last executing test programs: 1m37.01010055s ago: executing program 2 (id=5638): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000000000fe8000000000000000000000000000bb22ec4d139a516a00000800"/71, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 1m36.82779135s ago: executing program 2 (id=5641): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x10}}, @cred={{0x20}}], 0x30, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000300)="4c0af54d02785cb7bdb2cbacd06c7d8b05181f52aa45704643ad073f365d71ff9900192c2a", 0x25}, {&(0x7f0000000340)}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000400)="e59971475c3ade7426df9d0674a6142ca0efee006fe6b327e26df4ac73c672bd8622aa076ab42450e6ab399698aa", 0x2e}, {&(0x7f0000000440)="cfb898050e1fffde46a3b87aa33b31d5d85abada3a85e117f6923b9be24a4a4c0091459740043922ee70bf6153c0b83e7f69a5c198c264b0e63a4a64be8efd7263ed7307e2b8013d68b59e7252ca7cc69852530a8666352711b6a6f893aa5a70b7ee81779df53e388eb4e5baba8a70d8b67b90a45faed37b23bb79be44b746d469f08226a4d1ddad950287f1b859c86626f13abbae25540a628f5437eb79721783c0464d199b23c3e0ff9c639153d6e96d875f8e4b90defc3d8f2bb1fde5def04da49dbda23900d28d436486fe833bf136b0c1aa5a54b76c84d474f2", 0xdc}, {&(0x7f0000000540)="ac472182de310bc709d881675fbdbabc6fd3f49ff9ba54b838341b9885a4b0e9cb64456c2aced25af0e71ef26eb72aa7bf318c97c3ff882117ca5a9dae324013746384e0204b3496974bcbcf22bc5c6920b1768335de4626a563c6ee8b01bdc502ef83be82c86202d5", 0x69}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="5c1350c9a82c7442289f8cd6810724b786af108b672ae6ce29fdeb0b0efcda9b914cfc580122a51e2b0aa7c0a3fc4c4402751f851388d68c729ddf30267678a80b9da67ed3367977c02111019dd6d3ed06bc3365face110d84ac8283a23704a093b6c23a6cae7ab6c7409052918e2ed31e57571773c5034fa198e0303320d62a326a685abb38bb2198b7ab473ed1422b890ec1c82d3c56efb96df94ad4af88ad3c1beca8c38d2f34a9a30a5c7cae8a78fcf923aae925d3db0a8f1d28ae59d73f065011a593be5e1d1fd2d7ddbb68e8ef41ce38d8e09538af73b2befc1484052b64698943", 0xe4}, {0x0}], 0xa, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r1, r2, r2, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r1, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1]}}], 0xb8, 0x20008880}}, {{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x800}}], 0x3, 0x4c054) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r7}, 0x4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x41}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "c0df"}]}, 0x38}, 0x1, 0x0, 0x0, 0x191}, 0x44080) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) 1m36.620150019s ago: executing program 2 (id=5648): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 1m36.204611263s ago: executing program 2 (id=5652): socket(0x10, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket(0x10, 0x803, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x20008090) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="070000000001010200000000f7ff28fa"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[], 0x0}, 0x94) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r5, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8=r6, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000c8e4) 1m35.260281627s ago: executing program 2 (id=5658): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x49, 0x3}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @union={0xa, 0x7, 0x0, 0x5, 0x0, 0x80000000, [{0x4, 0x2, 0x2d1fd7d0}, {0x7, 0x3}, {0xe, 0x1, 0x80}, {0xb, 0x3, 0xe99}, {0xa, 0x3, 0x2}, {0xd, 0x3, 0x7}, {0x6, 0x0, 0x1ff}]}, @float={0xb, 0x0, 0x0, 0x10, 0x4}, @struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x7fff, [{0xd, 0x3, 0x8}]}, @func={0xf, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30, 0x61, 0x61, 0xa26d58069d26da15, 0x30, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/147, 0xcd, 0x93, 0x0, 0xf8}, 0x28) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r4}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) (async, rerun: 32) r5 = epoll_create(0xcf) (rerun: 32) r6 = socket(0x15, 0x5, 0x0) connect$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x1412, 0x300, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x44081) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000005c0)={0x10000018}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x37, r2, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[r3, 0x1, r4], &(0x7f00000004c0)=[{0x2, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x2, 0x7}, {0x2, 0x5, 0xb, 0x7}], 0x10, 0xc}, 0x94) 1m33.772228579s ago: executing program 2 (id=5664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1m33.507383317s ago: executing program 32 (id=5664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 4.036056199s ago: executing program 4 (id=6590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x2, 0x0, &(0x7f0000000380)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r1, 0x104, 0x2, 0x0, &(0x7f0000000380)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async) 3.775850863s ago: executing program 4 (id=6594): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0xf, 0x3, 0xfffffffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.276123193s