last executing test programs: 4.696381225s ago: executing program 3 (id=4580): close(0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea5, 0x40000, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet(0x2, 0x1, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000940)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff9c) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet6(0xa, 0x3, 0x200) getsockopt$inet6_opts(r6, 0x29, 0x3b, 0x0, &(0x7f00000000c0)) getsockname(r5, 0x0, &(0x7f0000000ac0)) syz_emit_ethernet(0x89, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0c08004500007b000000000011907800000000ac1414aa00004e200067907804000000070000000180000000000000a0e1160755c4c6299453154d070e47aa454df8fdc64ddc1e53d02780dea976aff10fa21c9b0a00000000d4713c448b046b4e2e6de77c9c05c3dc5f75dc00e9a5a384eb1bab6ef9212c2aacaf94cc8c"], 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000180)={0x24, @short}, 0xb) 4.693442561s ago: executing program 1 (id=4582): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x3, 0x0, 0x1a14, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x24064410) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0xe, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_address={0x20000244, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x58a2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1000}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xb0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 4.513616533s ago: executing program 1 (id=4586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0xfff1, 0xc}, {0xffe0, 0x6}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.27074744s ago: executing program 2 (id=4588): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x6, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x20, 0xf, 0xb, 0x2, 0x4, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x0, [0xb, 0x3, 0x1, 0x1624, 0x1, 0x2, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0x5c, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0x6, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x6) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0xf3e, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) r14 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r14, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000200)=r15, 0x4) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r16, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) 4.267669879s ago: executing program 0 (id=4589): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x4, 0xf}, {}, {0x0, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x84) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) r3 = getpid() r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r7 = getgid() sendmsg$netlink(r1, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000000c0)={0x114, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf8, 0x16, 0x0, 0x1, [@nested={0x4, 0xbd}, @generic="e8306c826815600bab8f142599b91a9b67eee2a8", @nested={0x4, 0x5}, @generic="d827b894f3d2a7d86eec23a1c48894a0a4c0237294d5469c7254052b0476", @generic="ec98c224d57fa1ee187a839b991c16be5ea9283e35ac6ed55606e10ccb8d4085b56ff4125f30edfcf8f9d0f158ca1bd83b89b62d7b2f7f625489cb3574265bd9ca86588460e4b49a33c72424ec", @typed={0x8, 0x10, 0x0, 0x0, @pid=r2}, @generic="6e447aabcf4df9e53b20aa09878cb86682eba34bab8770cc8ebc804b788747d1f662efe7adf0bba5a983609814d7e7fce3d4cdcc52a290ed4b73bb7641849708616811daaa4119a16d1bc156adddf741dcb4af71e9576b057db7906a279b5da60ab6546447"]}, @typed={0xb, 0x10, 0x0, 0x0, @str='ctinfo\x00'}]}, 0x114}, {&(0x7f0000002100)={0x135c, 0x80, 0x20, 0x70bd27, 0x25dfdbff, "", [@typed={0x14, 0x32, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="4e3182614a9dea6b6731bb7c815078225bc7bb955201ae4996072fd6411edc063eaab4e6fdb89061b0c8afc344ede5f72ae4130541bd", @nested={0x8, 0x111, 0x0, 0x1, [@typed={0x4, 0x6a, 0x0, 0x0, @binary}]}, @nested={0x16e, 0x9e, 0x0, 0x1, [@generic="e4df6e538070ca6f119942c52b0be3180fc19b70ca9d10c24039d8b84c95d76611cb5fc51d323dda149829ec0769dd91cc98f39753e033027da481ac0f6c84dff887c190cc73c4031538b8b6cd0fd8c3e5c5cb310f8a63c770e89f363eba19f2efbcc17da3de2eef29a379e3402c619f93f976bf66e447", @generic="be837cdcef098c116d77316770df0f624375d2d781dd7cfd3927b2d6007469ff73c503b56d31d5c305a6172bc529446bf6c5594f886f902be8f6e39d3d142bd770d86a4e5802", @generic="ce7c4133ef742a46d3552204f3537806a670a6e26bd858928ed6fd231cb5ef4864d64d78d1abc86692d1c2c79b23cb8c80cc65b38d2d6096ff212f1064d9c9198760c022c7a7b40d8b5a0f0bb771b4d1c61e9c4805f8c7c6bdf4aa6d38a1dbf610972576da4999bd389c002f0a2d35ef4b2ef9608e3228aaea3ee0760279b5a5df6e34f280c32b6f0f683328e94d3d016c601a6caa3e35e3c23e59c83e45d06817", @typed={0xc, 0x107, 0x0, 0x0, @u64=0x4}]}, @generic="ad0411f817145e8368c642110875346b190134c50073f86bf42348217381114d2b249922afcfc3ba30acab110a4205f1208fdded9f12143b8b1869ee697733e7744a6924c8b748dd3f155a71b7e062aa831dc9a20323f81d3ffeaa697642c167271c8201e79c83847b6ddab87c6e35ed4766fb1d1f15e44303f28bf9930f7bb21117098b2c2e59c9ff13c2cefee814d8ca4b026653ea8de529", @nested={0x10e8, 0xfa, 0x0, 0x1, [@typed={0xdb, 0x18, 0x0, 0x0, @binary="05c9502f03b157276ebc5a317c8fc0ee3b7c397c1b06ebde121faa77fa15e53f415d7d98e5fc9e6c254cb35e103489257c7f6bb27bef54911e27ab0cc9bc9182dc2b897d4380fb0ecd2172d700e14132b4ec593b692ee5b580862b13b64816c9db686eae6bc2990b7bd5a9e0f676001a22450af3d9edc611a049e06c7f2c85f0bbe676964a06e1f2a9fa72b4888661bc3575d1b2ee9156cd98079101d1fc09bb481c59a0d760578a9586674b4254ff7b3fb9d786a8680699a5920daf0a8bb73012d9555124aa9dee5a82c51980bea31fb1b8f0d734600d"}, @nested={0x4, 0xb}, @typed={0x1004, 0x81, 0x0, 0x0, @binary="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"}]}, @typed={0x8, 0x6c, 0x0, 0x0, @pid=r3}]}, 0x135c}], 0x2, &(0x7f00000034c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x20, 0x81}, 0x20040880) 4.120435268s ago: executing program 0 (id=4592): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r1 = socket(0x2d, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002f80)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000480)=""/88, 0xfffffdf2}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/250, 0xf6}], 0x5}, 0x6}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001680)=""/216, 0xd8}, {&(0x7f0000001780)=""/183, 0xb7}, {&(0x7f0000001840)=""/42, 0x2a}], 0x3, &(0x7f00000018c0)=""/6, 0x6}, 0x7}, {{&(0x7f0000001900)=@nfc, 0x80, &(0x7f0000002c40), 0x6, &(0x7f0000002cc0)=""/202, 0xca}, 0x60}, {{&(0x7f0000002dc0)=@hci, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/19, 0x13}, {&(0x7f0000002e80)=""/65, 0x41}, {&(0x7f0000002f00)=""/58, 0x3a}], 0x3}, 0x1}], 0x4, 0x10003, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000002c0)={r2, 0x0, 0x80, &(0x7f0000000200)={@_ha_fsid={[0x8, 0x6]}, {0x7, 0x0, 0x2, 0x1}}, 0xcad, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r5], 0x7c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) 4.023335075s ago: executing program 4 (id=4593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=@delsa={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x6c}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) 3.792449063s ago: executing program 3 (id=4594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000010800)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0xd6b, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}, "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"}}}}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (rerun: 32) 821.641118ms ago: executing program 1 (id=4595): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)=')&&&*\x00', 0x400000, &(0x7f00000000c0)={@align=0x3ff, {0xc000, 0x39, 0xfffffffa, 0x8}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x45}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000002400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001240)={0x1178, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "7120ea8f8fb3a644abae7e8948c75564b7f9c86cfe88c8b2005251e615a62bf419ff24276b58b82024905d99ee0c66dfa1653c83b2af73ef6f8e4dd30cdcf9e52e0eb25a2b732f7b9a74a0df9c3a592ec602dc136b7306c2867d2e3d068062fa6cb4b69978601cce31fee490ee1f70ba94f03fdf553928f7f53f65d00ac089516ae1f5843f506da5b2346dcc681869a934b95a0f69ecf697011178c917c53dd4508e657058456b0b8bcfeea640"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd7a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1ab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1331c000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b96}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x1178}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x309580, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 744.016447ms ago: executing program 0 (id=4596): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x581280, &(0x7f0000000080)={@align, {0x7, 0x6, 0x9, 0xf}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xb}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4c}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfd72}, @NL80211_ATTR_SSID={0xd, 0x34, @random="be029334f3d0e2c876"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x47) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000280)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 743.550798ms ago: executing program 3 (id=4597): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="14575edaedaa3ea503ac02cd7c663ccf4ef1482a00008a0008003c", @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000009000000000000009500"/32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000280)=0x100008, 0x4) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000001e80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e40)={&(0x7f00000009c0)={0x1478, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x140c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "c3c769793899128134340f0f5b9cfe7284868e2f16186fca6c00ef390546a794a04f92adf3a3f1f6e132b3471f761d0987e280a766ca78a66287c0fffd736bb8c515a3e1a9b85ea4cc8b8416071f7cb936a004f650b33357aeb105e049d8d9b5d95539bbefcb1ed7b307848ce8b3705cc15b7dfae5e1e9c8bede6a54211ecf7a491f927fd2cb2c62981170a293b9f94b1d69d2688bb673e8c9f019c4f0e675ba95b7bc789e76e8d8840d9d8ab00f01123140eb3336afc94c244061456948573f9e864499611808b455e36e63362e24928a374ae2620ab1c96b4a5e8bf762f2be4b6d88ad"}, @ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "84d6eb2a5ed620cf2fbf99c03adacbe1a9a604964fe881fa"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "db56d357927139beb08938fbca1e674f89c3a4b01e951f6de7f160a48031b845fa0fbfe0956715760619ba1d5d61bba0285acc382253576648de065f0c43168350b0b1ba58f0404de2bc90ed97a49760df56d6baefc01278bf28fc648a2cadb8fb826d95cb9f2bdccc874928c9a6e68ef7da1988fbb55ad408c031a0282de169b5669a6389e5a147d407aff48341cfc863b2c5763792622517532f7d9cc8934862d98b55205ae7e23982d0bcf88251f758a0889d3c7008627fc7abda664ec69eeddb0420f43b5b83f53739b6ae399faa4e2040370a5dec5ae4b44ec3acbcff3b5ac22a3aee56b17a4bc55ec9b7813930bf89341de8925512ae9a1a7fd1bd0e64f5f3abf963fe517cb2e4ec54daf60aee828d5ad7b8375f020c6412c790ca1be9e8b8a9a8bc91fc515365ba1988421dd1d4fbca489be47e7819ed74e47e201250b0607491f645d9967b3530c1cf588438ceb2d5612e47d404154b35c987a925cc94ee663257ee3296fe4d58127dfaf71ab8ebbc72db7234cb2b5e353cccbb9dc7c0aa2139ff19bee1b68868986ba1d444f1766698d7f59e675c77e858ace2e59b54e8c9cc96b34b99c51c4a7f30d01f41fa67bad52ef90fc037723ebf88175a05ffdc2c7051acccc9befcc191bc5016847d5830263fc4b5a5a388b70c81db9b38bcbec2d3f103a90ac3b71dd97920a4c92c73861b2163114632073dfc409f5abe3e5c14e52de9a5865299cd512e9b0a33a556381542ba3df003f67e4d6de3ab60d2f1f19005dccaea39574774d2419486334643a00aaf5047bedc12560696a889e958d1b572faba9f4748ac0ea4b8fadd315a077927462e5b919053d06814185f8fa20968d36805858d4e4600e7eef9ae90399e84c7775b1a885ff2d944363ff12a78cb52daf1e93ae5e67c929e875bc6228ce2448d578007c0bde874db812524f4a330be8918438023ed647ffc4442c5f22ba3b98da82c0bc2c181d4abde881bc467fc867459d5db48819b07666fa551df18652826ab80d58aef9ceabe9db9cceb17bcba0be10b89ac527c3a4d50a4ffeb8234f9655428c15ef334b9a20c6907a3b7c8a67508454bc802c4367f9197b25ec6fa5055354c244efd74339ff439f70fa9772d509d3e33283dac2d870c8ef9811229fbeef137ae9f881af430d27dee485e8132f6bc299b0c1da5cad83fc768121e76ba47c80c693962c87dccb31defd1dd546a7879c2e0407de52ec673039aece979c19f326a12e99f15d7ca02d8e16739e25b15c3c8af7f42797a1b620713ecf4c06636596a032759cafab2b0d70c27971dd88966edfb3cf07eb7cc5fb9f3d7ca055f065d1c58cb59b7eb292211d7b4585dfaa7bf3f2b581bd4fecfa3f9410680d9d8f8a824013a7ebe67c2033665fb01526441e48c375df287088c92e1ab4251af93afa948680195aa291d33ecf8e7b44fcaadb1eeeedda8736589c24e636e5d8df79f85c97dbe07c14d4dd997968f8a374bfd22ff0a20108f3083b679b65040d0b7f20643e1bcdf492d0922454ab743e61bfe97fcfb65bc629414d59ba962ce7aa29607025ca34a1ae56a33fd05c42603a4a4ec4e5e0207b3f618d6e7c24609f29625b669c5d6becb521271d4d58cde7a7e9e691ca4693014e8195e890b28abd9ec0a660a878b92997f11c3ebf16cbea93360f0f8b14bd3686fb3ac8d09672e10451fb8c27e8b90c0e7cce5be4896e032d8c70be3aaa6125a9eda22d1a11153dc247203d9c78a4af418350e9423b9d1d2b4cae2e309e7b6115cee1eca59f2de45dfbcc1eb4cf446676389b1b7d64e720f38abf2296c566514a66e60f9de238a6ddc73d9bcb1af5e7d1f4412dd12ca6be30150756012ff590e28bcf32b77aff5b35df67ef789f9bdfb4dce3d8264cd0cfbdb98fd90f033391a977ead2131ccec3d4c6f27595aee9a7505a07edc3e612b75f0abdc52cb5e6781997701e65cccbf7758d9f0119d5c773b53eb51cef76cbd37433463e9920283ec535fa06b55e8b5d96870d617bb2d832445ba964dd16aa9ddd0a8340217a5315d72bed82cfe0fe378f1fb6d59311413513522d09c5ee6bb9988bee29802fc70bf875acf7fab320fa2d10b321ecc4abce924a1b20438dbf3aef2e83bb2590a03c50f7b3c2280187a38090d34e50a63b2b1c40dc62bf1f010b7cf46a9bd283d73fd34c243a58ea053d11596c84bf5c60d503ec97f38ad368185159bb20515cc845d4cc23d53e493a443dca974769b91bdc1d12bf35827780159f54283b5557c81c587e0b0e8c4b57da0ab85e0669185dd6237cb6ba609e51bb6eafe5d1536026200ffc7efe14a9cee221575755a10d220b4ce730e9875e6030a747ad9fa31adeba7bf0964081e373c7529497744a6714cb1f675a4ea2298cfd0d7006cd17d788f17391a5640b0a0e44c74d8ab90a562bf16c8a5bcdef02513871cde4acb5c39c80a6a0c0a93e268d951be3e28a76fc1c8c3d1f92fa50c89ac8e413a28d787fd5ea402832abe2ce3b4e0b958f2c23eeca482d6d3662e8e3fc2ad99fa05e631decc2164719ad092200055d687082848b8fd5aca19818c3b6fd22c99217972f20720ac2b619a20490013a6f718757a8f60c09c935a56610db566580dbf8c7e5d52a21ab0f0f64c4b05bee016b62ecfaa9be3e44f3998863737c5b64c9eaf4dbcf79984d197c44ac99353f72ac4bb0ec5957f814411a502acb680ef738ad687596ae14971c19e86476a996101f27262f4efa83976fc8cc8d52b32180d27da6777df8ce430a397d6b70ed61b40ff59c6c018ed94b8b7f694a1db15d5f8502a77ef0ce3588ec98b18aab09c6c610defe727d3741bf5bcda01ffa0a01c852128baaaf2ad1b227164848dc26214fe1752e4040b22a35f99d1fc28d6c18589ee5a0a686f4a1641afff653d72b8b3a9065437fa45300144340df9b74eba8914b81f0a24b97785b59a992cbe4b12a438cb3f46bdaff0454edd65d3fc3caf058e32cbcf859326cf18cf7dd77987ee6f6642a597e110036627761be83d5cbd8d26bf74560d1d9817a793de27268a08db4c14e9a413ca48d84d50d072814b186893dccad1da49f3cb438265899550fa5d99e8017119162cb374641ac5ff48c48fa384a8c7df76b5301926e5507e53cbdd9eee8d6ced5542c3b09c49a0bbd3c5c11a9e1490c92219ed5ca799413190fe2b4a6daa3b4a10c1b2cc9d6101ffaeba10e73a082195127b332559c4f9383c15c966fd66ce2cf7a4a491c75c861d5d933a156be9d05c94235bbdb5d9829c0d23355d347e006d278612bcfe8ef08a51fad592f4d1b071c24f9a0d4ec8ef62909f79c73d608ecbed7c497ee43fa5b66ad953df60a2c7431b53f3c9789b92b6b01d695e80f50abb2a16fca37ffd0c163b3587696b28d676ae3267d7c246ae083db293152fe8bd0f0a786331281f1a96f9b7a2fcc687dbac33767339e871197394f11081085759319ae686269ae3723ffba9081c26665fc4bb31dca36bb066cbbd29da45d2545262c35b0569b2ad1c874309177b4d3b4a6387d9135b75e613340ecaef86d5acd92649a35dff01aa45f7b18071b521f503a62c5932746a23a96c9910bb02599dfd113d4bf230b1229a246b5522f14165ddaeb8dcd447289d1395f378d3396e32a9e94a29db13b44a7b5db2e21b8588ac6e0c508014dc481738a026bd5be281dcf984e5de4556e84fc79002ad259bf0f70b8179089fbae369cd67197fd86a3145a7d365bfb38c9a75c4687836a657b98b5d79064157aca2e43b7ecfefde8ebda3221ca6af769ce4bcfefcc3c7c64c34390d7787902efdca54de65a89def6d3c0c448b9d78c4509fbb6d56229a7f434cd7dded576afe56a3715cfa2d6b0f4ac1be486fc7215853be53eec2884b509aba28616ffbdb029848d9d4a7901e562b65f24e14ab5f27642be7685f4d775ecc50a687221914e7df648a3f96f10e1959b6930e1ad2dfce978f3022f13028b43fab207d73c66e65191502a0edef49f3107ead5232f07c8c7191c858e65bb492714efffbcc02378583acf57b0b5cdd2d8830c4f67fce034cb13e4a16e75b36a496eba3710c0019049f1ae18804a5cc132301bf2403251d9966166a862afa5394435302a13bf6c17d68661c11d28cae93dad6b9f884ff18fd563a936e8c78a481d35f6e14e56c40bdc564d41f8e9c3c8f03adc305faf4d00f133d6f0b493ffc7c5010044f60de90423dec31721e738bf9003857930703540d7d54af88982fb5d47b729834f6a12ef91b9a6c5c2b751c607f8377376ce85e0c2ab8636fcd5e321b1cb2419f828b1f980fd5455afd505df86724a9d82209a03b81c3d7ca3b3ff92b40c01557c94baf823948f6fbdf1b0b6e8694fd8240cfcbd817c6328ae3f707c5414cc911d90c04d70158a5fc67b14a3a681e272544706037862ef2ed2d8bce934e7e336a23d80177b7d5e7b6b0f81639fd34e8b4af58f249b6c1b406f459c8be5588df6ddcdffa65c2032aff79a3ce8d0376fdecec65d2d432b3e27ac4b5a7341b8744c6490514f5466d73339449d48603af59f2fac4b196a5152b64223bc1d77ffbb9457f02938af27c0ad724c91766ae95b7d7b51f921ddcb2b09aea5419e3b28b96d099485b01b0618f2e57870e43911f95b4dba618caddd898691ff33b6995b990eebefc165bd67f97c9186b4ea05828f7cc3cfb506f38ca429c7d97cfa0453e01972f8c07f6dff220d2f7a64f44ecff08851eeba402418d36b9842b6ba628aef56d7d1bd16421f09ad91a024d322a349addbd38336803e9c0044adf0f178a0ea54a3e5957409b116d88df3ca5274ae28d4e3d02a79807e7f7d9e6d9ac56e41db15c7a1dbd0b5fb961a2f63d4cd93d03da115d586c6cf78b5c115b2d363fdb0272caee24ea5681282eedd7a2e23064df7ec3944c51c63390845b8fcbed6b71a62065f213c950b1879d300aee4fe4d83e1fbc6b9d9cf9a15c0235d1785d5bbab137f3cd769dfb84f9c4832698e8f4b96c841bd0b246b13b43cf1ca6fb08e2a3ff347b201c63dd2eb2f726055b823f1658be8ae28e0b2999458ae00814e89eb05c7857abcd3d8d5c6a3c610f0991d0d99cd2099a849a854b8e7bb802ad7bcbb68534ff274ce4c09daee9622ea18bea29a0e66155dc28fc1d846068384d1e69e56bd31c69dcd1433d4944bd55a7d7763b34e6c753df95d80373dba9c8d967e6e86039579aec85e1e0fde3d7f4f24732eae2a0f12b46f6d5d191434599fd028d250614b31e62306ec49d88c4c3a5689e5e0327b63a4e5b718474155b79a53531ae984aa19c96c4099b1b463453a604eb9f5a5ad0bde55c7f12668e9189d2ada56db7abfc9c65025ffdcc5c7bd8a00561d1b89d2358a04bcfae66748838cecc047cfd32cd20e5a88d1faf7764667b820c91fcf22e40d2b309f35a171962c633023bcf9e3e8d7519fea5a31dafa9207b973368332e773dea1a400c0527b629ec445b6f6d6c51f5854be6dbbdd23f11f00cea4c390fa53f17c29835170855690a20a3b98ea55d6c38fe7bb44d79d386ee7692dc380f17b94c090d80e5c15525481db53dcc16545bd574cb2345d350171d54e5f0e557423fefc76e16b668025f9870e1e04f1d0dfdab17c56c6b5e48e6302cc2c0e4d2ec52ca335784a1d2a3d3bcf3ad034e6610928ef682f2fcf5981fcd80133ce688a3432ecbf192f42d0dfffde90850b7d5ee7bf1bc38740884cfd6abeaa847c9095408d2faea5addb7a90fe0e16443838b4743f6cdf7dc534c2a1afe30e4fac1c71972abdb1da30a062f"}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0de}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*\x95^*!