last executing test programs: 3.200367822s ago: executing program 4 (id=4906): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0xf5ff, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.032821482s ago: executing program 0 (id=4909): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(r1, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) (async) syz_emit_ethernet(0x104, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x146, 0x42, "e3", "c64525507de37e5db9de49d8fe51ba6bf105df255f9ac5c5ccc9c64a1a98bcf7905ee8b873a7aba183a39cb87308051117be55d8616922066d785bf87cdee3cbe1809ca3e92dd9ee6b5355ecaf43fec8085027cec95376c32b6364fce6e4e286522228622ac83f9b3ab7ef1b31389071d3706f71f57bf71e3283f684f0dfd1d60830c45f6033d144043514c73efb49770f68755aedb4b02f26e28f6b43df482f9f58591fe2244e49a4295c211a3729cbccc432585c66481fa066737493721b09539e34b53dc77a179230e7772e56707164b4ea02c774ddf9f4b0ff8c12a1a379dc970f8f442cce7ec3ea2f5a3506e8"}}}}}, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000c40)={r3, 0xca60, 0xfffa}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'pimreg1\x00', @local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000dbbbbbbbbbbbb8100560008004519001c00e4000008119078ac141429ac1414bb00000000000000004f4b2d0586e78bca1448fb83502a021364a63661005798a5"], 0x2e) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x8], 0x0, [0x1, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x22048808) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYRES8=r4], &(0x7f0000000540)={0x0, 0x3, [0x5a8, 0xc8a, 0x224, 0x48c]}) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000003a00000429bd7000fcffffff0900000000001200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x001\x00', @ANYRES32=r11, @ANYBLOB="00001000"], 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) (async) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.533469779s ago: executing program 0 (id=4914): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0x10001}, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000380)=0x4000, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x2, 0xffff}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000480)={r6, 0x5}, &(0x7f0000000500)=0x8) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000340)={0x0, 0x1, [0xd0a, 0x16c, 0x652, 0x57d]}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000002c0)={r7, 0xd}, 0x8) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r12 = accept4$rose(r11, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x2010, r12, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r13, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/114, 0x72}], 0x2, 0x0, 0x300}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000012060000008000000200000010040000", @ANYRES16=r3, @ANYBLOB="030000000000000000000000000000000000000067f897d1b464d209170e85fe4a12feffc1658f7ea77276ffce1dfc08526f404493e62b2b3ada221e92f0a4cb543e418a1a69310740cbd1c93f3d098430fbc9a661d760105022205f6bbd4b09ceb1e7c4ffe5f1387b643755497e9a61c77df4b7", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0300000005000000050000000c00"/28], 0x50) 2.154032652s ago: executing program 4 (id=4917): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000004, 0x106) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 2.029008457s ago: executing program 2 (id=4919): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@local, @multicast2, 0x0, "e6b3ba00f99376d6777483eba6eb724088da373012a1cd97cbe00a57d25540d9", 0x4, 0xfffffff7, 0x8000, 0x8}, 0x3c) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x258000, 0x2, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x64, 0x0, 0x80, 0x29, 0x0, @empty, @remote, {[@generic={0x86, 0x9, "97b6e8f21d30fb"}, @end, @generic={0x82, 0xb, "aaf4c00073aa8ff93b"}, @cipso={0x86, 0x15, 0x1, [{0x7, 0xd, "580617f09d1a85f5e32323"}, {0x6, 0x2}]}, @lsrr={0x83, 0xf, 0x2, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@local, r2}, 0x14) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/61, &(0x7f0000000180)=0x3d) r3 = accept4$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10, 0x80c00) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x360, 0x290, 0xd0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xffffff00, 0xffffffff, 'vlan1\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0x2, 0x47}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x3, @local, 0xcc84, 0xa, [0x23, 0x0, 0x36, 0x21, 0x11, 0x3, 0xc, 0x38, 0xe, 0x8000, 0x1b, 0x2d, 0x34, 0x2b, 0x13, 0x10], 0x1, 0xa27, 0x40}}}, {{@ip={@multicast2, @broadcast, 0xff, 0xff000000, 'macvlan0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x0, 0x1, 0x41}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x4}, {0x3, 0x4, 0x3}, 0xd4, 0x7693}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff, 0xffffffff, 'wg2\x00', 'ip6tnl0\x00', {}, {0xff}, 0x33, 0x2, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 0x631, 0x7, [0x16, 0x18, 0x40, 0x31, 0x26, 0x24, 0x12, 0x1a, 0x34, 0x2d, 0x26, 0x3, 0x19, 0x3c, 0x31, 0x9], 0x0, 0xf, 0x8001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x12, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x90}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x7f, 0xae, &(0x7f0000000840)=""/174, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x1, 0x0, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r3, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x0, 0x4, 0xa, 0x1}, {0x1, 0x1, 0xf, 0x5}, {0x1, 0x1, 0x9, 0x1}, {0x1, 0x2, 0x10, 0xc}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000a80)=r6, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) getsockopt(r1, 0x40, 0x1, &(0x7f0000000b40)=""/34, &(0x7f0000000b80)=0x22) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000bc0)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000c00)={0x0, 0x1, 0x10}, &(0x7f0000000c40)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000c80)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000000d40)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x40013, r5, 0x5bdac000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000d80)={r7, 0x5}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r4) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xa8, r11, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5a8b}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x67}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000010) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000f80)={0x0, 0x3, 0x0, 0x32, 0x2, 0x5, 0x3, 0x1, 0x1, 0x4, 0x1, 0x5f, 0x8, 0x8}, 0xe) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000fc0)={r7, 0x12, "2f703310c3cf86a5693dfece00a9252155eb"}, &(0x7f0000001000)=0x1a) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000001040), 0x4) 1.907321593s ago: executing program 4 (id=4921): r0 = socket(0x10, 0x3, 0x0) getpeername$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x40010, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000010c0)}], 0x1, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x33d}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x11, &(0x7f0000000000), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) epoll_create1(0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYRES64=r8], 0x10) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) close(r3) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000101c0012000c000100627269642b68"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) 1.862878827s ago: executing program 1 (id=4922): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340), 0x0, 0xc040) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) (rerun: 64) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000018) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) (async, rerun: 64) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b", 0xfff7}, {0x0}], 0x2) (rerun: 64) 1.8077389s ago: executing program 2 (id=4923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r4, 0x10a, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000800}, 0x880) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 1.714433727s ago: executing program 2 (id=4924): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf25"], 0x2c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3100000000280004800800024000000000080001400000000514000300766505000000000000007461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300"], 0xe8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318300000001000000001900000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58020000", @ANYRES16=r4, @ANYBLOB="050407bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x258}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x94) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000600)={&(0x7f00000002c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfd0a}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x810}, 0x10) 1.662199252s ago: executing program 1 (id=4925): r0 = socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r0, 0x0, 0x0, 0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0xf0b, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x9}}], 0x1, 0x2080, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r10, 0x3) (async) listen(r10, 0x3) sendmsg$inet6(r9, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}}, 0x20}}, 0x0) 1.566075614s ago: executing program 0 (id=4927): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7ff, 0xa42, 0x3f}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.528819065s ago: executing program 4 (id=4928): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0xffd9, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.411153996s ago: executing program 2 (id=4929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000240)={0x8, 0xa, 0x0, 0xa5, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @loopback, @local]}, 0x58) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x88}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) 1.337733323s ago: executing program 1 (id=4930): mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1402, 0x8, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40805) 1.331167585s ago: executing program 0 (id=4931): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0xffffffffffffff5a, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8}, 0xb7de}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000001040)=""/239, 0xef}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000600)=0x1) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r5, @ANYRESOCT=r3, @ANYRES64=r7], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.119009267s ago: executing program 0 (id=4933): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) 1.089059288s ago: executing program 1 (id=4934): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000061566ea704e8c358b4abcf65b408400ef5b1adfa99581f2f42eb4a10acdd9e9a96e7bdf8520da66e4ad01000000dc9e19c26d2f405196f71b1ff57c89b74437c702c73b5b9bcb85b4a43dffb705aa59a9d2050000000000"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf2e}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x6, 0x1, 0x120, 0x0, 0xb, 0x1, 0x2}}, {0x8, 0x2, [0x9, 0x3]}}, {{0x1c, 0x1, {0xf6, 0x7, 0xd, 0xfffffffb, 0x2, 0x6, 0x1, 0x1}}, {0x6, 0x2, [0xa2c2]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 722.976784ms ago: executing program 3 (id=4935): recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000240)={&(0x7f0000000200)=[{0x0, 0x562, 0x1}, {0x80, 0x8c}, {0x0, 0x9, 0x1}, {0x9, 0x7}], 0x4, 0x10, 0x6, 0x10001}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 675.150876ms ago: executing program 1 (id=4936): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x62, &(0x7f00000015c0)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ffc000", 0x28, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000080)='\\\x00', 0x220001, &(0x7f00000000c0)={@align, {0x1f, 0x0, 0x3}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x81}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) 642.004705ms ago: executing program 3 (id=4937): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x408c9}, 0x4800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 487.22877ms ago: executing program 3 (id=4938): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x80, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYRESHEX=r0], 0x20}}, 0x4000084) 485.570337ms ago: executing program 4 (id=4939): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 380.796261ms ago: executing program 4 (id=4940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="8a802c32200d0600"], 0x20}}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xd, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000307010100000000000000000a0000080c0003400000000000000ceb08000540000000010c000640040000000000000008000540000000020900010073797a3000000000140007800800014000000005080001400000cc280800054000000003ce89b351611b2e2bc09d50ff"], 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040004) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000301010101000000000000000300000a3400188008000340000058ae08000240000000060800030100000000000000400000000008000240ffffffff0800024000000004080007400000975a"], 0x50}, 0x1, 0x0, 0x0, 0xc8d9}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="a8000000ffffffffffffbbbbbbbbbbbb88a816008120316aaedbef7d93180067000001049078000000006401010144043881"], 0x32) bind$can_raw(r7, 0x0, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) 351.685925ms ago: executing program 2 (id=4941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044881}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000000999fbfff0ffffff95000000000000b53fe432b2c75206b7192f10c52971006546d2cea2bf5b0a331c0f543191732ef69e74a94be7385e3efca26036c534a969af23f3ea0627f9d34a6a032bca4c711d6e4389416f4bdea15a02901c010fceec74c3959387df7385b30747f96c2b0008d409a914b698b3ae9e3b4b35669f59dae45cb76fab63"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xcb, &(0x7f0000000000)=""/203, 0x41000, 0x2, '\x00', r5}, 0x94) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044881}, 0x10) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000000999fbfff0ffffff95000000000000b53fe432b2c75206b7192f10c52971006546d2cea2bf5b0a331c0f543191732ef69e74a94be7385e3efca26036c534a969af23f3ea0627f9d34a6a032bca4c711d6e4389416f4bdea15a02901c010fceec74c3959387df7385b30747f96c2b0008d409a914b698b3ae9e3b4b35669f59dae45cb76fab63"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xcb, &(0x7f0000000000)=""/203, 0x41000, 0x2, '\x00', r5}, 0x94) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) (async) 295.902087ms ago: executing program 3 (id=4942): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x0, 0x34f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3, 0x25, 0x4, @val=@netkit={@void, @value=r2}}, 0x1c) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, 0x0) 233.661977ms ago: executing program 1 (id=4943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x103, 0x4) 226.05215ms ago: executing program 3 (id=4944): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000007c0), &(0x7f0000000800)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)="07bd76b2291315376e13b099b5565cacb0bb66899b894652dadb96b49cd0d25688ccfd0803a8393b8a71a39b196ac44e9bc57c8f73c7fa3aa8cd9c04da0030aaedf2d01d603db1f4c3d2576e28394e6cd4b2ae87b2edf4f7aa098d625e2f398a26b808b16b38732c111e67552055b81eb896d54c", 0x74) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getpeername(r1, &(0x7f0000000100)=@x25, &(0x7f0000000180)=0x80) 15.002143ms ago: executing program 0 (id=4945): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x9, 0xffff1e0d, 0xa01, 0x200, 0xb5, 0xc91b, 0x3ff, {r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x7a9, 0x8, 0x400, 0x4}}, &(0x7f0000000180)=0xb0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8cd}, {0x6, 0x11, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x90}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x32}, {0x6, 0x11, 0x9}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) close(0x4) 12.61627ms ago: executing program 2 (id=4946): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 3 (id=4947): r0 = socket$isdn_base(0x22, 0x3, 0x0) recvmsg(r0, &(0x7f0000001400)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)=""/252, 0xfc}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/10, 0xa}], 0x5, &(0x7f0000001300)=""/253, 0xfd}, 0x3) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000001440)={0x1, 0x0, 0x3, 0x1, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000001580)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x24c12010}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x16, 0xfff1}, {0x8, 0x2}}, [{0x8, 0xb, 