last executing test programs: 8.035250223s ago: executing program 0 (id=17781): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket(0x1d, 0x1, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x83, &(0x7f0000000000)={r7, 0x2}, 0x8) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r10, &(0x7f0000002780)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001000)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000014c0)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9fffff}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) ioctl$SIOCAX25OPTRT(r8, 0x89e7, &(0x7f0000000440)={@default, @default, 0x2, 0x20}) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004050}, 0x4844) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000740)={"7ffcd5220780dac52aa3fe011fbb4a1f", 0x0, 0x0, {0x1, 0x10001}, {0x6, 0xfffffffa}, 0x6, [0x8, 0x6, 0x5, 0x9dcded8, 0x5, 0x4e73, 0x81, 0xe, 0x5, 0x10000, 0x40, 0x4, 0x8, 0x2, 0x0, 0xfffffffffffffffd]}) r11 = socket$kcm(0x10, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0x1}}, 0x10) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) 7.028708126s ago: executing program 0 (id=17795): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x56, 0x81, 0xa, 0x41, @private2, @local, @private1, [0xffffffff, 0x0, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff, 0xff000000], 0xb8f4757fc1e05f28, 0x180}}, @common=@hl={{0x28}, {0x1, 0x7}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @local, [], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {}, 0x62}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x8, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0x40}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x56, 0x81, 0xa, 0x41, @private2, @local, @private1, [0xffffffff, 0x0, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff, 0xff000000], 0xb8f4757fc1e05f28, 0x180}}, @common=@hl={{0x28}, {0x1, 0x7}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @local, [], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {}, 0x62}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x8, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0x40}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 6.844567787s ago: executing program 0 (id=17798): clock_gettime(0x1, &(0x7f0000000000)) 6.796797552s ago: executing program 0 (id=17801): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000631123000008000000000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$kcm(0x29, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003cc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2, &(0x7f00000010c0)=""/236, 0xec}}, {{&(0x7f00000011c0)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001240)=""/110, 0x6e}], 0x1, &(0x7f0000001300)=""/32, 0x20}, 0x542c}, {{&(0x7f0000001340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001700)=[{&(0x7f00000013c0)=""/251, 0xfb}, {&(0x7f00000014c0)=""/52, 0x34}, {&(0x7f0000001500)=""/50, 0x32}, {&(0x7f0000001540)=""/214, 0xd6}, {&(0x7f0000001640)=""/167, 0xa7}], 0x5}, 0x8}, {{&(0x7f0000001780)=@hci, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001800)=""/94, 0x5e}, {&(0x7f0000001880)=""/42, 0x2a}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/188, 0xbc}, 0x4}, {{&(0x7f00000029c0)=@generic, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002a40)=""/11, 0xb}, {&(0x7f0000002a80)=""/4096, 0x1000}], 0x2, &(0x7f0000003ac0)=""/189, 0xbd}, 0x2354}], 0x5, 0x40, &(0x7f0000003d00)={r1, r2+10000000}) 6.682846526s ago: executing program 0 (id=17804): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000001000000000000000000006400010041000f00bd06ffffffffffff832540460708021100000107000000080211000000b300000004000000080211000000ff01000068040000077f04060d605078788291b963080026006c00000008000c006400000008000d0000000000"], 0xa0}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x6, &(0x7f0000000000), 0x4) getsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="05005b"], 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x20044000) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028004001f00ffffff7f080012000300000043d0bce8459c2908fd2a2c786691c8035db349608a640226fca5fc46e4aa83e172dd181782b7fc1c7389e3f50c34bc24a8efea9a6af3f5ddc7b12dacdde763b47ec418cfbba98d6fab126adc1e3235a523331801514d1a59eb51312ff88594f8a9b6105e8270f8aa6e353b0c80078326fccd93834d9736ebcf09150b4feb0af904"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 6.297848439s ago: executing program 0 (id=17809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b31b795c", @ANYRES16=r2, @ANYBLOB="010000000000000000000e00000008000300", @ANYRES32=0x0, @ANYBLOB="18000e001c0401069d07bd06ffffffffffff3c04010201ef"], 0x34}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400c4) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) close(r8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a0, 0x0) (async) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x6, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b705000000000000611052000000000004000000000000009500000000000000032164ca5fc09683c525ceb590966b74c2c98a810046ccd3abd2e5a0214abf439eb1c71df504acbaece5e7ac62ae22f43fa11d368f249ce31292bdb0b31e72e994dcc6575d996f53f0636ffab474a2b784ef1f8b06c9ead76cb6ac0b3e20788854fc6db54791ae7913c0bf3b8394dcf5956a4b8ea576222df9a83f9404012d61"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 2.839834915s ago: executing program 1 (id=17824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec9, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000080), 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 2.516590326s ago: executing program 1 (id=17827): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e12000008000600000000000800000000000000f83a84142b1cdd1f64c9d5b93514d1eeb080984c2581fb8281cbe7082991e18d6e9efc7dbf081ad6e84cdf38fe24624ef9fb5df21a151aaead1a729621bd8858bb10d9185d1e9c1a2a2de6e51ad01e43a06570dede51240b7523aabe3c87f21b"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000340)=[{&(0x7f00000010c0)='*', 0x1}, {&(0x7f0000000200)="97e9e484", 0x4}], 0x2, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r15 = accept4(r14, 0x0, 0x0, 0x0) splice(r11, 0x0, r15, 0x0, 0x10000000000066, 0xa) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x198, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x164, 0x2, [@TCA_MATCHALL_ACT={0x158, 0x2, [@m_skbedit={0x154, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffff824}]}, {0x100, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) 2.382924678s ago: executing program 1 (id=17829): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/249, 0xf9}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000500)=""/168, 0xa8}, {&(0x7f0000000680)=""/186, 0xba}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/151, 0x97}], 0xa, &(0x7f00000019c0)=""/158, 0x9e}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0xfffffffe}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.736395144s ago: executing program 3 (id=17839): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r3 = socket(0x400000000010, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0x5}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x2, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) close(r2) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) (async, rerun: 32) r8 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 32) sendmmsg$inet6(r8, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c}}], 0x1, 0x4004803) 1.732928919s ago: executing program 2 (id=17840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x407, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) 1.666709804s ago: executing program 3 (id=17843): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000), 0x8) sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8800) (async) sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) unshare(0x2c020400) (async) unshare(0x2c020400) write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="61050702020506070601052dfcfb0c8c7678714403040609029ef7"], 0x1b) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "632e21adbb300798", "3969175a8300a604d5f506e7bc291f45", '\x00', "7f5723b2d4629ed3"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "632e21adbb300798", "3969175a8300a604d5f506e7bc291f45", '\x00', "7f5723b2d4629ed3"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) recvfrom$inet6(r4, 0x0, 0x0, 0x10040, 0x0, 0x0) (async) recvfrom$inet6(r4, 0x0, 0x0, 0x10040, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) (async) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f00000001c0)="6a60b88dcc55e88addfbc587fe14174faef19befefcd08376d8a4f48d208bfaa210a5a1df0ae00a94c8a0b2a607d7277e4fcde7a597ef59b2dcd297d4cf621c8d1d2fba2b119cb00cc10d7408a97607a748485dfbb2fb53656284a01151e1ce6363b76ba2670d0b87b3dd712ca479bbeefe448f5aa450739f672bf740bd55c260cc91624c2adf235a9ca27e24df840130ca2a878128749623a8c8e0e5f8558d5569fdec4eaa9e5df4cd37cbe89e46d294c84b3b6f0f4306339ce3ec585bab77b361eecef6228f0defe79bd9d9306c76782b970", 0xd3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.620637567s ago: executing program 2 (id=17844): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') ioctl$FIBMAP(r1, 0x1, &(0x7f0000000800)=0x6d) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DESC={0x60, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd5e8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x35}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, @NFT_MSG_DELOBJ={0x120, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xdf, 0x8, "8d9329ef5a71a3a0cd909c85e736b51737c334d2eb1046807e6523c41708fc171da847b8a36371483b82773b6d3492954e20f38b17b6a0af906324f12173f321a9433833eb4ea4eca6ad0040a40593d22246fad302dd614448e77ba2ee5be7344cb61ff4521aa6b66d1548de2b774eb40baf24339821312eef47e68c6cc41374cf2e414c84eb092263f28046fa4cb120d28dec217aed2c14fe4eebb187f138a1081e9730da359759891b7f6de779f5a9dda43bfbc7e1813baad5ee0e35069436fcd305569eacdae9336fc571e10022add8544173f99c5782f5e7ed"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWTABLE={0x244, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4f, 0x6, "3bcbb64814f114df47ec7ed088428bfdf7fa6d20abde7db77bf8e34236ff943d4599af710d23832752e6abb25f52be8bcb694deecd0e593fec907f8973f889d14441319a515db06c9260ca"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x91, 0x6, "aebff36020772a3c0d5316cdf6af10ee4b5d4ff74577523603f101b58509cb7c42bb5d8e33c82cf519b06ab83cd97823e87151b7034282fb822d2deb709947559a2de2075d10b7f621164bb4936169ad482b683d924c9a106fd8bc272b64e8c3c2ea17af869975e2d3dccaba7209f954c70b4999210c430ec2dfdab2493118018bb72e465f9e9f83b6b4b091df"}, @NFTA_TABLE_USERDATA={0xff, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50c}, 0x1, 0x0, 0x0, 0x4004000}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f00000000c0)='\x00', 0x100, &(0x7f0000000140)={@align=0xffffffffffffffff, {0xfff, 0x3, 0x7, 0xfff}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x7ff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@map, 0x24, 0x1, 0x700, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a9058f43a82"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9, 0x8000000, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@ifindex=r9, r3, 0x37, 0x18, r4, @void, @value=r3, @void, @void, r5}, 0x20) 1.509197846s ago: executing program 2 (id=17846): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r1, 0x0, 0x0, 0x81, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@empty, 0x0}, &(0x7f0000000840)=0x14) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='gre0\x00', 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex=r5, r2, 0x21, 0x4, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r6, 0x6, 0x18, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1e, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x6}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000600)='syzkaller\x00', 0x2, 0xb3, &(0x7f0000000640)=""/179, 0x41100, 0x20, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)=[{0x2, 0x2, 0xd, 0x1}, {0x3, 0x2, 0xb, 0x8}, {0x5, 0x2, 0x0, 0xa}], 0x10, 0x1}, 0x94) 1.372122868s ago: executing program 1 (id=17847): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000"/35], 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000008940)=""/160, 0xa0}, {&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f0000000700)=""/76, 0x4c}], 0x4}, 0x12062) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f00000008c0)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r4, 0x0, 0x55, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct]}, {0x0, [0x0, 0x61, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r10], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xb, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r13, 0x5042a42cdd7d5765, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) 1.357945224s ago: executing program 4 (id=17848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000a40)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000a40)}, 0x10) sendmmsg$alg(r3, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2404e0c4}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='syzkaller\x00', 0x20200, &(0x7f0000000100)={@_ha_fsid={[0x7, 0x400]}, {0x3, 0x1c, 0x7a0, 0x3}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='syzkaller\x00', 0x20200, &(0x7f0000000100)={@_ha_fsid={[0x7, 0x400]}, {0x3, 0x1c, 0x7a0, 0x3}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x9e, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1, &(0x7f00000003c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x7a, &(0x7f0000000500)=""/122, 0x41000, 0x8, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000008c0)=[{0x5, 0x5, 0x2, 0x7}, {0x4, 0x4, 0x4}, {0x5, 0x3, 0x2, 0x8}, {0x4, 0x1, 0xd, 0xa}, {0x3, 0x8003, 0x3, 0x6}, {0x5, 0x4, 0x3, 0x2}, {0x4, 0x1, 0xe, 0xc}, {0x0, 0x1, 0x5}, {0x4, 0x3, 0x8, 0x9}, {0x4, 0x1, 0xa, 0xb}], 0x10, 0xfffffffc}, 0x94) 1.320231152s ago: executing program 2 (id=17849): socket$inet(0x2, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4e4ff000000000079100000000000006300f8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda6}, 0x1a) 1.219971429s ago: executing program 3 (id=17850): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x5, 0x4) getsockopt(r0, 0x7, 0x7, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001080)=0x4, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001100)={'sit0\x00', &(0x7f00000010c0)={@empty, @empty, 0x10, 0x12}}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001140)={0x1, [0x40]}, 0x6) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000001180)={0x0, 0xd}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000012c0), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001300)={0x2, [0x0, 0x0]}, &(0x7f0000001340)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001400)={r3, 0x80, &(0x7f0000001380)=[@in6={0xa, 0x4e22, 0x25f, @empty, 0x3b}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x70c3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e22, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}]}, &(0x7f0000001440)=0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000001480)=""/131, &(0x7f0000001540)=0x83) sendmsg$nl_netfilter(r1, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xa8, 0x7, 0x3, 0x101, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x9}, [@typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@empty}, @generic="5d6142fc09be60f261771352bfe98149d695157933ae9a002e15e96ff6f66c85a87b6edbcde111532a33a12a53e4f93df9b07f1bbb53846f026f10d05723ef98d604a6390cd4", @generic="2d4838ef8d34d8c1e483a5e356f115c6af6a9e5d30bd614cc6735da3354e5a4c9fcd64aa29c17599690ef60248242a2c4a19a9c2", @typed={0x4, 0xfd}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40050}, 0x41000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001700)={r3, 0x7}, &(0x7f0000001740)=0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={0xd0, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbec9}, {0x6, 0x11, 0xa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0xc}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001980)={r0, 0x3, 0x2, "a62a098e7e914f5106569e9973bcf9562bf5d66d33a9d01ee4bd70ce99b9b063eca0b2cf7e14ef0fc4d40d0887cddd61abe163a749239c451005816c3971234d4cdb964aea537e00ab8551a2c998faf9422f5829e5369a54a507091701562ca731de5804b604457ebb1a2e28c96188"}) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001a00)={r4, 0x4, 0x7}, &(0x7f0000001a40)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000001a80)={0x7fffffff, [0x4, 0x4], 0x800}, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x31}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001bc0)={{{@in=@multicast1, @in=@empty}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000001cc0)=0xe8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001d00)={0x1, 0x9, 0x7d}) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001d40)={r4, 0x6}, &(0x7f0000001d80)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001dc0)={r3, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0xd, 0x5}, 0x90) socket(0x58a1aee206e77697, 0x4, 0xe) 1.216480379s ago: executing program 4 (id=17851): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x700, 0x1d0, 0x8, {{0x12, 0x4, 0x2, 0x7, 0x48, 0x66, 0x0, 0x7, 0x2f, 