ago: executing program 4 (id=6599): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x6, 0xfffffffffffffde0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000002010500000000000000000002000008c026b95936d1fa457d48398587dd061516ffc3138bf542a7852712dccc8117daa3d80bffc9050c7f08aae18301456b721f9df3bf7d71b2614e25caa6771c6436d6c8db46aa8c695031974aa19c5d1d8f715414e24c53a7acb2e262f76fef0b7493dfce79d745cc49800e38ecfe896de26aaaf5820dad499e7c35dcf97b5d526b"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) 3.000233691s ago: executing program 4 (id=6605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2.767275999s ago: executing program 4 (id=6611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x4, 0x0, {0x9}}, 0x14}}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x1, [@local]}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.656487277s ago: executing program 0 (id=6623): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e0, 0x2e0, 0x0, 0x168, 0x2e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x99, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0xe29e, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) 1.506880553s ago: executing program 0 (id=6628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r2, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 1.359520918s ago: executing program 1 (id=6629): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x56c9, './file0\x00'}}) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 1.340139507s ago: executing program 5 (id=6630): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x4000041) close(r2) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r4}, [@IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_OPERSTATE={0x5, 0x10, 0xf3}]}, 0x30}}, 0x90) 1.268262235s ago: executing program 0 (id=6632): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.185587697s ago: executing program 1 (id=6633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x94, 0x80}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x1b, {0x4e22, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.163356773s ago: executing program 0 (id=6634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="801b23dc5892ab036e42f1868f2938bd73c1f545c554240000002000010006000000000028000a00000000000000007d9513cbc946af1c"], 0x24}}, 0x0) 1.072230776s ago: executing program 5 (id=6635): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2002, 0x0, 0xffffffffffffffff, 0x800}, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], 0xa) 1.070849296s ago: executing program 3 (id=6636): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) 1.021263122s ago: executing program 3 (id=6637): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async, rerun: 32) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 1.007940173s ago: executing program 0 (id=6638): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02010002070000000000000000000003030007000020000002000000640101010000000000000000020010"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000002b00)=0xa, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x492}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 892.422429ms ago: executing program 1 (id=6639): sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="1ed3361df59ef625cebe1d2072c4002a24c56765b84d9b5a859bd8b2a909054332f8bf5153a9c7b8d47d6809d7b3a6b9728c4bc49c08e6adbcb9b6bf93574f81c24bb6410e7162c813cc409fa519fec51be90cb147c90974da0419fc769f19d9d7c67708156a7e04da3d71b615999da695091eec4798cddec4e05c7cfbfb9799d931974a3640b2092dfd35852ecfae28771c75f90f10d82dbc300aab97817c7d6ec5fb17aaec40a4046050d382", 0xad}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) 890.676577ms ago: executing program 5 (id=6640): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x40080c8}, 0x40) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x50}, 0x4140) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x40080c8}, 0x40) (async) socket(0x11, 0xa, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x50}, 0x4140) (async) 833.175144ms ago: executing program 1 (id=6641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000680)={'syz_tun\x00', 0x400}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) (async) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000400)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r3, r1}) (async) r5 = socket$kcm(0x29, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f00000001c0)={0x3, 0x7, 0x71, &(0x7f0000000280)=""/113}) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) vmsplice(r6, &(0x7f0000000580)=[{&(0x7f0000000380)="380d125eaafd9dc0ddd0a9ba46b82644d6a5ad0308b2acf2b7dbf2ce31c7bc79901c6d0eb19760ab0f822edd40490798060f4423970599091b0f", 0x3a}, {&(0x7f0000000440)="f162dc907481e470d8ea01c501fe5cd59232f516a703e058a3ec57d240509ec3e334fdaeb2132f8b2724ff3752255b9a757bea7b1b888ed9fed2ff609e0e0d1fbd20b65d5d299e94f0359705433f4aca66aa63dd07692e0d1b8cd93beb3eef09b050ee571509a86faac8501bbc57e4ebb31f1498f4683acb", 0x78}, {&(0x7f00000003c0)="b2477258dac98d033462eb0f56ae63d44b3ce5b45f0ed370e83bbc328c25115c624ff2ad6898a7ebd1f1da9921e950b0ae1e52dc0ba220e82cc8d9ba9f4187c7", 