0x2}, {0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x74, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6c}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xa9f2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001840), 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001880)={'virt_wifi0\x00', 0x8000}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000001900)={0x1, 0x3, 0x12, &(0x7f00000018c0)=""/18}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), r4) getpeername$packet(r4, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a00)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff7244}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42050}, 0x40440c1) sendmsg$nl_route(r4, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)=@ipv4_delrule={0x54, 0x21, 0x200, 0x70bd2b, 0x25dfdbfc, {0x2, 0x80, 0x80, 0x81, 0x9, 0x0, 0x0, 0x1, 0xa}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e21}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8f0}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'gre0\x00'}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r8, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x20000800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xb, 0x14, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x6, 0xb, 0x3, 0x18, 0x1}, @jmp={0x5, 0x0, 0x8, 0x0, 0x2, 0x40, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @generic={0x6f, 0x9, 0x4, 0x1, 0x80000000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000002000)=""/4096, 0x41100, 0x40, '\x00', r6, @fallback=0x3c, r4, 0x8, &(0x7f0000003000)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x5, &(0x7f0000003040)=[r4, r4, r4, r4], &(0x7f0000003080)=[{0x3, 0x3, 0x3, 0x5}, {0x4, 0x2, 0xb, 0x5}, {0x0, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x4}, {0x4, 0x1, 0x9, 0x4}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003340)={r9, 0x0, 0x23, 0x0, &(0x7f00000031c0)="cc222f3caead614f39d05cda0baeca8d22d9f6b29f72e3db07657bda8c040199ca6ebc", 0x0, 0x754e194, 0x0, 0x26, 0xfd, &(0x7f0000003200)="30a2e48fc0a9dadb254c2dc92c8f4479266d28c41ea931f3cd74dd7ac891160343346115513e", &(0x7f0000003240)="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", 0x1, 0x0, 0x3ff}, 0x50) bind$bt_hci(r4, &(0x7f00000033c0)={0x1f, 0x2, 0x4}, 0x6) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r10, 0x89e2) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect(r11, &(0x7f0000003400)=@generic={0x1e, "71a9aa7c60e3fef373019b6f37060fe6cac137885f55c785347555ed44bdff57859924799d3460482bbe747132640007cb385d2af40bf445dca4d7707fb1bc7667c6efe226cc1cf0093fddaf5d8893fdd088d0ea75b1792b7ae58d89c9b5b89651d0fbbb46cbb8d5e547b4f7b7cf0d521cc369309a67cc10981fbaade1e3"}, 0x80) bind$ax25(r4, &(0x7f0000003480)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) recvmsg(r3, &(0x7f00000045c0)={0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003500)=""/34, 0x22}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x2, &(0x7f0000004580)=""/35, 0x23}, 0x2040) kernel console output (not intermixed with test programs): d promiscuous mode [ 382.108700][T15934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.161621][T16454] __nla_validate_parse: 11 callbacks suppressed [ 382.161641][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 382.163007][T15934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.169897][T16454] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 382.219575][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 382.239733][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.249773][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 382.270199][ T507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.297245][ T507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.319005][T16459] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 382.374590][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 382.411553][ T507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.737889][T16485] can: request_module (can-proto-0) failed. [ 383.099372][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 383.202745][ T507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.231541][ T507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.374965][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.416597][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.639161][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2923'. [ 383.814844][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.829491][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.842472][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.851050][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.859066][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.933477][T16543] vxcan1 speed is unknown, defaulting to 1000 [ 384.316149][T16543] lo speed is unknown, defaulting to 1000 [ 384.594664][T16543] chnl_net:caif_netlink_parms(): no params data found [ 384.660964][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.668284][T16543] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.675747][T16543] bridge_slave_0: entered allmulticast mode [ 384.682894][T16543] bridge_slave_0: entered promiscuous mode [ 384.692974][T16543] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.700303][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.707696][T16543] bridge_slave_1: entered allmulticast mode [ 384.716027][T16543] bridge_slave_1: entered promiscuous mode [ 384.742157][T16543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.753775][T16543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.782215][T16543] team0: Port device team_slave_0 added [ 384.790208][T16543] team0: Port device team_slave_1 added [ 384.815065][T16543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.822150][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.848985][T16543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.861307][T16543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.868386][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.894658][T16543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.931945][T16543] hsr_slave_0: entered promiscuous mode [ 384.938481][T16543] hsr_slave_1: entered promiscuous mode [ 384.944883][T16543] debugfs: 'hsr0' already exists in 'hsr' [ 384.950733][T16543] Cannot create hsr debugfs directory [ 385.076688][T16543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 385.089490][T16543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.197820][T16543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 385.209242][T16543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.298491][T16543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 385.308970][T16543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.384947][T16543] .`: (slave netdevsim0): Releasing backup interface [ 385.884291][ T5162] Bluetooth: hci0: command tx timeout [ 386.591676][T16529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.685511][T16543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.726817][T16543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.750495][T16543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.811000][T16543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.847455][T16543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.883311][T16543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.907103][T16543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.927370][T16543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.348751][T16543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.388284][T16604] tipc: Enabling not permitted [ 387.404982][T16604] tipc: Enabling of bearer rejected, failed to enable media [ 387.488460][T16543] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.528914][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.536179][ T7620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.571748][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.578971][ T7620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.688550][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2938'. [ 387.771373][T16625] net_ratelimit: 32 callbacks suppressed [ 387.771392][T16625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.788841][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 387.919792][T16543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.928962][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 387.950513][T16630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2940'. [ 387.964630][ T5162] Bluetooth: hci0: command tx timeout [ 388.081339][T16635] bond15: entered promiscuous mode [ 388.087645][T16635] bond15: entered allmulticast mode [ 388.093750][T16635] 8021q: adding VLAN 0 to HW filter on device bond15 [ 388.104838][ T43] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.113697][ T43] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.137489][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.155044][ T43] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.188481][T16630] netlink: 638 bytes leftover after parsing attributes in process `syz.0.2940'. [ 388.343540][T16543] veth0_vlan: entered promiscuous mode [ 388.395027][T16543] veth1_vlan: entered promiscuous mode [ 388.501610][T16543] veth0_macvtap: entered promiscuous mode [ 388.539051][T16543] veth1_macvtap: entered promiscuous mode [ 388.590125][T16663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2949'. [ 388.600385][T16543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.660160][T16543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.680048][ T164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.698456][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2950'. [ 388.703036][ T164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.748245][ T164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.784519][ T164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.036179][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.061294][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.089935][T16682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2955'. [ 389.090490][T16684] netlink: 'syz.3.2957': attribute type 3 has an invalid length. [ 389.175082][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.197259][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.611179][T16707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2964'. [ 389.696249][T16716] Bluetooth: MGMT ver 1.23 [ 389.867209][T16722] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2969'. [ 389.881271][T16716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.044384][ T5162] Bluetooth: hci0: command tx timeout [ 390.235949][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.250723][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.261796][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.277205][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.286494][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.336726][T16742] netlink: 'syz.2.2973': attribute type 9 has an invalid length. [ 390.469673][T16745] only policy match revision 0 supported [ 390.469763][T16745] unable to load match [ 390.494421][T16738] vxcan1 speed is unknown, defaulting to 1000 [ 390.789967][T16761] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 391.197218][T16738] lo speed is unknown, defaulting to 1000 [ 391.658351][T16803] vlan2: entered allmulticast mode [ 391.663672][T16803] hsr0: entered allmulticast mode [ 391.669662][T16803] hsr_slave_0: entered allmulticast mode [ 391.677395][T16803] hsr_slave_1: entered allmulticast mode [ 391.691052][T16803] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.763013][T16738] chnl_net:caif_netlink_parms(): no params data found [ 391.763230][T16809] netlink: 'syz.3.2995': attribute type 1 has an invalid length. [ 391.960136][T16809] bond13: entered promiscuous mode [ 391.968565][T16809] 8021q: adding VLAN 0 to HW filter on device bond13 [ 391.986154][T16810] bond13: (slave bridge10): making interface the new active one [ 391.994135][T16810] bridge10: entered promiscuous mode [ 392.000435][T16810] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 392.063181][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.072007][T16738] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.079907][T16738] bridge_slave_0: entered allmulticast mode [ 392.091111][T16738] bridge_slave_0: entered promiscuous mode [ 392.102525][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.111010][T16738] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.119040][T16738] bridge_slave_1: entered allmulticast mode [ 392.127446][ T5162] Bluetooth: hci0: command tx timeout [ 392.153379][T16738] bridge_slave_1: entered promiscuous mode [ 392.322294][T16738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.356779][T16834] vlan3: entered allmulticast mode [ 392.362075][T16834] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 392.364679][ T5162] Bluetooth: hci2: command tx timeout [ 392.386830][T16738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.416130][T16832] bond7: entered promiscuous mode [ 392.425845][T16832] bond7: entered allmulticast mode [ 392.468939][T16839] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 392.547546][T16738] team0: Port device team_slave_0 added [ 392.584599][T16738] team0: Port device team_slave_1 added [ 392.705997][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.734222][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.797141][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.887513][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.895720][T16841] Bluetooth: MGMT ver 1.23 [ 392.900225][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.963680][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.109568][T16875] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 393.124259][T16875] __nla_validate_parse: 9 callbacks suppressed [ 393.124276][T16875] netlink: 476 bytes leftover after parsing attributes in process `syz.0.3010'. [ 393.166998][T16875] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3010'. [ 393.260582][T16738] hsr_slave_0: entered promiscuous mode [ 393.296655][T16738] hsr_slave_1: entered promiscuous mode [ 393.322007][T16738] debugfs: 'hsr0' already exists in 'hsr' [ 393.345316][T16738] Cannot create hsr debugfs directory [ 393.709866][T16916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3018'. [ 393.735086][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3018'. [ 393.847989][T16738] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.890014][T16738] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 393.947879][T16738] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.076555][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'. [ 394.087052][T16930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3022'. [ 394.096279][T16930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3022'. [ 394.121085][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'. [ 394.134359][T16930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3022'. [ 394.153370][T16930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3022'. [ 394.184834][T16934] syzkaller0: entered promiscuous mode [ 394.200664][T16934] syzkaller0: entered allmulticast mode [ 394.250546][T16738] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.274652][T16738] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 394.287172][T16738] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.307652][T16944] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 394.447072][ T5162] Bluetooth: hci2: command tx timeout [ 394.482983][T16930] vlan2: entered allmulticast mode [ 394.489885][T16930] hsr_slave_1: entered allmulticast mode [ 394.503723][T16738] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.517285][T16738] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 394.548035][T16738] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.642987][T16950] bond1 (unregistering): Released all slaves [ 394.676426][T16738] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.687341][T16738] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 394.703356][T16738] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.153513][T16738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.181358][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.200013][T16738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.212041][T16979] netlink: 'syz.3.3034': attribute type 2 has an invalid length. [ 