*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'cbc-serpent-sse2\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbea6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff6fa}]}]}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "c76f87b57971981eb82a509128f5975b203ac7fcc0191b5971d8cd201329954cbb"}, @ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4db}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\'+/-\\&+/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-.,$@,#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/$/::\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x15f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1478}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200000000000000000300000405000100070000000900020073797a3000000000140b4cd9b0838f87b3f54a32635609df3d076a6059098c24e772bc"], 0x28}, 0x1, 0x0, 0x0, 0x4008041}, 0x0) 743.047004ms ago: executing program 4 (id=4598): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"/76], 0x50}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close(0x3) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = socket$netlink(0x10, 0x3, 0x17) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x89, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b", &(0x7f0000000a00), 0x0, 0x700}, 0x50) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b6ddd6ff", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000200000000000000000020000000000000000000000af4e4e8825d718a6d4bdacd65ae500"/80], 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) clock_gettime(0x1, &(0x7f0000006540)) (async) recvmmsg$unix(r10, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x2}}], 0x2, 0x2020, 0x0) 700.238761ms ago: executing program 2 (id=4599): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40a000000000000dd0a0000000000007301410000000000959ba40000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 675.565659ms ago: executing program 3 (id=4600): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f00000002c0)="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", 0xfc) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000040)={r9, 0x8}, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r11, 0xb026e000) sendmsg$DEVLINK_CMD_PORT_GET(r6, 0x0, 0x4000000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 567.322062ms ago: executing program 2 (id=4601): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1b8, r1, 0x808, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc604}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x52}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xee}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xea, 0x3, "1d3b8c310e33e25ad6e8030b211074587d19f04a1270db95a86c54f664f536dc5d696ee7b16c4a94c5b531c3b7eeb076b27dad206b935b33d9fe814b5afdf784598ab7b0599da29004f91a5619354a374b0f5904b3ddd78e3435014507e33b1ed532249627c8e2ad9490cea54a881e12ba7cb23fee9378d073a1f8393009096b3375b5aaa08cb7e5674a2e2e3e15c3b419ff3046be332b1b66be559a1c4cd08cb5390fbca517be8409d450718a07fd67444e0e83645849765040e6aa1694bce8e350b18f70ed139faa14d054bdddc5dd29912abd6c2c107ebfe88e5fa0044493cc14ec7c902a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x44004) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = accept4$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80800) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000240)={0x0, 0x5, 0xf, 0xa7c, 0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r8, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r8, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r11, 0x107, 0x18, &(0x7f0000000800)={r10, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="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"/298, @ANYBLOB="000000000a9a0600140012800b00010062726964676500000400028008000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x484a1) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) syz_emit_ethernet(0x6e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6010104000380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4c200009078000013127232407cf5000000000000006eb86cc80005111fad1e0aa040ac1e0101000c000000c10a2eaf3cdd75d3aee0b7e2f96f6b78d4c6fd94106829c82882d564fa5f063e6b188603dc034e578f9ff353f017b16b0e8372aac0d2b2ec684f9da6173045209832db9ea3d8"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0xa}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x80006, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0x40, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x7, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x1000003, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x6, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x80000003, 0x8001}, {0x3a, 0x7eb, 0x4, 0xb, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x7, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 566.585563ms ago: executing program 1 (id=4602): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 566.258009ms ago: executing program 0 (id=4603): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 533.107428ms ago: executing program 4 (id=4604): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="100000000314010026bd7000fedbdf254577ca676585d66d98c3eb963b71d0c91e04b5133fa359a7b651c5bb9cf4c7a1ea25aba8ec6b40e2eb5d45576057e635b1c234d5bdefc6eee2adc050e2e1e4bf9fe110"], 0x10}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004040) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000004c0)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="100000000314010026bd7000fedbdf254577ca676585d66d98c3eb963b71d0c91e04b5133fa359a7b651c5bb9cf4c7a1ea25aba8ec6b40e2eb5d45576057e635b1c234d5bdefc6eee2adc050e2e1e4bf9fe110"], 0x10}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004040) (async) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000004c0)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) 441.990946ms ago: executing program 1 (id=4605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff7}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xa1) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000003b00010027bd7000fddbdf250a0000000800010007100000"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@deltfilter={0x68, 0x2d, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x2, 0x9}, {0xa, 0xc}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xa01}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x22004868}, 0x4cc80) 368.202011ms ago: executing program 2 (id=4606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 345.881228ms ago: executing program 3 (id=4607): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r0, &(0x7f0000000e80)=[{{&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, &(0x7f0000000340)=""/145, 0x91}, 0x4}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/236, 0xec}], 0x1, &(0x7f0000000540)=""/233, 0xe9}, 0x5}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/166, 0xa6}, {&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/251, 0xfb}], 0x3, &(0x7f0000000900)=""/226, 0xe2}, 0x6}, {{&(0x7f0000000a00)=@isdn, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a80)=""/107, 0x6b}, {&(0x7f0000000b00)=""/126, 0x7e}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/110, 0x6e}, {&(0x7f0000000cc0)=""/73, 0x49}], 0x5, &(0x7f0000000dc0)=""/177, 0xb1}}], 0x4, 0x0, &(0x7f0000000f80)={0x0, 0x989680}) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x7, {0xa, 0x0, 0x0, @remote}}, 0x24) accept4(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 343.372776ms ago: executing program 4 (id=4608): r0 = socket(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) socket(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) 292.127983ms ago: executing program 0 (id=4609): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xc000000, 0x0, 0x0, 0x40f00}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x26, 0x5, 0xfffffffe) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1c) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1c) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) 253.698693ms ago: executing program 3 (id=4610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000845}, 0x4000004) bind$inet(r2, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xd1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x1221}], 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x8, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)={0x54, r9, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 206.43378ms ago: executing program 1 (id=4611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha512-neon\x00'}}}]}, 0x140}}, 0x20000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) writev(r3, &(0x7f0000002500)=[{&(0x7f0000000100)="3ab105308f1ca67fd0c80180e124f1b70a7fbac654c0b8368f9b0d32dad905ca5c2d54ae9cee6147caa6a7b1f811e75ae2b5038fb18bb2ef23b98269dcbabdfa1d87281ee971ed74052783744b7d0130fa3aa0b726ebcedaa40e8ddc1f20fe3c4fcd86117b4732aa4709c4290f6ea30471ecb03ae9c47a4e9fb8c58fded8e8e8edb2be195a11cd3ea3eb365877f5a1bacc70a0ac9cc4db41d933fb", 0x9b}, {&(0x7f00000001c0)="a2e41c9544adc1ed23a5ab21cc9b9e2437d7906dad7097923031d86557", 0x1d}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="a5772ed3cd1ec981333c361daf6b5acf26f6882d8e848dec85b92abcb1f713ac5cf7e1597bb38883ef95a5651ab37e83c792ccab01d95a51d3b050e5000bc65e1d6b681738e70527919fb143495b42d0b839721a914b9ed56118778acae35ef5d5a9cdb981a3f0a124544a8c6aa11bbe6e693c649ce6905d9737539f422f210a5bf7158ab98d45527f603032e4acc9226e55a613", 0x94}], 0x5) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket(0x28, 0x3, 0x80000001) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) 152.182712ms ago: executing program 2 (id=4612): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x18, 0x55, 0x701}, 0x18}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) 116.884374ms ago: executing program 4 (id=4613): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0xce, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@mpls_getnetconf={0x14, 0x52, 0xa853b3d31597fd41, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xf9, 0x4, 0x40, @remote, @loopback, 0x7, 0x40, 0x80, 0x6}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x501000, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000380)=0x4693, 0x4) sendto$inet6(r10, &(0x7f00000002c0)="8d", 0x1, 0x80001, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000100)) 98.439264ms ago: executing program 0 (id=4614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100017000fddbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="92100000100200001400030076657468315f766c616e00"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x3000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r6, 0x80000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0) (async) close(r1) (async) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 244.193Āµs ago: executing program 4 (id=4615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$tun(0xffffffffffffff9c, 0x0, 0x8200, 0x0) r1 = socket(0x8, 0x3, 0x3) accept$inet(r1, 0x0, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) poll(0x0, 0x0, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$igmp6(0xa, 0x3, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x8200, 0x0) (async) socket(0x8, 0x3, 0x3) (async) accept$inet(r1, 0x0, 0x0) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) poll(0x0, 0x0, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) 0s ago: executing program 2 (id=4616): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) kernel console output (not intermixed with test programs): ribute type 1 has an invalid length. [ 345.643536][T17206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.684402][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'. [ 345.778828][T17201] bond7: entered allmulticast mode [ 345.816282][T17212] bond10: entered promiscuous mode [ 345.822675][T17212] bond10: entered allmulticast mode [ 345.828280][T17212] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.915825][T17220] netlink: 'syz.4.3003': attribute type 9 has an invalid length. [ 346.063757][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3004'. [ 346.237955][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 346.376078][T17233] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 346.511044][T17255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3013'. [ 346.600948][T16987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.639286][T17261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.647015][T17261] IPv6: NLM_F_CREATE should be set when creating new route [ 346.654325][T17261] IPv6: NLM_F_CREATE should be set when creating new route [ 346.773853][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'. [ 346.854986][T17272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3018'. [ 346.987149][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.035655][T17270] vlan3: entered allmulticast mode [ 347.040834][T17270] bridge5: entered allmulticast mode [ 347.072351][T17273] bridge5: port 1(erspan0) entered blocking state [ 347.082057][ T5622] Bluetooth: hci1: command 0x040f tx timeout [ 347.088267][T17273] bridge5: port 1(erspan0) entered disabled state [ 347.102403][T17273] erspan0: entered allmulticast mode [ 347.111081][T17273] erspan0: entered promiscuous mode [ 347.127168][T16987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.429718][T17281] netlink: zone id is out of range [ 347.435822][T17274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3018'. [ 347.453542][T17281] netlink: zone id is out of range [ 347.557354][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.565820][T16987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.619194][T17284] netlink: 'syz.4.3021': attribute type 1 has an invalid length. [ 349.162239][ T5622] Bluetooth: hci1: command 0x040f tx timeout [ 349.278765][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.293031][T16987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.309837][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.407376][T17286] macvlan2: entered promiscuous mode [ 349.425623][T17286] macvlan2: entered allmulticast mode [ 349.869751][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.966507][T16987] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.026322][T12531] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.033526][T12531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.063061][T12531] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.070306][T12531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.306320][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 350.319998][T17349] openvswitch: netlink: Missing key (keys=40, expected=100) [ 350.506576][T17358] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 350.705639][T17372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3039'. [ 350.771268][T17372] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3039'. [ 350.999878][T17387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3042'. [ 351.030450][T17387] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3042'. [ 351.048573][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 351.232189][ T5622] Bluetooth: hci1: command 0x040f tx timeout [ 351.277538][T16987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.456931][T16987] veth0_vlan: entered promiscuous mode [ 351.547259][T16987] veth1_vlan: entered promiscuous mode [ 351.585597][T17415] syzkaller1: entered promiscuous mode [ 351.591221][T17415] syzkaller1: entered allmulticast mode [ 351.685528][T16987] veth0_macvtap: entered promiscuous mode [ 351.709422][T16987] veth1_macvtap: entered promiscuous mode [ 351.748912][T16987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.779275][T16987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.807123][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.818915][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.829772][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.867244][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.051628][T17438] ¾x9’: renamed from bridge_slave_0 [ 352.066874][T14123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.079041][T14123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.146130][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.154912][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.281269][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 352.295182][T17448] netlink: 'syz.2.2951': attribute type 4 has an invalid length. [ 352.618420][T17460] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 352.708630][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 353.057539][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.080032][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.106149][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.121310][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.131367][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.349468][T17490] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 353.391641][T17486] netlink: 'syz.2.3070': attribute type 5 has an invalid length. [ 353.609054][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'. [ 353.866338][T17522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3077'. [ 354.262968][T17541] netlink: 'syz.0.3086': attribute type 8 has an invalid length. [ 355.176461][T17479] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.184462][T17479] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.192447][T17479] bridge_slave_0: entered allmulticast mode [ 355.200262][T17479] bridge_slave_0: entered promiscuous mode [ 355.232878][ T5627] Bluetooth: hci2: command tx timeout [ 355.256575][T17479] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.268708][T17479] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.284542][T17479] bridge_slave_1: entered allmulticast mode [ 355.300499][T17479] bridge_slave_1: entered promiscuous mode [ 355.394949][T17479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.431754][T17479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.530419][T17615] netlink: 'syz.0.3098': attribute type 3 has an invalid length. [ 355.557107][T17479] team0: Port device team_slave_0 added [ 355.573296][T17479] team0: Port device team_slave_1 added [ 355.583264][T17623] netlink: 'syz.2.3100': attribute type 9 has an invalid length. [ 355.719189][T17479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.741964][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.804403][T17479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.818238][T17479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.826225][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.853104][T17479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.008987][T17479] hsr_slave_0: entered promiscuous mode [ 356.017504][T17479] hsr_slave_1: entered promiscuous mode [ 356.036045][T17479] debugfs: 'hsr0' already exists in 'hsr' [ 356.044691][T17479] Cannot create hsr debugfs directory [ 356.144420][T17649] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 356.608950][T17479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.618454][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.627187][T17479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.638805][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.647090][T17479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.656997][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.665305][T17479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.677752][T17479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 