last executing test programs: 59.307543174s ago: executing program 1 (id=3910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="397e02ed", @ANYRES16=r1, @ANYBLOB="df4800000000000000000c0000000c000380040003800400040018000180140002007369743000"/50], 0x38}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@local, @private, 0x0}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_SOPASS={0xd6, 0x3, "5054d7bca07f398c2cd941665dd61cc76183dbe87410417125728a05ea3db17fe6aa4492a6e6d36fd7211357c76d783ec72574920772a0c5026b765c42e3935c718bfff7323b78d0d49cfb97968f0896660511005a348d2df8f48bc7d40fbac13e114ce95f0e1f63bd1b70f2e4ddb209e0cda89bb363f88af3ecc648789e3a00109d3e9ec5050cfe7c020c25cc2c64f69542b5fe40d92fabeacc9360f02cd4585048ccbfa13e9f3f26efe64b0501655f1a52e68a35de5c273c30878b855a750f1e3bd8619b95953ca9ece934f3b8d09f69bb"}, @ETHTOOL_A_WOL_SOPASS={0x99, 0x3, "4d92539eb9e1342eca104d6a3863d2e6a109a8eb8fa39df6f7292432b6e3fad32c17a4718ed441dc30da2145205b5c62c9636148d85cc822ad90f1ea6165f8e62bf19959b41a589abbcdae077f39c19c85e0408ec0c972d93e9183237eaf19687359a373b53ed197c7f45510c055c114f56ecedbb9387d5ca0308d908fc72eed98977f89a11753dd5ab7da23f5880b4ec11e321ceb"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000801) 55.922165557s ago: executing program 1 (id=3921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 54.781027997s ago: executing program 1 (id=3924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a6970006d616300000005000400000000000900020073797a3100000000200007800c00018008000140000000000800080000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="427c770200021bdd97465800fedbdf2500000500", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002c00128009000100766c616e000000001c000280060001000400000004000380040003800600050088a8000008000500", @ANYRES32=r3, @ANYBLOB="0500110001000000"], 0x5c}}, 0x8000002) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 53.050193519s ago: executing program 0 (id=3930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r1, 0xda8c) accept4(r1, &(0x7f0000000340)=@nfc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_sctp(0x2, 0x400000000001, 0x84) (async) sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) listen(r1, 0xda8c) (async) accept4(r1, &(0x7f0000000340)=@nfc, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) (async) 47.809220593s ago: executing program 1 (id=3939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (rerun: 32) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='lC', 0x2}], 0x1}}], 0x1, 0x24040015) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r7, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdb7c, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24000010) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = socket$inet6(0xa, 0x3, 0x2) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000820603000000000000000000000000000500040000000000100003006269746d61703a706f7274000900020073797a310000000005000500020000000500010006000000"], 0x48}}, 0x80) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x48, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2b}}, 0xe8) 46.893495027s ago: executing program 0 (id=3940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x24000040) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1000"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 40.842297258s ago: executing program 1 (id=3965): r0 = socket(0x2c, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x22000000) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x22000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 40.507819107s ago: executing program 0 (id=3968): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1100000000000300000000000000"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x51}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x128, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff91}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xaa69}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x7ff}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbe}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff9}]}, 0x128}, 0x1, 0x0, 0x0, 0x4010081}, 0x20000040) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffeb2, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) (async) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 39.28537071s ago: executing program 2 (id=3971): r0 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x30, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf25030000004c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c000800ff0300000000000008000100000000000c0003000c00000000000000580007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c9e576667cd733af8aa16018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00030001000000000000000c0008004c080000000000000c0008000800000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000011}, 0x404800c) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000005b00)={'vcan0\x00', 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) sendmmsg(r5, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000007c0)="feaf4b25e506dc", 0x7}, {&(0x7f0000000800)="55fd783abbaff4eacb46eeddbac6d228fdca51e680bddf11f44a64cd804676d3e5310d99f3626085d8924a7728dca6d335c3780dc4a64970e9c2661d802766f0343f69ecb406f9fcdbee4e187c5c9fa585cdbe76c1580f749106639acc25f934a34fdd380c61ee702c6d72a7e485f89b01c581ee1e88a540174be4238fc365204657378243", 0x85}, {&(0x7f00000008c0)="b19ae4b31d6f91c075590b03cebdee13d5e5d44a059b2522ee89cc4e5fc7862a6e0b31c98b61cf535694b9fdce5072fcd28ad73cf2c6f2fd9ccef1c9ec9d1289b33213b83579220803de0210e78e3335537359a5bcd57624aeb3855853cb6740ba1c3f3ddcb2028dab204a0dc54630520e88265b4dfe6c311add612aca14f69bf8a23597ab3e942ef1eb4b7c9fb5d91e268fbe26758b93fb12a18a24cbb96fa746e2bcf62f4c5af7463f4096387805adf79fef75d68cd8141d2b662e9990fc06f992f9268db14ad59a75f82d3e4e2fe3291cf24325db346dafc5bef2a9a194760d5851af409f92e0e3", 0xe9}, {&(0x7f00000009c0)}], 0x4, &(0x7f00000026c0)=[{0x18, 0x114, 0xb3, "e57b4e0ec02b0b"}, {0x98, 0x103, 0x3, "f05b068785627f5887b2aff6275c023d27e937ead53299042a7ad7a3a5b613f8b607da3284dce6cd798a40598b4f9b7cd6b471e10240001f60167889ac4c92937d175f2acf9e34442ac17f0c16fa418ca3bba54b9da55a32222c3a556d9195b48a242648ac789644eb55bc7a0a4c2136e8269d0fb7e680f25cb9b0ad93ca2c44e3fdb3f92950e3ad"}, {0xa0, 0x10b, 0x0, "da2a4d5214641490d3c77487329b1e1b082bae6437c8f460e949ed202864e88a5322d9d526cfce93451d96a438dc359740482cdf98d5dd8936a0d213b0b4dd3338fa2a17f9ad0af704313801ac3fb089b289c07125d2f5b7727812f07420b3321a96a99df24eb0b2dc6fe9db72cb8cc4bef8839228d2ee1f2f41cb26d5c98fea58e276d37bfcb4275835c3e6d2c3"}, {0x38, 0x104, 0x6, "ae7bf282ee2059a478069ff684ca527125421f0d3eba047bf4882de7648fe2c637bee0"}, {0x68, 0x112, 0x7, "52b3bb82f56522fd0f4a91cf7b3171ef60ce484f29df3ae0f57b104f9454de4221a6bba9130ec34aef865b226f9a8e2373b84fb74c7c859419e1f686662b3d081926ce7a953f51279ab2c0c42e9da7f8d0"}, {0x1010, 0x117, 0x5, "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"}, {0x20, 0x29, 0x10, "731097b1e297af96a29d4001dbd6"}, {0x38, 0x115, 0xc31, "e31c5737a0ac6281e79008a509e81a1b4ca317e0c74a08768b4ac65b2c920831cdadd87c3f368b"}], 0x1258}}, {{&(0x7f0000003940)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)="c65034870d942b5a876e8d72d0a5cc847ca19f42dbcd6439e067810ce22c8746adae99067e212faeef81b21a800586cdc15a3d410a56c6cdbac2ba107480a47a7ecf9d0d1e883be56c83bfd1e1ecf2af3efb8a8f5d3cf274a0698045f0328d1a1b9be5a7159dcbaf7fc6ca88d39067f92a9ebcec4cf9720e2d79d9", 0x7b}, {&(0x7f0000003a40)="aba20fd27df31994f4eb64230794a63ce10d4b7149c8026ca4976ed099dc1063108aef1caedd4d9b77d846a6d92e212d8850b4de4aff72c13ec3af90bb183f0a23eebbcd88181183", 0x48}, {&(0x7f0000003ac0)="05c2a6a7e8a9aad4c2544a095d6cbd4dbc3402bb9f20a81832ed7f1bf6ad1401a00d982285c04238d99b72bce37380b8df611808f5534c656d2f4597262c9da7bb2c53543cdcc90465ce731a19d7d250e60e5a11b112780c1840ebb4a448e4160b4a413344ff07b258c913caa09a9202d7d51d268859347439998520a7c5e87354ba8f3943e337025a7404244450a458b8338c092709ab78faf1a7e91c91bbd6e6e6a8e108d3a54e4a92d5b1eb2e7e1e82abc7fbeda2a24da9d0d9b91547a1589755f50d7f73368f5ec3334dda036828d8ff67cf", 0xd4}, {&(0x7f0000003bc0)="c5fa92e66496044f509d81b440111b0dbc3614b5964d40569b3129a05a422c3e3d138145d46b4927d7f001af714031b3fa73656fe6a59aaefac69cc61ac4d3b71de459062ca10c035feafc36dd91d7fd40df5967e0bd4797015fc7f0b579bd60ef9a5b8202c4897c68d3fbadbb1fd61a966e", 0x72}, {&(0x7f0000003c40)="5e815930afedf9002db91bff8f0eeb2080948d237a2769ad9db0d15c5be9ec505b872fe92cd1dc91831ac62d8d92af35e561f58b62ae63f4926f62c48fc59bd67fdf5bdb4afe2b10f0bfa98836e18199509fd812e52a0432d5ac854c183dcd754d56722357f3c9d4694f8053e85011f6e1991dffd09c2bcc81ba64fd8aebdb307fe3026313a8c975b1f9f1052d6be2", 0x8f}, {&(0x7f0000003d00)="70ece7a9e054c2cb446e4f89f022570aa4b9d1e372e7ce2b36a8a1de2a5261fcbf1d65bafc31c13c57dcf9ffce3e477976a1b14ca2f81de2418578677f04db90ffd1025a4303fbd21f2967ad5c73d1397bd4f8c60c9aed1bc719efbca70257968d3dda8de91e3dca713e3a99ce444188380d23eb3bb7de0d91e81f86f63e5231565ef25695e2a9d78ddd54d918488d3ee149587ce309cd46c9044ada05e2fe6f89cff6c4f46251c6529fc8004e93a86619d5ec7bb65947ded4d0f3d55dc103", 0xbf}, {&(0x7f0000003dc0)}, {&(0x7f0000003e00)="67ecb9c30f57aafc9b7122f0be20403cb6454db89d8c04f172be326c7e6e98260ed37102d81dfc1ab290739cf5d4eec2b426b62f9d96100c82f56756561ea3e10d59e9fc4c793290260d2d17282074b3085d", 0x52}], 0x8, &(0x7f0000003f00)=[{0x90, 0x117, 0x7, "c57aba737a813b778f1680df1b41c82db5e9d4648901add3b8e386e8d20ef6a659226b53729f49abb5590744b9d7d1692a5f096e9719bc4d11f27721891955ad071eb5fbd8fd2ea453f442ae31bf667be72b4b7c0784c07f6e398e685f290ed35c7be99208044d8f6d9cd9002c1cfbb87059b661f572365a06"}, {0x98, 0xff, 0x1000, "a85eb1bac2299570e897e7796d1fb1b5edfa4b03131c25ceedd19936d62f627442b5ae65bb435d4c3604019e7f2108b9521e42ca7d2ffe456ae68aedda6716aa148778544cf9ed1b984f4b29aa28999e906bcd31001386feffa438e25423897abe6332e68b615042a0554ab3d2cc0272332efbcbe0c5e540fd5324a688b4e3ba5d7c2d6cc16327"}, {0x78, 0x112, 0x5, "d14c6d70af9edfebddf4fa37a4386214ec880338c6894ce5b6c01c0a1c5d599f0b2c673e197830a081b2beec2a4ddce6a3ac7069fd1bda5bfcc795d649eca37adb58f6b5f102cb967962ada968a25801848ebeb5b2040a1075b1cc7a5e2b18816ccc93"}, {0x108, 0x1c, 0x7fffffff, "d064969353284891a8e4766506b41258b7d24b768005b73891f0f087c890449b5532f1d80c5115e4c04a94c9acecb7ed99bc3f8c99e44857aee50d2c368a57bb11489de7c994bb20301bf4ee8d5b53bc82bd125d43ad7b717b396791ba61da662d5cea7a5b912a33f7596e94c1f3eaa8e7674a3ea8b2a08b9012c9dd2b973c02b6a3603d90dbebd66d8146616e9f2af3cfa5a4d1a47721a0cc14e55fecfffee34c93b4da9fa820edd4d6f924f80af89f1ddf6b8898cd75f318aad3d19b52746c31a0511434ba1c5a6f8d3dde16b8257cdea67ad4c142504ac46ddff16b6f77950c4394c32f4c810ef2a306d43d72459e851301"}, {0xa0, 0x0, 0xc65, "e6b0a498a19dc4dbc2ee47ab318545f97de9ba449b71de4369a5121ab9faf7c08a7739c75eac50333f16b070f5021eadfb7e41c535873aa8edc597233748c5b81ab5b7f7fdf29aa94d201c6832f0e0e759de8e2c413e7586a7d97aa6a95085e82d6b55f9d7b1cc2d276833b394cd7dff351a2d84b131c18ca73a0f1df97d3648f51d6c4cdc27d3a845e3300ba7"}, {0x58, 0x10e, 0x6, "02818108bfb6bb99180f68f5effb4fa0bb3f5c7fb390ed1285e14b37edbcf4cbaa6893392b0b846b48e2bd34b63c6a9a77654bd9cf9d7b1859ac2ef476bbbd6fff14"}], 0x3a0}}, {{&(0x7f00000042c0)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004340)="3f2b5edb1e1574f82088be66f1ba7007908ed77539ceea6ac9c1d3d9f095266fd68e94603f13be", 0x27}, {&(0x7f0000004380)="578ec812b8a991f31c9a8261d3d8e681d971bbcbe7e3816b106eebf98c20f19b740715f38c419a3f2faab523b80cf4f391afe665c16e3164b680759e8a492df6b36a1e6f35aa40af360ae4b14cf072e2548ad01d6a1d", 0x56}, {&(0x7f0000004400)="bca93cbb78e1d6ff8ee95e1d17f0fc44d969d33226f33ad5c71681d63c03bb0ab06ad00434aa0530247f828d520f6696fe65d983e608547fe68a721d7570961b09771cd521c6389d76c01bf4a7ed39146b533fe2ccc6927fe727", 0x5a}, {&(0x7f0000004480)}], 0x4, &(0x7f0000004500)=[{0xa0, 0x1, 0x7ff, "2e280566da7ecefd0d6b8451a694dd805a2e780a75cbebf257e8c95a4490d99ff7872c2a5dbf6ba829d2c031de53c5906a2b8999d01556ae56f3618f48cd0940f94171e109cc70b40f9b661173e838a0f588a8ac411661084dada8c42abb7f38c6d4ecda8703f83c20e420e8f61607979216d7b174483a36b9c3c2c7c97db630239b538a520d5b4e2e"}, {0x90, 0x103, 0x10, "04619b06340d5333cd39c27d38f77a527d33b4f43f3f834fc22974ce87e5ff6287655174eb29c2107003466e5f3b03d0688586bc2ca7f8cacecca3aabb425776e6beb712124a93f46c324c981c1ae6a0f1a5872a1a9eea69a3e784285b8207926a895a105078c44073cffe13f42077553e21711c79d8043c843b0db9"}, {0xa8, 0x103, 0x2, "a8155f891ae434a38dda54e847e319fa00d0361faa18193de3a1b7e0168fb4fd89bc58ca95370d0518f813e20c2fcb2ac0335519c8dfedf963789fa88657238173fc05aa5fd280c88ec9772d31d099d1b5cda778f233c8f99d78f05da9a287d9b0870e2821ee4cea4333a5ff7b979cb85ea32606b230b3c965cce28085395d5c8bfe8af070710bb7ddd73a81880e7f0ffeb41c"}, {0x58, 0x10e, 0x7fffffff, "98434e6b0e0eb68fb4863f7245677dd8a875317278d216bb786ef3ceb3b2df12163a0376e359f14d3c2733ae29f467d46311d7508a1877d78fddac1d6801192cd4c7c1ff74259f"}, {0x60, 0x117, 0xd, "0b01cefed1e22543551b22a9fd84be128d1d20d0cf130799adf7dc787d7906c68bd01f35eeacbf63fc1b20e459da16f4772359bf836d7dc56e7d739576dbc08d937fc5b42d3958c92510"}, {0x1010, 0x108, 0x7, "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"}, {0x98, 0x3a, 0x4, "1baaa0506da0dbc738f55ead7a3f1268a3dfd026b37c7a994ff2472cd15f8b36d27193399b1f95b99e05b37bd2c3cf03a5ba32ead8c8488379fd159bf9a24f89934c4e9888cfce3a16b3cfe7a33430a7e337d4a39a7678dac00d953a5cdd52f111ef1815e00d544fba5cda6b7fa7b91edc372da88861a60a4d31aac33576da3781adc3"}, {0x98, 0x101, 0x7, "1286b9a5f4bb5b92abe4af81563f3580851fe27f702353ca5deecc2b87f3817e987db268998f3bff3870f8daa75cc17ce83a61aad0d79f7731e20878d30dddcfb2453e2cc6b74d90d22b4d90bd60ec8c067b4c68e8d952e4343919bbb732739b0466d6cd2102f6a11862140e598cfc86d95ab853d11d8b08a552c7903e1815f61061be"}], 0x13d0}}, {{&(0x7f0000005900)=@generic={0x11, "5713aacdae519190e274f2b608931ff3018be01c86d678f74ac06b04f7744941508e1666339324bafdde82ed12ac63be1505531739539e44b05556542df60365f6f19d733fb2974df959a7e5c272d48a44271d316a7bf1aa889106cb20bb26c0000511eb9a6ec3c4cea63ab3965c04633e281dfbb4d46e045d17488b6053"}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005980)="79de76ab0f8c161f96d8534153a91343e2ab7bfe88849e7ba4825f3e44e8599feed15ff8db408ce0e293c7ad377cfbb150ff7df30fbd99f1436ffc7d88c5e2cb99edb0f1efbb79a4813c8c89268f515fb7422625ba54f5bb07d5d22b06d80001e0076ce5c3ea60a4dd6ddf2acf5b02fb9fc6ea0763e18dd87826d1a779df7509246c1de3cf4a24e0b92384fbb2500bdaaea5ed888b", 0x95}, {&(0x7f0000005a40)="6624f7fb5cfa9b240b90b65578beabe3432469b362b948f00b93df514494ac781fc3da5b93a66a35019b54fd3e941ef6321b66ec61127130b0dc", 0x3a}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="28000000000000000086a8673dec84e324b09b84bfc1d93bd3c9e1ee4029000000de8acc46b294c93a40f90c3073560b1149b24ad521b666a05384da85c5b4774d091f72ced64521dd8f6b386f0476584c258920156c57c7ac6c6a3dec22a84bad5a6f49636f7179fdd0529331cf550eb0686655ac87407af0ee1e549bab8ccc659fb783c8ed2d09d657d9bfb23c8abf7cbf9192335579913e989f0522b8695914b96d9001ff133d33d7ec00"/193], 0x28}}, {{&(0x7f0000005b40)=@can={0x1d, r8}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005bc0)="c57607a1d5a388c620c2ae80b2268c98709861d78e05f1", 0x17}, {&(0x7f0000005c00)="6b179e64acd0f43dbb18b06701580dad962684c9ed86ede0f857fbb2718c88812ab784b65cc01f58face9b48f5525292a5ad4a4e258830bde2c85c10d77f99c296490e1f53aad301591e8856987f92700575fee99915d548868691d7ea350171bbdf0359bfba819fa4b556af274f6399e39a1cdaf60c06b4415c9fdc1255fa0dd561ddc0d2737fe0af2dd0969f8ae25dd7576f5fc3465833c3405f3f224bc4e7b06ed09d51cae6541873a89d7b97c03c5e212dbb5cff8228664474bc", 0xbc}, {&(0x7f0000005cc0)='m', 0x1}], 0x3, &(0x7f0000005d40)=[{0x20, 0x101, 0xfffffffa, "7fe03436444e28a80fce001168"}], 0x20}}, {{&(0x7f0000005d80)=@sco, 0x80, &(0x7f0000006240)=[{&(0x7f0000005e00)="82309ace701e525004c0228bd112f33a140dc9dbfd937217c878b810a7d9590b4e0a4423a5feab365b10c566f3a9a42fcc8b1afdbc1ec2529bc7d17265ccbe7d84e3f144377f19ad2561f68588cecc41bc14f145fa2231c1d4c8fea131c369e4fedc72118cdc9ff282fa984a1ae789c4d6091245427827456ade8b4c4601decc2cdc838002824327eab3f5817878f49d2eb7fe27", 0x94}, {&(0x7f0000005ec0)="48140055889f14c05b329890dbd1adff93557b20c82a5799c8a846abe7872dd276a6", 0x22}, {&(0x7f0000005f00)="c2b7143d312583031e425adfe936cb4b92fba916789c8ecef8e9b2c1e7b4a30c", 0x20}, {&(0x7f0000005f40)="757f837ddbb6504e6be3cc8af84f", 0xe}, {&(0x7f0000005f80)="88d5b0faff01caa2c2c3d459f2e228924c12c330ba5a595ecddcc5578fd34d50585c8b2e75db5453eb58bd6120f00826557bfa2aee6fc322f3aa0a208454ae7b8a606f5fd9bb85549e98fc494a17593fb48c4cf4398fe7a341dbf1c7220c3b42b4943d0a436f4b85326d82b3226eb6e307321b931b9eabf7e296777e54584f0255963d499f91ce34c73e65b0e97f935ab813c42bf6a97980531874b1d010ef65b90dd5da7cb4f3cfaf6bdeac052ed4b5bd86b2ccc3b28d749ba7a502d2ed39498cf07b5937e1847e2d171269", 0xcc}, {&(0x7f0000006080)="439baaa0c96fddc6510817fc3d1fab51291279ab0a94f52d90e15af1aa4eecba649718414325a810012580983d29843c1a7c34c5da7a9362a466f1a2ecd60fe58b4c6884ddcb95a05585209b2bc852a56eea7fd5038ffa7ca422b48d33282d251737ac75ffd71256ec1428b7df8fdc4c07a87ee13e9fabaea324611d7efdeab88c312865d50670ed92d37fcd328e983f014e828d5e5c8cc9e41854d6189c53a1bd724f63ae2996bf4f4555", 0xab}, {&(0x7f0000006140)="16a8cbf1d00e19268eb573709aa71f57ae639e0c9abae3484bc82a448ca559598dae60e5d3118149b8fb1448248bd97d8f8d7348ab520d5a95621931a6f1667bd17091c9aeccadeef474613d9949d7c53cd23726ff010736d6d40779c6622d51600d814daef0e2429722302f9463433efe777d0596faae8cd81d1844d6db6a23438ae91b9540abdb47f125027a093752eae06fb30c1096887a27b82086bacd436fd78dd2f84f0b0b9d0c474c4e415de3dc8fd7936e82f446ead966daeeff202fd1439eb4c57a", 0xc6}], 0x7, &(0x7f00000062c0)=[{0xe0, 0x104, 0x1, "8b265a988fee17926fae596c9015b74161e12364d6d113b056a8d8bf14b72a8c1412b347b8b5ea96c0ddac66ece9a4f91afd7dd9897deaaba803b61944cf3dfe46ebfbfd89eab1a91e7abb2b73052aeefe7cf9939fcd9f67c340d6ef70b2cc63ec32c74a10315c3df039ecade6b9d1410886b6957ca51a9486b35a13d432b478c3e541e74b9aec57f8b4179e2f153e27ce6449a099050b9b46df764bace4bac69412dae68cbb177549a44534532e64318bdb7076637fa7cc832283e198f8f84770ce62035e68bc8ccda77ddb"}, {0x10, 0x104, 0xfffffffd}, {0x48, 0x118, 0x2, "72c1bfe9d1ef155e488b61093405a2513f7817ea737abac0cb984d0cea35dbb6f5099f16f98bfabe39f55ee562b8cd005000d52cf2927d83"}, {0x110, 0x103, 0x37, "762699d0f1d4a012ba25150ce9154241355a0c4a4d11d4941201dca690fd54ecdf6afed360e346f591d7e57c282a9ba8378dd50a3bf8b8162c925c16645100048c6073e690736588b0b41be6799123d7d9157491c7528901877744906c34df2b3cf460e97f08212a7dfda649d1fe6876010d5cf29fd36e4d93b34bc1884791eb622f4f28eb38cfd85b44a099a693239e88d0609ad47ec3c3e0a1addddde8cb0cc599d8737589ffb20989c1f63d7b50f8d3cafa25167f4218f8c35a6b60369d1e4d14721b326041f024700022285503560b021fa9c28bca5f81b20b384bee04ef078cbf919c35bc9197d45170f6a1e4e7081e8d75c7714748c5d1"}, {0x18, 0x116, 0x0, "3ddfde9f"}], 0x260}}, {{&(0x7f0000006540)=@llc={0x1a, 0x322, 0x1, 0x2, 0x8, 0xf6, @local}, 0x80, &(0x7f0000006700)=[{&(0x7f00000065c0)="fee5dec01d0bb608c109e4475d620cd7c1b989c0c9fd8464a789cdce6df33d39", 0x20}, {&(0x7f0000006600)="183cb61bbe50881cb33cc82d9ac149d9c16fd5523e2d3f72a68092410e45bd5d15e89c63a0994df0677b449144ce875327aa2bd7adcb47747781b1c7bb1ce65f8bc9f390ffdba982a5bf31d360f0a355fbc5c1998782647c9522aa3393726570265a1f8ccd895e3167824da63825c7ebe42bc2af3db4af57572092beb401d0a229e95a51917e0d26abeb0512fc0ee1bf6e814bc4eef6dff8c4b23de6a9c2518497d40fe2157eceb589df441fd2fa004ca494eb35f2a397d37c31309a4058609548a87ae5f4cef6cd53c83be5beb9da9c7b", 0xd1}], 0x2, &(0x7f0000006740)=[{0xb8, 0x103, 0x9, "c8d0a8d65c0093987a2bdbb367ababc015de6abbdc44ac66a66b9c145eb30cacedac1c3e4c101f9424fe6ed317dafd28c39ef7b20da8ef5f634341c849b243dc027f34cdba236412c251738226223f63319dc714bcfc46e68fdec74df86dbce077bee1fcb467d066e27406d4981618bc2173bffeaf840364645936c1a6ab6484c77d6a6f5688ec1084ecf4d9b31667739ea16587439e94eeb3db2f0dcb1fa5a09bc9f8401d6283"}, {0x100, 