last executing test programs: 2.717576088s ago: executing program 3 (id=2615): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf00}, 0x94) pipe(&(0x7f0000000600)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='Z%G}', 0x4}], 0x1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x2c, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r1, 0x13, 0x1c, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) 2.157599664s ago: executing program 0 (id=2626): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'net_cls'}, {0x2d, 'net'}, {0x2b, 'hugetlb'}]}, 0x17) (async) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async, rerun: 32) shutdown(r2, 0x1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0x85, "a448ab4b7bd5fd8c2f798a09b5253e5fbf7e63b27591b07934ba92c60351c26e52581cb0e8a3213d5ab2933013ab3426f2640de1db543dd379f2e70e781e381948c06cf22d8cdfe6c15ae1224cf2b8859e7d0e11d5fa50f1f4c141c8fea7af2ecec24d2542e0b6771c5214ef02e5fe8c69a016d6a6d49d8c8c4acb95f051b9f40244270297"}, &(0x7f0000000180)=0x8d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) (async) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES64=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018510000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) (async, rerun: 32) r11 = accept$alg(r7, 0x0, 0x0) (rerun: 32) read$alg(r11, &(0x7f0000000940)=""/240, 0xf0) (async) close(r6) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x6}, &(0x7f00000001c0)=0x8) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000df9a1735ab149cd0ec0c522e01b9974c17462ebb155b0be6c800da672c78abe987c6643cf184600a6a45d227c7a594291a294213dde4f5fc2143b793466ca4d571c063a7f481d27597a3c46e1ec6c7c9bd0e18b307dbd22ac8b238f77a3f7cba0cc2fa36783de801b349", @ANYRES16=r0, @ANYBLOB="000427bd7000fbdbdf251400000008000a000900000008001400ff7f040005000b000000000008001000018000000800160000100000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000800}, 0x24048000) (async) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r13, &(0x7f00000008c0)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async, rerun: 64) sendto$netrom(r13, 0x0, 0x55, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (rerun: 64) 1.938300392s ago: executing program 0 (id=2628): r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x2, &(0x7f0000001000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x26a, @ipv4={'\x00', '\xff\xff', @remote}, 0xf1}}, 0x24) 1.809656317s ago: executing program 0 (id=2630): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) setsockopt(r0, 0x7, 0x2000100, &(0x7f00000000c0)="cdabb7a67fbc2ee1b4f322ebe5d7663896a45a2dd4a552b8", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) 1.76743439s ago: executing program 3 (id=2631): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xe], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.650167011s ago: executing program 2 (id=2633): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x5, 0x1ff, 0x8000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20048000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1c}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x5}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x1170, 0x1170, 0xf0, 0x1170, 0x200, 0x1398, 0x1398, 0x200, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x13, 0x81}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xd8, 0x9, 0x7, 'snmp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$netlink(r3, &(0x7f0000000280)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=[@rights={{0x30, 0x1, 0x1, [r5, r0, r6, r1, r7, r8, r9, r0]}}], 0x30, 0x4040}, 0x20000004) 1.600305464s ago: executing program 0 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r3}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) splice(r4, 0x0, r2, 0x0, 0x8000, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000200)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x3f2, 0x1, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18, 0x1000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) syz_emit_ethernet(0xee, &(0x7f00000003c0)={@empty, @remote, @void, {@mpls_mc={0x8848, {[{0x6}, {0xffeff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x887}], @ipv6=@udp={0x7, 0x6, "c1d12a", 0xa0, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast1, {[@srh={0x1, 0xa, 0x4, 0x5, 0xcf, 0x8, 0x8, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1, @remote, @ipv4={'\x00', '\xff\xff', @empty}]}], {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "092de7522ce747b5d78b7707a42d3a9784955e0e54ea7cdb", "fe19e1e2f5eb434ae1f7ee48903db9b890893b79c0bed964bd42134cc0cef965"}}}}}}}}, &(0x7f0000000280)={0x0, 0x2, [0x25e, 0x66e, 0xe3f, 0x2fb]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) poll(&(0x7f00000003c0)=[{r9, 0x8080}], 0x1, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) 1.47339227s ago: executing program 3 (id=2637): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x40004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7", 0x14, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x8}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7fffffff}, @window={0x3, 0x0, 0x4}, @timestamp, @sack_perm, @window={0x3, 0x7}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r5, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendto$inet(r2, &(0x7f00000004c0)='<', 0xfffffffffffffe9e, 0x805, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14000805}, 0x8eb7e47b51f639f6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000300)=""/83, 0x53}], 0x10000000000000c7}, 0x0) 1.434310534s ago: executing program 4 (id=2638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '^{'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '.'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\\'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '$'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x81) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xb}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40041) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) write$nci(r6, &(0x7f0000000480)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0xa3}, 0x4) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f00000004c0)=0x1000, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x150, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x84, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa55}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000001}, 0x24040804) sendto$inet6(r6, &(0x7f0000000800)="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", 0x1000, 0x40001, &(0x7f0000001800)={0xa, 0x4e21, 0x7, @mcast2, 0x861}, 0x1c) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001840), r1) r10 = accept$packet(r6, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000018c0)=0x14) getsockname$packet(r6, &(0x7f0000001a00)={0x11, 0x0, 0x0}, &(0x7f0000001a40)=0x14) sendto$packet(r10, &(0x7f0000001900)="268ee4b69d5c459ae82c5491912930bec34ebe0539ecaee539a27d4c8cf8ffb5129e57cf93f7c3b4e53efafa79d904524eab35cbea74e4b34516f8acaec55b33d9ba1d0dfad3d8f039643659d28ea7fde315fa328b533ba37acc57278b767abad5a78edace1e3cb37685a861024f706d29aba2dc28395d5cb63ed608f3282169928f4292eb4de3c6cdd136768ae1502004ca662b8c5ec2d69c97a3c1e6c16654dba6b3f4733d94a8dcfad3642e5c17bc2511d44a3d134b80dfefaef0dc1a6df68bca208a664718fdde6a135fa03df72ba25c03882a02f6dc3f353e787a42", 0xde, 0x800, &(0x7f0000001a80)={0x11, 0x1a, r11, 0x1, 0x5, 0x6, @broadcast}, 0x14) write$cgroup_type(r6, &(0x7f0000001ac0), 0x9) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x2c, 0x0, 0x401, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x80) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000001d40)={0x2, 0xe, "45fa8d", 0x65, 0x2}) close(r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000001d80), r12) socket$key(0xf, 0x3, 0x2) 1.140831808s ago: executing program 2 (id=2640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) 1.114289737s ago: executing program 1 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@remote, @null, @remote, @default, @rose, @netrom, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000001c0)={0x3, @null, r2}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 996.390503ms ago: executing program 1 (id=2642): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r4, 0x2, 0x30}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r4, 0x7, 0x30, 0x4}, &(0x7f0000000280)=0x18) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x80, 0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)="57eb879f8c1391a74cb0bceb2837bd50a7b64c22861dcf4de2ffecf0b07cf2db7d09bf9664cb5cbdd852515189accd0db0b4c05f896ce596630982847ca63003011615a6d06f04af596c3db5eb377bd09067b475a4d0d8180b1eb7d646abb3b6389a5410c9a0666f", &(0x7f00000001c0)=@udp6=r5}, 0x20) 965.423583ms ago: executing program 4 (id=2643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x48}, {0x999f}, {}, {0xa67}, {0x9}, {0xa7}, {0x831}, {0x2}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xc}, {0x4, 0x0, 0x1}, {0xffb6b, 0x0, 0x1}, {0x5}, {0x101}, {}, {0x7}, {0x208}, {0x3, 0x0, 0x1}, {0x8}, {0x7}, {0xb, 0x0, 0x1}, {0x2}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8f, 0x0, 0x1}, {0xd4}, {0x6, 0x0, 0x1}]}]}, 0xa0}}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 877.485792ms ago: executing program 2 (id=2644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502, 0x0, 0x0, 0x6}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x23c}}, 0x0) 855.367355ms ago: executing program 1 (id=2645): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async, rerun: 32) sendmsg$xdp(r2, &(0x7f0000001880)={&(0x7f0000000180)={0x2c, 0x1, r5, 0x34}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000280)="5c4cd065e45524c1e339c5ed2b9a27abebbfbeee268e27eebac1167fc446f534c4e1541d788f482c889addb0db266f08162a384f9dad0f9e94d41d4d624de28189e0882146a8e33c590aef620c79217efabcec297146db72055d3041ac85b92ddb54a937590127e0a73ed1053189ae3ab154c11304fb8a29c6fb795f16b5af24f49b69133d1b60616755518208f23bf15382ae8029a719ede76b8fb76f79de1123142ecadd1226e833850874dfea47c6518a929c3d9e92dc63efa2f799fec9aef5f4ea0608feb805ca85b5a024ebe6", 0xcf}, {&(0x7f0000000380)="aac16e77902cb0a3dd78d26eafa512f7b6d17892bb8a156cd170fb86c92da6d8da33c719034ff3d3af8134b7ac175598ceeaaaf813a8ff44096314fe440d01a09441b3a72bbd88706f1c1c85dcbde13429f60b9511b59699936ad9951f5d27d5e6979de6dc74825c6d7e0a09163a5937d8b54cee78ae28caa6eef8eb2a02a83aac6b4ec759315dbafc", 0x89}, {&(0x7f0000000480)="abd1ec0c75dc7c0ff5eea15ff0a537b9ea4d07acee7ffde48b18ef8ca7218509558bdce537d6ec7856cb3b2fce4895ffa6c9db3fed6b6ad81ebee9874c6ed6e06a2840df8d9cb1321c84c19eeb78b12a19a1e8884ea4f9cf71328e9464d33ff2664a6ac40fba6919148fc1725a22a9e0c1607897f1e8f7cf5c1a23a2bb1b050b0a4fed5461d880a8de68d987f59df988a2aec188d286f6b23646a1e1de0839c73180f614fec43ea5ddd179a1c0e455c9d7e1c7739b4b3091f41d34bd9b983e92e002277b0faa841354141304414d25612ad99c4ce3f93299bf443926cf11c4864dd12510a68689026c8614da20730b46310eff047ce2a3d51dba1cc1cd0344e9ba874e78a090c072883d6b22a728e11da69690aafb9c6aa4fdb0b0b7deb4eb2deeaf2e5bca670e451114b2cc3c8247f5116cb61435d583fc16eaa0597d319578812fa9646033134d1578c8d9e958e8f75e64e52c09fee28da522e2f1e097fe6a57f4f692c0a8a521af18705f99965dee2d189e2bd813b5f343db8a3ad171d85804b6fce1ab2f035830c36f7525c40d41fc5ed29cd48b809995c5d4693e6517d89ac5c2ef52af991c9a69cbaa55bef3818e820a88b03b63d08141c01b9859e31e78ccd6b179a449e897bfa2e95dbf832583d38cd23c7d22144005b7f07d13bcd4073dd0531e5c8bee23d5b10b97cb978db3f3a9ff436d9f8c52605ac45b552ab75e87a7ceef26dbb77d1cfe2625e10188f6bc28e3ba5338ec3011adda3ec3adbdda87cbb9a006317b5993494422b7490b8a168415f3684eeaba9371204b478c5e306ba48eca81c3fcab3fb54647751cbf7a296a55d0aefa6d7f7233c520de5393c94a705b08850ed87b4681d2971851e8b85ea1e511bd8d31399ea417811f9fb27a09fed602c58c0bbf7f0b588266717e22e0f5e94d150822171a4bbbe4fca4786a3c3e5f3886be9d1e5764bfe1f08f307a834e11944c7e0a4e29fd307d95b059cbf94719431955775f42b31b3e4139a47ff064c8997173a502bb625e0563cb8e757127eeaabc26007d198cad8d779c5f82c8c6a3d9150fc135c5b69013d193c90ea908a7c482127c5dcb011aa8b01f019925fa43191fb8d0d4b1d999be6373e28b1e37378e3e678d004316ee286325d89776d4aeb3d3a0f1c093ba1955e63d96dcb0272a9b7d6abb71cf6d9193568dbd6d307020716e57e0b6c70082498b5ed747c9a10be6902183aaea95daed02fcf92959f46bf7722a0b882cfe5f8683454098e7ba6b4c20029e46ec6be19ac915b11f301e33ab85c1a3f65fd8888918dff2aecb45561d60631d9adff43514ccf403dc4f68475e1b1363bf00484457e05be72570150eba396d2e23bf8997c7da84de716a251f2df90d9853e97d858c169a3d5a7bd20ff79dc9a3697230872313a5c7ed470dfc792b55bcc65183cb12a550362545b719527331aa2b016f0b4e0652214c1831b8e2275294be1ee79a738ccf97ce6fd674e763084f8f779b37594288f7b518f074b4b053a792b8339302e4382c1668caf20b3fc2c3c6719e52e4ed74f08a85b06a983b09bc1bcb93c9e7bd0eeb4515fe5f474d25d4fdb4ee25644b1455936fac5c5f1e7c519557c4d39e9bc0d681f413957228ee839fd2702017cf8ed0561cfcadd39b0bbd31b70cb7282628451cc4bfe8b56f816de2aba61ffda6d7591b1920150418cde290cda51514685fbd4e4cab70cd6cf38fa940d2e05ca9c81346c75627cb476ba7cdc7d70bb6678dfee8704027e5b904cc175e4200ecfd95bc1e50641f25ffbfe0beb52e1483c78b0f042ba6468237c874132a1164bca2d5cab973574b65d17d80d32831eda1ff601e1a933275d1389fb2d7713925dcac304e88333770e65a090a0bf1d6a19b24d0fd68dd079b30dbb1d0c11f66c10a9e44bbf4dd0ba4081a01f7897c01b22377b68299922d74edabb867881de53b7a06bfa7103f58187f001efa86d74dac89d72ea073caa63b9ac6ab7d94ab46ec37c374574c55a3c769121aae175aebc50754656a807d47982a3e567c8c9e49a00db6e496758ce531560c503835e22ef0ab5c7d1e22bd2407a5259c77cd25a893171062891742b8a2e3f7787cbba8a05863a2e961fa0032a348cee6b19339a971d5cb18ad2e06a4ecada65cfb2cefe6cb18cbef438863a68280881d5ac0b2ea43e177cb675e6c730561969b87745c6f6945178afb3bcf811285d300a03f5dbff9c825ddd2883fb35f6eded0f29b55f7c53c77ea8bc95a432e0daffe727d3b79f9b440ecbd4476d980c68697772144eb79675ad46901acf65e1739c42cf8f98850b97699029bcb4a109b3f3f76866fb859c7499d8e17e7b43f7b874fad71220ea7ef11cfe4b8633e5beced6e3d36c83f48d170f08bc01748af062bd6e020b6acd0b27b45f0f030e8dfd434fb71481f68305e1ca229ab74ec2d7e7ce14dec2308923cbfb1108ece198325227731cf92f9472fd7e6e37e2bd82bcbd17b174e2bc8b728f272407df7ae063e538b1769a0f0d198fd103572eeef595b2f143ea6d30fe472f0240b5ca979ab9a4d6bae2766c7feab403519b409dd4071552545c8463ccc120e2ad0c291f64d59f17bcd68176976605624c542c967981973abe750de55e3c3d13308dc2e7a682ecc90bd27ac50fdc1404ff0e9ebbd5cb88efaaaa233a9a71b3c258ddc59f85c3094ba98552ae62a4f1994b495cd411c483af217e8bf959405f89725c14e579a9a85925a9f47c4aacbbf0f38c1bffe6f379dbd305d9c8a4ae6152ce468ccbb50ca07235f5d2268cf4868fedf821da5d58a8c9c848f2e5be2361dc3b269038c6c2d9c7668243ad0916a6a5f25db350ab34ad1a00cdd157e310ba32e333822f2423de58092723af1d00c8e5cf3bec58fd94594d018b6b240fe887d9386c2571f4666ac674921d5c3ba41ef0f46c980b01fd137c538d3d0f9de0e0ec94c5c6cacc138e9d1e1ed699f9f6efc6f24d1f5343e1c40a30f0711883e41790353cbe6b5143f766ed7d736a96eaeb314bb6c82b1faf14c26516f11ef32758ca7ae5c5cf11ff254166f07119ceebea537605c5e6b7d303134faf61523af502ceb1df4482daffb182d8d6cdf85d10cef846180057d654a99f71096194079eab77d54ae9b40c4f6ce14df754815f1a5ba7e2e915f2ad2898f331c58e6722145e26b99abcc2d4115ca0222f34787232bd4acda9a1e4208f47c4ae78b33e1bfa3394e18881990f6a1b80fd6d41c5e50a1fb2fef4a80d1f86e14c6a0491e0ba34c527e4d24a6a4630e410619371ee29e1a2aa73efaaf849ec248fa536c2a67007af3ff9d15e204d541486895cacd1728b6f4f1477734987793b4011f0db620c791e03ced1b80fb7392a8570caff7e3213c52af7641bb40114353b515aae61a1b5fd2bf7164e52e4b475cfa4eb737109b72aaa55cb83a9d62741899deb543ddaefce876f9f253acc56eabfe9d115f8b840574f12ee65be04622a6007d6cc2c248a23ff7608ffb6dac31da561fbce71601b93aa7673f6cf8f953f179b7121ff0312eca485b8789bc5b66442789463f11c13ada960066ece8757c07e2eae289dc8c1bc3fa6d29f2b8dd8d86d7ea2f4fddad7fb27110d88789c7935fe96c735f664466cee098bb05d09b00917424c3b1ee530c4a31006bc97c2ff0abc59547930019bcdddd1142871cb13b38b11e8e3cbbd16ada18dad220964ea7e25445ab49fe23cce4272a696977d65d1347735afe862d55eed4fab2ab5a410763c00dbff0f56b9ecfd972cd6001a7bdaa9cd6ea6ea15b0b6e1988f21504ff820d95cd1eb1161ea93cf701c964fbd54c45fa864754e34cab6c0d47ee2792c80512bb05ae9a9eccfd09c7bd159c701fbd907ed7b3153171fbb7fb63e340f55ff8582cc631ac198b8e60e804c3318bea4d696080c8ae0eaed7652ba5b9f306ec8c9b3e1e9e6aee61ed26f78a49949be38ea9954eca675ae87ca0247a73a757027685976e036fc8c865fc0620ab184c7f96a83e5eb589500bffe5fc71f8e5d75a2a34adcc0a35d2343577e4ddcc990b91f9f2cdb9dccfb62bed68b8772f8490102e85203d5270fb5f0ab8f2a0f463163807b6b82961099aa01efcd372ab3b62e5ea23b4909265a2d37fd33cf8a1560f68820d7cf82ca18e0f95460ed42152ffc3efb7fe0800526e1b4f0b0c2f6bf6ea4648eba25f9b36d9cc139b846e3661dc8e8a4e65073d681c752de75929c8ea9a24705d1e6afd92bbda1fac7f087855adb37272a629bdce319043bb296049128c3dbbf2a6e4fe41478c3634bca13f61930003e74816c4a65d0b974d5f1ef866b975988b384f7e29eef3d5df54dde62adbbe8a8e2601118daffd277401b475e05389ddcda45356197182020c64468ca3129f71105f507da5ba7ed5484084fab4413d9f52bdf40c1bf70d0ecc784bc9b50f8799dbddb042b85cd2efe8d6e269e8621e96066f4f8d301d7a117bc9cb287e2ba997f0222c88c84e006efe948e777cd662765e47774180b8ae1eb1d3a7c21d85ff1347a3c48b2cbb4aed7257515b3d033afca1d68c45bc23d9f567e6de4f024492289d314da99959a6b13bc6edd8ae373aa2d1c2bf06c496716301e20bd4222ca287316bdd5af2fd5aaaf81f4d6979fc6b5d0f4890975f2a3dff5d431b754d110f4a50bfc5951460f1c82d3686053a37e045fd6d906aa7f20877a5954e458a2ebf875391e6ea1cf6ecfd9c9d6979564a984f0865da1743feabb523d7e5f56b3f4be10a93d60070a500e2eb112777188e5f08d19128ff8b5492e401edfa7801a1cdd9dd715b5ffa7ce4340557c2df65999d312e2aa7179da0d87313624989c1ebd8a32d7473bf56f88277189c75e374fec152d54ed8b5d9d34de56b6f8c744ed70196242b52ad14b5ee26028ea040cdaf7ff1e1017f934258a8b3a6ea86d6ec4d32c01cde29fc411b2e92e808da42653a4b48e0c79357433978a285ad72293a93215d57615424a8971644a0f98362e38baeb00429977fe90293a0b9cc409f683dec235c1849e3067b79480b8cae1260945afbedb05bfc6ee1738c4c9c6ce7e2c9c12eab05abf8871c1ff0d0ce5e39e0af9f1ca6be8e78a6f715997ca516bf270abd0af53123a849d34266df8421f781a8fb3d88ee911747fcdc349f8c50890b18924650e755ce5d96ebdf431fe56031763a59112def844eee52c489e33decba23242b57303c34c69bc84c74c7d82adc4ac9a54881cb8c31d8fa8fdb5e2819f6136fd2b126cc7d7057a99526ef6941b68c76545319376ea422c3bb9f4e57564f54485bcf914338ef1547908988546e380ae4382f6c6b591abb2daa5bb330596d0fd23c6b0d4f5ba543a876361424ee009d0a7fa5cfa2d5dd57b5c71847bba1e8e39ff653c8b5c33a33ef06f80a287ea3a3398dfae85d0606df71e02eeadcb157f2bcf82c3b59f4561592af533a741b1e1c6c92f16a0b6f8ff88020d3dca280658237d0888319817600a10eb8c90f90bc9268cc5286c983d386d39faafbfa6f0991f34cfd4d83a67839c5096a25918bc0ec5e90b4e052fdc0660e90759264708ff1fe8eeaf8170c7a3bebef62f35d943752722c9131477f327250ec2459bd446a282bd3391e813b3231bbe5a103d640a7561c4063d92658d1023baa8221676ae3846554c5ae7832eb8956c912612dbdf0ed85778576a9e1d9c7885bf3d212155a10ae12ada22bc1519c334546d097a4572f61a88b43c2282ff22913e6c38973c601332eabf87cb78acc7db856b988885068d580f7d25bf81ce3e795f07fe0", 