0x0, @local, @multicast1, {[@cipso={0x86, 0x1b, 0x2, [{0x0, 0x8, "2a2a691c1d65"}, {0x5, 0x2}, {0x5, 0xb, "fd981084619ee9bd16"}]}, @end, @noop, @ssrr={0x89, 0xb, 0xe1, [@remote, @private=0xa010100]}, @generic={0x82, 0xa, "0701b6a3e40a7be5"}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @empty}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x5, 0x5, 0x44, @mcast2, @mcast2, 0x0, 0x7, 0x4, 0x7}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0xaa, 0x100, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0xfffffffc, 0x1}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@multicast1, @remote}, &(0x7f0000000640)=0xc) r14 = socket(0x10, 0x3, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) r18 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r18, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r18, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r19, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="10020000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf250200b55824d633a3fc050100", @ANYRES32=r3, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="080003000300000008000300010000001400020076657468305f746f5f7465616d00000014000200677265746170300000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="40000180080003000200000008000100", @ANYRES32=r10, @ANYBLOB="080003000300000008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468305f6d61637674617000000008000300010000006000018014000200766574683000000000000000000000000800030001000000140002006261746164765f736c6176655f31000008000300030000001400020069703667726574617030000000000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000300010000007800018008000300020000000800030002000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="140002006d6163766c616e31000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006d6163766c616e310000000000000000080003000100000008000100", @ANYRES32=r16, @ANYBLOB="140002006272696467655f736c6176655f3000003c00018008000100", @ANYRES32=r17, @ANYBLOB="14000200776c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626174616476001800018014000200767863616e31000000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x210}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.09396769s ago: executing program 3 (id=17852): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x6, 0x401, {{0xa, 0x4, 0x1, 0x3a, 0x28, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, {[@end, @lsrr={0x83, 0x3, 0x78}, @ssrr={0x89, 0xf, 0x27, [@private=0xa010101, @rand_addr=0x64010102, @empty]}]}}}}}) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r5, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r5, 0x0) (async) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2080200}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x48090}, 0x810) (async, rerun: 64) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003"], 0x2c}}, 0x0) (async, rerun: 64) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 990.939618ms ago: executing program 2 (id=17853): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f00000014c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/207, 0xcf}], 0x2}, 0x2) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$kcm(0x29, 0x8, 0x0) sendmsg$kcm(r4, &(0x7f0000001480)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="80e0d6da6e2e61b81bc4db39869b24af403a", 0x12}, {&(0x7f00000001c0)="a54a107cac4c53b207cabd9e53b7b3", 0xf}, {&(0x7f0000000200)="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", 0xfa}], 0x3, &(0x7f0000000340)=[{0x100, 0x29, 0xaf, "06d8bb6788482317b0fe42afc527b7a3f5cb61cfdc6077df826acbcd947fa30cc7fc68b7530100d56372ec243caaca29919d45f86e274781cd7cdde9037db86a4622eeff4b1804d8eb3e4b4a3d77fbb6f9d43ef4d2c82d3f14574fe079347f7a80c7c54143038ed89ba529f9a339ad76f5f6e8f033bdef24467c0ec2f04f3ba03a8ec14ff528449b01b00aa6173a009b742a9583f170edc4edc9cbf70172981fcdca8a755bda90c6c5ae9e6f7ed8f3fee195eda03e78ff2382bf504758df99ece70be11d14be8aadbffbe6e53ac6ef5154d70072dcb9d35a3068dd01ae5a4bf1c9718a2e9abeac3af92e"}, {0x1010, 0x10a, 0x101, "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"}], 0x1110}, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 936.491792ms ago: executing program 3 (id=17854): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fe2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdddad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8523b29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) poll(&(0x7f0000001480)=[{r3}], 0x1, 0xffff) r7 = getuid() sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @typed={0x0, 0xde, 0x0, 0x0, @pid=r6}, @nested={0x0, 0x109, 0x0, 0x1, [@nested={0x0, 0x68, 0x0, 0x1, [@generic="f6b110b4a751fabd054a3f3907392ce3fc20870eab98b9a5a9c2e63a23e6ba4018e47c922d57baba11a197d9e06a754156a93d861b8de34bf6ac564e7c61a8d45aea023829bd10960b25c6272b71b7ac32e3948c05034245f7", @nested={0x0, 0xf}, @nested={0x0, 0x81}, @generic="45980957af684ec6cc34a1e2c89701b0345bd259b72aa4fdb00d0bb37796adfc7d56ac7b287009d4009911dd9176c063cd7f0c43f9a2f94eedbbecc090d30d21840c47199ffbe344", @nested={0x0, 0xa3}]}, @generic="847dc20c7f7e2a8da68aec25fabb96dbc474c3f1502347091a2fb06fd0959db0a2584e5060ef369a1265adb6456bc12a36b7f2bab3dee0b15988392b370f5172b12e1e419b4d90b26c2d7a39dea4213c9ded69a9d00ea755b0cee00db089f7e0980c8c7a8525150e233de58cb1eaa178589cafdd607ff5358326cc6bb5110e4119e17603d173b8fd1b58232072d94d4244391283552c2cb4f3a0786336a8b776cda0c4a4c1ae11b5734947793aa0eb12bc02492b54fbd805f1e656fb97d2325957de4f258e42ab0839c516", @generic="9e91cfcb2bf86beb0429aa8ab7aaa7b5562079a743a4afa9c26f4d457321ff9b1a8fccc22f63eb01f80da635c13bc45fdbc1dfc0ed93f0125b3f7ae333e911ace9", @nested={0x0, 0xb6, 0x0, 0x1, [@typed={0x0, 0x68}, @nested={0x0, 0x112}, @nested={0x0, 0x104}, @nested={0x0, 0xdb}, @typed={0x0, 0x69}, @typed={0x0, 0xe, 0x0, 0x0, @ipv6=@private1}, @typed={0x0, 0x11c, 0x0, 0x0, @u64=0x10000}, @typed={0x0, 0x11b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @nested={0x0, 0xff, 0x0, 0x1, [@typed={0x0, 0x7b, 0x0, 0x0, @u64=0xff}, @generic="a52ba3e2cb03018adb37c4f327788b82fe385f207ec9a1f2442880d5b886237f7945e332f6d5ad3bf808c6bd4182d72b4f7f912eadcdfca16bf346be05253b8eb686cb822c915c153a2386d02c5978a9830a4fbd0f848807f901bd8a77c19ec84ce5b4f6a488309a1fb89c8f1ad4a558ea6d94a5619097d3895c3ec645849647f060f4202c9f84e4e57cdc902a62332e63b6847ab300ccd2e178d8ad84d47e8e555b45f49495762e0fe8d259e6595a46cc5039500564aa19583a6a62c2", @generic="fc516036e380ab17e559f86e16a9f7337e7c1c58572208f4855e1bd512a7b919aec75ad989d4c2de75db93b1520e771d8935f09b1fa6318647f9b674b428370527cb640840980aa704d927fd262ee02ad3b34ee1c857b5ec2c548f61a204d80b7733bb86ecea7eb2008541624bbc58973877603c56174887883b4dffd0c4d80457037231a71104a559e2c0e683aae6ea9f6cfa14c9a5cbfc014ddf891a57ad738288fc36130b1b5a3953599bd99c50e073541f790dd35b7239b18867bb123f905d13171f5d0b", @generic="aad5e60aea34400960ae3a944d9f20fe75499fc08d4e3426715dba3ceec52bada358999b18c591ea94d5", @generic="a72317276cf802c2ed1b604940c014d953f6798d0a2f953db0e27723db076cdaaa3b33e5af4c80bf00669d593339e0c9312a0ef40b5770f9ab12aef011efd0c880df2b51ffe08d1ab03ab04f4e2f4b7d69902d35f80478591f2f128506076c00040000b256dd7f4b2efe75e4c2e0b3fd1ba181955fcda6ac6a76c234c65ebaa4511c", @nested={0x0, 0x71}, @typed={0x0, 0x9a}, @typed={0x0, 0x2c, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="15434fc618cb30a734c6410701a5d9abace1a97affb5fd6083ba281122fd1cca265786164fbb0f547bff6fc9ea923d8e10ee42c5ec59aca4407069db0b4578eac7d4e2daccf063da43854575f83937d13f762f6c3ec4f6be2c6a2dcf5b39e111769e8b7ab15918c7dbb4b787cda71bd889f4efa151acacdd52b8544fb42c84a0436c4307a7f1be8fb71075d9", @typed={0x0, 0xef, 0x0, 0x0, @binary="9b12a3e7a1902cef88006df4e5a58447f690c7feaae639e8607d8ae99f5393f696c2ca9897bb44401dd9d0ab65e1f58fdac50cf589b82b8c9df53e511fb6ddad45a147ec20862421f782b667a20d3ad29984c328350b1db5383f100c413c74c0bd84fe578339f49dcc6b191d9aa496946c23d75b49a3a323b23b406325171ecdb75dfbc327e30bd9b051df686795657e68fde5c51c74ce7a9555418693dc2d9743978fc8ff408ec297959283"}]}]}]}, 0x114}, {&(0x7f00000014c0)={0x1260, 0x31, 0x128, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x142, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x114, 0x0, 0x0, @uid=r5}, @generic="0eb1b3febfb6eef00793c43a6e982a6479ddd3363529f1723f01dd846eb5885707c0a70b3d95189dd3631091c0d8ff7de5a4ae96f305a8b7c8173bb13878d6e99a6de10d70bf0f144bc07c9b4133c72c8cfe23d25cf5d3606ee98b9a6ad1c8510f5704b3d6e37383f05c242d02fcb5534bb362cf7ffcc012e07b1e94e61bf5e8720c1b3011385ab75401861eebfd5a4aa26aee1cbed8f9711759b8c954581a1b6a54647669c265cf18b39eb3cb72ff3fe21d35afba005c7efd42f855fc0791eeaf476ab8b39d961cc2a86cc546f9ca13b7ee3a633d0661d7cf34ad05b36f4ab34d9caeaa5d", @nested={0x1152, 0x14a, 0x0, 0x1, [@generic="babe8762a6b2ba5a060e7ba31d0a22c458ddafac8205e3f448a5b661983b6f0580e53e8ab19bada96027453567d182e3887f02ccc2b150380a76375fdd5f0ca039f8cc1fe7c0", @typed={0x8, 0xc, 0x0, 0x0, @uid=r7}, @generic="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", @typed={0x100, 0xc9, 0x0, 0x0, @binary="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"}]}]}, 0x129c}, {&(0x7f0000000140)={0x7c, 0x15, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x8, 0xa2}, @nested={0x61, 0x15a, 0x0, 0x1, [@generic="9f5e12181ff9636142411d7d12e6129e80f9d05e14735ff462c0b290b1261943b627af9740339aeeb7", @nested={0x4, 0x5c}, @typed={0x16, 0xff, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}, @typed={0x5, 0x5c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xfd}, @nested={0x4, 0x66}, @nested={0x4, 0x13}, @nested={0x4, 0xfe}]}]}, 0x7c}], 0x3, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @typed={0x0, 0xde, 0x0, 0x0, @pid=r6}, @nested={0x0, 0x109, 0x0, 0x1, [@nested={0x0, 0x68, 0x0, 0x1, [@generic="f6b110b4a751fabd054a3f3907392ce3fc20870eab98b9a5a9c2e63a23e6ba4018e47c922d57baba11a197d9e06a754156a93d861b8de34bf6ac564e7c61a8d45aea023829bd10960b25c6272b71b7ac32e3948c05034245f7", @nested={0x0, 0xf}, @nested={0x0, 0x81}, @generic="45980957af684ec6cc34a1e2c89701b0345bd259b72aa4fdb00d0bb37796adfc7d56ac7b287009d4009911dd9176c063cd7f0c43f9a2f94eedbbecc090d30d21840c47199ffbe344", @nested={0x0, 0xa3}]}, @generic="847dc20c7f7e2a8da68aec25fabb96dbc474c3f1502347091a2fb06fd0959db0a2584e5060ef369a1265adb6456bc12a36b7f2bab3dee0b15988392b370f5172b12e1e419b4d90b26c2d7a39dea4213c9ded69a9d00ea755b0cee00db089f7e0980c8c7a8525150e233de58cb1eaa178589cafdd607ff5358326cc6bb5110e4119e17603d173b8fd1b58232072d94d4244391283552c2cb4f3a0786336a8b776cda0c4a4c1ae11b5734947793aa0eb12bc02492b54fbd805f1e656fb97d2325957de4f258e42ab0839c516", @generic="9e91cfcb2bf86beb0429aa8ab7aaa7b5562079a743a4afa9c26f4d457321ff9b1a8fccc22f63eb01f80da635c13bc45fdbc1dfc0ed93f0125b3f7ae333e911ace9", @nested={0x0, 0xb6, 0x0, 0x1, [@typed={0x0, 0x68}, @nested={0x0, 0x112}, @nested={0x0, 0x104}, @nested={0x0, 0xdb}, @typed={0x0, 0x69}, @typed={0x0, 0xe, 0x0, 0x0, @ipv6=@private1}, @typed={0x0, 0x11c, 0x0, 0x0, @u64=0x10000}, @typed={0x0, 0x11b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @nested={0x0, 0xff, 0x0, 0x1, [@typed={0x0, 0x7b, 0x0, 0x0, @u64=0xff}, @generic="a52ba3e2cb03018adb37c4f327788b82fe385f207ec9a1f2442880d5b886237f7945e332f6d5ad3bf808c6bd4182d72b4f7f912eadcdfca16bf346be05253b8eb686cb822c915c153a2386d02c5978a9830a4fbd0f848807f901bd8a77c19ec84ce5b4f6a488309a1fb89c8f1ad4a558ea6d94a5619097d3895c3ec645849647f060f4202c9f84e4e57cdc902a62332e63b6847ab300ccd2e178d8ad84d47e8e555b45f49495762e0fe8d259e6595a46cc5039500564aa19583a6a62c2", @generic="fc516036e380ab17e559f86e16a9f7337e7c1c58572208f4855e1bd512a7b919aec75ad989d4c2de75db93b1520e771d8935f09b1fa6318647f9b674b428370527cb640840980aa704d927fd262ee02ad3b34ee1c857b5ec2c548f61a204d80b7733bb86ecea7eb2008541624bbc58973877603c56174887883b4dffd0c4d80457037231a71104a559e2c0e683aae6ea9f6cfa14c9a5cbfc014ddf891a57ad738288fc36130b1b5a3953599bd99c50e073541f790dd35b7239b18867bb123f905d13171f5d0b", @generic="aad5e60aea34400960ae3a944d9f20fe75499fc08d4e3426715dba3ceec52bada358999b18c591ea94d5", @generic="a72317276cf802c2ed1b604940c014d953f6798d0a2f953db0e27723db076cdaaa3b33e5af4c80bf00669d593339e0c9312a0ef40b5770f9ab12aef011efd0c880df2b51ffe08d1ab03ab04f4e2f4b7d69902d35f80478591f2f128506076c00040000b256dd7f4b2efe75e4c2e0b3fd1ba181955fcda6ac6a76c234c65ebaa4511c", @nested={0x0, 0x71}, @typed={0x0, 0x9a}, @typed={0x0, 0x2c, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="15434fc618cb30a734c6410701a5d9abace1a97affb5fd6083ba281122fd1cca265786164fbb0f547bff6fc9ea923d8e10ee42c5ec59aca4407069db0b4578eac7d4e2daccf063da43854575f83937d13f762f6c3ec4f6be2c6a2dcf5b39e111769e8b7ab15918c7dbb4b787cda71bd889f4efa151acacdd52b8544fb42c84a0436c4307a7f1be8fb71075d9", @typed={0x0, 0xef, 0x0, 0x0, @binary="9b12a3e7a1902cef88006df4e5a58447f690c7feaae639e8607d8ae99f5393f696c2ca9897bb44401dd9d0ab65e1f58fdac50cf589b82b8c9df53e511fb6ddad45a147ec20862421f782b667a20d3ad29984c328350b1db5383f100c413c74c0bd84fe578339f49dcc6b191d9aa496946c23d75b49a3a323b23b406325171ecdb75dfbc327e30bd9b051df686795657e68fde5c51c74ce7a9555418693dc2d9743978fc8ff408ec297959283"}]}]}]}, 0x114}, {&(0x7f00000014c0)={0x1260, 0x31, 0x128, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x142, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x114, 0x0, 0x0, @uid=r5}, @generic="0eb1b3febfb6eef00793c43a6e982a6479ddd3363529f1723f01dd846eb5885707c0a70b3d95189dd3631091c0d8ff7de5a4ae96f305a8b7c8173bb13878d6e99a6de10d70bf0f144bc07c9b4133c72c8cfe23d25cf5d3606ee98b9a6ad1c8510f5704b3d6e37383f05c242d02fcb5534bb362cf7ffcc012e07b1e94e61bf5e8720c1b3011385ab75401861eebfd5a4aa26aee1cbed8f9711759b8c954581a1b6a54647669c265cf18b39eb3cb72ff3fe21d35afba005c7efd42f855fc0791eeaf476ab8b39d961cc2a86cc546f9ca13b7ee3a633d0661d7cf34ad05b36f4ab34d9caeaa5d", @nested={0x1152, 0x14a, 0x0, 0x1, [@generic="babe8762a6b2ba5a060e7ba31d0a22c458ddafac8205e3f448a5b661983b6f0580e53e8ab19bada96027453567d182e3887f02ccc2b150380a76375fdd5f0ca039f8cc1fe7c0", @typed={0x8, 0xc, 0x0, 0x0, @uid=r7}, @generic="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", @typed={0x100, 0xc9, 0x0, 0x0, @binary="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"}]}]}, 0x129c}, {&(0x7f0000000140)={0x7c, 0x15, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x8, 0xa2}, @nested={0x61, 0x15a, 0x0, 0x1, [@generic="9f5e12181ff9636142411d7d12e6129e80f9d05e14735ff462c0b290b1261943b627af9740339aeeb7", @nested={0x4, 0x5c}, @typed={0x16, 0xff, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}, @typed={0x5, 0x5c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xfd}, @nested={0x4, 0x66}, @nested={0x4, 0x13}, @nested={0x4, 0xfe}]}]}, 0x7c}], 0x3, 0x0, 0x0, 0x1}, 0x0) 936.125052ms ago: executing program 1 (id=17855): r0 = socket(0x10, 0x80003, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000003040)=[{}], 0x1, 0x3) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x20, 0x6c, 0xb21, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x34400, 0x10010}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) 926.954545ms ago: executing program 4 (id=17856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) (async, rerun: 64) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000001100)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x2c, &(0x7f0000000080)={0x0, 0x0}, 0x10) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) writev(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x13c}}, 0x0) 732.168482ms ago: executing program 1 (id=17857): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000001"], 0x26}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xd480edacd4b2e125}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000000000070000050900010073797a310000000048000000000a050000000000000000000100000308000240000000020c00044000000000000000050900010073797a3100000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x70}}, 0x0) 590.357767ms ago: executing program 4 (id=17858): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @private}, &(0x7f0000000240)=0xc) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x8, 0x9, 0x4, @empty, @local, 0x80, 0x7, 0xdd6, 0x9}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x97, 0x2, 0x1400, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x65, 0x0, 0xb, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xf0, [@dev={0xac, 0x14, 0x14, 0x30}, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101, @multicast2]}]}}}}}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r12, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x21c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '&{(\\@^^]%!(@&+^*:!#%&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xeb\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '+}),(\\^@#-\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf504}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x730}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':\\!]