703] bridge_slave_1: entered allmulticast mode [ 812.142136][T28703] bridge_slave_1: entered promiscuous mode [ 812.228442][T28875] netlink: 'syz.3.6117': attribute type 1 has an invalid length. [ 812.280554][T28879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6117'. [ 812.318154][T28879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6117'. [ 812.359293][T28703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.377139][T28878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6118'. [ 812.439065][T28703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.570867][T28892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.616828][T28894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6119'. [ 812.691377][T28703] team0: Port device team_slave_0 added [ 812.813251][T28904] nbd: must specify a device to reconfigure [ 812.865258][ T5144] Bluetooth: hci1: command tx timeout [ 812.895411][T28703] team0: Port device team_slave_1 added [ 813.282879][T28902] syzkaller0: entered promiscuous mode [ 813.290524][T28902] syzkaller0: entered allmulticast mode [ 813.316840][T28925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6126'. [ 813.383650][T28703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.408626][T28703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.446056][T28703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.948552][ T5144] Bluetooth: hci1: command tx timeout [ 815.545936][T28703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.553125][T28703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.631561][T28703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.802374][T28950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6133'. [ 815.949385][T28957] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6134'. [ 816.030012][T28703] hsr_slave_0: entered promiscuous mode [ 816.046861][T28703] hsr_slave_1: entered promiscuous mode [ 816.064030][T28703] debugfs: 'hsr0' already exists in 'hsr' [ 816.086157][T28703] Cannot create hsr debugfs directory [ 816.097059][T28960] bond0: (slave gre0): Error: Device type is different from other slaves [ 816.293675][T28970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6138'. [ 816.347217][T26361] hsr_slave_0: left promiscuous mode [ 816.363343][T26361] hsr_slave_1: left promiscuous mode [ 817.098521][T26361] team0 (unregistering): Port device team_slave_1 removed [ 817.159114][T26361] team0 (unregistering): Port device team_slave_0 removed [ 817.526701][T28967] netlink: 'syz.3.6137': attribute type 5 has an invalid length. [ 817.551946][T28968] netlink: 'syz.3.6137': attribute type 5 has an invalid length. [ 817.641363][T28995] netlink: zone id is out of range [ 817.663683][T28995] netlink: zone id is out of range [ 817.683107][T28995] netlink: zone id is out of range [ 817.688563][T28995] netlink: zone id is out of range [ 817.694804][T28995] netlink: zone id is out of range [ 817.701084][T28995] netlink: zone id is out of range [ 817.707299][T28995] netlink: zone id is out of range [ 817.712461][T28995] netlink: zone id is out of range [ 817.725475][T28995] netlink: zone id is out of range [ 817.737545][T28995] netlink: zone id is out of range [ 817.770965][T28986] syzkaller0: entered promiscuous mode [ 817.785267][T28986] syzkaller0: entered allmulticast mode [ 817.803844][ T6416] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.827717][ T6416] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.226797][T29020] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6145'. [ 818.674776][T29037] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 818.777499][T29043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6147'. [ 820.572319][ T6416] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.581398][ T6416] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.718167][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6148'. [ 820.736586][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6148'. [ 820.903150][ T30] audit: type=1800 audit(1770404988.471:8): pid=29054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6150" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2818 res=0 errno=0 [ 821.236878][T29076] batman_adv: batadv0: Adding interface: dummy0 [ 821.244380][T29076] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.272945][T29076] batman_adv: batadv0: Interface activated: dummy0 [ 821.568995][T29033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.610063][T28703] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 821.654570][T28703] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 821.756886][T28703] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 821.835403][T28703] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 822.058206][T29104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6162'. [ 822.142905][T29104] geneve2: entered promiscuous mode [ 822.299956][T29114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6164'. [ 822.363384][T28703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.418881][T28703] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.455730][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.463153][T26361] IPVS: stop unused estimator thread 0... [ 822.463157][ T6416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.598157][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.605434][ T6416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.827814][T29149] netlink: 'syz.0.6173': attribute type 13 has an invalid length. [ 822.869556][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6173'. [ 822.917233][T29149] netlink: 'syz.0.6173': attribute type 13 has an invalid length. [ 822.979804][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6173'. [ 823.222978][T29166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.501838][T28703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.552817][T29192] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 823.638832][T29192] netlink: 'syz.3.6181': attribute type 1 has an invalid length. [ 823.790667][T29199] bond1: (slave geneve3): making interface the new active one [ 823.800142][T29199] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 823.820921][ T6426] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 823.856449][ T6426] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 823.930772][ T6426] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 823.956234][ T6426] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 824.477266][T29242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6192'. [ 824.509535][T28703] veth0_vlan: entered promiscuous mode [ 824.539917][T28703] veth1_vlan: entered promiscuous mode [ 824.693713][T28703] veth0_macvtap: entered promiscuous mode [ 824.743368][T28703] veth1_macvtap: entered promiscuous mode [ 824.848601][T28703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.888559][T28703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.947754][ T6433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.985016][ T6433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.994102][ T6433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.043727][ T6433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.113673][T29264] xt_socket: unknown flags 0x50 [ 825.206864][T29264] sctp: [Deprecated]: syz.1.6198 (pid 29264) Use of int in max_burst socket option deprecated. [ 825.206864][T29264] Use struct sctp_assoc_value instead [ 825.522045][ T6416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.555179][ T6416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.632896][T26349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.668890][T26349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.778563][T29291] netlink: 'syz.3.6204': attribute type 1 has an invalid length. [ 825.781877][T29289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6203'. [ 825.829156][T29289] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6203'. [ 826.218264][T29316] netlink: 'syz.1.6207': attribute type 1 has an invalid length. [ 826.326090][T29320] netlink: 'syz.3.6208': attribute type 2 has an invalid length. [ 826.672819][T29341] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6214'. [ 826.733430][T29341] netlink: 21 bytes leftover after parsing attributes in process `syz.1.6214'. [ 826.776184][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6216'. [ 826.806053][T29341] netlink: 'syz.1.6214': attribute type 1 has an invalid length. [ 826.859230][T29350] net_ratelimit: 153 callbacks suppressed [ 826.859253][T29350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.050033][T29356] kthread_run failed with err -4 [ 827.191722][T29370] sock: sock_set_timeout: `syz.4.6219' (pid 29370) tries to set negative timeout [ 827.263497][T29374] netem: change failed [ 827.379532][T29384] lo speed is unknown, defaulting to 1000 [ 827.416107][T29384] lo speed is unknown, defaulting to 1000 [ 827.423111][T29384] lo speed is unknown, defaulting to 1000 [ 827.496822][T29384] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 827.609589][T29389] netlink: 'syz.1.6226': attribute type 3 has an invalid length. [ 827.634403][T29389] netlink: 'syz.1.6226': attribute type 3 has an invalid length. [ 827.668322][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 827.679551][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 827.688027][T29384] lo speed is unknown, defaulting to 1000 [ 827.697931][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 827.706288][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 827.714403][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 827.718876][T29384] lo speed is unknown, defaulting to 1000 [ 827.757637][T29384] lo speed is unknown, defaulting to 1000 [ 827.830478][T29384] lo speed is unknown, defaulting to 1000 [ 827.838785][T29384] lo speed is unknown, defaulting to 1000 [ 827.934088][T29399] netlink: 'syz.3.6228': attribute type 1 has an invalid length. [ 827.975764][T29384] lo speed is unknown, defaulting to 1000 [ 828.013071][T29384] lo speed is unknown, defaulting to 1000 [ 828.038755][T29384] lo speed is unknown, defaulting to 1000 [ 828.101707][T29406] veth0: entered promiscuous mode [ 828.125686][T29406] __nla_validate_parse: 2 callbacks suppressed [ 828.125708][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6230'. [ 828.319467][T29422] netlink: 'syz.0.6231': attribute type 1 has an invalid length. [ 828.591182][T29431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6234'. [ 828.837355][T29392] ip6_vti0 speed is unknown, defaulting to 1000 [ 828.982468][T29445] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6237'. [ 829.285910][T29455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6240'. [ 829.759903][ T6426] `: (slave netdevsim0): Releasing backup interface [ 829.827808][ T5144] Bluetooth: hci3: command tx timeout [ 830.237147][T29496] pim6reg: entered allmulticast mode [ 830.348971][T29392] chnl_net:caif_netlink_parms(): no params data found [ 830.578972][ T6426] veth0_to_bridge: left allmulticast mode [ 830.586444][ T6426] veth0_to_bridge: left promiscuous mode [ 830.602729][ T6426] bridge0: port 3(veth0_to_bridge) entered disabled state [ 830.648914][ T6426] .: left allmulticast mode [ 830.653580][ T6426] .: left promiscuous mode [ 830.679807][ T6426] bridge0: port 2(.) entered disabled state [ 830.701433][T29525] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6253'. [ 830.748525][ T6426] bridge_slave_0: left allmulticast mode [ 830.755831][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.788150][T29532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6253'. [ 830.842206][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'. [ 831.004601][T29544] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6259'. [ 831.252565][ T6426] bond7 (unregistering): (slave vti0): Releasing backup interface [ 831.324571][ T6426] bond4 (unregistering): (slave gretap2): Releasing active interface [ 831.421085][ T6426] bond6 (unregistering): (slave gretap3): Releasing active interface [ 831.833580][ T6426] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.843930][ T6426] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.859134][ T6426] ` (unregistering): Released all slaves [ 831.915182][ T5144] Bluetooth: hci3: command tx timeout [ 832.009053][ T6426] bond1 (unregistering): (slave bond2): Releasing backup interface [ 832.018140][ T6426] bond1 (unregistering): Released all slaves [ 832.157080][ T6426] bond2 (unregistering): Released all slaves [ 832.171591][ T6426] bond3 (unregistering): Released all slaves [ 832.184514][ T6426] bond4 (unregistering): Released all slaves [ 832.198687][ T6426] bond5 (unregistering): (slave veth5): Releasing active interface [ 832.214052][ T6426] bond5 (unregistering): Released all slaves [ 832.350343][ T6426] bond6 (unregistering): Released all slaves [ 832.502752][ T6426] bond0 (unregistering): (slave veth7): Releasing active interface [ 832.512606][ T6426] bond0 (unregistering): Released all slaves [ 832.659940][ T6426] bond7 (unregistering): Released all slaves [ 832.673889][ T6426] bond8 (unregistering): Released all slaves [ 832.902291][T29566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6265'. [ 832.961014][ T6426] tipc: Disabling bearer [ 832.977331][T29567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6265'. [ 833.013553][ T6426] tipc: Left network mode [ 833.014268][T29392] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.031687][T29575] netlink: 'syz.0.6268': attribute type 1 has an invalid length. [ 833.044288][T29392] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.061511][T29392] bridge_slave_0: entered allmulticast mode [ 833.070222][T29392] bridge_slave_0: entered promiscuous mode [ 833.082842][ T6426] IPVS: stopping backup sync thread 21502 ... [ 833.085311][T29392] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.098211][T29392] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.105715][T29392] bridge_slave_1: entered allmulticast mode [ 833.133200][T29392] bridge_slave_1: entered promiscuous mode [ 833.295818][T29585] __nla_validate_parse: 1 callbacks suppressed [ 833.295840][T29585] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6270'. [ 833.354283][T29392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.398872][T29392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.451607][T29585] netlink: 'syz.4.6270': attribute type 1 