0x1000}, {&(0x7f0000001480)="63566c23e59e22357159e8092c41eca23b9dbfbf929c2eceb7175cc563afae407ac3f4458fb406a53d201a573e860b14333bfa1f03028309a15bdaf96978cda8b6c4e49c69d0fe4ccede2c590d5a03648ce1fc584af287ebc611a5d70d7455821a09955fd9d919e057de5fd3cb451f2e0ea44d7971bd0490d4689478b2849ef45d685eb5da915375d9307145513eed6565b3c2ca36c9370e655a71f18ce1593a9c6d27b8a883efbde27fca688299e11ddd7681b533c7203d4ee0ad504ee8e01419dda7c2ab707ca114fc23ccfdef5f23b6f794782f", 0xd5}, {&(0x7f0000001580)="2c0ea46fe98db8c60113ce57c13280d988500350053fff3d568748e26621d94e871d06ae0fd8dd99c3a4123b0b4b0d6374701e45ed181fb00e93c2d77dff5a4fdfcd0d19629a51bedfa6aa0f", 0x4c}, {&(0x7f0000001600)="d745ee2c81b4644cb8bf2092971b6d0bbc6d5568d6f8276aaa0b8603b0e23d367310996503780d1b0736b0ad42a270af6f2dfdc8080a644dbf5cb91c554da0071a9b194c1af22b91c1140b74a1cf69d19a002abb025331c856fe962866fae7bea69e8d32a3086f1706c0afee2838ad172614832b6bb45ad0e0b162014671ae02fc18cf80037d4dcdb8ca514d7ab668eafd4e57112fd8128be0acc86e99c2ae020c2cb0d30ae5863b5341aa0fef41dee2cd8e3856e01167178bf6ef1615b3628d5432cd127ab091e3d50765edf5b09235bc840b726bbbe8c365911c36c11452aa", 0xe0}, {&(0x7f0000001700)="7f346bffc56310491bbc1ce41395bf6843305a4829cec3bc36ee99cf9c8d95259da5beb9c9b3666ae96d384b2a0aea2bb2b5f47a6680e76b190f4ea6398975c40ff15e498f3f2b02595fa8ff211d080118461844e27e5da3d492e1c5a521c91606f54af607885c1b79aff27b6fbf32f7deb0c9a06b0b8408510456d60e0fbb1b81fa885f46fb91f8b52c687df15f0179869b1bd618cdcaa54c", 0x99}, {&(0x7f00000017c0)="fae60441dc38c6b7be5dc2aebb4c39f99ac80ebea68e78d2cfe8c25fb12753d04841dcad2bdd74f7409985f941e057c63ed774c12886", 0x36}], 0x8, 0x0, 0x0, 0xc0}, 0x4040) (rerun: 32) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7}, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async, rerun: 32) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000}, 0x50) 803.130489ms ago: executing program 4 (id=2646): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) socket(0x2b, 0x1, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x9, 0x1) 713.037137ms ago: executing program 2 (id=2647): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203fe020d00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff030005000000000002000000ac1414aa00000000000000000200080008000000340000000000000001001480"], 0x68}, 0x1, 0x7}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000040088520300300012800b000100697036677265000020100280254e8cb5efd018d3060002000400000008000d0004001200000000004ef2a86b0c3c4d9bb953e5041e09627bc41425fc37894315ce65a5eb0f7b5faab5ef"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c024}, 0x20000000) 632.870661ms ago: executing program 4 (id=2648): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(r0) (async) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="013d", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x20000000, @remote, 0x5}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000380)="5bf26fda", 0x4}], 0x1}}], 0x3, 0x0) (async) shutdown(r0, 0x1) 627.181912ms ago: executing program 1 (id=2649): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000300)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 64) r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x3, 0xbb2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000880], 0x0, &(0x7f0000000180), &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x0, 0x6001, 'veth1_vlan\x00', 'team_slave_1\x00', 'veth1\x00', 'vcan0\x00', @remote, [0x0, 0xff, 0xff], @multicast, [], 0xe6, 0xe6, 0x11e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 0x5, 0x6, 0xa, 0x2, 0x4e21, 0x4e21, 0x4e24, 0x4e20}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x3, 0x20, 0x1b, 'bond_slave_0\x00', 'bond0\x00', 'dvmrp0\x00', 'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0x6e, 0xbe, 0x10e, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x80000000, {0x9}}}}], @common=@log={'log\x00', 0x28, {{0x6, "092fe96f4aabb28e58b9165534a9872867cf72269b00dfa4cd3957d3cdbf", 0x7}}}}, {0x3, 0x18, 0xf6, 'vlan1\x00', 'rose0\x00', 'caif0\x00', 'veth1_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x886, 0x8be, 0x8f6, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x5, 0x1}, {0x7ae9, 0x2}, {0x6}, {0x2089, 0x1}, {0x570, 0x1}, {0xc, 0x3}, {0x8, 0x1}, {0x7, 0x1}, {0x6}, {0x7, 0x3}, {0x4, 0x3}], [{0x20000, 0x8}, {0x4, 0x8}, {0x6, 0x5}, {0xe, 0x8000}, {0x2, 0x1b3}, {0x9, 0xb}, {0x7, 0x9}, {0x7, 0x7}, {0x9, 0x7}, {0x0, 0xe81}, {0x4, 0x9}], 0x8}, {[{0x1ff}, {0x3765905, 0x1}, {0x5, 0x3}, {0x9, 0x2}, {0x2}, {0x41a, 0x2}, {0x2}, {0xd0}, {0x9, 0x2}, {}, {0x8, 0x2}], [{0x1000, 0x5138}, {0x1, 0x401}, {0x400, 0x8}, {0xf4f}, {0x976}, {0x6, 0xff}, {0x6, 0x4}, {0xf, 0x7fff}, {0x6, 0x81}, {0x7a25c936, 0x2}, {0x7, 0x1}], 0x0, 0x4}, {[{0x80a}, {}, {0xffff}, {0x4}, {0x8}, {0x9, 0x1}, {0x3, 0x1}, {0x10, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x100}], [{0xa3, 0xd67b}, {0x7c3, 0x9}, {0x3}, {0x6, 0x8}, {0x7, 0x9}, {0x8, 0x40}, {0x10000, 0x9f5f}, {0x2}, {0xe7, 0x7ff}, {0xa, 0x3d}, {0x2, 0x9}], 0x6, 0x9}, {[{}, {0x1ff}, {0x400, 0x3}, {0xffff499b, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x8, 0x3}, {0x101, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x9, 0x1}], [{0x4, 0x7}, {0x9, 0x8001}, {0x2, 0x3}, {0x4, 0x81}, {0x4, 0xfffffffc}, {0x2, 0x4}, {0x8, 0xd}, {0x7, 0x2}, {0x35, 0x101}, {0x1}, {0x5, 0x1}], 0x2, 0x4}, {[{0x3}, {0x4, 0x3}, {0x379, 0x1}, {0x401}, {0xffffffff, 0x3}, {0x80000000, 0x1}, {0x1, 0x2}, {0x401}, {0xdf1e, 0x1}, {0xd}, {0xffffff80, 0x2}], [{0xb3, 0x9}, {0xa, 0x6}, {0x33b, 0x5}, {0x4, 0x400000}, {0xff, 0xfffff3d5}, {0x1, 0x6}, {0x10001, 0x1}, {0xfffffffd, 0x9}, {0xe63, 0x2}, {0x8, 0x3ff}, {0x1, 0xffffff80}], 0x5, 0xa}, {[{0x101}, {0x36e, 0x1}, {0xfffffffd, 0x2}, {0x0, 0x2}, {0x9eb1}, {0x7}, {0x6, 0x3}, {0x8953, 0x1}, {0x8, 0x2}, {0x10001, 0x1}, {0x3740}], [{0x7, 0x7fffffff}, {0x6340, 0x100}, {0x6, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0xff, 0xfffffffb}, {0x0, 0x80000001}, {0x769, 0x2}, {0x6, 0x23e}, {0x6, 0xc000000}, {0x6, 0x7}], 0x6, 0x6}, {[{0x8, 0x3}, {0x3e, 0x2}, {0xa64, 0x3}, {0x3, 0x2}, {0x1, 0x3}, {0x7170, 0x2}, {0x6, 0x1}, {0xde, 0x3}, {0x80df, 0x2}, {0x8, 0x3}, {0xdd1, 0x3}], [{0xff, 0xfd1}, {0x401, 0x8}, {0xffffffff, 0x400}, {0xe, 0x3}, {0x975c, 0x3}, {0x5e92bccf, 0x29c6}, {0xfffff677, 0x4}, {0x4, 0xf}, {0x80000000, 0x1000}, {0x10000, 0x7}, {0x5, 0xba8c}], 0x5, 0xa}, {[{0x1, 0x3}, {0x8000, 0x1}, {0x8, 0x3}, {0x3, 0x2}, {0x800, 0x2}, {0xff, 0x3}, {0x3}, {0x8}, {0x4, 0x2}, {0x9, 0x2}, {0x9e39, 0x3}], [{0x586, 0x3}, {0x5067, 0x275}, {0xe4c7, 0x2}, {0x8, 0xffffff0c}, {0xfffffffb, 0x8}, {0x4, 0x81}, {0x3, 0x7}, {0x7db4801f, 0x6}, {}, {0x5, 0x6}, {0xbb, 0x8}], 0x4, 0x9}, {[{0x9, 0x1}, {0x2, 0x3}, {0x104f, 0x1}, {0x5, 0x3}, {0xffffffff, 0x2}, {0xdb6, 0x3}, {0x3}, {0x64, 0x2}, {0x9, 0x1}, {0x2, 0x2}, {0x0, 0x2}], [{0xc, 0xb}, {0xffffffff, 0x9}, {0x9, 0x2}, {0x4, 0x9}, {0x5710ce3f, 0x2}, {0x1, 0x9e9}, {0xfffffffa, 0x9}, {0x1000, 0x1ff}, {0x2, 0x5}, {0x101, 0x2}, {0x0, 0x1}], 0x3, 0x7}, {[{0xb, 0x1}, {0x8, 0x1}, {0x8001}, {0x400}, {0x1}, {0x9, 0x2}, {0x7}, {0x7fffffff, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x9, 0x1}], [{0x4, 0xb}, {0x401, 0x26651986}, {0x3, 0x84a}, {0x6, 0x8}, {0x10000, 0xcc0}, {0x2, 0x8}, {0xb, 0x3}, {0x2, 0x7}, {0xf1, 0x3}, {0x4, 0x80000001}, {0x0, 0x6}], 0xb, 0x6}, {[{0x3}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x4, 0x1}, {0x8}, {0x0, 0x2}, {0x9}, {0x1200, 0x2}], [{0x6, 0x14}, {0x8, 0x1}, {0x81, 0x1}, {0x5, 0x2}, {0x86, 0x3}, {0x54c, 0x7}, {0x5, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x2}, {0x2, 0xa}], 0x2, 0xb}], 0xa, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x5, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xfffffff0}}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0xc2a) close(r4) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40002}, 0x20000811) (rerun: 64) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 537.157694ms ago: executing program 0 (id=2650): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xffffffffffffff37, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'ip6tnl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000840)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0xd4, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f00000009c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x20000804) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff3, 0xf}, {0xb}, {0x7, 0x2}}, [@TCA_CHAIN={0xfffffffffffffe4b, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040044}, 0x804) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000bc0)=0x14) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0100000065458e025efd4224f27fb7fa4b03e5aec67b5c561836d148346549ba", @ANYRES16=r16, @ANYBLOB="010000000000000004000f00000008000300", @ANYRES32=r15, @ANYBLOB='\b\x001\x00Q\x00\x00\x00'], 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000017c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="b40a0000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040006004009ac00000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffff7f08000100", @ANYRES32=0x0, @ANYBLOB="040202804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400dc1700091b000000ffffa30409000000fb007f020700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e00102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400faffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000101000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a00102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400080009fe0100000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff00000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="c0000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="080001fd", @ANYRES32=0x0, @ANYBLOB="1802028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008ab70000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004009d0d000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400bb3600003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r18, @ANYBLOB="8c0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040004000d00040000000900040306000000e1140f0401040000"], 0xab4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffff0000a1126000000000009500000700000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 534.744696ms ago: executing program 3 (id=2651): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18200b660770e0000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b7030000040000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@fwd={0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x4}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r1 = socket$inet(0x2, 0x4000000805, 0x0) epoll_create1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) 482.116047ms ago: executing program 4 (id=2652): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r8, 0x0) (async, rerun: 32) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r8) (async, rerun: 32) splice(r8, 0x0, r9, 0x0, 0xf3c, 0x0) (async, rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRESDEC=r2, @ANYRES8=r7, @ANYRESHEX=r8], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 419.061634ms ago: executing program 3 (id=2653): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async) write(r2, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080001000d000000", 0x24) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1409, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8010) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') 252.675529ms ago: executing program 1 (id=2654): r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 250.81484ms ago: executing program 2 (id=2655): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000400", @ANYRES32=0x0, @ANYBLOB="5b08560261c35d4414ca88ef134eaaebbdcf4d0f187b93903c6a6f477b"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 91.447216ms ago: executing program 2 (id=2656): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0xa0, &(0x7f0000000380)=""/160, 0x41100, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x40}, 0x10, 0x4fcb, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x1, 0x4, 0x2}, {0x2, 0x1, 0x10, 0x8}, {0x1, 0x5, 0x5, 0x8}, {0x1, 0x4, 0x8, 0xb}], 0x10, 0x6}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x10, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000006c0)=[{0x0, 0x3, 0xc, 0x4}, {0x1, 0x3, 0xa, 0x1}, {0x2, 0x2, 0xb, 0x6}, {0x4, 0x2, 0x4, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x2000000, r0, @void, @value=0x0}, 0x20) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt(r1, 0x1, 0x45, 0x0, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a000000000000000800060001"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) 87.504283ms ago: executing program 0 (id=2657): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) shutdown(r0, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) 70.281893ms ago: executing program 3 (id=2658): r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x44040050) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) socket$unix(0x1, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400a8337051f2546e290000000000000a00000000000000000000000500130000000000"], 0x24}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.358679ms ago: executing program 4 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xb25, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x700, 0x8, 0xfffa, 0x5, {{0x2e, 0x4, 0x2, 0x6, 0xb8, 0x68, 0x0, 0x91, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x17, 0xa2, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0xd, 0x0, [{0x7, 0x7, "83648f0733"}]}, @timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0x9, [{@empty, 0x4}]}, @end, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x2, [{@local, 0x10}, {@multicast1, 0x649b}, {@broadcast, 0x28}, {@rand_addr=0x64010100, 0xffff}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xcd, 0x1, 0x4, [{@remote, 0x8}, {@empty, 0xb}, {@multicast2}, {@private=0xa010101, 0x3}, {@broadcast, 0x6}]}, @lsrr={0x83, 0x1f, 0x9e, [@multicast2, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @local]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r6, 0x180000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8001, 0x5, 0x5, 0x100, r3, 0xfffffff7, '\x00', r4, r5, 0x4, 0x3, 0x1, 0xa}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x42}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=2660): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x89, 0x2, 0x8, 0xed02}, {0x1, 0x7, 0x9, 0x6}]}) (async, rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="91d8000000000000080000000100001000000000d09757ef433ee4f454684cb4fecceb46c9448f22e843fbdba448e7f59132170f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fbffffff00"/28], 0x48) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4, 0x3}}, 0x2e) close(r2) (async) socketpair(0x1f, 0x80000, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f40000001627a73eb79a4741d0d1f2e32a60b20c617c9f8081b2388950b437b90c0a06de57d59a602bdab4e9c937865f4c8308c55d7ff9c97ca0dff4960fa9d0d36a00012f02ab1f3617bc1f6861b397d6f35e69251b8da94652a46c63c4a89a1616274f78dad63bc3cc399f7e1ec58736330f1bfcff6dc8401a53d221f9e676e9f77027c75400"/150, @ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000900060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090005000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090005000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090004000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090008000000"], 0xf4}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000080)) kernel console output (not intermixed with test programs): T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.591012][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.658314][ T5983] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14'. [ 93.709153][ T5834] Bluetooth: hci1: command tx timeout [ 93.714597][ T5836] Bluetooth: hci0: command tx timeout [ 93.754831][ T5992] Zero length message leads to an empty skb [ 93.848596][ T5989] bond1: entered promiscuous mode [ 93.854357][ T5989] bond1: entered allmulticast mode [ 93.862997][ T5989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.873073][ T5836] Bluetooth: hci4: command tx timeout [ 93.873089][ T5834] Bluetooth: hci2: command tx timeout [ 93.929429][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 93.949982][ T5836] Bluetooth: hci3: command tx timeout [ 93.959338][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.002157][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.336453][ T5997] syzkaller0: entered promiscuous mode [ 94.379110][ T5997] syzkaller0: entered allmulticast mode [ 94.434932][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.455971][ T6020] netlink: 196 bytes leftover after parsing attributes in process `syz.1.24'. [ 94.500213][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.726125][ T6027] netlink: 80 bytes leftover after parsing attributes in process `syz.1.26'. [ 94.727302][ T6029] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 94.821840][ T6036] tipc: Started in network mode [ 94.828482][ T6036] tipc: Node identity ac14140f, cluster identity 4711 [ 94.838062][ T6036] tipc: Enabling of bearer rejected, failed to enable media [ 95.126730][ T6042] xfrm1: entered allmulticast mode [ 95.777269][ T6084] xt_cgroup: path and classid specified [ 96.016725][ T6077] bridge1: entered promiscuous mode [ 96.029466][ T6077] bridge1: entered allmulticast mode [ 96.060445][ T6099] : renamed from bridge_slave_0 (while UP) [ 96.556461][ T6121] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 96.650964][ T6134] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 96.878312][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.892317][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.923223][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.058206][ T6155] syz.4.56 uses obsolete (PF_INET,SOCK_PACKET) [ 97.062618][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.421796][ T6168] x_tables: duplicate underflow at hook 1 [ 97.430179][ T6168] x_tables: duplicate underflow at hook 3 [ 97.443020][ T6168] x_tables: duplicate underflow at hook 3 [ 97.461485][ T6170] warning: `syz.4.