/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4000000}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x810}, 0x801) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 388.080103ms ago: executing program 4 (id=17859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000003c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xffff0000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e22, 0xfffffa59, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x7, 0x2, 0x6, 0xfffffff5, 0x6}, &(0x7f0000000380)=0x98) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x30}}, 0x40) 208.054392ms ago: executing program 4 (id=17860): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {0xa, 0x5}, {0x8, 0xffe0}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 69.033455ms ago: executing program 3 (id=17861): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_cmd={0x0, 0x9, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x67ef, [0xfffffffc, 0x80]}}) 0s ago: executing program 2 (id=17862): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[], 0x30}}, 0x91) socket$inet(0x2, 0x800, 0xfffffff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r3, 0x0, &(0x7f0000000380)) recvmsg$can_raw(r3, &(0x7f0000000100)={&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/86, 0x56}], 0x4, &(0x7f0000001500)=""/4096, 0x1000}, 0x43) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000002580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x97}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x890) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): e type 21 has an invalid length. [ 1487.187459][ T400] netlink: 'syz.4.16202': attribute type 6 has an invalid length. [ 1487.195905][ T400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16202'. [ 1487.556765][ T422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16210'. [ 1487.565899][ T422] netlink: 176 bytes leftover after parsing attributes in process `syz.3.16210'. [ 1487.575279][ T422] netlink: 'syz.3.16210': attribute type 5 has an invalid length. [ 1487.587214][ T422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16210'. [ 1488.141957][ T461] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1488.168809][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16224'. [ 1488.221299][ T465] nbd: must specify at least one socket [ 1488.240714][T27236] net_ratelimit: 12 callbacks suppressed [ 1488.240734][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1488.261118][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1488.283611][ T470] veth0_to_bridge: entered promiscuous mode [ 1488.438638][ T478] syzkaller0: entered promiscuous mode [ 1488.444817][ T478] syzkaller0: entered allmulticast mode [ 1488.479616][ T478] netlink: 'syz.1.16232': attribute type 3 has an invalid length. [ 1488.493873][ T469] veth0_to_bridge: left promiscuous mode [ 1488.826818][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1488.841538][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1489.124408][ T521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1489.156873][ T520] macvlan2: entered promiscuous mode [ 1489.162379][ T520] macvlan2: entered allmulticast mode [ 1489.168597][ T520] bond5: entered allmulticast mode [ 1489.174005][ T520] bond5: entered promiscuous mode [ 1489.186842][ T520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1489.196017][ T520] team0: Port device macvlan2 added [ 1489.377814][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1489.392277][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1489.410352][ T551] netlink: 'syz.1.16251': attribute type 21 has an invalid length. [ 1489.451807][ T551] IPv6: NLM_F_CREATE should be specified when creating new route [ 1489.466016][ T551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1489.473316][ T551] IPv6: NLM_F_CREATE should be set when creating new route [ 1489.480597][ T551] IPv6: NLM_F_CREATE should be set when creating new route [ 1489.487880][ T551] IPv6: NLM_F_CREATE should be set when creating new route [ 1489.710557][ T563] vxcan1 speed is unknown, defaulting to 1000 [ 1489.846422][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 1489.854561][ C0] lec:lec_tx_timeout: lec0 [ 1489.942657][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1489.957413][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1490.092156][ T596] netlink: 'syz.2.16263': attribute type 10 has an invalid length. [ 1490.487493][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1490.502033][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1490.673099][ T563] lo speed is unknown, defaulting to 1000 [ 1490.677740][ T629] x_tables: unsorted entry at hook 3 [ 1491.623143][ T682] netlink: 'syz.1.16287': attribute type 1 has an invalid length. [ 1491.657899][ T682] bridge5: entered promiscuous mode [ 1491.664355][ T682] bridge5: entered allmulticast mode [ 1491.742016][ T680] vlan3: entered allmulticast mode [ 1491.747678][ T680] bridge0: port 3(vlan3) entered blocking state [ 1491.754069][ T680] bridge0: port 3(vlan3) entered disabled state [ 1491.776950][ T693] __nla_validate_parse: 14 callbacks suppressed [ 1491.776970][ T693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16291'. [ 1491.810329][ T695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16292'. [ 1491.821458][ T695] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16292'. [ 1491.824870][ T693] bridge0: entered promiscuous mode [ 1491.832553][ T695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16292'. [ 1491.852783][ T693] macsec1: entered promiscuous mode [ 1491.862820][ T693] macsec1: entered allmulticast mode [ 1491.872618][ T693] bridge0: entered allmulticast mode [ 1491.879003][ T693] bridge0: port 1(macsec1) entered blocking state [ 1491.885847][ T693] bridge0: port 1(macsec1) entered disabled state [ 1491.896631][ T693] bridge0: left allmulticast mode [ 1491.901850][ T693] bridge0: left promiscuous mode [ 1492.204295][ T722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16300'. [ 1492.375778][ T731] Bluetooth: MGMT ver 1.23 [ 1492.388780][ T731] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1492.662343][ T755] syzkaller0: entered promiscuous mode [ 1492.671100][ T755] syzkaller0: entered allmulticast mode [ 1492.751175][ T777] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16315'. [ 1492.792073][ T780] netlink: 'syz.1.16316': attribute type 29 has an invalid length. [ 1492.820269][ T780] netlink: 'syz.1.16316': attribute type 29 has an invalid length. [ 1492.844491][ T780] netlink: 500 bytes leftover after parsing attributes in process `syz.1.16316'. [ 1492.859886][ T785] netlink: 'syz.1.16316': attribute type 29 has an invalid length. [ 1492.959734][ T782] bond5: Unable to set down delay as MII monitoring is disabled [ 1492.993526][ T782] bond5 (unregistering): Released all slaves [ 1493.044998][ T799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16321'. [ 1493.218029][ T815] netlink: 'syz.3.16325': attribute type 11 has an invalid length. [ 1493.285629][ T818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16325'. [ 1493.322379][ T818] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1493.330625][ T822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16326'. [ 1493.452488][ T7677] lec:lec_start_xmit: lec0:No lecd attached [ 1493.493405][ T818] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1493.542177][ T828] netlink: 'syz.1.16329': attribute type 29 has an invalid length. [ 1493.719854][ T846] netlink: 'syz.4.16334': attribute type 1 has an invalid length. [ 1493.738846][T17239] net_ratelimit: 11 callbacks suppressed [ 1493.738864][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1493.759588][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1493.916318][ T859] netlink: 'syz.1.16338': attribute type 2 has an invalid length. [ 1494.142684][ T871] syzkaller1: entered promiscuous mode [ 1494.152830][ T871] syzkaller1: entered allmulticast mode [ 1494.309596][ T884] netlink: 'syz.4.16349': attribute type 1 has an invalid length. [ 1494.318416][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1494.333591][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1494.389075][ T886] netlink: 'syz.3.16350': attribute type 11 has an invalid length. [ 1494.471829][ T893] netlink: 'syz.4.16352': attribute type 83 has an invalid length. [ 1494.650645][ T899] bond6: ARP target 1.0.0.0 is already present [ 1494.657822][ T899] bond6: option arp_ip_target: invalid value (1) [ 1494.666268][ T899] bond6 (unregistering): Released all slaves [ 1494.743067][ T911] syzkaller0: entered promiscuous mode [ 1494.757976][ T911] syzkaller0: entered allmulticast mode [ 1494.841084][ T911] syzkaller0: left promiscuous mode [ 1494.846337][ T911] syzkaller0: left allmulticast mode [ 1494.856899][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1494.872628][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1494.903882][ T914] tipc: Enabled bearer , priority 0 [ 1494.929292][ T910] tipc: Resetting bearer [ 1494.981670][ T910] tipc: Disabling bearer [ 1494.990399][ T925] netlink: 'syz.1.16361': attribute type 5 has an invalid length. [ 1495.128709][ T936] tipc: Enabling of bearer rejected, failed to enable media [ 1495.417227][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1495.432135][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1495.593486][ T977] IPv6: NLM_F_CREATE should be specified when creating new route [ 1495.601649][ T977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1495.608957][ T977] IPv6: NLM_F_CREATE should be set when creating new route [ 1495.616346][ T977] IPv6: NLM_F_CREATE should be set when creating new route [ 1495.623728][ T977] IPv6: NLM_F_CREATE should be set when creating new route [ 1495.713489][ T988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.870812][ T999] sctp: [Deprecated]: syz.4.16381 (pid 999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1495.870812][ T999] Use struct sctp_sack_info instead [ 1495.969286][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1495.983879][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1496.302422][ T1034] ipt_ECN: cannot use operation on non-tcp rule [ 1496.504104][ T1045] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1496.586910][ T1045] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1497.239241][ T1116] __nla_validate_parse: 16 callbacks suppressed [ 1497.239262][ T1116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16412'. [ 1497.481428][ T1133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16419'. [ 1497.516805][ T1138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16421'. [ 1497.568702][ T1138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16421'. [ 1497.616547][ T1146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16417'. [ 1497.907988][ T1161] validate_nla: 3 callbacks suppressed [ 1497.908007][ T1161] netlink: 'syz.4.16427': attribute type 1 has an invalid length. [ 1497.950311][ T1161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1497.964209][ T1163] syzkaller0: entered promiscuous mode [ 1497.971229][ T1163] syzkaller0: entered allmulticast mode [ 1498.000397][ T1167] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16428'. [ 1498.198929][ T1179] bond5: entered allmulticast mode [ 1498.242421][ T1183] 8021q: VLANs not supported on lo [ 1498.275772][ T1185] 8021q: VLANs not supported on lo [ 1498.284513][ T1190] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1498.312967][ T1190] syzkaller0: entered promiscuous mode [ 1498.320053][ T1190] syzkaller0: entered allmulticast mode [ 1498.399612][ T1185] syzkaller0: entered promiscuous mode [ 1498.405194][ T1185] syzkaller0: entered allmulticast mode [ 1498.426000][ T1194] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1498.886466][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1498.894566][ C0] lec:lec_tx_timeout: lec0 [ 1499.087870][T23179] net_ratelimit: 12 callbacks suppressed [ 1499.087890][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1499.108194][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1499.627333][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1499.642294][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1500.167665][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1500.182517][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1500.710083][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1500.724610][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1501.029651][ T1210] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1501.148664][ T1219] ip6gre1: entered allmulticast mode [ 1501.177305][ T1224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16446'. [ 1501.188642][ T1224] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1501.218436][ T1223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16445'. [ 1501.248592][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1501.249453][ T1225] vxcan1 speed is unknown, defaulting to 1000 [ 1501.273471][ T1231] netem: change failed [ 1501.599529][ T1239] vxcan1 speed is unknown, defaulting to 1000 [ 1501.885985][ T1225] lo speed is unknown, defaulting to 1000 [ 1502.176539][ T1262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16458'. [ 1502.299210][ T1239] lo speed is unknown, defaulting to 1000 [ 1502.666774][ T1277] tipc: Invalid UDP bearer configuration [ 1502.666822][ T1277] tipc: Enabling of bearer rejected, failed to enable media [ 1502.888449][ T1290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16465'. [ 1503.028866][ T1290] bond0: entered promiscuous mode [ 1503.044223][ T1290] bond_slave_0: entered promiscuous mode [ 1503.068660][ T1290] bond_slave_1: entered promiscuous mode [ 1503.093305][ T1290] gretap0: entered promiscuous mode [ 1503.105058][ T1290] debugfs: 'hsr0' already exists in 'hsr' [ 1503.120225][ T1304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16469'. [ 1503.130378][ T1290] Cannot create hsr debugfs directory [ 1503.136145][ T1290] hsr0: entered promiscuous mode [ 1503.147319][ T1292] syzkaller0: entered promiscuous mode [ 1503.153659][ T1292] syzkaller0: entered allmulticast mode [ 1503.312552][ T1311] siw: device registration error -23 [ 1503.327382][ T1307] netlink: 'syz.0.16470': attribute type 62 has an invalid length. [ 1503.709292][ T1331] netlink: 'syz.1.16477': attribute type 3 has an invalid length. [ 1504.014430][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16486'. [ 1504.114833][ T1371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16485'. [ 1504.242641][ T1378] netlink: 'syz.0.16489': attribute type 12 has an invalid length. [ 1504.279261][ T1378] bond7: option primary_reselect: invalid value (255) [ 1504.288515][ T1378] bond7 (unregistering): Released all slaves [ 1504.374969][T23179] net_ratelimit: 13 callbacks suppressed [ 1504.374990][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1504.395448][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1504.481574][ T1392] netlink: 'syz.3.16494': attribute type 1 has an invalid length. [ 1504.489515][ T1394] netlink: 88 bytes leftover after parsing attributes in process `syz.4.16495'. [ 1504.544712][ T1392] bond5: entered promiscuous mode [ 1504.550584][ T1392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1504.646581][ T1396] bond5: (slave bridge3): making interface the new active one [ 1504.666697][ T1396] bridge3: entered promiscuous mode [ 1504.678474][ T1396] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1504.916581][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1504.921302][ T1417] : renamed from bond0 (while UP) [ 1504.931828][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1504.951774][ T1415] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1505.097793][ T1424] netlink: 'syz.2.16503': attribute type 1 has an invalid length. [ 1505.107852][ T1424] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16503'. [ 1505.130910][ T1431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16504'. [ 1505.162855][ T1431] xfrm1: entered promiscuous mode [ 1505.171188][ T1431] xfrm1: entered allmulticast mode [ 1505.248671][ T1439] tipc: Enabled bearer , priority 11 [ 1505.290580][ T1440] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16506'. [ 1505.326789][ T1440] 8021q: VLANs not supported on ip6_vti0 [ 1505.486550][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1505.497080][ T1449] netlink: 'syz.1.16511': attribute type 1 has an invalid length. [ 1505.500973][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1505.627624][ T1449] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1505.634031][ T1458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16513'. [ 1505.740391][ T1465] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16514'. [ 1505.764488][ T1467] netlink: 'syz.0.16515': attribute type 10 has an invalid length. [ 1505.803404][ T1467] team0: Port device dummy0 added [ 1505.938181][ T1475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.071471][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1506.086076][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1506.554437][ T1522] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1506.573798][ T1524] x_tables: unsorted underflow at hook 4 [ 1506.627502][ T1524] syzkaller0: entered promiscuous mode [ 1506.633035][ T1524] syzkaller0: entered allmulticast mode [ 1507.090574][ T1554] netlink: 'syz.1.16543': attribute type 2 has an invalid length. [ 1507.146747][ T1554] netlink: 'syz.1.16543': attribute type 5 has an invalid length. [ 1507.230988][ T1558] nbd: must specify at least one socket [ 1507.284382][ T1565] netlink: 'syz.1.16551': attribute type 