has an invalid length. [ 833.459895][T29585] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6270'. [ 833.484919][T29585] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6270'. [ 833.505686][T29585] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6270'. [ 833.580505][T29392] team0: Port device team_slave_0 added [ 833.625467][T29392] team0: Port device team_slave_1 added [ 833.881994][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6276'. [ 833.897908][T29392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.917291][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.958627][T29392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.995792][ T5144] Bluetooth: hci3: command tx timeout [ 834.001843][T29392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.012934][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.047269][T29392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.325402][T29629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6279'. [ 834.391152][T29392] hsr_slave_0: entered promiscuous mode [ 834.411832][T29392] hsr_slave_1: entered promiscuous mode [ 834.450011][T29392] debugfs: 'hsr0' already exists in 'hsr' [ 834.468439][T29392] Cannot create hsr debugfs directory [ 835.080034][T29648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6284'. [ 835.305148][ T6426] hsr_slave_1: left promiscuous mode [ 835.312091][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.367735][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.426115][ T6426] batman_adv: batadv0: Removing interface: dummy0 [ 835.701970][T29688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6293'. [ 835.909381][T29698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6294'. [ 836.075105][ T5144] Bluetooth: hci3: command tx timeout [ 836.823673][T29680] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 836.838046][T29680] bond1 (unregistering): Released all slaves [ 836.855745][T29688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6293'. [ 836.873478][T29688] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.024658][T29709] netlink: 'syz.4.6297': attribute type 1 has an invalid length. [ 837.071099][T29713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.418068][T29729] netlink: 'syz.3.6302': attribute type 9 has an invalid length. [ 837.892241][ T6426] IPVS: stop unused estimator thread 0... [ 838.310340][T29392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 838.327758][T29781] __nla_validate_parse: 7 callbacks suppressed [ 838.327779][T29781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6312'. [ 838.361147][T29392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 838.393671][T29392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 838.423568][T29392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 838.714036][T29799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6315'. [ 838.787473][T29392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.851469][T29392] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.908499][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.915813][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.117557][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.124772][ T6416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.261324][T29813] bond1: entered promiscuous mode [ 839.323910][T29815] macvlan2: entered promiscuous mode [ 839.358258][T29815] macvlan2: entered allmulticast mode [ 839.372886][T29815] bond1: (slave macvlan2): Opening slave failed [ 839.512595][T29831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6319'. [ 839.683372][T29834] bridge0: port 1(veth5) entered blocking state [ 839.725514][T29834] bridge0: port 1(veth5) entered disabled state [ 839.733130][T29834] veth5: entered allmulticast mode [ 839.741860][T29834] veth5: entered promiscuous mode [ 839.764641][T29831] bridge0: port 2(veth0_to_bond) entered blocking state [ 839.782540][T29831] bridge0: port 2(veth0_to_bond) entered disabled state [ 839.808053][T29831] veth0_to_bond: entered allmulticast mode [ 839.828412][T29831] veth0_to_bond: entered promiscuous mode [ 840.268267][T29873] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6327'. [ 840.312822][T29873] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6327'. [ 840.348277][T29392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.439381][T29883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6329'. [ 840.527955][T29882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6329'. [ 840.543981][T29887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6330'. [ 840.583189][T29392] veth0_vlan: entered promiscuous mode [ 840.646935][T29392] veth1_vlan: entered promiscuous mode [ 840.740037][T29392] veth0_macvtap: entered promiscuous mode [ 840.762924][T29892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6332'. [ 840.796930][T29392] veth1_macvtap: entered promiscuous mode [ 840.839690][T29392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.889394][T29392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.940264][T26349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.948886][T29904] netlink: 'syz.3.6335': attribute type 11 has an invalid length. [ 841.057221][T29907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6336'. [ 841.094729][T26349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.115160][T26349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.162292][T26349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.306513][T29921] syzkaller0: entered promiscuous mode [ 841.312050][T29921] syzkaller0: entered allmulticast mode [ 841.685392][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.713121][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.783127][T29949] netlink: 'syz.3.6345': attribute type 3 has an invalid length. [ 841.791481][T29949] netlink: 'syz.3.6345': attribute type 1 has an invalid length. [ 841.804205][ T6426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.816875][ T6426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.831525][T29948] netlink: 'syz.3.6345': attribute type 3 has an invalid length. [ 841.849113][T29948] netlink: 'syz.3.6345': attribute type 1 has an invalid length. [ 842.418676][T29979] openvswitch: netlink: Flow key attr not present in new flow. [ 843.340313][T30023] netlink: 'syz.2.6363': attribute type 1 has an invalid length. [ 843.361569][T30023] netlink: 'syz.2.6363': attribute type 1 has an invalid length. [ 843.444993][T30023] netlink: 'syz.2.6363': attribute type 1 has an invalid length. [ 843.495242][T30023] netlink: 'syz.2.6363': attribute type 2 has an invalid length. [ 843.514137][T30023] __nla_validate_parse: 71 callbacks suppressed [ 843.514157][T30023] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6363'. [ 843.870722][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6373'. [ 843.942628][T30066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6372'. [ 844.020659][T30069] netlink: 'syz.3.6372': attribute type 10 has an invalid length. [ 844.043153][T30059] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 844.090043][T30068] wg1: entered promiscuous mode [ 844.108095][T30068] wg1: entered allmulticast mode [ 844.167668][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6374'. [ 844.247123][T30075] : renamed from veth1_vlan (while UP) [ 844.247983][T30076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6376'. [ 844.277721][T30076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6376'. [ 844.491395][T30093] netlink: zone id is out of range [ 844.505851][T30093] netlink: zone id is out of range [ 844.532360][T30093] netlink: zone id is out of range [ 844.542113][T30093] netlink: zone id is out of range [ 844.550945][T30093] netlink: zone id is out of range [ 844.556780][T30093] netlink: zone id is out of range [ 844.562111][T30093] netlink: zone id is out of range [ 844.592471][T30101] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6382'. [ 844.612628][T30093] netlink: zone id is out of range [ 844.617191][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6381'. [ 844.739840][T30109] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6384'. [ 844.918898][T30110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 845.154997][T30136] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 845.326224][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 845.337469][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 845.358443][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 845.385583][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 845.393772][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 845.568833][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.596729][T30156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6393'. [ 845.635597][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.644178][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.660524][T30156] syzkaller1: entered promiscuous mode [ 845.667423][T30156] syzkaller1: entered allmulticast mode [ 845.686150][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.702262][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.711586][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.741384][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.754792][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.768115][T30153] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 845.978742][T30144] ip6_vti0 speed is unknown, defaulting to 1000 [ 846.005173][T30166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.479298][T30191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.554043][T30191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.586151][T30144] lo speed is unknown, defaulting to 1000 [ 847.001650][T30144] chnl_net:caif_netlink_parms(): no params data found [ 847.298777][T30144] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.320840][T30144] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.329412][T30144] bridge_slave_0: entered allmulticast mode [ 847.363078][T30144] bridge_slave_0: entered promiscuous mode [ 847.395913][T30144] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.413547][T30144] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.431881][T30144] bridge_slave_1: entered allmulticast mode [ 847.451059][T30144] bridge_slave_1: entered promiscuous mode [ 847.505469][ T5144] Bluetooth: hci4: command tx timeout [ 847.591007][T30264] netlink: 'syz.3.6423': attribute type 1 has an invalid length. [ 847.626260][T30144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.660303][T30144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.770200][T30144] team0: Port device team_slave_0 added [ 847.810431][T30144] team0: Port device team_slave_1 added [ 847.892532][T30274] x_tables: duplicate underflow at hook 1 [ 847.902341][T30144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.915713][T30144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.962164][T30144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.979183][T30144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.987330][T30144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.038139][T30144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.156018][T30144] hsr_slave_0: entered promiscuous mode [ 848.163659][T30144] hsr_slave_1: entered promiscuous mode [ 848.176107][T30144] debugfs: 'hsr0' already exists in 'hsr' [ 848.182091][T30144] Cannot create hsr debugfs directory [ 848.207843][T30272] syzkaller0: entered promiscuous mode [ 848.218277][T30272] syzkaller0: entered allmulticast mode [ 848.393751][T30286] syzkaller0: entered promiscuous mode [ 848.401759][T30286] syzkaller0: entered allmulticast mode [ 848.473778][T30303] netlink: 'syz.1.6436': attribute type 1 has an invalid length. [ 848.645120][T30314] __nla_validate_parse: 8 callbacks suppressed [ 848.645141][T30314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 848.692791][T30306] vlan2: entered allmulticast mode [ 848.744664][T30310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 848.754047][T30310] bond1: (slave bond2): making interface the new active one [ 848.762846][T30310] bond1: (slave bond2): Enslaving as an active interface with an up link [ 848.893251][T30322] netlink: 'syz.2.6441': attribute type 1 has an invalid length. [ 849.178127][T30144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.198306][T30144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.436866][T30144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.447726][T30328] netlink: 'syz.1.6442': attribute type 1 has an invalid length. [ 849.456207][T30144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.563094][T30337] tunl0: entered promiscuous mode [ 849.583428][T30337] netlink: 'syz.2.6445': attribute type 3 has an invalid length. [ 849.593359][ T5144] Bluetooth: hci4: command tx timeout [ 849.594329][T30341] delete_channel: no stack [ 849.616781][T30337] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6445'. [ 849.808891][T30144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.824970][T30144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.932625][T30350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6449'. [ 850.094615][T30144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.112488][T30144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.134483][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6453'. [ 850.291850][T30365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6454'. [ 850.362026][T30365] bond2: entered promiscuous mode [ 850.369817][T30365] bond2: entered allmulticast mode [ 850.382144][T30365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 850.400164][T30367] macvlan2: entered promiscuous mode [ 850.406445][T30367] macvlan2: entered allmulticast mode [ 850.434754][T30367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 850.624676][T30144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 850.658443][T30144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 850.680707][T30144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 850.699506][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6459'. [ 850.715471][T30144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 850.794143][T30389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6459'. [ 850.841804][T30389] netlink: 'syz.4.6459': attribute type 7 has an invalid length. [ 850.880212][T30389] netlink: 