0x109, 0x1, "32d2781146896057686b4b84aba520ad698fce1c2042b1bac09a71901ace74ce171d7047856b1430d83e4bd5819b23f2d4179eba02b534bc8f97d69d91d1dd77ada9bbc3ad4636bf1b3e53ea633bc20fe69f9bc5df473dd2d99e8e7d2fe70196cf5c6767f936502912002d235e4d8fa81efdf830a4b6f4af6b3d08ef6f9a95fb4156cf428aeffe347802e1cf11ccc8b4ca5c6a991ff7a7dd05d5fa4dd8909f0a1e1a69c80491a5b99a01292547212442f2bbd2cac5be4fcad63c2a59cf2e76693788de81180f5934b1e2fa11d1de408d3ab0761a6ed48c801796ffef406cad5e89ec40c194b62b822a6d871b"}, {0xf0, 0x112, 0xf9, "1b57749f10ee2df4c2732418ca2ecb2079c4bc6a9e37eca678fcc509112133e2fc289c1fe59c4975a82f5068a3a3a72e4fe244a4238d34e5f5723dfc150eca46985a8cf20da6620ed6ffd94df7b6648c14af29945292a180a096040c552b535c6a064466e7721d817d68eb5fb3d52636978cdc7527f139852ea36c497c770505b2f1444cf6584ddc4cb2e92e22484dc72c9d6ea230c8fb2b44e9d1b53758e6cc87403dc78ecaa66430e679260c9250946049b8f3497f5870b2f4776a5c9c0bd1954d69d4d0083703adad9717762b64bb67eb9bdd667b1c228676d5efa1ad33"}, {0x10, 0x107, 0x8}], 0x2b8}}, {{&(0x7f0000006a40)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000006ac0)="c9c6c0a66850e15bf065ecd5bf288ce831103f274d5dd2835a595f6676ac490d75868c19bece47836a64c6e01785d954b3", 0x31}, {&(0x7f0000006b00)="28955a0c972bd64b7cb5db9104c1a675a526ab97ae412b07171c3cd0a3b8a797b792", 0x22}, {&(0x7f0000006b40)="7fd35219a84a96b682bcc7b68bf00b071f87114c840ba1648fe6d0081df6449bc050a39eeaf1b591a8dd44fec6c6e7194a22f3ea6cebe35705dd5f023bff730e3fa8d5ffad7efb6e18010bdb2ba10350da8d03cbab596d4a642a33efc7e8da4a1628cc195b70a0acc61ed1c270c72160b05500a5dd3ccd6bdbd0f86fda0a78fb775d7855b85fde9fe1ab5a84540ba0d7ae6d3bf086dc16b2aa", 0x99}], 0x3, &(0x7f0000006c40)=[{0xe0, 0x114, 0x8000, "61127e1fd2dbcb7f68807e6b920bbd80949dfdd1c11f10d15a9d74b441419b4165c221225f2eb1c3e8930fdc911a1e99f69d2218ad0eb331c9eeb321d91a8f80365201aa4458b73268e0604d66981373e3ddfeea443699c5a2049f2c2fe76a9bc4326c5321307c863ff7cf1722b96cc9987fe464d5708d547dc8b662b427af4993dfc915ac40847881b5c2e09b00ff80d74038d0f0d36c4a282122cd3764a248e3198d88978d92158ee03fd90b02a94fca82074f41121320d258f6ee2a5f2e9481fbb60f64eed913cf44cb"}, {0x28, 0xc30d7e637d940403, 0x5, "0e671f6f3dfc08ead300851b33076e66120ad37326bb"}, {0xa8, 0x10a, 0x1, "4ce2d6473bdf53b516926e67460b875db176389a42d981be677b48009cf65fe8f4a3e40382152d16830937223cfb8898ae279b2cf4e01349a3e2eece9908461cf76e2954a26e80cdfb9be85669b87e02cae02b225d5c455a84ffc207fd2d0095549e7d44f501a8a74c9762da348a454ecba027ffb177c3c8b817197bdbeb7fc926a58bd5e6a56e7b61302ff256b23db3ab59dbf21b5de0"}, {0x60, 0x10e, 0x89ad, "cc3278bb2c04c1264ce55e7b8882ae7530383f0a08075bef7ad01fcd312711e8e0fae823a2b92c0b923992404c1932a7e3a47afaccc4be7a5204d306a98a9a6472e3b62918699083f577d5dcf580"}, {0x20, 0x119, 0xc, "a9668619121cfcbaf4c8"}, {0x50, 0x119, 0x847, "abff0e83ddd39179fa4e468bc14ec30ff3dc2e07270f1e6eb8d0af1604955983ba0b53517513f2346b63a2272313896d36cca88282d07af38d9b279845d8c1"}, {0xc8, 0x109, 0x9a6a, "53b0a559640679ca231a7c4cd271201ee6c4746c3bb20a18f778325b076edc72819d252c040953597e3dfc0ddff8d8697369f582ff9680c9259078cbeac15f8aa4e0ce7eb956cb89112ade604cb727eb4090af199911cfa0e79e24362a95144d24b3155c682675a3cb8d5ccef2504ab76609b8f81da2906b52acf0f60e03cda196fb5d4659a2aa16579d4467b0148a220b4f27527eb6289840d0bcc567a94940a98cb4ff1fd979ff3ba3861ba137f89ba7f3"}, {0x98, 0x29, 0xfffffff9, "294b700508cb2ed65e3d185ecf48885f3d1f9f91938e4757b516aed9882e84c637cf864292626d8e0bd86ca81a609b7d6e769a4aced0b741bc6147ee39678bd97dfee081b7159374991879939e1b6c2622f2a7f52d3163c0e04f7a6719796441765524a0fbf28af045ea2c54f300ca0a2e0a086661b16ecfe7f722f2878418044d212c0be1"}, {0x100, 0x119, 0x9b7, "82e801252803b819d2863e2a73b4eb356ce1413856663074aad572e37302cbbc14fe9c77dd148040f07eb70d26f497db1f9d0b77345a4dd182c104e9a3a267dfbfbcf4db9981627d81f30da6a3d86aed3b70d782a00eabbbeabf8db61b41f02bf8b5d9c5f30927e0d4efb673a5e8d25e0a8388ed45f969b09f62bb8c6107d2437e17e8ad4629a223fc93b0d31c8f08c7ba0404764570701fa732cfff0361bcb839187379d744456362653a240a02038788b74689c57f481b320e657e7ec329b0aeb5c16214a2f876eb0a0d9969b2b2e3416a04210e92c8085e99d5d24a13577aea7d24b6fedd41bafd1f895e64"}, {0x68, 0x111, 0x7, "69c89de6141f409c93f9edea40f06c8fe8126b4153b936a27d41328d5a8a2f7d823dec028bfde4d4091b3155ae740871496b2207cdebe1df3d3db124c87be668d9be2e7bc4ec1ecd004e89938e76cadb17f7"}], 0x548}}], 0x8, 0x800) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x80000000, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r11, 0x29, 0x4a, 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r12) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x8, 0x6}}}, {{@uncond, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x6b, 0x0, 0x5, 0x401, 0x0, 0x7, 0x5}}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x1, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000440)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r1) ioctl$SIOCSIFHWADDR(r14, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300502800"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r12) 39.267881368s ago: executing program 1 (id=3972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x43) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a000000000000000000000000000020000000000a010843f6eb6be61c83d91a0000000900010073797a310000000048000000030a010100000000000000000a000000080007006e61740014000480080002400000000008000140000000010900010073797a31000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x0, 0x10000, 0x1, 0x2}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x40, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1, 0x3}}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x7, 0x100, 0x2fa, 0x18, 0x9, 0x795, 0xff}, 0x1c) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) pwritev(r1, &(0x7f0000000c80)=[{&(0x7f0000000500)='\x00!G', 0x3}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_generic(0x10, 0x3, 0x10) 38.530630534s ago: executing program 4 (id=3974): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 37.69445051s ago: executing program 2 (id=3976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 37.56690124s ago: executing program 4 (id=3977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) 37.179071641s ago: executing program 0 (id=3978): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}, r2}}}], 0x28}}], 0x1, 0x4001c00) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0xa0, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_MPLS={0xffffffffffffff57}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0xa0}}, 0x8000) 37.033633714s ago: executing program 2 (id=3979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7801}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x80087601, 0x0) close(r4) getpeername$unix(r1, &(0x7f00000001c0), &(0x7f0000000280)=0x6e) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x24040000) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0x0, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc}, {}, {0x7, 0x300}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20045080}, 0x140c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 36.951797129s ago: executing program 4 (id=3980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x400c092) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) 35.540853568s ago: executing program 4 (id=3983): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"a8207f7c8ecead1a07556e2f08774452", 0x0, r0, {0x6, 0xa}, {0x6}, 0x8, [0x1, 0x8000000000000001, 0x6, 0x3, 0xf, 0x9, 0x5, 0xf, 0x3, 0x200, 0x5, 0xee, 0x70, 0xa2b5, 0xd4bd, 0xd]}) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x3, 0x5, 0x6, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0xfffffffe, 0x5}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000680)={@initdev, @multicast2, 0x0}, &(0x7f00000006c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x6, 0x1, 0x5, @mcast2, @private2, 0x1, 0x80, 0x9, 0x3}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000380), 0xc, &(0x7f0000001280)={&(0x7f00000007c0)={0xa90, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x89, 0x5, "9e519c4aa260905d617c83edd4e691a02ccdc6358d16133ade5aac69f193157cc7054544529650f527645a5a1b7cce0872b664cda476e1620f580dbbfcb9032ca4c6d290be772dae86bc81e3550cd157a6d477d26cb87bc4aa42822ef03e1e15f79cc93acde4021b3c471ea4763b3f0849eee6ab19ab938cb7c3ed475d5c06f3a5f8f526f7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "79bf1c7a0d8de387ba6a8c683a62493de4e211a4e22126662fb7983e4d37214892b381f99e75e4023fa5e8cd51390267f3f5448d4ad8a6005965e5ee2f948aa0b08c3016c14b05c5e18f081afc0a15e538829248bef009010d515fb163506f33c583822d40b501fd0f1f6add7170b0cc1c222468d818c6dc8d0282534d9a03eaa8752ed3bc0d34692d270b6d60ac0bc13093faad0d8ca1c45911d8b30d24e773c169d03da626cb21dfc96ee7f56d86e3ca3d8a0e81935b46eb7013c8be8b4729f823b986560be8d46de0213ad9adb0d0859704a8fda0b7fb8c6685"}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "f614570d7e91524bca78e55f1552644a29017ee0624a63d2ef5e7d95cecf7f68a5d1a8924e73ee2ba0122823661b3b2217c176b2de8ac4acd82c98d567acb3d825752171af804e364ecc4b0ee7dd2c240d6a7422"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x16, 0x5, "834c103d187daf8115552084e8d14ccd4274"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-.:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ')\'$[$#({$}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff09ae}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@#)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[*[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '})\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5cbc}]}]}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "c3484be2d373027aa4c6832266f4d637168310fc4ca5f9637385947e4823fc97604b534fcf28146d2b05ce504d6912b661393a6455513274d24eedeab28ae87fb97c98b651fa4fa2f5c2c505e96a0d11b7d220898d72d566b7ff20ff53aa14ec7e28c73e3f21bfc1cc7cd62c129e2b8676d55d2fe901bb73e8bb7d981e9dc8ddc337ad34e6fbc041d7a25dfccd588cf4845ca89935aa0adab6c32af67fcaea948a8f24e090d82f8c37595a02f2f1cfe171817c9438f3f290edc0f04249754f36413af40eae8a60d35f7a0d2a2b5ef6149effda7354de"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "73bf9dea74e03a82e2bce562cc606f61529a6f20777aa9daaf2e7decf943d8a456864dd2dc485a8dd7909893fff26afe680073b91ec3192354eb3e881b618a818f66e34e9085d93a03c0a0916225a5c5755f0ee7d157836131440685d7bafa1a616a1bdf774bcf9dc847b44fa5860508209ae52a9e19aae5d19ad83cf56623ff0b5bf63c7fccd23459d4a2574635979163e5716eab7a740c4a854b440919d50e51c3ae38b71e2c2e457732e99455694c033c5ef2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x47c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, 'k'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x160fcb30}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\\x93({\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff80}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ')]%/$),/[.\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':(/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.-&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.@W]$\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "2119d1b1d2a0faf35264a2cf487ecbacb573ab39d5a09dd9f36d2e1fe3f574d60d1c3effd5001ba6e866b28d399a7d480a35d51b91c33c7ba02e3017e3b198eabe464016f8de236b651f092c83e4c16dc470e7b87eb7576086aa1dc3a8e1da2403c7ea9ddd240bf813ea81045060848a14e00840449325e16c0b0207a63923b3af96937659c74f7f4207fb5b0892230b278d89"}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "c8bcda9a943cb842478af0b057a1b6dcdabffd7c490cd33abe4d93f829191ad365c9ef7c185c24c0ff29b404ff151a0f972cabc3b904773dbd0736518f0918e350a9980aa60eaf0c1d0b5dbc2d505a199d490c8b403527d8919483e76f82c5235f9bca6b9d6e413b5a9e1b236f0ddba3c55a758a8bbd37123f127b115417543a735df2326b85e83888200285bc8d27180750e82d17"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',#..[\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x216fb829}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '$.--/+$[^^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ').\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1e, 0x2, '[.(7:&}\\*&%\\^@#].)+${\'+\\%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe402}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6b}]}]}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$[%\xde&\xf6*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&\\]-/\xfc{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/(y&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\f\\\xcd*-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{:+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'#/-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}/,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35a69e79}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0xa90}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000001300)) r11 = epoll_create(0xe5) (async) r12 = accept$inet(r1, &(0x7f0000001340)={0x2, 0x0, @multicast1}, &(0x7f0000001380)=0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000013c0)={'macvlan1\x00'}) (async) ioctl$XFS_IOC_INUMBERS(r11, 0x80405880, &(0x7f0000001400)={{0xffff, 0x7, 0xff, 0x9, 0x8}}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000001540)={r1, &(0x7f0000001440)='batadv0\x00', 0x105200, &(0x7f0000001480)={@_ha_fsid={[0x10000, 0x8]}, {0x48ec, 0x6, 0x4f095d16, 0x792}}, 0x4, &(0x7f00000014c0), &(0x7f0000001500)=0xec1f}) write$cgroup_subtree(r13, &(0x7f0000001580)={[{0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'pids'}]}, 0x12) (async) getpeername$llc(r13, &(0x7f00000015c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001600)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl2\x00', r3, 0x29, 0x9, 0xa, 0xb3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x707, 0x10, 0x101, 0x1}}) (async) ioctl$FICLONE(r11, 0x40049409, r1) (async) connect$inet(r12, &(0x7f0000001700)={0x2, 0x4e23, @loopback}, 0x10) (async) ioctl$sock_inet_SIOCADDRT(r13, 0x890b, &(0x7f0000001740)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xb, 0x4, 0x1ff}) (async) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f00000017c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x0, 0x1, 0x0, 0x2, 0x8, 0xfffffffffffffff9}, {0x10000, 0x2a7a, 0x40, 0x5, 0x2, 0xfc}], ['\x00', '\x00', '\x00', '\x00']}) (async) setsockopt$RXRPC_SECURITY_KEY(r13, 0x110, 0x1, &(0x7f0000001980)='&', 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f00000019c0)={'ip6_vti0\x00', r3, 0x2f, 0x0, 0x8, 0x5, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7, 0x1, 0x5, 0x5}}) (async) write$cgroup_subtree(r13, &(0x7f0000001a80)={[{0x2d, 'hugetlb'}]}, 0x9) 35.103130442s ago: executing program 4 (id=3985): r0 = socket$pppl2tp(0x18, 0x1, 0x1) listen(r0, 0xe14f) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x2, {0xa, 0x4e23, 0x0, @loopback, 0x1}}}, 0x3a) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a28000000060a0b040000000000000000020000001400048010000180070001006374000004000280140000001100010000000000000000000000000a370f389e9f540d7bad0672a1"], 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000004800)={'veth0_vlan\x00', 0x133}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000080)={0x8, 'veth1_to_bond\x00', {'wg2\x00'}, 0x40}) 33.816966038s ago: executing program 4 (id=3987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) 33.318903603s ago: executing program 3 (id=3988): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) (async) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) unshare(0xc040480) unshare(0xc040480) 33.03988624s ago: executing program 3 (id=3989): r0 = socket$kcm(0x2, 0xa, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) recvmsg(r2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) 32.883944539s ago: executing program 3 (id=3990): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0xf8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13340000000000005ab9594700"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="000000000000e2ff0fff0000000100"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00e200"}]}]}, 0xf8}}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 32.67640518s ago: executing program 0 (id=3991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 32.59557774s ago: executing program 2 (id=3992): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x6b, "ab4d96f55b48c85ac41a66c1ffd361c2c541c270ec5e35e0dad1e8d3bf752db44c3f7c49140fc348dc20bbb36001719a9dd00f91a7970075dca85da1e81db2a7465f4acafe50deda3419096b9c6f3b39dcf5886145bda54c01aeb7fd284c5541da09ca5f64db049241ee8c"}, &(0x7f0000000240)=0x73) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x9}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x9, 0x3, 0x5, 0x7, 0x783a, 0x1ff, 0x5, {r3, @in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x0, 0x1, 0x6, 0x8a3b}}, &(0x7f0000000340)=0xb0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000840)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.21060724s ago: executing program 0 (id=3993): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@multicast2, @broadcast, 0x0}, &(0x7f0000000380)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x0, 0x24}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000240), 0x80000dd, 0x10003, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000000c0)=""/123) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(0x4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1, 0x2, 0x8, 0x100, 0x8, 0x10100, r2}) 32.191823381s ago: executing program 3 (id=3994): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001300)={0x0, 0x6e2}, &(0x7f0000001340)=0x8) 32.191217876s ago: executing program 2 (id=3995): r0 = socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) getpid() getpid() r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000180)={@private=0xa010102, @multicast1, 0x0, "e025c8c7d123d7202bb962d1937ce7cce31feaf0eb5286672dd6913561a22706", 0x7, 0x10001, 0x9, 0x81}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000a80)={'sit0\x00', r7, 0x700, 0x7f00, 0x7fc, 0x3, {{0x3f, 0x4, 0x1, 0x3d, 0xfc, 0x67, 0x0, 0x6, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x20, 0x96, 0x0, 0x4, [0xd, 0x7, 0x9, 0xb, 0xa, 0x2, 0x0]}, @ssrr={0x89, 0x7, 0x32, [@private=0xa010102]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2c, 0x1, [{0x5, 0x10, "7af4218baba1070b6f53fb35eb26"}, {0x1, 0x8, "2ca5e8fb1554"}, {0x7, 0x3, "93"}, {0x1, 0xb, "ef35b8e1d0ce9a9bcd"}]}, @timestamp_addr={0x44, 0x4c, 0x35, 0x1, 0x4, [{@broadcast, 0x1000000}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x3}, {@loopback, 0xa3}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@local, 0x3}, {@empty}, {@loopback, 0x675}, {@remote, 0xa}, {@multicast1, 0x10001}]}, @end, @timestamp_prespec={0x44, 0x24, 0xd8, 0x3, 0x6, [{@empty}, {@remote, 0x5}, {@loopback, 0x200}, {@multicast1, 0x5}]}, @rr={0x7, 0x1f, 0x53, [@broadcast, @empty, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001a0008002bbd7000fbdbdf250a800004fe03000400040000080010000600000008000400", @ANYRES32=r8, @ANYBLOB="18001680140003000000008000"/24], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d00000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 31.648822361s ago: executing program 3 (id=3996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.613009905s ago: executing program 2 (id=3997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xa, @loopback, 0x2}, 0x1c) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) sendmmsg$inet6(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="9f92c2151cb1", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a80)="ec", 0x1}], 0x1}}], 0x2, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) 27.500378479s ago: executing program 3 (id=3998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010304000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}}, 