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.898269][ T6187] bridge_slave_0: left allmulticast mode [ 97.925524][ T6187] bridge_slave_0: left promiscuous mode [ 97.943817][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.955724][ T6196] __nla_validate_parse: 6 callbacks suppressed [ 97.955744][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 98.002007][ T6187] bridge_slave_1: left allmulticast mode [ 98.016428][ T6187] bridge_slave_1: left promiscuous mode [ 98.024039][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.047342][ T6187] bond0: (slave bond_slave_0): Releasing backup interface [ 98.106021][ T6187] bond0: (slave bond_slave_1): Releasing backup interface [ 98.129169][ T6187] team0: Port device team_slave_0 removed [ 98.142489][ T6187] team0: Port device team_slave_1 removed [ 98.150628][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.158623][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.185271][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.220139][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.265228][ T6187] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.581290][ T6218] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 98.631402][ T6232] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.644691][ T6232] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 98.662541][ T6228] Illegal XDP return value 467227151 on prog (id 50) dev N/A, expect packet loss! [ 98.720792][ T6218] bond2 (unregistering): Released all slaves [ 98.974203][ T6237] tipc: New replicast peer: 255.255.255.255 [ 98.995670][ T6239] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.009737][ T6237] tipc: Enabled bearer , priority 10 [ 99.041211][ T6237] netlink: 5 bytes leftover after parsing attributes in process `syz.0.82'. [ 99.054928][ T6237] 0{X: renamed from gretap0 (while UP) [ 99.074554][ T6237] 0{X: entered allmulticast mode [ 99.108422][ T6237] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 99.505491][ T6258] vxcan0: tx drop: invalid sa for name 0x0040000000000000 [ 99.763738][ T6276] team0: Device ipvlan1 failed to register rx_handler [ 99.801735][ T6276] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 100.101494][ T6287] can: request_module (can-proto-0) failed. [ 100.140557][ T5915] tipc: Node number set to 2886997007 [ 100.150008][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 100.224433][ T6287] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 100.290528][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 100.343995][ T6305] openvswitch: netlink: Multiple metadata blocks provided [ 100.432631][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 100.478092][ T6313] netlink: 256 bytes leftover after parsing attributes in process `syz.4.105'. [ 100.662896][ T6316] sctp: [Deprecated]: syz.1.106 (pid 6316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.662896][ T6316] Use struct sctp_sack_info instead [ 100.715205][ T6320] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 100.724182][ T6320] netlink: 'syz.4.108': attribute type 3 has an invalid length. [ 100.754962][ T6320] netlink: 172 bytes leftover after parsing attributes in process `syz.4.108'. [ 100.767350][ T6321] ipt_REJECT: ECHOREPLY no longer supported. [ 100.776207][ T6320] NCSI netlink: No device for ifindex 813332851 [ 100.988312][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'. [ 101.034723][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'. [ 101.057111][ T6334] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 101.070496][ T6334] bond1: entered promiscuous mode [ 101.075587][ T6334] bond1: entered allmulticast mode [ 101.082425][ T6334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.522726][ T6362] syzkaller1: entered promiscuous mode [ 101.528277][ T6362] syzkaller1: entered allmulticast mode [ 101.655201][ T6370] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 101.689953][ T6370] netlink: 'syz.2.122': attribute type 3 has an invalid length. [ 101.697712][ T6370] netlink: 'syz.2.122': attribute type 7 has an invalid length. [ 101.728592][ T6370] netlink: 'syz.2.122': attribute type 8 has an invalid length. [ 101.784722][ T6370] netlink: 184 bytes leftover after parsing attributes in process `syz.2.122'. [ 101.828804][ T6370] NCSI netlink: No device for ifindex 131092 [ 102.033090][ T6380] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 102.356019][ T6399] team_slave_0: entered promiscuous mode [ 102.361941][ T6399] team_slave_1: entered promiscuous mode [ 102.402274][ T6399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.471378][ T6403] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 102.505486][ T6399] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 102.535238][ T6407] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 102.572179][ T6409] vlan2: entered promiscuous mode [ 102.577853][ T6409] erspan0: entered promiscuous mode [ 102.840139][ T6423] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 102.862064][ T6423] batman_adv: batadv0: Adding interface: netdevsim0 [ 102.871236][ T6423] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.930664][ T6423] batman_adv: batadv0: Interface activated: netdevsim0 [ 102.952320][ T6421] bridge_slave_0: left allmulticast mode [ 102.988774][ T6421] bridge_slave_0: left promiscuous mode [ 102.997955][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.015691][ T6421] bridge_slave_1: left allmulticast mode [ 103.022328][ T6421] bridge_slave_1: left promiscuous mode [ 103.028164][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.044732][ T6433] netlink: 'syz.3.141': attribute type 64 has an invalid length. [ 103.053970][ T6433] __nla_validate_parse: 5 callbacks suppressed [ 103.053988][ T6433] netlink: 5 bytes leftover after parsing attributes in process `syz.3.141'. [ 103.075932][ T6421] bond0: (slave bond_slave_0): Releasing backup interface [ 103.086701][ T6421] bond0: (slave bond_slave_1): Releasing backup interface [ 103.100219][ T6421] team_slave_0: left promiscuous mode [ 103.109973][ T6421] team0: Port device team_slave_0 removed [ 103.117361][ T6421] team_slave_1: left promiscuous mode [ 103.128050][ T6421] team0: Port device team_slave_1 removed [ 103.139967][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.147460][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.162385][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.170651][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.182306][ T6421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.323231][ T6439] netlink: 712 bytes leftover after parsing attributes in process `syz.0.142'. [ 103.332710][ T6439] openvswitch: netlink: Flow key attr not present in new flow. [ 103.444547][ T6442] netlink: 'syz.1.143': attribute type 10 has an invalid length. [ 103.529572][ T6447] netlink: 'syz.1.143': attribute type 10 has an invalid length. [ 103.562622][ T6442] team0: Failed to send options change via netlink (err -105) [ 103.591366][ T6442] team0: Port device dummy0 added [ 103.601165][ T6450] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 103.602252][ T6447] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.632274][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 103.666720][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.147'. [ 103.681842][ T6447] team0: Failed to send options change via netlink (err -105) [ 103.698972][ T6447] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.718351][ T6447] team0: Port device dummy0 removed [ 103.735146][ T6447] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.169114][ T6479] veth0: entered promiscuous mode [ 104.192179][ T6476] veth0: left promiscuous mode [ 104.213892][ T6480] netlink: 92 bytes leftover after parsing attributes in process `syz.1.155'. [ 104.259480][ T6488] netlink: 84 bytes leftover after parsing attributes in process `syz.0.154'. [ 104.313639][ T6490] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 104.354938][ T6490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.580305][ T6500] netlink: 188 bytes leftover after parsing attributes in process `syz.4.160'. [ 104.601541][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 104.619518][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 105.158607][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.580644][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.711688][ T6550] gre0: entered promiscuous mode [ 105.716757][ T6550] gre0: entered allmulticast mode [ 105.932391][ T6560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.963158][ T6560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.983389][ T6560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.034550][ T6560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.210039][ T6571] team0: No ports can be present during mode change [ 106.953866][ T6615] wireguard0: entered promiscuous mode [ 106.961167][ T6615] wireguard0: entered allmulticast mode [ 106.995035][ T6615] team0: Refused to change device type [ 107.004962][ T6624] openvswitch: netlink: Message has 536 unknown bytes. [ 107.064040][ T6624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.193434][ T6618] validate_nla: 4 callbacks suppressed [ 107.193453][ T6618] netlink: 'syz.1.194': attribute type 3 has an invalid length. [ 107.820430][ T6667] xt_hashlimit: size too large, truncated to 1048576 [ 107.874627][ T6671] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 108.064399][ T6671] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.077637][ T6671] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.089958][ T6671] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 108.479958][ T6699] __nla_validate_parse: 5 callbacks suppressed [ 108.479979][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 108.515910][ T6699] netlink: 'syz.1.212': attribute type 6 has an invalid length. [ 108.564117][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 108.581637][ T6704] netlink: 'syz.4.214': attribute type 2 has an invalid length. [ 108.823184][ T6714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.217'. [ 108.865497][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.219'. [ 109.044418][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 109.860881][ T6759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.228'. [ 109.895449][ T6759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.228'. [ 110.004668][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 110.019660][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 110.183685][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 110.273584][ T6771] erspan1: entered promiscuous mode [ 110.450239][ T6782] openvswitch: netlink: Flow key attr not present in new flow. [ 110.965700][ T6808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.103177][ T6819] netlink: 'syz.1.247': attribute type 10 has an invalid length. [ 111.134721][ T6816] bond1: Unable to set up delay as MII monitoring is disabled [ 111.145193][ T6816] bond1 (unregistering): Released all slaves [ 111.188631][ T6819] bridge0: port 3(team0) entered blocking state [ 111.196309][ T6819] bridge0: port 3(team0) entered disabled state [ 111.206306][ T6819] team0: entered allmulticast mode [ 111.218532][ T6819] team_slave_0: entered allmulticast mode [ 111.229967][ T6819] team_slave_1: entered allmulticast mode [ 111.239967][ T6819] team0: entered promiscuous mode [ 111.245199][ T6819] team_slave_0: entered promiscuous mode [ 111.252281][ T6819] team_slave_1: entered promiscuous mode [ 111.260443][ T6819] bridge0: port 3(team0) entered blocking state [ 111.266893][ T6819] bridge0: port 3(team0) entered forwarding state [ 111.275505][ T3777] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.324988][ T3777] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.349919][ T3777] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.360292][ T3777] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.382715][ T6806] infiniband sy: set down [ 111.387431][ T6806] infiniband sy: added bond_slave_0 [ 111.468563][ T6806] RDS/IB: sy: added [ 111.485798][ T6806] smc: adding ib device sy with port count 1 [ 111.494472][ T6806] smc: ib device sy port 1 has no pnetid [ 111.549509][ T5836] Bluetooth: hci1: command tx timeout [ 113.686428][ T6888] __nla_validate_parse: 22 callbacks suppressed [ 113.686447][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 113.709339][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 114.444302][ T6912] syzkaller0: entered promiscuous mode [ 114.490047][ T6912] syzkaller0: entered allmulticast mode [ 115.047651][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'. [ 116.111897][ T6775] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.393498][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 116.450167][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 116.669988][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 117.351765][ T6996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.296'. [ 118.364044][ T7039] netlink: 'syz.3.306': attribute type 24 has an invalid length. [ 118.384539][ T7040] netlink: 'syz.3.306': attribute type 24 has an invalid length. [ 119.080193][ T7066] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 119.692846][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 119.720095][ T7101] netlink: 'syz.4.320': attribute type 8 has an invalid length. [ 119.904706][ T7094] netlink: 'syz.3.321': attribute type 11 has an invalid length. [ 119.944802][ T7116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.019179][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 120.129493][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.324'. [ 120.139644][ T7116] openvswitch: netlink: Flow key attr not present in new flow. [ 120.202712][ T7127] netlink: 256 bytes leftover after parsing attributes in process `syz.3.327'. [ 120.257616][ T7127] netlink: 136 bytes leftover after parsing attributes in process `syz.3.327'. [ 120.368621][ T7133] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 120.377485][ T7133] netlink: 224 bytes leftover after parsing attributes in process `syz.0.329'. [ 120.877568][ T7159] macvtap1: entered allmulticast mode [ 120.910891][ T7159] veth0_macvtap: entered allmulticast mode [ 120.934739][ T7165] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 121.077406][ T7169] netlink: 'syz.0.336': attribute type 18 has an invalid length. [ 121.562795][ T7195] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 121.661243][ T7195] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 121.967113][ T7217] IPVS: Unknown mcast interface: vcan0 [ 121.983716][ T7221] smc: net device gre0 applied user defined pnetid SYZ1 [ 122.205644][ T984] IPVS: starting estimator thread 0... [ 122.213990][ T7228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.354'. [ 122.217461][ T7233] sctp: [Deprecated]: syz.4.356 (pid 7233) Use of int in max_burst socket option. [ 122.217461][ T7233] Use struct sctp_assoc_value instead [ 122.235744][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 122.249047][ T7232] tipc: Enabled bearer , priority 0 [ 122.340668][ T7234] IPVS: using max 29 ests per chain, 69600 per kthread [ 122.450798][ T7235] tipc: Disabling bearer [ 122.458204][ T7241] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.512451][ T7241] netlink: 'syz.1.358': attribute type 13 has an invalid length. [ 122.515881][ T7244] pim6reg: entered allmulticast mode [ 122.882951][ T7239] pim6reg: left allmulticast mode [ 123.287243][ T7285] netlink: 104 bytes leftover after parsing attributes in process `syz.3.370'. [ 123.386496][ T7288] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 123.692881][ T7303] netlink: 'syz.0.375': attribute type 1 has an invalid length. [ 123.709331][ T7303] netlink: 232 bytes leftover after parsing attributes in process `syz.0.375'. [ 123.927197][ T7317] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 124.311646][ T7333] netlink: 'syz.4.384': attribute type 7 has an invalid length. [ 124.712434][ T7349] sctp: [Deprecated]: syz.2.389 (pid 7349) Use of int in maxseg socket option. [ 124.712434][ T7349] Use struct sctp_assoc_value instead [ 124.760779][ T7355] __nla_validate_parse: 6 callbacks suppressed [ 124.760800][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 124.787927][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'. [ 124.832434][ T7349] netlink: 'syz.2.389': attribute type 7 has an invalid length. [ 124.846080][ T7359] openvswitch: netlink: Key type 204 is out of range max 32 [ 124.886952][ T7349] netlink: 'syz.2.389': attribute type 8 has an invalid length. [ 124.911321][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 125.126506][ T7377] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 125.144918][ T7378] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.397'. [ 125.205640][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 125.300553][ T7389] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20002 [ 125.311180][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 125.314840][ T7377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.369317][ T7392] netlink: 240 bytes leftover after parsing attributes in process `syz.1.401'. [ 125.385267][ T7384] bond2: entered allmulticast mode [ 125.453126][ T7388] bond2: (slave ip6gretap1): making interface the new active one [ 125.472252][ T7388] ip6gretap1: entered allmulticast mode [ 125.482181][ T7388] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 125.857057][ T7419] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 125.915167][ T7419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.963647][ T7419] bond1: (slave geneve2): making interface the new active one [ 125.978353][ T7419] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.048018][ T30] audit: type=1804 audit(1765517242.326:2): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.411" name="/newroot/85/cgroup.controllers" dev="tmpfs" ino=449 res=1 errno=0 [ 126.079997][ T30] audit: type=1800 audit(1765517242.326:3): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.411" name="cgroup.controllers" dev="tmpfs" ino=449 res=0 errno=0 [ 126.124958][ T30] audit: type=1804 audit(1765517242.336:4): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.411" name="/newroot/85/cgroup.controllers" dev="tmpfs" ino=449 res=1 errno=0 [ 126.214174][ T7444] trusted_key: syz.3.412 sent an empty control message without MSG_MORE. [ 126.387779][ T7449] netlink: 'syz.3.414': attribute type 10 has an invalid length. [ 126.398596][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.407029][ T7449] bridge_slave_1: left allmulticast mode [ 126.412998][ T7449] bridge_slave_1: left promiscuous mode [ 126.418985][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.431148][ T7449] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 126.756290][ T7452] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.415'. [ 127.072603][ T7473] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 127.302949][ T7483] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 127.387750][ T7483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.419493][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.425967][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.433062][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.440381][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.446604][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.459149][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.502175][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.550577][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.580910][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.631711][ T7493] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.851687][ T7513] netlink: 14 bytes leftover after parsing attributes in process `syz.2.436'. [ 128.156973][ T7523] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 128.169520][ T7523] netlink: 84 bytes leftover after parsing attributes in process `syz.3.439'. [ 128.178583][ T7523] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.334130][ T7535] pimreg: entered allmulticast mode [ 128.409529][ T7535] pimreg: left allmulticast mode [ 129.262427][ T7559] netlink: 'syz.4.448': attribute type 3 has an invalid length. [ 129.486151][ T7568] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 129.647531][ T7577] syzkaller0: entered promiscuous mode [ 129.675056][ T7577] syzkaller0: entered allmulticast mode [ 129.864457][ T7581] netlink: 'syz.1.455': attribute type 2 has an invalid length. [ 130.081198][ T7593] netlink: 'syz.3.458': attribute type 17 has an invalid length. [ 130.107070][ T7593] __nla_validate_parse: 1 callbacks suppressed [ 130.107091][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 130.161163][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 130.165514][ T7599] lo: Caught tx_queue_len zero misconfig [ 130.197781][ T7599] 8021q: VLANs not supported on ip6gre0 [ 130.221339][ T7593] syz_tun: entered promiscuous mode [ 130.275750][ T7593] syz_tun: left promiscuous mode [ 130.405410][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 130.415339][ T7606] block nbd0: Unsupported socket: should be TCP or UNIX. [ 130.431377][ T7604] bridge0: port 4(ipvlan0) entered blocking state [ 130.439947][ T7607] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 130.442002][ T7604] bridge0: port 4(ipvlan0) entered disabled state [ 130.465446][ T7607] netlink: 236 bytes leftover after parsing attributes in process `syz.4.464'. [ 130.477187][ T7604] ipvlan0: entered allmulticast mode [ 130.493935][ T7604] bridge0: entered allmulticast mode [ 130.521575][ T7604] ipvlan0: left allmulticast mode [ 130.561287][ T7604] bridge0: left allmulticast mode [ 130.614110][ T7614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.465'. [ 130.625328][ T7614] netlink: 'syz.3.465': attribute type 21 has an invalid length. [ 130.636374][ T7614] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.651130][ T7614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.658656][ T7614] IPv6: NLM_F_CREATE should be set when creating new route [ 130.666110][ T7614] IPv6: NLM_F_CREATE should be set when creating new route [ 130.673455][ T7614] IPv6: NLM_F_CREATE should be set when creating new route [ 130.733100][ T6638] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.742560][ T7619] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 130.753649][ T6638] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.795010][ T7619] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 130.812804][ T6638] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.834742][ T7619] netlink: 244 bytes leftover after parsing attributes in process `syz.3.465'. [ 130.861718][ T6638] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.881995][ T7621] netlink: 'syz.3.465': attribute type 58 has an invalid length. [ 130.918593][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.465'. [ 130.986071][ T7627] netlink: 72 bytes leftover after parsing attributes in process `syz.4.470'. [ 131.777192][ T7665] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 131.803762][ T7665] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 132.000347][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 132.120487][ T7683] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 132.147111][ T7678] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 132.197907][ T7684] bond1: (slave ip6gretap1): making interface the new active one [ 132.206627][ T7684] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 132.562898][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 132.770996][ T7703] hsr_slave_1 (unregistering): left promiscuous mode [ 133.443638][ T7749] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 134.216251][ T7788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.662349][ T7808] tipc: Started in network mode [ 134.677135][ T7808] tipc: Node identity 0ab6ff8df608, cluster identity 4711 [ 134.695533][ T7808] tipc: Enabled bearer , priority 0 [ 134.722481][ T7808] syzkaller0: entered promiscuous mode [ 134.741887][ T7808] syzkaller0: entered allmulticast mode [ 134.763097][ T7808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 134.824303][ T7808] tipc: Resetting bearer [ 134.830823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.895830][ T7806] tipc: Resetting bearer [ 134.962255][ T7806] tipc: Disabling bearer [ 135.264112][ T7814] hsr_slave_0 (unregistering): left promiscuous mode [ 135.323506][ T7833] __nla_validate_parse: 8 callbacks suppressed [ 135.323525][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'. [ 135.576427][ T7847] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 135.580948][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 135.641541][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 135.724595][ T7844] vlan0: entered allmulticast mode [ 135.775114][ T7844] hsr0: entered allmulticast mode [ 135.781286][ T7844] hsr_slave_0: entered allmulticast mode [ 135.820819][ T7844] hsr_slave_1: entered allmulticast mode [ 135.873015][ T7853] netlink: 830 bytes leftover after parsing attributes in process `syz.2.538'. [ 136.223143][ T7874] syzkaller0: entered promiscuous mode [ 136.238270][ T7874] syzkaller0: entered allmulticast mode [ 136.520983][ T7893] sctp: [Deprecated]: syz.3.546 (pid 7893) Use of int in maxseg socket option. [ 136.520983][ T7893] Use struct sctp_assoc_value instead [ 137.513471][ T7885] mac80211_hwsim hwsim3 wlan0: Caught tx_queue_len zero misconfig [ 137.583339][ T7895] syzkaller1: entered promiscuous mode [ 137.612287][ T7895] syzkaller1: entered allmulticast mode [ 137.741563][ T7909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'. [ 137.773893][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 137.877352][ T7901] veth0_macvtap: left promiscuous mode [ 138.131451][ T7924] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 138.158365][ T7924] bond4 (unregistering): Released all slaves [ 138.276159][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.392244][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 138.412276][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 138.479820][ T7938] dvmrp0: entered allmulticast mode [ 138.498993][ T7936] validate_nla: 1 callbacks suppressed [ 138.499013][ T7936] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 138.514429][ T7940] dvmrp0: left allmulticast mode [ 138.912049][ T7959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.972186][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 139.015791][ T7965] veth0: entered promiscuous mode [ 139.030717][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'. [ 139.268167][ T7964] veth0: left promiscuous mode [ 139.650541][ T7998] syzkaller0: entered allmulticast mode [ 139.897792][ T8010] 8021q: VLANs not supported on vcan0 [ 139.951794][ T8013] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 139.964235][ T8013] gretap1: entered promiscuous mode [ 139.969912][ T8013] gretap1: entered allmulticast mode [ 140.450667][ T8039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 140.453015][ T8046] netlink: 'syz.1.585': attribute type 21 has an invalid length. [ 140.533759][ T8039] tipc: Enabling of bearer rejected, failed to enable media [ 140.608841][ T8046] __nla_validate_parse: 5 callbacks suppressed [ 140.608860][ T8046] netlink: 152 bytes leftover after parsing attributes in process `syz.1.585'. [ 141.005004][ T8058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.588'. [ 141.039084][ T8058] ip6tnl0: Caught tx_queue_len zero misconfig [ 141.262403][ T8060] dvmrp0: entered allmulticast mode [ 141.444425][ T8081] xt_TCPMSS: Only works on TCP SYN packets [ 141.768309][ T8095] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 141.771849][ T8092] netlink: 124 bytes leftover after parsing attributes in process `syz.1.599'. [ 142.209942][ T8109] netlink: 324 bytes leftover after parsing attributes in process `syz.1.606'. [ 142.238611][ T8110] netlink: 'syz.2.605': attribute type 21 has an invalid length. [ 142.418910][ T8115] x_tables: unsorted entry at hook 2 [ 142.835741][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'. [ 142.998603][ T8140] dvmrp0: entered allmulticast mode [ 143.066028][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 143.094193][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 143.414614][ T8161] tipc: Enabling of bearer rejected, media not registered [ 144.221716][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 144.648984][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.636'. [ 144.691779][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.636'. [ 144.824614][ T8219] x_tables: duplicate entry at hook 2 [ 144.949727][ T8227] syzkaller0: create flow: hash 1659458489 index 1 [ 145.190449][ T12] syzkaller0: tun_net_xmit 76 [ 145.195637][ T12] syzkaller0: tun_net_xmit 48 [ 145.222399][ T5917] syzkaller0: tun_net_xmit 76 [ 145.234455][ T8218] syzkaller0: delete flow: hash 1659458489 index 1 [ 146.685327][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.643'. [ 146.882568][ T8251] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 146.906385][ T8254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.650'. [ 146.978548][ T8251] bond3: entered promiscuous mode [ 147.074470][ T8251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.136254][ T8264] bond3: (slave bridge1): making interface the new active one [ 147.205922][ T8264] bridge1: entered promiscuous mode [ 147.232597][ T8264] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 147.269223][ T8274] netlink: 'syz.2.654': attribute type 5 has an invalid length. [ 147.301294][ T8277] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 147.475556][ T8283] netlink: 'syz.0.656': attribute type 7 has an invalid length. [ 147.515328][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 147.557156][ T8288] bond0: Caught tx_queue_len zero misconfig [ 147.559285][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 147.608821][ T8283] netlink: 'syz.0.656': attribute type 7 has an invalid length. [ 147.626847][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 147.638137][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 147.914268][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.923622][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.956698][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.966987][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.277584][ T8302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.663'. [ 148.502236][ T8315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.666'. [ 148.737770][ T8317] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 148.801406][ T8317] bond3 (unregistering): Released all slaves [ 148.870448][ T8330] sctp: [Deprecated]: syz.1.673 (pid 8330) Use of int in maxseg socket option. [ 148.870448][ T8330] Use struct sctp_assoc_value instead [ 149.000516][ T8324] geneve3: entered promiscuous mode [ 149.160421][ T8325] geneve3: entered promiscuous mode [ 149.768181][ T8351] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.786236][ T8351] bond3: (slave lo): Enslaving as a backup interface with an up link [ 149.801263][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 149.847895][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 149.934542][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 149.987974][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 149.997522][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.051762][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.103668][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.157703][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.202528][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.265709][ T8351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 151.155174][ T8411] sctp: [Deprecated]: syz.4.695 (pid 8411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.155174][ T8411] Use struct sctp_sack_info instead [ 151.175027][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 151.305373][ T8419] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 151.367565][ T8416] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 151.629670][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 151.784443][ T8447] __nla_validate_parse: 2 callbacks suppressed [ 151.784464][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 152.078366][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 152.100783][ T8458] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 152.146067][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 152.265446][ T8465] IPVS: ip_vs_edit_dest(): server weight less than zero [ 152.286497][ T5830] IPVS: starting estimator thread 0... [ 152.321570][ T8434] infiniband syz1: set down [ 152.327101][ T8434] infiniband syz1: added ipvlan0 [ 152.330182][ T8456] bond4: (slave ip6gretap1): making interface the new active one [ 152.382241][ T8456] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.400906][ T8456] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.411084][ T8468] IPVS: using max 28 ests per chain, 67200 per kthread [ 152.448559][ T8456] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 152.507070][ T8460] netlink: 'syz.3.705': attribute type 4 has an invalid length. [ 152.555751][ T8434] RDS/IB: syz1: added [ 152.557632][ T8478] veth0: entered promiscuous mode [ 152.566183][ T8434] smc: adding ib device syz1 with port count 1 [ 152.622801][ T8434] smc: ib device syz1 port 1 has no pnetid [ 152.646009][ T8481] veth0: left promiscuous mode [ 152.826164][ T8489] netlink: 76 bytes leftover after parsing attributes in process `syz.3.711'. [ 152.865324][ T8489] nbd: illegal input index -8454144 [ 153.058345][ T8497] netlink: 'syz.0.712': attribute type 33 has an invalid length. [ 153.105931][ T8497] netlink: 152 bytes leftover after parsing attributes in process `syz.0.712'. [ 153.151080][ T8499] ipt_ECN: cannot use operation on non-tcp rule [ 153.187828][ T8504] ipt_ECN: cannot use operation on non-tcp rule [ 153.385328][ T8506] xt_bpf: check failed: parse error [ 153.903746][ T8524] dvmrp0: entered allmulticast mode [ 153.941122][ T8524] dvmrp0: left allmulticast mode [ 154.260484][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 154.302821][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 154.385866][ T8524] pim6reg527: entered allmulticast mode [ 154.403214][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 154.433718][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 154.637890][ T8542] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.672548][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.727'. [ 154.687016][ T8542] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.864035][ T8542] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.880124][ T8542] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.123287][ T8542] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.156995][ T8542] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.343637][ T8542] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 155.450769][ T8542] batman_adv: batadv0: Removing interface: netdevsim0 [ 155.477380][ T8542] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.506373][ T8542] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.568596][ T8573] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.743943][ T8542] Failed to register nexthop notifier [ 155.854496][ T8585] netlink: 'syz.3.737': attribute type 6 has an invalid length. [ 156.114384][ T8600] geneve2: entered promiscuous mode [ 156.603283][ T8612] netlink: 'syz.4.746': attribute type 8 has an invalid length. [ 157.025108][ T8630] __nla_validate_parse: 3 callbacks suppressed [ 157.025129][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 157.062096][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 157.225159][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'. [ 157.624159][ T8657] netlink: 14 bytes leftover after parsing attributes in process `syz.3.757'. [ 157.686343][ T8659] Cannot find del_set index 0 as target [ 157.911733][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 157.951513][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.761'. [ 158.182992][ T8695] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 158.191022][ T8695] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.766'. [ 158.257139][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 158.477566][ T8704] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 158.530431][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 158.566013][ T8716] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 158.595998][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.611623][ T8719] netlink: 52 bytes leftover after parsing attributes in process `syz.2.773'. [ 158.739685][ T8726] delete_channel: no stack [ 158.785609][ T8716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.795743][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.827878][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.835911][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.906120][ T8720] bond4: (slave geneve3): making interface the new active one [ 158.921124][ T8720] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 158.930995][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.938299][ T8721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.945886][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.953138][ T8721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.997467][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.021207][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.028547][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.043124][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.803808][ T8770] netlink: 'syz.0.786': attribute type 39 has an invalid length. [ 160.433858][ T5991] udevd[5991]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 160.451976][ T5879] udevd[5879]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 160.511195][ T8804] openvswitch: netlink: IPv6 tunnel dst address is zero [ 160.800362][ T8820] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 160.808303][ T8820] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 160.961804][ T5830] IPVS: starting estimator thread 0... [ 161.069259][ T8829] IPVS: using max 28 ests per chain, 67200 per kthread [ 161.733616][ T5991] udevd[5991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 162.121478][ T8877] geneve3: entered promiscuous mode [ 162.144689][ T8877] geneve3: entered allmulticast mode [ 162.169962][ T50] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 162.197455][ T50] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 162.217881][ T8881] __nla_validate_parse: 20 callbacks suppressed [ 162.217901][ T8881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.822'. [ 162.238085][ T8877] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 162.246660][ T8877] netlink: 224 bytes leftover after parsing attributes in process `syz.3.821'. [ 162.259169][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 162.268302][ T50] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 162.278903][ T143] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 162.289305][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.821'. [ 162.328839][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 162.341599][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.821'. [ 162.438205][ T8893] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 162.473831][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 162.479902][ T8888] vlan0: entered promiscuous mode [ 162.488434][ T8888] vlan0: entered allmulticast mode [ 162.496121][ T8888] veth0_vlan: entered allmulticast mode [ 162.509923][ T8892] syzkaller1: entered promiscuous mode [ 162.515469][ T8892] syzkaller1: entered allmulticast mode [ 162.910067][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 163.039984][ T8923] netlink: 156 bytes leftover after parsing attributes in process `syz.0.832'. [ 163.139174][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 163.252574][ T8935] tipc: Trying to set illegal importance in message [ 163.389787][ T8940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 163.405734][ T8932] syzkaller0: entered promiscuous mode [ 163.415033][ T8932] syzkaller0: entered allmulticast mode [ 163.443233][ T8936] pim6reg: entered allmulticast mode [ 163.451115][ T8938] syzkaller1: entered promiscuous mode [ 163.469423][ T8938] syzkaller1: entered allmulticast mode [ 163.519205][ T8932] pim6reg: left allmulticast mode [ 165.735557][ T8996] : renamed from bond_slave_0 (while UP) [ 165.755855][ T8997] C: renamed from lo [ 165.770701][ T8997] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 166.398290][ T9031] syzkaller0: entered promiscuous mode [ 166.414345][ T9031] syzkaller0: entered allmulticast mode [ 166.785822][ T9059] netlink: 'syz.2.870': attribute type 21 has an invalid length. [ 167.039660][ T5947] IPVS: starting estimator thread 0... [ 167.129913][ T9081] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 167.138880][ T9075] IPVS: using max 33 ests per chain, 79200 per kthread [ 167.166599][ T9077] bond5: down delay (33554432) is not a multiple of miimon (643), value rounded to 33554312 ms [ 167.323552][ T9090] __nla_validate_parse: 8 callbacks suppressed [ 167.323574][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 167.373927][ T9073] ipvlan2: entered promiscuous mode [ 167.459345][ T9095] netlink: 'syz.1.880': attribute type 28 has an invalid length. [ 167.474935][ T9095] netlink: 'syz.1.880': attribute type 3 has an invalid length. [ 167.496253][ T9095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.880'. [ 167.524540][ T9097] netlink: 104 bytes leftover after parsing attributes in process `syz.4.881'. [ 167.929793][ T9143] netlink: 'syz.1.885': attribute type 21 has an invalid length. [ 168.159249][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.885'. [ 168.208600][ T9139] netlink: 'syz.1.885': attribute type 12 has an invalid length. [ 168.295509][ T9155] SET target dimension over the limit! [ 168.348422][ T9146] netlink: 112 bytes leftover after parsing attributes in process `syz.0.886'. [ 168.696262][ T9172] netlink: 'syz.2.892': attribute type 21 has an invalid length. [ 168.723871][ T9172] netlink: 272 bytes leftover after parsing attributes in process `syz.2.892'. [ 168.965084][ T9188] batadv_slave_1: entered promiscuous mode [ 169.169459][ T9188] batadv_slave_1: left promiscuous mode [ 169.169806][ T9203] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 169.215054][ T9205] netlink: 56 bytes leftover after parsing attributes in process `syz.4.901'. [ 169.233221][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.901'. [ 169.291470][ T9208] netlink: 'syz.1.902': attribute type 29 has an invalid length. [ 169.294473][ T9205] netlink: 56 bytes leftover after parsing attributes in process `syz.4.901'. [ 169.311001][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.901'. [ 169.436037][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.464667][ T9223] veth0_to_bond: Caught tx_queue_len zero misconfig [ 169.780818][ T9235] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 169.939420][ T9237] hsr_slave_0: left promiscuous mode [ 169.948554][ T9241] netlink: 'syz.1.912': attribute type 21 has an invalid length. [ 171.020411][ T9303] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 171.674755][ T9339] erspan0: entered allmulticast mode [ 171.799694][ T9341] tap0: tun_chr_ioctl cmd 1074025678 [ 171.809068][ T9341] tap0: group set to 60929 [ 172.264673][ T9362] wireguard: wg2: Could not create IPv4 socket [ 172.633111][ T9383] vcan0: entered allmulticast mode [ 172.837553][ T9393] __nla_validate_parse: 15 callbacks suppressed [ 172.837574][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 172.923734][ T9393] vcan0 (unregistering): left allmulticast mode [ 173.239458][ T9414] rdma_op ffff88807b9571f0 conn xmit_rdma 0000000000000000 [ 173.411453][ T9433] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.970'. [ 173.426559][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 173.446303][ T9433] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.493021][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 173.706598][ T9454] netlink: 212 bytes leftover after parsing attributes in process `syz.1.975'. [ 173.804621][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 173.910428][ T9461] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 174.194707][ T9471] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 174.314037][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.983'. [ 174.339017][ T9475] unsupported nlmsg_type 40 [ 174.455838][ T9472] pim6reg1: entered promiscuous mode [ 174.464848][ T9472] pim6reg1: entered allmulticast mode [ 174.531534][ T9491] netlink: 348 bytes leftover after parsing attributes in process `syz.1.986'. [ 174.769441][ T9499] validate_nla: 1 callbacks suppressed [ 174.769461][ T9499] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 174.802538][ T9499] netlink: 'syz.1.989': attribute type 11 has an invalid length. [ 174.840689][ T9499] netlink: 224 bytes leftover after parsing attributes in process `syz.1.989'. [ 175.146438][ T9511] sctp: [Deprecated]: syz.3.993 (pid 9511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.146438][ T9511] Use struct sctp_sack_info instead [ 175.234079][ T9511] netlink: 44 bytes leftover after parsing attributes in process `syz.3.993'. [ 175.332694][ T9522] pim6reg1: entered promiscuous mode [ 175.356559][ T9522] pim6reg1: entered allmulticast mode [ 175.824773][ T9543] netlink: 'syz.4.1000': attribute type 39 has an invalid length. [ 176.267403][ T9565] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 176.325910][ T9573] block nbd2: Unsupported socket: should be TCP or UNIX. [ 176.454897][ T9577] block nbd2: Unsupported socket: should be TCP or UNIX. [ 176.693559][ T9581] 8021q: VLANs not supported on ip_vti0 [ 177.124355][ T9610] netlink: 'syz.1.1018': attribute type 11 has an invalid length. [ 177.891214][ T9652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.927721][ T9656] __nla_validate_parse: 6 callbacks suppressed [ 177.927739][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1029'. [ 177.985859][ T9663] veth1_macvtap: left promiscuous mode [ 178.003722][ T9663] macsec0: entered promiscuous mode [ 178.009918][ T9663] macsec0: entered allmulticast mode [ 178.217897][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 178.368083][ T9689] ip6t_srh: unknown srh match flags 4000 [ 178.375254][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 178.384401][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 179.352530][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 179.937986][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 179.962794][ T9772] dvmrp0: entered allmulticast mode [ 180.229168][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 180.311802][ T9794] netlink: 'syz.2.1071': attribute type 12 has an invalid length. [ 180.321826][ T9794] Bluetooth: MGMT ver 1.23 [ 180.442463][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1075'. [ 180.501037][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 180.615510][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 180.924569][ T9832] ip6gre1: entered allmulticast mode [ 181.453617][ T9861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.393301][ T9910] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 182.421756][ T9911] syzkaller0: entered promiscuous mode [ 182.427491][ T9911] syzkaller0: entered allmulticast mode [ 182.501842][ T9910] bond6: (slave bridge3): making interface the new active one [ 182.511242][ T9910] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 182.776726][ T9926] pim6reg1: entered promiscuous mode [ 182.793602][ T9926] pim6reg1: entered allmulticast mode [ 182.974492][ T9939] Bluetooth: MGMT ver 1.23 [ 183.275936][ T9953] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 183.508576][ T9964] __nla_validate_parse: 11 callbacks suppressed [ 183.508597][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 183.541978][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 183.562482][ T9964] netlink: 'syz.1.1125': attribute type 20 has an invalid length. [ 183.578180][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 183.599145][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 183.623584][ T9441] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.626117][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 183.644599][ T9964] netlink: 'syz.1.1125': attribute type 20 has an invalid length. [ 183.651699][ T9441] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.674607][ T9441] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.697696][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 184.054323][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 184.177655][ T9993] netlink: 'syz.1.1133': attribute type 10 has an invalid length. [ 184.199910][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.222634][ T9993] bridge_slave_1: left allmulticast mode [ 184.228352][ T9993] bridge_slave_1: left promiscuous mode [ 184.267281][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.333988][ T9993] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 184.366381][T10000] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1134'. [ 184.916664][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 185.018079][T10034] openvswitch: netlink: IP tunnel dst address not specified [ 185.052562][T10036] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 185.067017][T10036] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 185.070504][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 185.081741][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 185.087731][T10036] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1146'. [ 185.464396][T10054] netlink: 'syz.3.1155': attribute type 4 has an invalid length. [ 185.528993][T10061] x_tables: duplicate underflow at hook 3 [ 185.548378][T10059] syzkaller0: entered promiscuous mode [ 185.557776][T10059] syzkaller0: entered allmulticast mode [ 185.751229][T10066] tipc: MTU too low for tipc bearer [ 185.839645][T10066] syzkaller0: entered promiscuous mode [ 185.845202][T10066] syzkaller0: entered allmulticast mode [ 185.970060][T10081] syzkaller0: entered promiscuous mode [ 185.976192][T10081] syzkaller0: entered allmulticast mode [ 186.033021][T10077] smc: net device gre0 applied user defined pnetid SYZ1 [ 186.717663][T10128] netlink: 'syz.2.1177': attribute type 21 has an invalid length. [ 186.993845][T10134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.001167][T10134] IPv6: NLM_F_CREATE should be set when creating new route [ 187.205816][T10158] x_tables: duplicate entry at hook 2 [ 187.206697][T10153] veth5: entered allmulticast mode [ 187.934244][T10185] netlink: 'syz.1.1194': attribute type 1 has an invalid length. [ 188.175666][T10186] bond6: (slave gretap1): making interface the new active one [ 188.200885][T10186] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 188.326242][T10205] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 188.420403][T10207] netlink: 'syz.2.1200': attribute type 4 has an invalid length. [ 188.685475][T10220] __nla_validate_parse: 12 callbacks suppressed [ 188.685496][T10220] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1206'. [ 189.010293][T10233] tunl0: entered promiscuous mode [ 189.015622][T10233] netlink: 'syz.2.1208': attribute type 3 has an invalid length. [ 189.040345][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1209'. [ 189.060870][T10233] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1208'. [ 189.141038][T10242] syzkaller0: entered promiscuous mode [ 189.146678][T10242] syzkaller0: entered allmulticast mode [ 189.928976][T10280] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1220'. [ 190.192579][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 190.199793][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 190.222370][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 190.471799][T10308] netlink: 'syz.3.1229': attribute type 5 has an invalid length. [ 190.589788][T10313] : renamed from hsr0 (while UP) [ 190.628017][T10316] netlink: 'syz.3.1229': attribute type 5 has an invalid length. [ 190.783043][T10328] block nbd4: not configured, cannot reconfigure [ 190.809738][T10328] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 190.968322][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 191.231586][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 191.245221][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'. [ 191.253168][T10350] tls_set_device_offload_rx: netdev not found [ 191.408964][T10360] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 191.455656][T10360] netlink: 'syz.1.1247': attribute type 21 has an invalid length. [ 191.471828][T10361] tc_dump_action: action bad kind [ 191.477387][T10360] tc_dump_action: action bad kind [ 191.487391][T10361] delete_channel: no stack [ 191.687734][T10374] block nbd4: not configured, cannot reconfigure [ 192.133650][T10394] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 192.196761][T10400] netlink: 'syz.4.1262': attribute type 26 has an invalid length. [ 192.351912][T10405] bridge6: entered promiscuous mode [ 192.387589][T10405] bridge6: entered allmulticast mode [ 192.892222][T10425] netlink: 'syz.2.1271': attribute type 14 has an invalid length. [ 192.935565][T10429] openvswitch: netlink: IP tunnel TTL not specified. [ 192.945592][T10425] netlink: 'syz.2.1271': attribute type 14 has an invalid length. [ 193.202438][T10448] netlink: 'syz.4.1277': attribute type 2 has an invalid length. [ 193.272701][T10448] 9: entered promiscuous mode [ 193.847626][T10482] __nla_validate_parse: 6 callbacks suppressed [ 193.847646][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 193.880002][T10482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.952040][T10482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.134662][T10493] 0{X: left allmulticast mode [ 194.228589][T10500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1291'. [ 194.544285][T10493] xfrm1: left allmulticast mode [ 194.568286][T10493] bond3: left promiscuous mode [ 194.574367][T10493] bridge1: left promiscuous mode [ 194.587803][T10493] veth5: left allmulticast mode [ 194.604522][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1295'. [ 194.666713][ T9416] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.719867][ T9416] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.731123][ T9416] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.752215][ T9416] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.819917][T10514] erspan0: mtu less than device minimum [ 194.826873][ T9416] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.843046][ T9416] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.860313][ T9416] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.891644][ T9416] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.450121][T10556] tipc: Enabling of bearer rejected, already enabled [ 195.666120][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 195.677282][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1314'. [ 195.827251][T10578] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1317'. [ 196.015848][T10584] IPVS: persistence engine module ip_vs_pe_ not found [ 196.062628][T10587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1320'. [ 196.083139][T10590] lo: entered allmulticast mode [ 196.260028][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1325'. [ 196.293216][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 196.367742][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e0cb800: rx timeout, send abort [ 196.379702][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 196.880522][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e0cb800: abort rx timeout. Force session deactivation [ 197.281841][T10638] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 197.904858][T10638] team0: Port device geneve0 added [ 198.060063][T10645] team0: Caught tx_queue_len zero misconfig [ 