'syz.4.6459': attribute type 8 has an invalid length. [ 850.906938][T30389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6459'. [ 850.922289][T30393] "syz.2.6462" (30393) uses obsolete ecb(arc4) skcipher [ 850.931623][T30144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.957174][T30395] 8021q: VLANs not supported on ip_vti0 [ 850.977966][T30395] ip6t_srh: unknown srh match flags 5F28 [ 851.022219][T30144] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.056032][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.063269][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.129315][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.136882][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.149075][T30402] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6466'. [ 851.421583][T30415] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6470'. [ 851.676004][T30429] netlink: 'syz.3.6475': attribute type 4 has an invalid length. [ 851.684075][ T5144] Bluetooth: hci4: command tx timeout [ 851.695825][T30144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.777274][T30144] veth0_vlan: entered promiscuous mode [ 851.797556][T30144] veth1_vlan: entered promiscuous mode [ 851.893840][T30144] veth0_macvtap: entered promiscuous mode [ 851.949295][T30144] veth1_macvtap: entered promiscuous mode [ 852.047925][T30144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.123728][T30144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.191988][ T6416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.205085][ T6416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.253072][ T6416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.280683][ T6416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.316785][T30460] netlink: 'syz.3.6482': attribute type 1 has an invalid length. [ 852.506009][T26349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.540504][T26349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.630694][ T6416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.657632][ T6416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.721613][T30483] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 852.899024][T30489] sctp: [Deprecated]: syz.3.6489 (pid 30489) Use of int in maxseg socket option. [ 852.899024][T30489] Use struct sctp_assoc_value instead [ 853.038731][T30496] netlink: 'syz.1.6491': attribute type 1 has an invalid length. [ 853.098530][T30496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 853.146887][T30498] veth1: entered promiscuous mode [ 853.183560][T30498] bond3: (slave veth1): Enslaving as an active interface with a down link [ 853.227945][T30502] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 853.396308][T30520] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 853.748397][ T5826] Bluetooth: hci4: command tx timeout [ 853.794650][T30530] macvtap1: entered allmulticast mode [ 853.822967][T30530] veth0_macvtap: entered allmulticast mode [ 854.130950][T30557] gre1: entered promiscuous mode [ 854.138013][T30557] gre1: entered allmulticast mode [ 854.146786][T30554] 8021q: VLANs not supported on lo [ 854.153976][T30552] 8021q: VLANs not supported on lo [ 854.425413][T30579] __nla_validate_parse: 10 callbacks suppressed [ 854.425434][T30579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6514'. [ 854.463245][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6514'. [ 854.494273][T30583] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6513'. [ 854.518307][T30579] netlink: 'syz.0.6514': attribute type 12 has an invalid length. [ 854.584401][T30589] net_ratelimit: 52 callbacks suppressed [ 854.584425][T30589] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 854.595584][T30579] bond1: option primary_reselect: invalid value (255) [ 854.608487][T30579] bond1 (unregistering): Released all slaves [ 854.619124][T30590] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 854.716220][T30595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6519'. [ 854.737022][T30595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6519'. [ 854.751039][T30596] netlink: 'syz.4.6518': attribute type 7 has an invalid length. [ 855.472611][T30626] syzkaller1: entered promiscuous mode [ 855.490692][T30626] syzkaller1: entered allmulticast mode [ 855.491728][T30628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.828850][T30645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6532'. [ 855.847588][T30648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.922672][T30655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6536'. [ 856.374407][T30685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6546'. [ 856.442717][T30688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6548'. [ 856.557913][ T6775] IPVS: starting estimator thread 0... [ 856.665277][T30702] IPVS: using max 29 ests per chain, 69600 per kthread [ 856.873347][T30715] batadv1: entered allmulticast mode [ 857.063820][T30722] Bluetooth: MGMT ver 1.23 [ 857.109749][T30728] netlink: 'syz.3.6560': attribute type 1 has an invalid length. [ 857.193245][T30728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 857.270475][T30733] veth3: entered promiscuous mode [ 857.281888][T30733] bond3: (slave veth3): Enslaving as an active interface with a down link [ 857.333403][T30733] netlink: 212048 bytes leftover after parsing attributes in process `syz.3.6560'. [ 857.345724][T30728] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 857.632166][T30757] syzkaller0: entered promiscuous mode [ 857.648461][T30757] syzkaller0: entered allmulticast mode [ 857.859236][T30768] netlink: 'syz.4.6571': attribute type 5 has an invalid length. [ 857.864324][T30770] erspan0: entered promiscuous mode [ 857.880279][T30770] gretap0: entered promiscuous mode [ 857.886719][T30770] debugfs: 'hsr1' already exists in 'hsr' [ 857.892857][T30770] Cannot create hsr debugfs directory [ 857.919677][T30768] geneve2: entered promiscuous mode [ 857.936885][T30768] geneve2: entered allmulticast mode [ 857.978369][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 858.012345][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 858.037704][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 858.061985][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 858.404647][T30794] sit0: entered promiscuous mode [ 858.420752][T30794] netlink: 'syz.2.6577': attribute type 1 has an invalid length. [ 858.779554][T30804] netlink: 'syz.2.6579': attribute type 7 has an invalid length. [ 858.797511][T30804] netlink: 'syz.2.6579': attribute type 23 has an invalid length. [ 858.822161][T30804] netlink: 'syz.2.6579': attribute type 7 has an invalid length. [ 858.852226][T30804] netlink: 'syz.2.6579': attribute type 23 has an invalid length. [ 859.082109][T30821] netlink: 'syz.1.6585': attribute type 2 has an invalid length. [ 859.105940][T30792] ip6_vti0 speed is unknown, defaulting to 1000 [ 859.148388][T30823] netlink: 'syz.2.6586': attribute type 8 has an invalid length. [ 859.762536][T30792] lo speed is unknown, defaulting to 1000 [ 859.813601][T30858] __nla_validate_parse: 17 callbacks suppressed [ 859.813623][T30858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6597'. [ 859.952492][T30865] netlink: 'syz.1.6599': attribute type 3 has an invalid length. [ 860.038812][T30871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6600'. [ 860.051767][T30871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6600'. [ 860.067454][T30873] netlink: 'syz.4.6601': attribute type 33 has an invalid length. [ 860.128290][T30871] netlink: 412 bytes leftover after parsing attributes in process `syz.3.6600'. [ 860.166309][T30879] netlink: 'syz.2.6603': attribute type 1 has an invalid length. [ 860.313452][T30879] bond1: entered promiscuous mode [ 860.364781][T30879] bond1: entered allmulticast mode [ 860.395842][T30879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 860.408397][T30883] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 860.435581][T30885] macvlan2: entered promiscuous mode [ 860.475192][T30885] macvlan2: entered allmulticast mode [ 860.488017][T30885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 860.758542][ T6420] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 860.795046][ T6420] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 860.818809][ T6420] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 860.851322][ T6420] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 860.964337][T30917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6612'. [ 861.055320][T30914] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6611'. [ 861.101040][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6611'. [ 861.257575][T30932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6617'. [ 861.287483][T30937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6618'. [ 861.374100][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6617'. [ 861.637716][T30913] ip6_vti0 speed is unknown, defaulting to 1000 [ 862.127964][T30913] lo speed is unknown, defaulting to 1000 [ 862.405797][T30947] ip6_vti0 speed is unknown, defaulting to 1000 [ 862.607664][T30989] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 862.826726][T30947] lo speed is unknown, defaulting to 1000 [ 863.870470][T31023] xt_cgroup: xt_cgroup: no path or classid specified [ 864.045194][T31028] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 864.520220][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.577415][T31057] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 864.579044][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.624231][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.692006][T31053] syzkaller1: entered promiscuous mode [ 864.698508][T31053] syzkaller1: entered allmulticast mode [ 864.791240][T31064] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 864.794702][T31069] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 865.474190][T31111] __nla_validate_parse: 9 callbacks suppressed [ 865.474212][T31111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6673'. [ 865.771122][T31131] openvswitch: netlink: Multiple metadata blocks provided [ 865.780703][T31131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6679'. [ 866.003339][T31142] syzkaller0: entered promiscuous mode [ 866.009834][T31142] syzkaller0: entered allmulticast mode [ 866.072987][T31144] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6683'. [ 866.250856][T31153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.283954][T26698] lo speed is unknown, defaulting to 1000 [ 866.312442][T31151] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 866.320732][T26698] IPVS: starting estimator thread 0... [ 866.415059][T31159] IPVS: using max 24 ests per chain, 57600 per kthread [ 866.492577][T31161] tipc: Enabling of bearer rejected, failed to enable media [ 866.569732][T31167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6692'. [ 866.670923][T31176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6694'. [ 866.706402][T31176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6694'. [ 867.060967][T31199] tipc: Failed to remove unknown binding: 66,0,0/0:2750668425/2750668426 [ 867.070666][T31199] tipc: Failed to remove unknown binding: 66,0,0/0:2750668425/2750668426 [ 867.437811][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6710'. [ 867.555453][T31233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6712'. [ 867.616451][T31225] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 867.625194][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 867.636503][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 868.224478][T31273] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 868.487698][T31301] pim6reg527: entered allmulticast mode [ 868.747653][T31317] nla_validate_range_unsigned: 24 callbacks suppressed [ 868.747675][T31317] netlink: 'syz.4.6737': attribute type 11 has an invalid length. [ 868.985568][T31331] IPVS: length: 234 != 8 [ 869.131396][T31337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.211986][T31343] validate_nla: 2 callbacks suppressed [ 869.212006][T31343] netlink: 'syz.2.6746': attribute type 10 has an invalid length. [ 869.264420][T31346] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 869.511080][T31322] ip6_vti0 speed is unknown, defaulting to 1000 [ 869.734328][T31375] x_tables: duplicate underflow at hook 2 [ 869.936867][T31391] xt_hashlimit: max too large, truncated to 1048576 [ 869.983043][T31322] lo speed is unknown, defaulting to 1000 [ 870.118515][T31400] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 870.130526][T31400] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 870.138880][T31400] gretap1: entered promiscuous mode [ 870.144267][T31400] gretap1: entered allmulticast mode [ 870.252664][T31404] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 870.267423][ T6790] IPVS: starting estimator thread 0... [ 870.297383][T31402] syzkaller0: entered promiscuous mode [ 870.302890][T31402] syzkaller0: entered allmulticast mode [ 870.355088][T31411] IPVS: using max 27 ests per chain, 64800 per kthread [ 870.384017][T31409] team0 (unregistering): Port device team_slave_0 removed [ 870.432911][T31409] team0 (unregistering): Port device team_slave_1 removed [ 870.455092][T31409] team0 (unregistering): Port device batadv1 removed [ 871.348402][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 871.365847][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 872.893371][T31432] __nla_validate_parse: 12 callbacks suppressed [ 872.893395][T31432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6771'. [ 872.947113][T31434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6772'. [ 873.049588][T31443] netlink: 16194 bytes leftover after parsing attributes in process `syz.2.6775'. [ 873.304670][T31462] openvswitch: netlink: Flow actions attr not present in new flow. [ 876.030130][T31442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.426457][T31504] Cannot find set identified by id 3 to match [ 876.563510][T31512] syzkaller0: entered promiscuous mode [ 876.592196][T31512] syzkaller0: entered allmulticast mode [ 876.599282][T31511] netlink: 'syz.2.6791': attribute type 33 has an invalid length. [ 876.876830][T31528] vlan2: entered promiscuous mode [ 876.881943][T31528] bridge0: entered promiscuous mode [ 876.991455][T31534] sock: sock_timestamping_bind_phc: sock not bind to device [ 