0x0) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 0s ago: executing program 32 (id=3972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x43) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a000000000000000000000000000020000000000a010843f6eb6be61c83d91a0000000900010073797a310000000048000000030a010100000000000000000a000000080007006e61740014000480080002400000000008000140000000010900010073797a31000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x0, 0x10000, 0x1, 0x2}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x40, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1, 0x3}}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x7, 0x100, 0x2fa, 0x18, 0x9, 0x795, 0xff}, 0x1c) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) pwritev(r1, &(0x7f0000000c80)=[{&(0x7f0000000500)='\x00!G', 0x3}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 349.409175][T14429] sit3: entered allmulticast mode [ 349.422640][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2348'. [ 349.480811][T14418] bond8: (slave geneve4): making interface the new active one [ 349.499644][T14418] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 349.558597][T14412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.587856][T14431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2352'. [ 349.620878][ T733] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 349.658505][ T733] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 349.792666][ T733] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 349.821097][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 349.832099][ T733] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 350.418820][T14465] syzkaller1: entered allmulticast mode [ 350.567129][T14473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2362'. [ 350.594655][T14473] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2362'. [ 350.610486][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 350.816624][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 350.835055][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2364'. [ 350.902733][T14483] nbd: nbd1 already in use [ 351.028117][T14492] netlink: 'syz.4.2368': attribute type 3 has an invalid length. [ 351.052123][T14494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'. [ 351.224381][T14500] ip6tnl3: entered allmulticast mode [ 351.859079][T14523] netlink: 'syz.1.2381': attribute type 6 has an invalid length. [ 351.879326][T14523] netlink: 'syz.1.2381': attribute type 3 has an invalid length. [ 351.907099][T14523] net_ratelimit: 362 callbacks suppressed [ 351.907114][T14523] netlink: get zone limit has 4 unknown bytes [ 352.186010][T14536] sctp: [Deprecated]: syz.4.2386 (pid 14536) Use of int in max_burst socket option. [ 352.186010][T14536] Use struct sctp_assoc_value instead [ 352.186052][T14513] netlink: 'syz.2.2376': attribute type 6 has an invalid length. [ 352.239270][T14538] xt_hashlimit: size too large, truncated to 1048576 [ 352.250405][T14531] netlink: 'syz.1.2384': attribute type 3 has an invalid length. [ 352.311751][T14531] bridge_slave_0 (unregistering): left allmulticast mode [ 352.356115][T14531] bridge_slave_0 (unregistering): left promiscuous mode [ 352.407954][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.612025][T14583] ip6t_srh: unknown srh match flags 4000 [ 353.720860][T14586] openvswitch: netlink: Flow actions attr not present in new flow. [ 353.739005][T14587] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.231953][T14597] xt_hashlimit: size too large, truncated to 1048576 [ 354.624494][T14615] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 354.665668][T14615] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 354.671904][T14616] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 355.375609][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.283776][T14680] pimreg3: entered allmulticast mode [ 356.342860][T14687] __nla_validate_parse: 6 callbacks suppressed [ 356.342892][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 356.349202][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 356.432085][T14687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2427'. [ 356.623466][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'. [ 356.919278][T14715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2435'. [ 357.307676][T14732] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2441'. [ 358.054486][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2446'. [ 358.103334][T14760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 358.490109][T14774] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2452'. [ 358.670628][T14786] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 358.694623][T14787] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 359.025396][T14802] netlink: 'syz.0.2457': attribute type 142 has an invalid length. [ 360.422008][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 360.550430][T14881] netlink: 'syz.0.2479': attribute type 23 has an invalid length. [ 360.889669][T14892] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 361.410407][T14921] 8021q: VLANs not supported on wg0 [ 361.450325][T14925] netlink: 'syz.1.2495': attribute type 83 has an invalid length. [ 361.482601][T14930] netlink: 'syz.1.2495': attribute type 83 has an invalid length. [ 361.483371][T14928] ip6t_srh: unknown srh invflags 4000 [ 361.580494][T14937] netlink: 'syz.3.2498': attribute type 58 has an invalid length. [ 361.629748][T14937] __nla_validate_parse: 4 callbacks suppressed [ 361.629778][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2498'. [ 362.099569][T14958] can: request_module (can-proto-0) failed. [ 362.148677][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'. [ 362.369963][T14973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2510'. [ 362.534323][T14983] TCP: TCP_TX_DELAY enabled [ 362.580526][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2513'. [ 362.915601][T15001] netlink: 'syz.1.2517': attribute type 21 has an invalid length. [ 362.949548][T15001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2517'. [ 362.984968][T15005] syzkaller0: entered promiscuous mode [ 362.997962][T15005] syzkaller0: entered allmulticast mode [ 363.142943][T15009] nbd: must specify an index to disconnect [ 363.256752][T15015] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 363.447496][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 363.600131][T15021] macvtap1: entered promiscuous mode [ 363.620264][T15021] vlan0: entered promiscuous mode [ 363.633367][T15021] macvtap1: entered allmulticast mode [ 363.648591][T15021] vlan0: entered allmulticast mode [ 363.659902][T15021] veth0_vlan: entered allmulticast mode [ 363.678934][T15024] netlink: 'syz.4.2527': attribute type 12 has an invalid length. [ 364.170787][T15059] netlink: 'syz.3.2535': attribute type 2 has an invalid length. [ 364.216366][T15059] netlink: 'syz.3.2535': attribute type 11 has an invalid length. [ 364.237463][T15059] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2535'. [ 365.450109][T15077] netlink: 185936 bytes leftover after parsing attributes in process `syz.4.2540'. [ 365.663370][T15079] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 365.702202][T15079] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 365.910116][T15083] bridge10: entered promiscuous mode [ 365.927936][T15083] bridge10: entered allmulticast mode [ 366.637956][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 366.679427][T15104] netlink: 'syz.0.2551': attribute type 30 has an invalid length. [ 366.734293][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 366.785677][T15112] netlink: 'syz.0.2551': attribute type 30 has an invalid length. [ 367.153071][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 367.308083][T15123] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 367.338992][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 367.748053][T15135] x_tables: duplicate entry at hook 1 [ 367.803744][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 367.843727][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 368.276442][T15146] syzkaller1: entered promiscuous mode [ 368.312748][T15146] syzkaller1: entered allmulticast mode [ 368.766272][T15157] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.788186][T15157] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 368.817071][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 368.826103][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 369.436596][T15173] openvswitch: netlink: Message has -2 unknown bytes. [ 369.779887][T15197] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 369.860869][T15197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2572'. [ 369.896830][T15199] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2573'. [ 369.950356][T15197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2572'. [ 369.974899][T15201] siw: device registration error -23 [ 370.086572][T15197] erspan0: entered promiscuous mode [ 370.095388][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2573'. [ 370.095771][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.119399][T15197] gretap0: entered promiscuous mode [ 370.176955][T15201] »»»»»»: renamed from lo (while UP) [ 370.295185][T15215] xfrm1: entered promiscuous mode [ 370.324727][T15215] xfrm1: entered allmulticast mode [ 370.610351][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.652050][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.672022][T15232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.675683][T15230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.692566][T15234] netlink: 'syz.4.2581': attribute type 13 has an invalid length. [ 370.738812][T15234] erspan0: refused to change device tx_queue_len [ 370.748946][T15234] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 370.822320][T15202] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 371.153006][T15257] netlink: 'syz.1.2586': attribute type 3 has an invalid length. [ 371.534570][T15269] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 371.627359][T15274] netlink: 'syz.2.2589': attribute type 24 has an invalid length. [ 371.717118][T15280] __nla_validate_parse: 2 callbacks suppressed [ 371.717135][T15280] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2591'. [ 372.050050][T15297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2594'. [ 372.099674][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 373.146400][T15352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2610'. [ 373.162718][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 373.433251][T15369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2613'. [ 373.539231][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 373.737596][T15385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2617'. [ 373.752492][T15378] netlink: set zone limit has 4 unknown bytes [ 373.761116][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2618'. [ 373.786834][T15378] netlink: zone id is out of range [ 373.803917][T15378] netlink: zone id is out of range [ 373.813904][T15387] netlink: 'syz.3.2618': attribute type 4 has an invalid length. [ 373.826653][T15388] netlink: 'syz.3.2618': attribute type 4 has an invalid length. [ 373.846941][T15378] netlink: zone id is out of range [ 373.868402][T15379] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 373.868402][T15379] Please contact the netfilter-devel mailing list or update your nftables rules. [ 373.893190][ T5814] lo speed is unknown, defaulting to 1000 [ 373.927608][T15378] netlink: zone id is out of range [ 373.941246][ T2170] lo speed is unknown, defaulting to 1000 [ 373.968632][T15378] netlink: zone id is out of range [ 373.995318][T15378] netlink: zone id is out of range [ 374.001319][T15378] netlink: zone id is out of range [ 374.131217][T15401] wg1: entered allmulticast mode [ 374.576410][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 90 seconds [ 374.714290][T15430] ipt_REJECT: ECHOREPLY no longer supported. [ 374.829370][T15415] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 374.853039][T15415] bond6 (unregistering): Released all slaves [ 375.021024][T15441] netlink: 'syz.4.2633': attribute type 4 has an invalid length. [ 375.082201][T15445] netlink: 'syz.4.2633': attribute type 4 has an invalid length. [ 375.185960][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 375.355781][T15452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2637'. [ 375.410983][T15454] xt_hashlimit: size too large, truncated to 1048576 [ 375.499149][T15456] geneve1: entered promiscuous mode [ 376.045991][T15488] net_ratelimit: 114 callbacks suppressed [ 376.046009][T15488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.576203][T15507] syzkaller0: entered promiscuous mode [ 376.588252][T15507] syzkaller0: entered allmulticast mode [ 376.852736][T15531] __nla_validate_parse: 4 callbacks suppressed [ 376.852769][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 376.911766][T15534] IPVS: length: 160 != 24 [ 377.380348][T15553] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2674'. [ 377.409751][T15553] netlink: ct family unspecified [ 377.640247][T15558] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 377.654354][T15558] bond6 (unregistering): Released all slaves [ 377.701786][T15565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2678'. [ 377.712982][T15567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2678'. [ 377.994743][T15585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 378.005961][T15585] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2685'. [ 378.039489][T15588] netlink: 'syz.0.2686': attribute type 32 has an invalid length. [ 378.049752][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 378.071188][T15588] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 378.258847][T15603] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2689'. [ 378.288154][T15604] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 378.418286][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.429024][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.599191][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 378.637919][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 379.371657][T15650] netlink: 'syz.4.2698': attribute type 2 has an invalid length. [ 379.382299][T15650] netlink: 'syz.4.2698': attribute type 2 has an invalid length. [ 380.095089][T15676] rdma_op ffff888056f191f0 conn xmit_rdma 0000000000000000 [ 380.279819][T15680] netlink: 'syz.3.2709': attribute type 16 has an invalid length. [ 380.567293][T15696] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 380.601385][T15696] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 380.636261][T15696] gretap3: entered promiscuous mode [ 380.647166][T15696] gretap3: entered allmulticast mode [ 381.045174][T15732] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 381.360661][T15732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.410767][T15732] bond7: (slave bond8): making interface the new active one [ 381.430708][T15732] bond7: (slave bond8): Enslaving as an active interface with an up link [ 381.499251][T15758] bond9 (unregistering): Released all slaves [ 381.551454][T15753] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 381.595762][T15755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.793027][T15770] veth0: entered promiscuous mode [ 381.870837][T15770] bridge9: entered promiscuous mode [ 381.906719][T15770] bridge9: entered allmulticast mode [ 381.919860][T15781] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 381.956075][T15781] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 381.959057][T15777] __nla_validate_parse: 15 callbacks suppressed [ 381.959086][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2732'. [ 382.128016][T15764] veth0: left promiscuous mode [ 382.133360][T15775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 382.433735][T15799] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 382.478003][T15801] xt_HMARK: proto mask must be zero with L3 mode [ 382.558424][T15799] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 382.736118][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 382.764749][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 382.789209][T15812] geneve2: entered promiscuous mode [ 383.220567][T15846] netlink: 'syz.0.2752': attribute type 18 has an invalid length. [ 383.775908][T15875] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2760'. [ 383.915134][T15875] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 383.943657][T15875] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 384.043042][T15883] xt_hashlimit: size too large, truncated to 1048576 [ 384.733682][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2768'. [ 384.756652][T15912] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 384.766666][T15912] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2770'. [ 384.776575][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 384.843748][T15913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2769'. [ 384.902811][ T9] lo speed is unknown, defaulting to 1000 [ 385.299018][T15935] syzkaller0: entered promiscuous mode [ 385.310550][T15935] syzkaller0: entered allmulticast mode [ 385.767319][T15963] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2784'. [ 386.298598][T15989] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 386.648563][T15989] bond9: entered promiscuous mode [ 386.662280][T15989] 8021q: adding VLAN 0 to HW filter on device bond9 [ 386.983674][T16018] __nla_validate_parse: 6 callbacks suppressed [ 386.983719][T16018] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2796'. [ 387.019889][T16022] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 387.049734][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.080878][T16026] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2800'. [ 387.100543][T16016] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.443842][T16022] 8021q: adding VLAN 0 to HW filter on device bond6 [ 388.060879][T16067] netlink: 'syz.1.2810': attribute type 2 has an invalid length. [ 388.095209][T16067] netlink: 'syz.1.2810': attribute type 2 has an invalid length. [ 388.188002][T16064] No such timeout policy "syz1" [ 388.284644][T16073] syzkaller1: entered promiscuous mode [ 388.315336][T16073] syzkaller1: entered allmulticast mode [ 388.354163][T16080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2812'. [ 388.380397][ T30] audit: type=1107 audit(1779700414.040:4): pid=16072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 388.516848][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2813'. [ 389.000369][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2815'. [ 389.124366][T16103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.429093][T16120] rdma_rxe: rxe_newlink: failed to add lo [ 389.611272][T16118] lo speed is unknown, defaulting to 1000 [ 389.702600][T16136] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 389.969314][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 390.050934][T16143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.179562][T16158] syzkaller1: entered promiscuous mode [ 390.210134][T16158] syzkaller1: entered allmulticast mode [ 390.274262][T16158] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 390.320423][T16158] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 390.324917][T16163] netlink: 'syz.0.2832': attribute type 1 has an invalid length. [ 390.343574][T16158] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 390.388533][T16163] netlink: 1584 bytes leftover after parsing attributes in process `syz.0.2832'. [ 390.879308][T16184] netlink: 'syz.4.2836': attribute type 21 has an invalid length. [ 390.880868][T16186] netlink: 'syz.4.2836': attribute type 21 has an invalid length. [ 391.206738][T16198] netlink: 'syz.4.2840': attribute type 3 has an invalid length. [ 391.640727][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 391.801457][T16210] h: entered promiscuous mode [ 391.860993][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2846'. [ 391.907100][T16210] netlink: 'syz.1.2845': attribute type 11 has an invalid length. [ 391.918735][T16219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2846'. [ 391.977748][T16210] netlink: 'syz.1.2845': attribute type 5 has an invalid length. [ 392.036305][T16210] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.2845'. [ 392.142348][T16229] bond10: entered promiscuous mode [ 392.241517][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 392.280404][T16237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2848'. [ 392.317793][T16237] nbd: must specify at least one socket [ 392.619984][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 392.839191][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 392.890949][T16270] openvswitch: netlink: Missing key (keys=40, expected=80) [ 392.974752][ T30] audit: type=1804 audit(1779700418.630:5): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2857" name="/newroot/566/cgroup.controllers" dev="tmpfs" ino=2904 res=1 errno=0 [ 392.999223][ T30] audit: type=1800 audit(1779700418.630:6): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2857" name="cgroup.controllers" dev="tmpfs" ino=2904 res=0 errno=0 [ 393.062180][T16277] vlan0: Caught tx_queue_len zero misconfig [ 393.211924][T16288] gtp0: entered promiscuous mode [ 393.234181][T16288] gtp0: entered allmulticast mode [ 393.271157][T16299] netlink: 'syz.4.2860': attribute type 8 has an invalid length. [ 393.282791][T16299] sch_fq: defrate 0 ignored. [ 393.634195][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.646407][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.656965][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.671518][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.684583][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.819501][T16313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2866'. [ 393.829958][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 394.228251][T16308] lo speed is unknown, defaulting to 1000 [ 394.707538][T16308] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.714922][T16308] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.722943][T16308] bridge_slave_0: entered allmulticast mode [ 394.730840][T16308] bridge_slave_0: entered promiscuous mode [ 394.740821][T16308] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.748902][T16308] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.756792][T16308] bridge_slave_1: entered allmulticast mode [ 394.764404][T16308] bridge_slave_1: entered promiscuous mode [ 394.803323][T16308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.816515][T16308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.855261][T16308] team0: Port device team_slave_0 added [ 394.863882][T16308] team0: Port device team_slave_1 added [ 394.897690][T16308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.904641][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.931215][T16308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.943693][T16308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.951497][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.978185][T16308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.039283][T16308] hsr_slave_0: entered promiscuous mode [ 395.046566][T16308] hsr_slave_1: entered promiscuous mode [ 395.053358][T16308] debugfs: 'hsr0' already exists in 'hsr' [ 395.062457][T16308] Cannot create hsr debugfs directory [ 395.225209][T16308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.284768][T16308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.340812][T16308] bond0: (slave netdevsim1): Releasing backup interface [ 395.351956][T16308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.447185][T16308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.776262][ T5642] Bluetooth: hci5: command tx timeout [ 395.894205][T16278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.943447][T16308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.000883][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.035378][T16308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.079454][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.102000][T16308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.153451][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.188576][T16308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.221765][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.237165][T16345] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2873'. [ 396.247683][T16345] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2873'. [ 396.260234][T16345] netlink: 'syz.1.2873': attribute type 6 has an invalid length. [ 396.268956][T16345] netlink: 'syz.1.2873': attribute type 5 has an invalid length. [ 396.277344][T16345] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2873'. [ 396.333664][T16341] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 396.358478][T16341] bond7 (unregistering): Released all slaves [ 396.423793][T16347] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 396.739418][T16308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.792662][T16308] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.822086][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.829268][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.879992][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.887191][ T733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.278623][T16394] __nla_validate_parse: 4 callbacks suppressed [ 397.278641][T16394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2882'. [ 397.354257][T16393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2882'. [ 397.856025][ T5642] Bluetooth: hci5: command tx timeout [ 398.395310][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 398.542009][T16451] netlink: 'syz.4.2894': attribute type 1 has an invalid length. [ 398.602514][T16308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.835893][T16308] veth0_vlan: entered promiscuous mode [ 398.843166][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 398.863461][ T1168] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.889604][T16455] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2896'. [ 398.900305][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 398.902489][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.902525][ C0] bridge0: topology change detected, propagating [ 398.902872][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.902888][ C0] bridge0: topology change detected, propagating [ 398.946987][T16308] veth1_vlan: entered promiscuous mode [ 398.997758][T16465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2898'. [ 399.043921][T16308] veth0_macvtap: entered promiscuous mode [ 399.066339][T16465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2898'. [ 399.086227][T16308] veth1_macvtap: entered promiscuous mode [ 399.137778][T16308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.194793][T16308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.241821][ T6589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.294063][ T6589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.313828][ T6589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.337142][ T6589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.392395][T16471] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 399.406389][T16471] bond11 (unregistering): Released all slaves [ 399.535646][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.768387][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.811760][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.911201][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.932194][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.995510][ T5642] Bluetooth: hci5: command tx timeout [ 400.045345][T16481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2902'. [ 401.090288][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2913'. [ 401.603404][T16549] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2921'. [ 401.653650][T16554] netlink: 'syz.1.2922': attribute type 11 has an invalid length. [ 401.702968][T16554] netlink: 'syz.1.2922': attribute type 11 has an invalid length. [ 402.015700][ T5642] Bluetooth: hci5: command tx timeout [ 402.124978][T16570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.371938][T16585] __nla_validate_parse: 4 callbacks suppressed [ 402.371956][T16585] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2931'. [ 402.624374][ T30] audit: type=1804 audit(1779700428.280:7): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2933" name="/newroot/562/cgroup.controllers" dev="tmpfs" ino=2871 res=1 errno=0 [ 402.651587][T16592] netlink: 'syz.1.2934': attribute type 1 has an invalid length. [ 402.675362][T16590] netlink: 'syz.0.2932': attribute type 58 has an invalid length. [ 402.704814][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2932'. [ 402.725054][T16594] netlink: 'syz.4.2935': attribute type 1 has an invalid length. [ 402.737259][ T30] audit: type=1800 audit(1779700428.280:8): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2933" name="cgroup.controllers" dev="tmpfs" ino=2871 res=0 errno=0 [ 402.779422][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 402.793063][ T30] audit: type=1804 audit(1779700428.310:9): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2933" name="/newroot/562/cgroup.controllers" dev="tmpfs" ino=2871 res=1 errno=0 [ 403.089153][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 403.217514][T16604] syz_tun: entered promiscuous mode [ 403.464439][T16623] vlan3: entered allmulticast mode [ 403.467350][T16629] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2945'. [ 403.491039][T16624] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2944'. [ 403.500303][T16623] bond0: entered allmulticast mode [ 403.538439][T16623] bond_slave_0: entered allmulticast mode [ 403.556218][T16623] bond_slave_1: entered allmulticast mode [ 403.663661][T16629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.667884][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 403.695130][T16629] bond_slave_0: left promiscuous mode [ 403.701902][T16629] bond_slave_0: left allmulticast mode [ 403.814337][T16629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.833700][T16629] bond_slave_1: left promiscuous mode [ 403.842892][T16629] bond_slave_1: left allmulticast mode [ 403.854895][T16629] bond0 (unregistering): Released all slaves [ 404.013801][T16646] netlink: 'syz.0.2951': attribute type 10 has an invalid length. [ 404.059313][T16646] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2951'. [ 404.062302][T16652] netlink: 'syz.4.2952': attribute type 9 has an invalid length. [ 404.116920][T16652] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.2952'. [ 404.187838][T16643] syzkaller0: entered promiscuous mode [ 404.193466][T16643] syzkaller0: entered allmulticast mode [ 404.303039][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2955'. [ 404.491444][T16668] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 404.656325][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 120 seconds [ 405.211749][T16698] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 405.230446][T16698] bond1 (unregistering): Released all slaves [ 405.620223][T16728] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 405.643940][T16728] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 405.767602][T16731] netlink: 'syz.3.2975': attribute type 3 has an invalid length. [ 405.776961][T16731] netlink: 'syz.3.2975': attribute type 1 has an invalid length. [ 405.827770][T16693] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 406.653957][T16761] xt_l2tp: v2 doesn't support IP mode [ 407.056180][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 407.389972][T16780] __nla_validate_parse: 6 callbacks suppressed [ 407.389990][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'. [ 407.462494][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'. [ 407.583268][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.595210][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.615753][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.635035][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.653340][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.812384][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 407.962628][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2995'. [ 407.977737][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'. [ 408.006681][T16797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.894272][T16784] lo speed is unknown, defaulting to 1000 [ 409.070044][T16833] syzkaller1: entered promiscuous mode [ 409.086237][T16837] netlink: 'syz.0.3005': attribute type 1 has an invalid length. [ 409.094158][T16833] syzkaller1: entered allmulticast mode [ 409.094334][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 409.105473][T16837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.238328][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 409.535944][T16852] netlink: 'syz.2.3011': attribute type 2 has an invalid length. [ 409.551531][T16852] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3011'. [ 409.788491][ T5630] Bluetooth: hci2: command tx timeout [ 409.963333][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 410.159761][T16894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.204223][T16894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.329851][T16897] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 410.561054][T16784] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.568466][T16784] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.578843][T16784] bridge_slave_0: entered allmulticast mode [ 410.589840][T16784] bridge_slave_0: entered promiscuous mode [ 410.599470][T16784] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.607052][T16784] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.614817][T16784] bridge_slave_1: entered allmulticast mode [ 410.623578][T16784] bridge_slave_1: entered promiscuous mode [ 410.646758][T16909] netlink: 'syz.1.3022': attribute type 13 has an invalid length. [ 410.714134][T16909] tipc: Resetting bearer [ 410.736856][T16784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.754892][T16784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.799587][T16784] team0: Port device team_slave_0 added [ 410.809385][T16784] team0: Port device team_slave_1 added [ 410.847167][T16784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.854282][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.881562][T16784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.895874][T16784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.902835][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.931332][T16784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.997878][T16784] hsr_slave_0: entered promiscuous mode [ 411.004596][T16784] hsr_slave_1: entered promiscuous mode [ 411.011109][T16784] debugfs: 'hsr0' already exists in 'hsr' [ 411.017232][T16784] Cannot create hsr debugfs directory [ 411.214595][T16784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.226032][T16784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.328418][T16784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.339602][T16784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.471781][T16784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.483431][T16784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.792468][T16784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.804760][T16784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.866906][ T5630] Bluetooth: hci2: command tx timeout [ 412.803558][T16865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.851656][T16784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.889892][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.933724][T16784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.998503][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.018506][T16784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.023243][T16921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3026'. [ 413.042660][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.072487][T16784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.092534][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.311391][T16940] netlink: 'syz.3.3029': attribute type 11 has an invalid length. [ 413.361862][T16937] bond7: Unable to set up delay as MII monitoring is disabled [ 413.391489][T16937] bond7 (unregistering): Released all slaves [ 413.608402][T16784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.662130][T16784] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.711373][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.718556][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.770503][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.777683][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.809074][T16947] nbd: nbd2 already in use [ 413.823766][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3032'. [ 413.856678][T16947] block nbd0: NBD_DISCONNECT [ 413.863929][T16947] block nbd0: Send disconnect failed -32 [ 413.893548][T16947] block nbd0: shutting down sockets [ 413.906469][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 413.936438][ T5630] Bluetooth: hci2: command tx timeout [ 414.280859][T16961] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3034'. [ 414.295125][T16961] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3034'. [ 414.305909][T16961] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3034'. [ 414.343556][T16965] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 414.421126][T16968] openvswitch: netlink: IP tunnel dst address not specified [ 414.610887][T16976] macvtap1: entered promiscuous mode [ 414.627289][T16976] macvtap1: entered allmulticast mode [ 414.638910][T16976] veth1_vlan: entered allmulticast mode [ 414.773956][T16985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3042'. [ 414.808074][T16981] macvtap2: entered promiscuous mode [ 414.816228][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3041'. [ 414.823234][T16981] team0: entered promiscuous mode [ 414.858320][T16981] team_slave_0: entered promiscuous mode [ 414.894649][T16981] team_slave_1: entered promiscuous mode [ 414.931810][T16981] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 414.959893][T16981] team0: Device macvtap2 is already an upper device of the team interface [ 414.974030][T16981] team0: left promiscuous mode [ 415.090100][ T5742] team_slave_0: left promiscuous mode [ 415.095546][ T5742] team_slave_1: left promiscuous mode [ 415.309660][T17015] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3045'. [ 415.335643][T17016] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3044'. [ 415.481070][T16784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.766846][T16784] veth0_vlan: entered promiscuous mode [ 415.794264][T16784] veth1_vlan: entered promiscuous mode [ 415.834950][T16784] veth0_macvtap: entered promiscuous mode [ 415.847718][T16784] veth1_macvtap: entered promiscuous mode [ 415.869498][T16784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.884955][T16784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.901236][T15195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.912282][T15195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.923330][T15195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.936892][T15195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.026184][ T5630] Bluetooth: hci2: command tx timeout [ 417.752297][T16993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.954333][T15195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.979725][T15195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.144008][ T733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.198093][ T733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.470843][T17053] xt_hashlimit: overflow, try lower: 3/0 [ 418.503089][T17054] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 418.535039][T17054] __nla_validate_parse: 1 callbacks suppressed [ 418.535053][T17054] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3055'. [ 419.204287][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.223046][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.238262][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'. [ 419.238489][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.260776][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'. [ 419.273141][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.284802][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.350296][T17079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3064'. [ 419.368459][T17082] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 419.378935][T17082] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3067'. [ 419.968852][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'. [ 420.103432][T17110] lo speed is unknown, defaulting to 1000 [ 420.302275][T17117] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 420.423661][T17077] lo speed is unknown, defaulting to 1000 [ 420.446624][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 420.468779][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 420.612448][T17126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.289254][T17153] netlink: 'syz.3.3085': attribute type 12 has an invalid length. [ 421.376353][ T5642] Bluetooth: hci0: command tx timeout [ 421.419768][T17153] tipc: Enabled bearer , priority 0 [ 421.441484][T17161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.465052][T17153] syzkaller0: entered promiscuous mode [ 421.471646][T17153] syzkaller0: entered allmulticast mode [ 421.500535][T17153] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 421.673656][T17153] tipc: Resetting bearer [ 421.712291][T17152] tipc: Resetting bearer [ 421.781764][T17152] tipc: Disabling bearer [ 422.422569][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 422.617071][T17204] netlink: 'syz.4.3095': attribute type 29 has an invalid length. [ 422.722561][T17077] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.730036][T17077] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.738804][T17077] bridge_slave_0: entered allmulticast mode [ 422.747153][T17077] bridge_slave_0: entered promiscuous mode [ 422.756287][T17077] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.764866][T17077] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.796361][T17077] bridge_slave_1: entered allmulticast mode [ 422.822984][T17077] bridge_slave_1: entered promiscuous mode [ 422.973439][T17077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.996282][T17077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.045241][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3101'. [ 423.090203][T17077] team0: Port device team_slave_0 added [ 423.106892][T17077] team0: Port device team_slave_1 added [ 423.199486][T17077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.207785][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.236185][T17077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.254260][T17077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.262140][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.290772][T17077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.370939][T17077] hsr_slave_0: entered promiscuous mode [ 423.381331][T17077] hsr_slave_1: entered promiscuous mode [ 423.396298][T17077] debugfs: 'hsr0' already exists in 'hsr' [ 423.409641][T17077] Cannot create hsr debugfs directory [ 423.461128][ T5642] Bluetooth: hci0: command tx timeout [ 423.526356][T17240] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 423.711645][T17077] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.766351][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3105'. [ 423.830812][T17245] bond7: Unable to set up delay as MII monitoring is disabled [ 423.842069][T17245] bond7 (unregistering): Released all slaves [ 423.873375][T17243] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3105'. [ 423.953387][T17077] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.093682][T17077] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.148472][T17261] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 424.171360][T17261] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 424.205802][T17261] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 424.263474][T17262] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3109'. [ 424.279633][T17261] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 424.532473][ T1168] smbdirect: ib_dev[syz2] removed [ 424.551271][T17270] dvmrp0: entered allmulticast mode [ 424.780195][T17278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3113'. [ 424.860487][T17077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.874447][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.895698][T17077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.922557][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.945171][T17077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.993411][T17287] x_tables: duplicate underflow at hook 2 [ 425.001235][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.009963][T17287] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3116'. [ 425.031694][T17077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.081532][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.421380][T17309] geneve2: entered promiscuous mode [ 425.437375][T17309] geneve2: entered allmulticast mode [ 425.459247][ T135] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 425.485574][ T135] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 425.523695][ T135] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 425.537216][ T5642] Bluetooth: hci0: command tx timeout [ 425.568948][T17313] veth1_macvtap: entered allmulticast mode [ 425.610171][ T135] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 425.631676][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.681259][T17077] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.799307][T17315] veth1_macvtap: left allmulticast mode [ 425.845479][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.853533][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.930246][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.937442][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.983220][T17334] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3127'. [ 426.172119][T17340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3129'. [ 426.185297][T17340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3129'. [ 426.196753][T17340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3129'. [ 426.358967][T17348] netem: change failed [ 426.619869][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 426.720711][ T733] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.788560][ T733] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.820424][ T733] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.866398][ T733] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.581812][T17402] Bluetooth: MGMT ver 1.23 [ 427.587066][T17399] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 427.616396][ T5642] Bluetooth: hci0: command tx timeout [ 427.836133][T17077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.090345][T17077] veth0_vlan: entered promiscuous mode [ 428.136569][T17077] veth1_vlan: entered promiscuous mode [ 428.213000][T17077] veth0_macvtap: entered promiscuous mode [ 428.240467][T17077] veth1_macvtap: entered promiscuous mode [ 428.297638][T17077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.345233][T17077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.376264][ T135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.393293][ T135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.412505][ T135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.443760][T17439] netlink: 'syz.2.3155': attribute type 16 has an invalid length. [ 428.453123][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.467985][T17439] netlink: 'syz.2.3155': attribute type 17 has an invalid length. [ 428.548659][T17439] ip6gre0: left allmulticast mode [ 428.684420][T17439] veth1_macvtap: entered promiscuous mode [ 428.700332][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.710758][T17439] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 428.733235][T17439] macvtap1: left promiscuous mode [ 428.739741][T17439] macvtap1: left allmulticast mode [ 428.744893][T17439] veth1_vlan: left allmulticast mode [ 428.781285][T17439] geneve2: left promiscuous mode [ 428.789123][T17439] geneve2: left allmulticast mode [ 428.802066][T17439] bridge2: left promiscuous mode [ 428.808282][T17439] bridge2: left allmulticast mode [ 428.814553][T17439] xfrm1: left allmulticast mode [ 428.829689][T17452] __nla_validate_parse: 5 callbacks suppressed [ 428.829720][T17452] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3157'. [ 428.849814][T17439] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 429.080279][T17458] ip6gre1: entered allmulticast mode [ 429.537148][ T48] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 429.546638][ T48] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 429.565888][ T5758] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 429.785638][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 430.337044][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 431.621551][T17453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.884293][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'. [ 431.927766][T17482] syzkaller0: entered promiscuous mode [ 431.933823][T17482] syzkaller0: entered allmulticast mode [ 432.018871][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.062219][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.144397][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.161857][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.343181][T17501] geneve2: entered promiscuous mode [ 432.621875][T17509] syzkaller0: entered promiscuous mode [ 432.642584][T17509] syzkaller0: entered allmulticast mode [ 432.660975][T17511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3172'. [ 432.814198][T17519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3173'. [ 433.780003][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 433.887922][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.908175][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.925370][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.965705][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.975216][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.742093][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 150 seconds [ 436.097063][ T5642] Bluetooth: hci1: command tx timeout [ 436.112338][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 436.202046][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.216005][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.227873][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 436.239714][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 436.466662][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.480055][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.492407][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 436.507324][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 436.612657][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.625012][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.644561][T17579] netlink: 'syz.4.3183': attribute type 30 has an invalid length. [ 436.654652][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 436.654700][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 436.747551][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.758816][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.772342][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 436.782845][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 436.811791][T17529] lo speed is unknown, defaulting to 1000 [ 436.946405][T17559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.286280][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3186'. [ 437.410334][ T48] bridge_slave_1: left allmulticast mode [ 437.439698][ T48] bridge_slave_1: left promiscuous mode [ 437.465194][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.502864][ T48] bridge_slave_0: left allmulticast mode [ 437.536901][ T48] bridge_slave_0: left promiscuous mode [ 437.556102][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.639630][ T48] dvmrp0: left allmulticast mode [ 437.665859][ T48] pimreg3: left allmulticast mode [ 438.175923][ T5642] Bluetooth: hci1: command tx timeout [ 438.383574][ T48] bond8 (unregistering): (slave geneve4): Releasing active interface [ 438.542032][ T48] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 438.550418][ T48] bridge2 (unregistering): left promiscuous mode [ 438.682800][ T48] bond1 (unregistering): Released all slaves [ 438.712062][ T48] bond0 (unregistering): Released all slaves [ 438.731341][ T48] bond2 (unregistering): Released all slaves [ 438.753692][ T48] bond3 (unregistering): Released all slaves [ 438.782224][ T48] bond4 (unregistering): Released all slaves [ 438.801235][ T48] bond5 (unregistering): Released all slaves [ 438.820029][ T48] bond6 (unregistering): Released all slaves [ 438.840159][ T48] bond7 (unregistering): Released all slaves [ 438.871221][ T48] bond8 (unregistering): Released all slaves [ 439.021602][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 439.033345][T17626] netlink: 'syz.1.3192': attribute type 1 has an invalid length. [ 439.135808][ T48] tipc: Disabling bearer [ 439.157979][ T48] tipc: Left network mode [ 439.249205][T17633] netlink: 'syz.4.3195': attribute type 11 has an invalid length. [ 439.286461][T17633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3195'. [ 439.728126][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3198'. [ 439.869028][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 439.978993][T17644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.025309][T17659] bond1: entered promiscuous mode [ 440.047536][T17659] bond1: entered allmulticast mode [ 440.140454][T17659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.184040][T17659] team0: Port device bond1 added [ 440.256204][ T5642] Bluetooth: hci1: command tx timeout [ 440.286462][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 440.388694][T17668] bond1: (slave vcan1): refused to change device type [ 440.607318][T17680] syzkaller0: entered promiscuous mode [ 440.620649][T17680] syzkaller0: entered allmulticast mode [ 441.431291][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 441.464300][T17712] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 441.713758][T17723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3215'. [ 442.212663][T17736] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3217'. [ 442.335691][ T5642] Bluetooth: hci1: command tx timeout [ 442.351526][T17529] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.378094][T17529] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.389094][T17529] bridge_slave_0: entered allmulticast mode [ 442.452704][T17529] bridge_slave_0: entered promiscuous mode [ 442.478069][T17529] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.493722][T17529] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.543177][T17529] bridge_slave_1: entered allmulticast mode [ 442.578301][T17529] bridge_slave_1: entered promiscuous mode [ 443.056321][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 443.615984][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.179393][T17460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.656134][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.343264][T17529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.420633][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.438497][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.450922][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.461834][T17770] xt_hashlimit: size too large, truncated to 1048576 [ 445.471584][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.565978][ T48] vlan0: left allmulticast mode [ 445.576709][ T48] veth0_vlan: left allmulticast mode [ 445.589294][ T48] vlan0: left promiscuous mode [ 445.607112][ T48] veth1_macvtap: left promiscuous mode [ 445.639458][ T48] veth0_macvtap: left allmulticast mode [ 445.669948][ T48] veth0_macvtap: left promiscuous mode [ 445.677313][ T48] veth1_vlan: left promiscuous mode [ 445.693546][ T48] veth0_vlan: left promiscuous mode [ 445.702413][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.861714][T17786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.871551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.883349][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3226'. [ 446.145166][T17791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.736044][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.753977][ T48] team0 (unregistering): Port device team_slave_1 removed [ 446.772930][ T48] team0 (unregistering): Port device team_slave_0 removed [ 446.830113][T15193] smc: removing ib device syz0 [ 446.959251][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 446.966564][ T135] smbdirect: ib_dev[syú2] removed [ 447.009993][T17529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.077590][ T6935] syz0: Port: 1 Link DOWN [ 447.137748][ T6934] lo speed is unknown, defaulting to 1000 [ 447.166657][ T6934] infiniband syú2: ib_query_port failed (-19) [ 447.202888][T17529] team0: Port device team_slave_0 added [ 447.227767][T17460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.246241][T17529] team0: Port device team_slave_1 added [ 447.284321][T15193] smbdirect: ib_dev[syz0] removed [ 447.600454][T17806] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3231'. [ 447.652351][T17529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.680331][T17529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.785545][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.795447][T17529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.885737][T17529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.931421][T17529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.072842][T17529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.821659][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.859702][T17851] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 448.934944][T17866] netlink: 'syz.4.3243': attribute type 1 has an invalid length. [ 448.986616][T17868] openvswitch: netlink: Key type 305 is out of range max 32 [ 449.028895][T17529] hsr_slave_0: entered promiscuous mode [ 449.071590][T17529] hsr_slave_1: entered promiscuous mode [ 449.118022][T17529] debugfs: 'hsr0' already exists in 'hsr' [ 449.152444][T17529] Cannot create hsr debugfs directory [ 449.177766][T17873] netlink: 'syz.1.3245': attribute type 1 has an invalid length. [ 449.666885][T17873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.680838][T17878] ip_vti0: entered promiscuous mode [ 449.714386][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 449.855999][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.264564][T17905] netlink: 'syz.2.3255': attribute type 1 has an invalid length. [ 450.519528][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 450.727167][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 450.744954][T17924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3258'. [ 450.905500][ T5758] net_ratelimit: 1 callbacks suppressed [ 450.905516][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.035001][T17931] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3258'. [ 451.150432][T17936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.169478][ T5642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.380288][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.499150][T17936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.508141][T17936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.846951][T17954] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3263'. [ 451.941753][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.964783][T17954] netlink: 'syz.1.3263': attribute type 1 has an invalid length. [ 452.011315][T17954] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3263'. [ 452.036476][T17460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.109614][T17958] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3263'. [ 452.507498][T17979] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3269'. [ 452.547385][T17966] syzkaller0: entered promiscuous mode [ 452.566061][T17966] syzkaller0: entered allmulticast mode [ 452.659017][T17460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.849072][T17981] syzkaller1: entered promiscuous mode [ 452.885827][T17981] syzkaller1: entered allmulticast mode [ 452.977827][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.277997][T18000] bond0: entered promiscuous mode [ 453.302808][T18000] bond_slave_0: entered promiscuous mode [ 453.317517][T18000] bond_slave_1: entered promiscuous mode [ 453.340985][T18000] batadv0: entered promiscuous mode [ 453.349202][T18000] debugfs: 'hsr1' already exists in 'hsr' [ 453.356410][T18000] Cannot create hsr debugfs directory [ 453.420053][T18000] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 453.461711][T18000] bond0: left promiscuous mode [ 453.473036][T18000] bond_slave_0: left promiscuous mode [ 453.480029][T18000] bond_slave_1: left promiscuous mode [ 453.489458][T18000] batadv0: left promiscuous mode [ 454.082725][T18036] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 454.244876][T17529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.292136][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.314446][T17529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.366354][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.412036][T17529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.486947][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.520007][T17529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.568479][T17529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.808776][T18045] bond3 (unregistering): Released all slaves [ 455.033763][T18059] syzkaller1: entered promiscuous mode [ 455.051560][T18059] syzkaller1: entered allmulticast mode [ 455.539798][T18086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3289'. [ 455.572524][T17529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.934510][T17529] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.974656][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.981868][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.048130][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.055319][ T733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.095991][ T10] net_ratelimit: 4 callbacks suppressed [ 456.096006][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.253383][T18115] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3293'. [ 456.704986][T17529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.793579][T17529] veth0_vlan: entered promiscuous mode [ 456.808470][T17529] veth1_vlan: entered promiscuous mode [ 456.860298][T17529] veth0_macvtap: entered promiscuous mode [ 456.874090][T17529] veth1_macvtap: entered promiscuous mode [ 456.907622][T17529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.928198][T17529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.944325][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.961825][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.991248][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.002459][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.139564][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.147707][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.179671][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.347561][T18082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.436270][T18137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.643140][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.685673][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.889103][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.934792][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.061583][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.101450][T18202] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3299'. [ 459.149029][T18199] IPv6: sit1: Disabled Multicast RS [ 459.171762][T18199] sit1: entered allmulticast mode [ 459.216160][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.681720][T18228] ipvlan2: entered promiscuous mode [ 459.697284][ T6934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.147838][T18249] netlink: 'syz.1.3308': attribute type 21 has an invalid length. [ 460.185992][ T6934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.257054][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.272316][T18251] xt_hl: Unknown TTL match mode: 255 [ 460.369477][T18256] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3308'. [ 460.524012][T18258] syzkaller0: entered promiscuous mode [ 460.565120][T18258] syzkaller0: entered allmulticast mode [ 460.748246][T18258] tipc: Started in network mode [ 460.765946][T18258] tipc: Node identity 8e8455878a62, cluster identity 4711 [ 460.793113][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.801217][T18262] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3310'. [ 460.808828][T18258] tipc: Enabled bearer , priority 0 [ 460.824961][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.838003][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.850058][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.859196][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.975623][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 461.297875][ T5758] net_ratelimit: 1 callbacks suppressed [ 461.297893][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.377391][T18257] tipc: Resetting bearer [ 461.417728][T18257] tipc: Disabling bearer [ 461.818878][T18286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3315'. [ 462.199622][T18307] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 462.225321][T18299] netlink: 'syz.4.3316': attribute type 10 has an invalid length. [ 462.254355][T18307] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 462.336784][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.898213][ T5630] Bluetooth: hci4: command tx timeout [ 463.217851][ T2170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.376505][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.270637][T18266] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.278911][T18266] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.286189][T18266] bridge_slave_0: entered allmulticast mode [ 464.294136][T18266] bridge_slave_0: entered promiscuous mode [ 464.303258][T18266] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.311538][T18266] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.319007][T18266] bridge_slave_1: entered allmulticast mode [ 464.326753][T18266] bridge_slave_1: entered promiscuous mode [ 464.391151][T18266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.404557][T18266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.418157][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.551697][T18266] team0: Port device team_slave_0 added [ 464.599552][T18266] team0: Port device team_slave_1 added [ 464.674994][T18394] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 464.820702][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 180 seconds [ 464.932625][T18401] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3334'. [ 464.976792][ T5630] Bluetooth: hci4: command tx timeout [ 465.005138][T18266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.030258][T18266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.144044][T18266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.216741][T18266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.243719][T18266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.344066][T18266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.457195][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.465964][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.765827][T18428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.096447][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.210080][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3345'. [ 466.258608][ T6934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.281691][T18266] hsr_slave_0: entered promiscuous mode [ 466.293739][T18266] hsr_slave_1: entered promiscuous mode [ 466.300758][T18266] debugfs: 'hsr0' already exists in 'hsr' [ 466.329688][T18266] Cannot create hsr debugfs directory [ 466.499138][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.891126][T18266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.903726][T18266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.914787][T18266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 466.938447][T18483] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3353'. [ 467.065450][ T5630] Bluetooth: hci4: command tx timeout [ 467.086941][T18266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.122772][T18266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.135363][T18266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 467.285594][T18482] syzkaller0: entered promiscuous mode [ 467.294503][T18482] syzkaller0: entered allmulticast mode [ 467.305318][T18488] netlink: 'syz.4.3354': attribute type 12 has an invalid length. [ 467.328228][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'. [ 467.539493][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.576596][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.145657][ T5630] Bluetooth: hci4: command tx timeout [ 469.300806][ T6934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.312881][T18137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.433666][T18492] veth1_macvtap: entered allmulticast mode [ 469.440944][T18492] veth1_macvtap: left allmulticast mode [ 469.488068][T18266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.535188][T18266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.551506][T18266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 469.616123][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.814722][T18266] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.831665][T18266] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.842093][T18266] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 469.939559][T18137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.101774][T18525] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 470.432627][T18531] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 470.520139][T18534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.584423][T18539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.614159][T18539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.719389][T18266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 470.759162][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.789110][T18266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 470.827384][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.852318][T18534] syzkaller1: entered promiscuous mode [ 470.861710][T18534] syzkaller1: entered allmulticast mode [ 470.889565][T18266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 470.923904][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.935069][T18266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 470.957426][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.501575][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 471.642813][T18266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.695874][ T5758] net_ratelimit: 3 callbacks suppressed [ 471.695890][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.856940][T18266] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.917907][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.925101][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.026158][T15195] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.033308][T15195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.346626][T18138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.462899][T18620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3385'. [ 472.500753][T15195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.584931][T18630] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3386'. [ 472.649520][T18634] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.669240][T18631] pimreg: entered allmulticast mode [ 472.739091][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.780488][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3388'. [ 472.825218][T18634] Can't find ip_set type [ 472.854717][T18637] Can't find ip_set type [ 472.910386][T18643] vlan1: entered allmulticast mode [ 472.937423][T18643] veth0_vlan: entered allmulticast mode [ 473.137186][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.382381][T18674] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 473.432345][T18674] netlink: 'syz.3.3396': attribute type 13 has an invalid length. [ 473.456878][T18675] netlink: 'syz.1.3395': attribute type 21 has an invalid length. [ 473.514152][T18672] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 473.583170][T18672] bond3 (unregistering): Released all slaves [ 473.636925][T18673] veth3: entered allmulticast mode [ 473.778700][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.033677][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3401'. [ 474.074308][T18704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3400'. [ 474.110980][T18266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.300194][T18711] tipc: Started in network mode [ 474.311326][T18711] tipc: Node identity 4, cluster identity 4711 [ 474.355189][T18711] tipc: Node number set to 4 [ 474.382621][T18266] veth0_vlan: entered promiscuous mode [ 474.444803][T18266] veth1_vlan: entered promiscuous mode [ 474.527997][T18722] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3407'. [ 474.543757][T18266] veth0_macvtap: entered promiscuous mode [ 474.572841][T18722] gre0: entered promiscuous mode [ 474.584384][T18722] gre0: entered allmulticast mode [ 474.604514][T18266] veth1_macvtap: entered promiscuous mode [ 474.684707][T18266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.772060][T18266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.816485][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.830904][T18730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.853561][ T3336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.879909][ T3336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.007054][ T3336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.026275][ T3336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.035652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.047810][T18733] netlink: 'syz.1.3410': attribute type 4 has an invalid length. [ 475.350038][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.375202][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 475.388542][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.409906][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3414'. [ 475.484296][T15193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.489927][T18755] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3417'. [ 475.496486][T15193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.891091][T18762] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 475.911052][T18762] bond2 (unregistering): Released all slaves [ 476.160526][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e513c00: rx timeout, send abort [ 476.474285][T18788] netlink: 'syz.0.3426': attribute type 1 has an invalid length. [ 476.533925][T18794] xt_bpf: check failed: parse error [ 476.660680][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e511c00: rx timeout, send abort [ 476.670950][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e513c00: abort rx timeout. Force session deactivation [ 476.697664][T18788] __nla_validate_parse: 3 callbacks suppressed [ 476.697698][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3426'. [ 476.704614][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807e511c00: connection exists (fe ff). last cmd: 20 [ 476.763702][T18797] veth3: entered promiscuous mode [ 476.954548][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e511800: rx timeout, send abort [ 477.029333][T18816] tc_dump_action: action bad kind [ 477.115312][T18821] netlink: 'syz.0.3434': attribute type 4 has an invalid length. [ 477.330228][T18823] tipc: New replicast peer: 255.255.255.255 [ 477.358228][T18823] tipc: Enabled bearer , priority 10 [ 477.466358][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e511800: abort rx timeout. Force session deactivation [ 477.594090][T18843] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3441'. [ 477.638686][T18843] net_ratelimit: 3 callbacks suppressed [ 477.638702][T18843] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 477.801776][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'. [ 477.904126][T18855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.007480][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3446'. [ 478.049478][T18863] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 478.118380][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 478.161700][T18871] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 478.197478][T18868] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3444'. [ 478.230722][T18875] --map-set only usable from mangle table [ 478.273242][ T5758] IPVS: starting estimator thread 0... [ 478.321827][T18863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.375668][T18881] IPVS: using max 30 ests per chain, 72000 per kthread [ 479.092206][T18903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3453'. [ 479.112386][T18908] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20003 [ 479.433250][T18922] macvlan0: entered promiscuous mode [ 479.582376][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'. [ 479.597504][T18927] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 479.605064][T18930] netlink: 'syz.3.3460': attribute type 1 has an invalid length. [ 479.615311][ T5758] IPVS: starting estimator thread 0... [ 479.639201][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'. [ 479.661605][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'. [ 479.683111][T18930] netlink: 'syz.3.3460': attribute type 1 has an invalid length. [ 479.715615][T18932] IPVS: using max 31 ests per chain, 74400 per kthread [ 480.046851][T18951] vlan1: left allmulticast mode [ 480.052183][T18951] veth0_vlan: left allmulticast mode [ 480.133553][T18916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.965134][T18990] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 480.975072][T18990] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 481.013666][T18994] lo: Caught tx_queue_len zero misconfig [ 481.283156][T19000] netlink: 'syz.3.3482': attribute type 3 has an invalid length. [ 481.390228][T19008] netlink: zone id is out of range [ 481.396655][T19008] netlink: zone id is out of range [ 481.423871][T19008] netlink: zone id is out of range [ 481.430015][T19008] netlink: zone id is out of range [ 481.440202][T19008] netlink: zone id is out of range [ 481.471028][T19008] netlink: zone id is out of range [ 481.544512][T19011] netlink: 'syz.4.3487': attribute type 1 has an invalid length. [ 481.826538][T19019] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 481.840040][T19019] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 481.861505][T19030] __nla_validate_parse: 8 callbacks suppressed [ 481.861538][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3491'. [ 481.882998][T19019] bond3: (slave vxcan1): making interface the new active one [ 481.904886][T19019] bond3: (slave vxcan1): Enslaving as an active interface with an up link [ 482.033702][T19035] syzkaller1: entered promiscuous mode [ 482.056746][T19035] syzkaller1: entered allmulticast mode [ 482.107881][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 482.846438][T19071] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3504'. [ 482.874756][T19071] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3504'. [ 482.911258][T19071] netlink: 'syz.0.3504': attribute type 6 has an invalid length. [ 482.952995][T19071] netlink: 'syz.0.3504': attribute type 5 has an invalid length. [ 482.964276][T19078] netlink: 'syz.2.3507': attribute type 1 has an invalid length. [ 483.036898][T19071] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3504'. [ 483.083213][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3508'. [ 483.087888][T19066] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 483.120396][T19082] net_ratelimit: 8 callbacks suppressed [ 483.120412][T19082] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.161069][T19082] netlink: 'syz.3.3508': attribute type 1 has an invalid length. [ 483.201321][T19082] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3508'. [ 483.600001][T19102] ipvlan2: entered allmulticast mode [ 483.611704][T19102] batadv_slave_1: entered allmulticast mode [ 483.645875][T19102] batman_adv: batadv0: Adding interface: ipvlan2 [ 483.659304][T19102] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.698765][T19111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.723237][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 483.738814][T19102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.763292][T19102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.773587][T19102] batman_adv: batadv0: Interface activated: ipvlan2 [ 483.802539][T19112] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3517'. [ 483.893670][T19118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3519'. [ 484.711853][T19161] netem: change failed [ 484.820937][T19172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.857536][T19172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.874418][T19172] bond0 (unregistering): Released all slaves [ 485.258414][T19189] veth5: entered allmulticast mode [ 485.360081][T19191] validate_nla: 4 callbacks suppressed [ 485.360113][T19191] netlink: 'syz.2.3539': attribute type 17 has an invalid length. [ 485.672481][T19205] netlink: 'syz.1.3544': attribute type 1 has an invalid length. [ 485.836323][T19208] bond4: (slave gretap1): making interface the new active one [ 485.844913][T19208] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 485.932438][T19205] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 486.011244][T19208] macvlan2: entered promiscuous mode [ 486.016745][T19208] macvlan2: entered allmulticast mode [ 486.023041][T19208] bond4: entered promiscuous mode [ 486.030283][T19208] gretap1: entered promiscuous mode [ 486.036481][T19208] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 486.049503][T19208] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 486.073219][T19208] bond4: left promiscuous mode [ 486.078175][T19208] gretap1: left promiscuous mode [ 486.116780][T19215] syz_tun: refused to change device tx_queue_len [ 486.620960][T19242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.825015][T19254] ip6tnl0: Caught tx_queue_len zero misconfig [ 486.854030][T19254] netem: unknown loss type 8 [ 486.870701][T19254] netem: change failed [ 486.878825][T19258] xt_hashlimit: size too large, truncated to 1048576 [ 487.137465][T19265] syzkaller0: entered promiscuous mode [ 487.171624][T19265] syzkaller0: entered allmulticast mode [ 487.279599][T19276] __nla_validate_parse: 16 callbacks suppressed [ 487.279618][T19276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3566'. [ 487.466992][T19278] veth0: entered promiscuous mode [ 487.517284][T19283] veth0: left promiscuous mode [ 487.723640][T19299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.766862][T19301] vet: renamed from veth0_vlan (while UP) [ 487.995622][T19305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3574'. [ 488.038848][T19311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3576'. [ 488.255325][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3578'. [ 488.693862][T19326] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 488.731550][T19326] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 488.749005][ T5814] IPVS: starting estimator thread 0... [ 488.771750][T19350] IPVS: sed: FWM 3 0x00000003 - no destination available [ 488.888814][T19351] IPVS: using max 28 ests per chain, 67200 per kthread [ 489.070409][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3586'. [ 489.080079][T19320] syzkaller0: entered promiscuous mode [ 489.088945][T19320] syzkaller0: entered allmulticast mode [ 489.753318][T19374] netlink: 'syz.1.3588': attribute type 1 has an invalid length. [ 491.585321][T19373] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.672321][T19398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.687470][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'. [ 491.691650][T19399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.710103][T19398] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3594'. [ 491.738954][T19393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3593'. [ 491.758270][T19393] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3593'. [ 491.991709][T19410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3596'. [ 492.158803][T19406] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.183809][T19421] netlink: 'syz.4.3600': attribute type 1 has an invalid length. [ 492.443320][T19428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.952325][T19456] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 493.230721][T19467] __nla_validate_parse: 3 callbacks suppressed [ 493.230738][T19467] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3613'. [ 493.372192][T19470] ip6gre1: entered allmulticast mode [ 493.423054][T19470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.893642][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 494.040329][T19496] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3621'. [ 494.238732][T19500] ip6t_srh: unknown srh match flags 5F28 [ 494.239182][ T5289] netdevsim netdevsim3 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 494.298838][ T5289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.345633][T19499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3623'. [ 494.691874][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 494.898689][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 210 seconds [ 495.162107][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 495.536036][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 495.561362][T19536] netlink: 'syz.0.3626': attribute type 21 has an invalid length. [ 495.622045][T19536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 496.251733][T19559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3636'. [ 496.372543][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3636'. [ 496.502153][ T1168] dvmrp0: left allmulticast mode [ 496.884846][ T1168] bond2 (unregistering): (slave gretap1): Releasing active interface [ 497.211931][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.227609][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.241331][ T1168] bond0 (unregistering): Released all slaves [ 497.256550][ T1168] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 497.269813][ T1168] bond1 (unregistering): Released all slaves [ 497.293153][ T1168] bond2 (unregistering): Released all slaves [ 497.312484][ T1168] bond3 (unregistering): Released all slaves [ 497.342660][ T1168] bond4 (unregistering): (slave lo): Releasing backup interface [ 497.351721][ T1168] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 497.367925][ T1168] bond4 (unregistering): Released all slaves [ 497.392616][ T1168] bond5 (unregistering): Released all slaves [ 497.412887][ T1168] bond6 (unregistering): Released all slaves [ 497.692996][ T1168] : left promiscuous mode [ 498.148639][T19601] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3647'. [ 498.813894][T19616] __nla_validate_parse: 3 callbacks suppressed [ 498.813913][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 498.883773][T19616] veth1_macvtap: left promiscuous mode [ 499.059749][T19620] netlink: 'syz.4.3653': attribute type 5 has an invalid length. [ 499.104951][T19630] openvswitch: netlink: Duplicate or invalid key (type 0). [ 499.124664][T19630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.203269][ T1168] hsr_slave_0: left promiscuous mode [ 499.215253][ T1168] hsr_slave_1: left promiscuous mode [ 499.228282][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.243039][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.261401][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.269927][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.381390][T19649] netlink: 'syz.4.3657': attribute type 21 has an invalid length. [ 499.415681][ T1168] veth1_macvtap: left promiscuous mode [ 499.421517][ T1168] veth0_macvtap: left promiscuous mode [ 499.428252][ T1168] veth1_vlan: left promiscuous mode [ 499.436807][ T1168] veth0_vlan: left promiscuous mode [ 499.591027][ T1168] pim6reg527 (unregistering): left allmulticast mode [ 500.122232][ T3336] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.144319][ T3336] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.171467][ T3336] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.213213][ T3336] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.293210][T19655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.554368][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 501.411909][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 501.437466][T19666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3662'. [ 501.583510][ T1168] IPVS: stop unused estimator thread 0... [ 501.822096][T19622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.832688][T19632] netlink: 'syz.1.3654': attribute type 11 has an invalid length. [ 501.860188][T19632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3654'. [ 502.013059][T19674] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 502.041595][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3664'. [ 502.080721][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3664'. [ 502.253005][T19680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3666'. [ 502.457011][T19693] netlink: 'syz.1.3669': attribute type 11 has an invalid length. [ 502.601763][T19694] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 502.687594][T19708] x_tables: duplicate underflow at hook 2 [ 502.694290][T19694] bond4 (unregistering): Released all slaves [ 503.348628][T19733] IPv6: addrconf: prefix option has invalid lifetime [ 503.528092][T19739] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3684'. [ 503.670320][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 503.779541][T19760] bond0: option all_slaves_active: invalid value (222) [ 503.790095][T19760] bond0 (unregistering): Released all slaves [ 503.891284][T19764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3691'. [ 504.218988][T19779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'. [ 504.454476][T19791] Cannot find set identified by id 1 to match [ 504.744348][T19801] tipc: Enabled bearer , priority 0 [ 504.767744][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3705'. [ 504.837078][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3705'. [ 504.909840][T19801] syzkaller0: entered promiscuous mode [ 504.918184][T19801] syzkaller0: entered allmulticast mode [ 504.925095][T19801] tipc: Resetting bearer [ 504.980734][T19798] tipc: Resetting bearer [ 507.141736][T19798] tipc: Disabling bearer [ 507.247879][ T5758] tipc: Node number set to 82204039 [ 507.923963][T19861] netlink: 'syz.4.3721': attribute type 1 has an invalid length. [ 507.940577][T19861] netlink: 'syz.4.3721': attribute type 1 has an invalid length. [ 508.042614][T19861] syzkaller0: entered promiscuous mode [ 508.060366][T19861] syzkaller0: entered allmulticast mode [ 508.117807][T19870] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3724'. [ 508.239915][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3727'. [ 508.275208][T19879] netlink: 'syz.0.3726': attribute type 1 has an invalid length. [ 508.281390][T19878] ipvlan2: entered allmulticast mode [ 508.289544][T19878] batadv_slave_1: entered allmulticast mode [ 508.300544][T19878] batman_adv: batadv0: Adding interface: ipvlan2 [ 508.307208][T19878] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.338230][T19878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.349261][T19878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.359852][T19878] batman_adv: batadv0: Interface activated: ipvlan2 [ 508.403027][T19879] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 508.851612][T19900] bond0: (slave bond_slave_0): Releasing backup interface [ 509.231435][T19915] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3738'. [ 509.240613][T19917] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3736'. [ 509.253330][T19917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3736'. [ 511.292735][T19909] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 511.310630][T19915] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 511.604014][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 511.688813][T19948] netlink: 822 bytes leftover after parsing attributes in process `syz.2.3745'. [ 512.525611][T19987] netlink: 'syz.1.3757': attribute type 12 has an invalid length. [ 512.547281][T19987] netlink: 'syz.1.3757': attribute type 29 has an invalid length. [ 512.564918][T19987] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3757'. [ 512.584260][T19987] netlink: 'syz.1.3757': attribute type 2 has an invalid length. [ 512.609080][T19987] netlink: 'syz.1.3757': attribute type 3 has an invalid length. [ 512.617926][T19987] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3757'. [ 512.630094][T19986] syzkaller0: entered promiscuous mode [ 512.636939][T19986] syzkaller0: entered allmulticast mode [ 512.769469][T20000] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3759'. [ 513.040323][T20004] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 513.073213][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3761'. [ 513.114946][T20004] bond0 (unregistering): Released all slaves [ 513.123247][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3761'. [ 513.259866][T20017] syzkaller0: entered promiscuous mode [ 513.294237][T20017] syzkaller0: entered allmulticast mode [ 513.568610][T20032] syz_tun: entered allmulticast mode [ 513.632006][T20034] syz_tun: left allmulticast mode [ 515.593309][T19991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.609424][T20060] nbd: must specify at least one socket [ 516.023662][T20097] tipc: Enabling of bearer rejected, failed to enable media [ 516.055497][T20103] netlink: 'syz.2.3782': attribute type 11 has an invalid length. [ 516.065265][T20095] __nla_validate_parse: 1 callbacks suppressed [ 516.065279][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3780'. [ 516.092999][T20103] netlink: 'syz.2.3782': attribute type 11 has an invalid length. [ 516.125580][T20103] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3782'. [ 516.157283][T20106] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3783'. [ 516.494241][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 516.505479][T20121] syzkaller1: entered promiscuous mode [ 516.523963][T20126] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 516.541588][T20121] syzkaller1: entered allmulticast mode [ 516.590407][T20125] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 516.604295][T20125] gretap1: entered promiscuous mode [ 516.620056][T20125] gretap1: entered allmulticast mode [ 516.775302][T20130] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 516.980578][T20139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 516.993721][T20134] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 517.014353][T20134] netlink: 'syz.2.3788': attribute type 2 has an invalid length. [ 517.029206][T20134] netlink: 'syz.2.3788': attribute type 4 has an invalid length. [ 517.047360][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3788'. [ 517.267358][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'. [ 517.283971][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'. [ 517.446605][T20158] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 517.486537][T20158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3795'. [ 517.662405][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3797'. [ 517.952545][T20183] sctp: [Deprecated]: syz.3.3802 (pid 20183) Use of int in maxseg socket option. [ 517.952545][T20183] Use struct sctp_assoc_value instead [ 518.740990][ T5642] Bluetooth: hci5: command 0x0406 tx timeout [ 519.416258][T20256] netlink: 'syz.0.3820': attribute type 5 has an invalid length. [ 519.440157][T20261] netlink: 'syz.3.3822': attribute type 1 has an invalid length. [ 519.723999][T20274] 0·: renamed from hsr0 (while UP) [ 519.757899][T20274] 0·: entered allmulticast mode [ 519.781890][T20274] hsr_slave_0: entered allmulticast mode [ 519.802095][T20274] hsr_slave_1: entered allmulticast mode [ 519.816138][T20274] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 520.110930][T20285] syzkaller1: entered promiscuous