395.219359][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.240029][T16738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.263386][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.275325][T16738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.292085][T16738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.432125][T16994] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.489774][T16738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.578239][T16738] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.622703][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.629932][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.698074][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.705288][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.720138][T17012] netlink: 'syz.2.3043': attribute type 3 has an invalid length. [ 395.897284][ T962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 396.034416][ T962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 396.111252][T17031] openvswitch: netlink: Flow actions attr not present in new flow. [ 396.273412][T17039] x_tables: duplicate underflow at hook 1 [ 396.524384][ T5162] Bluetooth: hci2: command tx timeout [ 396.531302][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.541787][T17053] netlink: 'syz.3.3054': attribute type 1 has an invalid length. [ 396.682536][T17053] 8021q: adding VLAN 0 to HW filter on device bond14 [ 396.762233][T17054] vlan4: entered promiscuous mode [ 396.780283][T17054] bond14: entered promiscuous mode [ 396.797989][T17054] vlan4: entered allmulticast mode [ 396.805841][T17054] bond14: entered allmulticast mode [ 397.215105][T17076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 397.366502][T16738] veth0_vlan: entered promiscuous mode [ 397.430726][T16738] veth1_vlan: entered promiscuous mode [ 397.442162][T17083] syzkaller0: entered promiscuous mode [ 397.455696][T17083] syzkaller0: entered allmulticast mode [ 397.521661][T16738] veth0_macvtap: entered promiscuous mode [ 397.557329][T16738] veth1_macvtap: entered promiscuous mode [ 397.645167][T16738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.691805][T16738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.722072][T17094] netlink: 'syz.0.3063': attribute type 16 has an invalid length. [ 397.738811][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.743821][T17094] netlink: 'syz.0.3063': attribute type 17 has an invalid length. [ 397.757814][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.824772][T17094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.857280][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.877466][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.109627][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.132005][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.322048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.352464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.608035][ T5162] Bluetooth: hci2: command tx timeout [ 399.167403][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.180751][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.193117][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.209784][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.219803][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.426159][T17147] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 399.457441][T17147] netlink: 'syz.4.3079': attribute type 2 has an invalid length. [ 399.518278][T17136] vxcan1 speed is unknown, defaulting to 1000 [ 399.649149][T17154] __nla_validate_parse: 55 callbacks suppressed [ 399.649167][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 399.843468][T17158] netlink: 'syz.0.3083': attribute type 1 has an invalid length. [ 400.093340][T17168] nbd: socks must be embedded in a SOCK_ITEM attr [ 400.197634][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'. [ 400.546420][T17136] lo speed is unknown, defaulting to 1000 [ 400.859015][T17192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.912610][T17192] netlink: 'syz.3.3093': attribute type 1 has an invalid length. [ 400.944041][T17192] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3093'. [ 401.137176][T17201] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 401.325348][ T5162] Bluetooth: hci1: command tx timeout [ 401.645969][T17136] chnl_net:caif_netlink_parms(): no params data found [ 401.887662][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 401.945916][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.972118][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.316843][T17256] sctp: [Deprecated]: syz.4.3104 (pid 17256) Use of int in max_burst socket option deprecated. [ 402.316843][T17256] Use struct sctp_assoc_value instead [ 402.336265][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.352567][T17263] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 402.359751][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.396578][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 402.414021][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3104'. [ 402.451034][T17265] netlink: 'syz.1.3106': attribute type 4 has an invalid length. [ 402.537981][T17256] team0 (unregistering): Port device team_slave_0 removed [ 402.586147][T17256] team0 (unregistering): Port device team_slave_1 removed [ 402.723415][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.734509][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.936483][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.977400][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.073072][T17289] netlink: 'syz.0.3112': attribute type 1 has an invalid length. [ 403.081289][T17289] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3112'. [ 403.094094][T17289] netlink: 'syz.0.3112': attribute type 1 has an invalid length. [ 403.102105][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 403.139396][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'. [ 403.150005][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'. [ 403.363580][T17280] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 403.406011][ T5162] Bluetooth: hci1: command tx timeout [ 403.479082][T17291] ip6gretap0: entered promiscuous mode [ 403.516577][T17291] ip6gretap0: left promiscuous mode [ 403.541714][T17136] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.557902][T17136] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.570674][T17136] bridge_slave_0: entered allmulticast mode [ 403.601010][T17136] bridge_slave_0: entered promiscuous mode [ 403.616113][T17136] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.623432][T17136] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.632751][T17136] bridge_slave_1: entered allmulticast mode [ 403.643114][T17136] bridge_slave_1: entered promiscuous mode [ 403.680353][T17302] erspan0: entered promiscuous mode [ 403.836804][T17136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.880005][T17136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.969749][T17136] team0: Port device team_slave_0 added [ 403.978850][T17136] team0: Port device team_slave_1 added [ 404.188993][T17136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.215781][T17136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.251101][T17136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.274209][T17136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.281254][T17136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.307559][T17136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.532816][ T12] pimreg: left allmulticast mode [ 404.866453][T17357] __nla_validate_parse: 2 callbacks suppressed [ 404.866472][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3126'. [ 405.022044][T17361] netlink: 'syz.0.3127': attribute type 4 has an invalid length. [ 405.484198][ T5162] Bluetooth: hci1: command tx timeout [ 405.589138][ T12] bond0 (unregistering): Released all slaves [ 405.599660][ T12] bond1 (unregistering): Released all slaves [ 405.614383][ T12] bond2 (unregistering): Released all slaves [ 405.629935][ T12] bond3 (unregistering): Released all slaves [ 405.651047][ T12] bond4 (unregistering): Released all slaves [ 405.665967][ T12] bond5 (unregistering): Released all slaves [ 405.680393][ T12] bond6 (unregistering): Released all slaves [ 405.701727][ T12] bond7 (unregistering): Released all slaves [ 405.791013][T17136] hsr_slave_0: entered promiscuous mode [ 405.819886][T17136] hsr_slave_1: entered promiscuous mode [ 405.852033][T17136] debugfs: 'hsr0' already exists in 'hsr' [ 405.875416][T17136] Cannot create hsr debugfs directory [ 405.967779][T17383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3131'. [ 405.972752][ T12] tipc: Left network mode [ 406.026831][ T12] IPVS: stopping master sync thread 14403 ... [ 406.147703][T17387] tipc: Started in network mode [ 406.154567][T17387] tipc: Node identity ac14140f, cluster identity 4711 [ 406.165956][T17387] tipc: Enabled bearer , priority 10 [ 406.193207][T17394] netlink: 'syz.3.3135': attribute type 1 has an invalid length. [ 406.218411][T17393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3134'. [ 406.231528][T17394] netlink: 'syz.3.3135': attribute type 1 has an invalid length. [ 406.331353][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3135'. [ 406.389186][T17394] 8021q: adding VLAN 0 to HW filter on device bond15 [ 407.098190][ T12] veth0_macvtap: left promiscuous mode [ 407.103837][ T12] : left promiscuous mode [ 407.110813][ T12] veth0_vlan: left promiscuous mode [ 407.565712][ T5162] Bluetooth: hci1: command tx timeout [ 407.622257][ T5952] tipc: Node number set to 2886997007 [ 407.693188][T17136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.702594][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.710795][T17136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.725463][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.759703][T17136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.770812][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.778858][T17136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.789955][T17136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.891345][T17136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.917524][ T12] IPVS: stop unused estimator thread 0... [ 407.918267][T17136] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.937847][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.945061][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.961720][T17205] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.968864][T17205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.117840][T17136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.162638][T17136] veth0_vlan: entered promiscuous mode [ 408.176715][T17136] veth1_vlan: entered promiscuous mode [ 408.203750][T17136] veth0_macvtap: entered promiscuous mode [ 408.213331][T17136] veth1_macvtap: entered promiscuous mode [ 408.232534][T17136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.247441][T17136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.262179][T17203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.272391][T17203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.283396][T17203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.293842][T17203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.386518][T17205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.395243][T17205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.425592][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.433471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.495047][T17436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3073'. [ 427.880917][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.895922][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.911578][T17457] xt_hashlimit: overflow, try lower: 3/0 [ 427.912140][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.928045][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.936474][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.141879][T17453] vxcan1 speed is unknown, defaulting to 1000 [ 428.159460][T17466] netlink: 'syz.4.3143': attribute type 10 has an invalid length. [ 428.199904][T17466] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.250648][T17466] bridge_slave_1: left allmulticast mode [ 428.279874][T17466] bridge_slave_1: left promiscuous mode [ 428.304917][T17466] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.339363][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 428.369883][T17466] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 428.552550][T17471] bond1: Unable to set up delay as MII monitoring is disabled [ 428.578375][T17471] bond1 (unregistering): Released all slaves [ 428.788337][T17485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.841679][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3150'. [ 428.874700][T17495] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 428.971531][T17453] lo speed is unknown, defaulting to 1000 [ 429.090722][T17501] netlink: 'syz.0.3153': attribute type 30 has an invalid length. [ 429.101910][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 429.349424][T17514] netlink: 'syz.2.3157': attribute type 1 has an invalid length. [ 429.476498][T17521] syzkaller1: entered promiscuous mode [ 429.501016][T17521] syzkaller1: entered allmulticast mode [ 429.577969][T17453] chnl_net:caif_netlink_parms(): no params data found [ 429.702673][T17530] netlink: 'syz.4.3161': attribute type 1 has an invalid length. [ 429.728431][T17530] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3161'. [ 429.741062][T17530] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3161'. [ 429.753119][T17530] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3161'. [ 429.802270][T17535] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 429.911770][T17453] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.925239][T17453] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.937266][T17453] bridge_slave_0: entered allmulticast mode [ 429.957046][T17453] bridge_slave_0: entered promiscuous mode [ 429.977322][T17453] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.995918][T17453] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.010485][T17453] bridge_slave_1: entered allmulticast mode [ 430.018864][T17453] bridge_slave_1: entered promiscuous mode [ 430.021128][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3164'. [ 430.047817][ T5162] Bluetooth: hci3: command tx timeout [ 430.099387][T17453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.149354][T17453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.306874][T17453] team0: Port device team_slave_0 added [ 430.336582][T17453] team0: Port device team_slave_1 added [ 430.507380][T17453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.529003][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.565908][T17453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.577433][T17562] tipc: Enabling of bearer rejected, media not registered [ 430.643107][T17453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.657776][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.700154][T17453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.746304][T17574] ieee802154 phy1 wpan1: encryption failed: -22 [ 430.866964][T17453] hsr_slave_0: entered promiscuous mode [ 430.873316][T17453] hsr_slave_1: entered promiscuous mode [ 430.891107][T17453] debugfs: 'hsr0' already exists in 'hsr' [ 430.899031][T17453] Cannot create hsr debugfs directory [ 431.003573][T17581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3176'. [ 431.354968][T17597] netlink: zone id is out of range [ 431.372568][T17597] netlink: zone id is out of range [ 431.431592][T17597] netlink: zone id is out of range [ 431.469320][T17597] netlink: zone id is out of range [ 431.493904][T17597] netlink: zone id is out of range [ 431.499476][T17597] netlink: zone id is out of range [ 431.507395][T17597] netlink: zone id is out of range [ 431.591849][T17597] netlink: set zone limit has 4 unknown bytes [ 432.125234][ T5162] Bluetooth: hci3: command tx timeout [ 432.172264][T17453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.319912][T17453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49925 - 0 [ 433.069307][T17671] netlink: 'syz.1.3192': attribute type 64 has an invalid length. [ 433.086281][T17453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.128843][T17453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49925 - 0 [ 433.216663][T17682] Cannot find set identified by id 65534 to match [ 433.385421][T17453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.396358][T17453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49925 - 0 [ 433.546440][T17690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3198'. [ 