877.303543][T31557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6807'. [ 877.328010][T31561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6806'. [ 877.360713][T31560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6808'. [ 877.441435][T31536] ip6_vti0 speed is unknown, defaulting to 1000 [ 877.688705][T31577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6813'. [ 877.716198][T31577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6813'. [ 877.737631][T31583] netlink: 'syz.0.6814': attribute type 21 has an invalid length. [ 877.995573][T31536] lo speed is unknown, defaulting to 1000 [ 878.154575][T31600] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6818'. [ 878.348337][T31606] veth0: entered promiscuous mode [ 878.562182][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'. [ 878.635297][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'. [ 878.677997][T31611] x_tables: duplicate underflow at hook 2 [ 878.963940][T31615] netlink: 'syz.2.6823': attribute type 1 has an invalid length. [ 879.114014][T31615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 879.131761][T31601] veth0: left promiscuous mode [ 879.237222][T31619] bond2: (slave veth3): Enslaving as an active interface with a down link [ 879.339716][T31620] bond2: (slave veth0_to_bond): making interface the new active one [ 879.351343][T31620] veth0_to_bond: entered promiscuous mode [ 879.357949][T31620] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 879.410197][T31615] bond2: (slave veth5): Enslaving as an active interface with a down link [ 879.427704][T31615] netlink: 'syz.2.6823': attribute type 1 has an invalid length. [ 879.445993][T31615] netlink: 'syz.2.6823': attribute type 2 has an invalid length. [ 879.519777][T31641] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6830'. [ 879.598476][T31647] Bluetooth: MGMT ver 1.23 [ 880.182291][T31666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6837'. [ 880.208034][T31666] netlink: 'syz.0.6837': attribute type 7 has an invalid length. [ 880.241766][T31666] netlink: 'syz.0.6837': attribute type 8 has an invalid length. [ 880.250000][T31666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6837'. [ 880.396601][T31678] netlink: 'syz.2.6840': attribute type 1 has an invalid length. [ 880.449134][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6840'. [ 880.508665][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6846'. [ 880.549845][T31686] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6846'. [ 880.792496][T31707] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 880.818763][T31710] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20001 [ 880.864469][T31707] syzkaller0: entered promiscuous mode [ 880.902066][T31707] syzkaller0: entered allmulticast mode [ 881.183882][T31726] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6856'. [ 882.398834][T31797] netlink: 'syz.4.6875': attribute type 13 has an invalid length. [ 882.432452][T31797] gretap0: refused to change device tx_queue_len [ 882.440534][T31797] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 882.961023][T31827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.154562][T31849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.241840][T31859] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 883.262163][T31859] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 883.314121][T31849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.408830][T31849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.529899][T31849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.604760][T31876] erspan0: entered promiscuous mode [ 883.611755][T31876] erspan0: entered allmulticast mode [ 883.829053][ T4392] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.864379][ T6416] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.887141][T31885] __nla_validate_parse: 5 callbacks suppressed [ 883.887162][T31885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6902'. [ 883.931773][ T6416] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.997055][T31889] veth1_macvtap: left promiscuous mode [ 884.002423][T31892] Unsupported ieee802154 address type: 0 [ 884.084988][T31889] v+hKt_wif: renamed from macsec0 [ 884.101289][ T6426] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.398380][T31907] tipc: Enabling of bearer rejected, failed to enable media [ 884.441232][T31907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6909'. [ 884.497384][T31910] tc_dump_action: action bad kind [ 884.515488][T31914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6911'. [ 884.709161][T27830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.013566][T31947] netlink: 'syz.4.6918': attribute type 3 has an invalid length. [ 885.089653][T31954] netlink: 'syz.3.6921': attribute type 6 has an invalid length. [ 885.126858][T31954] netlink: 'syz.3.6921': attribute type 6 has an invalid length. [ 885.363117][T31968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6923'. [ 885.418703][T31974] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6925'. [ 885.428563][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.444460][T31976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6926'. [ 885.452844][T31968] vlan2: entered allmulticast mode [ 885.473231][T31968] mac80211_hwsim hwsim66 wlan0: entered allmulticast mode [ 885.644302][ T5488] veth1_macvtap: entered promiscuous mode [ 885.703840][T31987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6928'. [ 885.770310][T31992] veth0: entered promiscuous mode [ 885.795433][T31989] veth0: left promiscuous mode [ 886.119163][T32013] netlink: 'syz.2.6936': attribute type 58 has an invalid length. [ 886.141309][T32014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6935'. [ 886.144370][T32013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6936'. [ 886.478513][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.823868][T32035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6940'. [ 887.186502][T32062] vcan0: tx address claim with dlc 0 [ 887.515119][ T6775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.613764][T32076] veth3: entered allmulticast mode [ 887.652844][T32076] team0: Device gtp0 is up. Set it down before adding it as a team port [ 887.742260][T32083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.759840][T27826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.768142][T32083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.794854][T32083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.828678][T32086] x_tables: duplicate underflow at hook 4 [ 888.136537][T32102] openvswitch: netlink: Multiple metadata blocks provided [ 888.533505][T32124] syzkaller0: entered promiscuous mode [ 888.550127][ T6775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.566531][T32124] syzkaller0: entered allmulticast mode [ 888.617540][T32124] bridge_slave_1: left allmulticast mode [ 888.636319][T32124] bridge_slave_1: left promiscuous mode [ 888.642593][T32124] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.789140][T27830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.836446][T32140] netlink: 'syz.3.6975': attribute type 4 has an invalid length. [ 888.976883][T32152] __nla_validate_parse: 6 callbacks suppressed [ 888.976908][T32152] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6978'. [ 889.021821][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6980'. [ 889.022101][ T6787] IPVS: starting estimator thread 0... [ 889.033943][T32153] netlink: 'syz.4.6980': attribute type 1 has an invalid length. [ 889.066745][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6980'. [ 889.089271][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6980'. [ 889.115945][T32153] netlink: 'syz.4.6980': attribute type 1 has an invalid length. [ 889.119460][T32158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.125888][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6980'. [ 889.145076][T32154] IPVS: using max 30 ests per chain, 72000 per kthread [ 889.166462][T32161] pim6reg: entered allmulticast mode [ 889.299001][T32166] netlink: 'syz.1.6985': attribute type 15 has an invalid length. [ 889.354256][T32172] netlink: 'syz.0.6986': attribute type 15 has an invalid length. [ 889.371798][T32172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6986'. [ 889.423145][T32176] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6988'. [ 889.435256][T32176] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6988'. [ 889.494560][T32181] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6989'. [ 889.534302][T32181] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.6989'. [ 889.934033][T32200] xt_l2tp: v2 sid > 0xffff: 1114112 [ 890.286834][T32217] tipc: Started in network mode [ 890.305052][T32217] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 890.332929][T32217] tipc: Enabled bearer , priority 10 [ 890.373412][T32221] gretap0: entered promiscuous mode [ 890.404774][T32221] gretap0: left promiscuous mode [ 890.461219][T32232] netlink: 'syz.2.7007': attribute type 10 has an invalid length. [ 890.506662][ T6420] veth0_to_bond: left promiscuous mode [ 890.556992][T32232] team0: Port device dummy0 added [ 891.141838][T32271] syzkaller0: entered promiscuous mode [ 891.148202][T32271] syzkaller0: entered allmulticast mode [ 891.195238][T32271] tipc: Enabling of bearer rejected, failed to enable media [ 891.325195][T27826] tipc: Node number set to 4269801492 [ 891.669437][ T6775] net_ratelimit: 8 callbacks suppressed [ 891.669458][ T6775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.788910][T32313] Bluetooth: MGMT ver 1.23 [ 891.838497][T32315] netlink: 'syz.1.7038': attribute type 9 has an invalid length. [ 891.896905][T32317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.936312][T32317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.945934][T32320] x_tables: duplicate underflow at hook 3 [ 891.962560][T32317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.996478][T32317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.083446][T32317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.120435][T32316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.714100][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.888206][T32359] netlink: 'syz.0.7049': attribute type 9 has an invalid length. [ 893.006443][T32362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.745911][ T6775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.033846][T32369] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 895.125571][T32373] netlink: 'syz.3.7051': attribute type 1 has an invalid length. [ 895.133404][T32373] __nla_validate_parse: 12 callbacks suppressed [ 895.133423][T32373] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7051'. [ 895.156208][T32372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7052'. [ 895.225684][T32372] block nbd2: Unsupported socket: should be TCP or UNIX. [ 895.245117][T32372] xt_hashlimit: size too large, truncated to 1048576 [ 895.292015][T32378] : renamed from vxcan1 (while UP) [ 895.379418][T32383] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7057'. [ 895.398063][T32385] sctp: [Deprecated]: syz.1.7058 (pid 32385) Use of int in max_burst socket option deprecated. [ 895.398063][T32385] Use struct sctp_assoc_value instead [ 895.524082][T32383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7057'. [ 895.713133][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7063'. [ 896.520540][T32450] sctp: [Deprecated]: syz.3.7077 (pid 32450) Use of int in max_burst socket option. [ 896.520540][T32450] Use struct sctp_assoc_value instead [ 896.681871][T32456] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 896.748381][T32454] bond1 (unregistering): Released all slaves [ 896.870205][ T6787] net_ratelimit: 5 callbacks suppressed [ 896.870228][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.930674][T27826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.099069][T32477] netlink: 'syz.2.7084': attribute type 1 has an invalid length. [ 897.161906][T32477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.168809][T32488] netlink: 'syz.3.7087': attribute type 1 has an invalid length. [ 897.598023][T32514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7095'. [ 897.765338][T32528] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.7097'. [ 897.905579][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.011749][T32539] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 898.265968][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7104'. [ 898.386554][T27826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.418609][T32566] netlink: 'syz.4.7106': attribute type 7 has an invalid length. [ 898.447065][T32566] netlink: 'syz.4.7106': attribute type 7 has an invalid length. [ 898.456238][ T4392] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.514485][T26349] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.544280][T26349] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.610068][T26349] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.912509][T32590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.921563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.945169][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.959643][T32592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7111'. [ 898.975433][T32592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7111'. [ 898.986759][ T6433] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.005961][ T6433] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.048123][ T6433] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.079538][ T6433] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.275068][T32613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.539779][T32621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 899.782279][T32628] wg1: entered promiscuous mode [ 899.788841][T32628] wg1: entered allmulticast mode [ 899.863316][T32642] netlink: 'syz.0.7121': attribute type 1 has an invalid length. [ 899.912804][T32645] sctp: [Deprecated]: syz.2.7122 (pid 32645) Use of int in max_burst socket option. [ 899.912804][T32645] Use struct sctp_assoc_value instead [ 900.429368][T32674] __nla_validate_parse: 4 callbacks suppressed [ 900.429389][T32674] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.7129'. [ 900.447792][T32675] netlink: 'syz.1.7129': attribute type 1 has an invalid length. [ 