mode [ 520.141933][T20285] syzkaller1: entered allmulticast mode [ 520.563816][T20309] netlink: 'syz.2.3834': attribute type 1 has an invalid length. [ 521.564936][T20346] __nla_validate_parse: 12 callbacks suppressed [ 521.564955][T20346] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3842'. [ 521.886700][T20368] netlink: 'syz.4.3847': attribute type 1 has an invalid length. [ 521.954929][T20368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.970133][T20374] vlan0: entered allmulticast mode [ 521.978471][T20374] bond0: entered allmulticast mode [ 522.181301][T20368] bond0: (slave geneve3): making interface the new active one [ 522.215529][T20368] geneve3: entered allmulticast mode [ 522.253462][T20368] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 522.459378][T20396] block nbd4: Unsupported socket: should be TCP or UNIX. [ 522.614292][T20407] netlink: 'syz.4.3854': attribute type 5 has an invalid length. [ 524.975751][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 240 seconds [ 525.449463][T20396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.465157][T20417] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 525.483143][T20417] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 525.713201][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 525.769353][T20427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3860'. [ 525.876431][T20439] syzkaller1: entered promiscuous mode [ 525.910218][T20439] syzkaller1: entered allmulticast mode [ 525.999775][T20427] vlan2: entered allmulticast mode [ 526.017152][T20427] bond0: entered allmulticast mode [ 526.040313][T20427] bond_slave_0: entered allmulticast mode [ 526.061446][T20427] bond_slave_1: entered allmulticast mode [ 526.562957][T20473] netlink: 'syz.1.3874': attribute type 1 has an invalid length. [ 526.594474][T20473] netlink: 'syz.1.3874': attribute type 2 has an invalid length. [ 526.745296][T20492] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3875'. [ 527.102541][T20505] tipc: Enabling of bearer rejected, failed to enable media [ 527.131767][T20505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3878'. [ 527.255597][T20504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3879'. [ 527.290870][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 527.395003][T20518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3883'. [ 527.468057][T20523] netlink: 'syz.3.3885': attribute type 25 has an invalid length. [ 527.474673][T20519] syzkaller0: entered promiscuous mode [ 527.492798][T20519] syzkaller0: entered allmulticast mode [ 527.501380][T20523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3885'. [ 527.677078][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 527.880712][T20545] netlink: 'syz.1.3889': attribute type 3 has an invalid length. [ 527.904745][T20545] netlink: zone id is out of range [ 527.920161][T20545] netlink: zone id is out of range [ 527.941958][T20545] netlink: zone id is out of range [ 527.961012][T20545] netlink: zone id is out of range [ 527.970238][T20545] netlink: zone id is out of range [ 527.972504][T20536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.977385][T20545] netlink: zone id is out of range [ 528.025639][T20545] netlink: zone id is out of range [ 528.048724][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 528.049911][T20545] netlink: zone id is out of range [ 528.060431][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3891'. [ 528.076938][T20545] netlink: zone id is out of range [ 528.113637][T20547] netlink: 'syz.3.3890': attribute type 7 has an invalid length. [ 528.149091][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 528.154014][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880429c6c00: rx timeout, send abort [ 528.183325][T20555] veth1_macvtap: entered allmulticast mode [ 528.388508][T20555] veth1_macvtap (unregistering): left allmulticast mode [ 528.518034][T20572] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 528.643324][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880429c5c00: rx timeout, send abort [ 528.667632][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880429c6c00: abort rx timeout. Force session deactivation [ 528.710309][T20579] netlink: 'syz.0.3899': attribute type 83 has an invalid length. [ 529.152615][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880429c5c00: abort rx timeout. Force session deactivation [ 530.153636][T20611] netlink: 'syz.3.3907': attribute type 4 has an invalid length. [ 530.554378][T20618] netlink: 'syz.3.3907': attribute type 4 has an invalid length. [ 532.402385][T20637] netlink: 'syz.0.3915': attribute type 32 has an invalid length. [ 532.449700][T20637] __nla_validate_parse: 6 callbacks suppressed [ 532.449731][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'. [ 532.562591][T20637] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 533.492021][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 533.564201][T20644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3917'. [ 534.106299][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 534.319605][T20659] netlink: 'syz.1.3921': attribute type 1 has an invalid length. [ 534.626810][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 534.841512][T20670] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 534.904255][T20670] netlink: 'syz.0.3923': attribute type 2 has an invalid length. [ 534.980576][T20670] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 535.050053][T20670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3923'. [ 535.348840][T20675] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3924'. [ 536.642497][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3929'. [ 536.700422][T20690] sctp: [Deprecated]: syz.3.3929 (pid 20690) Use of int in maxseg socket option. [ 536.700422][T20690] Use struct sctp_assoc_value instead [ 539.133165][T20675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.310380][T20675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.428125][T20675] bond0 (unregistering): Released all slaves [ 539.647932][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3935'. [ 539.690528][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3935'. [ 541.009087][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3937'. [ 544.776381][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3944'. [ 545.126901][T20764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3946'. [ 546.743208][T20783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.384561][T20798] netlink: 'syz.2.3957': attribute type 11 has an invalid length. [ 547.663356][T20800] xt_l2tp: v2 doesn't support IP mode [ 547.704780][T20800] netlink: 'syz.4.3958': attribute type 1 has an invalid length. [ 547.863444][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3958'. [ 548.079785][T20800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.171304][T20804] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 549.037843][T20822] netlink: 'syz.4.3964': attribute type 5 has an invalid length. [ 549.594312][T20834] net_ratelimit: 46 callbacks suppressed [ 549.594358][T20834] openvswitch: netlink: Message has 8 unknown bytes. [ 549.712539][ T36] wlan1: Trigger new scan to find an IBSS to join [ 549.746509][T20830] openvswitch: netlink: Message has 8 unknown bytes. [ 549.811036][T20837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3968'. [ 549.839249][T20830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.166311][T20834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.494885][T20847] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3969'. [ 551.351249][T20852] syz_tun: refused to change device tx_queue_len [ 552.165348][ C0] sched: DL replenish lagged too much [ 553.001458][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3978'. [ 553.440919][T20879] syzkaller0: entered promiscuous mode [ 553.493121][T20879] syzkaller0: entered allmulticast mode [ 554.590229][T20904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3984'. [ 554.656354][ T733] wlan1: Trigger new scan to find an IBSS to join [ 557.084038][T20923] netlink: 'syz.3.3990': attribute type 1 has an invalid length. [ 557.109992][ T48] wlan1: Creating new IBSS network, BSSID 6a:59:75:9a:77:df [ 557.143811][T20923] netlink: 'syz.3.3990': attribute type 2 has an invalid length. [ 557.185591][T20923] netlink: 'syz.3.3990': attribute type 1 has an invalid length. [ 557.266799][T20923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3990'. [ 557.416754][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 270 seconds [ 557.984793][T20938] tap0: tun_chr_ioctl cmd 2148553947 [ 559.924400][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 572.268653][ T4994] udevd[4994]: worker [9757] /devices/virtual/block/nbd2 timeout; kill it [ 579.771930][ T4994] udevd[4994]: seq 16097 '/devices/virtual/block/nbd2' killed [ 600.350345][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 300 seconds [ 611.223353][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 705.365271][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 705.372243][ C0] rcu: (detected by 0, t=10502 jiffies, g=103721, q=78925 ncpus=2) [ 705.380221][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10453 (4295007671-4294997218), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 705.393589][ C0] rcu: rcu_preempt kthread starved for 10453 jiffies! g103721 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 705.404868][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 705.414837][ C0] rcu: RCU grace-period kthread stack dump: [ 705.420721][ C0] task:rcu_preempt state:R running task stack:26880 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 705.434230][ C0] Call Trace: [ 705.437517][ C0] [ 705.440454][ C0] __schedule+0x1821/0x5740 [ 705.444971][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 705.449949][ C0] ? __pfx___schedule+0x10/0x10 [ 705.454822][ C0] ? schedule+0x90/0x360 [ 705.459083][ C0] schedule+0x164/0x360 [ 705.463256][ C0] schedule_timeout+0x158/0x2c0 [ 705.468120][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 705.473502][ C0] ? __pfx_process_timeout+0x10/0x10 [ 705.478804][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 705.484631][ C0] ? prepare_to_swait_event+0x340/0x370 [ 705.490192][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 705.495062][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 705.501226][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 705.506515][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 705.511734][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 705.516338][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 705.521542][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 705.527359][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 705.532302][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 705.537336][ C0] kthread+0x389/0x470 [ 705.541413][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 705.546619][ C0] ? __pfx_kthread+0x10/0x10 [ 705.551228][ C0] ret_from_fork+0x514/0xb70 [ 705.555827][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 705.560950][ C0] ? __switch_to+0xc79/0x1410 [ 705.565639][ C0] ? __pfx_kthread+0x10/0x10 [ 705.570242][ C0] ret_from_fork_asm+0x1a/0x30 [ 705.575027][ C0] [ 705.578046][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 705.584373][ C0] Sending NMI from CPU 0 to CPUs 1: [ 705.589586][ C1] NMI backtrace for cpu 1 [ 705.589606][ C1] CPU: 1 UID: 0 PID: 19413 Comm: kworker/R-bond5 Not tainted syzkaller #0 PREEMPT(full) [ 705.589625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.589636][ C1] Workqueue: bond5 bond_mii_monitor [ 705.589662][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 705.589688][ C1] Code: 89 44 11 20 c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 f8 c6 73 11 65 8b 0d 19 c7 73 11 81 e1 00 01 ff 00 74 [ 705.589703][ C1] RSP: 0018:ffffc90000a078f0 EFLAGS: 00000246 [ 705.589715][ C1] RAX: ffffffff8a5a65ff RBX: ffff888075500400 RCX: dffffc0000000000 [ 705.589728][ C1] RDX: ffff888078979ec0 RSI: 0000000000000040 RDI: 0000000000000041 [ 705.589739][ C1] RBP: ffff888034ff2858 R08: ffffc90000a079cf R09: 0000000000000000 [ 705.589750][ C1] R10: ffffc90000a079c0 R11: fffff52000140f3a R12: 0000000000000000 [ 705.589761][ C1] R13: 0000000000000040 R14: 0000000000000080 R15: 0000000000000000 [ 705.589771][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 705.589784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.589795][ C1] CR2: 0000200000000101 CR3: 0000000036342000 CR4: 00000000003526f0 [ 705.589809][ C1] Call Trace: [ 705.589815][ C1] [ 705.589820][ C1] fib6_node_lookup_1+0x4bf/0x8a0 [ 705.589848][ C1] fib6_node_lookup+0xe4/0x1d0 [ 705.589870][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 705.589895][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 705.589916][ C1] fib6_table_lookup+0xbc/0xa80 [ 705.589938][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 705.589964][ C1] ? ktime_get+0x1f5/0x220 [ 705.589988][ C1] ? ip6_pol_route+0x160/0x13d0 [ 705.590006][ C1] ? lock_acquire+0x106/0x350 [ 705.590024][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 705.590048][ C1] ip6_pol_route+0x228/0x13d0 [ 705.590067][ C1] ? ip6_pol_route+0x160/0x13d0 [ 705.590089][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 705.590108][ C1] ? lock_acquire+0x106/0x350 [ 705.590124][ C1] ? unwind_next_frame+0xa6/0x2550 [ 705.590154][ C1] fib6_rule_action+0x265/0xc00 [ 705.590175][ C1] ? fib_rules_lookup+0x9b/0xea0 [ 705.590198][ C1] ? lock_acquire+0x106/0x350 [ 705.590215][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 705.590234][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 705.590253][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 705.590271][ C1] ? fib6_rule_match+0x79a/0xa80 [ 705.590289][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 705.590308][ C1] fib_rules_lookup+0x768/0xea0 [ 705.590331][ C1] ? lock_acquire+0x106/0x350 [ 705.590347][ C1] ? fib_rules_lookup+0x9b/0xea0 [ 705.590373][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 705.590396][ C1] ? l3mdev_update_flow+0x29/0x640 [ 705.590412][ C1] ? l3mdev_update_flow+0x4d1/0x640 [ 705.590430][ C1] fib6_rule_lookup+0x1a0/0x730 [ 705.590448][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 705.590469][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 705.590486][ C1] ? nft_synproxy_eval_v6+0x34a/0x4e0 [ 705.590505][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 705.590525][ C1] ? lock_acquire+0x106/0x350 [ 705.590540][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 705.590562][ C1] ? process_scheduled_works+0x953/0x1860 [ 705.590578][ C1] ? rescuer_thread+0x827/0x1130 [ 705.590595][ C1] ? kthread+0x389/0x470 [ 705.590614][ C1] ? ret_from_fork+0x514/0xb70 [ 705.590633][ C1] ip6_route_output_flags+0x364/0x5d0 [ 705.590653][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 705.590675][ C1] __nf_ip6_route+0x42/0xd0 [ 705.590694][ C1] synproxy_send_tcp_ipv6+0x275/0x6d0 [ 705.590714][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 705.590731][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 705.590759][ C1] ? synproxy_send_client_synack_ipv6+0x355/0xcb0 [ 705.590776][ C1] ? skb_put+0x11b/0x210 [ 705.590797][ C1] synproxy_send_client_synack_ipv6+0x814/0xcb0 [ 705.590821][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 705.590839][ C1] ? nft_tproxy_eval+0x1164/0x1c40 [ 705.590854][ C1] ? synproxy_pernet+0x45/0x270 [ 705.590873][ C1] nft_synproxy_eval_v6+0x34a/0x4e0 [ 705.590893][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 705.590912][ C1] ? nf_ip_checksum+0x13c/0x510 [ 705.590932][ C1] nft_synproxy_do_eval+0x3ce/0x580 [ 705.590949][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 705.590967][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 705.590983][ C1] ? nft_trace_init+0x283/0x4c0 [ 705.591003][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 705.591024][ C1] nft_do_chain+0x48d/0x1ae0 [ 705.591042][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 705.591064][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 705.591099][ C1] nft_do_chain_inet+0x360/0x4b0 [ 705.591118][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 705.591138][ C1] ? nf_nat_ipv6_local_in+0x157/0x660 [ 705.591163][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 705.591185][ C1] ? lock_acquire+0x106/0x350 [ 705.591202][ C1] ? NF_HOOK+0x9e/0x3c0 [ 705.591216][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 705.591234][ C1] nf_hook_slow+0xc5/0x220 [ 705.591251][ C1] NF_HOOK+0x21f/0x3c0 [ 705.591266][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 705.591282][ C1] ? NF_HOOK+0x9e/0x3c0 [ 705.591295][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 705.591311][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 705.591331][ C1] ip6_input+0x16a/0x270 [ 705.591345][ C1] ? ip6_input+0x23/0x270 [ 705.591361][ C1] NF_HOOK+0x336/0x3c0 [ 705.591375][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 705.591389][ C1] ? NF_HOOK+0x9e/0x3c0 [ 705.591403][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 705.591418][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 705.591437][ C1] ? process_backlog+0x3eb/0x1950 [ 705.591457][ C1] process_backlog+0x7dd/0x1950 [ 705.591486][ C1] __napi_poll+0xae/0x340 [ 705.591503][ C1] ? skb_defer_free_flush+0x233/0x260 [ 705.591523][ C1] net_rx_action+0x627/0xf70 [ 705.591549][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 705.591568][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 705.591597][ C1] ? net_tx_action+0x5b6/0xc30 [ 705.591619][ C1] ? net_tx_action+0xbfb/0xc30 [ 705.591641][ C1] handle_softirqs+0x22a/0x840 [ 705.591658][ C1] ? __irq_exit_rcu+0xca/0x220 [ 705.591677][ C1] __irq_exit_rcu+0xca/0x220 [ 705.591693][ C1] irq_exit_rcu+0x9/0x30 [ 705.591708][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 705.591731][ C1] [ 705.591736][ C1] [ 705.591742][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 705.591760][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 705.591782][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9a f5 f5 f5 48 89 df e8 a2 6a f6 f5 e8 cd 01 22 f6 fb bf 01 00 00 00 72 e9 e7 f5 65 8b 05 9b 9f 8d 07 85 c0 74 07 5b e9 01 48 00 00 [ 705.591795][ C1] RSP: 0018:ffffc9000588fa90 EFLAGS: 00000202 [ 705.591807][ C1] RAX: 000000000012b00b RBX: ffff88801aea3000 RCX: 0000000080000001 [ 705.591818][ C1] RDX: 0000000000000000 RSI: ffffffff8dface83 RDI: 0000000000000001 [ 705.591829][ C1] RBP: ffffc9000588fcb8 R08: ffffffff9030d4f7 R09: 1ffffffff2061a9e [ 705.591841][ C1] R10: dffffc0000000000 R11: fffffbfff2061a9f R12: 0000000002000000 [ 705.591852][ C1] R13: ffff88807c2f91a8 R14: dffffc0000000000 R15: ffff888026d4ed18 [ 705.591872][ C1] process_scheduled_works+0x953/0x1860 [ 705.591904][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.591919][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 705.591949][ C1] rescuer_thread+0x827/0x1130 [ 705.591973][ C1] ? rescuer_thread+0xbb/0x1130 [ 705.591999][ C1] kthread+0x389/0x470 [ 705.592018][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 705.592035][ C1] ? __pfx_kthread+0x10/0x10 [ 705.592055][ C1] ret_from_fork+0x514/0xb70 [ 705.592073][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 705.592089][ C1] ? __switch_to+0xc79/0x1410 [ 705.592112][ C1] ? __pfx_kthread+0x10/0x10 [ 705.592132][ C1] ret_from_fork_asm+0x1a/0x30 [ 705.592162][ C1] [ 714.096499][ T2470] block nbd2: Possible stuck request ffff888027b40000: control (read@0,4096B). Runtime 330 seconds