433.552941][T17453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.575131][T17693] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3199'. [ 433.589555][T17453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49925 - 0 [ 433.767945][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 433.812669][T17700] hsr_slave_0: left promiscuous mode [ 433.845817][T17700] hsr_slave_1: left promiscuous mode [ 433.931383][T17706] netlink: 'syz.1.3203': attribute type 1 has an invalid length. [ 434.013254][T17706] bond1: entered promiscuous mode [ 434.029403][T17711] netlink: 'syz.0.3204': attribute type 1 has an invalid length. [ 434.037616][T17706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.131558][T17708] bond1: (slave bridge1): making interface the new active one [ 434.139667][T17708] bridge1: entered promiscuous mode [ 434.146750][T17708] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 434.157991][T17711] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 434.205884][ T5162] Bluetooth: hci3: command tx timeout [ 434.343732][T17719] xt_hashlimit: size too large, truncated to 1048576 [ 434.559034][T17453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.609172][T17733] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3209'. [ 434.622455][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.645923][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 434.651796][T17453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.687561][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.709365][T17743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3210'. [ 434.716192][T17453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.747072][T17746] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3212'. [ 434.749326][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.807110][T17748] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.817163][T17746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.825347][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 434.838721][T17746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.863350][T17746] bond0 (unregistering): Released all slaves [ 434.899496][T17752] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3214'. [ 434.910940][T17453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.923740][T17453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.041751][T17757] veth1_macvtap: left promiscuous mode [ 435.443853][T17453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.516443][T17453] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.608169][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.615412][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.668122][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.675370][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.921211][T17802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 435.923850][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x73 [ 436.051767][T17807] netlink: 'syz.2.3229': attribute type 1 has an invalid length. [ 436.287539][ T5162] Bluetooth: hci3: command tx timeout [ 436.341501][T17453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.368271][T17823] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 436.411807][T17453] veth0_vlan: entered promiscuous mode [ 436.431994][T17453] veth1_vlan: entered promiscuous mode [ 436.538209][T17453] veth0_macvtap: entered promiscuous mode [ 436.561741][T17453] veth1_macvtap: entered promiscuous mode [ 436.649256][T17841] netlink: 'syz.4.3237': attribute type 8 has an invalid length. [ 436.653336][T17453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.778586][T17453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.818464][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.847256][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.892570][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.931923][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.259338][T17864] netlink: 'syz.0.3244': attribute type 1 has an invalid length. [ 437.329189][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.340802][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.462799][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.485684][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.565514][T17872] delete_channel: no stack [ 438.481293][T17931] Cannot find set identified by id 0 to match [ 438.729050][T17941] __nla_validate_parse: 6 callbacks suppressed [ 438.729073][T17941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3264'. [ 438.752155][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 438.986907][T17949] netlink: 'syz.1.3266': attribute type 32 has an invalid length. [ 439.015449][T17953] openvswitch: netlink: Missing key (keys=40, expected=80) [ 439.022837][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 439.164950][ T5162] Bluetooth: hci0: command tx timeout [ 439.214342][T17960] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3269'. [ 439.219272][T17949] bond2: Setting coupled_control to off (0) [ 439.246379][T17961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3269'. [ 439.321667][T17966] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3271'. [ 439.696932][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 439.720407][T17976] syzkaller1: entered promiscuous mode [ 439.744691][T17976] syzkaller1: entered allmulticast mode [ 439.746425][T17980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.901618][T17998] netlink: 'syz.0.3279': attribute type 4 has an invalid length. [ 439.978694][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.987552][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.046449][T18005] netlink: 'syz.3.3281': attribute type 11 has an invalid length. [ 440.059137][T18005] netlink: 'syz.3.3281': attribute type 11 has an invalid length. [ 440.077742][T18005] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3281'. [ 440.563632][T18035] xt_l2tp: invalid flags combination: 8 [ 440.783102][T18043] nbd: couldn't find a device at index 1 [ 440.860550][T18046] vlan2: entered promiscuous mode [ 440.876364][T18046] bridge0: entered promiscuous mode [ 440.968721][T18059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.179114][T18072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3298'. [ 441.205774][T18071] geneve2: entered promiscuous mode [ 441.211195][T18071] geneve2: entered allmulticast mode [ 441.354735][ T29] audit: type=1107 audit(1777096796.778:7): pid=18080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 441.494768][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3301'. [ 441.625392][T17204] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.641771][T17204] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.657062][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.985605][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.012020][T18109] netlink: 'syz.2.3308': attribute type 11 has an invalid length. [ 442.147113][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.239750][T18128] 8021q: VLANs not supported on caif0 [ 442.531723][T18144] syzkaller0: entered promiscuous mode [ 442.541452][T18144] syzkaller0: entered allmulticast mode [ 442.562288][T18149] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 442.878160][T18157] netlink: 'syz.1.3323': attribute type 10 has an invalid length. [ 445.256662][T18149] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 445.265735][T18156] __nla_validate_parse: 6 callbacks suppressed [ 445.265754][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3323'. [ 445.420044][T18169] tipc: Enabling of bearer rejected, failed to enable media [ 445.464662][T18179] IPv6: sit1: Disabled Multicast RS [ 445.489334][T18179] sit1: entered allmulticast mode [ 445.727700][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.913654][T18213] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.960062][T18216] netlink: 'syz.4.3338': attribute type 4 has an invalid length. [ 446.015796][T18217] netlink: 'syz.3.3337': attribute type 4 has an invalid length. [ 446.068082][T18217] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3337'. [ 446.311726][T18237] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 446.635666][T18256] sctp: [Deprecated]: syz.0.3347 (pid 18256) Use of int in max_burst socket option deprecated. [ 446.635666][T18256] Use struct sctp_assoc_value instead [ 446.739006][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'. [ 446.761628][T18261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.874780][T18261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.987095][T18275] netlink: 'syz.0.3351': attribute type 1 has an invalid length. [ 447.025852][T18275] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3351'. [ 447.056856][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 447.218929][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 447.612521][T18316] block nbd0: reconnected socket [ 447.622642][T18316] block nbd0: Unsupported socket: should be TCP or UNIX. [ 447.639648][ T5162] block nbd0: Receive control failed (result -32) [ 447.798930][T18325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3367'. [ 447.855555][T18325] netlink: 'syz.3.3367': attribute type 1 has an invalid length. [ 448.254044][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 448.501234][T18362] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3374'. [ 448.584318][T18366] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 448.627862][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3376'. [ 450.222032][ T3485] bridge_slave_0: left promiscuous mode [ 450.229973][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.256448][ T3485] dvmrp0: left allmulticast mode [ 450.439028][ T3485] gretap0 (unregistering): left promiscuous mode [ 450.462100][ T3485] bond2 (unregistering): (slave gretap1): Releasing active interface [ 450.486017][ T3485] team0: Port device gretap2 removed [ 450.522620][ T3485] bond3 (unregistering): (slave geneve2): Releasing active interface [ 450.738817][ T3485] bond8 (unregistering): (slave bridge4): Releasing active interface [ 450.933160][ T3485] bond0 (unregistering): left promiscuous mode [ 450.939577][ T3485] bond_slave_0: left promiscuous mode [ 450.945375][ T3485] bond_slave_1: left promiscuous mode [ 450.951109][ T3485] bridge_slave_1: left promiscuous mode [ 450.965025][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.967041][T18330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.121734][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.187816][ T3485] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 451.252398][ T3485] bond0 (unregistering): Released all slaves [ 451.283197][ T3485] bond1 (unregistering): Released all slaves [ 451.342421][ T3485] bond2 (unregistering): Released all slaves [ 451.380921][T18399] netlink: 'syz.2.3382': attribute type 3 has an invalid length. [ 451.397957][T18399] __nla_validate_parse: 2 callbacks suppressed [ 451.397977][T18399] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3382'. [ 451.399075][ T3485] bond3 (unregistering): Released all slaves [ 451.482254][ T3485] bond4 (unregistering): Released all slaves [ 451.502727][ T3485] bond5 (unregistering): Released all slaves [ 451.523173][ T3485] bond6 (unregistering): (slave veth3): Releasing active interface [ 451.532744][ T3485] bond6 (unregistering): Released all slaves [ 451.547861][ T3485] bond7 (unregistering): Released all slaves [ 451.561791][ T3485] bond8 (unregistering): Released all slaves [ 451.584557][ T3485] bond9 (unregistering): Released all slaves [ 451.598859][ T3485] bond10 (unregistering): Released all slaves [ 451.612650][ T3485] bond11 (unregistering): Released all slaves [ 451.629464][ T3485] bond12 (unregistering): (slave veth5): Releasing active interface [ 451.637615][ T3485] veth0_to_bond: entered promiscuous mode [ 451.655733][ T3485] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 451.666082][ T3485] bond12 (unregistering): Released all slaves [ 451.679936][ T3485] bond13 (unregistering): Released all slaves [ 451.696938][ T3485] bond14 (unregistering): Released all slaves [ 451.711727][ T3485] bond15 (unregistering): Released all slaves [ 451.740555][T18401] bond1: option mode: unable to set because the bond device is up [ 451.749380][T18402] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 451.778076][T18402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.846786][T18402] bond1: (slave lo): making interface the new active one [ 451.888985][T18402] bond1: (slave lo): Enslaving as an active interface with an up link [ 451.890902][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 451.931386][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 451.932329][T18402] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 451.961190][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'. [ 452.016320][T18416] SET target dimension over the limit! [ 452.021992][ T3485] tipc: Left network mode [ 452.187879][ T3485] IPVS: stopping master sync thread 8494 ... [ 452.436574][T18430] netlink: 'syz.1.3393': attribute type 21 has an invalid length. [ 452.447290][T18439] openvswitch: netlink: Unknown key attributes 2 [ 452.567121][T18430] netlink: 'syz.1.3393': attribute type 1 has an invalid length. [ 452.810169][T18455] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3398'. [ 453.357604][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 454.023689][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 454.044430][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.073486][T18519] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.260559][T18533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3417'. [ 454.434921][T18541] netlink: 'syz.2.3420': attribute type 12 has an invalid length. [ 454.470065][T18545] nbd: must specify a size in bytes for the device [ 454.648276][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3424'. [ 454.676472][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.702342][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.731128][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.759871][ T3485] veth1_macvtap: left promiscuous mode [ 454.773809][ T3485] veth0_macvtap: left promiscuous mode [ 455.259085][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 455.618223][ T12] smbdirect: ib_dev[syz0] removed [ 455.714664][ T9804] lo speed is unknown, defaulting to 1000 [ 455.734425][ T9804] infiniband syz0: ib_query_port failed (-19) [ 455.871976][T18587] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3431'. [ 455.899730][T18587] openvswitch: netlink: Key 11 has unexpected len 16 expected 2 [ 456.093498][T18596] syzkaller1: tun_chr_ioctl cmd 3224918120 [ 456.104391][T18604] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 456.244370][T18596] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 456.256175][T18596] syzkaller1: group set to 0 [ 456.322828][T18604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.369078][T18608] bond0: (slave veth5): Enslaving as an active interface with a down link [ 456.378161][T18609] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 456.387948][T18609] syzkaller1: linktype set to 823 [ 456.660528][ T3485] IPVS: stop unused estimator thread 0... [ 456.848252][T18650] x_tables: duplicate underflow at hook 2 [ 457.137172][T18670] __nla_validate_parse: 1 callbacks suppressed [ 457.137190][T18670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 457.189554][T18670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 457.400797][T18679] Bluetooth: MGMT ver 1.23 [ 457.471905][T18685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3455'. [ 457.700278][T18696] netlink: 'syz.0.3458': attribute type 10 has an invalid length. [ 457.728141][T18696] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.3458'. [ 457.757302][T18698] netlink: 'syz.2.3460': attribute type 3 has an invalid length. [ 457.851841][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'. [ 457.882092][T18703] netlink: 808 bytes leftover after parsing attributes in process `syz.4.3461'. [ 458.264576][T18725] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3468'. [ 458.291487][T18725] 0·: renamed from hsr_slave_1 (while UP) [ 458.355232][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 458.370024][T18728] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 458.424781][T18730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3471'. [ 458.438214][T18730] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3471'. [ 458.681524][T18725] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 458.971570][T18734] : renamed from bond0 (while UP) [ 459.042271][T18745] syz_tun: entered allmulticast mode [ 459.400404][T18761] macvlan2: entered allmulticast mode [ 459.411433][T18761] dummy0: entered allmulticast mode [ 459.421645][T18761] dummy0: entered promiscuous mode [ 459.959382][T18788] netlink: 'syz.1.3489': attribute type 62 has an invalid length. [ 460.174085][T18802] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 460.561120][T18820] x_tables: duplicate underflow at hook 1 [ 460.744749][T18825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.799327][T18829] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 461.786584][T18888] tipc: Started in network mode [ 461.791834][T18888] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 461.799594][T18888] tipc: Enabled bearer , priority 24 [ 461.896932][T18893] xt_hashlimit: size too large, truncated to 1048576 [ 462.098109][T18904] bond1: option mode: invalid value (133) [ 462.116019][T18904] bond1 (unregistering): Released all slaves [ 462.152006][T18909] __nla_validate_parse: 10 callbacks suppressed [ 462.152026][T18909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3525'. [ 462.242009][T18906] bond1: option mode: invalid value (133) [ 462.254257][T18906] bond1 (unregistering): Released all slaves [ 462.669851][T18938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3534'. [ 462.938090][T18949] netlink: 'syz.3.3537': attribute type 10 has an invalid length. [ 462.940640][ T24] tipc: Node number set to 10005162 [ 462.983232][T18949] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.017748][T18949] bridge_slave_1: left allmulticast mode [ 463.035903][T18949] bridge_slave_1: left promiscuous mode [ 463.048655][T18949] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.088298][T18949] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 463.335621][T18972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.346413][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3543'. [ 463.376206][T18972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.707865][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3550'. [ 463.822797][T19008] netlink: 'syz.4.3553': attribute type 8 has an invalid length. [ 463.939710][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3555'. [ 464.050644][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 464.081541][T19018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3557'. [ 464.131131][T19024] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3557'. [ 464.524503][T19042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3565'. [ 464.555339][T19042] netlink: 'syz.2.3565': attribute type 1 has an invalid length. [ 464.567858][T19042] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3565'. [ 464.580687][T19042] netlink: 'syz.2.3565': attribute type 1 has an invalid length. [ 464.594490][T19042] netlink: 'syz.2.3565': attribute type 8 has an invalid length. [ 464.710931][T19045] dvmrp0: entered allmulticast mode [ 464.872390][T19059] netlink: 'syz.1.3571': attribute type 1 has an invalid length. [ 464.892238][T19059] netlink: 'syz.1.3571': attribute type 1 has an invalid length. [ 464.909669][T19059] netlink: 'syz.1.3571': attribute type 8 has an invalid length. [ 470.685732][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.147258][T19083] __nla_validate_parse: 9 callbacks suppressed [ 486.147288][T19083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3577'. [ 486.303581][T19090] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3582'. [ 486.352906][T19096] x_tables: duplicate underflow at hook 2 [ 486.447885][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 486.734409][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'. [ 487.190362][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 487.252787][T19159] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3600'. [ 487.459322][ T9] IPVS: starting estimator thread 0... [ 487.567226][T19168] IPVS: using max 30 ests per chain, 72000 per kthread [ 487.748269][T19180] syzkaller0: entered allmulticast mode [ 487.797223][T19180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3609'. [ 487.827537][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'. [ 487.953904][T19202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3614'. [ 488.058619][T19205] pim6reg1: entered promiscuous mode [ 488.080099][T19205] pim6reg1: entered allmulticast mode [ 488.125216][ T5162] Bluetooth: hci5: command 0x0406 tx timeout [ 488.321840][T19217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.379353][T19226] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3621'. [ 488.816489][T19248] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 489.114604][T19272] openvswitch: netlink: IP tunnel attribute has 4200 unknown bytes. [ 489.330723][T19274] syzkaller0: entered promiscuous mode [ 489.336722][T19274] syzkaller0: entered allmulticast mode [ 489.370796][T19284] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 489.394464][T19280] syzkaller0: entered promiscuous mode [ 489.410021][T19280] syzkaller0: entered allmulticast mode [ 489.494079][T16739] IPVS: starting estimator thread 0... [ 489.594333][T19294] IPVS: using max 34 ests per chain, 81600 per kthread [ 489.937547][T19320] netlink: 'syz.3.3650': attribute type 1 has an invalid length. [ 490.071458][T19326] block nbd3: Unsupported socket: should be TCP or UNIX. [ 492.408037][T19351] __nla_validate_parse: 8 callbacks suppressed [ 492.408058][T19351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3662'. [ 492.426354][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 492.565079][T19354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3663'. [ 492.925587][T19371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3665'. [ 493.061322][T19374] netlink: 'syz.3.3668': attribute type 2 has an invalid length. [ 493.094053][T19374] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3668'. [ 493.158612][T19374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3668'. [ 493.185679][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3668'. [ 493.229739][T19375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3668'. [ 493.267977][T19386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3672'. [ 493.327727][T19388] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3673'. [ 493.367165][T19388] netlink: ct family unspecified [ 493.540420][T19400] IPVS: Unknown mcast interface: syzkaller1 [ 493.875446][T19427] netlink: 'syz.3.3685': attribute type 1 has an invalid length. [ 494.089546][T19440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.155674][T19448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.193369][T19454] netlink: 'syz.1.3692': attribute type 1 has an invalid length. [ 494.272390][T19454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.311135][T19458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.361644][T19465] bond4: (slave dummy0): making interface the new active one [ 494.373507][T19465] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 494.403163][T19462] bond4: (slave veth5): Enslaving as an active interface with a down link [ 494.537608][T19454] bond4: (slave dummy0): Releasing active interface [ 494.544898][T19454] bond4: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 494.574827][T19483] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 494.598563][T19472] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 494.886934][T19499] xt_socket: unknown flags 0xe4 [ 495.065316][T19512] netlink: 'syz.1.3705': attribute type 24 has an invalid length. [ 495.199258][T19516] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 495.736168][T19548] netlink: 'syz.2.3719': attribute type 1 has an invalid length. [ 495.893637][T19548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.045488][T19566] bond2: (slave geneve2): making interface the new active one [ 496.057158][T19566] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 496.269692][T19580] netlink: 'syz.3.3726': attribute type 3 has an invalid length. [ 496.456647][T19546] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 496.471321][T19546] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 496.559390][T19546] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.577301][T19546] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 496.618372][T19592] bond0: entered promiscuous mode [ 496.623723][T19592] bond_slave_0: entered promiscuous mode [ 496.631147][T19592] bond_slave_1: entered promiscuous mode [ 496.666344][T19546] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.690773][T19546] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 496.762127][T19546] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.774905][T19546] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 496.822461][T19546] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.836844][T19546] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 497.246710][T19608] netlink: 'syz.3.3736': attribute type 2 has an invalid length. [ 497.274996][T19607] delete_channel: no stack [ 497.292301][T19607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.701910][T19644] __nla_validate_parse: 10 callbacks suppressed [ 497.701923][T19644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3746'. [ 497.798331][T19650] sctp: [Deprecated]: syz.0.3747 (pid 19650) Use of int in maxseg socket option. [ 497.798331][T19650] Use struct sctp_assoc_value instead [ 498.222831][T19680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3754'. [ 498.247313][T19668] syzkaller0: entered promiscuous mode [ 498.253194][T19668] syzkaller0: entered allmulticast mode [ 498.301198][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3754'. [ 500.551605][T19693] 8021q: VLANs not supported on ipvlan0 [ 500.749977][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3762'. [ 500.783047][T19713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3766'. [ 501.006999][T19725] netlink: 'syz.0.3768': attribute type 39 has an invalid length. [ 501.258796][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3771'. [ 501.406592][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.415393][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.428628][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.634733][T19754] Bluetooth: MGMT ver 1.23 [ 501.732523][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3776'. [ 502.141018][T19780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3783'. [ 502.152665][T19780] nbd: must specify at least one socket [ 502.159397][T19781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3783'. [ 502.172983][T19781] nbd: must specify at least one socket [ 502.189254][T19780] block nbd0: NBD_DISCONNECT [ 502.194882][T19780] block nbd0: Send disconnect failed -32 [ 502.202605][T19780] block nbd0: shutting down sockets [ 502.456585][T19791] syzkaller1: entered promiscuous mode [ 502.468418][T19791] syzkaller1: entered allmulticast mode [ 502.773666][T19812] netlink: 'syz.1.3795': attribute type 11 has an invalid length. [ 503.158653][T19840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.324183][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.807227][T19876] tipc: Started in network mode [ 503.816713][T19876] tipc: Node identity bbbbbb, cluster identity 4711 [ 503.834356][T19876] tipc: Enabled bearer , priority 10 [ 503.932468][T19881] syzkaller1: entered promiscuous mode [ 503.953013][T19881] syzkaller1: entered allmulticast mode [ 503.974999][T19886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.086570][T19886] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3817'. [ 504.260277][T19896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3821'. [ 504.319049][T19902] : renamed from bond0 (while UP) [ 504.477029][T19919] netlink: 'syz.4.3826': attribute type 3 has an invalid length. [ 504.562429][T19924] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3829'. [ 504.620131][T19919] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3826'. [ 504.834138][T16739] tipc: Node number set to 3149642496 [ 504.893508][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3836'. [ 504.903739][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'. [ 504.914963][T19940] netlink: 'syz.2.3835': attribute type 1 has an invalid length. [ 504.937247][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3835'. [ 504.983506][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'. [ 505.007495][T19944] netlink: 'syz.2.3835': attribute type 1 has an invalid length. [ 505.019303][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 505.041479][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3835'. [ 505.512847][T19969] bridge4: entered promiscuous mode [ 505.519249][T19969] bridge4: entered allmulticast mode [ 505.531571][T19969] team0: Port device bridge4 added [ 505.567815][T19976] bridge0: port 3(team0) entered blocking state [ 505.577085][T19976] bridge0: port 3(team0) entered disabled state [ 505.619603][T19976] team0: entered allmulticast mode [ 505.638024][T19976] team_slave_0: entered allmulticast mode [ 505.653413][T19976] team_slave_1: entered allmulticast mode [ 505.715685][T19976] team0: entered promiscuous mode [ 505.728739][T19976] team_slave_0: entered promiscuous mode [ 505.751830][T19976] team_slave_1: entered promiscuous mode [ 505.769827][T19976] bridge0: port 3(team0) entered blocking state [ 505.778812][T19976] bridge0: port 3(team0) entered forwarding state [ 506.085746][T19995] netlink: 'syz.1.3851': attribute type 39 has an invalid length. [ 507.681264][T20043] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 507.706638][T20048] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 507.808069][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.878040][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.891155][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.163880][T20073] netlink: 'syz.3.3875': attribute type 10 has an invalid length. [ 508.204823][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.225170][T20073] team0: Device dummy0 failed to register rx_handler [ 508.227101][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.256657][T20082] netlink: 'syz.3.3875': attribute type 10 has an invalid length. [ 508.280212][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.582075][T20100] bond0: entered promiscuous mode [ 508.599793][T20100] bond_slave_0: entered promiscuous mode [ 508.618654][T20100] bond_slave_1: entered promiscuous mode [ 508.636564][T20100] bridge_slave_1: entered promiscuous mode [ 508.645136][T20100] gretap0: entered promiscuous mode [ 508.652582][T20100] hsr1: entered promiscuous mode [ 509.130958][T20129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.141473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.176107][T20129] netlink: 'syz.2.3888': attribute type 39 has an invalid length. [ 509.244282][ T24] page_pool_release_retry() stalled pool shutdown: id 91, 1 inflight 60 sec [ 509.259638][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.508417][T17208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.606428][T20153] __nla_validate_parse: 15 callbacks suppressed [ 509.606448][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3897'. [ 509.872193][T20166] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3901'. [ 509.939668][T20172] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3905'. [ 509.969411][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3905'. [ 510.069904][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3903'. [ 510.081729][T20186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3903'. [ 510.222667][T20204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3908'. [ 510.237499][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 510.265983][T20182] bond2: entered promiscuous mode [ 510.330863][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'. [ 510.640323][T20222] netlink: 'syz.0.3914': attribute type 24 has an invalid length. [ 510.655012][T20220] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 510.871718][T20236] xt_hashlimit: size too large, truncated to 1048576 [ 510.973801][T20240] netlink: 'syz.2.3918': attribute type 8 has an invalid length. [ 511.349052][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3925'. [ 512.112406][T20293] netlink: 'syz.4.3932': attribute type 1 has an invalid length. [ 512.188656][T20295] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 512.207693][T20299] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003 [ 512.214640][T20295] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 512.217887][T20299] sctp: [Deprecated]: syz.1.3935 (pid 20299) Use of int in max_burst socket option. [ 512.217887][T20299] Use struct sctp_assoc_value instead [ 512.864869][ T57] net_ratelimit: 16 callbacks suppressed [ 