900.467516][T32674] netlink: 'syz.1.7129': attribute type 1 has an invalid length. [ 900.532620][T32675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 900.719785][T32693] tipc: Enabling of bearer rejected, failed to enable media [ 900.801656][T32700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7137'. [ 900.838830][T32707] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7136'. [ 900.967262][T32714] netlink: 'syz.3.7139': attribute type 10 has an invalid length. [ 901.132105][T32720] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.7141'. [ 901.204188][T32720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7141'. [ 901.222134][T32732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7143'. [ 901.460119][T32716] ip6_vti0 speed is unknown, defaulting to 1000 [ 901.648181][T32743] sctp: [Deprecated]: syz.0.7148 (pid 32743) Use of int in maxseg socket option. [ 901.648181][T32743] Use struct sctp_assoc_value instead [ 901.826962][T32753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7150'. [ 902.024306][T32716] lo speed is unknown, defaulting to 1000 [ 902.188876][T32762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7152'. [ 903.290756][ T352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7166'. [ 903.329772][ T349] tipc: Started in network mode [ 903.355079][ T349] tipc: Node identity ae583c2cc004, cluster identity 4711 [ 903.415846][ T349] tipc: Enabled bearer , priority 0 [ 903.423813][ T360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7167'. [ 903.464903][ T353] syzkaller0: entered promiscuous mode [ 903.492470][ T353] syzkaller0: entered allmulticast mode [ 903.502448][ T365] SET target dimension over the limit! [ 903.598642][ T346] tipc: Resetting bearer [ 903.693374][ T346] tipc: Disabling bearer [ 903.961403][ T369] bond3: entered promiscuous mode [ 904.022277][ T373] macvlan0: entered promiscuous mode [ 904.062107][ T373] macvlan0: entered allmulticast mode [ 904.102123][ T373] bond3: (slave macvlan0): Opening slave failed [ 904.226145][T32766] Bluetooth: hci4: command 0x0405 tx timeout [ 904.950048][ T440] netlink: 'syz.2.7190': attribute type 1 has an invalid length. [ 904.967928][ T440] netlink: 'syz.2.7190': attribute type 3 has an invalid length. [ 905.525799][ T465] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 905.552126][ T472] netlink: 'syz.3.7198': attribute type 2 has an invalid length. [ 905.573734][ T471] netlink: 'syz.4.7201': attribute type 10 has an invalid length. [ 905.946172][ T491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.160278][ T491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.317096][ T491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.455376][ T491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.681380][ T529] __nla_validate_parse: 8 callbacks suppressed [ 906.681403][ T529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7216'. [ 907.025181][ T6433] wlan1: Trigger new scan to find an IBSS to join [ 907.460851][ T560] openvswitch: netlink: EtherType 50a is less than min 600 [ 907.488451][ T560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7223'. [ 909.244229][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.290863][ T491] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.337915][ T568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7225'. [ 909.364627][ T568] bridge_slave_1: left allmulticast mode [ 909.371041][ T568] bridge_slave_1: left promiscuous mode [ 909.379108][ T568] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.393503][ T568] bridge_slave_0: left allmulticast mode [ 909.400571][ T568] bridge_slave_0: left promiscuous mode [ 909.407899][ T568] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.985712][ T36] wlan1: Trigger new scan to find an IBSS to join [ 910.252022][ T591] sctp: [Deprecated]: syz.3.7232 (pid 591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 910.252022][ T591] Use struct sctp_sack_info instead [ 912.207958][ T563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.473484][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 912.596289][ T624] delete_channel: no stack [ 912.696382][ T630] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7243'. [ 912.802451][ T634] netlink: 'syz.4.7246': attribute type 1 has an invalid length. [ 912.947075][ T6426] wlan1: Trigger new scan to find an IBSS to join [ 913.005397][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7250'. [ 913.063617][ T651] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7249'. [ 913.156722][ T654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7250'. [ 913.157816][ T651] syzkaller1: entered promiscuous mode [ 913.173910][ T651] syzkaller1: entered allmulticast mode [ 913.534488][ T686] netlink: 'syz.4.7259': attribute type 13 has an invalid length. [ 913.551928][ T678] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 913.602893][ T678] bond6 (unregistering): Released all slaves [ 913.658345][ T686] gretap0: refused to change device tx_queue_len [ 913.665572][ T686] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 913.834426][ T697] netlink: 'syz.4.7263': attribute type 1 has an invalid length. [ 913.871201][ T4392] wlan1: Creating new IBSS network, BSSID 4a:7e:a9:aa:95:0a [ 914.048659][ T712] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 914.091445][ T712] bond5 (unregistering): Released all slaves [ 914.096498][ T715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7268'. [ 914.119376][ T720] x_tables: duplicate underflow at hook 1 [ 914.160650][ T715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7268'. [ 914.194435][ T712] netlink: 'syz.3.7268': attribute type 1 has an invalid length. [ 914.285664][ T724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7270'. [ 914.300137][ T729] xt_l2tp: invalid flags combination: 0 [ 914.416653][ T710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.441290][ T710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.692095][ T727] ip6tnl2: entered promiscuous mode [ 914.712590][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.735060][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.758115][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.775518][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.890021][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.908842][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.944743][ T754] tipc: Started in network mode [ 914.967668][ T754] tipc: Node identity d6ea692c7c4c, cluster identity 4711 [ 914.987573][ T754] tipc: Enabled bearer , priority 0 [ 914.994316][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.003878][ T752] netlink: 'syz.0.7276': attribute type 3 has an invalid length. [ 915.022518][ T754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7275'. [ 915.024012][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.037026][ T756] netlink: 'syz.0.7276': attribute type 3 has an invalid length. [ 915.065912][ T748] +: renamed from syzkaller0 [ 915.153095][ T748] tipc: Disabling bearer [ 915.713398][ T808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7292'. [ 915.741848][ T812] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 915.749484][ T812] syzkaller1: linktype set to 823 [ 916.491332][ T827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.873471][ T854] netlink: 'syz.4.7307': attribute type 6 has an invalid length. [ 917.345057][ T878] netlink: 'syz.2.7317': attribute type 1 has an invalid length. [ 917.352866][ T878] netlink: 'syz.2.7317': attribute type 2 has an invalid length. [ 917.701835][ T899] netlink: 'syz.1.7323': attribute type 1 has an invalid length. [ 917.899987][ T911] __nla_validate_parse: 3 callbacks suppressed [ 917.900011][ T911] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7325'. [ 918.300150][ T950] validate_nla: 1 callbacks suppressed [ 918.300171][ T950] netlink: 'syz.3.7334': attribute type 4 has an invalid length. [ 918.361500][ T950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7334'. [ 918.395709][T32766] Bluetooth: hci5: command 0x0406 tx timeout [ 918.658689][ T966] veth0: entered promiscuous mode [ 918.699476][ T965] veth0: left promiscuous mode [ 918.896268][ T986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7345'. [ 918.911856][ T986] netlink: 'syz.1.7345': attribute type 1 has an invalid length. [ 918.947995][ T989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7347'. [ 918.972724][ T992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7347'. [ 919.075259][ T997] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 919.100725][ T997] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7352'. [ 919.191043][ T1006] netlink: 'syz.0.7353': attribute type 1 has an invalid length. [ 919.207180][ T1006] netlink: 'syz.0.7353': attribute type 10 has an invalid length. [ 919.224459][ T1006] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 919.342057][ T1017] netlink: 'syz.0.7358': attribute type 2 has an invalid length. [ 919.564965][ T1030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7362'. [ 919.566846][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7363'. [ 919.610548][ T1030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7362'. [ 919.732055][ T1042] netlink: 300 bytes leftover after parsing attributes in process `syz.1.7363'. [ 919.770793][ T1044] xt_recent: Unsupported userspace flags (000000b1) [ 919.828116][ T1037] netlink: 'syz.1.7363': attribute type 1 has an invalid length. [ 920.002258][ T1057] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 922.788602][ T1097] netlink: 'syz.1.7377': attribute type 83 has an invalid length. [ 922.961020][ T1100] hsr_slave_0 (unregistering): left promiscuous mode [ 922.980582][ T1111] bond0: (slave gre0): Error: Device type is different from other slaves [ 923.014481][ T1113] siw: device registration error -23 [ 923.015309][ T1111] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 923.140112][ T1115] __nla_validate_parse: 6 callbacks suppressed [ 923.140133][ T1115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7388'. [ 923.162828][ T1119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7387'. [ 923.164668][ T1118] netlink: 'syz.4.7389': attribute type 10 has an invalid length. [ 923.194594][ T1118] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.224404][ T1118] bond0: (slave team0): Enslaving as an active interface with an up link [ 923.277018][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7389'. [ 923.603523][ T1145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7395'. [ 923.929737][ T1168] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 924.248500][ T1173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7402'. [ 924.380549][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805af0f800: rx timeout, send abort [ 924.391007][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805af0f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 924.632724][ T1187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7406'. [ 924.643487][ T1187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7406'. [ 926.570257][ T1146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.945920][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7415'. [ 926.962167][ T1215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7415'. [ 926.994442][ T1212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7414'. [ 927.837266][ T1218] ip6_vti0 speed is unknown, defaulting to 1000 [ 928.016676][ T1218] lo speed is unknown, defaulting to 1000 [ 930.370766][ T1242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 930.600774][ T1325] __nla_validate_parse: 2 callbacks suppressed [ 930.600796][ T1325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7439'. [ 930.783306][ T1341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7443'. [ 930.795946][ T1341] netlink: 'syz.0.7443': attribute type 1 has an invalid length. [ 930.810678][ T1341] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7443'. [ 931.049555][ T1355] syzkaller0: entered promiscuous mode [ 931.055531][ T1355] syzkaller0: entered allmulticast mode [ 931.322488][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7450'. [ 931.339212][ T1375] bond0: entered promiscuous mode [ 931.344414][ T1375] bond_slave_0: entered promiscuous mode [ 931.351465][ T1375] bond_slave_1: entered promiscuous mode [ 931.357686][ T1375] team0: entered promiscuous mode [ 931.362768][ T1375] team_slave_0: entered promiscuous mode [ 931.369182][ T1375] team_slave_1: entered promiscuous mode [ 931.377643][ T1375] bond0: left promiscuous mode [ 931.382529][ T1375] bond_slave_0: left promiscuous mode [ 931.388454][ T1375] bond_slave_1: left promiscuous mode [ 931.393963][ T1375] team0: left promiscuous mode [ 931.399732][ T1375] team_slave_0: left promiscuous mode [ 931.405623][ T1375] team_slave_1: left promiscuous mode [ 931.467522][ T1377] syzkaller0: entered promiscuous mode [ 931.473180][ T1377] syzkaller0: entered allmulticast mode [ 931.729952][ T1388] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 931.814407][ T1392] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20003 [ 933.755087][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 934.008158][ T1354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.168877][ T1398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7457'. [ 934.179671][ T1396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7456'. [ 934.238765][ T1404] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7458'. [ 934.239254][ T1402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7459'. [ 934.258241][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.261694][ T1398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7457'. [ 934.296775][ T1402] bridge_slave_0: left allmulticast mode [ 934.307420][ T1402] bridge_slave_0: left promiscuous mode [ 934.333706][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.468155][ T1421] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 934.476488][ T1421] netlink: 'syz.3.7463': attribute type 142 has an invalid length. [ 934.611638][ T1421] syzkaller0: entered promiscuous mode [ 934.620805][ T1421] syzkaller0: entered allmulticast mode [ 934.666388][ T1424] tipc: Enabled bearer , priority 0 [ 934.676078][ T1427] netlink: 'syz.4.7465': attribute type 11 has an invalid length. [ 934.730060][ T1420] tipc: Resetting bearer [ 934.770501][ T1420] tipc: Disabling bearer [ 