356.744985][T17479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.768893][T17479] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.786032][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.793200][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.807762][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.814916][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.126767][T17479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.170034][T17479] veth0_vlan: entered promiscuous mode [ 357.184237][T17479] veth1_vlan: entered promiscuous mode [ 357.209491][T17479] veth0_macvtap: entered promiscuous mode [ 357.220629][T17479] veth1_macvtap: entered promiscuous mode [ 357.243771][T17479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.258054][T17479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.275723][T12536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.286499][T12536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.297735][T12536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.307419][T12536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.316830][ T5627] Bluetooth: hci2: command tx timeout [ 357.416981][T12536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.430208][T12536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.458840][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.466906][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.392115][ T5627] Bluetooth: hci2: command tx timeout [ 361.472172][ T5627] Bluetooth: hci2: command tx timeout [ 365.873836][T15757] block nbd0: Possible stuck request ffff8880278d7000: control (read@0,1024B). Runtime 90 seconds [ 365.887415][T15757] block nbd0: Possible stuck request ffff8880278d71c0: control (read@1024,1024B). Runtime 90 seconds [ 365.898552][T15757] block nbd0: Possible stuck request ffff8880278d7380: control (read@2048,1024B). Runtime 90 seconds [ 365.909614][T15757] block nbd0: Possible stuck request ffff8880278d7540: control (read@3072,1024B). Runtime 90 seconds [ 375.632300][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 395.957846][T15757] block nbd0: Possible stuck request ffff8880278d7000: control (read@0,1024B). Runtime 120 seconds [ 395.968768][T15757] block nbd0: Possible stuck request ffff8880278d71c0: control (read@1024,1024B). Runtime 120 seconds [ 395.979806][T15757] block nbd0: Possible stuck request ffff8880278d7380: control (read@2048,1024B). Runtime 120 seconds [ 395.990889][T15757] block nbd0: Possible stuck request ffff8880278d7540: control (read@3072,1024B). Runtime 120 seconds [ 417.432606][T17690] xt_l2tp: v2 sid > 0xffff: 1114112 [ 417.499253][T17695] __nla_validate_parse: 1 callbacks suppressed [ 417.499271][T17695] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3115'. [ 417.537170][T17695] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3115'. [ 417.556127][T17695] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3115'. [ 417.606031][T17698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3113'. [ 417.676824][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.696794][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.711506][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.733686][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.745883][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.775863][T17701] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 417.782430][T17701] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 419.797852][ T5622] Bluetooth: hci3: command tx timeout [ 421.281327][T17728] Bluetooth: MGMT ver 1.23 [ 421.436787][T17726] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.562231][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 421.671227][T17745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.716183][T17745] team0: Port device bond1 added [ 421.735921][T17760] lo: entered promiscuous mode [ 421.872012][ T5622] Bluetooth: hci3: command tx timeout [ 422.000667][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'. [ 422.184463][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 422.197303][T17795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.204622][T17795] IPv6: NLM_F_CREATE should be set when creating new route [ 422.211899][T17795] IPv6: NLM_F_CREATE should be set when creating new route [ 422.412625][T17812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3145'. [ 422.452856][T17812] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3145'. [ 422.481446][T17812] netlink: 'syz.1.3145': attribute type 5 has an invalid length. [ 422.518731][T17812] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3145'. [ 422.614837][T17826] netlink: 'syz.3.3149': attribute type 21 has an invalid length. [ 422.639028][T17826] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3149'. [ 422.652039][T17830] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3150'. [ 422.676329][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3150'. [ 422.684361][T17838] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3149'. [ 422.696095][T17826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3149'. [ 422.866310][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.881061][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.888949][T17702] bridge_slave_0: entered allmulticast mode [ 422.891223][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 422.897633][T17702] bridge_slave_0: entered promiscuous mode [ 422.912585][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.934253][T17702] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.941638][T17702] bridge_slave_1: entered allmulticast mode [ 422.956181][T17702] bridge_slave_1: entered promiscuous mode [ 423.037487][T17702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.054506][T17702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.132387][T17702] team0: Port device team_slave_0 added [ 423.146828][T17702] team0: Port device team_slave_1 added [ 423.191634][T17863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.209502][T17702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.217370][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.245022][T17702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.260221][T17866] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 423.277725][T17702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.297197][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.333070][T17702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.348665][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3164'. [ 423.378687][T17873] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 423.467392][T17702] hsr_slave_0: entered promiscuous mode [ 423.505185][T17702] hsr_slave_1: entered promiscuous mode [ 423.512536][T17702] debugfs: 'hsr0' already exists in 'hsr' [ 423.518385][T17702] Cannot create hsr debugfs directory [ 423.552926][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3166'. [ 423.584668][T17885] netlink: 'syz.2.3166': attribute type 7 has an invalid length. [ 423.593579][T17885] netlink: 'syz.2.3166': attribute type 8 has an invalid length. [ 423.607401][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'. [ 423.953350][ T5622] Bluetooth: hci3: command tx timeout [ 423.965667][T17702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.981976][T17702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 423.994796][T17702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.006589][T17702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 424.121258][T17913] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 424.140751][T17913] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 424.184230][T17702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.218900][T17702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 424.260622][T17702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.288526][T17702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 424.501678][T17702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.515003][T17939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.527358][T17702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 424.541736][T17939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.553387][T17702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.564977][T17702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 424.578761][T17944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.729911][T17702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.741103][T17702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 424.758940][T17702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.773377][T17702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 425.040059][T17702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.065069][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.076714][T17702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.090146][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.107072][T17702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.128460][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.144393][T17702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.157422][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.330325][T17702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.427883][T17702] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.468055][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.475299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.539737][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.546928][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.695193][T18001] sctp: [Deprecated]: syz.4.3202 (pid 18001) Use of int in maxseg socket option. [ 425.695193][T18001] Use struct sctp_assoc_value instead [ 425.953900][T18019] bond2: Removing last ns target with arp_interval on [ 425.963985][T18019] C: renamed from lo (while UP) [ 425.977236][T18019] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 426.032635][ T5622] Bluetooth: hci3: command tx timeout [ 426.038183][T15757] block nbd0: Possible stuck request ffff8880278d7000: control (read@0,1024B). Runtime 150 seconds [ 426.049217][T15757] block nbd0: Possible stuck request ffff8880278d71c0: control (read@1024,1024B). Runtime 150 seconds [ 426.060951][T15757] block nbd0: Possible stuck request ffff8880278d7380: control (read@2048,1024B). Runtime 150 seconds [ 426.073028][T15757] block nbd0: Possible stuck request ffff8880278d7540: control (read@3072,1024B). Runtime 150 seconds [ 426.178040][T18029] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 426.248308][T18033] TC_ACT_REPEAT abuse ? [ 426.477626][T17702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.545029][T17702] veth0_vlan: entered promiscuous mode [ 426.559701][T17702] veth1_vlan: entered promiscuous mode [ 426.617846][T17702] veth0_macvtap: entered promiscuous mode [ 426.630247][T17702] veth1_macvtap: entered promiscuous mode [ 426.656577][T17702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.670681][T17702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.689298][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.699614][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.712849][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.723141][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.059090][T18061] gtp0: entered promiscuous mode [ 427.064585][T18061] gtp0: entered allmulticast mode [ 429.334831][T18037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.461985][T12531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.508119][T12531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.585024][T18073] veth1_macvtap: left promiscuous mode [ 429.605953][T18073] macsec0: entered promiscuous mode [ 429.618227][T18073] macsec0: entered allmulticast mode [ 429.666566][T18077] veth1_macvtap: entered promiscuous mode [ 429.682146][T18077] veth1_macvtap: entered allmulticast mode [ 429.697712][T18077] macsec0: left promiscuous mode [ 429.703235][T18077] macsec0: left allmulticast mode [ 429.708425][T18077] veth1_macvtap: left allmulticast mode [ 429.722711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.733305][T18081] __nla_validate_parse: 15 callbacks suppressed [ 429.733322][T18081] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3226'. [ 429.735534][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.966860][T18095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.016517][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 430.054104][T18095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3231'. [ 430.200824][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 430.262754][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 430.281566][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 430.295443][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 430.322845][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 430.345440][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 430.374624][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 430.417427][T18123] netlink: 'syz.4.3238': attribute type 10 has an invalid length. [ 430.442713][T18124] syzkaller1: entered promiscuous mode [ 430.453349][T18124] syzkaller1: entered allmulticast mode [ 430.486625][T18123] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.506202][T18123] bond0: (slave team0): Enslaving as an active interface with an up link [ 430.540632][T18124] syzkaller0: entered promiscuous mode [ 430.547391][T18124] syzkaller0: entered allmulticast mode [ 430.648182][T18134] netlink: 'syz.4.3242': attribute type 1 has an invalid length. [ 430.710947][T18134] bond1: entered promiscuous mode [ 430.717722][T18134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.768851][T18140] bond1: (slave bridge4): making interface the new active one [ 430.788195][T18140] bridge4: entered promiscuous mode [ 430.819762][T18140] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 430.935915][T18137] syzkaller0: entered promiscuous mode [ 430.950962][T18137] syzkaller0: entered allmulticast mode [ 431.164884][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.176497][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.184782][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.211048][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.224421][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.688214][T18177] netlink: 'syz.3.3251': attribute type 4 has an invalid length. [ 431.930817][T18189] ipvlan2: entered promiscuous mode [ 432.210274][T18209] bond1: entered promiscuous mode [ 432.223697][T18209] bond1: entered allmulticast mode [ 432.247553][T18209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.629251][T18157] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.660970][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.686787][T18157] bridge_slave_0: entered allmulticast mode [ 432.694656][T18157] bridge_slave_0: entered promiscuous mode [ 432.730046][T18157] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.746814][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.768954][T18157] bridge_slave_1: entered allmulticast mode [ 432.787272][T18157] bridge_slave_1: entered promiscuous mode [ 432.924221][T18157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.941489][T18248] netlink: 'syz.0.3267': attribute type 4 has an invalid length. [ 432.974921][T18157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.025974][T18157] team0: Port device team_slave_0 added [ 433.037895][T18157] team0: Port device team_slave_1 added [ 433.052322][T18255] netlink: 'syz.0.3271': attribute type 1 has an invalid length. [ 433.074804][T18255] netlink: 'syz.0.3271': attribute type 1 has an invalid length. [ 433.121499][T18157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.141930][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.173467][T18157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.202841][T18157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.236005][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.276901][T18269] FAULT_INJECTION: forcing a failure. [ 433.276901][T18269] name failslab, interval 1, probability 0, space 0, times 0 [ 433.310387][T18157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.321519][T18269] CPU: 1 UID: 0 PID: 18269 Comm: syz.0.3274 Not tainted syzkaller #0 PREEMPT(full) [ 433.321542][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.321560][T18269] Call Trace: [ 433.321567][T18269] [ 433.321574][T18269] dump_stack_lvl+0xe8/0x150 [ 433.321607][T18269] should_fail_ex+0x40c/0x560 [ 433.321632][T18269] should_failslab+0xa8/0x100 [ 433.321661][T18269] __kmalloc_noprof+0xfe/0x720 [ 433.321685][T18269] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 433.321708][T18269] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 433.321736][T18269] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 433.321767][T18269] genl_family_rcv_msg_doit+0xda/0x340 [ 433.321798][T18269] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.321825][T18269] ? apparmor_capable+0x126/0x170 [ 433.321848][T18269] ? bpf_lsm_capable+0x9/0x20 [ 433.321868][T18269] ? security_capable+0x7e/0x2c0 [ 433.321898][T18269] genl_rcv_msg+0x614/0x7a0 [ 433.321926][T18269] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.321945][T18269] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 433.321961][T18269] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 433.321983][T18269] ? __pfx_nl80211_post_doit+0x10/0x10 [ 433.322003][T18269] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.322044][T18269] netlink_rcv_skb+0x226/0x4a0 [ 433.322074][T18269] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.322097][T18269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.322140][T18269] ? down_read+0x2be/0x330 [ 433.322171][T18269] genl_rcv+0x28/0x40 [ 433.322190][T18269] netlink_unicast+0x7bb/0x940 [ 433.322227][T18269] netlink_sendmsg+0x813/0xb40 [ 433.322264][T18269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.322295][T18269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.322317][T18269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.322342][T18269] sock_sendmsg_nosec+0x13a/0x180 [ 433.322364][T18269] ____sys_sendmsg+0x54e/0x850 [ 433.322382][ T5622] Bluetooth: hci0: command tx timeout [ 433.322394][T18269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.322425][T18269] ? import_iovec+0x73/0xa0 [ 433.322451][T18269] ___sys_sendmsg+0x2a5/0x360 [ 433.322469][T18269] ? __lock_acquire+0x683/0x2cf0 [ 433.322492][T18269] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.322538][T18269] ? __fget_files+0x2a/0x420 [ 433.322557][T18269] ? __fget_files+0x3a2/0x420 [ 433.322583][T18269] __x64_sys_sendmsg+0x1b1/0x290 [ 433.322606][T18269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.322639][T18269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.322654][T18269] do_syscall_64+0x174/0x580 [ 433.322673][T18269] ? trace_irq_disable+0x3b/0x140 [ 433.322690][T18269] ? clear_bhb_loop+0x40/0x90 [ 433.322707][T18269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.322720][T18269] RIP: 0033:0x7f57c199de59 [ 433.322735][T18269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.322749][T18269] RSP: 002b:00007f57c2846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.322764][T18269] RAX: ffffffffffffffda RBX: 00007f57c1c25fa0 RCX: 00007f57c199de59 [ 433.322775][T18269] RDX: 000000000000c000 RSI: 0000200000000180 RDI: 0000000000000003 [ 433.322784][T18269] RBP: 00007f57c2846090 R08: 0000000000000000 R09: 0000000000000000 [ 433.322794][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.322802][T18269] R13: 00007f57c1c26038 R14: 00007f57c1c25fa0 R15: 00007ffe62fb0c78 [ 433.322826][T18269] [ 433.914517][T18157] hsr_slave_0: entered promiscuous mode [ 433.921532][T18157] hsr_slave_1: entered promiscuous mode [ 433.928960][T18157] debugfs: 'hsr0' already exists in 'hsr' [ 433.935108][T18157] Cannot create hsr debugfs directory [ 434.188498][T18305] syzkaller0: entered promiscuous mode [ 434.199746][T18305] syzkaller0: entered allmulticast mode [ 434.400193][T18326] FAULT_INJECTION: forcing a failure. [ 434.400193][T18326] name failslab, interval 1, probability 0, space 0, times 0 [ 434.418320][T18328] IPVS: set_ctl: invalid protocol: 29 172.30.0.4:20001 [ 434.439874][T18326] CPU: 0 UID: 0 PID: 18326 Comm: syz.4.3287 Not tainted syzkaller #0 PREEMPT(full) [ 434.439899][T18326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 434.439909][T18326] Call Trace: [ 434.439916][T18326] [ 434.439923][T18326] dump_stack_lvl+0xe8/0x150 [ 434.439965][T18326] should_fail_ex+0x40c/0x560 [ 434.439991][T18326] should_failslab+0xa8/0x100 [ 434.440020][T18326] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 434.440043][T18326] ? skb_clone+0x212/0x3a0 [ 434.440070][T18326] ? skb_clone+0x212/0x3a0 [ 434.440102][T18326] skb_clone+0x212/0x3a0 [ 434.440130][T18326] __netlink_deliver_tap+0x413/0x860 [ 434.440170][T18326] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.440199][T18326] netlink_deliver_tap+0x19c/0x1b0 [ 434.440228][T18326] netlink_sendskb+0x68/0x140 [ 434.440255][T18326] netlink_rcv_skb+0x2a4/0x4a0 [ 434.440283][T18326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.440306][T18326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.440343][T18326] ? down_read+0x2be/0x330 [ 434.440373][T18326] genl_rcv+0x28/0x40 [ 434.440392][T18326] netlink_unicast+0x7bb/0x940 [ 434.440429][T18326] netlink_sendmsg+0x813/0xb40 [ 434.440472][T18326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.440505][T18326] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.440530][T18326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.440557][T18326] sock_sendmsg_nosec+0x13a/0x180 [ 434.440582][T18326] ____sys_sendmsg+0x54e/0x850 [ 434.440612][T18326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.440645][T18326] ? import_iovec+0x73/0xa0 [ 434.440681][T18326] ___sys_sendmsg+0x2a5/0x360 [ 434.440705][T18326] ? __lock_acquire+0x683/0x2cf0 [ 434.440733][T18326] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.440793][T18326] ? __fget_files+0x2a/0x420 [ 434.440815][T18326] ? __fget_files+0x3a2/0x420 [ 434.440847][T18326] __x64_sys_sendmsg+0x1b1/0x290 [ 434.440876][T18326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.440921][T18326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.440942][T18326] do_syscall_64+0x174/0x580 [ 434.440983][T18326] ? trace_irq_disable+0x3b/0x140 [ 434.441006][T18326] ? clear_bhb_loop+0x40/0x90 [ 434.441030][T18326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.441049][T18326] RIP: 0033:0x7f396a19de59 [ 434.441067][T18326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.441083][T18326] RSP: 002b:00007f396afe2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.441103][T18326] RAX: ffffffffffffffda RBX: 00007f396a425fa0 RCX: 00007f396a19de59 [ 434.441116][T18326] RDX: 000000000000c000 RSI: 0000200000000180 RDI: 0000000000000003 [ 434.441128][T18326] RBP: 00007f396afe2090 R08: 0000000000000000 R09: 0000000000000000 [ 434.441140][T18326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.441151][T18326] R13: 00007f396a426038 R14: 00007f396a425fa0 R15: 00007ffda704d558 [ 434.441183][T18326] [ 434.443637][T18328] IPVS: set_ctl: invalid protocol: 97 172.20.20.187:64 [ 434.633419][T18331] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 434.828054][T18338] syzkaller0: entered promiscuous mode [ 434.857786][T18338] syzkaller0: entered allmulticast mode [ 434.891266][T18338] tipc: Started in network mode [ 434.920607][T18338] tipc: Node identity 4e98859e6afa, cluster identity 4711 [ 434.959147][T18338] tipc: Enabled bearer , priority 0 [ 435.046751][T18334] tipc: Resetting bearer [ 435.117991][T18334] tipc: Disabling bearer [ 435.455963][T18379] __nla_validate_parse: 27 callbacks suppressed [ 435.455984][T18379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3302'. [ 435.690990][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'. [ 435.713819][ T5622] Bluetooth: hci0: command tx timeout [ 435.751270][T18390] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 435.868217][T18157] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.889374][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.898511][T18157] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.930614][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.948414][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'. [ 435.964225][T18157] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.987773][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.010478][T18403] x_tables: unsorted underflow at hook 3 [ 436.015711][T18401] syzkaller1: entered promiscuous mode [ 436.025939][T18403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3312'. [ 436.032469][T18401] syzkaller1: entered allmulticast mode [ 436.054182][T18157] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.091667][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.519199][T18157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.617790][T18445] gre0: entered promiscuous mode [ 436.630151][T18447] netlink: 'syz.3.3323': attribute type 142 has an invalid length. [ 436.639934][T18445] gre0: entered allmulticast mode [ 436.660597][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3322'. [ 436.664928][T18449] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3324'. [ 436.673789][T18157] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.708005][T14123] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.715282][T14123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.715969][T18449] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3324'. [ 436.771378][T14123] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.774330][T18454] netlink: 'syz.3.3326': attribute type 2 has an invalid length. [ 436.778625][T14123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.798405][T18454] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3326'. [ 436.869054][T18457] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3327'. [ 436.896855][T18463] sit0: entered promiscuous mode [ 436.929531][T18463] netlink: 'syz.0.3328': attribute type 1 has an invalid length. [ 436.951922][T18463] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3328'. [ 437.095605][T18470] ’’’’’’: renamed from vlan1 (while UP) [ 437.791969][ T5622] Bluetooth: hci0: command tx timeout [ 437.906732][T18522] xt_l2tp: missing protocol rule (udp|l2tpip) [ 437.914667][T18522] netlink: 'syz.0.3342': attribute type 9 has an invalid length. [ 437.977789][T18157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.171698][T18157] veth0_vlan: entered promiscuous mode [ 438.257237][T18157] veth1_vlan: entered promiscuous mode [ 438.386472][T18157] veth0_macvtap: entered promiscuous mode [ 438.425951][T18157] veth1_macvtap: entered promiscuous mode [ 438.511650][T18157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.559344][T18157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.616437][T14123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.643688][T14123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.714489][T18565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 438.748157][T14123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.810306][T14123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.111231][T18586] netlink: 'syz.0.3357': attribute type 1 has an invalid length. [ 439.180364][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.205312][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.255842][ T5286] veth0_vlan: left promiscuous mode [ 439.276093][ T5755] veth0_vlan: entered promiscuous mode [ 439.291297][T18589] syzkaller0: entered promiscuous mode [ 439.297099][T18589] syzkaller0: entered allmulticast mode [ 439.388686][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.437779][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.817121][T18622] tunl0: entered promiscuous mode [ 439.818821][T18617] netlink: 'syz.1.3246': attribute type 11 has an invalid length. [ 439.845023][T18622] netlink: 'syz.0.3364': attribute type 3 has an invalid length. [ 439.851108][T18617] netlink: 'syz.1.3246': attribute type 4 has an invalid length. [ 439.875772][ T5622] Bluetooth: hci0: command tx timeout [ 440.046074][T18620] tipc: Started in network mode [ 440.052195][T18620] tipc: Node identity be78ab4a7d1f, cluster identity 4711 [ 440.074967][T18620] tipc: Enabled bearer , priority 0 [ 440.173946][T18616] tipc: Disabling bearer [ 440.224836][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.255935][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.287734][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.306357][T18633] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 440.334032][T18633] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 440.355070][T18633] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 440.389530][T18633] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 440.446314][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.457355][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.469390][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.477954][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.486874][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.496767][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.505125][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.514619][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.525066][T18633] xfrm0 speed is unknown, defaulting to 1000 [ 440.916117][T18663] lo: entered promiscuous mode [ 440.925204][T18662] __nla_validate_parse: 9 callbacks suppressed [ 440.925223][T18662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3373'. [ 440.947931][T18663] gre0: entered promiscuous mode [ 441.019191][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'. [ 441.061510][T18663] gretap0: entered promiscuous mode [ 441.089096][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3375'. [ 441.165250][T18663] erspan0: entered promiscuous mode [ 441.195844][T18663] ip_vti0: entered promiscuous mode [ 441.254429][T18670] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 441.264723][T18685] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3378'. [ 441.289139][T18670] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 441.304206][T18670] gretap2: entered promiscuous mode [ 441.316143][T18670] gretap2: entered allmulticast mode [ 441.345504][T18685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3378'. [ 441.415541][T18692] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3381'. [ 441.430340][T18692] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3381'. [ 441.494250][T18698] netlink: 'syz.1.3384': attribute type 10 has an invalid length. [ 441.820121][T18721] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 441.828333][T18721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3389'. [ 441.860460][T18721] team0: Port device geneve1 added [ 441.907119][T18723] netlink: 'syz.1.3391': attribute type 3 has an invalid length. [ 441.916646][T18723] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3391'. [ 442.005288][T18729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3394'. [ 442.016297][T18727] veth3: entered allmulticast mode [ 442.511225][T18764] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 442.517766][T18764] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 442.540513][T18763] openvswitch: netlink: IP tunnel dst address not specified [ 442.683770][T18765] hsr_slave_0: left promiscuous mode [ 442.704766][T18765] hsr_slave_1: left promiscuous mode [ 442.899556][T18781] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 442.916879][T18781] bond2: (slave lo): Enslaving as an active interface with an up link [ 442.943308][T18781] bond2 (unregistering): (slave lo): Releasing backup interface [ 442.957997][T18781] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 442.980924][T18781] bond2 (unregistering): Released all slaves [ 443.778124][T18845] Unsupported ieee802154 address type: 0 [ 443.805979][T18842] Cannot find set identified by id 0 to match [ 443.833335][T18847] Unsupported ieee802154 address type: 0 [ 443.875186][T18850] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 443.919488][T18857] xt_TCPMSS: Only works on TCP SYN packets [ 443.947231][T18859] netlink: 'syz.4.3431': attribute type 39 has an invalid length. [ 444.545331][T18873] C: renamed from lo [ 444.550830][T18873] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 446.835145][T18851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.844252][T18862] netlink: 'syz.3.3432': attribute type 9 has an invalid length. [ 446.853023][T18863] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 446.883629][T18863] __nla_validate_parse: 45 callbacks suppressed [ 446.883648][T18863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3431'. [ 446.932687][T18868] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 446.950971][T18868] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3431'. [ 447.312216][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 447.587533][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3449'. [ 447.612184][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3449'. [ 447.846321][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 447.856167][T18934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3452'. [ 448.167885][T18951] syzkaller0: entered promiscuous mode [ 448.173799][T18951] syzkaller0: entered allmulticast mode [ 450.346885][T18908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.360431][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 450.377889][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 450.388693][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'. [ 450.572650][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 450.582450][T18969] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 450.614579][T18968] IPVS: Unknown mcast interface: rose0 [ 450.633419][T18977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.048923][T19017] netlink: 'syz.1.3477': attribute type 21 has an invalid length. [ 453.879856][T19002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.018463][T19063] __nla_validate_parse: 1 callbacks suppressed [ 454.018484][T19063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3481'. [ 454.076411][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 454.296512][T19087] netlink: 6212 bytes leftover after parsing attributes in process `syz.3.3488'. [ 454.326791][T19087] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 454.337762][T19087] syzkaller0: entered promiscuous mode [ 454.344663][T19087] syzkaller0: entered allmulticast mode [ 454.368881][T19087] netlink: 'syz.3.3488': attribute type 142 has an invalid length. [ 454.436087][T19096] netlink: 'syz.1.3491': attribute type 16 has an invalid length. [ 454.444343][T19096] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3491'. [ 454.455418][T19096] veth0_macvtap: entered allmulticast mode [ 454.477951][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3492'. [ 454.507507][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3492'. [ 454.527958][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3492'. [ 454.549278][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3492'. [ 454.774080][T19119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3496'. [ 455.763029][T19145] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3502'. [ 455.778682][T19146] syzkaller1: entered promiscuous mode [ 455.784596][T19146] syzkaller1: entered allmulticast mode [ 456.112869][T15757] block nbd0: Possible stuck request ffff8880278d7000: control (read@0,1024B). Runtime 180 seconds [ 456.123901][T15757] block nbd0: Possible stuck request ffff8880278d71c0: control (read@1024,1024B). Runtime 180 seconds [ 456.135971][T15757] block nbd0: Possible stuck request ffff8880278d7380: control (read@2048,1024B). Runtime 180 seconds [ 456.147424][T15757] block nbd0: Possible stuck request ffff8880278d7540: control (read@3072,1024B). Runtime 180 seconds [ 457.637732][T19113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.844966][T19169] ip6gre1: entered promiscuous mode [ 457.859599][T19169] ip6gre1: entered allmulticast mode [ 457.963331][T19176] bond1: entered promiscuous mode [ 457.984354][T19176] 8021q: adding VLAN 0 to HW filter on device syzkaller0 [ 458.006866][T19181] netlink: 'syz.1.3513': attribute type 4 has an invalid length. [ 458.019499][T19182] netlink: 'syz.1.3513': attribute type 4 has an invalid length. [ 458.058926][T19184] sock: sock_set_timeout: `syz.4.3514' (pid 19184) tries to set negative timeout [ 458.321534][T19203] xt_ipcomp: unknown flags 1D [ 458.398359][T19207] IPv6: addrconf: prefix option has invalid lifetime [ 458.405169][T19207] IPv6: addrconf: prefix option has invalid lifetime [ 458.426308][T19207] vlan0: entered promiscuous mode [ 458.674660][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.690380][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.715734][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.744441][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.811813][T19230] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 459.524828][T19273] __nla_validate_parse: 13 callbacks suppressed [ 459.524846][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'. [ 459.541261][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'. [ 459.573001][T19286] netlink: 'syz.0.3543': attribute type 11 has an invalid length. [ 459.590300][T19272] syzkaller0: entered promiscuous mode [ 459.596597][T19272] syzkaller0: entered allmulticast mode [ 459.762655][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3548'. [ 460.707524][ T4991] udevd[4991]: worker [13730] /devices/virtual/block/nbd0 timeout; kill it [ 460.716585][ T4991] udevd[4991]: seq 17579 '/devices/virtual/block/nbd0' killed [ 462.605133][T19321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3553'. [ 462.617410][T19323] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3551'. [ 462.733441][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'. [ 462.763618][T19332] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 462.808322][T19332] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 462.868967][T19337] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.877405][T19337] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.264389][T19372] x_tables: duplicate underflow at hook 1 [ 463.333285][T19374] netlink: 'syz.4.3568': attribute type 11 has an invalid length. [ 463.533957][T19386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3572'. [ 463.556312][T19388] netlink: 'syz.3.3573': attribute