512.864887][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.894947][T20323] bond0: Unable to set up delay as MII monitoring is disabled [ 512.915683][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.938304][T20323] bond0 (unregistering): Released all slaves [ 513.404843][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.620746][T20359] syzkaller1: entered promiscuous mode [ 513.662279][T20359] syzkaller1: entered allmulticast mode [ 513.918488][T20375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.964558][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.050759][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.086757][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.446295][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.548588][T20380] syzkaller1: entered promiscuous mode [ 514.554592][T20380] syzkaller1: entered allmulticast mode [ 514.788801][T20410] netlink: 'syz.1.3963': attribute type 1 has an invalid length. [ 515.047671][T20424] openvswitch: netlink: IP tunnel dst address not specified [ 515.059573][T20424] openvswitch: netlink: IP tunnel dst address not specified [ 515.080111][T20420] __nla_validate_parse: 3 callbacks suppressed [ 515.080131][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3966'. [ 515.198467][T20430] netlink: 'syz.3.3969': attribute type 1 has an invalid length. [ 515.236012][T20430] netlink: 'syz.3.3969': attribute type 2 has an invalid length. [ 515.261699][T20430] netlink: 'syz.3.3969': attribute type 1 has an invalid length. [ 515.283274][T20430] netlink: 'syz.3.3969': attribute type 3 has an invalid length. [ 515.310581][T20430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3969'. [ 515.479457][T20445] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.3974'. [ 515.639512][T20459] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3978'. [ 516.171435][T20484] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3986'. [ 516.194839][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'. [ 516.217571][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'. [ 516.477188][T20455] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 516.642261][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 517.001719][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3997'. [ 518.376040][T20606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4019'. [ 518.559937][ T7627] net_ratelimit: 19 callbacks suppressed [ 518.559959][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.614250][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.626594][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.837417][T20613] vxcan1 speed is unknown, defaulting to 1000 [ 519.325189][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.436724][T20647] netlink: 'syz.2.4030': attribute type 1 has an invalid length. [ 519.577341][T20647] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 519.644922][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.755837][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.769184][T20662] bridge5: entered promiscuous mode [ 519.792071][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.818366][T20671] netlink: 'syz.2.4035': attribute type 10 has an invalid length. [ 519.818848][T20662] bridge5: entered allmulticast mode [ 520.049153][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.130822][T20686] __nla_validate_parse: 5 callbacks suppressed [ 520.130841][T20686] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4039'. [ 520.460745][T20694] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 520.583166][T20696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.590545][T20696] IPv6: NLM_F_CREATE should be set when creating new route [ 520.597861][T20696] IPv6: NLM_F_CREATE should be set when creating new route [ 520.605161][T20696] IPv6: NLM_F_CREATE should be set when creating new route [ 520.662695][T20701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.683310][T20704] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4044'. [ 520.701314][T20704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4044'. [ 520.701699][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.729830][T20704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4044'. [ 521.181287][T20736] syzkaller1: entered promiscuous mode [ 521.199625][T20736] syzkaller1: entered allmulticast mode [ 521.478185][T20746] SET target dimension over the limit! [ 521.703701][T20765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4064'. [ 521.780972][T20769] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4066'. [ 522.265230][T20788] ipt_ECN: cannot use operation on non-tcp rule [ 522.484619][T20774] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4067'. [ 523.675997][T20830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4082'. [ 523.807097][ T24] net_ratelimit: 5323 callbacks suppressed [ 523.807115][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.930456][T20848] netlink: 'syz.1.4090': attribute type 2 has an invalid length. [ 523.931701][T20850] netlink: 'syz.4.4089': attribute type 1 has an invalid length. [ 523.993778][T20850] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.4089'. [ 524.245099][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.260034][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.552470][T20882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4098'. [ 524.713125][T20897] netlink: 'syz.3.4100': attribute type 1 has an invalid length. [ 524.848946][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.377934][T20924] sctp: [Deprecated]: syz.4.4109 (pid 20924) Use of int in maxseg socket option. [ 525.377934][T20924] Use struct sctp_assoc_value instead [ 525.395453][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.471541][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.649083][T20943] netlink: 'syz.3.4114': attribute type 12 has an invalid length. [ 525.884665][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.128813][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.467536][T20971] netlink: 'syz.1.4121': attribute type 1 has an invalid length. [ 526.578285][T20979] tunl0: entered promiscuous mode [ 526.605381][T20979] netlink: 'syz.4.4122': attribute type 3 has an invalid length. [ 526.613470][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.631189][T20979] __nla_validate_parse: 2 callbacks suppressed [ 526.631207][T20979] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4122'. [ 526.639851][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.850035][T20995] xt_TCPMSS: Only works on TCP SYN packets [ 526.880308][T21001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4128'. [ 526.906935][T20991] tipc: Resetting bearer [ 527.162474][T21012] veth0: entered promiscuous mode [ 527.198780][T21015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4134'. [ 527.199384][T21016] netlink: 'syz.3.4135': attribute type 1 has an invalid length. [ 527.319479][T21026] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4138'. [ 527.335363][T21023] macvlan3: entered promiscuous mode [ 527.340952][T21023] macvlan3: entered allmulticast mode [ 527.349622][T21023] bond3: entered promiscuous mode [ 527.355786][T21023] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 527.363460][T21016] sctp: [Deprecated]: syz.3.4135 (pid 21016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.363460][T21016] Use struct sctp_sack_info instead [ 527.381364][T21023] bond3: left promiscuous mode [ 527.449050][T21024] veth0: left promiscuous mode [ 527.462770][T21028] syz_tun: left allmulticast mode [ 527.573657][T21044] netlink: 'syz.3.4142': attribute type 2 has an invalid length. [ 527.581777][T21044] netlink: 'syz.3.4142': attribute type 2 has an invalid length. [ 527.611798][T21042] pim6reg1: entered promiscuous mode [ 527.625157][T21042] pim6reg1: entered allmulticast mode [ 527.780387][T21056] sctp: [Deprecated]: syz.4.4146 (pid 21056) Use of int in maxseg socket option. [ 527.780387][T21056] Use struct sctp_assoc_value instead [ 527.930482][T21067] bond0: Error: Cannot enslave bond to itself. [ 528.108648][T21070] netlink: 'syz.4.4150': attribute type 12 has an invalid length. [ 528.715655][T21085] team0: left allmulticast mode [ 528.755171][T21085] team_slave_0: left allmulticast mode [ 528.781965][T21085] team_slave_1: left allmulticast mode [ 528.832763][T21085] team0: left promiscuous mode [ 528.878498][T21085] team_slave_0: left promiscuous mode [ 528.903831][T21085] team_slave_1: left promiscuous mode [ 528.921943][T21085] bridge0: port 3(team0) entered disabled state [ 528.930837][ T9804] net_ratelimit: 6 callbacks suppressed [ 528.930850][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.955560][T21085] bridge_slave_0: left allmulticast mode [ 528.964621][T21085] bridge_slave_0: left promiscuous mode [ 528.971739][T21085] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.987338][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.007685][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.019523][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.039088][T21085] bridge_slave_1: left allmulticast mode [ 529.049521][T21085] bridge_slave_1: left promiscuous mode [ 529.061737][T21085] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.092783][T21085] : (slave bond_slave_0): Releasing backup interface [ 529.130241][T21085] : (slave bond_slave_1): Releasing backup interface [ 529.165181][T21085] team0: Port device team_slave_0 removed [ 529.176312][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.193029][T21085] team0: Port device team_slave_1 removed [ 529.202746][T21085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.210583][T21085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.225353][T21085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.232866][T21085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.241999][T21085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 529.666646][T21135] netlink: 'syz.0.4168': attribute type 4 has an invalid length. [ 529.704814][T21137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4170'. [ 529.705524][T21135] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4168'. [ 529.748755][T21137] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4170'. [ 529.769570][T21144] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4170'. [ 529.809327][T21135] tc_dump_action: action bad kind [ 529.822631][T21147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4173'. [ 530.048318][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.145177][T21167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.184676][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.210530][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.250564][T21175] netlink: 'syz.3.4180': attribute type 11 has an invalid length. [ 530.285552][T21169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4179'. [ 530.331797][T21169] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 530.992200][T21226] xt_socket: unknown flags 0x50 [ 531.426021][T21249] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 531.658412][T21256] bond3 (unregistering): Released all slaves [ 531.833715][T21262] geneve2: entered promiscuous mode [ 531.853578][T21262] geneve2: entered allmulticast mode [ 531.882727][T21284] netlink: 'syz.2.4206': attribute type 12 has an invalid length. [ 531.893006][T21284] netlink: 'syz.2.4206': attribute type 29 has an invalid length. [ 531.902228][T21284] __nla_validate_parse: 4 callbacks suppressed [ 531.902242][T21284] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4206'. [ 531.919953][T21284] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4206'. [ 532.035261][T21288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 532.101314][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 532.137959][T21288] xfrm1: entered promiscuous mode [ 532.168103][T21288] xfrm1: entered allmulticast mode [ 532.413322][T21309] syzkaller1: entered promiscuous mode [ 532.438638][T21309] syzkaller1: entered allmulticast mode [ 532.482270][ T9] IPVS: starting estimator thread 0... [ 532.585045][T21321] IPVS: using max 30 ests per chain, 72000 per kthread [ 532.929838][T21345] tipc: Started in network mode [ 532.946635][T21345] tipc: Node identity f28740a140f1, cluster identity 4711 [ 532.970595][T21349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4222'. [ 532.981005][T21345] tipc: Enabled bearer , priority 0 [ 532.992894][T21349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4222'. [ 533.134832][T21346] syzkaller0: entered promiscuous mode [ 533.152132][T21346] syzkaller0: entered allmulticast mode [ 533.165755][T21346] tipc: Resetting bearer [ 533.193274][T21354] dvmrp0: entered allmulticast mode [ 533.448190][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 533.468252][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4223'. [ 533.482094][T21375] netlink: 'syz.1.4226': attribute type 1 has an invalid length. [ 533.533296][T21346] tipc: Resetting bearer [ 534.216890][ T24] net_ratelimit: 12 callbacks suppressed [ 534.216910][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.705457][T19316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.715508][T19316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.246101][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.254310][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.822087][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.830626][T18251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.014245][T21346] tipc: Disabling bearer [ 536.023660][T21375] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 536.092084][ T9] tipc: Node number set to 2994094241 [ 536.203012][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4230'. [ 536.284714][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.559309][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4238'. [ 536.587041][T21417] netlink: 'syz.1.4238': attribute type 5 has an invalid length. [ 536.615281][T21420] tipc: Enabling of bearer rejected, failed to enable media [ 536.692437][T17203] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.719266][T17203] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.726127][T21420] blkio.reset_stats is deprecated [ 536.747226][T17203] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.776231][T17203] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.934153][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.957149][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.798137][T21477] __nla_validate_parse: 4 callbacks suppressed [ 537.798156][T21477] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.4252'. [ 537.828453][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'. [ 537.845850][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'. [ 537.975748][T21485] netlink: 'syz.2.4254': attribute type 1 has an invalid length. [ 538.136818][T21485] bond4: entered promiscuous mode [ 538.147734][T21485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.613641][T21508] syzkaller1: entered promiscuous mode [ 538.645479][T21508] syzkaller1: entered allmulticast mode [ 538.664406][T21508] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 538.695101][T21508] netlink: 'syz.4.4259': attribute type 3 has an invalid length. [ 538.759651][T21515] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 538.993665][T21533] netlink: 'syz.3.4267': attribute type 5 has an invalid length. [ 539.161059][T21548] only policy match revision 0 supported [ 539.161074][T21548] unable to load match [ 539.237597][ T12] net_ratelimit: 6 callbacks suppressed [ 539.237616][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.253411][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.336842][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4271'. [ 539.349237][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4271'. [ 539.359695][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4271'. [ 539.370771][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4271'. [ 539.380697][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4271'. [ 539.390790][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4271'. [ 539.400813][T21554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4271'. [ 539.410141][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.897652][T21585] netlink: 'syz.0.4278': attribute type 10 has an invalid length. [ 540.121876][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.133031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.391318][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.430174][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.507963][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.819265][T21644] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 