934.781296][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7467'. [ 937.703344][ T1429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 937.993365][ T1469] __nla_validate_parse: 8 callbacks suppressed [ 937.993387][ T1469] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7476'. [ 938.134685][ T1483] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 938.339285][ T1497] vcan0: tx address claim with dlc 0 [ 938.407203][ T1497] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 938.430428][ T1497] bond5 (unregistering): Released all slaves [ 938.443439][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7485'. [ 938.467684][ T1501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7485'. [ 938.772707][ T1526] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7489'. [ 941.208046][ T1489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 941.218056][ T1493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7483'. [ 941.557856][ T1547] netlink: 'syz.2.7495': attribute type 1 has an invalid length. [ 941.595973][ T1547] netlink: 'syz.2.7495': attribute type 4 has an invalid length. [ 941.603874][ T1547] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7495'. [ 941.836727][ T1556] IPv6: sit1: Disabled Multicast RS [ 941.869270][ T1556] sit1: entered allmulticast mode [ 941.938966][ T1537] ip6_vti0 speed is unknown, defaulting to 1000 [ 942.227249][ T1576] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7502'. [ 942.237047][ T1576] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7502'. [ 942.272720][ T1586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7504'. [ 942.318399][ T1587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7504'. [ 942.380080][ T1537] lo speed is unknown, defaulting to 1000 [ 942.534168][ T1600] netlink: 'syz.0.7507': attribute type 3 has an invalid length. [ 942.958186][ T1595] ip6_vti0 speed is unknown, defaulting to 1000 [ 943.039517][ T1615] __nla_validate_parse: 2 callbacks suppressed [ 943.039534][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7510'. [ 943.257077][ T1595] lo speed is unknown, defaulting to 1000 [ 943.919831][T26358] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 944.084073][ T1625] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7513'. [ 944.093628][ T1625] openvswitch: netlink: Flow key attr not present in new flow. [ 945.140982][ T1571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.400677][ T1634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7514'. [ 945.550893][ T1634] netlink: 'syz.1.7514': attribute type 1 has an invalid length. [ 945.779291][ T1671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7521'. [ 948.629798][ T1656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 948.802291][ T1706] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 948.849894][ T1711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7536'. [ 948.892053][ T1713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7537'. [ 948.990068][ T1715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7538'. [ 949.120371][ T1715] netlink: 'syz.1.7538': attribute type 1 has an invalid length. [ 949.166106][ T1715] netlink: 'syz.1.7538': attribute type 1 has an invalid length. [ 949.205444][ T1734] netlink: 'syz.0.7543': attribute type 32 has an invalid length. [ 949.332833][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7545'. [ 950.156949][ T1788] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 952.344375][ T1749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 952.559519][ T1795] dvmrp0: entered allmulticast mode [ 952.618238][ T1802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7558'. [ 952.658796][ T1802] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7558'. [ 952.848218][ T1813] netlink: 'syz.2.7566': attribute type 26 has an invalid length. [ 952.858437][ T1811] bond6 (unregistering): Released all slaves [ 952.983188][ T1812] syzkaller1: entered promiscuous mode [ 952.988804][ T1812] syzkaller1: entered allmulticast mode [ 953.323716][ T1845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7573'. [ 954.225604][T32766] Bluetooth: hci3: command 0x0406 tx timeout [ 955.885724][ T1821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.050603][ T1877] syzkaller0: entered promiscuous mode [ 956.070308][ T1877] syzkaller0: entered allmulticast mode [ 956.080299][ T1880] xt_TCPMSS: Only works on TCP SYN packets [ 956.110095][ T1877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7581'. [ 956.185266][ T1885] netlink: 'syz.3.7584': attribute type 1 has an invalid length. [ 956.520734][ T1907] syzkaller0: entered promiscuous mode [ 956.527664][ T1907] syzkaller0: entered allmulticast mode [ 956.565306][ T1907] netlink: 'syz.1.7590': attribute type 1 has an invalid length. [ 956.605809][ T1909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7591'. [ 956.804089][ T1916] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 956.908509][ T1919] IPVS: length: 8 != 1152 [ 956.934951][ T1919] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 956.946334][ T1919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7595'. [ 956.986700][ T1926] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7594'. [ 957.141652][ T1932] syzkaller0: entered promiscuous mode [ 957.148417][ T1932] syzkaller0: entered allmulticast mode [ 957.472549][ T1949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7605'. [ 957.608648][ T1955] netlink: 'syz.3.7607': attribute type 1 has an invalid length. [ 957.617262][ T1955] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7607'. [ 957.642915][ T1957] syzkaller0: entered promiscuous mode [ 957.649067][ T1957] syzkaller0: entered allmulticast mode [ 958.329158][ T2001] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7622'. [ 958.440874][ T2008] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7624'. [ 958.454755][ T2008] netlink: Unknown conntrack attr (0) [ 958.504355][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7624'. [ 958.538083][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c282800: rx timeout, send abort [ 958.549017][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c282800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 958.637652][ T2017] xt_hashlimit: size too large, truncated to 1048576 [ 958.739811][ T2026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7631'. [ 959.179780][ T2048] netlink: 'syz.3.7640': attribute type 10 has an invalid length. [ 959.188940][ T2048] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 959.201483][ T2048] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 959.291864][ T2057] 8021q: VLANs not supported on sit0 [ 959.444470][ T2068] netlink: del zone limit has 8 unknown bytes [ 959.494570][ T2065] syzkaller0: entered allmulticast mode [ 960.383925][ T2109] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 961.231020][ T2152] __nla_validate_parse: 11 callbacks suppressed [ 961.231041][ T2152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7669'. [ 961.768936][ T2179] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7674'. [ 961.861420][ T2186] : entered promiscuous mode [ 961.929159][ T2190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7677'. [ 962.073916][ T2201] netlink: 'syz.2.7680': attribute type 10 has an invalid length. [ 962.130763][ T2201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7680'. [ 962.140333][ T2201] netlink: 'syz.2.7680': attribute type 8 has an invalid length. [ 962.155890][ T2204] netlink: 'syz.2.7680': attribute type 10 has an invalid length. [ 962.208557][ T2209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7681'. [ 962.680147][ T984] IPVS: starting estimator thread 0... [ 962.786175][ T2231] IPVS: using max 29 ests per chain, 69600 per kthread [ 963.148993][ T2260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7695'. [ 963.604620][ T2281] openvswitch: netlink: IPv6 tunnel dst address is zero [ 963.663040][ T2279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7702'. [ 963.678642][ T2279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7702'. [ 963.702903][ T2279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7702'. [ 963.782730][ T2284] syzkaller0: entered promiscuous mode [ 963.790069][ T2284] syzkaller0: entered allmulticast mode [ 963.873465][ T2290] batman_adv: batadv0: Adding interface: dummy0 [ 963.880081][ T2290] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.915381][ T2290] batman_adv: batadv0: Interface activated: dummy0 [ 964.300989][ T2315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7711'. [ 964.319229][ T2315] gtp0: entered promiscuous mode [ 964.324329][ T2315] gtp0: entered allmulticast mode [ 964.880418][ T2345] tipc: Enabling of bearer rejected, already enabled [ 964.940599][ T2347] netlink: 'syz.1.7722': attribute type 32 has an invalid length. [ 964.996903][ T2347] bond6: option coupled_control: invalid value (7) [ 965.005619][ T2347] bond6 (unregistering): Released all slaves [ 965.039518][ T2355] tipc: Enabled bearer , priority 0 [ 965.047838][ T2355] syzkaller0: entered promiscuous mode [ 965.053356][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033822000: rx timeout, send abort [ 965.053698][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033822000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 965.094945][ T2355] syzkaller0: entered allmulticast mode [ 965.164687][ T2355] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 965.223380][ T2355] tipc: Resetting bearer [ 965.265158][ T2354] tipc: Resetting bearer [ 965.297207][ T2354] tipc: Disabling bearer [ 965.316737][ T2367] : renamed from bond0 (while UP) [ 965.612744][ T2380] syzkaller0: entered promiscuous mode [ 965.632399][ T2378] xt_TCPMSS: Only works on TCP SYN packets [ 965.637670][ T2380] syzkaller0: entered allmulticast mode [ 965.639294][ T2378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.992157][ T2415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 966.425034][ T2438] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 966.437684][ T2438] bond4 (unregistering): Released all slaves [ 966.708071][ T2453] syzkaller0: entered promiscuous mode [ 966.713688][ T2453] syzkaller0: entered allmulticast mode [ 968.906006][ T2404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 969.222609][ T2481] netlink: 'syz.0.7755': attribute type 7 has an invalid length. [ 969.276159][ T2481] xt_TPROXY: Can be used only with -p tcp or -p udp [ 969.368544][ T2495] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 969.635809][ T2520] __nla_validate_parse: 5 callbacks suppressed [ 969.635830][ T2520] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7764'. [ 969.670554][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7767'. [ 969.797271][ T2522] syzkaller0: entered promiscuous mode [ 969.803527][ T2522] syzkaller0: entered allmulticast mode [ 969.906445][ T2537] only policy match revision 0 supported [ 969.906469][ T2537] unable to load match [ 970.114195][ T2552] syzkaller0: entered promiscuous mode [ 970.131260][ T2552] syzkaller0: entered allmulticast mode [ 970.208823][ T2552] tipc: Enabled bearer , priority 0 [ 970.623954][ T2583] netlink: 'syz.4.7779': attribute type 3 has an invalid length. [ 970.632369][ T2583] netlink: 'syz.4.7779': attribute type 3 has an invalid length. [ 970.694628][ T2600] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 970.926917][ T2543] tipc: Resetting bearer [ 970.954580][ T2543] tipc: Disabling bearer [ 973.596235][ T2585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 973.630033][ T2616] netlink: 'syz.2.7784': attribute type 3 has an invalid length. [ 973.639852][ T2616] netlink: 'syz.2.7784': attribute type 1 has an invalid length. [ 973.665245][ T2616] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7784'. [ 973.827274][ T2623] bond0: (slave gre0): Error: Device type is different from other slaves [ 973.850632][ T2631] netlink: 'syz.3.7787': attribute type 12 has an invalid length. [ 973.875665][ T2631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7787'. [ 973.934016][ T2631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7787'. [ 973.957805][ T2633] bond0: (slave team0): Releasing backup interface [ 974.010981][ T2633] bond0: (slave bond_slave_0): Releasing backup interface [ 974.082071][ T2633] bond0: (slave bond_slave_1): Releasing backup interface [ 974.138494][ T2633] team0: Port device team_slave_0 removed [ 974.154707][ T2633] team0: Port device team_slave_1 removed [ 974.164052][ T2633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.172504][ T2633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.192084][ T2633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.196702][ T2659] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7793'. [ 974.205179][ T2633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.232484][ T2633] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 974.481485][ T2681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7798'. [ 974.516398][ T2681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7798'. [ 974.549133][ T2681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7798'. [ 974.555671][ T2678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7797'. [ 974.635443][ T2678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.699873][ T2702] __nla_validate_parse: 1 callbacks suppressed [ 974.699895][ T2702] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7801'. [ 974.749894][ T2692] syzkaller0: entered promiscuous mode [ 974.756684][ T2692] syzkaller0: entered allmulticast mode [ 974.871867][ T2708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7802'. [ 974.881176][ T2708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7802'. [ 974.976504][ T2671] ip6_vti0 speed is unknown, defaulting to 1000 [ 975.130946][ T2671] lo speed is unknown, defaulting to 1000 [ 975.297529][ T2723] IPv6: sit1: Disabled Multicast RS [ 975.771410][ T2741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7810'. [ 975.782750][ T2741] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7810'. [ 975.853782][ T2743] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 975.923440][ T2745] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7812'. [ 976.049741][ T2751] netlink: 296 bytes leftover after parsing attributes in process `syz.1.7813'. [ 976.060031][ T2751] netlink: 'syz.1.7813': attribute type 10 has an invalid length. [ 