198.217762][T10642] bond0: entered promiscuous mode [ 198.271999][T10664] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 198.750503][ T43] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 198.780550][ T43] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 198.807705][ T43] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 198.846626][ T43] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 198.890104][ T43] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 198.925908][ T43] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 198.949973][ T43] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 199.041049][T10699] xt_bpf: check failed: parse error [ 199.127784][T10708] netlink: 'syz.1.1355': attribute type 10 has an invalid length. [ 199.343210][T10720] __nla_validate_parse: 68 callbacks suppressed [ 199.343229][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1358'. [ 199.556093][T10725] ip6t_srh: unknown srh invflags 4000 [ 199.620110][ T9441] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.630819][ T9441] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.706280][ T9441] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.736224][ T9441] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.782753][ T9441] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.812013][ T9441] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.829793][T10736] syzkaller1: entered promiscuous mode [ 199.841095][T10736] syzkaller1: entered allmulticast mode [ 199.900766][ T9441] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.916919][ T9441] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.956392][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'. [ 200.056514][T10754] bond7: Unable to set down delay as MII monitoring is disabled [ 200.066120][T10754] bond7 (unregistering): Released all slaves [ 200.746911][T10760] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 200.825025][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 200.858918][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1368'. [ 201.106138][T10776] C: renamed from lo [ 201.122834][T10776] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 201.165739][T10777] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 201.416249][T10795] netlink: 'syz.0.1379': attribute type 21 has an invalid length. [ 201.479918][T10795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1379'. [ 201.537494][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 201.816212][T10814] netlink: 'syz.0.1387': attribute type 29 has an invalid length. [ 201.830200][T10814] netlink: 'syz.0.1387': attribute type 29 has an invalid length. [ 201.916044][T10814] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1387'. [ 201.986708][T10822] tipc: Started in network mode [ 201.994706][T10822] tipc: Node identity e6537a02d176, cluster identity 4711 [ 202.011802][T10822] tipc: Enabled bearer , priority 0 [ 202.034722][T10821] tipc: Disabling bearer [ 202.080566][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 202.119053][T10828] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 202.248110][T10831] netlink: 'syz.2.1393': attribute type 2 has an invalid length. [ 202.618420][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 202.684862][T10824] infiniband !yz!: set active [ 202.720054][T10824] infiniband !yz!: added team_slave_0 [ 202.768333][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 202.925206][T10849] bond4: (slave erspan0): Device is not bonding slave [ 202.938193][T10824] RDS/IB: !yz!: added [ 202.960880][T10824] smc: adding ib device !yz! with port count 1 [ 202.961320][T10849] bond4: option active_slave: invalid value (erspan0) [ 202.983963][T10824] smc: ib device !yz! port 1 has no pnetid [ 202.999914][T10849] bond4 (unregistering): Released all slaves [ 203.802943][T10894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.840422][T10892] bond0: entered promiscuous mode [ 203.846232][T10892] bond_slave_0: entered promiscuous mode [ 203.866632][T10892] bond_slave_1: entered promiscuous mode [ 203.884963][T10892] dummy0: entered promiscuous mode [ 203.897698][T10892] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 203.932873][T10892] bridge_slave_1: entered promiscuous mode [ 203.965457][T10892] bond0: left promiscuous mode [ 203.972111][T10892] bond_slave_0: left promiscuous mode [ 203.978038][T10892] bond_slave_1: left promiscuous mode [ 203.984896][T10892] dummy0: left promiscuous mode [ 203.993594][T10892] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 204.001567][T10892] bridge_slave_1: left promiscuous mode [ 204.724814][T10938] openvswitch: netlink: Key 15 has unexpected len 2 expected 4 [ 204.754505][T10939] openvswitch: netlink: Key 15 has unexpected len 2 expected 4 [ 204.943932][T10948] veth0_to_bridge: entered promiscuous mode [ 204.980077][T10944] veth0_to_bridge: left promiscuous mode [ 205.119845][T10955] __nla_validate_parse: 5 callbacks suppressed [ 205.119864][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 205.163781][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 205.174516][T10955] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 205.704244][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 205.744209][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 206.087891][T11007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1439'. [ 206.324796][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 206.909347][T11055] netlink: 'syz.1.1449': attribute type 2 has an invalid length. [ 207.094736][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 207.109600][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1450'. [ 207.119758][T11062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1452'. [ 207.225582][T11070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 207.741450][T11098] pim6reg: entered allmulticast mode [ 208.066488][T11115] netlink: 'syz.3.1464': attribute type 83 has an invalid length. [ 208.812924][T11094] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 209.221818][T11134] C: entered allmulticast mode [ 209.813546][T11180] netlink: 'syz.1.1482': attribute type 15 has an invalid length. [ 210.090173][T11191] netlink: 'syz.2.1485': attribute type 12 has an invalid length. [ 210.202070][T11191] bond6: option primary_reselect: invalid value (255) [ 210.254520][T11191] bond6 (unregistering): Released all slaves [ 210.371351][T11197] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 210.422042][T11200] bridge8: entered promiscuous mode [ 210.449570][T11200] bridge8: entered allmulticast mode [ 210.480146][T11200] team0: Port device bridge8 added [ 210.570836][T11199] __nla_validate_parse: 52 callbacks suppressed [ 210.570857][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 210.609085][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 210.847736][T11217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1492'. [ 210.920528][T11225] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1494'. [ 210.948076][T11222] netlink: 'syz.1.1493': attribute type 23 has an invalid length. [ 210.949505][T11224] bond0: (slave macvlan6): Error -98 calling set_mac_address [ 211.125190][T11236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1498'. [ 211.232686][T11241] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 211.409762][T11248] bond7: Unable to set down delay as MII monitoring is disabled [ 211.420175][T11248] bond7 (unregistering): Released all slaves [ 211.455393][T11256] netlink: 'syz.1.1506': attribute type 2 has an invalid length. [ 211.467919][T11256] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1506'. [ 211.617127][T11256] bond7 (unregistering): Released all slaves [ 211.652110][T11270] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 211.823135][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 211.856968][T11276] netlink: 'syz.0.1510': attribute type 21 has an invalid length. [ 211.874662][T11276] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1510'. [ 211.911192][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 211.929285][T11283] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1514'. [ 212.031191][ T5152] Bluetooth: hci2: command 0x0401 tx timeout [ 212.037274][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 212.043622][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 212.049830][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 212.470232][T11315] 8021q: VLANs not supported on ipvlan1 [ 212.487584][T11315] block nbd2: Unsupported socket: should be TCP or UNIX. [ 213.278369][T11372] nbd: couldn't find a device at index 0 [ 213.437833][T11379] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 213.451268][T11379] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.472257][T11379] gretap1: entered promiscuous mode [ 213.484700][T11379] gretap1: entered allmulticast mode [ 213.550443][T11383] 8021q: VLANs not supported on ip6tnl0 [ 213.605613][T11381] netlink: 'syz.4.1542': attribute type 11 has an invalid length. [ 213.622608][T11381] netlink: 'syz.4.1542': attribute type 4 has an invalid length. [ 214.233426][T11414] netlink: 'syz.0.1553': attribute type 4 has an invalid length. [ 214.582594][T11434] netlink: 'syz.0.1558': attribute type 11 has an invalid length. [ 214.619758][T11434] netlink: 'syz.0.1558': attribute type 11 has an invalid length. [ 215.120341][T11469] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 215.407715][T11483] 1{X: renamed from 30{X [ 215.433155][T11483] 1{X: entered allmulticast mode [ 215.454960][T11483] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 215.624970][T11490] netlink: 'syz.3.1577': attribute type 5 has an invalid length. [ 215.647464][T11500] __nla_validate_parse: 79 callbacks suppressed [ 215.647484][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1579'. [ 215.766226][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1581'. [ 216.134628][T11525] veth0: entered promiscuous mode [ 216.171127][T11529] veth0: left promiscuous mode [ 216.397609][T11545] tipc: Started in network mode [ 216.404501][T11547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 216.412967][T11545] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 216.426150][T11545] tipc: Enabling of bearer rejected, failed to enable media [ 217.227230][T11592] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1604'. [ 217.242662][T11592] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1604'. [ 217.252639][T11592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1604'. [ 217.453179][ T5830] IPVS: starting estimator thread 0... [ 217.501460][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 217.510193][T11600] syzkaller0: entered promiscuous mode [ 217.516384][T11600] syzkaller0: entered allmulticast mode [ 217.589765][T11601] IPVS: using max 25 ests per chain, 60000 per kthread [ 217.719258][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 217.940527][T11627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1614'. [ 217.969410][T11628] syzkaller1: entered promiscuous mode [ 217.974945][T11628] syzkaller1: entered allmulticast mode [ 218.010003][T11626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1614'. [ 218.101750][T11638] batadv0: default FDB implementation only supports local addresses [ 218.115189][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 218.232773][T11641] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 218.282121][T11647] bridge0: port 1(veth0_to_bridge) entered blocking state [ 218.303569][T11647] bridge0: port 1(veth0_to_bridge) entered disabled state [ 218.328468][T11647] veth0_to_bridge: entered allmulticast mode [ 218.362567][T11647] veth0_to_bridge: entered promiscuous mode [ 218.487239][T11661] netlink: 'syz.0.1622': attribute type 83 has an invalid length. [ 218.490803][T11647] bond5: option min_links: invalid value (18446744073709551614) [ 218.507444][T11647] bond5: option min_links: allowed values 0 - 2147483647 [ 218.521537][T11647] bond5 (unregistering): Released all slaves [ 218.676393][T11661] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 219.002958][T11681] veth5: entered promiscuous mode [ 219.552519][T11731] netlink: 'syz.4.1643': attribute type 3 has an invalid length. [ 219.675000][T11735] syzkaller0: entered promiscuous mode [ 219.680819][T11735] syzkaller0: entered allmulticast mode [ 219.802068][T11743] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 219.852266][T11743] bond7: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.864898][T11743] bond7: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 219.876187][T11743] bond7: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 220.901375][T11790] __nla_validate_parse: 13 callbacks suppressed [ 220.901402][T11790] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1658'. [ 220.918369][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.925633][T11790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.933306][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.940544][T11790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.957128][T11791] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1658'. [ 220.966741][T11791] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.974231][T11791] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.992397][T11791] bridge0: entered promiscuous mode [ 221.016200][T11791] bridge0: entered allmulticast mode [ 221.068318][T11772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.182433][T11798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1660'. [ 221.615235][T11825] atomic_op ffff888027e8b998 conn xmit_atomic 0000000000000000 [ 221.938501][ T9428] smc: removing ib device syz1 [ 221.994249][T11825] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.020052][T11825] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.140536][T11825] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.173991][T11825] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.312727][T11825] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.344950][T11825] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.434442][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 222.496880][T11853] x_tables: duplicate entry at hook 3 [ 222.501970][T11854] x_tables: duplicate entry at hook 3 [ 222.544191][T11825] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.578964][T11825] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.632838][T11850] tipc: Enabled bearer , priority 0 [ 222.641032][T11848] 8021q: VLANs not supported on ip6gre0 [ 222.667607][T11859] syzkaller0: entered promiscuous mode [ 222.679616][T11859] syzkaller0: entered allmulticast mode [ 222.785391][T11850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 222.821954][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1676'. [ 222.844870][T11825] Failed to register nexthop notifier [ 222.859353][T11864] tipc: Resetting bearer [ 222.879546][T11863] netlink: 'syz.0.1676': attribute type 1 has an invalid length. [ 222.915317][T11849] tipc: Resetting bearer [ 222.973200][T11849] tipc: Disabling bearer [ 223.098037][T11869] veth7: entered promiscuous mode [ 223.207952][T11872] vlan2: entered promiscuous mode [ 223.236335][T11872] bridge0: entered promiscuous mode [ 223.274429][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 223.714645][T11895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1686'. [ 223.752385][T11892] tipc: Enabled bearer , priority 0 [ 223.973795][T11892] syzkaller0: entered promiscuous mode [ 224.002108][T11892] syzkaller0: entered allmulticast mode [ 224.053987][T11892] tipc: Resetting bearer [ 224.162936][T11891] tipc: Resetting bearer [ 224.511831][T11921] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 225.293374][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1695'. [ 225.690144][T11891] tipc: Disabling bearer [ 225.727967][ T936] tipc: Node number set to 925202946 [ 225.859614][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 226.177757][T11963] nftables ruleset with unbound set [ 226.319798][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'. [ 226.425304][T11970] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1706'. [ 226.659738][T11999] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 226.895515][T12011] team_slave_0: entered allmulticast mode [ 226.942537][T12010] 8021q: VLANs not supported on wg1 [ 227.055123][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1715'. [ 227.463793][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1719'. [ 227.706841][T12051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1721'. [ 227.962861][T12069] block nbd2: Unsupported socket: should be TCP or UNIX. [ 228.076582][T12074] syz.0.1727 uses old SIOCAX25GETINFO [ 228.416064][T12093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1729'. [ 228.453190][T12095] netlink: 'syz.0.1730': attribute type 4 has an invalid length. [ 228.755457][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 229.301124][T12141] bond0: left promiscuous mode [ 229.335811][T12141] veth7: left promiscuous mode [ 229.336310][T12144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1743'. [ 229.827685][T12164] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 229.904939][T12166] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.1750'. [ 230.030524][T12173] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1753'. [ 230.171118][T12186] netlink: 'syz.1.1756': attribute type 12 has an invalid length. [ 230.233937][T12186] tipc: Enabling of bearer rejected, failed to enable media [ 230.396480][T12194] batadv2: entered allmulticast mode [ 230.625736][T12207] netlink: 'syz.1.1762': attribute type 11 has an invalid length. [ 230.646554][T12208] netlink: 'syz.1.1762': attribute type 11 has an invalid length. [ 231.231457][T12229] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 231.256636][T12226] bridge5: entered promiscuous mode [ 231.304494][T12226] bridge5: entered allmulticast mode [ 231.547235][T12229] 8021q: adding VLAN 0 to HW filter on device bond8 [ 231.643978][T12248] netlink: 'syz.1.1770': attribute type 24 has an invalid length. [ 231.723692][T12247] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 231.774374][T12247] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.940019][T12256] syzkaller1: entered promiscuous mode [ 231.957706][T12256] syzkaller1: entered allmulticast mode [ 232.037107][T12256] netlink: 'syz.4.1772': attribute type 13 has an invalid length. [ 232.071155][T12256] erspan0: refused to change device tx_queue_len [ 232.095706][T12256] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 232.130819][T12261] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 