541.325165][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.364624][T21680] SET target dimension over the limit! [ 541.574282][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.162690][T21704] syzkaller1: entered promiscuous mode [ 542.205246][T21704] syzkaller1: entered allmulticast mode [ 542.391255][T21717] syzkaller0: entered promiscuous mode [ 542.403601][T21717] syzkaller0: entered allmulticast mode [ 542.855121][T21750] sctp: [Deprecated]: syz.1.4324 (pid 21750) Use of int in maxseg socket option. [ 542.855121][T21750] Use struct sctp_assoc_value instead [ 542.923375][T21750] sctp: [Deprecated]: syz.1.4324 (pid 21750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.923375][T21750] Use struct sctp_sack_info instead [ 542.941607][T21756] netlink: 'syz.2.4328': attribute type 5 has an invalid length. [ 542.963514][T21754] netlink: 'syz.0.4326': attribute type 13 has an invalid length. [ 543.188216][T21778] __nla_validate_parse: 44 callbacks suppressed [ 543.188234][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4330'. [ 543.207046][T21776] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 543.240604][T21781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4331'. [ 543.260995][ T5578] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.365582][T21786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4333'. [ 543.426514][T21788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.471572][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4333'. [ 543.521706][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4333'. [ 543.541174][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4334'. [ 543.576024][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4333'. [ 543.597119][T21792] ip6erspan0: entered promiscuous mode [ 544.023488][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4341'. [ 544.033393][T21819] netlink: 'syz.3.4341': attribute type 1 has an invalid length. [ 544.041550][T21819] netlink: 'syz.3.4341': attribute type 2 has an invalid length. [ 544.061195][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4342'. [ 544.139688][T21820] vlan3: entered promiscuous mode [ 544.161852][T21823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4343'. [ 544.173070][T21820] bridge0: entered promiscuous mode [ 544.195342][T21823] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 544.218138][T21823] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 544.297918][T21832] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 544.364603][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.506444][T21857] netlink: 'syz.3.4350': attribute type 10 has an invalid length. [ 544.837982][T21866] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 544.866322][T21866] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 544.979761][T21881] netlink: 'syz.3.4357': attribute type 1 has an invalid length. [ 545.048115][T21881] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.394212][T21904] xt_hashlimit: size too large, truncated to 1048576 [ 545.908481][T21937] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 546.113376][T21956] "syz.0.4376" (21956) uses obsolete ecb(arc4) skcipher [ 546.181856][T21952] netlink: 'syz.2.4378': attribute type 29 has an invalid length. [ 546.693501][T21989] netlink: 'syz.4.4387': attribute type 1 has an invalid length. [ 546.711132][T21989] netlink: 'syz.4.4387': attribute type 1 has an invalid length. [ 547.193749][T22026] net_ratelimit: 9 callbacks suppressed [ 547.193769][T22026] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 547.370110][T22039] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 547.755147][T22060] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 547.760414][T22061] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 548.139431][T22081] : entered promiscuous mode [ 548.515634][T22093] IPVS: length: 24 != 16106127384 [ 548.527227][T22092] __nla_validate_parse: 9 callbacks suppressed [ 548.527245][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 548.559266][T22093] IPVS: length: 24 != 16106127384 [ 548.572767][T22102] sctp: [Deprecated]: syz.3.4420 (pid 22102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.572767][T22102] Use struct sctp_sack_info instead [ 548.592131][T22093] IPVS: length: 24 != 16106127384 [ 548.791967][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 548.853203][T22125] lo: entered promiscuous mode [ 548.880600][T22125] validate_nla: 5 callbacks suppressed [ 548.880617][T22125] netlink: 'syz.4.4422': attribute type 2 has an invalid length. [ 548.905823][T22125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.929012][T22131] ip6tnl0: Caught tx_queue_len zero misconfig [ 548.964273][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 549.011229][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 549.040283][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 549.066485][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 549.077508][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 549.090700][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 549.102653][T22116] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 549.811760][T22170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4437'. [ 549.863684][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4438'. [ 550.148548][T22192] nbd: must specify at least one socket [ 550.249481][T22202] netlink: 'syz.2.4441': attribute type 10 has an invalid length. [ 550.457521][T22202] veth0_vlan: left promiscuous mode [ 550.475641][T22202] veth0_vlan: entered promiscuous mode [ 550.502905][T22202] team0: Device veth0_vlan failed to register rx_handler [ 550.831077][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 550.872156][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 550.904929][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 550.933289][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 550.968426][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 550.991442][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 551.017843][T22241] netlink: 'syz.4.4454': attribute type 4 has an invalid length. [ 551.048992][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 551.422809][T22268] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 551.602115][T22279] netlink: 'syz.1.4463': attribute type 1 has an invalid length. [ 551.729068][T22283] bond5: entered promiscuous mode [ 551.735089][T22283] bond5: entered allmulticast mode [ 551.741282][T22283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.840829][T22279] bond0: entered promiscuous mode [ 551.878966][T22279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.338899][T22317] net_ratelimit: 2170 callbacks suppressed [ 552.338920][T22317] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 552.713383][T22321] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 552.769400][ T24] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 553.070770][T22349] gretap1: entered promiscuous mode [ 553.099409][T22349] gretap1: entered allmulticast mode [ 553.277336][T22359] IPv6: addrconf: prefix option has invalid lifetime [ 553.472923][T22358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 553.533375][T22367] macvlan2: entered promiscuous mode [ 553.563837][T22367] macvlan2: entered allmulticast mode [ 553.655905][T22371] bond5: (slave vti1): refused to change device type [ 553.706540][T22387] netlink: 'syz.0.4489': attribute type 44 has an invalid length. [ 553.742091][T22387] __nla_validate_parse: 65 callbacks suppressed [ 553.742111][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'. [ 554.126111][T22388] vxcan1 speed is unknown, defaulting to 1000 [ 554.159403][T22401] netlink: 'syz.1.4493': attribute type 1 has an invalid length. [ 554.193484][T22402] netlink: 'syz.1.4493': attribute type 1 has an invalid length. [ 554.418683][T22414] sctp: [Deprecated]: syz.2.4497 (pid 22414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.418683][T22414] Use struct sctp_sack_info instead [ 554.464900][T22411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4496'. [ 554.608166][T22428] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 555.030791][T22437] syzkaller0: entered promiscuous mode [ 555.045001][T22437] syzkaller0: entered allmulticast mode [ 555.364634][T22458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4507'. [ 555.460238][T22466] netlink: 'syz.0.4507': attribute type 1 has an invalid length. [ 555.474720][T22466] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4507'. [ 555.490236][T22466] netlink: 'syz.0.4507': attribute type 1 has an invalid length. [ 555.521547][T22466] netlink: 'syz.0.4507': attribute type 8 has an invalid length. [ 555.541079][T22466] netlink: 606 bytes leftover after parsing attributes in process `syz.0.4507'. [ 555.609023][T22473] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4510'. [ 558.033407][ T5507] veth0_vlan: left promiscuous mode [ 558.052716][ T5507] veth0_vlan: entered promiscuous mode [ 558.200674][T22478] netlink: 'syz.1.4511': attribute type 2 has an invalid length. [ 558.550597][T22495] kthread_run failed with err -4 [ 558.567294][T22505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 558.671046][T22509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4518'. [ 558.806992][T22499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 559.485219][T22543] netlink: 516 bytes leftover after parsing attributes in process `syz.2.4527'. [ 559.834592][T22571] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4531'. [ 559.877424][T22574] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4534'. [ 559.949429][T22577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4534'. [ 559.980103][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4533'. [ 560.039891][T22564] gre2: entered promiscuous mode [ 560.059825][T22564] gre2: entered allmulticast mode [ 560.617005][T22603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.731626][T22605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 561.071280][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4544'. [ 561.090158][T22638] Cannot find map_set index 135 as target [ 561.214918][T22649] netlink: 'syz.0.4549': attribute type 21 has an invalid length. [ 561.395946][T22657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4552'. [ 561.541320][T22673] netlink: 408 bytes leftover after parsing attributes in process `syz.3.4554'. [ 561.545547][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 561.863175][T22689] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 561.992891][T22696] netlink: 'syz.0.4560': attribute type 10 has an invalid length. [ 562.042180][T22696] netlink: 'syz.0.4560': attribute type 10 has an invalid length. [ 562.086604][T22696] batadv0: entered promiscuous mode [ 562.108891][T22696] batadv0: entered allmulticast mode [ 562.147714][T22696] bridge0: port 3(batadv0) entered blocking state [ 562.173220][T22696] bridge0: port 3(batadv0) entered disabled state [ 562.259760][T22707] x_tables: duplicate underflow at hook 1 [ 562.571257][T22731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.610429][ T57] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 562.621907][ T57] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 562.854650][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.868796][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 562.879923][ T1315] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 563.122883][T22757] netlink: 'syz.0.4572': attribute type 29 has an invalid length. [ 563.151669][T22765] netlink: 'syz.4.4576': attribute type 1 has an invalid length. [ 563.192832][T22769] netlink: 'syz.0.4572': attribute type 29 has an invalid length. [ 563.225091][T22757] netlink: 'syz.0.4572': attribute type 32 has an invalid length. [ 563.296187][T22765] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 563.357232][T22765] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 563.443747][T22765] bond0: (slave ip6gre1): making interface the new active one [ 563.462289][T22765] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 563.731067][T22786] syzkaller0: entered promiscuous mode [ 564.178956][T22814] vxcan1 speed is unknown, defaulting to 1000 [ 564.334547][T22819] x_tables: duplicate underflow at hook 1 [ 564.609368][T22829] __nla_validate_parse: 2 callbacks suppressed [ 564.609387][T22829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4591'. [ 564.611442][T22833] netlink: 'syz.4.4594': attribute type 1 has an invalid length. [ 564.707475][T22833] bond1: entered promiscuous mode [ 564.721547][T22833] bond1: entered allmulticast mode [ 564.728501][T22833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.849846][T22833] macvlan2: entered promiscuous mode [ 564.868177][T22833] macvlan2: entered allmulticast mode [ 564.880114][T22833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.356477][T22858] syzkaller0: entered promiscuous mode [ 565.370523][T22858] syzkaller0: entered allmulticast mode [ 567.965464][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.543198][T22942] x_tables: duplicate underflow at hook 1 [ 568.561666][T22943] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 568.585806][T22946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4621'. [ 568.644510][T22950] lo: Caught tx_queue_len zero misconfig [ 568.660424][T22950] netlink: 'syz.0.4622': attribute type 14 has an invalid length. [ 568.670477][T22950] netem: change failed [ 568.898330][T22966] netlink: 'syz.3.4627': attribute type 33 has an invalid length. [ 568.974549][T22966] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 568.996757][T22966] bond5 (unregistering): Released all slaves [ 569.047752][T22972] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.288334][T22974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4629'. [ 569.351979][T22977] netlink: 'syz.3.4630': attribute type 39 has an invalid length. [ 569.382612][T22982] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 569.685938][T23003] netlink: 337 bytes leftover after parsing attributes in process `syz.0.4636'. [ 569.925708][T23019] netlink: 'syz.0.4639': attribute type 2 has an invalid length. [ 569.961814][T23019] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4639'. [ 594.858696][T23092] netlink: 'syz.0.4643': attribute type 11 has an invalid length. [ 595.021795][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4648'. [ 595.310562][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4655'. [ 595.323101][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4655'. [ 595.559169][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 595.609059][T23145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4661'. [ 595.772796][T23153] sctp: [Deprecated]: syz.2.4663 (pid 23153) Use of int in max_burst socket option. [ 595.772796][T23153] Use struct sctp_assoc_value instead [ 595.837539][T23153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4663'. [ 595.869238][T23153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4663'. [ 596.352694][T23176] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4669'. [ 596.647631][T23185] netlink: 'syz.1.4672': attribute type 14 has an invalid length. [ 598.548295][T23143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.400854][T23237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4685'. [ 599.445111][T23239] delete_channel: no stack [ 599.453128][T23239] s5ÿÿø: renamed from vlan1 (while UP) [ 599.614611][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4690'. [ 600.370355][T23290] __nla_validate_parse: 1 callbacks suppressed [ 600.370373][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4701'. [ 600.386954][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4701'. [ 600.397212][T23289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4701'. [ 602.742447][T23256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.028958][T23310] syzkaller0: entered promiscuous mode [ 603.049373][T23310] syzkaller0: entered allmulticast mode [ 603.201479][T23300] syz.3.4706 (23300) used greatest stack depth: 15680 bytes left [ 603.352103][T23329] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.4712'. [ 603.362691][T23329] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.4712'. [ 603.368978][T23332] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4714'. [ 603.376594][T23329] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.4712'. [ 603.397511][T23327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4713'. [ 603.407753][T23329] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.4712'. [ 603.418462][T23327] netlink: 'syz.4.4713': attribute type 1 has an invalid length. [ 603.428293][T23329] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.4712'. [ 603.439611][T23327] netlink: 'syz.4.4713': attribute type 1 has an invalid length. [ 603.450424][T23327] netlink: 'syz.4.4713': attribute type 2 has an invalid length. [ 603.546899][T23339] netlink: 'syz.3.4715': attribute type 11 has an invalid length. [ 603.712452][T23347] netlink: 'syz.2.4718': attribute type 3 has an invalid length. [ 604.178588][T23379] xt_l2tp: v2 doesn't support IP mode [ 604.450715][T23396] netlink: 'syz.3.4732': attribute type 21 has an invalid length. [ 604.461848][T23396] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.467258][T23398] openvswitch: netlink: Invalid VLAN frame [ 604.956005][T23431] syzkaller0: entered promiscuous mode [ 604.978642][T23431] syzkaller0: entered allmulticast mode [ 604.988978][T23430] tipc: Enabled bearer , priority 0 [ 605.021938][T23426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.094500][T23426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.129243][T23430] tipc: Resetting bearer [ 605.220955][T23430] tipc: Disabling bearer [ 605.463463][T23462] __nla_validate_parse: 38 callbacks suppressed [ 605.463482][T23462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4748'. [ 605.676061][T23472] bond5 (unregistering): Released all slaves [ 605.770410][T23482] netlink: 'syz.4.4754': attribute type 21 has an invalid length. [ 605.839631][T23485] netlink: 'syz.1.4752': attribute type 1 has an invalid length. [ 605.839796][T23482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4754'. [ 605.918768][T23485] 8021q: adding VLAN 0 to HW filter on device bond6 [ 606.160869][T23485] vlan3: entered allmulticast mode [ 606.184961][T23485] veth0_to_bond: entered allmulticast mode [ 606.208851][T23485] bond6: (slave vlan3): Enslaving as an active interface with a down link [ 606.253731][T23517] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 606.276888][T23507] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 606.733110][T23534] netlink: 'syz.3.4763': attribute type 1 has an invalid length. [ 607.386007][T23585] dvmrp0: left allmulticast mode [ 607.403626][T23586] netlink: 'syz.3.4772': attribute type 1 has an invalid length. [ 607.545949][T23591] vlan4: entered allmulticast mode [ 607.551222][T23591] bridge_slave_0: entered allmulticast mode [ 607.623456][T23592] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 607.637294][T23592] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 607.716083][T23594] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 607.822231][T23586] bond5: (slave gretap1): making interface the new active one [ 607.843025][T23586] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 608.577704][T23651] syzkaller1: entered promiscuous mode [ 608.583826][T23651] syzkaller1: entered allmulticast mode [ 608.917865][T23670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4787'. [ 609.006348][T23678] IPVS: length: 248 != 8 [ 610.806580][T23607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.026642][T23735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4795'. [ 611.051672][T23735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4795'. [ 611.272076][T23753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4799'. [ 611.286106][T23753] netlink: 'syz.4.4799': attribute type 7 has an invalid length. [ 611.299564][T23753] netlink: 'syz.4.4799': attribute type 8 has an invalid length. [ 611.315475][T23753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4799'. [ 611.329856][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4801'. [ 611.618023][T23769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4805'. [ 611.985463][T23792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4812'. [ 612.007917][T23792] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4812'. [ 612.166455][T23797] netlink: 'syz.0.4813': attribute type 1 has an invalid length. [ 612.219423][T23799] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4814'. [ 612.251272][T23799] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4814'. [ 612.264356][T23799] 8021q: VLANs not supported on gre0 [ 612.273036][T23799] xt_socket: unknown flags 0xe4 [ 612.287676][T23799] gre0: entered promiscuous mode [ 613.016663][T23838] sctp: [Deprecated]: syz.0.4826 (pid 23838) Use of int in maxseg socket option. [ 613.016663][T23838] Use struct sctp_assoc_value instead [ 613.229195][T23844] netlink: 'syz.4.4827': attribute type 1 has an invalid length. [ 613.359851][T23844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.502459][T23844] bond2: (slave veth9): Enslaving as an active interface with a down link [ 613.549238][T23861] gtp0: entered promiscuous mode [ 613.588986][T23861] gtp0: entered allmulticast mode [ 613.666483][T23860] bond2: (slave veth11): Enslaving as an active interface with a down link [ 613.689051][T23860] netlink: 'syz.4.4827': attribute type 1 has an invalid length. [ 613.714277][T23858] syzkaller1: entered promiscuous mode [ 613.734238][T23860] netlink: 'syz.4.4827': attribute type 2 has an invalid length. [ 613.747381][T23858] syzkaller1: entered allmulticast mode [ 613.919879][T23884] netlink: 'syz.1.4838': attribute type 14 has an invalid length. [ 613.928285][T23884] netlink: 'syz.1.4838': attribute type 13 has an invalid length. [ 614.208874][T23905] netlink: 'syz.3.4842': attribute type 1 has an invalid length. [ 614.321036][T23905] 8021q: adding VLAN 0 to HW filter on device bond6 [ 614.376083][T23914] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 614.500422][T23918] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 614.801624][T23936] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 614.837595][T23932] syzkaller0: entered promiscuous mode [ 614.858835][T23932] syzkaller0: entered allmulticast mode [ 614.872265][T23932] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 615.063026][T23947] netlink: 'syz.2.4856': attribute type 3 has an invalid length. [ 615.791214][T23980] tap0: tun_chr_ioctl cmd 1074025678 [ 615.810556][T23980] tap0: group set to 0 [ 615.958335][T24004] syzkaller1: entered promiscuous mode [ 615.982787][T24004] syzkaller1: entered allmulticast mode [ 616.097143][T24018] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 616.122880][T24018] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 616.281667][T24027] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 616.385031][T24037] validate_nla: 3 callbacks suppressed [ 616.385049][T24037] netlink: 'syz.2.4878': attribute type 1 has an invalid length. [ 616.508635][T24037] 8021q: adding VLAN 0 to HW filter on device bond6 [ 616.661385][T24047] bond6: (slave veth9): Enslaving as an active interface with a down link [ 616.894517][T24071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.982210][T24004] infiniband syz1: set active [ 616.993714][T24004] infiniband syz1: added bond_slave_1 [ 617.034466][T24004] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 617.050377][T24004] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 617.069568][T24004] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 617.092018][T24080] netlink: 'syz.1.4887': attribute type 3 has an invalid length. [ 617.113699][T24004] RDS/IB: syz1: added [ 617.120019][T24004] smc: adding ib device syz1 with port count 1 [ 617.128237][T24004] smc: ib device syz1 port 1 has no pnetid [ 617.179345][T24086] netlink: 'syz.3.4889': attribute type 51 has an invalid length. [ 617.448746][T24092] __nla_validate_parse: 24 callbacks suppressed [ 617.448764][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4892'. [ 617.652119][T24109] netlink: 'syz.0.4896': attribute type 3 has an invalid length. [ 617.675552][T24109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4896'. [ 617.945482][T19317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.956149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.982960][T19317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.992027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.025742][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.034106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.053193][ T7627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.287294][ T1315] net_ratelimit: 7 callbacks suppressed [ 624.287313][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.303664][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.309898][ T1315] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 642.435085][T24174] netlink: 'syz.1.4912': attribute type 10 has an invalid length. [ 642.454924][T24174] veth0_macvtap: left promiscuous mode [ 642.529343][T24179] netlink: 'syz.3.4913': attribute type 1 has an invalid length. [ 642.557959][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4913'. [ 642.923884][T24197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.013505][T24201] IPVS: length: 61 != 24 [ 643.158946][T24210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4923'. [ 643.205102][T24204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4921'. [ 643.316938][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4924'. [ 643.374148][T24216] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4924'. [ 643.536592][T24221] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4926'. [ 643.801896][T24248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4932'. [ 643.941878][T24252] sctp: [Deprecated]: syz.0.4933 (pid 24252) Use of int in max_burst socket option. [ 643.941878][T24252] Use struct sctp_assoc_value instead [ 643.975166][T24251] syzkaller0: entered promiscuous mode [ 643.992479][T24251] syzkaller0: entered allmulticast mode [ 644.011659][T24252] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4933'. [ 644.086720][T24252] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 644.097094][T24252] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 644.133417][T24252] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 644.348720][T24260] xt_hashlimit: size too large, truncated to 1048576 [ 644.361770][T24258] xt_hashlimit: size too large, truncated to 1048576 [ 644.646352][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4940'. [ 644.672651][T24275] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4940'. [ 644.980272][T24294] [ 644.982649][T24294] ====================================================== [ 644.989670][T24294] WARNING: possible circular locking dependency detected [ 644.996703][T24294] syzkaller #0 Not tainted [ 645.001108][T24294] ------------------------------------------------------ [ 645.008114][T24294] syz.3.4947/24294 is trying to acquire lock: [ 645.014164][T24294] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 645.023299][T24294] [ 645.023299][T24294] but task is already holding lock: [ 645.030652][T24294] ffff88807b21e170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 645.039877][T24294] [ 645.039877][T24294] which lock already depends on the new lock. [ 645.039877][T24294] [ 645.050359][T24294] [ 645.050359][T24294] the existing dependency chain (in reverse order) is: [ 645.059362][T24294] [ 645.059362][T24294] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 645.067353][T24294] _raw_spin_lock_bh+0x36/0x50 [ 645.072639][T24294] nr_rt_ioctl+0x215/0xf90 [ 645.077564][T24294] sock_do_ioctl+0x101/0x320 [ 645.082671][T24294] sock_ioctl+0x5c6/0x7f0 [ 645.087517][T24294] __se_sys_ioctl+0xfc/0x170 [ 645.092630][T24294] do_syscall_64+0x15f/0xf80 [ 645.097738][T24294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.104144][T24294] [ 645.104144][T24294] -> #1 (nr_node_list_lock){+.-.}-{3:3}: [ 645.111957][T24294] _raw_spin_lock_bh+0x36/0x50 [ 645.117235][T24294] nr_rt_device_down+0xbe/0x860 [ 645.122595][T24294] nr_device_event+0x137/0x150 [ 645.127877][T24294] notifier_call_chain+0x1ad/0x3d0 [ 645.133505][T24294] netif_close_many+0x2ae/0x420 [ 645.138874][T24294] netif_close+0x160/0x220 [ 645.143811][T24294] dev_close+0x10a/0x220 [ 645.148581][T24294] bpq_device_event+0x377/0x6a0 [ 645.153999][T24294] notifier_call_chain+0x1ad/0x3d0 [ 645.159644][T24294] __dev_notify_flags+0x16d/0x310 [ 645.165196][T24294] netif_change_flags+0xe8/0x1a0 [ 645.170651][T24294] dev_change_flags+0x130/0x270 [ 645.176012][T24294] dev_ioctl+0x7b4/0x1150 [ 645.180856][T24294] sock_do_ioctl+0x23e/0x320 [ 645.185999][T24294] sock_ioctl+0x5c6/0x7f0 [ 645.190866][T24294] __se_sys_ioctl+0xfc/0x170 [ 645.195973][T24294] do_syscall_64+0x15f/0xf80 [ 645.201079][T24294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.207484][T24294] [ 645.207484][T24294] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 645.215384][T24294] __lock_acquire+0x15a5/0x2cf0 [ 645.220763][T24294] lock_acquire+0x106/0x350 [ 645.225786][T24294] _raw_spin_lock_bh+0x36/0x50 [ 645.231064][T24294] nr_rt_ioctl+0x40c/0xf90 [ 645.235994][T24294] sock_do_ioctl+0x101/0x320 [ 645.241101][T24294] sock_ioctl+0x5c6/0x7f0 [ 645.245941][T24294] __se_sys_ioctl+0xfc/0x170 [ 645.251046][T24294] do_syscall_64+0x15f/0xf80 [ 645.256162][T24294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.262566][T24294] [ 645.262566][T24294] other info that might help us debug this: [ 645.262566][T24294] [ 645.272777][T24294] Chain exists of: [ 645.272777][T24294] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 645.272777][T24294] [ 645.286594][T24294] Possible unsafe locking scenario: [ 645.286594][T24294] [ 645.294034][T24294] CPU0 CPU1 [ 645.299390][T24294] ---- ---- [ 645.304751][T24294] lock(&nr_node->node_lock); [ 645.309510][T24294] lock(nr_node_list_lock); [ 645.316613][T24294] lock(&nr_node->node_lock); [ 645.323900][T24294] lock(nr_neigh_list_lock); [ 645.328578][T24294] [ 645.328578][T24294] *** DEADLOCK *** [ 645.328578][T24294] [ 645.336714][T24294] 2 locks held by syz.3.4947/24294: [ 645.341900][T24294] #0: ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 645.351387][T24294] #1: ffff88807b21e170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 645.361046][T24294] [ 645.361046][T24294] stack backtrace: [ 645.366937][T24294] CPU: 0 UID: 0 PID: 24294 Comm: syz.3.4947 Not tainted syzkaller #0 PREEMPT(full) [ 645.366957][T24294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.366977][T24294] Call Trace: [ 645.366985][T24294] [ 645.366992][T24294] dump_stack_lvl+0xe8/0x150 [ 645.367021][T24294] print_circular_bug+0x2e1/0x300 [ 645.367042][T24294] check_noncircular+0x12e/0x150 [ 645.367062][T24294] __lock_acquire+0x15a5/0x2cf0 [ 645.367095][T24294] ? nr_rt_ioctl+0x40c/0xf90 [ 645.367108][T24294] lock_acquire+0x106/0x350 [ 645.367131][T24294] ? nr_rt_ioctl+0x40c/0xf90 [ 645.367146][T24294] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 645.367166][T24294] ? nr_rt_ioctl+0x821/0xf90 [ 645.367182][T24294] ? nr_rt_ioctl+0x40c/0xf90 [ 645.367195][T24294] _raw_spin_lock_bh+0x36/0x50 [ 645.367215][T24294] ? nr_rt_ioctl+0x40c/0xf90 [ 645.367229][T24294] nr_rt_ioctl+0x40c/0xf90 [ 645.367247][T24294] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 645.367266][T24294] ? apparmor_capable+0x126/0x170 [ 645.367289][T24294] ? capable+0x88/0xe0 [ 645.367313][T24294] ? nr_ioctl+0x1b1/0x3b0 [ 645.367335][T24294] sock_do_ioctl+0x101/0x320 [ 645.367358][T24294] ? __pfx_sock_do_ioctl+0x10/0x10 [ 645.367377][T24294] ? do_futex+0x395/0x420 [ 645.367398][T24294] sock_ioctl+0x5c6/0x7f0 [ 645.367424][T24294] ? __pfx_sock_ioctl+0x10/0x10 [ 645.367443][T24294] ? __fget_files+0x2a/0x420 [ 645.367459][T24294] ? __fget_files+0x3a0/0x420 [ 645.367473][T24294] ? __fget_files+0x2a/0x420 [ 645.367490][T24294] ? bpf_lsm_file_ioctl+0x9/0x20 [ 645.367511][T24294] ? __pfx_sock_ioctl+0x10/0x10 [ 645.367531][T24294] __se_sys_ioctl+0xfc/0x170 [ 645.367551][T24294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.367567][T24294] do_syscall_64+0x15f/0xf80 [ 645.367589][T24294] ? trace_irq_disable+0x3b/0x140 [ 645.367609][T24294] ? clear_bhb_loop+0x40/0x90 [ 645.367627][T24294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.367643][T24294] RIP: 0033:0x7f1f8e99cdd9 [ 645.367658][T24294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.367674][T24294] RSP: 002b:00007f1f8f92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.367691][T24294] RAX: ffffffffffffffda RBX: 00007f1f8ec15fa0 RCX: 00007f1f8e99cdd9 [ 645.367703][T24294] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 645.367713][T24294] RBP: 00007f1f8ea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 645.367724][T24294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.367733][T24294] R13: 00007f1f8ec16038 R14: 00007f1f8ec15fa0 R15: 00007ffc8e8c1918 [ 645.367752][T24294] [ 645.678948][T24293] base_sock_release(ffff88805a724840) sk=ffff888029439000