976.076090][ T2751] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 976.278605][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 977.424494][ T2675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.435181][ T2695] netlink: 'syz.4.7799': attribute type 1 has an invalid length. [ 977.451524][ T2695] netlink: 'syz.4.7799': attribute type 1 has an invalid length. [ 977.648454][ T2757] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7818'. [ 977.713618][ T2769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7817'. [ 977.908381][ T2761] netlink: 'syz.3.7816': attribute type 13 has an invalid length. [ 977.937234][ T2776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7819'. [ 977.959587][ T2776] netlink: 'syz.2.7819': attribute type 7 has an invalid length. [ 978.109915][ T2793] netlink: 'syz.1.7822': attribute type 16 has an invalid length. [ 979.748466][ T2906] mac80211_hwsim hwsim58 wlan0: Caught tx_queue_len zero misconfig [ 979.977780][ T2923] __nla_validate_parse: 4 callbacks suppressed [ 979.977803][ T2923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7854'. [ 980.228222][ T2940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7860'. [ 980.246301][ T2944] netlink: 'syz.3.7861': attribute type 1 has an invalid length. [ 980.252181][ T2940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7860'. [ 980.254279][ T2944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.541728][ T2960] tipc: Enabling of bearer rejected, failed to enable media [ 980.553499][ T2960] netlink: 'syz.3.7864': attribute type 2 has an invalid length. [ 980.562593][ T2960] netlink: 'syz.3.7864': attribute type 1 has an invalid length. [ 980.562895][ T2962] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 980.581604][ T2960] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7864'. [ 980.741067][ T2977] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 980.796780][ T2984] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7870'. [ 980.943062][ T2993] syzkaller0: entered promiscuous mode [ 980.963035][ T2993] syzkaller0: entered allmulticast mode [ 981.011928][ T2993] netlink: 'syz.4.7872': attribute type 10 has an invalid length. [ 981.041738][ T2992] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 981.185422][T27830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.424643][ T3022] IPVS: set_ctl: invalid protocol: 12 172.20.20.68:20002 [ 981.591882][T26361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.603219][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.618332][ T3027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7881'. [ 981.806369][ T3003] ip6_vti0 speed is unknown, defaulting to 1000 [ 981.818218][ T3029] validate_nla: 1 callbacks suppressed [ 981.818241][ T3029] netlink: 'syz.0.7882': attribute type 1 has an invalid length. [ 982.195644][ T3007] ip6_vti0 speed is unknown, defaulting to 1000 [ 982.226558][T27830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.236603][ T3003] lo speed is unknown, defaulting to 1000 [ 982.458382][ T3060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.628546][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.643816][ T3069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7891'. [ 982.663884][ T3069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7891'. [ 982.806174][ T3007] lo speed is unknown, defaulting to 1000 [ 982.868662][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.878564][T27826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.950009][ T3075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7895'. [ 983.092129][ T3080] bond0: (slave gre0): Error: Device type is different from other slaves [ 983.117280][ T3080] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 983.178421][ T3088] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7898'. [ 983.262887][ T3086] tipc: Started in network mode [ 983.272906][ T3086] tipc: Node identity 1, cluster identity 4711 [ 983.295702][ T3086] tipc: Node number set to 1 [ 983.477837][ T3100] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.485607][ T3100] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.881439][ T3115] netlink: 'syz.4.7907': attribute type 1 has an invalid length. [ 983.889370][ T3115] netlink: 'syz.4.7907': attribute type 4 has an invalid length. [ 984.058938][ T3116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.290195][ T3140] netlink: 'syz.1.7913': attribute type 1 has an invalid length. [ 984.299313][ T3140] netlink: 'syz.1.7913': attribute type 1 has an invalid length. [ 984.441965][ T3146] syzkaller1: entered promiscuous mode [ 984.447705][ T3146] syzkaller1: entered allmulticast mode [ 985.346137][ T984] net_ratelimit: 5 callbacks suppressed [ 985.346154][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.385189][T27826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.852664][ T3123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.046132][ T3169] netlink: 'syz.0.7923': attribute type 11 has an invalid length. [ 987.054462][ T3171] netlink: 'syz.0.7923': attribute type 11 has an invalid length. [ 987.107063][ T3174] __nla_validate_parse: 4 callbacks suppressed [ 987.107088][ T3174] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7926'. [ 987.372336][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.400680][T26358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.438260][T27826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.446093][ T3177] batman_adv: batadv0: Interface deactivated: dummy0 [ 987.453329][ T3177] batman_adv: batadv0: Removing interface: dummy0 [ 987.480909][ T3177] bridge_slave_0: left promiscuous mode [ 987.490949][ T3177] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.501957][ T3196] xt_l2tp: v2 sid > 0xffff: 1114112 [ 987.573527][ T3177] bridge_slave_1: left allmulticast mode [ 987.582025][ T3177] bridge_slave_1: left promiscuous mode [ 987.597582][ T3177] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.622761][ T3177] : (slave bond_slave_0): Releasing backup interface [ 987.661369][ T3177] : (slave bond_slave_1): Releasing backup interface [ 987.700781][ T3177] team0: Port device team_slave_0 removed [ 987.726234][ T3177] team0: Port device team_slave_1 removed [ 987.738347][ T3177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.747628][ T3177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.755152][ T6775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.768408][ T3177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.777739][ T3177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.791719][ T3177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 987.840764][ T3218] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7935'. [ 987.867682][ T3207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.878841][ T3207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.892590][ T3207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 987.929352][ T3215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7935'. [ 988.073135][ T3207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.117154][ T3207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.130566][ T3207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 988.197186][ T36] bond0: (slave syz_tun): link status definitely down, disabling slave [ 988.227157][ T36] bond0: now running without any active interface! [ 988.397177][ T3207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.417894][ T3207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.429387][ T3207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 988.465309][T27826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.626030][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.641027][ T6790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.672411][ T3245] IPv6: sit1: Disabled Multicast RS [ 988.676617][ T3238] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7940'. [ 988.858191][ T3207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.904162][ T3207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.927611][ T3207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 989.223368][ T6426] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.226488][ T3278] netlink: 'syz.0.7951': attribute type 1 has an invalid length. [ 989.232464][ T6426] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 989.251966][ T6426] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 989.289645][ T6426] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.306687][ T6426] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 989.320456][ T6426] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 989.420669][ T3278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 989.432062][ T6426] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.441078][ T6426] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 989.449615][ T6426] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 989.477736][ T3284] netlink: 51 bytes leftover after parsing attributes in process `syz.3.7953'. [ 989.478130][ T3287] bond2: (slave veth3): Enslaving as an active interface with a down link [ 989.501129][ T3278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7951'. [ 989.515991][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.532730][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 989.569813][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 989.709070][ T3294] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 989.732543][ T3294] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 989.748782][ T3294] gretap1: entered promiscuous mode [ 989.775674][ T3294] gretap1: entered allmulticast mode [ 989.798122][ T3303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7957'. [ 989.815922][ T3304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7959'. [ 989.828225][ T3306] xt_hashlimit: size too large, truncated to 1048576 [ 989.892108][ T3301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7960'. [ 989.990133][ T3311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7961'. [ 990.093484][ T3314] syzkaller0: entered promiscuous mode [ 990.109553][ T3314] syzkaller0: entered allmulticast mode [ 990.707144][ T3348] netlink: 'syz.2.7971': attribute type 21 has an invalid length. [ 990.737814][ T3348] IPv6: NLM_F_CREATE should be specified when creating new route [ 990.760331][ T3348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 990.767648][ T3348] IPv6: NLM_F_CREATE should be set when creating new route [ 990.774949][ T3348] IPv6: NLM_F_CREATE should be set when creating new route [ 990.782338][ T3348] IPv6: NLM_F_CREATE should be set when creating new route [ 991.083370][ T30] audit: type=1107 audit(1770405158.651:9): pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='RPp5R*,(y?As}R57dlb [ 991.083370][ T30] 3_W?zÑ hT7ƁZ AM~:)UΌFB6mIq%\8%Ό(oC۷$:T]7{7iSDY%tbWOD۶ [ 991.083370][ T30] mے.^0hUxqm쳔D@' [ 991.111600][ T3378] IPVS: Unknown mcast interface: vcan0 [ 991.638743][ T3415] syzkaller0: entered promiscuous mode [ 991.644662][ T3415] syzkaller0: entered allmulticast mode [ 993.839156][ T3438] __nla_validate_parse: 5 callbacks suppressed [ 993.839176][ T3438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7993'. [ 993.861450][ T3437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7993'. [ 994.016689][ T3446] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7997'. [ 994.031321][ T3446] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7997'. [ 994.051273][ T3446] netlink: 'syz.4.7997': attribute type 6 has an invalid length. [ 994.061812][ T3446] netlink: 'syz.4.7997': attribute type 5 has an invalid length. [ 994.078836][ T3446] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7997'. [ 994.259606][ T3464] nft_compat: unsupported protocol 4 [ 994.320939][ T3470] netlink: 'syz.1.8001': attribute type 13 has an invalid length. [ 994.330858][ T3470] netlink: 'syz.1.8001': attribute type 17 has an invalid length. [ 994.443134][ T3470] net_ratelimit: 1 callbacks suppressed [ 994.443146][ T3470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 994.486580][ T3477] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 994.779190][ T3498] ip6gre2: entered allmulticast mode [ 995.046492][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8016'. [ 995.067303][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.146355][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8015'. [ 995.250252][ T3526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 995.300697][ T3523] can: request_module (can-proto-4) failed. [ 995.309788][ T3526] syzkaller0: entered promiscuous mode [ 995.319793][ T3526] syzkaller0: entered allmulticast mode [ 995.389929][ T3529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8020'. [ 995.432503][ T3532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8022'. [ 995.482755][ T3533] delete_channel: no stack [ 995.542936][ T3536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 995.546543][ T3533] delete_channel: no stack [ 995.563145][ T3533] delete_channel: no stack [ 995.569184][ T3533] delete_channel: no stack [ 995.576355][ T3533] delete_channel: no stack [ 995.582143][ T3533] delete_channel: no stack [ 995.599774][ T3533] delete_channel: no stack [ 995.617515][ T3533] delete_channel: no stack [ 995.632872][ T3533] delete_channel: no stack [ 995.637768][ T3544] netlink: 'syz.4.8023': attribute type 64 has an invalid length. [ 995.654640][ T6775] lo speed is unknown, defaulting to 1000 [ 995.662503][ T6775] syz1: Port: 1 Link DOWN [ 995.687724][ T3533] delete_channel: no stack [ 995.707155][ T3533] delete_channel: no stack [ 995.720821][ T3533] delete_channel: no stack [ 995.742507][ T3533] delete_channel: no stack [ 995.762956][ T3533] delete_channel: no stack [ 995.773100][ T3533] delete_channel: no stack [ 995.793452][ T3533] delete_channel: no stack [ 995.799948][ T3533] delete_channel: no stack [ 995.811215][ T3533] delete_channel: no stack [ 995.821332][ T3533] delete_channel: no stack [ 995.842520][ T3533] delete_channel: no stack [ 995.865371][ T3533] delete_channel: no stack [ 995.870131][ T3533] delete_channel: no stack [ 995.886108][ T3533] delete_channel: no stack [ 995.892580][ T3533] delete_channel: no stack [ 995.901963][ T3533] delete_channel: no stack [ 995.922109][ T3533] delete_channel: no stack [ 995.929325][ T3533] delete_channel: no stack [ 995.933999][ T3533] delete_channel: no stack [ 995.940889][ T3533] delete_channel: no stack [ 995.946329][ T3533] delete_channel: no stack [ 995.951303][ T3533] delete_channel: no stack [ 995.958303][ T3533] delete_channel: no stack [ 995.961796][ T3548] [ 995.963175][ T3533] delete_channel: no stack [ 995.965278][ T3548] ====================================================== [ 995.965291][ T3548] WARNING: possible circular locking dependency detected [ 995.965303][ T3548] syzkaller #0 Not tainted [ 995.965314][ T3548] ------------------------------------------------------ [ 995.965323][ T3548] syz.3.8026/3548 is trying to acquire lock: [ 995.965335][ T3548] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 995.965392][ T3548] [ 995.965392][ T3548] but task is already holding lock: [ 995.965400][ T3548] ffff888024f29370 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 996.028742][ T3548] [ 996.028742][ T3548] which lock already depends on the new lock. [ 996.028742][ T3548] [ 996.039154][ T3548] [ 996.039154][ T3548] the existing dependency chain (in reverse order) is: [ 996.048169][ T3548] [ 996.048169][ T3548] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 996.056791][ T3548] blk_alloc_queue+0x52f/0x610 [ 996.062179][ T3548] __blk_mq_alloc_disk+0x197/0x390 [ 996.067816][ T3548] nbd_dev_add+0x499/0xb50 [ 996.072762][ T3548] nbd_init+0x168/0x1f0 [ 996.077441][ T3548] do_one_initcall+0x250/0x840 [ 996.082894][ T3548] do_initcall_level+0x104/0x190 [ 996.088475][ T3548] do_initcalls+0x59/0xa0 [ 996.093360][ T3548] kernel_init_freeable+0x2a6/0x3d0 [ 996.099083][ T3548] kernel_init+0x1d/0x1d0 [ 996.103947][ T3548] ret_from_fork+0x51b/0xa40 [ 996.109170][ T3548] ret_from_fork_asm+0x1a/0x30 [ 996.114564][ T3548] [ 996.114564][ T3548] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 996.121788][ T3548] fs_reclaim_acquire+0x71/0x100 [ 996.127267][ T3548] prepare_alloc_pages+0x152/0x650 [ 996.132992][ T3548] __alloc_frozen_pages_noprof+0x12f/0x380 [ 996.139412][ T3548] __alloc_pages_noprof+0xa/0x30 [ 996.144968][ T3548] pcpu_populate_chunk+0x182/0xb30 [ 996.150707][ T3548] pcpu_alloc_noprof+0xc4a/0x18d0 [ 996.156351][ T3548] xt_percpu_counter_alloc+0x161/0x220 [ 996.162511][ T3548] translate_table+0x1332/0x20b0 [ 996.168062][ T3548] ip6t_register_table+0x11b/0x800 [ 996.173696][ T3548] ip6table_mangle_table_init+0x41/0x70 [ 996.179767][ T3548] xt_find_table_lock+0x30c/0x3e0 [ 996.185315][ T3548] xt_request_find_table_lock+0x26/0x100 [ 996.191476][ T3548] do_ip6t_get_ctl+0x716/0x1230 [ 996.197031][ T3548] nf_getsockopt+0x26e/0x290 [ 996.202344][ T3548] ipv6_getsockopt+0x1fd/0x2b0 [ 996.207663][ T3548] do_sock_getsockopt+0x2d3/0x3f0 [ 996.213324][ T3548] __x64_sys_getsockopt+0x1a4/0x240 [ 996.219154][ T3548] do_syscall_64+0xe2/0xf80 [ 996.224196][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.230612][ T3548] [ 996.230612][ T3548] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 996.238442][ T3548] __lock_acquire+0x15a5/0x2cf0 [ 996.243838][ T3548] lock_acquire+0x106/0x330 [ 996.248886][ T3548] __mutex_lock+0x19f/0x1300 [ 996.254033][ T3548] pcpu_alloc_noprof+0x272/0x18d0 [ 996.259586][ T3548] sbitmap_init_node+0x1e1/0x640 [ 996.265061][ T3548] sbitmap_queue_init_node+0x3e/0x4d0 [ 996.271063][ T3548] blk_mq_init_tags+0x15c/0x2d0 [ 996.276632][ T3548] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 996.282615][ T3548] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 996.288952][ T3548] nbd_start_device+0x17f/0xb10 [ 996.294420][ T3548] nbd_genl_connect+0x165b/0x1cf0 [ 996.299987][ T3548] genl_family_rcv_msg_doit+0x22a/0x330 [ 996.306055][ T3548] genl_rcv_msg+0x61c/0x7a0 [ 996.311082][ T3548] netlink_rcv_skb+0x232/0x4b0 [ 996.316376][ T3548] genl_rcv+0x28/0x40 [ 996.320888][ T3548] netlink_unicast+0x80f/0x9b0 [ 996.326266][ T3548] netlink_sendmsg+0x813/0xb40 [ 996.331729][ T3548] ____sys_sendmsg+0xa68/0xad0 [ 996.337023][ T3548] ___sys_sendmsg+0x2a5/0x360 [ 996.342430][ T3548] __x64_sys_sendmsg+0x1bd/0x2a0 [ 996.347891][ T3548] do_syscall_64+0xe2/0xf80 [ 996.353005][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.359417][ T3548] [ 996.359417][ T3548] other info that might help us debug this: [ 996.359417][ T3548] [ 996.369730][ T3548] Chain exists of: [ 996.369730][ T3548] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 996.369730][ T3548] [ 996.383473][ T3548] Possible unsafe locking scenario: [ 996.383473][ T3548] [ 996.391011][ T3548] CPU0 CPU1 [ 996.396565][ T3548] ---- ---- [ 996.402021][ T3548] lock(&q->q_usage_counter(io)#51); [ 996.407408][ T3548] lock(fs_reclaim); [ 996.413917][ T3548] lock(&q->q_usage_counter(io)#51); [ 996.421909][ T3548] lock(pcpu_alloc_mutex); [ 996.426414][ T3548] [ 996.426414][ T3548] *** DEADLOCK *** [ 996.426414][ T3548] [ 996.434553][ T3548] 6 locks held by syz.3.8026/3548: [ 996.439655][ T3548] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 996.447933][ T3548] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 996.457094][ T3548] #2: ffff8880255979d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 996.468592][ T3548] #3: ffff8880255978d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 996.479649][ T3548] #4: ffff888024f29370 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 996.490371][ T3548] #5: ffff888024f293a8 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 996.501348][ T3548] [ 996.501348][ T3548] stack backtrace: [ 996.507244][ T3548] CPU: 1 UID: 0 PID: 3548 Comm: syz.3.8026 Not tainted syzkaller #0 PREEMPT(full) [ 996.507264][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 996.507274][ T3548] Call Trace: [ 996.507282][ T3548] [ 996.507289][ T3548] dump_stack_lvl+0xe8/0x150 [ 996.507310][ T3548] print_circular_bug+0x2e1/0x300 [ 996.507328][ T3548] check_noncircular+0x12e/0x150 [ 996.507345][ T3548] __lock_acquire+0x15a5/0x2cf0 [ 996.507372][ T3548] ? kernel_text_address+0xa5/0xe0 [ 996.507392][ T3548] ? pcpu_alloc_noprof+0x272/0x18d0 [ 996.507407][ T3548] lock_acquire+0x106/0x330 [ 996.507427][ T3548] ? pcpu_alloc_noprof+0x272/0x18d0 [ 996.507446][ T3548] __mutex_lock+0x19f/0x1300 [ 996.507462][ T3548] ? pcpu_alloc_noprof+0x272/0x18d0 [ 996.507477][ T3548] ? stack_depot_save_flags+0x3f3/0x810 [ 996.507498][ T3548] ? kasan_save_track+0x4f/0x80 [ 996.507512][ T3548] ? kasan_save_track+0x3e/0x80 [ 996.507524][ T3548] ? pcpu_alloc_noprof+0x272/0x18d0 [ 996.507537][ T3548] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 996.507552][ T3548] ? blk_mq_init_tags+0x83/0x2d0 [ 996.507572][ T3548] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 996.507588][ T3548] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 996.507606][ T3548] ? __pfx___mutex_lock+0x10/0x10 [ 996.507621][ T3548] ? genl_rcv+0x28/0x40 [ 996.507640][ T3548] ? ____sys_sendmsg+0xa68/0xad0 [ 996.507658][ T3548] ? ___sys_sendmsg+0x2a5/0x360 [ 996.507682][ T3548] pcpu_alloc_noprof+0x272/0x18d0 [ 996.507703][ T3548] sbitmap_init_node+0x1e1/0x640 [ 996.507727][ T3548] sbitmap_queue_init_node+0x3e/0x4d0 [ 996.507751][ T3548] blk_mq_init_tags+0x15c/0x2d0 [ 996.507772][ T3548] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 996.507788][ T3548] ? lockdep_hardirqs_on+0x7a/0x110 [ 996.507805][ T3548] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 996.507822][ T3548] ? kfree+0x1be/0x650 [ 996.507841][ T3548] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 996.507860][ T3548] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 996.507885][ T3548] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 996.507905][ T3548] ? sysfs_add_file_mode_ns+0x259/0x300 [ 996.507927][ T3548] nbd_start_device+0x17f/0xb10 [ 996.507949][ T3548] ? device_create_file+0xf4/0x1b0 [ 996.507971][ T3548] nbd_genl_connect+0x165b/0x1cf0 [ 996.507996][ T3548] ? __pfx_nbd_genl_connect+0x10/0x10 [ 996.508019][ T3548] ? rcu_is_watching+0x15/0xb0 [ 996.508036][ T3548] ? __nla_parse+0x40/0x60 [ 996.508057][ T3548] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 996.508079][ T3548] genl_family_rcv_msg_doit+0x22a/0x330 [ 996.508102][ T3548] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 996.508125][ T3548] ? __lock_acquire+0x6b5/0x2cf0 [ 996.508147][ T3548] genl_rcv_msg+0x61c/0x7a0 [ 996.508167][ T3548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.508186][ T3548] ? __pfx_nbd_genl_connect+0x10/0x10 [ 996.508209][ T3548] netlink_rcv_skb+0x232/0x4b0 [ 996.508226][ T3548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.508251][ T3548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 996.508264][ T3548] ? genl_rcv+0x19/0x40 [ 996.508287][ T3548] ? down_read+0x272/0x2e0 [ 996.508303][ T3548] ? genl_rcv+0xd/0x40 [ 996.508321][ T3548] genl_rcv+0x28/0x40 [ 996.508339][ T3548] netlink_unicast+0x80f/0x9b0 [ 996.508364][ T3548] ? __pfx_netlink_unicast+0x10/0x10 [ 996.508385][ T3548] ? __alloc_skb+0x193/0x390 [ 996.508402][ T3548] ? netlink_sendmsg+0x650/0xb40 [ 996.508417][ T3548] ? skb_put+0x11b/0x210 [ 996.508436][ T3548] netlink_sendmsg+0x813/0xb40 [ 996.508454][ T3548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.508471][ T3548] ? aa_sock_msg_perm+0xf1/0x1b0 [ 996.508491][ T3548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 996.508508][ T3548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.508523][ T3548] ____sys_sendmsg+0xa68/0xad0 [ 996.508542][ T3548] ? __might_fault+0xaf/0x130 [ 996.508565][ T3548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.508587][ T3548] ? import_iovec+0x73/0xa0 [ 996.508609][ T3548] ___sys_sendmsg+0x2a5/0x360 [ 996.508628][ T3548] ? __lock_acquire+0x6b5/0x2cf0 [ 996.508648][ T3548] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.508670][ T3548] ? futex_wake+0x4ac/0x580 [ 996.508693][ T3548] ? __fget_files+0x2a/0x420 [ 996.508709][ T3548] ? __fget_files+0x3a0/0x420 [ 996.508729][ T3548] __x64_sys_sendmsg+0x1bd/0x2a0 [ 996.508749][ T3548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 996.508771][ T3548] ? rcu_is_watching+0x15/0xb0 [ 996.508789][ T3548] do_syscall_64+0xe2/0xf80 [ 996.508805][ T3548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.508820][ T3548] ? trace_irq_disable+0x37/0x100 [ 996.508834][ T3548] ? clear_bhb_loop+0x60/0xb0 [ 996.508851][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.508865][ T3548] RIP: 0033:0x7f896539aeb9 [ 996.508880][ T3548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.508894][ T3548] RSP: 002b:00007f8966270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.508910][ T3548] RAX: ffffffffffffffda RBX: 00007f8965615fa0 RCX: 00007f896539aeb9 [ 996.508922][ T3548] RDX: 0000000000008010 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 996.508933][ T3548] RBP: 00007f8965408c1f R08: 0000000000000000 R09: 0000000000000000 [ 996.508942][ T3548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.508952][ T3548] R13: 00007f8965616038 R14: 00007f8965615fa0 R15: 00007ffe3f5be448 [ 996.508969][ T3548] [ 997.032445][ T6426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.040659][T26358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.048808][ T6426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.057086][T26358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.065191][ T6426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.081327][ T3564] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 997.099019][ T5826] block nbd2: Receive control failed (result -32) [ 997.107291][T32766] block nbd2: Receive control failed (result -32) [ 997.135129][ T3548] nbd2: detected capacity change from 0 to 127 [ 997.150572][ T3567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8031'. [ 997.160972][ T3566] block nbd2: Dead connection, failed to find a fallback [ 997.186255][ T3566] block nbd2: shutting down sockets [ 997.207461][ T3566] blk_print_req_error: 138 callbacks suppressed [ 997.207481][ T3566] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.225085][ T3566] buffer_io_error: 138 callbacks suppressed [ 997.225103][ T3566] Buffer I/O error on dev nbd2, logical block 0, async page read [ 997.241793][ T56] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 997.241808][ T3566] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.241837][ T3566] Buffer I/O error on dev nbd2, logical block 3, async page read [ 997.251573][ T56] Buffer I/O error on dev nbd2, logical block 1, async page read [ 997.251604][ T56] Buffer I/O error on dev nbd2, logical block 2, async page read [ 997.287607][ T3566] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.297792][ T3566] Buffer I/O error on dev nbd2, logical block 0, async page read [ 997.306421][ T3566] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.316239][ T3566] Buffer I/O error on dev nbd2, logical block 1, async page read [ 997.324074][ T3566] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.333985][ T3566] Buffer I/O error on dev nbd2, logical block 2, async page read [ 997.342215][ T3566] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.352734][ T3566] Buffer I/O error on dev nbd2, logical block 3, async page read [ 997.360648][ T3566] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.370558][ T3566] Buffer I/O error on dev nbd2, logical block 0, async page read [ 997.379240][ T3566] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.389024][ T3566] Buffer I/O error on dev nbd2, logical block 1, async page read [ 997.397687][ T3566] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 997.407642][ T3566] ldm_validate_partition_table(): Disk read failed. [ 997.414451][ T3566] Dev nbd2: unable to read RDB block 0 [ 997.420557][ T3566] nbd2: unable to read partition table [ 997.429301][ T3566] ldm_validate_partition_table(): Disk read failed. [ 997.436269][ T3566] Dev nbd2: unable to read RDB block 0 [ 997.442026][ T3566] nbd2: unable to read partition table [ 1002.705845][ T6416] net_ratelimit: 7 callbacks suppressed [ 1002.705868][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.719582][T26361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.727699][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.735804][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.743920][T26361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.752066][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.760234][T26361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.768398][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.905059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.913301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog