last executing test programs: 2.370245541s ago: executing program 4 (id=4694): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095", @ANYRES64=r0], &(0x7f0000000040)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1700000005000000020000000000000008", @ANYRESDEC, @ANYRES64=r4, @ANYRES32, @ANYBLOB="47a47876aa15e39702ec29795aaad4fcb9c9be9a2d498cd05326", @ANYRESHEX, @ANYRES16=r1], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095", @ANYRESDEC=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r9, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c00000002020500000000000000000007010000000000000c000280050001003a0000002c000180140003000000000000000000f5ff00000000000014000400000000000000000000000500010006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x0, 0x9, "55b480", 0x2, 0xf8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x10) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r15, 0x25, 0x8}, 0x14) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="0000080000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0xca, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x30d26732fe5b7335, 0x100408) 1.815294538s ago: executing program 1 (id=4703): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[], 0xc4}}, 0xc880) (async) socket$kcm(0xa, 0x5, 0x0) 1.814850044s ago: executing program 0 (id=4704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) close(r0) 1.771128903s ago: executing program 1 (id=4706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) 1.714875437s ago: executing program 0 (id=4708): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000005700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}, {{&(0x7f00000013c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200000}}], 0x30}}], 0x2, 0x4800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x2ddfdbfb, {0x0, 0x0, 0x0, r8, {0x9, 0x2}, {0x8, 0xfff1}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4041880) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x81, {0x20, 0x7ee1, 0x0, 0x5, 0x1ff}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.618169554s ago: executing program 3 (id=4710): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @private2}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x25bd33839f9e4759}, 0x20000000) 1.601873081s ago: executing program 1 (id=4711): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) (async) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x50) 1.527048132s ago: executing program 0 (id=4712): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0xf65, 0xde, &(0x7f00000002c0)=""/222, 0x41000}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xf0ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 1.526592064s ago: executing program 2 (id=4713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000080)=[{0x6, 0x8bc63af074fcefa, 0x0, {0x4, 0x2, 0x1}}, {0xffff, 0x0, 0x0, {0x4291, 0xa3, 0x2}}, {0x4c72, 0x2, 0x0, {0xc, 0x2, 0x2}}, {0x5, 0x2, 0x0, {0x9e7, 0x1, 0x2}}], 0x4, 0x20, 0x3630, 0xfffffffffffffffb}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0x8, 0x7fffffffffffffff}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x104}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000080)=[{0x6, 0x8bc63af074fcefa, 0x0, {0x4, 0x2, 0x1}}, {0xffff, 0x0, 0x0, {0x4291, 0xa3, 0x2}}, {0x4c72, 0x2, 0x0, {0xc, 0x2, 0x2}}, {0x5, 0x2, 0x0, {0x9e7, 0x1, 0x2}}], 0x4, 0x20, 0x3630, 0xfffffffffffffffb}) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0x8, 0x7fffffffffffffff}) (async) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x104}}, 0x0) (async) 1.478165825s ago: executing program 4 (id=4714): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102}}}}}}, 0x2a) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010026bd7020fddbdf2509"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 1.433495355s ago: executing program 3 (id=4715): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x200, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3101, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_BROADCAST={0xa}, @IFLA_MTU={0x8, 0x4, 0xffffffff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x800}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x74}}, 0x400c040) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00'}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000090000104000002000000000000000000", @ANYRES32=0x0, @ANYRES8=r3, @ANYRESHEX=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x240048c4) 1.331260656s ago: executing program 2 (id=4716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x5}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_BETA={0x8, 0x5, 0x15}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3}]}}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x5, "dea82968072f16c506e6dc9ca5cc6cbc"}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4010080) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="18000000150081044e81f782db44b9040a78080206000000", 0x18}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0) 1.330846918s ago: executing program 0 (id=4717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f000000080003"], 0x2c}}, 0x800) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f000000080003"], 0x2c}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000e900000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x48ecedaa7bbd76df}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4048851}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4048851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x30}, @local}, 0xc) (async) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x30}, @local}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x73) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={0x1, @default, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffffffc, 0x4, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.329863812s ago: executing program 1 (id=4718): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500001400002000002f9078ac1e0001e00000010000655800189078d3a83df633389d040000000000000086ddffff000000008ebf6294196b2749f994f8613576a1d0a8af168776db8f9cab7a8e68151db9e25017f6cd17462c2a1e6f207f473dee6a1406b4fbd5d213c03647a8d0c526912fc25b032e76fdb8cd91017006b57777095ebc6e23bc19a26565c6ab1462c1fbdc6a9e6bc332fb"], 0xfdef) 1.270312594s ago: executing program 3 (id=4719): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.182310276s ago: executing program 4 (id=4720): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r1, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/110, 0x6e, 0x0, &(0x7f0000000140)=""/217, 0xd9}, &(0x7f0000000280)=0x40) recvfrom$inet(r1, &(0x7f00000002c0)=""/82, 0x52, 0x100, &(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000380)) r3 = socket(0x23, 0x8000f, 0x3ff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x264, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1b8, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x27b6b87ebaae7828}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x40044}, 0x4000085) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000700)=@ccm_128={{0x303}, "e456e89a6f4f050e", "a3af06ad1ed0c220f5671db19b3c8ebe", "6a4f13d0", "91890a425b74b812"}, 0x28) (async) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000740)=0x4, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'batadv_slave_1\x00', 0x10}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x40c0) r5 = accept$phonet_pipe(r3, &(0x7f0000000900), &(0x7f0000000940)=0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(r5, 0x40809440, &(0x7f0000000c40)={&(0x7f0000000c00)=[{&(0x7f0000000980)}, {&(0x7f00000009c0)="e6177468802bf8410daab21aae2a889bfdd1bff9d15739ac75d7217ef51645c497a26d3e2d13981cdd6912b56ae38773724a80a6068b3fbe183f600f771489af2f7c456a6cc529d1a5084a418009a7b65b300aac391954ed127eb64daadfc7126758cc4352146b304edfa896434bdb4f4c77e09ca8747591c1d0b4603ca1593f0743f0e34b5d861b51ea9e9f12b171a82a3e83e2260401d3", 0x98}, {&(0x7f0000000a80)="08e1c10224afca50decbf203eff8044772876c42161b3d1081502b1cdb9a7c6317e665da79ebe3dadd92a798a3ff36ad54373757659b9155e93062835019c90aa3d7873eb7e661acf180bffdb38d71575748015982761519a1b2ff598bedd66c027e02cf42efc876", 0x68}, {&(0x7f0000000b00)="43020170025a0de770effc60f14864c9adf818bc1e3316902d3af845fe36d3dd7dd445b5e788d6790394a79530db8ca9382922441d1b554827d8eeee14c897549d912aca54f33cc361d4983c3024afb24c1b46334a8fc96a69ba80b0374127d1242a8c7ad13708b5b3eb29e8298d1e5727f564aae619e8a8336201b0680a52759871389d0f3b3258ee1c59671340c7a246208ba1f0adb3e4ed155731eca2b3e824f63ab2a50444707f14764634a0f19b0e77058a8d52b4e2e1fb2869409e2d65875a1709e3aaca192194d403edafa7db460780c583", 0xd5}], 0x4, 0xf9, 0x0, 0x0, 0x7c07fa74, 0x4f64, 0x7, 0x101}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000cc0)={0x42}, 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000e00)={r3, &(0x7f0000000d00)='802.15.4 MAC\x00', 0x40, &(0x7f0000000d40)={@align=0x571a, {0x3, 0x80, 0x7, 0x5}}, 0x7, &(0x7f0000000d80)={@_ha_fsid}, &(0x7f0000000dc0)}) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000e40), {[{{@arp={@remote, @remote, 0xffffffff, 0xff000000, 0x6, 0xd, {@mac=@multicast}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x41d, 0x3, 0x4, 0xdbc, 0x8, 'veth0\x00', 'nr0\x00', {}, {}, 0x0, 0x20c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="6595afdf0994", @mac=@broadcast, @local, @multicast1, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r0, &(0x7f00000012c0)={0x8}) r8 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000001300)=0x2000, 0x4) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f0000001440)={r0, &(0x7f0000001340)='}!\x00', 0x81, &(0x7f0000001380)={@align, {0xfffa, 0x5, 0x5, 0x3}}, 0x40000, &(0x7f00000013c0)={@_ha_fsid}, &(0x7f0000001400)=0xfffffffb}) (async) r11 = gettid() (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f00000015c0)=0xe8) sendmsg$nl_generic(r6, &(0x7f0000001bc0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001600)={0x544, 0x2b, 0x300, 0x70bd2b, 0x25dfdbfb, {0xc}, [@nested={0x24, 0xf1, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @nested={0x4, 0x6c}, @nested={0x4, 0x38}, @nested={0x4, 0xab}, @nested={0x4, 0x1b}, @nested={0x4, 0x5a}, @nested={0x4, 0xb0}]}, @nested={0x340, 0x4b, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @pid=r11}, @generic="33984fca1db13ade616aa53eea78e162216f5459c2f5b4e7f99722831a6571fe89f4919811847741e6ca4a458f6924b02e439f565f345fda498875bfccb78cdce084d2f11a9e712735de35f4d654c7f679ef712917cf40418da1d233a6f97dadff79132925add2b26d6b1ffee188a15ba3853e6675793410aa0d75577ee28644f6ed705e53e1b0a6", @generic="799577a0b6344aaae9935cc4c794c157578058d750626c0c9e4f3f775a1c52847316e73ac3a379232413bd9f30897eb0974ce8c67a08263e421acef295fc0a0b515e8caf86aaac39d764d195d8647ac9dc1e1d5ae95a0ff5e88eff46f2e9dbd2358faecccf23c34df5498fde0735202161072d671af67b17e9d4207b7cad9810add6fb6073903b985fbe0f270ecd0d3d938d5a601b76dc8fa1ab81b7d9cf1e455f4d4ca6008e9c6c5077c1d4581a8d36a7dd7c4c675330bdc5e265c2e1498c280e31ce33", @typed={0x8, 0x73, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x118}, @generic="c739a0c245b7a9ed4a3fea2b2c381e27e8c2a00c6201230ede0df2d8ca547e0b09e821b3a013e49e5fab095eeac0c82da58832e1b768a8710356756ee5599283488ff8b85c4ab0051a944bd62f5c", @generic="44926b8a9b020be5eb93b8cfe000f3031cd0ad47ef08ea4837123928bf0156702af07420374000d32089180dd4c0ea22bb40ac06a4dbc98985bcfbb5ea6ec470e954a0239ac5a921c9ca0b808c86d33115b0ce36043173f7f57f05fdfc25a45fc4580515ec50e025a5b7b09cf936d22ba40f7e161b18238d9343051173b60ee8ec1c5767e7895c673cf6019ad95fdd2d2157646f2cea7cb5d01a54d5f6a23040eedefd2b4f95a104944173aa8128168370ae8f636e7177cb89fc1212a7bc381b7ec57da3c98a9a08e8b112600a6e13fd3c8a968551734c25ae4d3465", @generic="b20266ceb21a260dc40d7dbccc55e0c60e2d298d853da60ee67d8a8619f3cee9022a163caf4abb0f59fc44f23dbc20801953e5499fd545ec9e41b05b4c913858745cf42110b4fba73a87ae6c557a44746c5765b4179a5a651391bfbaa18c8458360b82bbb52ce21ee3587751f7c0f5c022fd98db4bd0d39c0ef35fa370fb5662f14f70992946f91a02f63b72eed9cf5b330d912829d9394529b484bee5bd1b97da590b2974913301f8ad0ebfb2aa8463e5e4"]}, @generic="1b776305cfa817f26b888272da4cbc8c283788f423f43c017d8d95df8bc7bce519c6699a8d38b7cff4ffbd16e3932c3659304bdd5b9ed0ca6aeab214b6351415562b2220ccff4d1789ff8a482ca8444eb2928aadb31292ae1fb1a4c2d2bb0d37d7f6d1359a9d4ae751ed625460a5a9fbab1e46a9cd92419523a2ed5bf45837054f4427702a5ce30843b960474bc3e324f990197aafcb9c4141950f9435f4525b5243e6982d1ea8e9fd9f381d1cbf0c5ebb8900a413340fcde82ec4de056532fcb22f2ea6aefd44d205b56822764edbb888a2ab2e8370ee597fc2fcb7893230425114306432ef2f3f", @nested={0xd1, 0x5f, 0x0, 0x1, [@generic="9292a5a73e521a0611cd505bbd86b4a8c4a9216ff44d3984712aac4ca1b2e682e491557b49071c57b9760cc0b381a73c86f148999bc6d693abcbdca7e18bd0760693c30ae374037ed332fbb7b9ca9d365d5111adb9b7864119fc3f927c514d2dbcfa2bdd7b38e064f9751725fa1fcde660a45642d29cfdafcf12675c12cc196a7cb6c3b4ce57007dc6c3d21c7584a730595089cb5c14e92090257ef240ee0156887b986fe145cd4fe599be0f09d247c57fe6d57d4f44a764c2af5c021768d0ffb2ed0de5b616272dbd5bc3cef2"]}, @nested={0x10, 0xc4, 0x0, 0x1, [@nested={0x4, 0x100}, @generic="f7bc3a7afa38fdf8"]}]}, 0x544}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044880) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000001c00)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @null]}) (async) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000001e80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0x98, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x30}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x6c}, {0x6e}, {0xc, 0x1}, {0x48, 0x1}, {0x48}, {0x1, 0x1}, {0x4, 0x1}, {0x36, 0x1}, {0xb, 0x1}, {0x18}, {0x18, 0x1}, {0x1b, 0x1}, {0x4}, {0x16}, {0x9}, {0xc}, {0xb}, {0x12, 0x1}, {0x0, 0x1}, {0x24, 0x1}, {0x9, 0x1}, {0x6}, {0x18}, {0x9}, {0x18}, {0x1b}, {0x36, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7b5a}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x510}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000880) 1.063434043s ago: executing program 2 (id=4721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)) 1.046194209s ago: executing program 1 (id=4722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffb9, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.018522874s ago: executing program 4 (id=4723): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x23, 0x5, 0x0) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 943.31132ms ago: executing program 2 (id=4724): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'caif0\x00', &(0x7f0000000740)=@ethtool_gstrings={0x1b, 0x5, 0x4, "a2513a4c"}}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x8011}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000540001002dbd7000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010001400000000000000000000000000000000108"], 0x38}}, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x1000}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r8) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408b4}, 0x4c800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000008000000911142000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r12, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20004040) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 942.798722ms ago: executing program 0 (id=4725): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x60600) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffff45, 0x0, 0x1, 0x2000000}, 0x28) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x6, 0xffffffff, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x68, 0x0, 0x5, 0x29, 0x0, @multicast1, @local}}}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {&(0x7f00000001c0)="0d560000e3b6f48b5896bd9b", 0xc}], 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xbb) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x5) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = accept4$unix(r6, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x148, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8f9}]}, @TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff4120}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1bd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7ef0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a89c45d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39c8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x148}}, 0x20000081) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 866.471419ms ago: executing program 3 (id=4726): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaae1aa86dd606410a6002e0001fe8000000000000000600000000000120000000000000000000000000000000104"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="99742bbd7000fbdbdf25150000004c0001"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 775.978063ms ago: executing program 4 (id=4727): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004c80)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8100}, 0x20000090) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', r1, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 279.447713ms ago: executing program 2 (id=4728): r0 = socket$inet(0x2, 0x3, 0x2) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000001c}) 277.099014ms ago: executing program 3 (id=4729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x1}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000000c0)=0x401, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1406, 0x800, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}}, 0x2000000c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80025942}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r1, 0x6}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xa209}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xd7a, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x854}, 0x20) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000600)={@initdev}, &(0x7f0000000640)=0x14) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000680)=0xc, 0x4) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000700)=@add_del={0x2, &(0x7f00000006c0)='ip6erspan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r4) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000880)=@assoc_value, &(0x7f00000008c0)=0x8) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000900)=0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r8) sendmsg$AUDIT_USER(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x3ed, 0x2, 0x70bd2a, 0x25dfdbfc, "41460441bb6e63e249d446e8e1443e500f000f1d775409d2813ea23086402606aaf6ba5121f3e49cb91026adc5e46d7111d4f39919810141a6", ["", ""]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000ac0)={r1, 0x9, 0x30, 0xd4a5, 0x1}, &(0x7f0000000b00)=0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x2, 0x4e23, @empty}, 0x10) 212.756735ms ago: executing program 4 (id=4730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) 184.494572ms ago: executing program 1 (id=4731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf250000000000f9ffff07000a"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xfffffff0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x20008084) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x300, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x194, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x580}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63e5}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5bb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x660}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000000}, 0x240418c1) (async) socket$pppl2tp(0x18, 0x1, 0x1) 103.203952ms ago: executing program 3 (id=4732): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800030000000000140001"], 0x38}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0xc03, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xfffc, 0xf800, 0x2, 0x0, 0x0, 0x3e}, {0xfffffffffffffffc, 0x100000000007, 0x0, 0x8001, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8c4c5148bc5e9e85da511f7f7ac55f48dd3f7cdb16e4aaf0a3a9fa63172ac90123733019ffa10334a1a92d455898bf7ef21a9", @ANYRES16=0x0, @ANYBLOB="c5b216aa15df2f5ad23158da9a60f399b4c6f1e450e91dac65bd97842eec31eaa0c6c67c3611b6cc23c79b380d004ef776bafb5236c92fcd21c2796dc631a88a08ac53a61a5bb5dc8affbc5711dfd8301538eb2ee13c", @ANYRESDEC=r3, @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r3], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x24040081) recvmmsg(r5, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 84.341616ms ago: executing program 2 (id=4733): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400e5ff", @ANYRES16=r2, @ANYBLOB="00032bbd7000fbdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) r3 = socket(0x15, 0x2, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) read$alg(r0, &(0x7f0000000700)=""/244, 0xf4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x7c, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc180}, 0x810) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0x14, 0x0, &(0x7f0000000440)="e03742e8680d0100f510762f0800df66aad475d0", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0xe4, 0xad, &(0x7f00000003c0)="0c1f4e752a402570c6ed354b0a90293d768b0394a0d4cd698033b0b37e7c5497269ad5856ed824f45820a5fe60689efc8b1bd2a837b6803b5b42e4856c475319317a209315564e19557cef33d3d70ac2d6bd8e0c868924f0114858b27874ac70cf8944bf7e5d432128c267308fa2dd4754fd7eb64cc26170fef033b18d3962ab1bd54c2e205cdeb03f528831710e3e8bdbb5f37ec732c2c071f3e11c75fc26b9a6ab6a160a7ca027f017313219538b0574088f58f0d4850a4a7517d0bfb7bf9640f5955b21fe2631642a26a1a1f028ad4e77a8ca2dde88877326d847f5cedb42fb2747c1", &(0x7f00000004c0)=""/173, 0x9, 0x0, 0xb6, 0xc4, &(0x7f0000000580)="92851f51ca6ead3c0f82ae1a46a0645f10f4dc784fd325cae53b2673d52b830a54c02b927b66191174c6929543709f07877c711dff6ba9d91b324ed7c2c4bef10b9ee5f48d888cc2959fe95457f7b9ac7e14210fbe2b5f307fdd59a7dce7a6a41f770d2a7595a4199652291b32f9b1def63ce9cff232c587060e9f28a8a923b25c79fa0868d890a67a5c31e3e271a2d15ae863b010c661280bd376644651923b984a75472af734e790d7cbaa23bb09edd5085943df3d", &(0x7f0000000800)="c258d63c39b846aeb8946de390c0987644bc5f558598b0fd0aa448cdcb3048b75d6489b10d93efe5decf073fea011117abd5cdfbfe06f524e6e06b05bb12e472827942e0ec0e73426a8cba571f3d8bc2f58012c56e4c8d1ec85efef95efec6486ded457132a1dfd57d27804c9cc0706bb6565745cf581990714df1559743d824ed144d8e5371b2b5b4f56e12775dc1e28f16e5c5f50e7e37440966aec3e4fe17c4139975fde79560e49841439a964d011d0d3c3b3e9612882b975ca09fd5c9895c3f5e67", 0x7, 0x0, 0x8}, 0x50) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) socket(0x2b, 0x1, 0x1) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400e5ff", @ANYRES16=r2, @ANYBLOB="00032bbd7000fbdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) (async) socket(0x15, 0x2, 0x9) (async) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) (async) read$alg(r0, &(0x7f0000000700)=""/244, 0xf4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x7c, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc180}, 0x810) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0x14, 0x0, &(0x7f0000000440)="e03742e8680d0100f510762f0800df66aad475d0", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0xe4, 0xad, &(0x7f00000003c0)="0c1f4e752a402570c6ed354b0a90293d768b0394a0d4cd698033b0b37e7c5497269ad5856ed824f45820a5fe60689efc8b1bd2a837b6803b5b42e4856c475319317a209315564e19557cef33d3d70ac2d6bd8e0c868924f0114858b27874ac70cf8944bf7e5d432128c267308fa2dd4754fd7eb64cc26170fef033b18d3962ab1bd54c2e205cdeb03f528831710e3e8bdbb5f37ec732c2c071f3e11c75fc26b9a6ab6a160a7ca027f017313219538b0574088f58f0d4850a4a7517d0bfb7bf9640f5955b21fe2631642a26a1a1f028ad4e77a8ca2dde88877326d847f5cedb42fb2747c1", &(0x7f00000004c0)=""/173, 0x9, 0x0, 0xb6, 0xc4, &(0x7f0000000580)="92851f51ca6ead3c0f82ae1a46a0645f10f4dc784fd325cae53b2673d52b830a54c02b927b66191174c6929543709f07877c711dff6ba9d91b324ed7c2c4bef10b9ee5f48d888cc2959fe95457f7b9ac7e14210fbe2b5f307fdd59a7dce7a6a41f770d2a7595a4199652291b32f9b1def63ce9cff232c587060e9f28a8a923b25c79fa0868d890a67a5c31e3e271a2d15ae863b010c661280bd376644651923b984a75472af734e790d7cbaa23bb09edd5085943df3d", &(0x7f0000000800)="c258d63c39b846aeb8946de390c0987644bc5f558598b0fd0aa448cdcb3048b75d6489b10d93efe5decf073fea011117abd5cdfbfe06f524e6e06b05bb12e472827942e0ec0e73426a8cba571f3d8bc2f58012c56e4c8d1ec85efef95efec6486ded457132a1dfd57d27804c9cc0706bb6565745cf581990714df1559743d824ed144d8e5371b2b5b4f56e12775dc1e28f16e5c5f50e7e37440966aec3e4fe17c4139975fde79560e49841439a964d011d0d3c3b3e9612882b975ca09fd5c9895c3f5e67", 0x7, 0x0, 0x8}, 0x50) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) (async) 0s ago: executing program 0 (id=4734): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4, r3, 0x1000000}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @random="000100", @remote}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="08001a"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) kernel console output (not intermixed with test programs): ticast mode [ 329.357861][T17086] rdma_op ffff88802b4599f0 conn xmit_rdma 0000000000000000 [ 329.371613][T17086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2896'. [ 329.493115][T17095] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 329.529982][T17097] netlink: 'syz.1.2897': attribute type 10 has an invalid length. [ 329.549812][T17097] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2897'. [ 329.668170][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2899'. [ 329.903608][T17123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2903'. [ 330.413375][T17143] 8021q: VLANs not supported on ip6gre0 [ 330.532618][T17156] rdma_rxe: rxe_newlink: failed to add lo [ 330.633728][T17162] netlink: 'syz.4.2913': attribute type 1 has an invalid length. [ 330.669835][T17167] syzkaller0: entered promiscuous mode [ 330.675671][T17167] syzkaller0: entered allmulticast mode [ 330.677014][T17162] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2913'. [ 330.693722][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 330.931569][T17182] netlink: 212320 bytes leftover after parsing attributes in process `syz.4.2918'. [ 330.976641][T17181] gre1: entered promiscuous mode [ 331.044703][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2920'. [ 331.166059][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.186008][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.196068][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.204879][T17197] netlink: 'syz.4.2921': attribute type 10 has an invalid length. [ 331.214747][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.228339][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.265429][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.274381][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.282394][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.290962][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.298609][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.623432][T17191] lo speed is unknown, defaulting to 1000 [ 331.710129][T17217] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2924'. [ 331.729653][T17217] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2924'. [ 332.012412][T17238] xt_TCPMSS: Only works on TCP SYN packets [ 332.093231][T17234] lo speed is unknown, defaulting to 1000 [ 332.101426][T17232] syzkaller1: entered promiscuous mode [ 332.106941][T17232] syzkaller1: entered allmulticast mode [ 332.363998][T17191] chnl_net:caif_netlink_parms(): no params data found [ 332.453808][T17253] xt_socket: unknown flags 0x50 [ 332.534445][T17260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2935'. [ 332.578570][T17191] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.587130][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.588089][T17260] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2935'. [ 332.597294][T17191] bridge_slave_0: entered allmulticast mode [ 332.611296][T17263] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2935'. [ 332.612795][T17191] bridge_slave_0: entered promiscuous mode [ 332.674732][T17191] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.685904][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.693846][T17191] bridge_slave_1: entered allmulticast mode [ 332.705129][T17191] bridge_slave_1: entered promiscuous mode [ 332.812396][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.921713][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.052132][ T6206] team0: left allmulticast mode [ 333.057781][ T6206] team_slave_0: left allmulticast mode [ 333.075568][ T6206] team_slave_1: left allmulticast mode [ 333.084289][ T6206] bridge0: port 3(team0) entered disabled state [ 333.103759][ T6206] bridge_slave_1: left allmulticast mode [ 333.119760][ T6206] bridge_slave_1: left promiscuous mode [ 333.130196][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.215450][ T6206] pimreg13: left allmulticast mode [ 333.280886][ T6206] bond0 (unregistering): (slave ip6gretap0): Releasing active interface [ 333.295609][ T6206] ip6gretap0 (unregistering): left allmulticast mode [ 333.319311][ T5831] Bluetooth: hci5: command tx timeout [ 333.449724][T17298] netlink: 'syz.4.2945': attribute type 13 has an invalid length. [ 333.814140][ T6206] bond1 (unregistering): (slave veth5): Releasing active interface [ 333.823261][ T6206] bond1 (unregistering): Released all slaves [ 333.835832][ T6206] bond2 (unregistering): Released all slaves [ 333.848770][ T6206] bond4 (unregistering): Released all slaves [ 333.862077][ T6206] bond0 (unregistering): Released all slaves [ 333.879041][ T6206] bond3 (unregistering): Released all slaves [ 333.901491][ T6206] bond5 (unregistering): Released all slaves [ 333.916143][T17191] team0: Port device team_slave_0 added [ 333.928627][T17191] team0: Port device team_slave_1 added [ 334.103035][ T6206] !©9: left promiscuous mode [ 334.293694][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.315984][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.406139][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.431134][T17308] netlink: 'syz.3.2947': attribute type 1 has an invalid length. [ 334.440692][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.447749][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.497297][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.536171][T17333] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 334.553106][T17333] netlink: 'syz.0.2952': attribute type 21 has an invalid length. [ 334.562038][ T29] audit: type=1107 audit(1775433891.268:8): pid=17326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 334.692112][T17344] netlink: 'syz.3.2954': attribute type 8 has an invalid length. [ 334.898399][T17191] hsr_slave_0: entered promiscuous mode [ 334.927195][T17191] hsr_slave_1: entered promiscuous mode [ 335.399296][ T5831] Bluetooth: hci5: command tx timeout [ 335.477156][T17382] __nla_validate_parse: 2 callbacks suppressed [ 335.477173][T17382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'. [ 335.771917][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 335.821965][T17396] openvswitch: netlink: Flow actions attr not present in new flow. [ 336.009676][ T6206] batadv0: left promiscuous mode [ 336.068193][ T6206] hsr_slave_0: left promiscuous mode [ 336.096403][ T6206] hsr_slave_1: left promiscuous mode [ 336.117523][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.147831][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.557883][T17422] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2971'. [ 336.571372][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 336.667807][ T6206] team_slave_1 (unregistering): left promiscuous mode [ 336.684333][ T6206] team0 (unregistering): Port device team_slave_1 removed [ 336.703153][T17426] netlink: 'syz.0.2972': attribute type 4 has an invalid length. [ 336.724435][ T6206] team_slave_0 (unregistering): left promiscuous mode [ 336.738099][ T6206] team0 (unregistering): Port device team_slave_0 removed [ 336.902552][T17418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.914242][T17418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.051037][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 337.099871][T17413] lo speed is unknown, defaulting to 1000 [ 337.140243][T17418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.165084][T17418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.293892][T17441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.324422][T17418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.335061][T17418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.406635][ T6206] IPVS: stop unused estimator thread 0... [ 337.449059][ T796] IPVS: starting estimator thread 0... [ 337.457647][T17418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.471118][T17418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.479327][ T5831] Bluetooth: hci5: command tx timeout [ 337.550287][T17455] IPVS: using max 31 ests per chain, 74400 per kthread [ 337.575960][T17458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.678120][T17458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2979'. [ 338.053866][ T1004] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.063163][ T1004] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.083138][T17452] lo speed is unknown, defaulting to 1000 [ 338.198259][ T1004] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.212995][ T1004] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.471678][ T1004] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.484917][ T1004] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.501621][ T1004] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.522332][ T1004] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.541377][T17191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.670246][T17191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.720496][T17505] ip6gre1: entered promiscuous mode [ 338.730605][T17505] ip6gre1: entered allmulticast mode [ 338.740392][T17191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.761218][T17191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.816928][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 338.869714][T17512] netlink: 'syz.2.2988': attribute type 11 has an invalid length. [ 338.902539][T17512] netlink: 'syz.2.2988': attribute type 23 has an invalid length. [ 338.914349][T17512] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2988'. [ 339.212541][T17191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.263335][T17191] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.325031][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.332218][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.394523][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.401686][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.447857][T17554] netlink: 'syz.3.2998': attribute type 10 has an invalid length. [ 339.466282][T17554] team0: Port device veth1 added [ 339.561303][ T5831] Bluetooth: hci5: command tx timeout [ 339.859434][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2999'. [ 339.907330][T17584] syz.2.3003 uses old SIOCAX25GETINFO [ 340.162430][T17599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3006'. [ 340.200726][T17191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.394981][T17191] veth0_vlan: entered promiscuous mode [ 340.431970][T17191] veth1_vlan: entered promiscuous mode [ 340.535910][T17191] veth0_macvtap: entered promiscuous mode [ 340.548101][T17613] __nla_validate_parse: 1 callbacks suppressed [ 340.548117][T17613] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3008'. [ 340.603971][T17191] veth1_macvtap: entered promiscuous mode [ 340.666523][T17191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.718081][T17191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.730390][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.757584][ T7740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.766672][ T7740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.789446][ T7740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.798620][ T7740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.818560][ T35] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.991867][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.006323][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.033637][T17633] netlink: 'syz.4.3013': attribute type 15 has an invalid length. [ 341.064590][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 341.091793][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 341.140328][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.148677][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.595226][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.606127][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.615284][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.624734][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.633611][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.639479][T17664] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 341.770627][T17660] lo speed is unknown, defaulting to 1000 [ 341.799617][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 341.895982][ T7740] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 341.907492][ T7740] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 341.948298][T17660] chnl_net:caif_netlink_parms(): no params data found [ 342.056464][T17660] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.064991][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.074147][T17660] bridge_slave_0: entered allmulticast mode [ 342.083139][T17660] bridge_slave_0: entered promiscuous mode [ 342.096253][T17660] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.104659][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.114312][T17660] bridge_slave_1: entered allmulticast mode [ 342.124469][T17660] bridge_slave_1: entered promiscuous mode [ 342.165923][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.182624][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.214212][T17660] team0: Port device team_slave_0 added [ 342.225535][T17660] team0: Port device team_slave_1 added [ 342.261564][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.268539][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.294899][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.310096][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.317060][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.343405][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.391013][T17660] hsr_slave_0: entered promiscuous mode [ 342.397726][T17660] hsr_slave_1: entered promiscuous mode [ 342.404913][T17660] debugfs: 'hsr0' already exists in 'hsr' [ 342.411498][T17660] Cannot create hsr debugfs directory [ 342.459826][T11777] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.720386][T17660] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.808064][T17660] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.865409][T17660] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.954845][T17660] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.009135][ T7747] vlan3: left promiscuous mode [ 343.014605][ T7747] bridge0: port 3(vlan3) entered disabled state [ 343.035297][ T7747] bridge_slave_1: left allmulticast mode [ 343.050656][ T7747] bridge_slave_1: left promiscuous mode [ 343.056575][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.067903][ T7747] bridge_slave_0: left promiscuous mode [ 343.075032][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.134864][ T7747] bond13 (unregistering): (slave ip6gretap1): Releasing active interface [ 343.225973][ T7747] bond8 (unregistering): (slave vti0): Releasing backup interface [ 343.523196][ T7747] team0: Port device bridge5 removed [ 343.622807][ T7747] bond1 (unregistering): Released all slaves [ 343.635925][ T7747] bond2 (unregistering): Released all slaves [ 343.648717][ T7747] bond3 (unregistering): Released all slaves [ 343.662966][ T7747] bond4 (unregistering): Released all slaves [ 343.675795][ T7747] bond0 (unregistering): Released all slaves [ 343.691209][ T7747] bond5 (unregistering): Released all slaves [ 343.706597][ T7747] bond6 (unregistering): Released all slaves [ 343.718964][ T7747] bond7 (unregistering): Released all slaves [ 343.719472][ T5831] Bluetooth: hci3: command tx timeout [ 343.736854][ T7747] bond8 (unregistering): Released all slaves [ 343.751682][ T7747] bond9 (unregistering): Released all slaves [ 343.766655][ T7747] bond10 (unregistering): Released all slaves [ 343.785296][ T7747] bond11 (unregistering): Released all slaves [ 343.814115][ T7747] bond12 (unregistering): Released all slaves [ 343.827465][ T7747] bond13 (unregistering): Released all slaves [ 343.840131][ T7747] bond14 (unregistering): Released all slaves [ 343.853042][ T7747] bond15 (unregistering): Released all slaves [ 343.868568][ T7747] bond16 (unregistering): Released all slaves [ 344.071259][ T7747] : left promiscuous mode [ 344.118020][ T7747] tipc: Left network mode [ 344.240584][ T7747] IPVS: stopping backup sync thread 14596 ... [ 344.386730][ T7747] batman_adv: batadv0: Removing interface: macvtap1 [ 344.393902][T17653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.529980][T17660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.554978][T17660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.566124][T17660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.617309][T17660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.617392][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 344.670687][T17701] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20004 [ 344.678211][T17700] geneve3: entered promiscuous mode [ 344.828353][ T7747] hsr_slave_0: left promiscuous mode [ 344.845216][ T7747] hsr_slave_1: left promiscuous mode [ 344.852885][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.891858][T17718] netlink: 'syz.1.3032': attribute type 11 has an invalid length. [ 344.934432][ T7747] veth1_to_hsr: left allmulticast mode [ 344.934954][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3033'. [ 344.950775][ T7747] veth1_to_hsr: left promiscuous mode [ 345.279906][ T7747] veth0_virt_wifi (unregistering): left allmulticast mode [ 345.361825][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 345.373715][T17739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.383726][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 345.399099][T17739] netlink: 'syz.2.3037': attribute type 1 has an invalid length. [ 345.527128][ T24] lo speed is unknown, defaulting to 1000 [ 345.534127][ T24] syz2: Port: 1 Link DOWN [ 345.613043][T17739] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.660068][T17745] bond6 (unregistering): Released all slaves [ 345.804116][ T5831] Bluetooth: hci3: command tx timeout [ 345.910450][T17764] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3042'. [ 346.003285][T17660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.048571][ T7747] IPVS: stop unused estimator thread 0... [ 346.085978][T17660] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.114859][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.122050][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.188267][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.195477][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.347641][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3050'. [ 346.376486][T17783] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 346.465358][T17786] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3048'. [ 346.490311][T17792] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3049'. [ 346.521515][T17783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3048'. [ 346.707884][T17660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.822836][T17795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.931277][T17660] veth0_vlan: entered promiscuous mode [ 346.945204][T17660] veth1_vlan: entered promiscuous mode [ 346.984376][T17660] veth0_macvtap: entered promiscuous mode [ 347.011103][T17660] veth1_macvtap: entered promiscuous mode [ 347.044067][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3054'. [ 347.057035][T17660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.087049][T17660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.123519][ T3008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.147962][ T3008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.160452][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3054'. [ 347.170122][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 347.173232][ T3008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.245321][ T3008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.328813][T17807] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3056'. [ 347.340624][T17807] netlink: 'syz.1.3056': attribute type 2 has an invalid length. [ 347.344065][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.380717][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.450396][ T6206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.458417][ T6206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.465402][T17814] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3057'. [ 347.486358][T17814] IPv6: sit1: Disabled Multicast RS [ 347.514734][T17814] sit1: entered allmulticast mode [ 347.880500][ T5831] Bluetooth: hci3: command tx timeout [ 347.940862][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.947403][T17833] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 347.951102][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.964990][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.973439][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.981363][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.184478][T17837] 8021q: adding VLAN 0 to HW filter on device bond13 [ 348.263450][T17837] bond12: (slave bond13): making interface the new active one [ 348.298478][T17837] bond12: (slave bond13): Enslaving as an active interface with an up link [ 348.413759][T17833] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 348.470427][T17842] 8021q: adding VLAN 0 to HW filter on device bond12 [ 348.788937][T17847] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 348.803557][T17832] chnl_net:caif_netlink_parms(): no params data found [ 348.874500][T17852] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 349.023251][T17832] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.040059][T17832] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.047451][T17832] bridge_slave_0: entered allmulticast mode [ 349.057359][T17832] bridge_slave_0: entered promiscuous mode [ 349.093703][T17861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.101193][T17832] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.108442][T17832] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.116400][T17832] bridge_slave_1: entered allmulticast mode [ 349.125294][T17832] bridge_slave_1: entered promiscuous mode [ 349.212543][T17832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.407573][T17832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.451441][T17866] netlink: 'syz.2.3071': attribute type 9 has an invalid length. [ 349.512121][T17832] team0: Port device team_slave_0 added [ 349.539044][T17832] team0: Port device team_slave_1 added [ 349.619689][T17877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 349.647526][T17878] bond6 (unregistering): Released all slaves [ 349.725887][T17832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.743599][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.786489][T17832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.806306][T17832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.815288][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.846691][T17832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.932975][T17832] hsr_slave_0: entered promiscuous mode [ 349.951346][T17832] hsr_slave_1: entered promiscuous mode [ 349.957710][T17832] debugfs: 'hsr0' already exists in 'hsr' [ 349.971222][ T5829] Bluetooth: hci3: command tx timeout [ 349.983481][T17832] Cannot create hsr debugfs directory [ 350.040916][ T5829] Bluetooth: hci2: command tx timeout [ 350.096787][T17940] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 350.106948][T17944] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 350.157341][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.166426][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.369912][T17960] netlink: 'syz.4.3085': attribute type 2 has an invalid length. [ 350.416777][T17832] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.507254][T17832] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.520721][T17962] openvswitch: netlink: Missing valid actions attribute. [ 350.527802][T17962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.569839][T17967] syzkaller0: entered allmulticast mode [ 350.598124][T17832] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.627250][T17962] syzkaller0 (unregistering): left allmulticast mode [ 350.900518][T17832] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.007113][T17990] __nla_validate_parse: 8 callbacks suppressed [ 351.007130][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 351.083923][T17990] netlink: 'syz.0.3092': attribute type 1 has an invalid length. [ 351.121699][T17990] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3092'. [ 351.165026][T17832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.225738][T17832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.273789][T17832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.303705][T18003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 351.324464][T17832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.373007][T18010] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3098'. [ 351.441070][T18020] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3099'. [ 351.450843][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3099'. [ 351.551615][T17832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.577219][T18020] IPVS: Scheduler module ip_vs_ not found [ 351.602437][T17832] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.635493][T17934] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.642685][T17934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.704312][T17934] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.711524][T17934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.816493][T18046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3104'. [ 351.839970][T18046] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3104'. [ 351.970578][T18048] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3107'. [ 352.000427][T18048] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 352.119771][ T5829] Bluetooth: hci2: command tx timeout [ 352.163916][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 352.226030][T18061] bond2: option updelay: invalid value (18446744073709493611) [ 352.242808][T18061] bond2: option updelay: allowed values 0 - 2147483647 [ 352.257011][T18061] bond2 (unregistering): Released all slaves [ 352.332337][T18066] ªªªªª­•‘>œOŒó: renamed from virt_wifi0 [ 352.426526][T17832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.538829][T17832] veth0_vlan: entered promiscuous mode [ 352.587088][T17832] veth1_vlan: entered promiscuous mode [ 352.671136][T17832] veth0_macvtap: entered promiscuous mode [ 352.837151][T17832] veth1_macvtap: entered promiscuous mode [ 352.908836][T17832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.951138][T18102] sctp: [Deprecated]: syz.2.3117 (pid 18102) Use of int in maxseg socket option. [ 352.951138][T18102] Use struct sctp_assoc_value instead [ 352.968430][T17832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.028288][T17934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.038897][T17934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.058487][T17934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.093076][T17934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.244140][T17907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.302836][T17907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.406136][T17934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.424822][T18128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.441184][T17934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.592489][T18139] netlink: 'syz.2.3125': attribute type 3 has an invalid length. [ 354.017887][T18155] gretap3: entered promiscuous mode [ 354.024771][T18155] gretap3: entered allmulticast mode [ 354.062407][T18155] vlan0: entered promiscuous mode [ 354.067476][T18155] geneve1: entered promiscuous mode [ 354.074627][T18155] vlan0: entered allmulticast mode [ 354.165524][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.176608][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.195656][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.203671][ T5837] Bluetooth: hci2: command tx timeout [ 354.215083][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.224526][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.400172][T18173] netlink: 'syz.3.3133': attribute type 13 has an invalid length. [ 354.409942][T17933] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.421589][T17933] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.527855][T17933] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.543162][T17933] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.580842][T18179] openvswitch: netlink: Flow key attr not present in new flow. [ 355.002549][T18199] ipt_ECN: cannot use operation on non-tcp rule [ 355.312916][T18159] chnl_net:caif_netlink_parms(): no params data found [ 355.548843][T18217] sctp: [Deprecated]: syz.4.3144 (pid 18217) Use of int in max_burst socket option. [ 355.548843][T18217] Use struct sctp_assoc_value instead [ 355.685722][T18159] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.713653][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.761767][T18159] bridge_slave_0: entered allmulticast mode [ 355.778742][T18159] bridge_slave_0: entered promiscuous mode [ 355.803302][T18159] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.817980][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.850204][T18159] bridge_slave_1: entered allmulticast mode [ 355.857912][T18159] bridge_slave_1: entered promiscuous mode [ 356.018766][T18159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.061400][T18159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.171472][T18159] team0: Port device team_slave_0 added [ 356.182369][T18159] team0: Port device team_slave_1 added [ 356.295263][ T5829] Bluetooth: hci4: command tx timeout [ 356.303110][ T5829] Bluetooth: hci2: command tx timeout [ 356.384059][T18159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.424976][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.452265][T18159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.465450][T18159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.474032][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.512899][T18159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.515083][T18270] __nla_validate_parse: 11 callbacks suppressed [ 356.515098][T18270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3154'. [ 356.545973][T18273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3154'. [ 356.558913][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'. [ 356.581864][T18273] ip6gre2: entered promiscuous mode [ 356.587169][T18273] ip6gre2: entered allmulticast mode [ 356.607890][T18159] hsr_slave_0: entered promiscuous mode [ 356.615067][T18159] hsr_slave_1: entered promiscuous mode [ 356.622746][T18159] debugfs: 'hsr0' already exists in 'hsr' [ 356.628586][T18159] Cannot create hsr debugfs directory [ 356.924465][T18159] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.935642][T18159] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.042736][T18159] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.073710][T18159] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.130220][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3161'. [ 357.140302][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3161'. [ 357.150873][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3161'. [ 357.287794][T18159] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.301648][T18159] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.343738][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 357.411632][T18159] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.428292][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'. [ 357.437418][T18159] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.544507][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3167'. [ 357.589034][T18311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3167'. [ 357.767386][T18318] openvswitch: netlink: IP tunnel dst address not specified [ 358.054542][T18159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.149979][T18159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.200046][T18159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.232954][T18159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.312759][T18352] netlink: 'syz.3.3175': attribute type 15 has an invalid length. [ 358.359792][ T5831] Bluetooth: hci4: command tx timeout [ 358.445107][T18358] netlink: 'syz.3.3177': attribute type 11 has an invalid length. [ 358.664384][T18159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.708755][T18159] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.741393][T17934] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.748551][T17934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.781339][T17934] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.789125][T17934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.816301][T18362] lo: Caught tx_queue_len zero misconfig [ 359.078013][T18371] sctp: [Deprecated]: syz.4.3181 (pid 18371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.078013][T18371] Use struct sctp_sack_info instead [ 359.272813][T18159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.338493][T18383] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 359.411458][T18376] netlink: 'syz.0.3182': attribute type 7 has an invalid length. [ 359.504418][T18159] veth0_vlan: entered promiscuous mode [ 359.586414][T18159] veth1_vlan: entered promiscuous mode [ 359.788678][T18159] veth0_macvtap: entered promiscuous mode [ 359.818007][T18159] veth1_macvtap: entered promiscuous mode [ 359.847827][T18159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.862406][T18159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.876170][T17933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.885223][T17933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.896600][T17933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.905753][T17933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.971296][T17933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.985427][T17933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.011069][ T7742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.018931][ T7742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.094258][T18404] xfrm1: entered allmulticast mode [ 360.440730][ T5831] Bluetooth: hci4: command tx timeout [ 362.529364][ T5831] Bluetooth: hci4: command tx timeout [ 375.280973][T18414] netlink: 'syz.2.3189': attribute type 21 has an invalid length. [ 375.288840][T18414] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.331191][T18414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.338474][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 375.345889][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 375.353185][T18414] IPv6: NLM_F_CREATE should be set when creating new route [ 375.398009][T18417] netlink: 'syz.2.3189': attribute type 21 has an invalid length. [ 375.464625][T18417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.564930][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.592181][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.610018][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.632588][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.644884][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.874257][T18432] netlink: 'syz.2.3194': attribute type 1 has an invalid length. [ 375.884953][T18432] __nla_validate_parse: 2 callbacks suppressed [ 375.884972][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 375.906352][T18439] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3196'. [ 375.921164][T18439] Bluetooth: MGMT ver 1.23 [ 376.042738][T18445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3197'. [ 376.103432][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3197'. [ 376.113040][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'. [ 376.158256][T18452] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3198'. [ 376.226506][T18423] chnl_net:caif_netlink_parms(): no params data found [ 376.337566][T17907] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 376.363270][T18454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.372405][T17907] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 376.490973][T18423] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.493245][T18471] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3202'. [ 376.509700][T18423] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.520741][T18423] bridge_slave_0: entered allmulticast mode [ 376.530274][T18423] bridge_slave_0: entered promiscuous mode [ 376.541023][T18471] tipc: Started in network mode [ 376.545951][T18471] tipc: Node identity ac14140f, cluster identity 4711 [ 376.554852][T18471] tipc: Enabled bearer , priority 10 [ 376.572030][T18423] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.579980][T18423] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.596515][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 376.608869][T18423] bridge_slave_1: entered allmulticast mode [ 376.621030][T18423] bridge_slave_1: entered promiscuous mode [ 376.658312][T18478] syz_tun: entered promiscuous mode [ 376.670835][T18478] syz_tun: left promiscuous mode [ 376.742261][T18423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.782774][T18423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.946383][T18423] team0: Port device team_slave_0 added [ 376.958206][T18423] team0: Port device team_slave_1 added [ 377.026838][T18423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.035776][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.089760][T18423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.142409][T18423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.155825][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.162302][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 377.204298][T18423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.259915][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 377.289150][T18423] hsr_slave_0: entered promiscuous mode [ 377.317833][T18423] hsr_slave_1: entered promiscuous mode [ 377.329956][T18423] debugfs: 'hsr0' already exists in 'hsr' [ 377.335766][T18423] Cannot create hsr debugfs directory [ 377.575470][T18423] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.644016][T18423] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.662212][T18548] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 377.671502][ T796] tipc: Node number set to 2886997007 [ 377.705089][T18548] bond3: entered promiscuous mode [ 377.714726][T18548] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.725968][T18423] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.735860][ T5831] Bluetooth: hci1: command tx timeout [ 377.836472][T18423] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.081989][T18577] sctp: [Deprecated]: syz.1.3226 (pid 18577) Use of int in max_burst socket option. [ 378.081989][T18577] Use struct sctp_assoc_value instead [ 378.097422][T18577] netlink: 'syz.1.3226': attribute type 30 has an invalid length. [ 378.127484][T18577] bond1: option arp_missed_max: invalid value (0) [ 378.134167][T18577] bond1: option arp_missed_max: allowed values 1 - 255 [ 378.145006][T18577] bond1 (unregistering): Released all slaves [ 378.156207][T18580] netlink: 'syz.3.3229': attribute type 6 has an invalid length. [ 378.164357][T18580] netlink: 'syz.3.3229': attribute type 5 has an invalid length. [ 378.173268][T18580] netlink: 'syz.3.3229': attribute type 1 has an invalid length. [ 379.799529][ T5831] Bluetooth: hci1: command tx timeout [ 380.927335][T18566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.940035][T18423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.993369][T18423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.062104][T18423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.112046][T18423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 381.182673][T18612] batman_adv: batadv0: Adding interface: vlan2 [ 381.192361][T18612] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.241170][T18609] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 381.243903][T18612] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 381.371849][T18615] geneve2: entered promiscuous mode [ 381.541175][T18643] __nla_validate_parse: 4 callbacks suppressed [ 381.541194][T18643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3243'. [ 381.555764][T18423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.603798][T18423] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.626040][T17933] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.633236][T17933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.652727][T17933] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.659922][T17933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.692777][T18648] tipc: Enabling of bearer rejected, failed to enable media [ 381.879764][ T5831] Bluetooth: hci1: command tx timeout [ 382.043857][T18678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3252'. [ 382.075199][T18423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.081013][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 382.105794][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 382.134820][T18678] netlink: set zone limit has 4 unknown bytes [ 382.243183][T18687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3253'. [ 382.416620][T18701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3255'. [ 382.557510][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3255'. [ 382.767654][T18423] veth0_vlan: entered promiscuous mode [ 382.796881][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'. [ 382.907412][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 382.921970][T11781] IPVS: starting estimator thread 0... [ 382.925050][T18423] veth1_vlan: entered promiscuous mode [ 382.933704][T18719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'. [ 383.009473][T18720] IPVS: using max 38 ests per chain, 91200 per kthread [ 383.160103][T18423] veth0_macvtap: entered promiscuous mode [ 383.180584][T18423] veth1_macvtap: entered promiscuous mode [ 383.206913][T18727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.224967][T18723] syzkaller0: entered promiscuous mode [ 383.233502][T18723] syzkaller0: entered allmulticast mode [ 383.247487][T18723] 0: reclassify loop, rule prio 0, protocol 800 [ 383.306974][T18423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.328380][T17932] IPVS: stop unused estimator thread 0... [ 383.338532][T18423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.372278][T17931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.381505][T17931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.392245][T17931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.409757][T17931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.428763][T18731] netlink: 'syz.1.3262': attribute type 25 has an invalid length. [ 383.575833][T17935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.602594][T17935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.731727][T18736] syzkaller0: entered promiscuous mode [ 383.753802][T18736] syzkaller0: entered allmulticast mode [ 383.882085][T17935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.901830][T17935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.960917][ T5831] Bluetooth: hci1: command tx timeout [ 384.036647][T18758] only policy match revision 0 supported [ 384.036670][T18758] unable to load match [ 384.816997][T18804] netlink: 'syz.2.3284': attribute type 6 has an invalid length. [ 384.835103][T18804] netlink: 'syz.2.3284': attribute type 5 has an invalid length. [ 384.852394][T18806] macvlan2: entered promiscuous mode [ 384.881538][T18806] vlan1: entered promiscuous mode [ 384.910486][T18806] team0: Port device macvlan2 added [ 384.968596][T18820] netlink: 'syz.3.3287': attribute type 21 has an invalid length. [ 385.137642][T18824] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.193956][T18837] tipc: Enabling of bearer rejected, failed to enable media [ 385.327230][T18847] netlink: 'syz.1.3296': attribute type 5 has an invalid length. [ 385.637227][T18862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.798324][T18862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.941344][T18862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.060047][T18895] netlink: 'syz.0.3307': attribute type 10 has an invalid length. [ 386.125770][T18862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.254919][T18900] netlink: 'syz.2.3310': attribute type 10 has an invalid length. [ 386.322958][T18900] veth0_vlan: left promiscuous mode [ 386.344956][T18900] veth0_vlan: entered promiscuous mode [ 386.367998][T18900] team0: Device veth0_vlan failed to register rx_handler [ 386.420795][T18911] vlan3: entered allmulticast mode [ 386.437999][T18911] bond0: entered allmulticast mode [ 386.453589][T18911] bond_slave_0: entered allmulticast mode [ 386.459712][T18911] bond_slave_1: entered allmulticast mode [ 386.525284][T18913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.535675][T18913] bond_slave_0: left allmulticast mode [ 386.552478][T18913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.569830][T18913] bond_slave_1: left allmulticast mode [ 386.591971][T18913] bond0 (unregistering): Released all slaves [ 386.646670][T17893] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.722767][T17893] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.745471][T17893] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.774351][T17893] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.074951][T18950] __nla_validate_parse: 18 callbacks suppressed [ 387.074970][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 387.161008][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3327'. [ 387.170440][T18954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3327'. [ 387.185088][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3327'. [ 387.221725][T18954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3327'. [ 387.262419][T18956] netlink: 'syz.4.3328': attribute type 1 has an invalid length. [ 387.567533][T18981] netlink: 'syz.1.3334': attribute type 7 has an invalid length. [ 387.568811][T18984] netlink: 'syz.3.3336': attribute type 10 has an invalid length. [ 387.576029][T18981] netlink: 'syz.1.3334': attribute type 5 has an invalid length. [ 387.603578][T18981] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3334'. [ 387.616546][T18986] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 387.628838][T18986] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.3335'. [ 387.665136][T18989] netlink: 'syz.3.3336': attribute type 10 has an invalid length. [ 387.766908][T18984] team0: Port device dummy0 added [ 387.949522][T19004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3340'. [ 388.098497][T19011] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3342'. [ 388.245134][T19021] netlink: 840 bytes leftover after parsing attributes in process `syz.3.3346'. [ 388.481635][T19040] IPv6: addrconf: prefix option has invalid lifetime [ 388.488706][T19035] IPv6: addrconf: prefix option has invalid lifetime [ 388.680270][T11781] IPVS: starting estimator thread 0... [ 388.774125][T19055] IPVS: using max 36 ests per chain, 86400 per kthread [ 388.784242][T19051] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 389.041880][T19069] netlink: 'syz.4.3359': attribute type 29 has an invalid length. [ 389.243759][ T6206] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.255268][ T6206] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.353793][ T6206] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.417815][ T6206] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.687926][T19130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.856041][T19135] syzkaller1: entered promiscuous mode [ 390.878753][T19135] syzkaller1: entered allmulticast mode [ 391.101321][T19148] netlink: 'syz.0.3381': attribute type 1 has an invalid length. [ 391.275247][T19159] netlink: 'syz.2.3384': attribute type 5 has an invalid length. [ 391.319920][T19161] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 391.436433][T19172] netlink: 'syz.4.3389': attribute type 9 has an invalid length. [ 391.731225][T19185] Bluetooth: MGMT ver 1.23 [ 391.751345][T19187] netlink: 'syz.3.3395': attribute type 21 has an invalid length. [ 391.775361][T19187] netlink: 'syz.3.3395': attribute type 5 has an invalid length. [ 391.791110][T19187] netlink: 'syz.3.3395': attribute type 6 has an invalid length. [ 392.015290][T19198] veth3: entered promiscuous mode [ 392.112233][T19195] __nla_validate_parse: 16 callbacks suppressed [ 392.112252][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 392.188816][T19210] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 392.428337][T19228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3408'. [ 392.830467][T19253] veth1_macvtap: left promiscuous mode [ 392.835986][T19253] macsec0: entered promiscuous mode [ 392.880139][T19253] macsec0: entered allmulticast mode [ 392.902903][T19255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3416'. [ 393.179963][T19233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3409'. [ 393.217504][T19277] netlink: 'syz.3.3419': attribute type 17 has an invalid length. [ 393.228129][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 393.499641][T19287] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 393.517235][T19287] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 393.538727][T19287] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 393.593654][T19287] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3423'. [ 393.630478][T19287] syzkaller1: entered promiscuous mode [ 393.640828][T19287] syzkaller1: entered allmulticast mode [ 393.656966][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 393.676377][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 393.678682][T19294] netlink: 'syz.0.3425': attribute type 7 has an invalid length. [ 393.698568][T19294] netlink: 'syz.0.3425': attribute type 5 has an invalid length. [ 393.707075][T19294] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3425'. [ 394.196627][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3433'. [ 394.307998][T19322] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 394.324442][T19322] bond1: (slave vcan1): Error -95 calling set_mac_address [ 394.570185][T19341] netlink: 'syz.3.3435': attribute type 1 has an invalid length. [ 394.635998][T19343] netlink: 'syz.0.3440': attribute type 1 has an invalid length. [ 396.604482][T19450] validate_nla: 1 callbacks suppressed [ 396.604502][T19450] netlink: 'syz.4.3470': attribute type 2 has an invalid length. [ 396.639315][T19450] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 396.830573][T19457] syzkaller0: entered promiscuous mode [ 396.844406][T19457] syzkaller0: entered allmulticast mode [ 396.906979][T19457] tipc: Started in network mode [ 396.912596][T19457] tipc: Node identity 661fa450668e, cluster identity 4711 [ 396.921209][T19457] tipc: Enabled bearer , priority 0 [ 397.054314][T19455] tipc: Resetting bearer [ 397.158391][T19455] tipc: Disabling bearer [ 397.245019][T19489] __nla_validate_parse: 14 callbacks suppressed [ 397.245048][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 397.297422][T19499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'. [ 397.329921][T19499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'. [ 397.964855][T19536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3493'. [ 398.012174][T19531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3493'. [ 398.022232][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 398.507581][T19569] netlink: 'syz.1.3503': attribute type 2 has an invalid length. [ 398.523376][T19571] netlink: 'syz.1.3503': attribute type 2 has an invalid length. [ 398.552545][T19569] netlink: 'syz.1.3503': attribute type 25 has an invalid length. [ 398.561258][T19569] netlink: 'syz.1.3503': attribute type 28 has an invalid length. [ 398.596423][T19575] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 398.605293][T19575] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.627971][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 398.648550][T19577] openvswitch: netlink: IPv4 tun info is not correct [ 398.817972][T19589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3508'. [ 398.884807][T19594] netlink: 'syz.0.3509': attribute type 5 has an invalid length. [ 398.957164][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3511'. [ 399.005626][T19599] tipc: Enabled bearer , priority 0 [ 399.024819][T19597] tipc: Disabling bearer [ 399.025508][T19605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3512'. [ 399.052487][T19604] Cannot find set identified by id 0 to match [ 399.073665][T19607] syzkaller1: entered promiscuous mode [ 399.085278][T19607] syzkaller1: entered allmulticast mode [ 399.168872][T19612] netlink: 'syz.1.3515': attribute type 2 has an invalid length. [ 399.193750][T19612] !: entered promiscuous mode [ 399.262064][T19616] x_tables: duplicate underflow at hook 1 [ 399.654719][T19644] netlink: 'syz.3.3524': attribute type 83 has an invalid length. [ 399.787945][T19651] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 399.800699][T19651] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 400.177647][T19672] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 400.697927][T19701] syz_tun: entered promiscuous mode [ 400.708987][T19701] macvtap1: entered promiscuous mode [ 400.721441][T19701] syz_tun: left promiscuous mode [ 400.877455][T19695] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 400.885528][T19711] netlink: 'syz.4.3539': attribute type 1 has an invalid length. [ 401.382166][T19738] xt_limit: Overflow, try lower: 28676/2147483648 [ 401.648297][T19746] veth1_macvtap: entered promiscuous mode [ 401.656044][T19752] validate_nla: 7 callbacks suppressed [ 401.656061][T19752] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 401.657109][T19746] veth1_macvtap: entered allmulticast mode [ 401.676452][T19746] macsec0: left promiscuous mode [ 401.681927][T19746] macsec0: left allmulticast mode [ 401.687097][T19746] veth1_macvtap: left allmulticast mode [ 401.859530][T19752] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 401.983612][T19754] bond0: (slave veth3): Enslaving as an active interface with a down link [ 402.019095][T19754] bond0: (slave veth5): Enslaving as an active interface with a down link [ 402.034011][T19752] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 402.083248][T19763] veth1_macvtap: renamed from vlan1 [ 402.127919][T19754] bond0: (slave veth7): Enslaving as an active interface with a down link [ 402.155742][T19752] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 402.168204][T19777] syzkaller0: entered promiscuous mode [ 402.183224][T19777] syzkaller0: entered allmulticast mode [ 402.241258][T19754] bond0: (slave veth9): Enslaving as an active interface with a down link [ 402.272736][T19754] bond0: (slave veth11): Enslaving as an active interface with a down link [ 402.284656][T19752] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 402.439102][T19795] netlink: 'syz.0.3562': attribute type 1 has an invalid length. [ 402.453883][T19795] __nla_validate_parse: 13 callbacks suppressed [ 402.453900][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 402.543907][T19754] bond0: (slave veth13): Enslaving as an active interface with a down link [ 402.734814][T19803] sctp: [Deprecated]: syz.0.3565 (pid 19803) Use of int in max_burst socket option. [ 402.734814][T19803] Use struct sctp_assoc_value instead [ 402.761597][T19803] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3565'. [ 402.814426][T19808] sctp: [Deprecated]: syz.0.3565 (pid 19808) Use of int in max_burst socket option. [ 402.814426][T19808] Use struct sctp_assoc_value instead [ 406.197834][T19911] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3586'. [ 406.562231][T19899] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.569959][T19899] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.785007][T19899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.805891][T19899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.010857][T19899] sit1: left allmulticast mode [ 407.030023][T19920] 8021q: VLANs not supported on ip6tnl0 [ 407.060639][T17935] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.069120][T17935] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.098313][T17935] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.133010][T17935] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.180492][T17935] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.206423][T17935] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.218212][T19941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3592'. [ 407.235347][T17935] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.262163][T17935] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.263494][T19941] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3592'. [ 407.519057][T19963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3598'. [ 407.849461][T19981] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 407.984128][T19983] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.991375][T19983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.998951][T19983] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.006143][T19983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.169661][T19983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.446737][T19985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.468771][T19991] syzkaller0: entered promiscuous mode [ 408.474699][T19991] syzkaller0: entered allmulticast mode [ 408.818480][T20013] netlink: 'syz.0.3610': attribute type 61 has an invalid length. [ 408.949295][T20013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3610'. [ 409.128162][T20019] xt_hashlimit: size too large, truncated to 1048576 [ 409.418923][T20026] geneve2: entered promiscuous mode [ 409.666106][T20039] tipc: Started in network mode [ 409.698483][T20039] tipc: Node identity bbbbbb01, cluster identity 4711 [ 409.717133][T20039] tipc: Enabled bearer , priority 10 [ 409.747765][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3613'. [ 410.325904][T20051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3616'. [ 410.719399][T20056] infiniband !yz!: set active [ 410.724521][T20056] infiniband !yz!: added team_slave_0 [ 410.812949][T20056] RDS/IB: !yz!: added [ 410.818053][T20056] smc: adding ib device !yz! with port count 1 [ 410.826040][T20056] smc: ib device !yz! port 1 has no pnetid [ 410.832810][ T5935] tipc: Node number set to 3149642497 [ 410.998120][T20088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.517813][T20115] syzkaller0: entered promiscuous mode [ 411.524089][T20115] syzkaller0: entered allmulticast mode [ 411.957429][T20137] vlan3: entered allmulticast mode [ 411.975652][T20137] bond0: entered allmulticast mode [ 412.335794][T20160] netlink: 'syz.4.3649': attribute type 4 has an invalid length. [ 412.335794][T20159] netlink: 'syz.4.3649': attribute type 4 has an invalid length. [ 412.452271][T20163] bond1: entered promiscuous mode [ 412.468990][T20163] vcan1: entered promiscuous mode [ 412.476008][T20163] vcan1: entered allmulticast mode [ 412.482202][T20163] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 412.494721][T20163] bond1: (slave vcan1): Error -95 calling set_mac_address [ 412.515392][T20166] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3651'. [ 412.993962][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3656'. [ 413.025018][T20190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3657'. [ 413.048063][T20190] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.3657'. [ 413.560784][T20213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.594205][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 413.644734][T20144] lo speed is unknown, defaulting to 1000 [ 413.667518][T20144] lo speed is unknown, defaulting to 1000 [ 413.731217][T20144] lo speed is unknown, defaulting to 1000 [ 413.786039][T20213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.818263][T20144] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 413.912954][T20144] lo speed is unknown, defaulting to 1000 [ 413.951100][T20144] lo speed is unknown, defaulting to 1000 [ 414.095982][T20213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.124330][T20236] dummy0: entered promiscuous mode [ 414.130176][T20144] lo speed is unknown, defaulting to 1000 [ 414.137017][T20236] vlan0: entered promiscuous mode [ 414.164163][T20241] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3669'. [ 414.173468][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'. [ 414.181937][T20144] lo speed is unknown, defaulting to 1000 [ 414.187329][T20241] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3669'. [ 414.201733][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'. [ 414.211662][T20241] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3669'. [ 414.236871][T20213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.255526][T20144] lo speed is unknown, defaulting to 1000 [ 414.267727][T20144] lo speed is unknown, defaulting to 1000 [ 414.276030][T20144] lo speed is unknown, defaulting to 1000 [ 414.285157][T20144] lo speed is unknown, defaulting to 1000 [ 414.466669][T17935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.499579][T17935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.575580][T17904] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.613666][T17904] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.632505][T20260] netlink: 'syz.1.3674': attribute type 4 has an invalid length. [ 414.708115][T20266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.723918][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3674'. [ 414.907170][T20269] delete_channel: no stack [ 414.913736][T20284] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 415.011334][T20292] netlink: 'syz.0.3683': attribute type 1 has an invalid length. [ 415.218459][T20300] geneve2: entered promiscuous mode [ 415.370471][T20309] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.371654][ T5886] IPVS: starting estimator thread 0... [ 415.479644][T20316] IPVS: using max 31 ests per chain, 74400 per kthread [ 415.578836][T20318] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.586216][T20318] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.679733][T20318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.694673][T20318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.787005][T20338] syz_tun: entered allmulticast mode [ 415.796076][ T6206] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.806547][ T6206] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.824008][ T6206] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.838186][ T6206] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.871357][T20342] netlink: 'syz.0.3698': attribute type 1 has an invalid length. [ 416.342946][T20369] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 416.846975][T20373] lo speed is unknown, defaulting to 1000 [ 416.947216][T20322] syz_tun: left allmulticast mode [ 417.216568][T20398] netlink: 'syz.3.3715': attribute type 4 has an invalid length. [ 417.239332][T20396] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 417.870841][T12444] IPVS: starting estimator thread 0... [ 417.961685][T20427] IPVS: using max 32 ests per chain, 76800 per kthread [ 418.319532][T20445] __nla_validate_parse: 19 callbacks suppressed [ 418.319561][T20445] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3722'. [ 418.346340][T20445] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 418.382453][T20443] netlink: 'syz.4.3720': attribute type 1 has an invalid length. [ 418.485304][T20445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.524145][T20443] bond2: entered promiscuous mode [ 418.529654][T20443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.960757][T20486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3732'. [ 419.273575][T20503] netlink: 'syz.0.3739': attribute type 10 has an invalid length. [ 419.286560][T20503] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 419.455300][T20519] netlink: 'syz.0.3742': attribute type 9 has an invalid length. [ 419.541517][T20519] netlink: 'syz.0.3742': attribute type 11 has an invalid length. [ 419.586031][T20519] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3742'. [ 419.867989][T20536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3745'. [ 420.045260][T20549] validate_nla: 1 callbacks suppressed [ 420.045277][T20549] netlink: 'syz.3.3743': attribute type 1 has an invalid length. [ 420.148780][T20560] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3748'. [ 420.158901][T20549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.248887][T20560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.271384][T20563] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3750'. [ 420.286312][T20560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.306153][T20560] bond0 (unregistering): Released all slaves [ 420.995032][T20616] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3761'. [ 421.213204][T20555] lo speed is unknown, defaulting to 1000 [ 421.352529][T20634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3765'. [ 421.479062][T20640] pim6reg: entered allmulticast mode [ 421.486511][T20640] pim6reg: left allmulticast mode [ 421.614735][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'. [ 421.693371][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'. [ 421.773784][T20605] lo speed is unknown, defaulting to 1000 [ 422.053051][T20668] pim6reg1: entered promiscuous mode [ 422.058579][T20668] pim6reg1: entered allmulticast mode [ 422.620683][T20695] sctp: [Deprecated]: syz.0.3783 (pid 20695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.620683][T20695] Use struct sctp_sack_info instead [ 422.643112][T20697] syz_tun: entered promiscuous mode [ 422.660129][T20697] syz_tun: left promiscuous mode [ 422.750569][T20701] netlink: 'syz.2.3786': attribute