10 has an invalid length. [ 1507.314276][ T1564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.321977][ T1564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.355866][ T1564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.363139][ T1564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.370705][ T1564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.377907][ T1564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.389850][ T1564] : (slave bridge0): Enslaving as an active interface with an up link [ 1507.426751][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.434124][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.733489][ T1595] 9: entered promiscuous mode [ 1507.764309][ T1595] syzkaller0: entered promiscuous mode [ 1507.780716][ T1595] syzkaller0: entered allmulticast mode [ 1508.115243][ T1613] tipc: Failed to remove unknown binding: 66,0,0/3753555056:1759431534/1759431536 [ 1508.157030][ T1613] tipc: Failed to remove unknown binding: 66,0,0/3753555056:1759431534/1759431535 [ 1508.193491][ T1613] tipc: Failed to remove unknown binding: 66,0,0/3753555056:1759431534/1759431536 [ 1508.195523][ T1616] __nla_validate_parse: 10 callbacks suppressed [ 1508.195541][ T1616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16567'. [ 1508.206587][ T1613] tipc: Failed to remove unknown binding: 66,0,0/3753555056:1759431534/1759431535 [ 1508.407957][ T1622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16568'. [ 1508.666768][ T1640] batadv_slave_1: entered promiscuous mode [ 1508.701458][ T1637] batadv_slave_1: left promiscuous mode [ 1508.748376][ T1646] validate_nla: 2 callbacks suppressed [ 1508.748393][ T1646] netlink: 'syz.0.16574': attribute type 3 has an invalid length. [ 1508.791079][ T1642] vxcan1 speed is unknown, defaulting to 1000 [ 1509.031315][ T1665] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.16579'. [ 1509.166562][ T1673] tipc: Enabled bearer , priority 0 [ 1509.166810][ T1672] netlink: 'syz.2.16581': attribute type 2 has an invalid length. [ 1509.186817][ T1674] tipc: Enabling of bearer rejected, already enabled [ 1509.239126][ T1672] netlink: 124 bytes leftover after parsing attributes in process `syz.2.16581'. [ 1509.252848][ T1673] syzkaller0: entered promiscuous mode [ 1509.271904][ T1673] syzkaller0: entered allmulticast mode [ 1509.385181][ T1682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16584'. [ 1509.454035][ T1673] tipc: Resetting bearer [ 1509.559650][ T1673] tipc: Disabling bearer [ 1509.623139][ T1693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16587'. [ 1509.716921][T27238] net_ratelimit: 14 callbacks suppressed [ 1509.716940][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1509.738578][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1509.842676][ T1693] team0: Port device dummy0 removed [ 1509.857042][ T1642] lo speed is unknown, defaulting to 1000 [ 1509.937319][ T1713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16594'. [ 1509.957162][ T1717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1509.985322][ T1713] batadv1: entered allmulticast mode [ 1510.276033][ T1738] netlink: 'syz.4.16600': attribute type 10 has an invalid length. [ 1510.316974][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1510.332132][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1510.675984][ T1765] ip6t_srh: unknown srh invflags 4000 [ 1510.814970][ T1774] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 1510.913809][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1510.929177][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1511.027028][ T1785] netlink: 'syz.4.16612': attribute type 11 has an invalid length. [ 1511.041645][ T1786] netlink: 'syz.4.16612': attribute type 11 has an invalid length. [ 1511.201043][ T1800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16616'. [ 1511.202581][ T1798] netlink: 'syz.2.16615': attribute type 4 has an invalid length. [ 1511.421373][ T1809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16621'. [ 1511.486767][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1511.502290][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1511.663808][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16624'. [ 1511.713871][ T1827] netlink: 'syz.1.16624': attribute type 13 has an invalid length. [ 1511.783447][ T1821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1511.795697][ T1821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.940748][ T1834] netlink: 'syz.4.16626': attribute type 11 has an invalid length. [ 1511.953747][ T1821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1511.965189][ T1821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.058486][ T1821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.069175][ T1821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.118723][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1512.133178][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1512.214198][ T1821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.224994][ T1821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.320263][ T1852] vxcan1 speed is unknown, defaulting to 1000 [ 1512.426094][T17239] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.448820][T17239] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.464624][ T1847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.498700][T17239] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.509833][T17239] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.545459][T17239] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.565796][T17239] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.590889][T17239] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.599624][T17239] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.758576][ T1862] netlink: 'syz.3.16637': attribute type 3 has an invalid length. [ 1512.901884][T17239] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.911919][T17239] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.931356][T17239] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.940821][T17239] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.949650][ T1852] lo speed is unknown, defaulting to 1000 [ 1513.274093][ T1891] __nla_validate_parse: 7 callbacks suppressed [ 1513.274113][ T1891] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16647'. [ 1513.321448][ T1893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16648'. [ 1513.377962][ T1893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16648'. [ 1513.402159][ T1896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16649'. [ 1513.440478][ T1893] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.16648'. [ 1513.453026][ T1900] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1513.474228][ T1901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16649'. [ 1513.540211][ T1901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16649'. [ 1513.541222][ T1903] netlink: 'syz.2.16649': attribute type 4 has an invalid length. [ 1513.590362][ T1903] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16649'. [ 1513.712869][ T1907] netlink: 'syz.0.16651': attribute type 1 has an invalid length. [ 1513.733920][ T1907] netlink: 'syz.0.16651': attribute type 1 has an invalid length. [ 1513.776345][ T1896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1513.857740][ T1903] .`: renamed from bond0 (while UP) [ 1513.908475][ T1901] 8021q: adding VLAN 0 to HW filter on device .` [ 1513.923668][ T1901] bond6: (slave .`): making interface the new active one [ 1513.933954][ T1901] bond6: (slave .`): Enslaving as an active interface with an up link [ 1514.155777][ T1930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16659'. [ 1514.601051][ T1961] x_tables: unsorted entry at hook 3 [ 1514.610159][ T1965] tipc: Enabling of bearer rejected, failed to enable media [ 1514.784540][ T1976] netlink: 'syz.0.16676': attribute type 39 has an invalid length. [ 1514.844940][ T1982] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1514.884788][ T1983] netlink: 27 bytes leftover after parsing attributes in process `syz.3.16677'. [ 1514.976753][ T1986] netlink: 'syz.1.16678': attribute type 83 has an invalid length. [ 1514.998200][ T1986] syzkaller0: entered promiscuous mode [ 1515.003749][ T1986] syzkaller0: entered allmulticast mode [ 1515.210074][T27238] net_ratelimit: 10 callbacks suppressed [ 1515.210095][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1515.230469][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1515.468843][ T2012] netlink: 'syz.0.16685': attribute type 1 has an invalid length. [ 1515.478700][T23179] bond0 (unregistering): (slave ip6gre2): Releasing backup interface [ 1515.767478][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1515.781989][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1516.021060][T23179] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.031374][T23179] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.042271][T23179] .` (unregistering): Released all slaves [ 1516.053811][T23179] bond0 (unregistering): Released all slaves [ 1516.069519][T23179] bond1 (unregistering): Released all slaves [ 1516.083050][T23179] bond2 (unregistering): Released all slaves [ 1516.105433][T23179] bond3 (unregistering): Released all slaves [ 1516.119274][T23179] bond4 (unregistering): Released all slaves [ 1516.133086][T23179] bond5 (unregistering): Released all slaves [ 1516.153952][T23179] bond6 (unregistering): Released all slaves [ 1516.167815][T23179] bond7 (unregistering): Released all slaves [ 1516.181589][T23179] bond8 (unregistering): Released all slaves [ 1516.200860][T23179] bond9 (unregistering): Released all slaves [ 1516.306827][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1516.321248][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1516.462389][T23179] : left promiscuous mode [ 1516.581825][T23179] tipc: Left network mode [ 1516.582790][ T2049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1516.594479][ T2049] IPv6: NLM_F_CREATE should be set when creating new route [ 1516.609564][ T2050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1516.866629][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1516.881224][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1517.482156][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1517.497023][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1517.994388][ T2119] netlink: 'syz.0.16712': attribute type 1 has an invalid length. [ 1518.168027][ T2126] netlink: 'syz.1.16715': attribute type 11 has an invalid length. [ 1518.223210][ T2132] netlink: 'syz.1.16715': attribute type 1 has an invalid length. [ 1518.333751][ T2126] netlink: 'syz.1.16715': attribute type 11 has an invalid length. [ 1518.625317][ T2146] syzkaller0: entered promiscuous mode [ 1518.658712][ T2146] syzkaller0: entered allmulticast mode [ 1518.665456][ T2145] __nla_validate_parse: 11 callbacks suppressed [ 1518.665512][ T2145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16718'. [ 1518.692185][ T2158] netlink: 'syz.1.16720': attribute type 10 has an invalid length. [ 1518.756318][T23179] 0·: left promiscuous mode [ 1518.769044][T23179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.791628][T23179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.808622][T23179] batman_adv: batadv0: Removing interface: dummy0 [ 1519.037227][T23179] team0 (unregistering): Port device team_slave_1 removed [ 1519.056290][T23179] team0 (unregistering): Port device team_slave_0 removed [ 1520.591840][T23177] net_ratelimit: 10 callbacks suppressed [ 1520.591862][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1520.612954][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1521.150904][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1521.165694][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1521.697812][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1521.713001][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1522.247591][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1522.262098][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1522.334157][ T2158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.350513][ T2158] : (slave batadv0): Enslaving as an active interface with an up link [ 1522.412631][ T2184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16725'. [ 1522.451236][ T2178] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1522.461524][ T2178] syzkaller1: Linktype set failed because interface is up [ 1522.678111][ T2201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16730'. [ 1522.786543][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1522.800980][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1522.848387][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1522.905952][T23179] IPVS: stop unused estimator thread 0... [ 1522.952243][ T2217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16735'. [ 1523.093572][ T2227] bond6 (unregistering): Released all slaves [ 1523.142384][ T2230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16740'. [ 1523.154730][ T2231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16740'. [ 1523.164636][ T2230] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16740'. [ 1523.176559][ T2230] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16740'. [ 1523.416044][ T2248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16747'. [ 1523.452872][ T2248] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1523.467976][ T2248] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 1523.484061][ T2250] netlink: 'syz.3.16748': attribute type 1 has an invalid length. [ 1523.486856][ T2248] team0: Failed to send options change via netlink (err -105) [ 1523.544392][ T2248] team0: Port device batadv1 added [ 1523.640469][ T2267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16753'. [ 1523.819949][ T2287] netlink: 'syz.3.16759': attribute type 2 has an invalid length. [ 1523.835412][ T2287] 9: entered promiscuous mode [ 1524.293463][ T2321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16766'. [ 1524.319254][ T2318] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1524.324977][ T2322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16766'. [ 1524.341779][ T2318] bond6 (unregistering): Released all slaves [ 1524.345932][ T2321] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16766'. [ 1524.495138][ T2329] syzkaller0: entered promiscuous mode [ 1524.501786][ T2329] syzkaller0: entered allmulticast mode [ 1524.519875][ T2329] tipc: Enabled bearer , priority 0 [ 1524.594746][ T2328] tipc: Resetting bearer [ 1524.644016][ T2349] netlink: 'syz.2.16772': attribute type 12 has an invalid length. [ 1524.653500][ T2349] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.16772'. [ 1524.654622][ T2328] tipc: Disabling bearer [ 1524.719797][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16772'. [ 1525.061020][ T2371] netlink: 59 bytes leftover after parsing attributes in process `syz.1.16782'. [ 1525.077874][ T2371] ipvlan2: entered allmulticast mode [ 1525.080706][ T2376] IPVS: length: 91 != 8 [ 1525.083195][ T2371] batadv_slave_1: entered allmulticast mode [ 1525.085483][ T2371] batman_adv: batadv0: Adding interface: ipvlan2 [ 1525.100107][ T2371] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.125851][ T2371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.137956][ T2371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.148979][ T2371] batman_adv: batadv0: Interface activated: ipvlan2 [ 1525.229683][ T2383] syzkaller0: entered allmulticast mode [ 1525.579687][ T2392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16788'. [ 1525.589149][ T2392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16788'. [ 1525.600543][ T2392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16788'. [ 1525.620599][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16792'. [ 1525.828851][ T2410] syzkaller0: entered promiscuous mode [ 1525.860789][ T2410] syzkaller0: entered allmulticast mode [ 1525.879996][ T2410] tipc: Enabled bearer , priority 0 [ 1525.940627][T27238] net_ratelimit: 65 callbacks suppressed [ 1525.940648][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1525.960869][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1525.975439][ T2409] tipc: Resetting bearer [ 1526.057728][ T2409] tipc: Disabling bearer [ 1526.136316][ T2434] syzkaller0: entered promiscuous mode [ 1526.151996][ T2434] syzkaller0: entered allmulticast mode [ 1526.507305][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1526.521925][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1526.946870][ T2544] syzkaller0: entered promiscuous mode [ 1526.952493][ T2544] syzkaller0: entered allmulticast mode [ 1527.086542][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1527.101098][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1527.141971][ T2564] netlink: 'syz.2.16823': attribute type 21 has an invalid length. [ 1527.407977][ T2581] bond7: Removing last arp target with arp_interval on [ 1527.439620][ T2585] netlink: zone id is out of range [ 1527.444782][ T2585] netlink: zone id is out of range [ 1527.452669][ T2585] netlink: zone id is out of range [ 1527.471188][ T2585] netlink: zone id is out of range [ 1527.583333][ T2597] netlink: 'syz.0.16830': attribute type 1 has an invalid length. [ 1528.133241][ T2640] tipc: Enabling of bearer rejected, failed to enable media [ 1528.273668][ C0] vcan0: j1939_tp_rxtimer: 0xffff888092922400: rx timeout, send abort [ 1528.283326][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888092922400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1528.370434][ T2664] netlink: 'syz.4.16844': attribute type 10 has an invalid length. [ 1528.401006][ T2664] syzkaller0: entered promiscuous mode [ 1528.417340][ T2664] syzkaller0: entered allmulticast mode [ 1528.676526][ T2689] syzkaller0: entered promiscuous mode [ 1528.688859][ T2689] syzkaller0: entered allmulticast mode [ 1528.882476][ T2704] tipc: Enabled bearer , priority 0 [ 1528.892574][T27238] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.901552][T27238] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.933739][ T2706] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.953809][ T2706] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.976832][T27238] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.987910][ T2684] tipc: Resetting bearer [ 1529.017187][ T2684] tipc: Disabling bearer [ 1529.033586][T27238] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.045118][ T2706] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.061080][ T2706] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.087366][ T2708] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 1529.171550][ T2706] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.181648][ T2713] netlink: 'syz.4.16857': attribute type 1 has an invalid length. [ 1529.181673][ T2713] netlink: 'syz.4.16857': attribute type 3 has an invalid length. [ 1529.181685][ T2713] netlink: 'syz.4.16857': attribute type 1 has an invalid length. [ 1529.209942][ T2706] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.300737][ T2706] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1529.320787][ T2706] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.436536][ T2737] netlink: 'syz.2.16862': attribute type 1 has an invalid length. [ 1529.460416][ T2737] __nla_validate_parse: 17 callbacks suppressed [ 1529.460436][ T2737] netlink: 88 bytes leftover after parsing attributes in process `syz.2.16862'. [ 1529.481225][T23179] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.487141][ T2737] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16862'. [ 1529.498723][ T2737] netlink: 'syz.2.16862': attribute type 1 has an invalid length. [ 1529.500731][T23179] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.506926][ T2737] netlink: 634 bytes leftover after parsing attributes in process `syz.2.16862'. [ 1529.534739][T23179] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.545869][T23179] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.569502][T27236] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.585674][T27236] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.635668][T27236] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.657796][T27236] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.791287][ T2759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16867'. [ 1529.807623][ T2759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16867'. [ 1530.063371][ T2779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16874'. [ 1530.187554][ T2783] xt_ecn: cannot match TCP bits for non-tcp packets [ 1530.201862][ T2784] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1530.365767][ T2799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16879'. [ 1530.395135][ T2800] netlink: 1 bytes leftover after parsing attributes in process `syz.0.16880'. [ 1530.419897][ T2802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16881'. [ 1530.472078][ T2806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16883'. [ 1530.975218][ T2858] net_ratelimit: 163 callbacks suppressed [ 1530.975238][ T2858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1531.060033][ T2874] : (slave batadv0): Releasing backup interface [ 1531.266655][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1531.281462][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1531.579528][ T2911] syzkaller0: entered promiscuous mode [ 1531.585131][ T2911] syzkaller0: entered allmulticast mode [ 1531.652740][T12293] IPVS: starting estimator thread 0... [ 1531.662715][ T2920] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 1531.671095][ T2911] tipc: Enabled bearer , priority 0 [ 1531.730060][ T2910] tipc: Resetting bearer [ 1531.749883][ T2918] IPVS: using max 31 ests per chain, 74400 per kthread [ 1531.788673][ T2910] tipc: Disabling bearer [ 1531.836209][ T2936] netlink: 'syz.3.16913': attribute type 8 has an invalid length. [ 1531.856689][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1531.871125][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1531.889622][ T2939] bond1: entered allmulticast mode [ 1531.970191][ T2939] bond6: (slave .`): Releasing active interface [ 1532.062745][ T2939] batman_adv: batadv0: Interface deactivated: dummy0 [ 1532.085196][ T2939] batman_adv: batadv0: Removing interface: dummy0 [ 1532.103586][ T2939] bridge_slave_0: left allmulticast mode [ 1532.109640][ T2939] bridge_slave_0: left promiscuous mode [ 1532.116069][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.130480][ T2939] bridge_slave_1: left allmulticast mode [ 1532.136234][ T2939] bridge_slave_1: left promiscuous mode [ 1532.142676][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.159541][ T2939] veth0_to_bond: left allmulticast mode [ 1532.165206][ T2939] veth0_to_bond: left promiscuous mode [ 1532.184347][ T2939] bridge2: port 1(veth0_to_bond) entered disabled state [ 1532.197871][ T2939] .`: (slave bond_slave_0): Releasing backup interface [ 1532.211246][ T2939] .`: (slave bond_slave_1): Releasing backup interface [ 1532.235448][ T2939] team0: Port device team_slave_0 removed [ 1532.245486][ T2939] team0: Port device team_slave_1 removed [ 1532.256320][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1532.264297][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1532.274452][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1532.283144][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.292096][ T2939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1532.396890][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1532.412124][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1532.453910][ T2964] netlink: 'syz.4.16917': attribute type 10 has an invalid length. [ 1532.647403][ T2970] syzkaller0: entered promiscuous mode [ 1532.671109][ T2970] syzkaller0: entered allmulticast mode [ 1532.711337][ T2983] lo: entered allmulticast mode [ 1533.022797][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1533.037797][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1535.341266][ T2969] lo: left allmulticast mode [ 1535.632471][ T3035] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1535.702529][ T3037] netlink: 'syz.4.16935': attribute type 21 has an invalid length. [ 1535.703212][ T3041] netlink: 'syz.4.16935': attribute type 21 has an invalid length. [ 1536.023447][T27237] tipc: Resetting bearer [ 1536.113557][ T3058] __nla_validate_parse: 14 callbacks suppressed [ 1536.113579][ T3058] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16942'. [ 1536.131133][T27235] net_ratelimit: 10 callbacks suppressed [ 1536.131144][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1536.151498][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1536.681335][T27237] bond2 (unregistering): (slave bridge6): Releasing active interface [ 1536.689724][T27237] bridge6 (unregistering): left promiscuous mode [ 1536.697099][T27237] bridge6 (unregistering): left allmulticast mode [ 1536.706746][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1536.721501][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1536.759917][T27237] tipc: Disabling bearer [ 1537.062272][T27237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.071368][T27237] bond_slave_0: left allmulticast mode [ 1537.079588][T27237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.091616][T27237] bond0 (unregistering): Released all slaves [ 1537.102248][T27237] bond1 (unregistering): Released all slaves [ 1537.120107][T27237] bond2 (unregistering): Released all slaves [ 1537.133687][T27237] bond3 (unregistering): Released all slaves [ 1537.159381][T27237] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1537.170908][T27237] bond4 (unregistering): Released all slaves [ 1537.188216][T27237] bond5 (unregistering): Released all slaves [ 1537.210416][T27237] bond6 (unregistering): Released all slaves [ 1537.233423][ T3070] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16945'. [ 1537.246665][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1537.261063][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1537.513384][T27237] : left promiscuous mode [ 1537.572197][ T3079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16948'. [ 1537.583605][ T3086] netlink: 'syz.3.16951': attribute type 1 has an invalid length. [ 1537.622109][T27237] tipc: Left network mode [ 1537.679880][ T3086] bond6: entered promiscuous mode [ 1537.710278][ T3096] sctp: [Deprecated]: syz.0.16950 (pid 3096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1537.710278][ T3096] Use struct sctp_sack_info instead [ 1537.727823][ T3096] sctp: [Deprecated]: syz.0.16950 (pid 3096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1537.727823][ T3096] Use struct sctp_sack_info instead [ 1537.740951][ T3086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1537.826831][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1537.841788][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1537.863335][ T3101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16950'. [ 1538.436520][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1538.451201][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1539.139205][ T3079] veth5: entered allmulticast mode [ 1539.145046][ T3097] netlink: 92 bytes leftover after parsing attributes in process `syz.2.16952'. [ 1539.235126][ T3106] vxcan1 speed is unknown, defaulting to 1000 [ 1539.537429][ T3132] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16960'. [ 1539.569422][ T3131] ipvlan0: entered allmulticast mode [ 1539.572239][T27110] IPVS: starting estimator thread 0... [ 1539.676713][ T3133] IPVS: using max 28 ests per chain, 67200 per kthread [ 1539.809796][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16962'. [ 1539.825278][ T3141] netlink: 'syz.3.16963': attribute type 3 has an invalid length. [ 1539.836118][ T3127] vxcan1 speed is unknown, defaulting to 1000 [ 1539.868899][ T3143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16964'. [ 1540.119777][ T3155] x_tables: unsorted entry at hook 1 [ 1540.135850][ T3158] nbd: couldn't find a device at index 4 [ 1540.142259][ T2472] IPVS: starting estimator thread 0... [ 1540.237488][ T3161] IPVS: using max 28 ests per chain, 67200 per kthread [ 1540.264636][ T3166] x_tables: duplicate underflow at hook 1 [ 1540.403495][ T3173] netlink: 'syz.1.16971': attribute type 4 has an invalid length. [ 1540.608099][ T3189] netlink: 'syz.1.16976': attribute type 1 has an invalid length. [ 1540.672550][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.688593][ T3127] lo speed is unknown, defaulting to 1000 [ 1540.692715][ T3185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16975'. [ 1540.740307][ T3189] bond0: (slave veth0_to_bond): making interface the new active one [ 1540.750734][ T3189] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1540.810057][ T3192] bond0: (slave veth7): Enslaving as an active interface with a down link [ 1540.959688][ T3199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16979'. [ 1540.970030][ T3201] x_tables: duplicate entry at hook 3 [ 1541.169397][ T3208] net_ratelimit: 11 callbacks suppressed [ 1541.169418][ T3208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1541.184067][ T3211] netlink: 'syz.4.16980': attribute type 1 has an invalid length. [ 1541.244071][ T3106] lo speed is unknown, defaulting to 1000 [ 1541.514948][ T3217] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1541.529894][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1541.544406][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1541.583497][ T3221] netlink: 'syz.4.16985': attribute type 29 has an invalid length. [ 1541.596713][ T3221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16985'. [ 1541.606175][ T3222] netlink: 'syz.4.16985': attribute type 29 has an invalid length. [ 1541.627864][ T3222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16985'. [ 1541.806202][ T3228] netlink: 'syz.3.16987': attribute type 3 has an invalid length. [ 1541.877024][T27237] hsr_slave_1: left promiscuous mode [ 1541.883335][T27237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.923690][T27237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.955752][T27237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.981158][T27237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.001342][T27237] veth1_macvtap: left promiscuous mode [ 1542.077106][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1542.092391][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1542.108330][T27237] pim6reg527 (unregistering): left allmulticast mode [ 1542.270582][T27237] team0 (unregistering): Port device team_slave_1 removed [ 1542.307840][T27237] team0 (unregistering): Port device team_slave_0 removed [ 1542.320648][T27237] veth0_to_team (unregistering): left allmulticast mode [ 1542.508459][ T3248] syzkaller0: entered promiscuous mode [ 1542.528345][ T3248] syzkaller0: entered allmulticast mode [ 1542.578320][ T3259] tipc: Started in network mode [ 1542.592955][ T3259] tipc: Node identity f64df3752b4a, cluster identity 4711 [ 1542.619855][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1542.619943][ T3259] tipc: Enabled bearer , priority 0 [ 1542.635371][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1542.711928][ T3242] tipc: Resetting bearer [ 1542.842701][ T3242] tipc: Disabling bearer [ 1543.189144][ T3285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17002'. [ 1543.200706][ T3285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17002'. [ 1543.210463][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1543.225100][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1543.248859][ T3285] netlink: 92 bytes leftover after parsing attributes in process `syz.1.17002'. [ 1543.301392][T27237] IPVS: stop unused estimator thread 0... [ 1543.309950][ T3292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17003'. [ 1543.331267][ T3291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17003'. [ 1543.475295][ T3291] netlink: 220 bytes leftover after parsing attributes in process `syz.0.17003'. [ 1543.527380][ T3306] netlink: 'syz.3.17007': attribute type 8 has an invalid length. [ 1543.538310][ T3306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17007'. [ 1543.569187][ T3309] x_tables: duplicate underflow at hook 1 [ 1543.710591][ T3318] netlink: 10 bytes leftover after parsing attributes in process `syz.4.17012'. [ 1543.756783][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1545.941419][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1546.317261][T27236] net_ratelimit: 10 callbacks suppressed [ 1546.317282][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1546.339306][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1546.856678][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1546.871412][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1547.387067][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1547.401698][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1547.927388][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1547.941823][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1548.466802][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1548.481317][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1550.956470][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1550.964612][ C0] lec:lec_tx_timeout: lec0 [ 1551.556630][T27239] net_ratelimit: 10 callbacks suppressed [ 1551.556650][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1551.576669][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1552.096701][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1552.111266][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1552.626646][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1552.641210][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1553.156995][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1553.171567][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1553.689873][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1553.704392][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1556.664267][ T7677] lec:lec_start_xmit: lec0:No lecd attached [ 1556.776692][T17239] net_ratelimit: 10 callbacks suppressed [ 1556.776711][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1556.796895][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1557.326721][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1557.341302][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1557.866771][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1557.881404][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1558.396666][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1558.411182][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1558.927437][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1558.941867][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1561.846444][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 1561.854519][ C0] lec:lec_tx_timeout: lec0 [ 1562.026817][T23177] net_ratelimit: 10 callbacks suppressed [ 1562.026837][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1562.047344][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1562.567619][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1562.582462][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1563.106648][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1563.121136][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1563.646603][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1563.661096][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1564.176870][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1564.191255][T23177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1565.153095][ T3334] netlink: 'syz.4.17017': attribute type 1 has an invalid length. [ 1565.215074][ T3334] __nla_validate_parse: 2 callbacks suppressed [ 1565.215091][ T3334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17017'. [ 1565.493034][ T3359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17021'. [ 1565.504319][ T3357] netlink: 'syz.2.17022': attribute type 10 has an invalid length. [ 1565.504433][ T3355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17020'. [ 1565.527376][ T3357] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1565.687240][ T3362] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1565.934873][ T3383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17030'. [ 1565.979041][ T3383] bond6: entered promiscuous mode [ 1565.984718][ T3383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1565.996046][ T3387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17033'. [ 1566.010506][ T3387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17033'. [ 1566.013255][ T3392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17034'. [ 1566.049578][ T3392] netlink: 232 bytes leftover after parsing attributes in process `syz.2.17034'. [ 1566.062555][ T3383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1566.070354][ T3383] bond6: (slave sit3): The slave device specified does not support setting the MAC address [ 1566.082211][ T3383] bond6: (slave sit3): Error -95 calling set_mac_address [ 1566.294118][ T3419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17040'. [ 1566.342346][ T3424] netlink: 'syz.1.17042': attribute type 1 has an invalid length. [ 1566.355503][ T3424] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17042'. [ 1566.370739][ T3422] syzkaller0: entered promiscuous mode [ 1566.376661][ T3422] syzkaller0: entered allmulticast mode [ 1566.389753][ T3422] tipc: Enabled bearer , priority 0 [ 1566.408369][ T3421] tipc: Resetting bearer [ 1566.449387][ T3421] tipc: Disabling bearer [ 1567.060241][ T3475] syzkaller0: entered promiscuous mode [ 1567.076902][ T3475] syzkaller0: entered allmulticast mode [ 1567.096003][ T3475] tipc: Enabled bearer , priority 0 [ 1567.107456][ T3474] tipc: Resetting bearer [ 1567.167991][ T3474] tipc: Disabling bearer [ 1567.260321][T27236] net_ratelimit: 10 callbacks suppressed [ 1567.260341][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1567.281701][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1567.803420][ T3534] tc_dump_action: action bad kind [ 1567.809089][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1567.823722][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1567.909282][ T3548] netlink: 'syz.1.17078': attribute type 1 has an invalid length. [ 1567.981190][ T3545] syzkaller0: entered promiscuous mode [ 1567.997401][ T3545] syzkaller0: entered allmulticast mode [ 1568.046762][ T3545] tipc: Enabled bearer , priority 0 [ 1568.107032][ T3544] tipc: Resetting bearer [ 1568.143934][ T3544] tipc: Disabling bearer [ 1568.220933][ T3572] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 1568.347112][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1568.362002][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1568.795763][ T3605] netlink: 'syz.4.17093': attribute type 11 has an invalid length. [ 1568.906998][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1568.922110][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1569.134169][ T3624] bond8: entered promiscuous mode [ 1569.140043][ T3624] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1569.210789][ T3632] bridge8: entered promiscuous mode [ 1569.232734][ T3632] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 1569.449908][ T3647] netlink: 'syz.1.17105': attribute type 3 has an invalid length. [ 1569.456816][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1569.472241][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1569.662817][ T3657] netlink: 'syz.3.17111': attribute type 10 has an invalid length. [ 1569.817357][ T3669] netlink: 'syz.3.17114': attribute type 3 has an invalid length. [ 1569.941947][ T3681] netlink: 'syz.3.17114': attribute type 3 has an invalid length. [ 1570.047207][ T3690] xt_bpf: check failed: parse error [ 1570.283467][ T3705] netlink: 'syz.0.17127': attribute type 10 has an invalid length. [ 1570.325621][ T3705] syzkaller1: entered promiscuous mode [ 1570.332398][ T3705] syzkaller1: entered allmulticast mode [ 1570.467737][ T3711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.572699][ T3711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.620704][ T3726] __nla_validate_parse: 18 callbacks suppressed [ 1570.620724][ T3726] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17132'. [ 1570.637055][ T3726] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17132'. [ 1570.658374][ T3726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17132'. [ 1570.749317][ T3711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.853412][ T3711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.972484][T30770] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.029857][T27237] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.038461][T27237] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.071434][T27233] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.118079][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17141'. [ 1571.170561][ T3753] hsr_slave_1 (unregistering): left promiscuous mode [ 1571.360144][ T3763] netlink: 'syz.0.17143': attribute type 1 has an invalid length. [ 1571.372065][ T3763] netlink: 'syz.0.17143': attribute type 3 has an invalid length. [ 1571.380312][ T3763] netlink: 172 bytes leftover after parsing attributes in process `syz.0.17143'. [ 1571.427506][ T3763] NCSI netlink: No device for ifindex 813332851 [ 1571.742365][ T3787] netlink: 'syz.3.17152': attribute type 29 has an invalid length. [ 1571.752163][ T3789] netlink: 596 bytes leftover after parsing attributes in process `syz.3.17152'. [ 1572.281026][ T3820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17160'. [ 1572.330497][ T3827] netlink: 'syz.2.17164': attribute type 1 has an invalid length. [ 1572.337558][ T3820] vlan0: entered promiscuous mode [ 1572.348478][ T3820] geneve1: entered promiscuous mode [ 1572.354015][ T3820] vlan0: entered allmulticast mode [ 1572.360336][ T3820] geneve1: entered allmulticast mode [ 1572.365996][ T3826] C: renamed from lo [ 1572.371894][ T3826] net_ratelimit: 13 callbacks suppressed [ 1572.371911][ T3826] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1572.400838][ T3827] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1572.413290][ T3822] syzkaller0: entered promiscuous mode [ 1572.418300][ T3826] netlink: 'syz.4.17163': attribute type 1 has an invalid length. [ 1572.446774][ T3822] syzkaller0: entered allmulticast mode [ 1572.596621][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1572.611195][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1572.673030][ T3847] bridge0: port 3(gretap0) entered blocking state [ 1572.679982][ T3847] bridge0: port 3(gretap0) entered disabled state [ 1572.687072][ T3847] gretap0: entered allmulticast mode [ 1572.694386][ T3847] gretap0: entered promiscuous mode [ 1572.743171][ T3851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17170'. [ 1572.918013][ T3868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17175'. [ 1572.957386][ T3873] syzkaller0: entered promiscuous mode [ 1572.969270][ T3873] syzkaller0: entered allmulticast mode [ 1573.093678][ T3873] tipc: Enabled bearer , priority 0 [ 1573.105155][ T3876] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1573.126775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.137697][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1573.153000][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1573.182314][ T3876] netlink: 'syz.0.17177': attribute type 1 has an invalid length. [ 1573.190861][ T3872] tipc: Resetting bearer [ 1573.248155][ T3872] tipc: Disabling bearer [ 1573.302581][ T3876] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1573.330380][ T3889] bond11: (slave gretap2): making interface the new active one [ 1573.382133][ T3889] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 1573.614994][ T3918] tipc: New replicast peer: 0.0.0.0 [ 1573.625052][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17185'. [ 1573.638604][ T3918] tipc: Enabled bearer , priority 10 [ 1573.683338][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1573.697971][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1573.717964][ T3919] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1573.725965][ T3922] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 1573.743337][ T3919] syzkaller0: entered promiscuous mode [ 1573.749553][ T3919] syzkaller0: entered allmulticast mode [ 1574.272208][ T3962] netlink: 'syz.3.17196': attribute type 10 has an invalid length. [ 1574.292409][ T3964] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 1574.336801][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1574.402670][ T3972] syzkaller0: entered promiscuous mode [ 1574.418635][ T3972] syzkaller0: entered allmulticast mode [ 1574.494182][ T3974] syzkaller1: entered promiscuous mode [ 1574.502878][ T3974] syzkaller1: entered allmulticast mode [ 1574.674462][ T3042] tipc: Node number set to 3708285813 [ 1574.753126][ T3992] x_tables: duplicate underflow at hook 1 [ 1575.176738][T27237] tipc: Subscription rejected, illegal request [ 1575.643751][ T4058] __nla_validate_parse: 8 callbacks suppressed [ 1575.643770][ T4058] netlink: 660 bytes leftover after parsing attributes in process `syz.1.17228'. [ 1575.685825][ T4059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17229'. [ 1575.723888][ T4059] netlink: 'syz.2.17229': attribute type 1 has an invalid length. [ 1575.760736][ T4062] syzkaller0: entered promiscuous mode [ 1575.766252][ T4062] syzkaller0: entered allmulticast mode [ 1575.781782][ T4059] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17229'. [ 1575.862006][ T4066] gre2: entered promiscuous mode [ 1575.898546][ T4066] gre2: entered allmulticast mode [ 1576.060651][ T4081] netlink: 108 bytes leftover after parsing attributes in process `syz.2.17235'. [ 1576.133198][ T4085] ip6tnl2: entered allmulticast mode [ 1576.147728][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17236'. [ 1576.294133][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17239'. [ 1576.306236][ T4093] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 1576.336979][ T4093] team0: entered promiscuous mode [ 1576.343034][ T4093] team0: entered allmulticast mode [ 1576.355661][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17239'. [ 1576.964261][ T4125] netlink: 'syz.4.17248': attribute type 12 has an invalid length. [ 1577.014705][ T4125] bond2: option primary_reselect: invalid value (255) [ 1577.035438][ T4125] bond2 (unregistering): Released all slaves [ 1577.231566][ T4124] pim6reg1: entered promiscuous mode [ 1577.246580][ T4124] pim6reg1: entered allmulticast mode [ 1577.416479][T27233] net_ratelimit: 14 callbacks suppressed [ 1577.416497][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1577.436761][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1577.593706][ T4163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17258'. [ 1577.603403][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.624670][ T4166] netlink: 'syz.4.17259': attribute type 1 has an invalid length. [ 1577.647602][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.665845][ T4156] tipc: Resetting bearer [ 1577.693430][ T4172] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17259'. [ 1577.711728][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17259'. [ 1577.772117][ T4156] bond5: left allmulticast mode [ 1577.778596][ T4156] bond5: left promiscuous mode [ 1577.823224][ T4156] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1577.980420][T27237] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.998211][T27237] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.015462][T27237] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.026303][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1578.042962][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1578.047618][ T4189] netlink: 'syz.2.17268': attribute type 2 has an invalid length. [ 1578.084365][T27237] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.148064][ T4185] block nbd12: server does not support multiple connections per device. [ 1578.157116][ T4185] block nbd12: shutting down sockets [ 1578.579272][ T4228] netlink: 'syz.0.17279': attribute type 3 has an invalid length. [ 1578.607310][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1578.621738][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1578.760117][ T4242] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1578.842995][ T4250] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1578.858982][ T4250] .` (unregistering): Released all slaves [ 1579.104897][ T4273] netlink: 'syz.0.17290': attribute type 1 has an invalid length. [ 1579.171394][ T4274] bond7 (unregistering): Released all slaves [ 1579.188255][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1579.203472][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1579.356162][ T4288] netlink: 'syz.4.17296': attribute type 1 has an invalid length. [ 1579.746192][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1579.786225][ T4321] veth0_macvtap: left promiscuous mode [ 1580.291114][ T4358] netlink: 'syz.1.17318': attribute type 33 has an invalid length. [ 1580.353213][ T4359] netlink: 'syz.0.17316': attribute type 21 has an invalid length. [ 1580.361499][ T4359] netlink: 'syz.0.17316': attribute type 22 has an invalid length. [ 1580.748280][ T4389] validate_nla: 2 callbacks suppressed [ 1580.748300][ T4389] netlink: 'syz.1.17329': attribute type 1 has an invalid length. [ 1580.802310][ T4397] netlink: 'syz.1.17329': attribute type 1 has an invalid length. [ 1580.837117][ T4389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1580.857343][ T4389] __nla_validate_parse: 17 callbacks suppressed [ 1580.857374][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17329'. [ 1580.938393][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17331'. [ 1581.081026][ T4425] xt_TCPMSS: Only works on TCP SYN packets [ 1581.230848][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17343'. [ 1581.240713][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17343'. [ 1581.306502][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17343'. [ 1581.325294][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17343'. [ 1581.357275][ T4446] netlink: 'syz.3.17344': attribute type 1 has an invalid length. [ 1581.378912][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17345'. [ 1581.400303][ T4444] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1581.407134][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17345'. [ 1581.429976][ T4444] bond4 (unregistering): Released all slaves [ 1581.644386][ T4460] netlink: 'syz.4.17350': attribute type 21 has an invalid length. [ 1581.664552][ T4460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17350'. [ 1581.685402][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17351'. [ 1581.875008][ T4478] netlink: 'syz.3.17357': attribute type 12 has an invalid length. [ 1582.105903][ T4496] syzkaller0: entered promiscuous mode [ 1582.116462][ T4496] syzkaller0: entered allmulticast mode [ 1582.151221][ T4496] tipc: Enabled bearer , priority 0 [ 1582.175787][ T4504] xt_hashlimit: size too large, truncated to 1048576 [ 1582.183555][ T4495] tipc: Resetting bearer [ 1582.236866][ T4495] tipc: Disabling bearer [ 1582.264318][ T4506] netlink: 'syz.2.17365': attribute type 12 has an invalid length. [ 1582.279756][ T4507] –: renamed from vxcan1 [ 1582.435771][ T4517] syzkaller1: entered promiscuous mode [ 1582.443249][ T4517] syzkaller1: entered allmulticast mode [ 1582.530892][ T4531] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1582.682267][ T4536] netlink: 'syz.2.17372': attribute type 15 has an invalid length. [ 1582.709737][ T4538] net_ratelimit: 12 callbacks suppressed [ 1582.709759][ T4538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1582.816988][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1582.831795][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1582.852649][ T4549] netlink: 'syz.0.17377': attribute type 10 has an invalid length. [ 1582.889336][ T4549] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1582.953480][ T4551] syzkaller0: entered promiscuous mode [ 1582.959076][ T4551] syzkaller0: entered allmulticast mode [ 1582.993232][ T4551] tipc: Enabled bearer , priority 0 [ 1583.046293][ T4563] rdma_op ffff88802f2b51f0 conn xmit_rdma 0000000000000000 [ 1583.198163][ T4570] tipc: Enabled bearer , priority 0 [ 1583.205078][ T4571] netlink: 'syz.3.17383': attribute type 29 has an invalid length. [ 1583.245850][ T4550] tipc: Resetting bearer [ 1583.271828][ T4550] tipc: Disabling bearer [ 1583.320022][ T4564] syzkaller0: entered promiscuous mode [ 1583.325653][ T4564] syzkaller0: entered allmulticast mode [ 1583.334921][ T4564] tipc: Resetting bearer [ 1583.342378][ T4565] netlink: 'syz.3.17383': attribute type 29 has an invalid length. [ 1583.352536][ T4560] veth0_to_bond: mtu less than device minimum [ 1583.379365][ T4573] block nbd0: reconnected socket [ 1583.379389][T27666] block nbd0: Receive control failed (result -107) [ 1583.394782][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1583.410016][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1583.448589][ T4559] tipc: Resetting bearer [ 1583.945436][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1583.960319][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1584.476700][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1584.491833][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1586.272315][ T4559] tipc: Disabling bearer [ 1586.501806][T27237] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1586.862509][T27237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.874768][T27237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.885258][T27237] bond0 (unregistering): Released all slaves [ 1586.899380][T27237] bond1 (unregistering): Released all slaves [ 1586.912507][T27237] bond2 (unregistering): Released all slaves [ 1586.925616][T27237] bond3 (unregistering): Released all slaves [ 1586.942057][T27237] bond4 (unregistering): Released all slaves [ 1586.955255][T27237] bond5 (unregistering): Released all slaves [ 1586.972773][T27237] bond6 (unregistering): Released all slaves [ 1586.990097][T27237] bond7 (unregistering): (slave lo): Releasing backup interface [ 1587.001100][T27237] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1587.012675][T27237] bond7 (unregistering): Released all slaves [ 1587.029116][T27237] bond8 (unregistering): Released all slaves [ 1587.043943][T27237] bond9 (unregistering): Released all slaves [ 1587.070150][ T4586] bond4: entered promiscuous mode [ 1587.075603][ T4586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1587.099017][ T4597] .`: renamed from  [ 1587.288068][T16653] tipc: Node number set to 2177049788 [ 1587.307875][T27237] : left promiscuous mode [ 1587.431558][T27237] tipc: Left network mode [ 1587.784165][ T4624] syzkaller0: entered promiscuous mode [ 1587.796511][ T4624] syzkaller0: entered allmulticast mode [ 1587.805987][ T4631] tipc: Enabled bearer , priority 0 [ 1587.844976][ T4623] tipc: Resetting bearer [ 1587.933896][ T4623] tipc: Disabling bearer [ 1587.978413][ T4650] __nla_validate_parse: 15 callbacks suppressed [ 1587.978433][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17404'. [ 1588.089373][T23179] net_ratelimit: 13 callbacks suppressed [ 1588.089399][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1588.109786][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1588.307845][ T4665] vlan1: entered allmulticast mode [ 1588.313014][ T4665] veth0_vlan: entered allmulticast mode [ 1588.654853][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1588.669651][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1588.755978][ T4680] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17414'. [ 1588.861750][ T4686] syzkaller0: entered promiscuous mode [ 1588.878149][ T4686] syzkaller0: entered allmulticast mode [ 1588.902870][ T4686] tipc: Enabled bearer , priority 0 [ 1588.967355][ T4685] tipc: Resetting bearer [ 1589.034589][ T4685] tipc: Disabling bearer [ 1589.054813][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17418'. [ 1589.250657][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1589.265549][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1589.332091][T27237] hsr_slave_0: left promiscuous mode [ 1589.347908][T27237] hsr_slave_1: left promiscuous mode [ 1589.385095][T27237] veth1_vlan: left promiscuous mode [ 1589.400529][T27237] veth0_vlan: left promiscuous mode [ 1589.429543][ T4716] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.17426'. [ 1589.440715][ T4716] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1589.512454][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17426'. [ 1589.521971][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17426'. [ 1589.541093][T27237] team0 (unregistering): Port device batadv0 removed [ 1589.573443][T27237] pim6reg (unregistering): left allmulticast mode [ 1589.632762][T27237] vlan1 (unregistering): left allmulticast mode [ 1589.643551][T27237] veth0_vlan (unregistering): left allmulticast mode [ 1589.707475][T27237] team0 (unregistering): Port device team_slave_1 removed [ 1589.740192][T27237] team0 (unregistering): Port device team_slave_0 removed [ 1589.807406][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1589.821989][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1589.925374][ T4722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17427'. [ 1590.102001][ T4738] validate_nla: 8 callbacks suppressed [ 1590.102019][ T4738] netlink: 'syz.2.17431': attribute type 2 has an invalid length. [ 1590.194348][ T4738] vþ: entered promiscuous mode [ 1590.295697][ T4750] netlink: 'syz.0.17437': attribute type 4 has an invalid length. [ 1590.348008][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1590.450068][ T4757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17438'. [ 1590.471572][ T4764] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1590.654224][ T4773] syzkaller0: entered promiscuous mode [ 1590.672604][ T4773] syzkaller0: entered allmulticast mode [ 1590.703920][ T4780] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1590.775897][T27237] IPVS: stop unused estimator thread 0... [ 1591.103658][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17450'. [ 1591.281957][ T4813] sctp: [Deprecated]: syz.4.17455 (pid 4813) Use of int in max_burst socket option. [ 1591.281957][ T4813] Use struct sctp_assoc_value instead [ 1591.475495][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17459'. [ 1591.947888][ T4854] macsec0: entered promiscuous mode [ 1591.953653][ T4854] macsec0: entered allmulticast mode [ 1591.961367][ T4852] syzkaller0: entered promiscuous mode [ 1591.968657][ T4852] syzkaller0: entered allmulticast mode [ 1591.982899][ T4854] veth1_macvtap: entered allmulticast mode [ 1591.992450][ T4854] macsec0: left promiscuous mode [ 1592.000834][ T4854] macsec0: left allmulticast mode [ 1592.006051][ T4854] veth1_macvtap: left allmulticast mode [ 1592.103478][ T4864] netlink: 'syz.4.17468': attribute type 1 has an invalid length. [ 1592.129407][ T4864] netlink: 'syz.4.17468': attribute type 19 has an invalid length. [ 1592.464500][ T4890] hsr_slave_1 (unregistering): left promiscuous mode [ 1592.701941][ T4906] syzkaller0: entered promiscuous mode [ 1592.717356][ T4906] syzkaller0: entered allmulticast mode [ 1592.743601][ T4906] tipc: Enabled bearer , priority 0 [ 1592.754497][ T4902] tipc: Resetting bearer [ 1592.790907][ T4902] tipc: Disabling bearer [ 1593.093090][ T4934] __nla_validate_parse: 7 callbacks suppressed [ 1593.093109][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17494'. [ 1593.174343][ T4942] syzkaller0: entered promiscuous mode [ 1593.183289][ T4942] syzkaller0: entered allmulticast mode [ 1593.325648][T27233] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.345983][T27233] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.377052][T27233] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.446060][T27233] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.459888][T27238] net_ratelimit: 13 callbacks suppressed [ 1593.459907][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1593.479993][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1594.009917][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1594.024668][T27236] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1594.547290][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1594.562313][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1595.106579][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1595.121116][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1595.638044][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1595.652666][T17239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1595.775558][ T4975] netlink: 'syz.3.17508': attribute type 7 has an invalid length. [ 1595.938003][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17514'. [ 1595.954795][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17514'. [ 1596.106639][ T5007] vlan2: entered allmulticast mode [ 1596.116535][ T5007] bridge_slave_0: entered allmulticast mode [ 1596.155461][ T5008] netlink: 176144 bytes leftover after parsing attributes in process `syz.2.17517'. [ 1596.322300][ T5023] netlink: 'syz.4.17522': attribute type 9 has an invalid length. [ 1596.479293][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17523'. [ 1596.999905][ T5064] ip6_vti0: entered promiscuous mode [ 1597.019036][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17533'. [ 1597.084390][ T5069] netlink: 'syz.0.17535': attribute type 10 has an invalid length. [ 1597.131368][ T5072] netlink: 'syz.3.17537': attribute type 1 has an invalid length. [ 1597.152370][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17536'. [ 1597.178314][ T5079] netlink: 'syz.1.17539': attribute type 2 has an invalid length. [ 1597.209396][ T5072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1597.224388][ T5079] vþ: entered promiscuous mode [ 1597.261853][ T5082] bond7: (slave bridge6): making interface the new active one [ 1597.299490][ T5082] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1597.361946][ T5098] netlink: 'syz.2.17541': attribute type 1 has an invalid length. [ 1597.370199][ T5098] netlink: 'syz.2.17541': attribute type 2 has an invalid length. [ 1597.393073][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17542'. [ 1597.415154][ T5090] sctp: [Deprecated]: syz.2.17541 (pid 5090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1597.415154][ T5090] Use struct sctp_sack_info instead [ 1597.427220][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17545'. [ 1597.469547][ T5105] netlink: 'syz.3.17545': attribute type 13 has an invalid length. [ 1597.477901][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17545'. [ 1597.490957][ T5105] netlink: 'syz.3.17545': attribute type 13 has an invalid length. [ 1597.703173][ T5133] netlink: 'syz.2.17549': attribute type 15 has an invalid length. [ 1597.722777][T27233] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 1597.781419][T27233] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 1597.857726][T27233] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 1597.897026][T27233] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 1598.057986][ T5160] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1598.094282][ T5162] bond7: (slave batadv1): Opening slave failed [ 1598.104465][ T5171] __nla_validate_parse: 6 callbacks suppressed [ 1598.104484][ T5171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17559'. [ 1598.132289][ T5172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17556'. [ 1598.232843][ T5165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17559'. [ 1598.242438][ T5165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17559'. [ 1598.282828][ T5183] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17561'. [ 1598.300791][ T5183] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17561'. [ 1598.683408][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17568'. [ 1598.716862][ T5212] net_ratelimit: 12 callbacks suppressed [ 1598.716882][ T5212] openvswitch: netlink: Flow key attr not present in new flow. [ 1598.730942][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1598.745606][T27239] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1598.877840][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17571'. [ 1598.920432][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17573'. [ 1598.930686][ T5229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17573'. [ 1599.241359][ T5250] syzkaller1: entered promiscuous mode [ 1599.247171][ T5250] syzkaller1: entered allmulticast mode [ 1599.293584][ T5250] syzkaller0: entered promiscuous mode [ 1599.301860][ T5250] syzkaller0: entered allmulticast mode [ 1599.307751][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1599.322407][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1599.691007][ T5286] block nbd0: reconnected socket [ 1599.692781][T27666] block nbd0: Receive control failed (result -107) [ 1599.713804][ T5286] bridge0: entered promiscuous mode [ 1599.785271][ T5286] ip6gretap0: entered promiscuous mode [ 1599.817889][ T5286] ip6gretap0: left promiscuous mode [ 1599.827014][ T5286] bridge0: left promiscuous mode [ 1599.872448][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1599.887265][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1600.426596][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1600.441294][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1600.708555][ T5364] ip6tnl4: entered promiscuous mode [ 1600.787317][ T5371] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1600.952434][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.026586][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1601.063079][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.218115][ T5382] bridge_slave_0 (unregistering): left allmulticast mode [ 1601.233064][ T5382] bridge_slave_0 (unregistering): left promiscuous mode [ 1601.255037][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.571389][ T5438] netdevsim0: entered promiscuous mode [ 1601.622593][ T5441] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1601.644352][ T5440] vxcan1 speed is unknown, defaulting to 1000 [ 1601.958872][ T5460] validate_nla: 6 callbacks suppressed [ 1601.958892][ T5460] netlink: 'syz.3.17633': attribute type 4 has an invalid length. [ 1603.059611][ T5531] x_tables: duplicate entry at hook 3 [ 1603.123358][ T5534] __nla_validate_parse: 10 callbacks suppressed [ 1603.123378][ T5534] netlink: 165 bytes leftover after parsing attributes in process `syz.0.17650'. [ 1603.245850][ T5531] bond8 (unregistering): Released all slaves [ 1603.545122][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17656'. [ 1603.558967][ T5556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17657'. [ 1603.585023][ T5556] netlink: 'syz.3.17657': attribute type 3 has an invalid length. [ 1603.593219][ T5554] hsr_slave_1 (unregistering): left promiscuous mode [ 1603.609829][ T5558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17660'. [ 1603.627804][ T5564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17659'. [ 1603.655541][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17656'. [ 1603.666237][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17656'. [ 1603.678779][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17656'. [ 1603.696641][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17656'. [ 1603.810150][ T5577] netlink: 'syz.4.17662': attribute type 16 has an invalid length. [ 1603.824555][ T5577] netlink: 'syz.4.17662': attribute type 17 has an invalid length. [ 1603.913371][ T5577] sit0: left promiscuous mode [ 1604.051909][ T5577] net_ratelimit: 13 callbacks suppressed [ 1604.051916][ T5577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1604.107003][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1604.121716][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1604.189519][ T5603] netlink: 'syz.4.17669': attribute type 33 has an invalid length. [ 1604.275432][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17671'. [ 1604.403112][ T5617] IPv6: NLM_F_CREATE should be specified when creating new route [ 1604.537490][ T5635] netlink: 'syz.4.17677': attribute type 1 has an invalid length. [ 1604.546529][ T5635] netlink: 'syz.4.17677': attribute type 1 has an invalid length. [ 1604.648976][T17006] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1604.663970][T17006] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1604.683202][ T5641] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1604.766837][ T5643] bond8: option mode: invalid value (133) [ 1604.794796][ T5643] bond8 (unregistering): Released all slaves [ 1605.052159][ T30] audit: type=1804 audit(1773085376.069:91): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.17686" name="/newroot/543/cgroup.controllers" dev="tmpfs" ino=2799 res=1 errno=0 [ 1605.083659][ T30] audit: type=1800 audit(1773085376.099:92): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17686" name="cgroup.controllers" dev="tmpfs" ino=2799 res=0 errno=0 [ 1605.151360][ T5670] netlink: 'syz.1.17688': attribute type 33 has an invalid length. [ 1605.197169][T17006] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1605.211731][T17006] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1605.476680][ T5699] netlink: 'syz.4.17697': attribute type 1 has an invalid length. [ 1605.618025][ T5716] netlink: 'syz.4.17700': attribute type 1 has an invalid length. [ 1605.677201][ T5716] bond6: entered promiscuous mode [ 1605.682643][ T5716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1605.709334][ T5722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1605.746932][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1605.771713][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1605.805711][ T5716] bond6: (slave bridge6): making interface the new active one [ 1605.820242][ T5716] bridge6: entered promiscuous mode [ 1605.840275][ T5716] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1606.296613][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1607.383938][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1609.038424][ T5811] validate_nla: 1 callbacks suppressed [ 1609.038444][ T5811] netlink: 'syz.0.17724': attribute type 1 has an invalid length. [ 1609.163523][ T5811] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1609.182157][ T5818] sctp: [Deprecated]: syz.4.17722 (pid 5818) Use of int in max_burst socket option. [ 1609.182157][ T5818] Use struct sctp_assoc_value instead [ 1609.230500][ T5818] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1609.263071][ T5817] veth9: entered promiscuous mode [ 1609.272413][ T5821] __nla_validate_parse: 5 callbacks suppressed [ 1609.272431][ T5821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17727'. [ 1609.367857][T27238] net_ratelimit: 13 callbacks suppressed [ 1609.367874][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1609.388137][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1609.466935][ T5832] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 1609.604438][ T5836] tipc: Enabled bearer , priority 0 [ 1609.650061][ T5836] syzkaller0: entered promiscuous mode [ 1609.655585][ T5836] syzkaller0: entered allmulticast mode [ 1609.667245][ T5836] tipc: Resetting bearer [ 1609.703787][ T5835] tipc: Resetting bearer [ 1609.837646][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17737'. [ 1609.918059][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1609.933177][T23179] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1610.517830][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1610.532931][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1611.056696][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1611.071682][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1611.609199][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1612.642769][ T5835] tipc: Disabling bearer [ 1612.886648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1612.894743][ C0] lec:lec_tx_timeout: lec0 [ 1613.158312][ T5903] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1613.181452][ T5903] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1613.198845][ T5905] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17746'. [ 1613.232253][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17754'. [ 1613.541727][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17761'. [ 1613.593321][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17761'. [ 1613.623650][ T5941] xfrm1: entered promiscuous mode [ 1613.636503][ T5941] xfrm1: entered allmulticast mode [ 1613.815730][ T5956] netlink: 'syz.0.17765': attribute type 12 has an invalid length. [ 1613.825281][ T5956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17765'. [ 1613.895842][ T5966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17764'. [ 1613.919096][ T5968] netlink: 'syz.0.17768': attribute type 1 has an invalid length. [ 1614.024537][ T5972] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1614.123520][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17772'. [ 1614.181234][ T5978] bond8: entered promiscuous mode [ 1614.226181][ T5990] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.17775'. [ 1614.327465][ T5999] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1614.447957][ T6003] netlink: 192 bytes leftover after parsing attributes in process `syz.4.17780'. [ 1614.482854][ T6009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17781'. [ 1614.716874][T30770] net_ratelimit: 11 callbacks suppressed [ 1614.716894][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1614.737426][T30770] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1614.844367][ T6016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1614.987214][ T6035] syzkaller0: entered promiscuous mode [ 1615.000058][ T6035] syzkaller0: entered allmulticast mode [ 1615.151246][ T6043] netlink: 'syz.1.17789': attribute type 2 has an invalid length. [ 1615.160156][ T6042] netlink: 'syz.1.17789': attribute type 2 has an invalid length. [ 1615.195734][ T6042] netlink: 100 bytes leftover after parsing attributes in process `syz.1.17789'. [ 1615.219079][ T6043] netlink: 100 bytes leftover after parsing attributes in process `syz.1.17789'. [ 1615.244735][ T6042] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17789'. [ 1615.283249][ T6042] netlink: 100 bytes leftover after parsing attributes in process `syz.1.17789'. [ 1615.443964][ T6059] ip6t_srh: unknown srh match flags 5F28 [ 1615.449373][ T6058] ip6t_srh: unknown srh match flags 5F28 [ 1615.471211][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17793'. [ 1615.557329][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1615.571814][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1615.714347][ T6074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17802'. [ 1615.780205][ T6076] syzkaller0: entered promiscuous mode [ 1615.785728][ T6076] syzkaller0: entered allmulticast mode [ 1615.805296][ T6076] tipc: Enabled bearer , priority 0 [ 1615.813998][ T6075] tipc: Resetting bearer [ 1615.833901][ T6080] netlink: 'syz.3.17805': attribute type 1 has an invalid length. [ 1615.857579][ T6075] tipc: Disabling bearer [ 1615.932453][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17804'. [ 1616.136573][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1616.151728][T27233] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1616.344471][ T6100] syzkaller0: entered promiscuous mode [ 1616.360079][ T6100] syzkaller0: entered allmulticast mode [ 1616.620142][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17815'. [ 1616.684535][ T6129] netlink: 'syz.1.17815': attribute type 4 has an invalid length. [ 1616.692743][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1616.707286][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1617.250934][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1618.924710][ T6135] syzkaller0: entered promiscuous mode [ 1618.946612][ T6135] syzkaller0: entered allmulticast mode [ 1618.979400][ T6135] tipc: Enabled bearer , priority 0 [ 1619.040244][ T6134] tipc: Resetting bearer [ 1619.155887][ T6134] tipc: Disabling bearer [ 1619.197659][ T6275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1619.214770][ T6275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1619.223661][ T6275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1619.232086][ T6275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1619.241773][ T6275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1619.269651][T27666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1619.282326][T27666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1619.290244][T27666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1619.292612][ T6155] netlink: 'syz.3.17822': attribute type 1 has an invalid length. [ 1619.320682][T27666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1619.341961][T27666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1619.633620][ T6155] bond9: entered promiscuous mode [ 1619.640032][ T6155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1619.674831][ T6163] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1619.688335][ T6163] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 1619.699036][ T6163] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1619.708567][ T7677] lec:lec_start_xmit: lec0:No lecd attached [ 1619.716888][ T6163] bond9: (slave vcan0): making interface the new active one [ 1619.724325][ T6163] vcan0: entered promiscuous mode [ 1619.731023][ T6163] bond9: (slave vcan0): Enslaving as an active interface with an up link [ 1619.741231][ T6158] syzkaller1: entered promiscuous mode [ 1619.756632][ T6158] syzkaller1: entered allmulticast mode [ 1619.768693][ T6179] __nla_validate_parse: 2 callbacks suppressed [ 1619.768711][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17824'. [ 1619.816563][T27237] net_ratelimit: 9 callbacks suppressed [ 1619.816582][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1619.837007][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1619.845538][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17826'. [ 1619.944869][ T6174] syzkaller0: entered promiscuous mode [ 1619.967848][ T6174] syzkaller0: entered allmulticast mode [ 1619.986580][ T6148] vxcan1 speed is unknown, defaulting to 1000 [ 1620.162022][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17829'. [ 1620.198249][ T6197] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1620.232493][ T6197] team1: entered promiscuous mode [ 1620.237791][ T6197] team1: entered allmulticast mode [ 1620.251161][ T6201] netlink: 'syz.3.17831': attribute type 1 has an invalid length. [ 1620.264866][ T6201] netlink: 280 bytes leftover after parsing attributes in process `syz.3.17831'. [ 1620.307024][ T6198] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1620.397100][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1620.412186][T27237] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1620.941306][ T6240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1620.962113][ T6256] netlink: 'syz.4.17845': attribute type 1 has an invalid length. [ 1620.966748][ T6237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1620.971846][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1620.993891][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1621.037008][ T6253] geneve2: entered promiscuous mode [ 1621.219950][ T6270] sctp: [Deprecated]: syz.3.17850 (pid 6270) Use of int in max_burst socket option deprecated. [ 1621.219950][ T6270] Use struct sctp_assoc_value instead [ 1621.223572][ T6148] chnl_net:caif_netlink_parms(): no params data found [ 1621.409718][ T6282] netlink: 284 bytes leftover after parsing attributes in process `syz.4.17851'. [ 1621.450982][T27666] Bluetooth: hci5: command tx timeout [ 1621.512285][ T6290] netlink: 'syz.3.17854': attribute type 11 has an invalid length. [ 1621.520579][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1621.535200][T27238] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1621.542013][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.557274][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.564585][ T6148] bridge_slave_0: entered allmulticast mode [ 1621.571895][ T6290] netlink: 'syz.3.17854': attribute type 11 has an invalid length. [ 1621.580432][ T6148] bridge_slave_0: entered promiscuous mode [ 1621.583019][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.594291][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.601964][ T6148] bridge_slave_1: entered allmulticast mode [ 1621.609462][ T6290] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17854'. [ 1621.617583][ T6148] bridge_slave_1: entered promiscuous mode [ 1621.661555][ T6291] netlink: 'syz.3.17854': attribute type 1 has an invalid length. [ 1621.671220][ T6291] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17854'. [ 1621.705337][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1621.763842][ T6290] netlink: 'syz.3.17854': attribute type 1 has an invalid length. [ 1621.765761][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.790452][ T6290] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17854'. [ 1621.878904][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17858'. [ 1621.894349][ T6148] team0: Port device team_slave_0 added [ 1621.904450][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17857'. [ 1621.917551][ T6148] team0: Port device team_slave_1 added [ 1622.133111][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1622.148081][T27235] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1623.452283][ T2472] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 1623.464378][ T2472] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 1623.472780][ T2472] CPU: 0 UID: 0 PID: 2472 Comm: kworker/0:14 Not tainted syzkaller #0 PREEMPT(full) [ 1623.482514][ T2472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1623.492655][ T2472] Workqueue: events l2cap_info_timeout [ 1623.498583][ T2472] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1623.504477][ T2472] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 e2 80 09 cc 66 66 66 66 66 66 2e [ 1623.524120][ T2472] RSP: 0018:ffffc900054e7828 EFLAGS: 00010202 [ 1623.530223][ T2472] RAX: dffffc0000000000 RBX: ffffffff8973cb68 RCX: 0000000080000001 [ 1623.538224][ T2472] RDX: 0000000000000000 RSI: ffffffff8973cb68 RDI: 000000000000004c [ 1623.546268][ T2472] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1623.554230][ T2472] R10: dffffc0000000000 R11: ffffffff8aad9e30 R12: 0000000000000000 [ 1623.562314][ T2472] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 1623.570362][ T2472] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 1623.579280][ T2472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1623.585865][ T2472] CR2: 00007f69fbde9e80 CR3: 0000000063d22000 CR4: 00000000003526f0 [ 1623.593827][ T2472] Call Trace: [ 1623.597093][ T2472] [ 1623.600007][ T2472] __kasan_check_byte+0x12/0x40 [ 1623.604857][ T2472] lock_acquire+0x79/0x2e0 [ 1623.609266][ T2472] lock_sock_nested+0x48/0x100 [ 1623.614045][ T2472] ? l2cap_sock_ready_cb+0x46/0x160 [ 1623.619238][ T2472] l2cap_sock_ready_cb+0x46/0x160 [ 1623.624252][ T2472] l2cap_conn_start+0x779/0xff0 [ 1623.629097][ T2472] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1623.634563][ T2472] ? l2cap_info_timeout+0x60/0xa0 [ 1623.639576][ T2472] ? do_raw_spin_lock+0x12b/0x2f0 [ 1623.644588][ T2472] ? __pfx___mutex_lock+0x10/0x10 [ 1623.649619][ T2472] l2cap_info_timeout+0x68/0xa0 [ 1623.654453][ T2472] ? process_scheduled_works+0xa25/0x1830 [ 1623.660251][ T2472] process_scheduled_works+0xb02/0x1830 [ 1623.665800][ T2472] ? __pfx_process_scheduled_works+0x10/0x10 [ 1623.671772][ T2472] ? assign_work+0x3d5/0x5e0 [ 1623.676360][ T2472] worker_thread+0xa50/0xfc0 [ 1623.680950][ T2472] kthread+0x388/0x470 [ 1623.685045][ T2472] ? __pfx_worker_thread+0x10/0x10 [ 1623.690144][ T2472] ? __pfx_kthread+0x10/0x10 [ 1623.694757][ T2472] ret_from_fork+0x51e/0xb90 [ 1623.699345][ T2472] ? __pfx_ret_from_fork+0x10/0x10 [ 1623.704442][ T2472] ? __switch_to+0xc7d/0x1450 [ 1623.709134][ T2472] ? __pfx_kthread+0x10/0x10 [ 1623.713720][ T2472] ret_from_fork_asm+0x1a/0x30 [ 1623.718484][ T2472] [ 1623.721503][ T2472] Modules linked in: [ 1623.726274][ T2472] ---[ end trace 0000000000000000 ]--- [ 1623.735679][T27666] Bluetooth: hci5: command tx timeout [ 1623.741957][ T2472] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1623.748738][ T2472] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 e2 80 09 cc 66 66 66 66 66 66 2e [ 1623.770700][ T2472] RSP: 0018:ffffc900054e7828 EFLAGS: 00010202 [ 1623.777183][ T2472] RAX: dffffc0000000000 RBX: ffffffff8973cb68 RCX: 0000000080000001 [ 1623.785294][ T2472] RDX: 0000000000000000 RSI: ffffffff8973cb68 RDI: 000000000000004c [ 1623.793520][ T2472] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1623.801648][ T2472] R10: dffffc0000000000 R11: ffffffff8aad9e30 R12: 0000000000000000 [ 1623.810125][ T2472] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 1623.818207][ T2472] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 1623.827383][ T2472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1623.834008][ T2472] CR2: 00007f69fbde9e80 CR3: 00000000790b4000 CR4: 00000000003526f0 [ 1623.842472][ T2472] Kernel panic - not syncing: Fatal exception [ 1623.848856][ T2472] Kernel Offset: disabled [ 1623.853299][ T2472] Rebooting in 86400 seconds..