232.199160][T12270] __nla_validate_parse: 7 callbacks suppressed [ 232.199179][T12270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 232.399983][T12269] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 232.451896][T12269] bond7 (unregistering): Released all slaves [ 232.539887][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 232.545043][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1777'. [ 232.590517][T12261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1773'. [ 232.714091][T12294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1779'. [ 232.833891][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 232.861618][T12298] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1780'. [ 232.884596][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 232.891883][T12303] xt_limit: Overflow, try lower: 271964/0 [ 233.285902][T12323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1786'. [ 233.327002][T12326] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1788'. [ 233.549988][T12338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.352599][T12378] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 234.619672][ T5202] udevd[5202]: worker [5881] terminated by signal 33 (Unknown signal 33) [ 234.850681][T12413] netlink: 'syz.1.1810': attribute type 5 has an invalid length. [ 235.194899][T12429] sctp: [Deprecated]: syz.1.1816 (pid 12429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.194899][T12429] Use struct sctp_sack_info instead [ 235.351098][T12444] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 235.581517][T12449] netlink: 'syz.1.1824': attribute type 21 has an invalid length. [ 235.583442][T12450] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 235.652425][T12450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.744177][T12452] bond4: (slave veth9): Enslaving as an active interface with a down link [ 235.756307][T12454] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.764868][T12458] C: entered promiscuous mode [ 235.782276][T12458] tunl0: entered promiscuous mode [ 235.796461][T12458] gre0: left allmulticast mode [ 235.819677][T12471] openvswitch: netlink: Flow key attr not present in new flow. [ 235.820433][T12458] gretap0: entered promiscuous mode [ 235.856231][T12458] ip_vti0: entered promiscuous mode [ 235.872236][T12450] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 236.017847][T12480] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 236.024516][T12480] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.092581][T12486] openvswitch: netlink: EtherType 50a is less than min 600 [ 236.862999][T12517] gtp0: entered promiscuous mode [ 236.868168][T12517] gtp0: entered allmulticast mode [ 237.247657][T12542] Cannot find set identified by id 0 to match [ 237.340816][T12547] syzkaller1: entered promiscuous mode [ 237.346372][T12547] syzkaller1: entered allmulticast mode [ 237.383325][T12552] __nla_validate_parse: 19 callbacks suppressed [ 237.383373][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1850'. [ 237.430631][T12556] netlink: 'syz.4.1849': attribute type 13 has an invalid length. [ 237.627779][T12556] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 237.656006][T12556] syzkaller0: entered promiscuous mode [ 237.664694][T12556] syzkaller0: entered allmulticast mode [ 237.736105][T12571] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 237.769945][T12556] tipc: Enabled bearer , priority 0 [ 237.779669][T12574] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 237.809846][T12574] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1854'. [ 237.878388][T12556] tipc: Resetting bearer [ 237.940329][T12556] tipc: Disabling bearer [ 237.959199][T12583] openvswitch: netlink: Missing key (keys=40, expected=80) [ 238.016922][T12584] bond5: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 238.037074][T12584] bond5: (slave C): Enslaving as a backup interface with an up link [ 238.047361][T12584] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 238.261073][T12598] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 238.288464][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1860'. [ 238.327292][T12598] bond6: (slave bridge3): making interface the new active one [ 238.337035][T12598] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 238.350516][T12598] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1861'. [ 238.362337][T12598] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1861'. [ 238.373096][T12598] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1861'. [ 238.473730][T12608] vlan2: entered promiscuous mode [ 238.480659][T12608] bridge0: entered promiscuous mode [ 238.572948][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'. [ 238.640817][T12619] lo: Caught tx_queue_len zero misconfig [ 238.750340][T12622] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1869'. [ 238.763769][T12625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1870'. [ 238.781239][T12622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1869'. [ 238.850111][T12630] sim2: renamed from bond_slave_0 (while UP) [ 239.205090][T12622] infiniband syz1: set down [ 239.209807][T12622] infiniband syz1: added ipvlan0 [ 239.273139][T12622] RDS/IB: syz1: added [ 239.288924][T12622] smc: adding ib device syz1 with port count 1 [ 239.295272][T12622] smc: ib device syz1 port 1 has no pnetid [ 239.416483][T12664] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 240.337651][T12707] netlink: 'syz.4.1891': attribute type 13 has an invalid length. [ 241.066461][T12719] Bluetooth: MGMT ver 1.23 [ 305.482554][T12754] __nla_validate_parse: 5 callbacks suppressed [ 305.482575][T12754] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1908'. [ 305.577188][T12753] bond7: option mode: invalid value (133) [ 305.593439][T12753] bond7 (unregistering): Released all slaves [ 305.617602][T12759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.783922][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 305.795947][T12773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1913'. [ 305.919125][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 305.940579][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 305.950345][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 305.997484][T12782] netlink: 'syz.2.1918': attribute type 12 has an invalid length. [ 306.053413][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 306.080950][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 306.135047][T12782] netlink: 'syz.2.1918': attribute type 12 has an invalid length. [ 306.163134][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 306.385612][T12814] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1924'. [ 306.733753][T12831] netlink: 'syz.0.1927': attribute type 1 has an invalid length. [ 306.874509][T12831] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.950839][T12847] bond7: (slave geneve2): Opening slave failed [ 306.999481][T12849] netlink: 'syz.3.1931': attribute type 3 has an invalid length. [ 307.244169][T12865] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.519811][T12889] IPVS: set_ctl: invalid protocol: 94 172.30.0.4:20004 [ 307.594181][T12891] netlink: 'syz.0.1945': attribute type 4 has an invalid length. [ 308.022673][T12918] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 308.847656][T12977] bond6: Unable to set down delay as MII monitoring is disabled [ 308.889732][T12977] bond6 (unregistering): Released all slaves [ 309.118705][T13004] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 309.126727][T12997] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 309.166641][T13007] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 309.230928][T13004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 309.293337][T13020] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 309.308208][T13020] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 309.321086][T13020] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 309.403458][T13026] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 309.444781][T13026] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 309.495579][T13032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.721242][T13044] vlan1: entered promiscuous mode [ 309.726335][T13044] bridge0: entered promiscuous mode [ 309.913198][T13053] batadv_slave_0: Caught tx_queue_len zero misconfig [ 309.923154][T13054] openvswitch: netlink: Message has 6 unknown bytes. [ 310.266934][T13073] netlink: 'syz.1.1999': attribute type 32 has an invalid length. [ 310.382366][T13073] bond9: option coupled_control: invalid value (52) [ 310.412559][T13073] bond9 (unregistering): Released all slaves [ 310.447902][T13085] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 310.476915][T13077] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 310.494656][T13088] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 310.590252][ T9428] nci: nci_rx_work: unknown MT 0x7 [ 311.003882][T13125] bond9: (slave ip6gretap1): making interface the new active one [ 311.012819][T13125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.020742][T13125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.028592][T13125] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 311.400163][T13134] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 311.408976][T13134] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 311.418498][T13134] __nla_validate_parse: 25 callbacks suppressed [ 311.418519][T13134] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2014'. [ 311.435791][T13134] ksmbd: Unknown IPC event: 4, ignore. [ 311.468355][T13140] validate_nla: 5 callbacks suppressed [ 311.468373][T13140] netlink: 'syz.2.2017': attribute type 6 has an invalid length. [ 311.491841][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 311.656408][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 311.829656][T13162] openvswitch: netlink: Key type 148 is out of range max 32 [ 311.831493][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2022'. [ 311.869424][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2023'. [ 311.982045][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 312.069478][T13174] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 312.249857][T13189] netlink: 'syz.1.2033': attribute type 12 has an invalid length. [ 312.340526][T13189] bond10: option primary_reselect: invalid value (255) [ 312.383756][T13189] bond10 (unregistering): Released all slaves [ 312.419607][T13205] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 312.847834][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 313.179038][T13244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2045'. [ 313.690400][T13259] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2050'. [ 313.759902][T13259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.821115][T13263] tipc: Enabling of bearer rejected, failed to enable media [ 314.117881][T13280] netlink: 'syz.2.2056': attribute type 6 has an invalid length. [ 314.128977][T13282] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2057'. [ 314.139989][T13280] netlink: 'syz.2.2056': attribute type 6 has an invalid length. [ 314.776327][T13318] x_tables: duplicate entry at hook 1 [ 315.317298][T13353] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.538090][T13370] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 315.958562][ T30] audit: type=1107 audit(1765517432.236:5): pid=13394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 317.370953][T13399] __nla_validate_parse: 4 callbacks suppressed [ 317.370978][T13399] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2088'. [ 317.481570][T13402] macvlan0: entered promiscuous mode [ 317.684608][T13412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2094'. [ 317.886789][T13429] nbd: must specify a size in bytes for the device [ 317.938557][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2099'. [ 318.130271][T13448] syzkaller0: entered promiscuous mode [ 318.136236][T13448] syzkaller0: entered allmulticast mode [ 318.236854][T13457] netlink: 'syz.1.2105': attribute type 7 has an invalid length. [ 318.394157][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2107'. [ 318.526566][T13478] syzkaller0: entered promiscuous mode [ 318.537594][T13480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2112'. [ 318.548319][T13478] syzkaller0: entered allmulticast mode [ 318.677401][T13487] Cannot find set identified by id 65534 to match [ 318.877687][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 319.056918][T13510] netlink: 'syz.2.2124': attribute type 4 has an invalid length. [ 319.081122][T13508] syzkaller1: entered promiscuous mode [ 319.087290][T13508] syzkaller1: entered allmulticast mode [ 319.279894][T13523] syz1: rxe_newlink: already configured on ipvlan0 [ 319.471046][T13533] syzkaller0: entered promiscuous mode [ 319.476595][T13533] syzkaller0: entered allmulticast mode [ 319.713039][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 319.866567][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 319.882020][T13552] IPVS: length: 8 != 1152 [ 319.890332][T13526] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 319.899858][T13526] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 320.014906][T13561] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 320.131228][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 320.173274][T13561] bond6 (unregistering): Released all slaves [ 320.236641][T13570] syzkaller1: entered promiscuous mode [ 320.248080][T13570] syzkaller1: entered allmulticast mode [ 320.450745][T13580] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2144'. [ 321.167042][T13633] netlink: 'syz.4.2163': attribute type 3 has an invalid length. [ 321.190089][T13633] nbd: couldn't find a device at index 0 [ 321.215084][T13633] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 321.259707][T13634] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 321.407281][T13642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.550286][T13661] tipc: Enabled bearer , priority 0 [ 321.911922][T13688] netlink: 'syz.4.2178': attribute type 6 has an invalid length. [ 322.428480][T13730] __nla_validate_parse: 11 callbacks suppressed [ 322.428502][T13730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2191'. [ 322.670411][ T43] tipc: Node number set to 1 [ 322.981192][T13769] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 323.562175][T13802] netlink: 'syz.2.2207': attribute type 178 has an invalid length. [ 323.609560][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2206'. [ 323.641149][T13810] netlink: 'syz.1.2208': attribute type 11 has an invalid length. [ 323.671750][T13810] netlink: 'syz.1.2208': attribute type 4 has an invalid length. [ 323.690192][T13810] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.2208'. [ 323.739364][T13812] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 323.755779][T13817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2212'. [ 323.926093][T13830] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2216'. [ 323.961248][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2216'. [ 323.975756][T13828] bond9: entered promiscuous mode [ 323.981146][T13828] bond9: entered allmulticast mode [ 323.986692][T13828] 8021q: adding VLAN 0 to HW filter on device bond9 [ 324.049620][T13828] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2215'. [ 324.077278][T13841] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2218'. [ 324.129415][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2215'. [ 324.138448][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2215'. [ 324.314448][T13856] nbd: device at index 0 is going down [ 324.350243][T13854] bond10: entered promiscuous mode [ 324.355971][T13854] bond10: entered allmulticast mode [ 324.378550][T13854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.432709][T13867] team0: Mode changed to "activebackup" [ 324.687952][T13880] tipc: Enabling of bearer rejected, failed to enable media [ 324.920652][T13895] netlink: 'syz.1.2234': attribute type 13 has an invalid length. [ 325.173137][T13904] netlink: 'syz.1.2236': attribute type 3 has an invalid length. [ 325.398467][T13916] syzkaller0: entered promiscuous mode [ 325.406432][T13916] syzkaller0: entered allmulticast mode [ 325.435398][T13916] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 325.914106][T13951] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 326.934934][T14010] bond11: entered allmulticast mode [ 327.188046][T14010] ip6gretap1: entered allmulticast mode [ 327.198431][T14010] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 327.305045][T14040] netlink: 'syz.1.2273': attribute type 21 has an invalid length. [ 327.314355][T14040] netlink: 'syz.1.2273': attribute type 6 has an invalid length. [ 327.395294][T14046] xt_hashlimit: size too large, truncated to 1048576 [ 327.516518][T14049] IPv4: Oversized IP packet from 127.202.26.0 [ 327.692297][T14061] __nla_validate_parse: 10 callbacks suppressed [ 327.692320][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2279'. [ 327.782339][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 328.144075][T14092] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 328.169767][T14092] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 328.179977][T14092] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 328.259537][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 328.306457][T14102] batadv2: entered allmulticast mode [ 328.337114][T14104] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 328.367647][T14101] 8021q: VLANs not supported on ip6_vti0 [ 328.771789][T14135] netlink: 'syz.3.2299': attribute type 2 has an invalid length. [ 328.896316][T14135] 9: entered promiscuous mode [ 329.332124][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 329.346041][T14163] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 330.350947][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 330.846958][T14240] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2333'. [ 330.877972][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2334'. [ 330.974556][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2334'. [ 331.172629][T14264] netlink: 'syz.4.2341': attribute type 10 has an invalid length. [ 331.209267][T14264] team0: Device veth1_macvtap failed to register rx_handler [ 331.479850][T14283] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 331.489412][T14283] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 332.006697][T14318] netlink: 'syz.0.2357': attribute type 1 has an invalid length. [ 332.127005][T14329] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 332.134135][T14330] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 332.173170][T14322] bond9: (slave geneve2): making interface the new active one [ 332.208390][T14322] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 332.241320][T14341] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2363'. [ 332.267428][ T6638] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.271856][T14341] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 332.276599][ T6638] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.293582][ T6638] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.301997][ T6638] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 332.393544][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 332.426418][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 332.812994][T14372] x_tables: unsorted entry at hook 1 [ 333.459811][T14407] __nla_validate_parse: 1 callbacks suppressed [ 333.459832][T14407] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2378'. [ 333.660272][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2381'. [ 333.673101][T14413] bond10: Unable to set up delay as MII monitoring is disabled [ 333.678377][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2381'. [ 333.693987][T14413] bond10 (unregistering): Released all slaves [ 333.926149][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 333.938452][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 334.038879][T14432] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2387'. [ 334.727607][T14438] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 334.751326][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 334.816411][T14443] ip6gre2: entered promiscuous mode [ 335.074005][T14469] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2400'. [ 335.374236][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'. [ 335.384851][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'. [ 335.417823][T14489] bridge0: port 3(vlan2) entered blocking state [ 335.429738][T14489] bridge0: port 3(vlan2) entered disabled state [ 335.436723][T14489] vlan2: entered allmulticast mode [ 335.445386][T14489] vlan2: left allmulticast mode [ 335.584633][T14494] netlink: 'syz.1.2406': attribute type 33 has an invalid length. [ 335.636842][T14498] netlink: 'syz.0.2408': attribute type 1 has an invalid length. [ 335.720534][T14500] openvswitch: netlink: IP tunnel dst address not specified [ 335.935060][T14514] block nbd2: not configured, cannot reconfigure [ 336.126203][T14528] raw_sendmsg: syz.4.2418 forgot to set AF_INET. Fix it! [ 336.482418][T14547] IPVS: Unknown mcast interface: nicvf0 [ 336.740182][T14569] syzkaller0: entered promiscuous mode [ 336.756951][T14569] syzkaller0: entered allmulticast mode [ 336.856468][T14574] netlink: 'syz.4.2430': attribute type 32 has an invalid length. [ 336.870269][T14577] tipc: Enabling of bearer rejected, failed to enable media [ 336.934935][T14574] bond6: Setting coupled_control to off (0) [ 337.107229][T14588] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 337.204529][T14596] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 337.278185][T14602] sit0: entered promiscuous mode [ 337.318345][T14602] netlink: 'syz.2.2439': attribute type 1 has an invalid length. [ 337.802344][T14622] veth7: entered allmulticast mode [ 338.139328][T14654] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 338.226678][T14654] bond7: (slave xfrm2): The slave device specified does not support setting the MAC address [ 338.272743][T14654] bond7: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 338.305437][T14654] bond7: (slave xfrm2): making interface the new active one [ 338.345278][T14654] bond7: (slave xfrm2): Enslaving as an active interface with an up link [ 338.384754][T14660] bond7 (unregistering): (slave xfrm2): Releasing backup interface [ 338.419960][T14660] bond7 (unregistering): Released all slaves [ 338.472313][T14666] netlink: 'syz.1.2457': attribute type 2 has an invalid length. [ 338.492100][T14666] xt_hashlimit: overflow, rate too high: 0 [ 338.568905][T14668] __nla_validate_parse: 12 callbacks suppressed [ 338.568929][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2458'. [ 338.642802][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2460'. [ 338.664926][T14675] netlink: 'syz.4.2459': attribute type 13 has an invalid length. [ 338.850738][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2463'. [ 338.857985][T14673] macvtap0: entered promiscuous mode [ 338.867154][T14673] vlan0: entered promiscuous mode [ 338.872538][T14673] hsr0: entered promiscuous mode [ 338.878273][T14673] macvtap0: entered allmulticast mode [ 338.917700][T14688] netlink: 'syz.3.2464': attribute type 8 has an invalid length. [ 339.267197][T14709] v: renamed from vlan0 [ 339.309576][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 339.484252][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'. [ 339.496297][T14726] tipc: Started in network mode [ 339.497207][T14725] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 339.512801][T14726] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 339.530579][T14726] tipc: Enabled bearer , priority 2 [ 339.625553][T14727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2474'. [ 339.628252][T14723] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 339.649725][T14723] bond7: option packets_per_slave: allowed values 0 - 65535 [ 339.659998][T14723] bond7 (unregistering): Released all slaves [ 339.880927][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2480'. [ 339.915654][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 339.975450][T14746] bond0: entered promiscuous mode [ 339.983182][T14746] bond0: left promiscuous mode [ 340.209734][T14763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2488'. [ 340.226085][T14763] validate_nla: 1 callbacks suppressed [ 340.226105][T14763] netlink: 'syz.0.2488': attribute type 4 has an invalid length. [ 340.247982][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'. [ 340.404679][T14777] netlink: 'syz.2.2491': attribute type 1 has an invalid length. [ 340.480734][T14777] bond10: entered promiscuous mode [ 340.493698][T14777] bond10: entered allmulticast mode [ 340.530865][T14777] 8021q: adding VLAN 0 to HW filter on device bond10 [ 340.794762][ T5917] tipc: Node number set to 10463914 [ 340.810903][T14798] xfrm3: entered promiscuous mode [ 340.816091][T14798] xfrm3: entered allmulticast mode [ 341.066513][T14811] xt_l2tp: v2 sid > 0xffff: 1114112 [ 341.227738][T14826] netlink: 'syz.4.2502': attribute type 13 has an invalid length. [ 341.510365][T14839] IPVS: set_ctl: invalid protocol: 94 172.20.20.25:20002 [ 341.551543][T14839] netlink: 'syz.3.2507': attribute type 4 has an invalid length. [ 341.684759][T14853] xt_bpf: check failed: parse error [ 341.691250][T14843] veth0_to_bond: entered allmulticast mode [ 341.989892][T14870] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 342.126233][T14875] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.332797][T14884] xt_policy: output policy not valid in PREROUTING and INPUT [ 342.669889][T14900] block nbd2: Unsupported socket: should be TCP or UNIX. [ 342.889465][T14908] tipc: Enabled bearer , priority 0 [ 342.899678][T14908] syzkaller0: entered promiscuous mode [ 342.905214][T14908] syzkaller0: entered allmulticast mode [ 342.932708][T14908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 343.010235][T14908] tipc: Resetting bearer [ 343.016232][T14908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.107859][T14907] tipc: Resetting bearer [ 343.158203][T14907] tipc: Disabling bearer [ 343.606597][T14941] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 343.743187][T14956] __nla_validate_parse: 11 callbacks suppressed [ 343.743208][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'. [ 343.812364][T14959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.843844][T14961] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2547'. [ 343.864519][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2547'. [ 343.965088][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 343.976241][T14963] macvlan0: left promiscuous mode [ 343.991406][T14963] netlink: 'syz.3.2549': attribute type 1 has an invalid length. [ 343.999453][T14963] netlink: 'syz.3.2549': attribute type 2 has an invalid length. [ 344.156878][T14969] netlink: 'syz.4.2552': attribute type 2 has an invalid length. [ 344.364984][T14967] bond12: entered promiscuous mode [ 344.378685][T14967] bond12: entered allmulticast mode [ 344.396703][T14967] 8021q: adding VLAN 0 to HW filter on device bond12 [ 344.517839][T14976] netlink: 'syz.0.2553': attribute type 7 has an invalid length. [ 344.518065][T14979] netlink: 'syz.0.2553': attribute type 7 has an invalid length. [ 344.828861][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 345.060785][T15022] veth0: entered promiscuous mode [ 345.154835][T15020] veth0: left promiscuous mode [ 345.172116][T15030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2568'. [ 345.198976][T15030] netlink: 'syz.1.2568': attribute type 9 has an invalid length. [ 345.387844][T15044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2571'. [ 345.408485][T15048] macvtap1: entered allmulticast mode [ 345.414769][T15048] veth0_macvtap: entered allmulticast mode [ 345.450327][T15044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2571'. [ 345.492600][T15044] veth9: entered promiscuous mode [ 346.148028][T15072] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 346.241827][T15078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.340798][T15081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2587'. [ 346.354184][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2589'. [ 346.510112][T15092] syzkaller1: entered allmulticast mode [ 346.640148][T15094] nbd2: detected capacity change from 0 to 127 [ 346.671858][ T5847] block nbd2: Receive control failed (result -32) [ 347.105228][T15133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.133678][T15133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.147238][T15135] vlan0: entered allmulticast mode [ 347.232681][T15135] netlink: 'syz.3.2602': attribute type 5 has an invalid length. [ 347.501298][T15154] syzkaller1: entered promiscuous mode [ 347.508436][T15154] syzkaller1: entered allmulticast mode [ 347.571309][T15157] only policy match revision 0 supported [ 347.571334][T15157] unable to load match [ 347.873847][T15176] netlink: 'syz.2.2611': attribute type 15 has an invalid length. [ 347.895543][T15180] x_tables: unsorted entry at hook 3 [ 348.261201][T15206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.406522][T15213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.646131][T15232] netlink: 'syz.4.2627': attribute type 32 has an invalid length. [ 349.102748][T15257] __nla_validate_parse: 10 callbacks suppressed [ 349.102772][T15257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2633'. [ 349.132370][T15257] netlink: 'syz.2.2633': attribute type 7 has an invalid length. [ 349.140472][T15257] netlink: 'syz.2.2633': attribute type 8 has an invalid length. [ 349.148387][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'. [ 349.166036][T15259] IPVS: Error connecting to the multicast addr [ 349.195958][T15257] erspan0: entered promiscuous mode [ 349.230741][T15257] batadv_slave_1: entered promiscuous mode [ 349.236918][T15257] batadv_slave_1: left promiscuous mode [ 349.267918][T15257] erspan0: left promiscuous mode [ 349.434839][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'. [ 349.630909][T15291] openvswitch: netlink: IP tunnel dst address not specified [ 349.908906][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2645'. [ 350.014725][T15319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2647'. [ 350.285046][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 350.412801][T15337] geneve2: entered promiscuous mode [ 350.441594][T15337] geneve2: entered allmulticast mode [ 350.459947][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 350.483805][T15344] bridge10: entered promiscuous mode [ 350.511805][T15344] bridge10: entered allmulticast mode [ 350.534532][T15344] team0: Port device bridge10 added [ 350.716251][T15363] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI [ 350.728210][T15363] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 350.736676][T15363] CPU: 0 UID: 0 PID: 15363 Comm: syz.0.2657 Not tainted syzkaller #0 PREEMPT(full) [ 350.746060][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.756131][T15363] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 350.761877][T15363] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 95 71 2b f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 79 71 2b f8 4c 8b 6d 00 e8 00 8b 4d [ 350.781496][T15363] RSP: 0018:ffffc900040aee40 EFLAGS: 00010206 [ 350.787598][T15363] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000002 [ 350.795579][T15363] RDX: ffff88807acc1e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.803565][T15363] RBP: 0000000000000060 R08: ffff888077414c33 R09: 1ffff1100ee82986 [ 350.811549][T15363] R10: dffffc0000000000 R11: ffffed100ee82987 R12: ffffc900040aef18 [ 350.819532][T15363] R13: 0000000000000000 R14: ffffc900040aef10 R15: 0000000000000000 [ 350.827535][T15363] FS: 00007fea16fb96c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 350.836480][T15363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.843075][T15363] CR2: 00002000000006c0 CR3: 000000007553c000 CR4: 00000000003526f0 [ 350.851058][T15363] Call Trace: [ 350.854362][T15363] [ 350.857303][T15363] ? ip6_pol_route+0x162/0x1180 [ 350.862176][T15363] ip6_pol_route+0x28d/0x1180 [ 350.866870][T15363] ? __pfx_ip6_pol_route+0x10/0x10 [ 350.871993][T15363] ? __lock_acquire+0x6b6/0x2cf0 [ 350.876943][T15363] fib6_rule_lookup+0x348/0x6f0 [ 350.881810][T15363] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 350.887549][T15363] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 350.892941][T15363] ? ip6_route_output_flags+0x2e/0x5d0 [ 350.898427][T15363] ip6_route_output_flags+0x364/0x5d0 [ 350.903814][T15363] ? ip6_route_output_flags+0x2e/0x5d0 [ 350.909290][T15363] ip6_dst_lookup_tail+0x1ae/0x1510 [ 350.914522][T15363] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 350.920164][T15363] ? crng_fast_key_erasure+0x181/0x240 [ 350.925649][T15363] ip6_dst_lookup_flow+0x47/0xe0 [ 350.930599][T15363] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 350.935634][T15363] sctp_v6_get_dst+0x7cc/0x1bc0 [ 350.940511][T15363] ? crng_make_state+0x13a/0x700 [ 350.945490][T15363] ? __pfx_crng_make_state+0x10/0x10 [ 350.950805][T15363] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 350.956103][T15363] ? __asan_memset+0x22/0x50 [ 350.960712][T15363] ? dst_release+0x72/0x1b0 [ 350.965255][T15363] sctp_transport_route+0x118/0x2f0 [ 350.970801][T15363] sctp_assoc_add_peer+0x657/0x1390 [ 350.976035][T15363] sctp_connect_new_asoc+0x30a/0x690 [ 350.981348][T15363] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 350.987175][T15363] ? __local_bh_enable_ip+0x12d/0x1c0 [ 350.992661][T15363] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 350.998227][T15363] ? security_sctp_bind_connect+0x7e/0x2e0 [ 351.004146][T15363] sctp_sendmsg+0x155c/0x2810 [ 351.008844][T15363] ? __pfx_sctp_sendmsg+0x10/0x10 [ 351.013885][T15363] ? aa_sk_perm+0x15f/0x920 [ 351.018409][T15363] ? aa_sk_perm+0x7ee/0x920 [ 351.022927][T15363] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.027810][T15363] ? sock_rps_record_flow+0x19/0x410 [ 351.033105][T15363] ? inet_sendmsg+0x2f4/0x370 [ 351.037793][T15363] __sock_sendmsg+0x19c/0x270 [ 351.042482][T15363] ____sys_sendmsg+0x52d/0x820 [ 351.047275][T15363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.052587][T15363] ? import_iovec+0x74/0xa0 [ 351.057109][T15363] ___sys_sendmsg+0x21f/0x2a0 [ 351.061802][T15363] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.067022][T15363] ? preempt_schedule+0xae/0xc0 [ 351.071915][T15363] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 351.077825][T15363] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.084178][T15363] ? __fget_files+0x2a/0x420 [ 351.088779][T15363] ? __fget_files+0x3a0/0x420 [ 351.093469][T15363] __sys_sendmmsg+0x227/0x430 [ 351.098173][T15363] ? __pfx___sys_sendmmsg+0x10/0x10 [ 351.103395][T15363] ? __pfx_do_futex+0x10/0x10 [ 351.108093][T15363] __x64_sys_sendmmsg+0xa0/0xc0 [ 351.112950][T15363] do_syscall_64+0xfa/0xf80 [ 351.117469][T15363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.123556][T15363] ? clear_bhb_loop+0x60/0xb0 [ 351.128253][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.134154][T15363] RIP: 0033:0x7fea1618f749 [ 351.138590][T15363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.158216][T15363] RSP: 002b:00007fea16fb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 351.166650][T15363] RAX: ffffffffffffffda RBX: 00007fea163e5fa0 RCX: 00007fea1618f749 [ 351.174630][T15363] RDX: 0000000000000002 RSI: 00002000000006c0 RDI: 0000000000000003 [ 351.182616][T15363] RBP: 00007fea16213f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.190598][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.198580][T15363] R13: 00007fea163e6038 R14: 00007fea163e5fa0 R15: 00007ffc76368bb8 [ 351.206575][T15363] [ 351.209598][T15363] Modules linked in: [ 351.216136][T15363] ---[ end trace 0000000000000000 ]--- [ 351.261628][T15363] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 351.275353][T15363] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 95 71 2b f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 79 71 2b f8 4c 8b 6d 00 e8 00 8b 4d [ 351.295182][T15363] RSP: 0018:ffffc900040aee40 EFLAGS: 00010206 [ 351.301424][T15363] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000002 [ 351.310366][T15363] RDX: ffff88807acc1e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.318410][T15363] RBP: 0000000000000060 R08: ffff888077414c33 R09: 1ffff1100ee82986 [ 351.327924][T15363] R10: dffffc0000000000 R11: ffffed100ee82987 R12: ffffc900040aef18 [ 351.336758][T15363] R13: 0000000000000000 R14: ffffc900040aef10 R15: 0000000000000000 [ 351.344885][T15363] FS: 00007fea16fb96c0(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 351.354177][T15363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.360837][T15363] CR2: 000000110c375039 CR3: 000000007553c000 CR4: 00000000003526f0 [ 351.368867][T15363] Kernel panic - not syncing: Fatal exception [ 351.375234][T15363] Kernel Offset: disabled [ 351.379565][T15363] Rebooting in 86400 seconds..