type 10 has an invalid length. [ 422.817456][T20701] team0: Port device geneve0 added [ 422.868867][T19863] udevd[19863]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 423.248745][T20717] syzkaller1: entered promiscuous mode [ 423.262052][T20717] syzkaller1: entered allmulticast mode [ 423.707277][T20703] lo speed is unknown, defaulting to 1000 [ 423.787878][T20729] __nla_validate_parse: 5 callbacks suppressed [ 423.787896][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3794'. [ 423.820372][T20730] syzkaller0: entered promiscuous mode [ 423.826062][T20730] syzkaller0: entered allmulticast mode [ 423.845447][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3794'. [ 424.222526][T20737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3795'. [ 424.250679][T20737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3795'. [ 424.394179][T20752] bridge0: port 3(vlan0) entered blocking state [ 424.411484][T20752] bridge0: port 3(vlan0) entered disabled state [ 424.428748][T20752] vlan0: entered allmulticast mode [ 424.456660][T20752] geneve0: entered allmulticast mode [ 424.487235][T20752] vlan0: entered promiscuous mode [ 424.494106][T20752] geneve0: entered promiscuous mode [ 424.570301][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'. [ 424.794424][T20755] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3800'. [ 424.838292][T20766] syzkaller0: entered promiscuous mode [ 425.210796][T20794] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3808'. [ 425.577672][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 425.595100][T20802] openvswitch: netlink: Flow actions attr not present in new flow. [ 426.673329][T20796] veth0: entered promiscuous mode [ 426.691138][T20796] veth0: left promiscuous mode [ 426.826470][T20812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3813'. [ 427.077915][T20836] bond6: option ad_user_port_key: invalid value (65535) [ 427.085923][T20836] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 427.112645][T20836] bond6 (unregistering): Released all slaves [ 427.153446][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3821'. [ 427.280460][T20849] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 428.364255][T20905] netlink: 'syz.4.3837': attribute type 3 has an invalid length. [ 428.372764][T20907] netlink: 'syz.4.3837': attribute type 3 has an invalid length. [ 428.426194][T20909] netlink: 'syz.4.3837': attribute type 4 has an invalid length. [ 428.594814][T20908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.611829][T20917] x_tables: duplicate underflow at hook 3 [ 428.638218][T11780] lo speed is unknown, defaulting to 1000 [ 428.657577][T11780] syz2: Port: 1 Link ACTIVE [ 428.845766][T20932] x_tables: duplicate underflow at hook 2 [ 428.964646][T20900] lo speed is unknown, defaulting to 1000 [ 429.388925][T20926] lo speed is unknown, defaulting to 1000 [ 429.483174][T20956] xt_HMARK: spi-set and port-set can't be combined [ 429.597091][T20965] netlink: 'syz.0.3852': attribute type 1 has an invalid length. [ 429.605255][T20965] __nla_validate_parse: 1 callbacks suppressed [ 429.605270][T20965] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3852'. [ 429.736130][T20968] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 429.768212][T20968] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3854'. [ 430.198111][T20959] lo speed is unknown, defaulting to 1000 [ 430.298410][T20978] tipc: Enabled bearer , priority 0 [ 430.476350][T20987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3861'. [ 430.831806][T20992] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3861'. [ 432.179700][T20988] tipc: Resetting bearer [ 432.246345][T20977] tipc: Disabling bearer [ 432.282947][T21001] bond0: (slave ipvlan0): Device is not bonding slave [ 432.291058][T21001] bond0: option active_slave: invalid value (ipvlan0) [ 432.490578][T21010] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 432.519809][T21010] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3865'. [ 432.671415][T21001] bond3: option ad_user_port_key: invalid value (65535) [ 432.679147][T21001] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 432.696910][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3867'. [ 432.727676][T21001] bond3 (unregistering): Released all slaves [ 432.794726][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3868'. [ 433.203807][T21047] netlink: 'syz.3.3873': attribute type 10 has an invalid length. [ 433.212583][T21047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3873'. [ 433.225754][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3873'. [ 433.259932][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3873'. [ 433.327892][T21032] bond0: (slave vcan1): refused to change device type [ 433.806822][T21091] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 434.072355][T21110] netlink: 'syz.0.3892': attribute type 5 has an invalid length. [ 434.094111][T21109] netlink: 'syz.1.3891': attribute type 2 has an invalid length. [ 434.103414][T21109] netlink: 'syz.1.3891': attribute type 1 has an invalid length. [ 434.127492][T21113] netlink: 'syz.1.3891': attribute type 2 has an invalid length. [ 434.157335][T21113] netlink: 'syz.1.3891': attribute type 1 has an invalid length. [ 434.371836][T21123] ip6erspan1: entered allmulticast mode [ 434.655292][T21116] lo speed is unknown, defaulting to 1000 [ 434.831996][T21155] xt_hashlimit: size too large, truncated to 1048576 [ 434.938593][T21163] __nla_validate_parse: 11 callbacks suppressed [ 434.938613][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 435.047383][T21141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.065542][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 435.087800][T21141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.111580][T21156] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 435.145619][T21167] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3905'. [ 435.261791][T21141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.280361][T21141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.441672][T21141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.459967][T21141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.527282][T21178] netlink: 'syz.2.3909': attribute type 9 has an invalid length. [ 435.540826][T21178] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3909'. [ 435.540870][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3908'. [ 435.575079][T21175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3908'. [ 435.600158][T21173] delete_channel: no stack [ 435.629863][T21173] delete_channel: no stack [ 435.754001][T21141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.765321][T21141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.846157][T17902] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.859652][T17902] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.884873][T17902] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.893788][T17902] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.901892][T21195] netlink: 'syz.1.3914': attribute type 1 has an invalid length. [ 435.938328][T21195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.954354][T17902] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.964775][T17902] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.983840][T21200] bond2: (slave geneve2): making interface the new active one [ 435.993085][T21200] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 436.010075][T17935] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.022355][T17935] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.040270][T17935] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.050724][T17935] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.059026][T17935] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.068410][T17935] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.152762][T21211] veth0: entered promiscuous mode [ 436.167861][T21214] veth0: left promiscuous mode [ 436.199887][ T5831] Bluetooth: hci1: command 0x0405 tx timeout [ 436.633781][T21229] syzkaller0: entered promiscuous mode [ 436.640372][T21229] syzkaller0: entered allmulticast mode [ 436.757346][T21236] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3926'. [ 436.771520][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3926'. [ 438.375248][T21267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3933'. [ 438.475486][T21275] pim6reg: entered allmulticast mode [ 438.491499][T21276] pim6reg: left allmulticast mode [ 438.546164][T21275] pim6reg: entered allmulticast mode [ 438.702098][T21286] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 438.728582][T21286] bond3: (slave lo): Enslaving as an active interface with an up link [ 438.742827][T21286] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 438.765506][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3937'. [ 438.779702][T21235] lo speed is unknown, defaulting to 1000 [ 438.853504][T21289] sit2: entered allmulticast mode [ 438.941752][T21295] 8021q: VLANs not supported on nlmon0 [ 439.097293][T21304] netlink: 'syz.1.3945': attribute type 10 has an invalid length. [ 440.174967][T21354] __nla_validate_parse: 4 callbacks suppressed [ 440.174986][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 440.193713][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 440.215829][T21354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.253337][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 440.263284][T21335] lo speed is unknown, defaulting to 1000 [ 440.273399][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3961'. [ 440.300924][T21359] netlink: 'syz.4.3961': attribute type 15 has an invalid length. [ 440.319901][T21359] netlink: 'syz.4.3961': attribute type 18 has an invalid length. [ 440.596432][T21365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3963'. [ 440.898516][T21360] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 440.969813][T21383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3969'. [ 440.980511][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'. [ 440.991785][T21383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3969'. [ 441.126143][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3970'. [ 441.166591][T21391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3971'. [ 441.202810][T21391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.254751][T21391] macsec1: entered allmulticast mode [ 441.268860][T21391] bond3: entered allmulticast mode [ 441.276602][T21391] bond3: left allmulticast mode [ 441.609854][T21420] netlink: 'syz.3.3978': attribute type 1 has an invalid length. [ 441.683462][T21420] bond4: (slave geneve2): making interface the new active one [ 441.700818][T21420] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 441.737838][T21420] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.754013][T17902] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 441.766969][T17902] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 441.776149][T17902] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 441.785160][T17902] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.045369][T21443] netlink: 'syz.3.3984': attribute type 1 has an invalid length. [ 442.105930][T21443] bond5: entered promiscuous mode [ 442.118914][T21443] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.141298][T21449] geneve0: entered promiscuous mode [ 442.150895][T21449] geneve0: entered allmulticast mode [ 442.320510][T21457] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 442.396198][T21459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.534382][T21468] netlink: 'syz.1.3991': attribute type 1 has an invalid length. [ 442.590511][T21472] netlink: 'syz.4.3992': attribute type 1 has an invalid length. [ 442.604191][T21468] bond3: (slave geneve3): making interface the new active one [ 442.614454][T21468] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 442.625002][T17903] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.648029][T17903] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.699792][T17903] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.721573][T17903] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 442.763231][T21474] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 442.784032][T21474] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 442.810438][T21475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.921316][ T5886] lo speed is unknown, defaulting to 1000 [ 442.977863][T21500] netlink: 'syz.4.4000': attribute type 10 has an invalid length. [ 442.986693][T21500] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.162874][T21510] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 443.236628][T21510] bond6 (unregistering): Released all slaves [ 443.407791][T21523] syzkaller0: entered promiscuous mode [ 443.414038][T21523] syzkaller0: entered allmulticast mode [ 443.523641][T21508] netlink: 'syz.4.4004': attribute type 10 has an invalid length. [ 443.539438][T21508] A link change request failed with some changes committed already. Interface rose10 may have been left with an inconsistent configuration, please check. [ 443.568945][T21525] Cannot find add_set index 3 as target [ 443.668391][T21531] team0: Device vlan0 is already an upper device of the team interface [ 443.860183][T21534] syzkaller1: entered allmulticast mode [ 444.749109][T21589] : entered promiscuous mode [ 444.794244][T21595] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 444.880237][T21602] xt_TPROXY: Can be used only with -p tcp or -p udp [ 444.926946][T21602] bond0: Error: Cannot enslave bond to itself. [ 445.128791][T21621] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 445.274065][T21628] mac80211_hwsim hwsim34 ªªªªª;: renamed from wlan0 [ 445.762526][T21665] netlink: 'syz.4.4047': attribute type 1 has an invalid length. [ 445.800851][T21665] __nla_validate_parse: 21 callbacks suppressed [ 445.800870][T21665] netlink: 15382 bytes leftover after parsing attributes in process `syz.4.4047'. [ 445.960767][T21688] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4053'. [ 445.971403][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 446.051328][T21687] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4051'. [ 446.239618][T21701] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4057'. [ 446.363382][T21679] lo speed is unknown, defaulting to 1000 [ 446.603231][T21711] ip6gre2: entered promiscuous mode [ 446.608450][T21711] ip6gre2: entered allmulticast mode [ 446.662599][T21719] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.781462][T21722] syz_tun: entered allmulticast mode [ 447.033769][T21721] syz_tun: left allmulticast mode [ 447.115165][ T1098] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.137443][ T1098] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.146454][ T5886] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.216815][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 447.228976][T21745] bond6: option lacp_active: invalid value (8) [ 447.252762][T21745] bond6 (unregistering): Released all slaves [ 447.397281][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4074'. [ 447.633427][T21759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4072'. [ 447.750632][T11777] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.765220][T21791] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.4079'. [ 448.040286][T21812] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4084'. [ 448.119469][ T5886] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 448.259865][T21819] xt_CT: No such helper "snmp_trap" [ 448.317579][T21822] vlan0: entered promiscuous mode [ 448.378036][T21831] netlink: 'syz.1.4091': attribute type 10 has an invalid length. [ 448.390960][T21831] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.402516][T21831] bond0: (slave team0): Enslaving as an active interface with an up link [ 448.430727][T21831] netlink: 'syz.1.4091': attribute type 17 has an invalid length. [ 448.451579][T21838] sctp: [Deprecated]: syz.3.4089 (pid 21838) Use of int in max_burst socket option. [ 448.451579][T21838] Use struct sctp_assoc_value instead [ 448.625032][T21843] bridge0: entered allmulticast mode [ 448.880489][T21841] lo speed is unknown, defaulting to 1000 [ 449.143627][T21878] bond0: entered promiscuous mode [ 449.155497][T21878] bond_slave_0: entered promiscuous mode [ 449.180164][T21878] bond_slave_1: entered promiscuous mode [ 449.196125][T21878] gretap0: entered promiscuous mode [ 449.223136][T21878] hsr1: entered promiscuous mode [ 449.704525][T21904] netpci0: tun_chr_ioctl cmd 1074025678 [ 449.711145][T21904] netpci0: group set to 0 [ 449.842520][T21913] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 449.854219][T21913] bond0: (slave sit0): Error -95 calling set_mac_address [ 449.996275][T21920] netlink: 'syz.4.4119': attribute type 3 has an invalid length. [ 450.018914][T21920] nbd: socks must be embedded in a SOCK_ITEM attr [ 450.060598][T21920] nbd: nbd64 already in use [ 450.861181][T21945] lo speed is unknown, defaulting to 1000 [ 450.924788][T21974] sit1: entered allmulticast mode [ 450.997335][T21936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.298205][T21992] netlink: 'syz.2.4134': attribute type 1 has an invalid length. [ 451.319926][T21992] netlink: 'syz.2.4134': attribute type 4 has an invalid length. [ 451.337422][T21992] __nla_validate_parse: 9 callbacks suppressed [ 451.337441][T21992] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4134'. [ 451.375648][T21985] netlink: 'syz.4.4135': attribute type 4 has an invalid length. [ 451.559949][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 451.727348][T21998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.904874][T21998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.988097][T22018] syzkaller0: entered promiscuous mode [ 452.001374][T22018] syzkaller0: entered allmulticast mode [ 452.006958][T22020] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4144'. [ 452.055351][T22020] netlink: Conntrack attr has 4 unknown bytes [ 452.075246][T21998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.273570][T22031] sctp: [Deprecated]: syz.3.4146 (pid 22031) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.273570][T22031] Use struct sctp_sack_info instead [ 452.342442][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 452.433275][T21998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.502553][T22044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.688943][ T1098] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.713653][T22051] vlan1: entered allmulticast mode [ 452.718803][T22051] macvtap0: entered allmulticast mode [ 452.724873][T22051] veth0_macvtap: entered allmulticast mode [ 452.786172][ T1098] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.845335][ T1098] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.952314][ T1098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.013281][T22079] netlink: 'syz.2.4158': attribute type 2 has an invalid length. [ 453.030269][T22076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4159'. [ 453.191665][T22087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4162'. [ 453.238459][T22087] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4162'. [ 453.601676][T22109] syzkaller0: entered promiscuous mode [ 453.615200][T22109] syzkaller0: entered allmulticast mode [ 453.681118][T22115] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 453.687968][T22114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4169'. [ 453.701030][T22114] IPv6: NLM_F_CREATE should be specified when creating new route [ 453.702487][T22115] bond6 (unregistering): Released all slaves [ 453.755049][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'. [ 453.765931][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'. [ 453.785314][T22119] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4167'. [ 454.146966][T22152] unsupported nlmsg_type 40 [ 454.161745][T22151] sctp: [Deprecated]: syz.4.4179 (pid 22151) Use of int in max_burst socket option. [ 454.161745][T22151] Use struct sctp_assoc_value instead [ 454.596401][T22165] bond0 (unregistering): left promiscuous mode [ 454.606227][T22165] bond_slave_0: left promiscuous mode [ 454.660391][T22165] bond_slave_1: left promiscuous mode [ 454.666919][T22168] netlink: 'syz.0.4184': attribute type 1 has an invalid length. [ 454.677121][T22165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.700002][T22165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.713539][T22165] bond0 (unregistering): Released all slaves [ 454.732071][T22152] lo speed is unknown, defaulting to 1000 [ 454.756730][T22168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.773591][T22173] vlan2: entered promiscuous mode [ 454.778654][T22173] bond6: entered promiscuous mode [ 454.784317][T22173] vlan2: entered allmulticast mode [ 454.790061][T22173] bond6: entered allmulticast mode [ 454.814084][T22168] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.825738][T22168] bond6: (slave batadv1): making interface the new active one [ 454.833874][T22168] batadv1: entered promiscuous mode [ 454.841093][T22168] batadv1: entered allmulticast mode [ 454.849123][T22168] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 454.926771][T22181] nftables ruleset with unbound set [ 455.710527][T22219] bond3: (slave lo): Releasing backup interface [ 455.725376][T22219] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 455.742298][T22219] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 455.753080][T22219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.777877][T22219] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 455.788602][T22219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.838018][T22229] netlink: 'syz.3.4201': attribute type 2 has an invalid length. [ 456.011579][T22240] netlink: zone id is out of range [ 456.023666][T22240] netlink: zone id is out of range [ 456.036767][T22240] netlink: zone id is out of range [ 456.058132][T22240] netlink: zone id is out of range [ 456.067212][T22240] netlink: zone id is out of range [ 456.072724][T22240] netlink: zone id is out of range [ 456.103170][T22244] x_tables: duplicate underflow at hook 2 [ 456.103189][T22246] x_tables: duplicate underflow at hook 2 [ 456.144273][T22245] syzkaller0: entered promiscuous mode [ 456.194610][T22245] syzkaller0: entered allmulticast mode [ 456.276756][T22251] bond5: option xmit_hash_policy: invalid value (10) [ 456.297879][T22251] bond5 (unregistering): Released all slaves [ 456.334792][ T29] audit: type=1800 audit(1775434013.068:9): pid=22260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4212" name="e" dev="tmpfs" ino=1215 res=0 errno=0 [ 456.442352][T22269] __nla_validate_parse: 13 callbacks suppressed [ 456.442374][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 456.505435][T22269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4214'. [ 456.555939][T22281] netlink: 'syz.3.4217': attribute type 2 has an invalid length. [ 456.576037][T22283] netlink: 'syz.0.4214': attribute type 1 has an invalid length. [ 456.592758][T22273] bond5 (unregistering): Released all slaves [ 456.602111][T22285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4213'. [ 456.650680][T22280] bond5 (unregistering): Released all slaves [ 456.688393][T22271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4213'. [ 457.301802][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 457.375615][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 457.455279][T22334] netlink: 'syz.4.4226': attribute type 10 has an invalid length. [ 457.471748][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 457.480510][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 457.485918][T22334] team0: Port device dummy0 added [ 457.576487][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4231'. [ 457.595994][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4231'. [ 457.632688][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 457.868749][T22371] netlink: 'syz.4.4233': attribute type 1 has an invalid length. [ 458.479339][T22409] SET target dimension over the limit! [ 458.847168][T22412] syzkaller0: entered promiscuous mode [ 458.874306][T22412] syzkaller0: entered allmulticast mode [ 459.275928][T22404] lo speed is unknown, defaulting to 1000 [ 459.311896][T22424] nbd: socks must be embedded in a SOCK_ITEM attr [ 459.326616][T22424] block nbd3: shutting down sockets [ 459.525317][T22436] xt_hashlimit: overflow, try lower: 0/0 [ 459.567335][T22437] sch_fq: defrate 4294967293 ignored. [ 460.007420][T22459] dvmrp1: entered allmulticast mode [ 460.230571][T22478] xt_bpf: check failed: parse error [ 461.159367][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 461.239064][T22522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.256980][T22522] bond4: option mode: unable to set because the bond device is up [ 461.587904][T22556] tipc: Resetting bearer [ 461.598928][T22556] tipc: Resetting bearer [ 461.612833][T22556] bond0: (slave rose0): Enslaving as an active interface with an up link [ 462.004196][T22585] syzkaller0: entered promiscuous mode [ 462.011767][T22585] syzkaller0: entered allmulticast mode [ 462.280916][T22604] __nla_validate_parse: 18 callbacks suppressed [ 462.280934][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 462.316672][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4296'. [ 462.342899][T22590] lo speed is unknown, defaulting to 1000 [ 462.734428][T22626] netlink: 'syz.2.4301': attribute type 21 has an invalid length. [ 462.768580][T22628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4300'. [ 462.813134][T22601] netlink: 'syz.1.4295': attribute type 2 has an invalid length. [ 462.850666][T22626] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4301'. [ 462.859822][T22601] netlink: 'syz.1.4295': attribute type 1 has an invalid length. [ 462.859854][T22601] netlink: 'syz.1.4295': attribute type 2 has an invalid length. [ 462.859866][T22601] netlink: 'syz.1.4295': attribute type 1 has an invalid length. [ 462.943459][T22626] syzkaller0: entered promiscuous mode [ 462.949091][T22626] syzkaller0: entered allmulticast mode [ 463.051428][T22645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4304'. [ 463.069879][T22645] net_ratelimit: 7 callbacks suppressed [ 463.069899][T22645] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 463.406367][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 463.541168][T22623] lo speed is unknown, defaulting to 1000 [ 463.630485][T22670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4314'. [ 463.647407][T22672] xt_hashlimit: size too large, truncated to 1048576 [ 463.740789][T22677] –: renamed from vxcan1 (while UP) [ 463.828197][T22682] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4314'. [ 463.841689][T22680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4313'. [ 464.133352][T22695] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 464.242642][T22701] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 464.647107][T22727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4327'. [ 465.293869][T22752] block nbd3: Unsupported socket: should be TCP or UNIX. [ 465.984503][T22784] dummy0: entered promiscuous mode [ 466.000081][T22784] dummy0: left promiscuous mode [ 466.394710][T22807] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 466.880231][T22837] tipc: Resetting bearer [ 467.364113][T22841] lo speed is unknown, defaulting to 1000 [ 467.502071][T22852] __nla_validate_parse: 7 callbacks suppressed [ 467.502089][T22852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4361'. [ 467.568607][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4361'. [ 467.723281][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 467.752886][T22858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4363'. [ 467.980521][T22860] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001 [ 468.289965][T22862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 468.325886][T22872] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4366'. [ 468.360254][T22869] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4366'. [ 468.698809][T22884] xt_policy: too many policy elements [ 468.773091][T22895] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4371'. [ 468.797183][T22865] lo speed is unknown, defaulting to 1000 [ 468.833874][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4372'. [ 468.852544][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4372'. [ 468.894448][T22906] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 468.917670][T22900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4373'. [ 468.950263][T22906] netlink: 'syz.4.4374': attribute type 2 has an invalid length. [ 468.958025][T22906] netlink: 'syz.4.4374': attribute type 2 has an invalid length. [ 468.983428][T22906] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 469.281724][T22930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'. [ 469.292460][T22930] 8021q: VLANs not supported on nlmon0 [ 469.598296][T22923] lo speed is unknown, defaulting to 1000 [ 470.278492][T22967] syzkaller0: entered promiscuous mode [ 472.546440][T22948] Set syz1 is full, maxelem 65536 reached [ 472.840491][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 473.334454][T22998] __nla_validate_parse: 1 callbacks suppressed [ 473.334474][T22998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4398'. [ 473.426290][T23009] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 473.443540][T23009] syzkaller1: linktype set to 825 [ 473.718990][T23029] netlink: 'syz.2.4408': attribute type 10 has an invalid length. [ 473.766201][T23031] netlink: 'syz.4.4409': attribute type 1 has an invalid length. [ 473.779804][T23031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.836027][T23039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4412'. [ 473.923325][T23042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'. [ 474.027457][T23053] pim6reg1: entered promiscuous mode [ 474.043620][T23053] pim6reg1: entered allmulticast mode [ 474.056110][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4417'. [ 474.072894][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4417'. [ 474.091033][T23056] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.117533][T23058] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.313210][T23075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4422'. [ 474.316640][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4420'. [ 474.522133][T23090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4426'. [ 474.624572][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'. [ 474.638066][T23097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4429'. [ 474.652600][T23099] x_tables: duplicate underflow at hook 1 [ 474.658725][T23097] vlan3: entered allmulticast mode [ 474.674337][T23097] macvtap0: entered allmulticast mode [ 474.784011][T23104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.034654][T23111] IPVS: Scheduler module ip_vs_ not found [ 475.101565][T23120] netlink: 'syz.4.4436': attribute type 1 has an invalid length. [ 475.205271][T23120] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.438005][T23146] tipc: Started in network mode [ 475.454195][T23146] tipc: Node identity 1acf4e39e6fe, cluster identity 4711 [ 475.477810][T23146] tipc: Enabled bearer , priority 0 [ 475.514758][T23143] syzkaller0: entered promiscuous mode [ 475.545714][T23143] syzkaller0: entered allmulticast mode [ 475.669158][T23143] tipc: Resetting bearer [ 475.691097][T23143] tipc: Disabling bearer [ 476.050936][T23195] siw: device registration error -23 [ 476.486504][T23230] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 476.536011][T23230] bond7 (unregistering): Released all slaves [ 476.593456][T23224] netlink: 'syz.3.4466': attribute type 27 has an invalid length. [ 476.636609][T23224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.948963][T23263] tap0: tun_chr_ioctl cmd 1074812118 [ 477.018696][T23269] hsr0: entered promiscuous mode [ 477.031163][T23269] vlan1: entered promiscuous mode [ 477.056015][T23273] nbd: couldn't find a device at index 65546 [ 477.268919][T23292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.342730][T23296] netlink: 'syz.3.4489': attribute type 9 has an invalid length. [ 477.361586][T23293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.485532][ T5886] IPVS: starting estimator thread 0... [ 477.585201][T23307] IPVS: using max 30 ests per chain, 72000 per kthread [ 477.821116][T23326] openvswitch: netlink: IP tunnel dst address not specified [ 477.958873][T23332] xt_hashlimit: size too large, truncated to 1048576 [ 477.970633][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 478.185304][T23306] lo speed is unknown, defaulting to 1000 [ 479.063189][T23380] __nla_validate_parse: 18 callbacks suppressed [ 479.063208][T23380] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4510'. [ 479.084739][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4511'. [ 479.203882][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4511'. [ 479.232854][T23390] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 479.263308][T23394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4511'. [ 479.324124][T23396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4513'. [ 479.372425][T23391] team0: Port device team_slave_0 removed [ 479.510945][T23390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 479.568678][T23358] lo speed is unknown, defaulting to 1000 [ 480.359482][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 492.641582][T23426] syz_tun: entered promiscuous mode [ 492.646838][T23426] syz_tun: entered allmulticast mode [ 495.847261][T23446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.025624][T23507] netlink: 'syz.0.4536': attribute type 10 has an invalid length. [ 496.057263][T23507] bond0: (slave dummy0): Releasing backup interface [ 496.097820][T23507] team0: Port device dummy0 added [ 496.148865][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4538'. [ 496.165760][T23517] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4541'. [ 496.181568][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'. [ 496.210821][T23506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4539'. [ 496.239857][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'. [ 496.248746][T23506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4539'. [ 496.334275][T23519] bond8 (unregistering): Released all slaves [ 496.631367][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4545'. [ 496.687789][T23535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 496.706867][T23530] 8021q: adding VLAN 0 to HW filter on device bond8 [ 496.810144][T23535] syz_tun: entered promiscuous mode [ 496.844379][T23535] syz_tun: left promiscuous mode [ 497.096724][T23524] lo speed is unknown, defaulting to 1000 [ 497.178929][T23554] ip6gre1: entered promiscuous mode [ 497.269400][T23556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4552'. [ 497.687078][T23577] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4557'. [ 498.071068][T23570] lo speed is unknown, defaulting to 1000 [ 498.138943][T23599] netlink: del zone limit has 8 unknown bytes [ 498.711378][T23622] xt_CT: No such helper "syz1" [ 498.801541][T23589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.097730][T23620] lo speed is unknown, defaulting to 1000 [ 499.978919][T23650] lo speed is unknown, defaulting to 1000 [ 500.242891][T23674] netlink: 'syz.0.4582': attribute type 6 has an invalid length. [ 500.373807][T17922] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.383196][T17922] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.410369][T17922] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.439062][T17922] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.625090][T23685] netlink: 'syz.4.4584': attribute type 3 has an invalid length. [ 501.028437][T23713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.067575][T23713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.127589][T23720] netlink: 'syz.3.4594': attribute type 22 has an invalid length. [ 501.141203][T23721] hsr_slave_0: left promiscuous mode [ 501.147418][T23721] hsr_slave_1: left promiscuous mode [ 501.171370][T23720] __nla_validate_parse: 12 callbacks suppressed [ 501.171387][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4594'. [ 