type 12 has an invalid length. [ 463.579472][T19388] netlink: 'syz.3.3573': attribute type 29 has an invalid length. [ 463.599783][T19388] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3573'. [ 463.612334][T19388] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 463.620154][T19388] netlink: 'syz.3.3573': attribute type 2 has an invalid length. [ 463.628642][T19388] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3573'. [ 463.658316][T19392] netlink: 'syz.0.3576': attribute type 8 has an invalid length. [ 463.673319][T19388] syzkaller0: entered promiscuous mode [ 463.680225][T19388] syzkaller0: entered allmulticast mode [ 463.856602][T19402] bridge5: entered promiscuous mode [ 463.866482][T19402] bridge5: entered allmulticast mode [ 463.907865][T19400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3580'. [ 464.211519][ T13] tipc: Subscription rejected, illegal request [ 464.265073][T19423] bond0: (slave bond_slave_1): Releasing backup interface [ 464.605385][T19454] __nla_validate_parse: 2 callbacks suppressed [ 464.605402][T19454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3595'. [ 464.824494][T19458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 464.866399][T19474] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3600'. [ 465.013963][T19480] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 465.032053][T19480] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3603'. [ 465.085209][T19480] nbd1: detected capacity change from 63 to 0 [ 465.087602][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3604'. [ 465.649472][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3608'. [ 465.670835][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3608'. [ 465.685215][T19501] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3608'. [ 465.817103][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3612'. [ 465.991228][T19518] syzkaller0: entered promiscuous mode [ 465.997282][T19518] syzkaller0: entered allmulticast mode [ 466.164664][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 466.208564][T19534] x_tables: unsorted underflow at hook 1 [ 466.245237][T19534] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3620'. [ 466.573134][T19545] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 467.273055][T19557] vlan2: entered promiscuous mode [ 467.287026][T19557] hsr0: entered promiscuous mode [ 467.300018][T19557] vlan2: entered allmulticast mode [ 467.319900][T19557] hsr0: entered allmulticast mode [ 467.339430][T19557] hsr_slave_0: entered allmulticast mode [ 467.355457][T19557] hsr_slave_1: entered allmulticast mode [ 467.430827][T19563] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 467.468030][T19563] netlink: 'syz.1.3629': attribute type 5 has an invalid length. [ 467.488619][T19563] netlink: 'syz.1.3629': attribute type 6 has an invalid length. [ 467.558670][T19568] syzkaller0: entered allmulticast mode [ 467.776543][T19579] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 467.787343][T19579] bond3: option packets_per_slave: allowed values 0 - 65535 [ 467.794900][ T5629] Bluetooth: hci1: command 0x040f tx timeout [ 467.830398][T19579] bond3 (unregistering): Released all slaves [ 468.766680][ T1238] IPVS: starting estimator thread 0... [ 468.868779][T19672] bridge_slave_0: left allmulticast mode [ 468.873112][T19671] IPVS: using max 35 ests per chain, 84000 per kthread [ 468.899388][T19672] bridge_slave_0: left promiscuous mode [ 468.925209][T19672] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.585344][T19672] bridge_slave_1: left allmulticast mode [ 469.599071][T19672] bridge_slave_1: left promiscuous mode [ 469.637708][T19672] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.685506][T19672] bond0: (slave bond_slave_0): Releasing backup interface [ 469.716479][T19672] bond0: (slave bond_slave_1): Releasing backup interface [ 469.735470][T19672] team0: Port device team_slave_0 removed [ 469.749681][T19672] team0: Port device team_slave_1 removed [ 469.757515][T19672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.765667][T19672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.774569][T19672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.783052][T19672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.791640][T19672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 469.809224][T19676] __nla_validate_parse: 48 callbacks suppressed [ 469.809242][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 469.866084][T19687] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 470.226929][T19723] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3669'. [ 470.998728][T19763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3680'. [ 471.278012][T19779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 471.300312][T19779] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 471.340256][T19781] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3684'. [ 471.454167][T19790] netlink: 'syz.0.3688': attribute type 1 has an invalid length. [ 471.597022][T19800] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3691'. [ 471.612909][T19800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3691'. [ 471.675585][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3692'. [ 471.894436][T19816] Bluetooth: MGMT ver 1.23 [ 471.989057][T19822] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3698'. [ 472.010247][T19822] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 472.025516][T19822] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 472.042946][T19822] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 472.073889][T19822] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 472.100593][T19826] syzkaller0: entered promiscuous mode [ 472.127929][T19826] syzkaller0: entered allmulticast mode [ 472.251734][ T145] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 472.278313][T19829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.309262][T19835] tipc: Enabling of bearer rejected, failed to enable media [ 472.447562][T19840] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3703'. [ 472.785606][T19862] tipc: Enabling of bearer rejected, failed to enable media [ 472.821475][T19862] syzkaller0: entered promiscuous mode [ 472.839368][T19868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.845026][T19862] syzkaller0: entered allmulticast mode [ 472.865374][T19868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.278510][T19892] netlink: 'syz.0.3718': attribute type 5 has an invalid length. [ 473.499394][T19927] netlink: 'syz.0.3728': attribute type 1 has an invalid length. [ 473.750893][T19948] xt_hashlimit: size too large, truncated to 1048576 [ 473.820750][T19953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.025911][T19966] bridge_slave_1: left allmulticast mode [ 474.026543][T19967] netlink: 'syz.1.3740': attribute type 11 has an invalid length. [ 474.034545][T19966] bridge_slave_1: left promiscuous mode [ 474.062325][T19966] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.072973][T19966] bridge_slave_0: left allmulticast mode [ 474.083574][T19966] bridge_slave_0: left promiscuous mode [ 474.095797][T19966] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.116307][T19969] netlink: 'syz.4.3739': attribute type 1 has an invalid length. [ 474.222455][T19975] macvtap1: entered allmulticast mode [ 474.238456][T19969] macvtap2: entered allmulticast mode [ 474.289351][T19969] bond3: (slave bridge6): making interface the new active one [ 474.314668][T19969] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 474.376686][T19983] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 474.464475][T19987] bond2: Unable to set up delay as MII monitoring is disabled [ 474.474770][T19987] bond2 (unregistering): Released all slaves [ 475.335303][T20062] syzkaller0: left promiscuous mode [ 475.350789][T20062] syzkaller0: left allmulticast mode [ 475.360793][T20062] bond1: entered allmulticast mode [ 475.366929][T20060] netlink: 'syz.4.3768': attribute type 12 has an invalid length. [ 475.410098][T20062] syzkaller1: entered promiscuous mode [ 475.419234][T20062] syzkaller1: entered allmulticast mode [ 475.855236][T20089] netlink: 'syz.3.3776': attribute type 10 has an invalid length. [ 475.896576][T20089] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.915242][T20089] bond0: (slave team0): Enslaving as an active interface with an up link [ 475.934428][T20086] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 475.935711][T20092] __nla_validate_parse: 14 callbacks suppressed [ 475.935726][T20092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3777'. [ 476.209001][T20105] netlink: 'syz.0.3782': attribute type 1 has an invalid length. [ 476.237803][T20105] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3782'. [ 476.258753][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'. [ 476.402213][T13423] hid (null): invalid report_count 1572501026 [ 476.419551][T20111] syzkaller0: Caught tx_queue_len zero misconfig [ 476.429794][T13423] hid (null): bogus close delimiter [ 476.452723][T20115] netlink: 'syz.3.3786': attribute type 30 has an invalid length. [ 476.460622][T13423] hid (null): global environment stack underflow [ 476.489654][T13423] hid (null): unknown global tag 0xe [ 476.496638][T20119] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3787'. [ 476.524782][T13423] hid (null): report_id 195833514 is invalid [ 476.557684][T20120] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 476.580981][T13423] hid-generic 0005:0C45:101B.0002: unknown main item tag 0x0 [ 476.603501][T20120] netlink: 'syz.1.3787': attribute type 3 has an invalid length. [ 476.624063][T13423] hid-generic 0005:0C45:101B.0002: invalid report_count 1572501026 [ 476.629385][T20120] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3787'. [ 476.654251][T13423] hid-generic 0005:0C45:101B.0002: item 0 4 1 9 parsing failed [ 476.655083][T20120] NCSI netlink: No device for ifindex 813332851 [ 476.670735][T13423] hid-generic 0005:0C45:101B.0002: probe with driver hid-generic failed with error -22 [ 476.692504][T20119] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 476.732755][T20119] netlink: 'syz.1.3787': attribute type 3 has an invalid length. [ 476.758678][T20119] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3787'. [ 476.781312][T20119] NCSI netlink: No device for ifindex 813332851 [ 476.924309][T20142] xt_cluster: node mask cannot exceed total number of nodes [ 477.170671][T20153] netlink: 'syz.2.3794': attribute type 30 has an invalid length. [ 477.398748][T20168] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 477.410258][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 477.761500][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 478.014786][T20198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3811'. [ 478.021358][T20202] netlink: 'syz.1.3812': attribute type 1 has an invalid length. [ 478.032048][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 478.057578][T20207] netlink: 'syz.4.3814': attribute type 1 has an invalid length. [ 478.086183][T13423] IPVS: starting estimator thread 0... [ 478.086726][T20202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3812'. [ 478.163204][T20207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.181951][T20209] IPVS: using max 31 ests per chain, 74400 per kthread [ 478.230472][T20215] bond4: (slave geneve2): making interface the new active one [ 478.239603][T20215] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 478.261084][ T145] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 478.311139][ T145] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 478.343484][ T145] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 478.363288][ T145] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 478.416758][T20225] netlink: 'syz.2.3820': attribute type 1 has an invalid length. [ 478.524090][T20225] bond3: entered promiscuous mode [ 478.536229][T20225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.566917][T20234] bond3: (slave bridge1): making interface the new active one [ 478.577350][T20234] bridge1: entered promiscuous mode [ 478.585201][T20234] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 478.607119][T20237] erspan0: entered promiscuous mode [ 478.615533][T20237] erspan0: left promiscuous mode [ 478.633781][T20242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.023268][T20260] can: request_module (can-proto-0) failed. [ 479.336784][T20289] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.761598][T20319] Bluetooth: MGMT ver 1.23 [ 480.330690][T20342] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 480.353964][T20343] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 480.377449][T20348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.430432][T20352] syzkaller0: entered promiscuous mode [ 480.452205][T20352] syzkaller0: entered allmulticast mode [ 480.459383][T20352] bond1: allmulti touches roof, set allmulti failed. allmulti feature of device might be broken. [ 480.485159][T20354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.064558][T20399] bond1: entered promiscuous mode [ 481.070080][T20399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.155583][T20399] bond1: (slave bridge2): making interface the new active one [ 481.173442][T20399] bridge2: entered promiscuous mode [ 481.187977][T20399] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 481.205055][T20411] __nla_validate_parse: 10 callbacks suppressed [ 481.205070][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3871'. [ 481.231714][ T29] audit: type=1107 audit(1783280251.372:9): pid=20410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='--ÅÓQ1>įʟmw*|Sc#³vķõŒ~É8 .N-D‘PœG&5趒’±³¶ī>ĮŒB'5S #õž¹Ż@ē ‚,Bēr7ĀžŁäM‚¹ū›į½'eŹčóh' [ 481.233549][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 483.714211][T20376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.905263][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'. [ 484.492895][T20447] af_packet: tpacket_rcv: packet too big, clamped from 4119 to 4294967272. macoff=96 [ 484.567386][T20439] xt_nfacct: accounting object `syz1' does not exist [ 484.764883][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 485.055433][T20487] netlink: 'syz.1.3893': attribute type 11 has an invalid length. [ 485.350850][T20504] validate_nla: 8 callbacks suppressed [ 485.350868][T20504] netlink: 'syz.4.3896': attribute type 1 has an invalid length. [ 485.366207][T20505] netlink: 'syz.1.3895': attribute type 1 has an invalid length. [ 485.581345][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3900'. [ 485.606005][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.615259][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3900'. [ 485.626623][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.651358][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.674395][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.786728][T20527] netlink: 'syz.4.3903': attribute type 2 has an invalid length. [ 485.796260][T20527] netlink: 'syz.4.3903': attribute type 8 has an invalid length. [ 485.811751][T20521] tipc: Started in network mode [ 485.817469][T20527] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3903'. [ 485.826691][T20521] tipc: Node identity aaf6f3a0a57c, cluster identity 4711 [ 485.836535][T20521] tipc: Enabled bearer , priority 0 [ 486.006249][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3906'. [ 486.083605][T20546] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.125020][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3909'. [ 486.200952][T15757] block nbd0: Possible stuck request ffff8880278d7000: control (read@0,1024B). Runtime 210 seconds [ 486.212566][T15757] block nbd0: Possible stuck request ffff8880278d71c0: control (read@1024,1024B). Runtime 210 seconds [ 486.223760][T15757] block nbd0: Possible stuck request ffff8880278d7380: control (read@2048,1024B). Runtime 210 seconds [ 486.235303][T15757] block nbd0: Possible stuck request ffff8880278d7540: control (read@3072,1024B). Runtime 210 seconds [ 486.353073][T20560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3910'. [ 486.657649][T20577] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 486.705049][T20577] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 486.781382][T20593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3917'. [ 486.806791][T20587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3916'. [ 486.906757][T20602] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3918'. [ 486.921559][T20602] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3918'. [ 486.971267][ T12] nci: nci_rsp_packet: unknown rsp opcode 0xd00 [ 487.064629][T20601] bond2: (slave gre0): Device is not bonding slave [ 487.087799][T20601] bond2: option active_slave: invalid value (gre0) [ 487.106533][T20601] bond2 (unregistering): Released all slaves [ 487.184637][ T5748] tipc: Node number set to 260764576 [ 487.258259][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.563968][T20587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.826942][T20642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.846112][T20642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.866293][T20642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.874251][T20642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.900700][T20640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3923'. [ 487.916992][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3928'. [ 488.083827][T20655] netlink: 'syz.2.3931': attribute type 21 has an invalid length. [ 488.173701][T20655] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 488.251085][T20655] bond4 (unregistering): Released all slaves [ 488.314278][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3934'. [ 488.396030][T20670] vlan2: entered allmulticast mode [ 488.402978][T20670] bridge3: entered allmulticast mode [ 488.409134][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 488.441405][T20675] ip6erspan0: entered allmulticast mode [ 488.463794][T20670] bridge3: port 1(erspan0) entered blocking state [ 488.475961][T20670] bridge3: port 1(erspan0) entered disabled state [ 488.488587][T20670] erspan0: entered allmulticast mode [ 488.509099][T20670] erspan0: entered promiscuous mode [ 488.526267][T20670] bridge3: port 1(erspan0) entered blocking state [ 488.532887][T20670] bridge3: port 1(erspan0) entered forwarding state [ 488.632329][T20690] syzkaller0: entered promiscuous mode [ 488.638171][T20690] syzkaller0: entered allmulticast mode [ 488.678947][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'. [ 488.696957][T20697] hsr0: entered allmulticast mode [ 488.712954][T20697] hsr_slave_0: entered allmulticast mode [ 488.721068][T20697] hsr_slave_1: entered allmulticast mode [ 488.729222][T20693] xt_hashlimit: invalid interval [ 489.052094][T20717] netlink: 'syz.1.3945': attribute type 6 has an invalid length. [ 489.345948][ T5805] IPVS: starting estimator thread 0... [ 489.371754][T20736] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 489.441996][T20738] IPVS: using max 32 ests per chain, 76800 per kthread [ 489.505259][T20747] syzkaller0: entered promiscuous mode [ 489.540936][T20747] syzkaller0: entered allmulticast mode [ 489.642181][T20758] lo: MTU too low for tipc bearer [ 489.667196][T20758] tipc: Enabling of bearer rejected, failed to enable media [ 490.329324][T20790] netlink: 'syz.0.3969': attribute type 1 has an invalid length. [ 490.380192][T20786] tipc: Resetting bearer [ 490.397723][T20786] tipc: Resetting bearer [ 490.598227][T20801] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 490.847889][T20818] netlink: 'syz.3.3979': attribute type 1 has an invalid length. [ 491.171026][T20818] syzkaller0: entered promiscuous mode [ 491.189266][T20818] syzkaller0: entered allmulticast mode [ 491.413396][T20858] __nla_validate_parse: 7 callbacks suppressed [ 491.413417][T20858] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3986'. [ 492.607582][T20871] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048) [ 492.673674][T20872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3990'. [ 494.385198][T20854] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 494.396430][T20854] bond4 (unregistering): Released all slaves [ 494.494608][T20876] Cannot find add_set index 0 as target [ 494.508876][T20876] tipc: Enabling of bearer rejected, failed to enable media [ 494.681064][T20893] netlink: 'syz.1.3995': attribute type 5 has an invalid length. [ 494.992431][T20919] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 494.997989][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4002'. [ 495.017898][T20915] xt_HMARK: proto mask must be zero with L3 mode [ 495.035293][T20922] xt_HMARK: proto mask must be zero with L3 mode [ 495.450160][T20954] x_tables: duplicate entry at hook 2 [ 495.486923][T20956] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 495.732360][T20969] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4020'. [ 496.917430][T21032] netlink: 'syz.2.4035': attribute type 1 has an invalid length. [ 497.059953][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4035'. [ 497.449270][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4043'. [ 497.460246][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 497.498016][T21061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 497.521700][T21061] netlink: 'syz.0.4043': attribute type 1 has an invalid length. [ 497.534645][T21061] netlink: 'syz.0.4043': attribute type 7 has an invalid length. [ 497.544239][T21061] netlink: 'syz.0.4043': attribute type 8 has an invalid length. [ 497.554539][T21061] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4043'. [ 497.564179][T21061] NCSI netlink: No device for ifindex 65584 [ 497.646918][T21069] netlink: 'syz.0.4045': attribute type 7 has an invalid length. [ 497.696319][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.706473][T21069] netlink: 'syz.0.4045': attribute type 7 has an invalid length. [ 497.724682][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.744037][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.019712][T21081] netlink: 'syz.3.4048': attribute type 1 has an invalid length. [ 498.137769][T21085] macvlan2: entered promiscuous mode [ 498.167633][T21085] macvlan2: entered allmulticast mode [ 498.208111][T21085] bond4: entered promiscuous mode [ 498.244643][T21085] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 498.308454][T21085] bond4: left promiscuous mode [ 498.383120][T21095] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 498.402566][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 498.437817][T21097] tipc: Resetting bearer [ 498.456037][T21097] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 498.475701][T21097] netlink: 'syz.0.4051': attribute type 4 has an invalid length. [ 498.623660][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4059'. [ 498.634914][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4059'. [ 498.676858][T21114] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4058'. [ 498.937446][T21125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4063'. [ 498.950359][T21125] tipc: Invalid UDP bearer configuration [ 498.950417][T21125] tipc: Enabling of bearer rejected, failed to enable media [ 499.259025][T21137] veth0_to_bridge: entered promiscuous mode [ 499.285274][T21137] veth0_to_bridge: left promiscuous mode [ 499.456317][T21143] netlink: 'syz.1.4068': attribute type 21 has an invalid length. [ 499.784472][T21160] batadv1: entered allmulticast mode [ 499.857836][T21163] batman_adv: batadv0: Adding interface: dummy0 [ 499.874714][T21163] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.920470][T21163] batman_adv: batadv0: Interface activated: dummy0 [ 500.014199][T21166] batadv0: mtu less than device minimum [ 500.029977][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.043814][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.055517][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.067201][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.078532][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.089624][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.100887][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.112203][T21166] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 500.398006][T21196] x_tables: unsorted entry at hook 2 [ 500.447861][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4084'. [ 500.783801][T21221] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 501.322565][T21256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.341306][T21256] macvlan2: entered promiscuous mode [ 501.346967][T21256] macvlan2: entered allmulticast mode [ 501.354336][T21256] bond5: entered promiscuous mode [ 501.360230][T21256] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.380048][T21256] bond5: left promiscuous mode [ 501.519926][T21260] bond2 (unregistering): Released all slaves [ 502.210284][T21315] __nla_validate_parse: 3 callbacks suppressed [ 502.210304][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'. [ 502.514317][ T5622] Bluetooth: hci0: command tx timeout [ 504.996426][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 505.177415][T21351] xt_TCPMSS: Only works on TCP SYN packets [ 505.264859][T21355] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 505.283101][T21355] bond2 (unregistering): Released all slaves [ 505.499696][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4129'. [ 505.519601][T21372] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4131'. [ 505.521670][T21371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4129'. [ 505.605161][T21372] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.4131'. [ 505.626726][T21382] validate_nla: 1 callbacks suppressed [ 505.626744][T21382] netlink: 'syz.4.4133': attribute type 10 has an invalid length. [ 505.863348][T21406] 8021q: VLANs not supported on wg1 [ 506.240441][T21427] syzkaller0: entered promiscuous mode [ 506.253936][T21427] syzkaller0: entered allmulticast mode [ 506.749496][T21448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4151'. [ 506.933971][T21459] netlink: 'syz.1.4157': attribute type 1 has an invalid length. [ 507.044755][T21464] nbd: must specify a device to reconfigure [ 507.057811][T21461] pim6reg527: entered allmulticast mode [ 507.133852][T21468] xt_TCPMSS: Only works on TCP SYN packets [ 507.146737][T21471] net_ratelimit: 11 callbacks suppressed [ 507.146757][T21471] openvswitch: netlink: Unknown key attributes 20 [ 507.206756][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'. [ 507.382452][T21485] bond5: entered allmulticast mode [ 507.527930][T21491] netlink: 'syz.1.4168': attribute type 30 has an invalid length. [ 507.651619][T21505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4171'. [ 507.689159][T21502] vlan0: entered allmulticast mode [ 507.709866][T21502] bond0: entered allmulticast mode [ 507.727273][T21502] bond_slave_0: entered allmulticast mode [ 507.742344][T21502] bond_slave_1: entered allmulticast mode [ 507.760605][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4172'. [ 507.763011][T21502] batadv0: entered allmulticast mode [ 507.783453][T21502] team0: entered allmulticast mode [ 507.788614][T21502] team_slave_0: entered allmulticast mode [ 507.797771][T21502] team_slave_1: entered allmulticast mode [ 508.053721][T21525] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4177'. [ 508.076495][T21529] 8021q: VLANs not supported on nlmon0 [ 508.119442][T21530] syzkaller0: entered promiscuous mode [ 508.143379][T21530] syzkaller0: entered allmulticast mode [ 508.173822][T21530] tc action pedit offset must be on 32 bit boundaries [ 508.194073][T21535] macvlan2: entered promiscuous mode [ 508.200118][T21535] macvlan2: entered allmulticast mode [ 508.425968][T21551] openvswitch: netlink: IPv6 tunnel dst address is zero [ 508.542870][T21563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4188'. [ 508.578971][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4188'. [ 508.792435][T21581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4194'. [ 508.819291][T21584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.912937][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4193'. [ 508.949176][T21580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.006784][T21580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.234175][T21610] netlink: 'syz.1.4201': attribute type 1 has an invalid length. [ 509.257438][T21610] netlink: 'syz.1.4201': attribute type 2 has an invalid length. [ 509.518470][T21626] nftables ruleset with unbound chain [ 509.565102][T21621] bond5: Unable to set down delay as MII monitoring is disabled [ 509.579989][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4206'. [ 509.598379][T21621] bond5 (unregistering): Released all slaves [ 509.774819][T21642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4212'. [ 509.777171][T21639] xt_hashlimit: invalid rate [ 510.057017][T21657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'. [ 510.060074][T21661] tipc: Started in network mode [ 510.088984][T21661] tipc: Node identity 7605b954780c, cluster identity 4711 [ 510.114879][T21661] tipc: Enabled bearer , priority 0 [ 510.133982][T21662] syzkaller0: entered promiscuous mode [ 510.147265][T21662] syzkaller0: entered allmulticast mode [ 510.285305][T21672] netlink: 'syz.2.4217': attribute type 12 has an invalid length. [ 510.338447][T21662] sch_tbf: burst 255 is lower than device ip6tnl0 mtu (32769) ! [ 510.366879][T21668] netlink: 'syz.2.4217': attribute type 4 has an invalid length. [ 510.415352][T21674] tipc: Resetting bearer [ 510.439689][T21660] tipc: Resetting bearer [ 510.465246][T21660] tipc: Disabling bearer [ 510.939895][T21710] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 511.279059][T21728] gre1: entered promiscuous mode [ 511.296761][T21732] lo: entered promiscuous mode [ 511.315094][T21732] lo: entered allmulticast mode [ 511.333143][T21732] tunl0: entered promiscuous mode [ 511.354879][T21732] tunl0: entered allmulticast mode [ 511.361445][T21732] gre0: entered promiscuous mode [ 511.367099][T21732] gre0: entered allmulticast mode [ 511.373311][T21732] gretap0: entered promiscuous mode [ 511.378650][T21732] gretap0: entered allmulticast mode [ 511.385977][T21732] ip_vti0: entered promiscuous mode [ 511.399852][T21732] ip_vti0: entered allmulticast mode [ 511.411084][T21732] ip6_vti0: entered promiscuous mode [ 511.417243][T21732] ip6_vti0: entered allmulticast mode [ 511.425303][T21732] sit0: entered promiscuous mode [ 511.431100][T21732] sit0: entered allmulticast mode [ 511.437389][T21732] ip6tnl0: entered promiscuous mode [ 511.443152][T21732] ip6tnl0: entered allmulticast mode [ 511.449403][T21732] ip6gre0: entered promiscuous mode [ 511.454962][T21732] ip6gre0: entered allmulticast mode [ 511.461456][T21732] syz_tun: entered promiscuous mode [ 511.466967][T21732] syz_tun: entered allmulticast mode [ 511.473655][T21732] ip6gretap0: entered promiscuous mode [ 511.479210][T21732] ip6gretap0: entered allmulticast mode [ 511.485808][T21732] bridge0: entered promiscuous mode [ 511.491122][T21732] bridge0: entered allmulticast mode [ 511.497411][T21732] bond0: entered promiscuous mode [ 511.502807][T21732] bond_slave_0: entered promiscuous mode [ 511.508888][T21732] bond0: entered allmulticast mode [ 511.514588][T21732] bond_slave_0: entered allmulticast mode [ 511.521236][T21732] team0: entered promiscuous mode [ 511.526962][T21732] team_slave_0: entered promiscuous mode [ 511.533633][T21732] team_slave_1: entered promiscuous mode [ 511.539421][T21732] team0: entered allmulticast mode [ 511.545147][T21732] team_slave_0: entered allmulticast mode [ 511.550893][T21732] team_slave_1: entered allmulticast mode [ 511.557933][T21732] dummy0: entered promiscuous mode [ 511.563772][T21732] dummy0: entered allmulticast mode [ 511.569622][T21732] nlmon0: entered promiscuous mode [ 511.574982][T21732] nlmon0: entered allmulticast mode [ 511.581047][T21732] vxcan0: entered promiscuous mode [ 511.586687][T21732] vxcan0: entered allmulticast mode [ 511.592946][T21732] vxcan1: entered promiscuous mode [ 511.598114][T21732] vxcan1: entered allmulticast mode [ 511.604302][T21732] veth0: entered promiscuous mode [ 511.609389][T21732] veth0: entered allmulticast mode [ 511.622719][T21732] veth1: entered promiscuous mode [ 511.632095][T21732] veth1: entered allmulticast mode [ 511.644186][T21732] wg0: entered promiscuous mode [ 511.657164][T21732] wg0: entered allmulticast mode [ 511.664445][T21732] wg1: entered promiscuous mode [ 511.669313][T21732] wg1: entered allmulticast mode [ 511.675399][T21732] wg2: entered promiscuous mode [ 511.680274][T21732] wg2: entered allmulticast mode [ 511.685984][T21732] veth0_to_bridge: entered promiscuous mode [ 511.693167][T21732] veth0_to_bridge: entered allmulticast mode [ 511.700282][T21732] veth1_to_bridge: entered promiscuous mode [ 511.709186][T21732] veth1_to_bridge: entered allmulticast mode [ 511.717739][T21732] veth0_to_bond: entered promiscuous mode [ 511.724386][T21732] veth0_to_bond: entered allmulticast mode [ 511.731461][T21732] veth1_to_bond: entered promiscuous mode [ 511.738176][T21732] veth1_to_bond: entered allmulticast mode [ 511.747173][T21732] bond_slave_1: entered promiscuous mode [ 511.753438][T21732] bond_slave_1: entered allmulticast mode [ 511.759961][T21732] veth0_to_team: entered promiscuous mode [ 511.765863][T21732] veth0_to_team: entered allmulticast mode [ 511.775304][T21732] veth1_to_team: entered promiscuous mode [ 511.781065][T21732] veth1_to_team: entered allmulticast mode [ 511.788171][T21732] veth0_to_batadv: entered promiscuous mode [ 511.794955][T21732] veth0_to_batadv: entered allmulticast mode [ 511.801528][T21732] batadv_slave_0: entered promiscuous mode [ 511.810505][T21732] batadv_slave_0: entered allmulticast mode [ 511.818184][T21732] veth1_to_batadv: entered promiscuous mode [ 511.824627][T21732] veth1_to_batadv: entered allmulticast mode [ 511.831296][T21732] batadv_slave_1: entered promiscuous mode [ 511.838119][T21732] batadv_slave_1: entered allmulticast mode [ 511.845173][T21732] xfrm0: entered promiscuous mode [ 511.850234][T21732] xfrm0: entered allmulticast mode [ 511.857168][T21732] veth0_to_hsr: entered promiscuous mode [ 511.863011][T21732] veth0_to_hsr: entered allmulticast mode [ 511.869463][T21732] hsr_slave_0: entered promiscuous mode [ 511.878842][T21732] hsr_slave_0: entered allmulticast mode [ 511.885995][T21732] veth1_virt_wifi: entered promiscuous mode [ 511.892480][T21732] veth1_virt_wifi: entered allmulticast mode [ 511.899148][T21732] veth0_virt_wifi: entered promiscuous mode [ 511.905524][T21732] veth0_virt_wifi: entered allmulticast mode [ 511.913775][T21732] virt_wifi0: entered promiscuous mode [ 511.919308][T21732] virt_wifi0: entered allmulticast mode [ 511.926890][T21732] veth1_vlan: entered allmulticast mode [ 511.933875][T21732] veth0_vlan: entered allmulticast mode [ 511.941621][T21732] vlan0: entered allmulticast mode [ 511.961080][T21732] vlan1: entered promiscuous mode [ 511.967645][T21732] vlan1: entered allmulticast mode [ 511.982820][T21732] macvlan0: entered promiscuous mode [ 511.990043][T21732] macvlan0: entered allmulticast mode [ 512.011264][T21732] macvlan1: entered promiscuous mode [ 512.027893][T21732] macvlan1: entered allmulticast mode [ 512.043519][T21732] ipvlan0: entered promiscuous mode [ 512.063318][T21732] ipvlan0: entered allmulticast mode [ 512.085350][T21732] ipvlan1: entered promiscuous mode [ 512.090806][T21732] ipvlan1: entered allmulticast mode [ 512.098204][T21732] veth1_macvtap: entered allmulticast mode [ 512.105615][T21732] macvtap0: entered promiscuous mode [ 512.111112][T21732] macvtap0: entered allmulticast mode [ 512.119196][T21732] macsec0: entered promiscuous mode [ 512.125876][T21732] macsec0: entered allmulticast mode [ 512.131733][T21732] geneve0: entered promiscuous mode [ 512.137563][T21732] geneve0: entered allmulticast mode [ 512.145980][T21732] geneve1: entered promiscuous mode [ 512.151242][T21732] geneve1: entered allmulticast mode [ 512.158167][T21732] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 512.166115][T21732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.174534][T21732] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 512.182501][T21732] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 512.190748][T21732] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 512.198593][T21732] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 512.207064][T21732] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 512.214787][T21732] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 512.225760][T21732] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 512.233549][T21732] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 512.241332][T21732] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 512.249174][T21732] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 512.257823][T21732] veth2: entered promiscuous mode [ 512.263465][T21732] veth2: entered allmulticast mode [ 512.269510][T21732] veth3: entered promiscuous mode [ 512.276397][T21732] : entered promiscuous mode [ 512.281145][T21732] : entered allmulticast mode [ 512.287803][T21732] wireguard0: entered promiscuous mode [ 512.293604][T21732] wireguard0: entered allmulticast mode [ 512.300323][T21732] bridge1: entered promiscuous mode [ 512.305643][T21732] bridge1: entered allmulticast mode [ 512.313738][T21732] mac80211_hwsim hwsim37 wlan2: entered promiscuous mode [ 512.320838][T21732] mac80211_hwsim hwsim37 wlan2: entered allmulticast mode [ 512.329129][T21732] n: entered promiscuous mode [ 512.334355][T21732] n: entered allmulticast mode [ 512.339909][T21732] veth4: entered promiscuous mode [ 512.345068][T21732] veth4: entered allmulticast mode [ 512.352469][T21732] veth5: entered promiscuous mode [ 512.357542][T21732] veth5: entered allmulticast mode [ 512.363856][T21732] bond1: entered allmulticast mode [ 512.368991][T21732] bridge2: entered allmulticast mode [ 512.376162][T21732] gtp0: entered promiscuous mode [ 512.381107][T21732] gtp0: entered allmulticast mode [ 512.389325][T21732] mac80211_hwsim hwsim39 wlan3: entered promiscuous mode [ 512.396600][T21732] mac80211_hwsim hwsim39 wlan3: entered allmulticast mode [ 512.405084][T21732] bridge3: entered promiscuous mode [ 512.411482][T21732] vlan2: entered promiscuous mode [ 512.418407][T21732] batadv0: entered promiscuous mode [ 512.423677][T21732] batadv0: entered allmulticast mode [ 512.429779][T21732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.439438][T21732] syztnl1: entered promiscuous mode [ 512.444953][T21732] syztnl1: entered allmulticast mode [ 512.452617][T21732] vlan0.4: entered promiscuous mode [ 512.458047][T21732] vlan0.4: entered allmulticast mode [ 512.465263][T21732] bridge4: entered promiscuous mode [ 512.470626][T21732] bridge4: entered allmulticast mode [ 512.478986][T21732] bond2: entered promiscuous mode [ 512.485337][T21732] bond2: entered allmulticast mode [ 512.490846][T21732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.498695][T21732] ip6tnl1: entered promiscuous mode [ 512.504769][T21732] ip6tnl1: entered allmulticast mode [ 512.704850][T21763] __nla_validate_parse: 3 callbacks suppressed [ 512.704869][T21763] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4244'. [ 512.753469][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 512.769983][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.899495][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'. [ 512.927852][T21779] netlink: 'syz.1.4250': attribute type 9 has an invalid length. [ 513.115711][T21791] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 513.234005][T12536] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.261241][T12536] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.272625][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.343211][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 513.357888][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.384673][T21811] netlink: 'syz.4.4256': attribute type 4 has an invalid length. [ 513.434758][T21813] netlink: 'syz.4.4256': attribute type 4 has an invalid length. [ 513.499845][T21822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4260'. [ 513.538309][T21822] openvswitch: netlink: Flow key attr not present in new flow. [ 513.571718][T21811] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 513.721138][T21829] syzkaller0: entered promiscuous mode [ 513.729771][T21829] syzkaller0: entered allmulticast mode [ 513.743726][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.750553][T21829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4263'. [ 513.826140][T21838] netlink: 'syz.3.4266': attribute type 2 has an invalid length. [ 513.844076][T21838] netlink: 'syz.3.4266': attribute type 2 has an invalid length. [ 513.882857][T21838] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4266'. [ 513.924696][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 513.939223][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 513.973085][T21844] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 514.032306][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 514.112330][ T5622] Bluetooth: hci0: command tx timeout [ 514.143675][T21841] netlink: 'syz.1.4267': attribute type 1 has an invalid length. [ 514.163892][T21841] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4267'. [ 514.195666][T21849] bond6: (slave bridge2): making interface the new active one [ 514.204900][T21849] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 514.474463][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 514.488914][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 514.657189][T21889] netlink: 'syz.4.4280': attribute type 28 has an invalid length. [ 514.674634][T21889] netlink: 'syz.4.4280': attribute type 3 has an invalid length. [ 514.693216][T21889] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4280'. [ 514.746074][T21886] xfrm0 speed is unknown, defaulting to 1000 [ 514.753280][T21893] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 514.767068][T21893] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 514.877211][T21896] veth7: entered promiscuous mode [ 514.991287][T21873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'. [ 515.075486][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 515.156052][T21886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4278'. [ 515.427843][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4286'. [ 516.085890][T21944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.145142][T21953] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 516.167667][T21953] bond4 (unregistering): Released all slaves [ 516.209102][T21945] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 516.275200][T15757] block nbd0: Possible stuck request ffff8880278d7000: control (read@0,1024B). Runtime 240 seconds [ 516.286171][T15757] block nbd0: Possible stuck request ffff8880278d71c0: control (read@1024,1024B). Runtime 240 seconds [ 516.297532][T15757] block nbd0: Possible stuck request ffff8880278d7380: control (read@2048,1024B). Runtime 240 seconds [ 516.308715][T15757] block nbd0: Possible stuck request ffff8880278d7540: control (read@3072,1024B). Runtime 240 seconds [ 516.525568][T21974] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 516.719662][T21992] gre0: entered promiscuous mode [ 516.766267][T21992] gre0: entered allmulticast mode [ 516.992412][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 517.177285][T22023] team0: Port device team_slave_0 removed [ 517.629035][T22050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.760382][T22055] __nla_validate_parse: 11 callbacks suppressed [ 517.760401][T22055] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4325'. [ 517.989249][T22065] validate_nla: 4 callbacks suppressed [ 517.989267][T22065] netlink: 'syz.4.4329': attribute type 1 has an invalid length. [ 518.059857][T22073] netlink: 'syz.3.4332': attribute type 1 has an invalid length. [ 518.172888][T12536] net_ratelimit: 12 callbacks suppressed [ 518.172907][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 518.197112][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.254767][T22081] netlink: 'syz.3.4335': attribute type 1 has an invalid length. [ 518.445432][T22081] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 518.465773][T22104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4341'. [ 518.578007][T12536] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.601453][T22108] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.4342'. [ 518.611337][T12536] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.619222][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.628334][T22108] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 518.642155][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.725543][T14123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 518.740257][T14123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.886596][T22126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4347'. [ 518.922894][T22129] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4347'. [ 518.991246][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4350'. [ 519.084935][T22131] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 519.097568][T22131] bond4 (unregistering): Released all slaves [ 519.273901][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 519.288487][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 519.332842][T22145] "syz.1.4354" (22145) uses obsolete ecb(arc4) skcipher [ 519.392147][T13423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.701702][T22177] xfrm0 speed is unknown, defaulting to 1000 [ 519.812592][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 519.827599][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 519.970903][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888041995400: rx timeout, send abort [ 519.979668][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888041995400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 520.016433][T22185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'. [ 520.018804][T22187] Cannot find set identified by id 65535 to match [ 520.200584][T22193] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.4367'. [ 520.337284][T22201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 520.357674][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 520.372132][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 520.553888][T22210] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4372'. [ 520.739381][T22215] netlink: 'syz.3.4373': attribute type 9 has an invalid length. [ 520.953456][T22221] sctp: [Deprecated]: syz.3.4376 (pid 22221) Use of int in max_burst socket option deprecated. [ 520.953456][T22221] Use struct sctp_assoc_value instead [ 521.590078][T22266] netlink: 'syz.4.4386': attribute type 9 has an invalid length. [ 521.850425][T22292] lo speed is unknown, defaulting to 1000 [ 521.920890][T22292] lo speed is unknown, defaulting to 1000 [ 521.939808][T22292] lo speed is unknown, defaulting to 1000 [ 521.967397][T22292] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 522.022963][T22292] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 522.071945][T22292] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 522.133482][T22292] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 522.229166][T22292] lo speed is unknown, defaulting to 1000 [ 522.260184][T22292] lo speed is unknown, defaulting to 1000 [ 522.296108][T22292] lo speed is unknown, defaulting to 1000 [ 522.315522][T22292] lo speed is unknown, defaulting to 1000 [ 522.342575][T22324] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.376555][T22292] lo speed is unknown, defaulting to 1000 [ 522.396386][T22325] veth3: entered promiscuous mode [ 522.401439][T22325] veth3: entered allmulticast mode [ 522.408843][T22292] lo speed is unknown, defaulting to 1000 [ 522.415226][ T5805] IPVS: starting estimator thread 0... [ 522.432147][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.466952][T22292] lo speed is unknown, defaulting to 1000 [ 522.489626][T22292] lo speed is unknown, defaulting to 1000 [ 522.513192][T22292] lo speed is unknown, defaulting to 1000 [ 522.532917][T22332] IPVS: using max 31 ests per chain, 74400 per kthread [ 522.766062][T22348] netlink: 'syz.0.4411': attribute type 30 has an invalid length. [ 522.801701][T22350] __nla_validate_parse: 34 callbacks suppressed [ 522.801718][T22350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4412'. [ 522.810792][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4413'. [ 522.840944][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4413'. [ 522.871032][T22350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4412'. [ 523.037201][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 523.112962][T22372] syzkaller0: entered promiscuous mode [ 523.132048][T22372] syzkaller0: entered allmulticast mode [ 523.176550][T22377] netlink: 'syz.1.4422': attribute type 2 has an invalid length. [ 523.225693][T22377] : entered promiscuous mode [ 523.237290][T22383] tc_dump_action: action bad kind [ 523.484452][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4426'. [ 523.495597][ T12] net_ratelimit: 10 callbacks suppressed [ 523.495615][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 523.515971][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 523.557319][T22399] IPVS: length: 239 != 24 [ 523.686970][T22413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4430'. [ 523.696252][T22413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4430'. [ 523.716580][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 523.754347][T22413] geneve3: entered promiscuous mode [ 523.818192][T22413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4430'. [ 523.877601][T22413] bond6: entered promiscuous mode [ 523.892905][T22413] bond6: entered allmulticast mode [ 523.907256][T22413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 524.043002][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 524.058250][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 524.381571][ T5622] block nbd0: Receive control failed (result -107) [ 524.390718][T22461] block nbd0: reconnected socket [ 524.559847][ T12] veth1_to_bridge: left allmulticast mode [ 524.582279][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 524.596900][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 524.605337][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 524.632209][ T12] veth1_to_bridge: left promiscuous mode [ 524.644148][ T12] bridge0: port 3(veth1_to_bridge) entered disabled state [ 524.684244][ T12] bridge_slave_1: left allmulticast mode [ 524.703334][ T12] bridge_slave_1: left promiscuous mode [ 524.721242][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.743314][ T12] bridge_slave_0: left allmulticast mode [ 524.751622][ T12] bridge_slave_0: left promiscuous mode [ 524.762699][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.027311][T22498] openvswitch: netlink: EtherType 0 is less than min 600 [ 525.096777][ T12] gretap0 (unregistering): left promiscuous mode [ 525.172351][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 525.186864][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 525.212526][ T12] geneve1 (unregistering): left promiscuous mode [ 525.219667][ T12] team0: Port device geneve1 removed [ 525.267120][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.279247][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.288949][ T12]  (unregistering): Released all slaves [ 525.303099][ T12] bond1 (unregistering): Released all slaves [ 525.325499][ T12] bond0 (unregistering): Released all slaves [ 525.341150][ T12] bond2 (unregistering): Released all slaves [ 525.365103][ T12] bond3 (unregistering): Released all slaves [ 525.378785][ T12] bond4 (unregistering): Released all slaves [ 525.392694][ T12] bond5 (unregistering): Released all slaves [ 525.409060][ T12] bond6 (unregistering): Released all slaves [ 525.429635][ T12] bond7 (unregistering): Released all slaves [ 525.446064][ T12] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 525.455584][ T12] bond8 (unregistering): Released all slaves [ 525.470516][ T12] bond9 (unregistering): Released all slaves [ 525.496393][ T12] bond10 (unregistering): Released all slaves [ 525.727436][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 525.748807][T22510] bond0: entered promiscuous mode [ 525.779794][T22510] bond_slave_0: entered promiscuous mode [ 525.797231][T22510] bond_slave_1: entered promiscuous mode [ 525.823718][T22510] batadv0: entered promiscuous mode [ 525.837176][T22510] team0: entered promiscuous mode [ 525.845554][T22510] team_slave_0: entered promiscuous mode [ 525.867938][T22510] team_slave_1: entered promiscuous mode [ 525.915765][ T12] : left promiscuous mode [ 525.983424][T22529] netlink: 'syz.0.4458': attribute type 83 has an invalid length. [ 526.088021][ T12] tipc: Disabling bearer [ 526.161301][ T12] tipc: Disabling bearer [ 526.170953][ T12] tipc: Left network mode [ 526.286923][T22540] bridge9: entered promiscuous mode [ 526.314205][T22540] bridge9: entered allmulticast mode [ 526.547789][T22517] tipc: Invalid UDP bearer configuration [ 526.547854][T22517] tipc: Enabling of bearer rejected, failed to enable media [ 526.714045][T22565] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 526.899134][T22571] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.940431][T22571] netlink: 'syz.1.4471': attribute type 1 has an invalid length. [ 527.298909][ T12] team0: left promiscuous mode [ 527.311986][ T12] team_slave_1: left promiscuous mode [ 527.345159][ T12] hsr_slave_0: left promiscuous mode [ 527.361535][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.498417][ T9694] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 527.599578][T22620] netlink: 'syz.1.4480': attribute type 9 has an invalid length. [ 527.604072][T22605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.690974][T22614] netlink: 'syz.1.4480': attribute type 5 has an invalid length. [ 528.519052][ T12] team0 (unregistering): Port device team_slave_1 removed [ 528.795185][T22613] erspan0: entered promiscuous mode [ 528.809985][T22613] erspan0: entered allmulticast mode [ 528.843324][T14123] net_ratelimit: 16 callbacks suppressed [ 528.843344][T14123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 528.863865][T14123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 529.106777][T22647] __nla_validate_parse: 11 callbacks suppressed [ 529.106794][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4485'. [ 529.129496][T22643] xt_hashlimit: size too large, truncated to 1048576 [ 529.136817][T22644] xt_hashlimit: size too large, truncated to 1048576 [ 529.180083][T22653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4484'. [ 529.206227][T22653] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4484'. [ 529.277529][T22653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4484'. [ 529.394249][T22666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4490'. [ 529.458978][T22661] syzkaller0: entered promiscuous mode [ 529.477994][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 529.492695][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 529.532785][T22661] syzkaller0: entered allmulticast mode [ 529.712040][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.970528][ T12] IPVS: stop unused estimator thread 0... [ 530.052107][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 530.066726][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 530.239675][T22698] netlink: 'syz.1.4497': attribute type 9 has an invalid length. [ 530.266197][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4496'. [ 530.524985][T22714] gtp1: entered promiscuous mode [ 530.568466][T22714] gtp1: entered allmulticast mode [ 530.645320][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 530.659903][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 531.130614][T22750] netlink: 'syz.4.4510': attribute type 9 has an invalid length. [ 531.225705][T22760] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4512'. [ 531.267303][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 531.281769][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 531.545632][T22777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4516'. [ 531.628938][ T9694] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 531.654817][T13410] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 531.663044][ T9694] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 531.890296][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4521'. [ 531.956122][T22804] team0: entered promiscuous mode [ 531.961200][T22804] team_slave_1: entered promiscuous mode [ 531.983817][T22804] bond1: entered promiscuous mode [ 531.997966][T22804] geneve1: entered promiscuous mode [ 532.021670][T22804] team0: left promiscuous mode [ 532.040912][T22804] team_slave_1: left promiscuous mode [ 532.062257][T22804] bond1: left promiscuous mode [ 532.081324][T22804] geneve1: left promiscuous mode [ 532.437246][T13418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 532.665653][T22826] netlink: 'syz.1.4523': attribute type 1 has an invalid length. [ 532.673795][T13418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 532.791666][T22829] netlink: 'syz.3.4524': attribute type 9 has an invalid length. [ 532.833505][T22839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4526'. [ 533.249616][T22870] xfrm1: entered promiscuous mode [ 533.269567][T22870] xfrm1: entered allmulticast mode [ 533.590409][T22896] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 533.609234][T13418] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 533.972963][ T145] net_ratelimit: 8 callbacks suppressed [ 533.972981][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 533.991233][T22927] vlan3: entered allmulticast mode [ 533.993019][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 534.326385][T22946] __nla_validate_parse: 10 callbacks suppressed [ 534.326415][T22946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4553'. [ 534.362974][T22946] netlink: 87 bytes leftover after parsing attributes in process `syz.1.4553'. [ 534.434317][T22951] netlink: 'syz.4.4555': attribute type 1 has an invalid length. [ 534.458172][T22951] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4555'. [ 534.583815][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 534.598664][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 534.974881][T22984] syzkaller0: entered promiscuous mode [ 534.997526][T22984] syzkaller0: entered allmulticast mode [ 535.132892][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 535.147362][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 535.585522][T23028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4573'. [ 535.617200][T23030] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4573'. [ 535.622342][T23028] openvswitch: netlink: Missing key (keys=40, expected=80) [ 535.637372][T23030] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4573'. [ 535.646830][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 535.752252][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 535.766989][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 536.327277][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 538.885374][T23070] netlink: 'syz.0.4584': attribute type 1 has an invalid length. [ 538.919004][T23058] xt_hashlimit: size too large, truncated to 1048576 [ 539.044107][T23070] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.255530][T23080] syzkaller0: entered promiscuous mode [ 539.266209][T23080] syzkaller0: entered allmulticast mode [ 539.442628][T12536] net_ratelimit: 11 callbacks suppressed [ 539.442647][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 539.463785][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 539.952113][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 539.994459][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 540.009078][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 540.535686][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 540.550328][ T9694] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 541.081969][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 541.096448][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 541.613109][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 541.627656][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 542.608239][T23104] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4592'. [ 542.740832][T23112] siw: device registration error -23 [ 542.968993][T23129] tc_dump_action: action bad kind [ 542.986338][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4601'. [ 543.228122][T23149] block nbd0: reconnected socket [ 543.228156][ T5629] block nbd0: Receive control failed (result -107) [ 543.356905][T23157] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.4610'. [ 543.404556][T23157] netlink: 'syz.3.4610': attribute type 13 has an invalid length. [ 543.442432][ T80] [ 543.444813][ T80] ====================================================== [ 543.451847][ T80] WARNING: possible circular locking dependency detected [ 543.458888][ T80] syzkaller #0 Not tainted [ 543.463308][ T80] ------------------------------------------------------ [ 543.470328][ T80] kworker/u8:5/80 is trying to acquire lock: [ 543.476311][ T80] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 543.486171][ T80] [ 543.486171][ T80] but task is already holding lock: [ 543.493542][ T80] ffff888025a4e0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 543.503318][ T80] [ 543.503318][ T80] which lock already depends on the new lock. [ 543.503318][ T80] [ 543.513725][ T80] [ 543.513725][ T80] the existing dependency chain (in reverse order) is: [ 543.522749][ T80] [ 543.522749][ T80] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 543.530668][ T80] lock_sock_nested+0x41/0x100 [ 543.536070][ T80] mptcp_connect+0x439/0x7a0 [ 543.541318][ T80] __inet_stream_connect+0x258/0xe00 [ 543.547146][ T80] inet_stream_connect+0x66/0xa0 [ 543.552634][ T80] __sys_connect+0x323/0x460 [ 543.557838][ T80] __x64_sys_connect+0x7a/0x90 [ 543.563116][ T80] do_syscall_64+0x174/0x580 [ 543.568300][ T80] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.574700][ T80] [ 543.574700][ T80] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 543.582426][ T80] lock_sock_nested+0x41/0x100 [ 543.587731][ T80] inet_shutdown+0x6a/0x390 [ 543.592756][ T80] nbd_mark_nsock_dead+0x2cb/0x550 [ 543.598463][ T80] recv_work+0x1cee/0x1e10 [ 543.603440][ T80] process_scheduled_works+0xa8e/0x14e0 [ 543.609504][ T80] worker_thread+0xa47/0xfb0 [ 543.614602][ T80] kthread+0x388/0x470 [ 543.619188][ T80] ret_from_fork+0x514/0xb70 [ 543.624290][ T80] ret_from_fork_asm+0x1a/0x30 [ 543.629562][ T80] [ 543.629562][ T80] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 543.637196][ T80] __mutex_lock+0x19d/0x1550 [ 543.642388][ T80] nbd_queue_rq+0x373/0x1150 [ 543.647509][ T80] blk_mq_dispatch_rq_list+0x499/0x1990 [ 543.653708][ T80] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 543.660622][ T80] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 543.667117][ T80] blk_mq_run_work_fn+0x16c/0x300 [ 543.672649][ T80] process_scheduled_works+0xa8e/0x14e0 [ 543.678703][ T80] worker_thread+0xa47/0xfb0 [ 543.683809][ T80] kthread+0x388/0x470 [ 543.688396][ T80] ret_from_fork+0x514/0xb70 [ 543.693504][ T80] ret_from_fork_asm+0x1a/0x30 [ 543.698786][ T80] [ 543.698786][ T80] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 543.705986][ T80] __mutex_lock+0x19d/0x1550 [ 543.711107][ T80] nbd_queue_rq+0xc1/0x1150 [ 543.716140][ T80] blk_mq_dispatch_rq_list+0x499/0x1990 [ 543.722212][ T80] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 543.729055][ T80] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 543.735546][ T80] blk_mq_run_work_fn+0x16c/0x300 [ 543.741078][ T80] process_scheduled_works+0xa8e/0x14e0 [ 543.747131][ T80] worker_thread+0xa47/0xfb0 [ 543.752229][ T80] kthread+0x388/0x470 [ 543.756817][ T80] ret_from_fork+0x514/0xb70 [ 543.761925][ T80] ret_from_fork_asm+0x1a/0x30 [ 543.767196][ T80] [ 543.767196][ T80] -> #3 (set->srcu){.+.+}-{0:0}: [ 543.774310][ T80] __synchronize_srcu+0xc9/0x2f0 [ 543.779760][ T80] elevator_switch+0x1e8/0x7b0 [ 543.785113][ T80] elevator_change+0x2fa/0x480 [ 543.790386][ T80] elevator_set_default+0x375/0x440 [ 543.796095][ T80] blk_register_queue+0x3f3/0x4e0 [ 543.801721][ T80] __add_disk+0x6cb/0xe30 [ 543.802360][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 543.806558][ T80] add_disk_fwnode+0xfb/0x4b0 [ 543.819196][ T80] nbd_dev_add+0x733/0xb60 [ 543.824135][ T80] nbd_init+0x15f/0x1e0 [ 543.828809][ T80] do_one_initcall+0x250/0x870 [ 543.834086][ T80] do_initcall_level+0x10a/0x1a0 [ 543.839532][ T80] do_initcalls+0x59/0xa0 [ 543.844368][ T80] kernel_init_freeable+0x29d/0x3e0 [ 543.850077][ T80] kernel_init+0x1d/0x1d0 [ 543.854912][ T80] ret_from_fork+0x514/0xb70 [ 543.860017][ T80] ret_from_fork_asm+0x1a/0x30 [ 543.865290][ T80] [ 543.865290][ T80] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 543.873096][ T80] __mutex_lock+0x19d/0x1550 [ 543.878199][ T80] elevator_change+0x1af/0x480 [ 543.883477][ T80] elevator_set_none+0xb5/0x140 [ 543.888839][ T80] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 543.895162][ T80] nbd_start_device+0x189/0xb30 [ 543.900531][ T80] nbd_genl_connect+0x1597/0x1c10 [ 543.906073][ T80] genl_family_rcv_msg_doit+0x233/0x340 [ 543.912281][ T80] genl_rcv_msg+0x614/0x7a0 [ 543.917298][ T80] netlink_rcv_skb+0x226/0x4a0 [ 543.922619][ T80] genl_rcv+0x28/0x40 [ 543.927109][ T80] netlink_unicast+0x7bb/0x940 [ 543.932385][ T80] netlink_sendmsg+0x813/0xb40 [ 543.937663][ T80] sock_sendmsg_nosec+0x13a/0x180 [ 543.943193][ T80] ____sys_sendmsg+0x54e/0x850 [ 543.948471][ T80] ___sys_sendmsg+0x2a5/0x360 [ 543.953661][ T80] __x64_sys_sendmsg+0x1b1/0x290 [ 543.959121][ T80] do_syscall_64+0x174/0x580 [ 543.964226][ T80] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.970627][ T80] [ 543.970627][ T80] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 543.979222][ T80] blk_alloc_queue+0x544/0x690 [ 543.984499][ T80] __blk_mq_alloc_disk+0x194/0x390 [ 543.990121][ T80] nbd_dev_add+0x494/0xb60 [ 543.995050][ T80] nbd_init+0x15f/0x1e0 [ 543.999720][ T80] do_one_initcall+0x250/0x870 [ 544.004998][ T80] do_initcall_level+0x10a/0x1a0 [ 544.010456][ T80] do_initcalls+0x59/0xa0 [ 544.015300][ T80] kernel_init_freeable+0x29d/0x3e0 [ 544.021010][ T80] kernel_init+0x1d/0x1d0 [ 544.025848][ T80] ret_from_fork+0x514/0xb70 [ 544.030952][ T80] ret_from_fork_asm+0x1a/0x30 [ 544.036227][ T80] [ 544.036227][ T80] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 544.043428][ T80] __lock_acquire+0x1520/0x2cf0 [ 544.048797][ T80] lock_acquire+0x106/0x350 [ 544.053809][ T80] fs_reclaim_acquire+0x71/0x100 [ 544.059259][ T80] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 544.065576][ T80] __alloc_skb+0x1d7/0x7a0 [ 544.070576][ T80] tcp_stream_alloc_skb+0x3f/0x580 [ 544.076265][ T80] tcp_connect+0x1582/0x53e0 [ 544.081413][ T80] tcp_v6_connect+0x14ed/0x1cf0 [ 544.086843][ T80] __inet_stream_connect+0x258/0xe00 [ 544.092640][ T80] inet_stream_connect+0x66/0xa0 [ 544.098087][ T80] kernel_connect+0x141/0x1c0 [ 544.103271][ T80] rds_tcp_conn_path_connect+0x6e9/0x920 [ 544.109479][ T80] rds_connect_worker+0x1d8/0x290 [ 544.115071][ T80] process_scheduled_works+0xa8e/0x14e0 [ 544.121125][ T80] worker_thread+0xa47/0xfb0 [ 544.126229][ T80] kthread+0x388/0x470 [ 544.130811][ T80] ret_from_fork+0x514/0xb70 [ 544.135917][ T80] ret_from_fork_asm+0x1a/0x30 [ 544.141187][ T80] [ 544.141187][ T80] other info that might help us debug this: [ 544.141187][ T80] [ 544.151406][ T80] Chain exists of: [ 544.151406][ T80] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 544.151406][ T80] [ 544.164351][ T80] Possible unsafe locking scenario: [ 544.164351][ T80] [ 544.171788][ T80] CPU0 CPU1 [ 544.177139][ T80] ---- ---- [ 544.182488][ T80] lock(k-sk_lock-AF_INET6); [ 544.187152][ T80] lock(sk_lock-AF_INET6); [ 544.194163][ T80] lock(k-sk_lock-AF_INET6); [ 544.201346][ T80] lock(fs_reclaim); [ 544.205316][ T80] [ 544.205316][ T80] *** DEADLOCK *** [ 544.205316][ T80] [ 544.213453][ T80] 4 locks held by kworker/u8:5/80: [ 544.218549][ T80] #0: ffff88807d876940 ((wq_completion)krds_cp_wq#22/0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 544.230285][ T80] #1: ffffc900024afc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 544.243063][ T80] #2: ffff88805770c980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 544.254110][ T80] #3: ffff888025a4e0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 544.264197][ T80] [ 544.264197][ T80] stack backtrace: [ 544.270074][ T80] CPU: 1 UID: 0 PID: 80 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 544.270093][ T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.270103][ T80] Workqueue: krds_cp_wq#22/0 rds_connect_worker [ 544.270126][ T80] Call Trace: [ 544.270134][ T80] [ 544.270141][ T80] dump_stack_lvl+0xe8/0x150 [ 544.270164][ T80] print_circular_bug+0x2e1/0x300 [ 544.270180][ T80] check_noncircular+0x12e/0x150 [ 544.270204][ T80] __lock_acquire+0x1520/0x2cf0 [ 544.270231][ T80] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 544.270249][ T80] lock_acquire+0x106/0x350 [ 544.270267][ T80] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 544.270285][ T80] ? ip6_dst_check+0xe2/0x7e0 [ 544.270379][ T80] fs_reclaim_acquire+0x71/0x100 [ 544.270397][ T80] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 544.270414][ T80] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 544.270438][ T80] ? ip6_default_advmss+0x80/0x3b0 [ 544.270486][ T80] ? __alloc_skb+0x1d7/0x7a0 [ 544.270505][ T80] ? __alloc_skb+0x1d7/0x7a0 [ 544.270524][ T80] __alloc_skb+0x1d7/0x7a0 [ 544.270543][ T80] tcp_stream_alloc_skb+0x3f/0x580 [ 544.270563][ T80] ? __asan_memset+0x22/0x50 [ 544.270580][ T80] tcp_connect+0x1582/0x53e0 [ 544.270605][ T80] ? ktime_get_with_offset+0x93/0x2d0 [ 544.270626][ T80] ? __pfx_tcp_connect+0x10/0x10 [ 544.270643][ T80] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 544.270661][ T80] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.270679][ T80] ? ktime_get_with_offset+0x93/0x2d0 [ 544.270695][ T80] ? seqcount_lockdep_reader_access+0xea/0x100 [ 544.270716][ T80] ? __asan_memset+0x22/0x50 [ 544.270733][ T80] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 544.270785][ T80] ? inet6_hash_connect+0xeb/0x170 [ 544.270851][ T80] tcp_v6_connect+0x14ed/0x1cf0 [ 544.270877][ T80] ? __pfx_tcp_v6_connect+0x10/0x10 [ 544.270896][ T80] ? preempt_schedule_common+0x82/0xd0 [ 544.270912][ T80] ? inet_csk_get_port+0x11bc/0x1740 [ 544.270929][ T80] ? preempt_schedule_thunk+0x16/0x40 [ 544.270947][ T80] ? __bfs+0x153/0x290 [ 544.270964][ T80] ? __bfs+0x153/0x290 [ 544.270983][ T80] __inet_stream_connect+0x258/0xe00 [ 544.271004][ T80] ? do_raw_spin_lock+0x12b/0x2f0 [ 544.271018][ T80] ? lock_sock_nested+0x6a/0x100 [ 544.271034][ T80] ? __pfx___inet_stream_connect+0x10/0x10 [ 544.271053][ T80] ? inet_stream_connect+0x51/0xa0 [ 544.271071][ T80] ? __local_bh_enable_ip+0xd0/0x130 [ 544.271088][ T80] inet_stream_connect+0x66/0xa0 [ 544.271107][ T80] kernel_connect+0x141/0x1c0 [ 544.271122][ T80] ? __pfx_kernel_connect+0x10/0x10 [ 544.271141][ T80] ? __local_bh_enable_ip+0xd0/0x130 [ 544.271158][ T80] rds_tcp_conn_path_connect+0x6e9/0x920 [ 544.271179][ T80] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 544.271196][ T80] ? process_scheduled_works+0xa20/0x14e0 [ 544.271215][ T80] rds_connect_worker+0x1d8/0x290 [ 544.271234][ T80] ? process_scheduled_works+0xa20/0x14e0 [ 544.271249][ T80] process_scheduled_works+0xa8e/0x14e0 [ 544.271275][ T80] ? __pfx_process_scheduled_works+0x10/0x10 [ 544.271293][ T80] ? assign_work+0x3cf/0x5d0 [ 544.271309][ T80] worker_thread+0xa47/0xfb0 [ 544.271334][ T80] kthread+0x388/0x470 [ 544.271353][ T80] ? __pfx_worker_thread+0x10/0x10 [ 544.271368][ T80] ? __pfx_kthread+0x10/0x10 [ 544.271387][ T80] ret_from_fork+0x514/0xb70 [ 544.271408][ T80] ? __pfx_ret_from_fork+0x10/0x10 [ 544.271432][ T80] ? __switch_to+0xc89/0x1420 [ 544.271450][ T80] ? __pfx_kthread+0x10/0x10 [ 544.271469][ T80] ret_from_fork_asm+0x1a/0x30 [ 544.271488][ T80] [ 544.429251][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4615'. [ 544.433354][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.446374][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4615'. [ 544.487150][ T145] net_ratelimit: 6 callbacks suppressed [ 544.487168][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 544.602290][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 544.602697][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 545.193901][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 545.208288][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 545.732110][T14123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 545.746495][T14123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 546.261942][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 546.276347][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 546.352647][T15757] block nbd0: Possible stuck request ffff8880278d7000: control (read@0,1024B). Runtime 270 seconds [ 546.363655][T16518] block nbd0: Dead connection, failed to find a fallback [ 546.370691][T16518] block nbd0: shutting down sockets [ 546.375965][T15757] block nbd0: Possible stuck request ffff8880278d71c0: control (read@1024,1024B). Runtime 270 seconds [ 546.387054][T16518] blk_print_req_error: 52 callbacks suppressed [ 546.387067][T16518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.402574][T15757] block nbd0: Possible stuck request ffff8880278d7380: control (read@2048,1024B). Runtime 270 seconds [ 546.413627][T16518] buffer_io_error: 138 callbacks suppressed [ 546.413640][T16518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 546.427376][T15757] block nbd0: Possible stuck request ffff8880278d7540: control (read@3072,1024B). Runtime 270 seconds [ 546.438632][T16518] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.448006][T16518] Buffer I/O error on dev nbd0, logical block 2, async page read [ 546.455985][T16518] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.465223][T16518] Buffer I/O error on dev nbd0, logical block 1, async page read [ 546.473032][T16518] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.482227][T16518] Buffer I/O error on dev nbd0, logical block 3, async page read [ 546.490144][T16518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 546.499314][T16518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 546.507163][T16518] Buffer I/O error on dev nbd0, logical block 1, async page read [ 546.516174][T16518] Buffer I/O error on dev nbd0, logical block 2, async page read [ 546.524087][T16518] Buffer I/O error on dev nbd0, logical block 3, async page read [ 546.532040][T15757] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.541114][T16518] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 546.550365][T15757] Buffer I/O error on dev nbd0, logical block 0, async page read [ 546.558490][T16518] Buffer I/O error on dev nbd0, logical block 1, async page read [ 546.566748][ T4954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.576184][ T4954] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.585394][ T4954] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.596035][T13730] ldm_validate_partition_table(): Disk read failed. [ 546.604145][T13730] Dev nbd0: unable to read RDB block 0 [ 546.610632][T13730] nbd0: unable to read partition table [ 546.622618][ T4991] udevd[4991]: worker [13730] terminated by signal 9 (Killed) [ 546.630225][ T4991] udevd[4991]: worker [13730] failed while handling '/devices/virtual/block/nbd0' [ 546.792109][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 546.806546][ T80] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.902107][ T12] net_ratelimit: 10 callbacks suppressed [ 549.902125][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 549.922159][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 550.452175][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 550.466498][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 550.982001][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 550.996435][T12536] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 551.512382][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 551.526766][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.042561][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:31:b1:32 [ 552.056910][ T145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01