501.217302][T23720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4594'. [ 501.678796][T12462] lo speed is unknown, defaulting to 1000 [ 501.686482][T23749] netlink: 'syz.2.4602': attribute type 6 has an invalid length. [ 501.698055][T12462] syz2: Port: 1 Link DOWN [ 501.703300][T23749] netlink: 'syz.2.4602': attribute type 7 has an invalid length. [ 501.712125][T23749] netlink: 'syz.2.4602': attribute type 8 has an invalid length. [ 501.726362][T23749] netlink: 'syz.2.4602': attribute type 15 has an invalid length. [ 501.740466][T17922] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.749145][T17922] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 501.758984][T17922] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.771860][T17922] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 501.782650][T17922] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.795977][T17922] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 501.807535][T17922] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.816577][T17922] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 502.472011][T23801] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4613'. [ 502.520068][T23805] netlink: 'syz.2.4614': attribute type 4 has an invalid length. [ 502.531236][T23806] netlink: 176956 bytes leftover after parsing attributes in process `syz.0.4615'. [ 502.541512][T23803] netlink: 'syz.2.4614': attribute type 4 has an invalid length. [ 502.683322][T23818] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 502.697098][T23816] netlink: 'syz.4.4617': attribute type 1 has an invalid length. [ 503.244292][T23856] sctp: [Deprecated]: syz.4.4630 (pid 23856) Use of int in max_burst socket option. [ 503.244292][T23856] Use struct sctp_assoc_value instead [ 503.305228][T23861] netlink: 'syz.2.4627': attribute type 4 has an invalid length. [ 503.342907][T23861] netlink: 'syz.2.4627': attribute type 4 has an invalid length. [ 503.475362][T23874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4631'. [ 503.597141][T23880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 504.038050][T23861] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.045792][T23861] bridge0: port 1(1¾x9ÿ) entered disabled state [ 504.626397][T23861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.675164][T23861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.044431][T23872] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 505.187533][T23853] lo speed is unknown, defaulting to 1000 [ 505.187552][T17926] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.205086][T17926] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.251153][T17926] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.269965][T17926] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.466156][T23908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4637'. [ 505.555179][ T5831] block nbd3: Receive control failed (result -1) [ 505.816260][T23913] team0: Port device dummy0 added [ 506.293909][T23924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.295905][T23926] validate_nla: 1 callbacks suppressed [ 506.295921][T23926] netlink: 'syz.4.4640': attribute type 13 has an invalid length. [ 506.354208][T23926] netlink: 'syz.4.4640': attribute type 17 has an invalid length. [ 506.717043][T23926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.991740][T23934] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4641'. [ 507.045836][T23937] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4641'. [ 507.124114][T23936] bond7 (unregistering): Released all slaves [ 507.273301][T23943] ip6erspan1: entered allmulticast mode [ 507.587041][T23966] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4650'. [ 507.604994][T23966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'. [ 507.615081][T23966] openvswitch: netlink: Flow actions attr not present in new flow. [ 507.627330][T23958] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4648'. [ 507.681630][T23958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4648'. [ 507.789762][T23958] xt_CT: No such helper "syz1" [ 508.057534][T23965] lo speed is unknown, defaulting to 1000 [ 508.137224][T23992] 8021q: VLANs not supported on ipvlan1 [ 508.407426][T24006] x_tables: ip_tables: ah match: only valid for protocol 51 [ 508.415721][T24007] x_tables: ip_tables: ah match: only valid for protocol 51 [ 508.668337][T24016] netlink: 201432 bytes leftover after parsing attributes in process `syz.3.4666'. [ 508.779892][T24017] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4664'. [ 509.272757][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4677'. [ 509.288904][T24049] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4677'. [ 509.869126][T24095] IPv6: sit1: Disabled Multicast RS [ 510.575711][T24134] netlink: 'syz.0.4698': attribute type 10 has an invalid length. [ 510.598510][T24134] team0: Port device dummy0 removed [ 510.627269][T24136] netlink: 'syz.0.4698': attribute type 7 has an invalid length. [ 510.642497][T24134] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 510.753624][T24144] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 510.778412][T24144] bond0 (unregistering): Released all slaves [ 510.806790][T24139] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 511.552316][T24206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.827213][T24224] netlink: 'syz.2.4724': attribute type 1 has an invalid length. [ 512.004277][T24238] __nla_validate_parse: 13 callbacks suppressed [ 512.004296][T24238] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4726'. [ 512.400992][T24240] team_slave_0: entered promiscuous mode [ 512.411396][T24240] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 512.594436][T24249] netlink: 'syz.1.4731': attribute type 10 has an invalid length. [ 512.637283][T24249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4731'. [ 512.652936][T24247] syzkaller0: entered promiscuous mode [ 512.658560][T24247] syzkaller0: entered allmulticast mode [ 512.687130][T24253] netlink: 'syz.3.4732': attribute type 1 has an invalid length. [ 512.721308][T24255] [ 512.723671][T24255] ====================================================== [ 512.730695][T24255] WARNING: possible circular locking dependency detected [ 512.737727][T24255] syzkaller #0 Not tainted [ 512.742136][T24255] ------------------------------------------------------ [ 512.749149][T24255] syz.2.4733/24255 is trying to acquire lock: [ 512.749969][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 512.755206][T24255] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 512.773323][T24255] [ 512.773323][T24255] but task is already holding lock: [ 512.780683][T24255] ffff8880795a6e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 512.790356][T24255] [ 512.790356][T24255] which lock already depends on the new lock. [ 512.790356][T24255] [ 512.800747][T24255] [ 512.800747][T24255] the existing dependency chain (in reverse order) is: [ 512.809744][T24255] [ 512.809744][T24255] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 512.817644][T24255] lock_sock_nested+0x41/0x100 [ 512.822918][T24255] __inet6_bind+0x30c/0xf60 [ 512.827933][T24255] mptcp_bind+0x110/0x1d0 [ 512.832778][T24255] __sys_bind+0x2e3/0x410 [ 512.837613][T24255] __x64_sys_bind+0x7a/0x90 [ 512.842629][T24255] do_syscall_64+0x14d/0xf80 [ 512.847744][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.854149][T24255] [ 512.854149][T24255] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 512.861872][T24255] lock_sock_nested+0x41/0x100 [ 512.867154][T24255] inet_shutdown+0x6a/0x390 [ 512.872170][T24255] nbd_mark_nsock_dead+0x2e9/0x560 [ 512.877793][T24255] recv_work+0x1c7f/0x1d90 [ 512.882719][T24255] process_scheduled_works+0xb6e/0x18c0 [ 512.888776][T24255] worker_thread+0xa53/0xfc0 [ 512.893877][T24255] kthread+0x388/0x470 [ 512.898453][T24255] ret_from_fork+0x51e/0xb90 [ 512.903552][T24255] ret_from_fork_asm+0x1a/0x30 [ 512.908833][T24255] [ 512.908833][T24255] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 512.916467][T24255] __mutex_lock+0x19f/0x1300 [ 512.921571][T24255] nbd_queue_rq+0x37b/0x1100 [ 512.926670][T24255] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 512.932723][T24255] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 512.939561][T24255] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 512.946060][T24255] blk_mq_run_hw_queue+0x348/0x4f0 [ 512.951714][T24255] blk_mq_dispatch_list+0xd16/0xe10 [ 512.957421][T24255] blk_mq_flush_plug_list+0x48d/0x570 [ 512.963300][T24255] __blk_flush_plug+0x3ed/0x4d0 [ 512.968663][T24255] __submit_bio+0x28d/0x580 [ 512.973674][T24255] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 512.979823][T24255] block_read_full_folio+0x599/0x830 [ 512.985618][T24255] filemap_read_folio+0x137/0x3b0 [ 512.991149][T24255] do_read_cache_folio+0x358/0x590 [ 512.996770][T24255] read_part_sector+0xb6/0x2b0 [ 513.002040][T24255] adfspart_check_ICS+0xa5/0xa40 [ 513.007488][T24255] bdev_disk_changed+0x7ba/0x1550 [ 513.013019][T24255] blkdev_get_whole+0x380/0x510 [ 513.018375][T24255] bdev_open+0x31e/0xd30 [ 513.023128][T24255] blkdev_open+0x470/0x610 [ 513.028052][T24255] do_dentry_open+0x785/0x14e0 [ 513.033330][T24255] vfs_open+0x3b/0x340 [ 513.037916][T24255] path_openat+0x2e08/0x3860 [ 513.043012][T24255] do_file_open+0x23e/0x4a0 [ 513.048034][T24255] do_sys_openat2+0x113/0x200 [ 513.053232][T24255] __x64_sys_openat+0x138/0x170 [ 513.058598][T24255] do_syscall_64+0x14d/0xf80 [ 513.063851][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.070263][T24255] [ 513.070263][T24255] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 513.077469][T24255] __mutex_lock+0x19f/0x1300 [ 513.082581][T24255] nbd_queue_rq+0xc6/0x1100 [ 513.087598][T24255] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 513.093654][T24255] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 513.100495][T24255] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 513.106987][T24255] blk_mq_run_hw_queue+0x348/0x4f0 [ 513.112607][T24255] blk_mq_dispatch_list+0xd16/0xe10 [ 513.118320][T24255] blk_mq_flush_plug_list+0x48d/0x570 [ 513.124196][T24255] __blk_flush_plug+0x3ed/0x4d0 [ 513.129555][T24255] __submit_bio+0x28d/0x580 [ 513.134575][T24255] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 513.140715][T24255] block_read_full_folio+0x599/0x830 [ 513.146512][T24255] filemap_read_folio+0x137/0x3b0 [ 513.152042][T24255] do_read_cache_folio+0x358/0x590 [ 513.157670][T24255] read_part_sector+0xb6/0x2b0 [ 513.162941][T24255] adfspart_check_ICS+0xa5/0xa40 [ 513.168386][T24255] bdev_disk_changed+0x7ba/0x1550 [ 513.173916][T24255] blkdev_get_whole+0x380/0x510 [ 513.179275][T24255] bdev_open+0x31e/0xd30 [ 513.184037][T24255] blkdev_open+0x470/0x610 [ 513.188965][T24255] do_dentry_open+0x785/0x14e0 [ 513.194238][T24255] vfs_open+0x3b/0x340 [ 513.198815][T24255] path_openat+0x2e08/0x3860 [ 513.203916][T24255] do_file_open+0x23e/0x4a0 [ 513.208924][T24255] do_sys_openat2+0x113/0x200 [ 513.214109][T24255] __x64_sys_openat+0x138/0x170 [ 513.219471][T24255] do_syscall_64+0x14d/0xf80 [ 513.224579][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.230974][T24255] [ 513.230974][T24255] -> #3 (set->srcu){.+.+}-{0:0}: [ 513.238080][T24255] __synchronize_srcu+0xca/0x300 [ 513.243539][T24255] elevator_switch+0x1e8/0x7a0 [ 513.248811][T24255] elevator_change+0x2cc/0x450 [ 513.254081][T24255] elevator_set_default+0x36c/0x430 [ 513.259786][T24255] blk_register_queue+0x366/0x430 [ 513.265317][T24255] __add_disk+0x677/0xd50 [ 513.270155][T24255] add_disk_fwnode+0xfb/0x480 [ 513.275342][T24255] nbd_dev_add+0x72c/0xb50 [ 513.280264][T24255] nbd_init+0x168/0x1f0 [ 513.284922][T24255] do_one_initcall+0x250/0x8d0 [ 513.290193][T24255] do_initcall_level+0x104/0x190 [ 513.295640][T24255] do_initcalls+0x59/0xa0 [ 513.300474][T24255] kernel_init_freeable+0x2a6/0x3e0 [ 513.306207][T24255] kernel_init+0x1d/0x1d0 [ 513.311040][T24255] ret_from_fork+0x51e/0xb90 [ 513.316137][T24255] ret_from_fork_asm+0x1a/0x30 [ 513.321407][T24255] [ 513.321407][T24255] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 513.329210][T24255] __mutex_lock+0x19f/0x1300 [ 513.334308][T24255] elevator_change+0x1b3/0x450 [ 513.339577][T24255] elevator_set_none+0xb5/0x140 [ 513.344943][T24255] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 513.351258][T24255] nbd_start_device+0x17f/0xb10 [ 513.356622][T24255] nbd_genl_connect+0x165b/0x1cf0 [ 513.362150][T24255] genl_family_rcv_msg_doit+0x22a/0x330 [ 513.368200][T24255] genl_rcv_msg+0x61c/0x7a0 [ 513.373238][T24255] netlink_rcv_skb+0x232/0x4b0 [ 513.378510][T24255] genl_rcv+0x28/0x40 [ 513.382997][T24255] netlink_unicast+0x80f/0x9b0 [ 513.388284][T24255] netlink_sendmsg+0x813/0xb40 [ 513.393553][T24255] ____sys_sendmsg+0x972/0x9f0 [ 513.398824][T24255] ___sys_sendmsg+0x2a5/0x360 [ 513.404010][T24255] __x64_sys_sendmsg+0x1bd/0x2a0 [ 513.409457][T24255] do_syscall_64+0x14d/0xf80 [ 513.414561][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.420960][T24255] [ 513.420960][T24255] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 513.429549][T24255] blk_alloc_queue+0x546/0x680 [ 513.434832][T24255] __blk_mq_alloc_disk+0x197/0x390 [ 513.440453][T24255] nbd_dev_add+0x499/0xb50 [ 513.445374][T24255] nbd_init+0x168/0x1f0 [ 513.450031][T24255] do_one_initcall+0x250/0x8d0 [ 513.455303][T24255] do_initcall_level+0x104/0x190 [ 513.460747][T24255] do_initcalls+0x59/0xa0 [ 513.465581][T24255] kernel_init_freeable+0x2a6/0x3e0 [ 513.471285][T24255] kernel_init+0x1d/0x1d0 [ 513.476116][T24255] ret_from_fork+0x51e/0xb90 [ 513.481210][T24255] ret_from_fork_asm+0x1a/0x30 [ 513.486481][T24255] [ 513.486481][T24255] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 513.493670][T24255] __lock_acquire+0x15a5/0x2cf0 [ 513.499027][T24255] lock_acquire+0xf0/0x2e0 [ 513.503946][T24255] fs_reclaim_acquire+0x71/0x100 [ 513.509388][T24255] __kmalloc_cache_noprof+0x40/0x660 [ 513.515187][T24255] tcp_fastopen_defer_connect+0x250/0x390 [ 513.521413][T24255] tcp_v4_connect+0x10ac/0x19b0 [ 513.526768][T24255] tcp_v6_connect+0xbbb/0x1b10 [ 513.532035][T24255] __inet_stream_connect+0x25a/0xdd0 [ 513.537828][T24255] inet_stream_connect+0x66/0xa0 [ 513.543269][T24255] __sys_connect+0x312/0x450 [ 513.548361][T24255] __x64_sys_connect+0x7a/0x90 [ 513.553627][T24255] do_syscall_64+0x14d/0xf80 [ 513.558723][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.565121][T24255] [ 513.565121][T24255] other info that might help us debug this: [ 513.565121][T24255] [ 513.575328][T24255] Chain exists of: [ 513.575328][T24255] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 513.575328][T24255] [ 513.588261][T24255] Possible unsafe locking scenario: [ 513.588261][T24255] [ 513.595688][T24255] CPU0 CPU1 [ 513.601034][T24255] ---- ---- [ 513.606378][T24255] lock(k-sk_lock-AF_INET6); [ 513.611039][T24255] lock(sk_lock-AF_INET6); [ 513.618043][T24255] lock(k-sk_lock-AF_INET6); [ 513.625219][T24255] lock(fs_reclaim); [ 513.629188][T24255] [ 513.629188][T24255] *** DEADLOCK *** [ 513.629188][T24255] [ 513.637316][T24255] 1 lock held by syz.2.4733/24255: [ 513.642427][T24255] #0: ffff8880795a6e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 513.652505][T24255] [ 513.652505][T24255] stack backtrace: [ 513.658388][T24255] CPU: 0 UID: 0 PID: 24255 Comm: syz.2.4733 Not tainted syzkaller #0 PREEMPT(full) [ 513.658404][T24255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 513.658418][T24255] Call Trace: [ 513.658425][T24255] [ 513.658433][T24255] dump_stack_lvl+0xe8/0x150 [ 513.658452][T24255] print_circular_bug+0x2e1/0x300 [ 513.658473][T24255] check_noncircular+0x12e/0x150 [ 513.658493][T24255] __lock_acquire+0x15a5/0x2cf0 [ 513.658511][T24255] ? __tcp_get_metrics+0x7ec/0x870 [ 513.658532][T24255] lock_acquire+0xf0/0x2e0 [ 513.658547][T24255] ? __kmalloc_cache_noprof+0x40/0x660 [ 513.658565][T24255] fs_reclaim_acquire+0x71/0x100 [ 513.658580][T24255] ? __kmalloc_cache_noprof+0x40/0x660 [ 513.658593][T24255] __kmalloc_cache_noprof+0x40/0x660 [ 513.658607][T24255] ? tcp_fastopen_defer_connect+0x250/0x390 [ 513.658626][T24255] tcp_fastopen_defer_connect+0x250/0x390 [ 513.658646][T24255] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 513.658666][T24255] ? sk_setup_caps+0x9ef/0xc40 [ 513.658682][T24255] ? sk_setup_caps+0x29/0xc40 [ 513.658698][T24255] tcp_v4_connect+0x10ac/0x19b0 [ 513.658722][T24255] ? __pfx_tcp_v4_connect+0x10/0x10 [ 513.658738][T24255] ? aa_label_sk_perm+0x52b/0x6e0 [ 513.658755][T24255] ? tcp_v6_connect+0x62d/0x1b10 [ 513.658772][T24255] tcp_v6_connect+0xbbb/0x1b10 [ 513.658787][T24255] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 513.658812][T24255] ? __pfx_tcp_v6_connect+0x10/0x10 [ 513.658831][T24255] __inet_stream_connect+0x25a/0xdd0 [ 513.658848][T24255] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.658861][T24255] ? __pfx___inet_stream_connect+0x10/0x10 [ 513.658876][T24255] ? inet_stream_connect+0x51/0xa0 [ 513.658891][T24255] ? __local_bh_enable_ip+0xd0/0x130 [ 513.658908][T24255] inet_stream_connect+0x66/0xa0 [ 513.658923][T24255] __sys_connect+0x312/0x450 [ 513.658938][T24255] ? __pfx___sys_connect+0x10/0x10 [ 513.658955][T24255] ? rcu_is_watching+0x15/0xb0 [ 513.658975][T24255] __x64_sys_connect+0x7a/0x90 [ 513.658989][T24255] do_syscall_64+0x14d/0xf80 [ 513.659006][T24255] ? trace_irq_disable+0x3b/0x150 [ 513.659018][T24255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.659031][T24255] ? clear_bhb_loop+0x40/0x90 [ 513.659045][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.659061][T24255] RIP: 0033:0x7fd4ee19c819 [ 513.659074][T24255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.659086][T24255] RSP: 002b:00007fd4ef0b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 513.659099][T24255] RAX: ffffffffffffffda RBX: 00007fd4ee415fa0 RCX: 00007fd4ee19c819 [ 513.659109][T24255] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 513.659117][T24255] RBP: 00007fd4ee232c91 R08: 0000000000000000 R09: 0000000000000000 [ 513.659125][T24255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.659133][T24255] R13: 00007fd4ee416038 R14: 00007fd4ee415fa0 R15: 00007ffd35332a98 [ 513.659147][T24255] [ 520.039389][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!