0x40}, {&(0x7f00000004c0)="5e100e5ac8a8a3025e3f8eaf6187f822ae2dba1507ac550a7f758e247bc7c844912538ee199c2afeb7c84eab1791ef02f52a7d55fd6327716fdfac5ae5ba0f5c1b3698c5c5582c27acad96c40a253dac315644500631731220d63ad39b05fd7d67aafd8973c358e75ed904754ea972", 0x6f}, {&(0x7f0000000540)="056c2e5bec6e3fada970f30e0d7fd18d15f3", 0x12}], 0x5, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x11, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r7}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x80, 0x0}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000240)={r3, r1}) close(r0) 724.512861ms ago: executing program 3 (id=6642): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x8010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x150, 0x111, 0x4b4, 0x150, 0x700, 0x260, 0x278, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x31, 0xb, 0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0xff000000], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @rand_addr=0x64010102}}}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) 652.266153ms ago: executing program 0 (id=6643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @local}}, 0x200, 0x6, 0x0, 0x401, 0x5}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x5, 0x20, 0x3, 0x2}, &(0x7f0000000180)=0x18) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0xff, @private2, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 651.638369ms ago: executing program 5 (id=6644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r3, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0c0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_COST={0x8, 0x3, 0xec}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 530.367774ms ago: executing program 3 (id=6645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7bb9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d1}, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 426.815773ms ago: executing program 5 (id=6646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x44800) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r0}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x6, 0xf, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x1, 0x20, 0x6, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000502000000008000000000000000800000", @ANYRES32=r4, @ANYBLOB="56b000"/20, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="02000000000000000500"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) connect$tipc(r3, &(0x7f0000000940)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @broadcast}, 0x10) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) (async) syz_emit_ethernet(0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000a7a300000500000088641100f5ff00005f"], 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000826d94afd1000000000009224cb2713b2f4a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080018"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r10, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYRES8=r11], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x4287f74d76c831e8, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) (async) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='tcp_probe\x00', r10, 0x0, 0x5}, 0x18) 351.767769ms ago: executing program 1 (id=6647): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) 231.830768ms ago: executing program 3 (id=6648): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 194.610507ms ago: executing program 5 (id=6649): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x5, 0x2, 0x3, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) gettid() r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r7, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 186.723947ms ago: executing program 1 (id=6650): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xf94, 0xc760, 0x5, 0x6}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffffe}, 0x8) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x40010) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4c050) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e00001000000000"], 0x80}}, 0x4814) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="eb"], 0x30}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x130, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x9c, 0x1e, 0x0, 0x0, {{0xffffff28}, {0x4}, {0x6d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x1) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000100)=0x7) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x29, 0x7, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) 156.1855ms ago: executing program 4 (id=6651): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @local, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x2f, 0x0, 0x6, 0x6, 0x4c, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x10, 0x8, 0xffffffff}}) 0s ago: executing program 3 (id=6652): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="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", 0x57d}], 0x1, &(0x7f0000001600)}}], 0x1, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f000000, 0xe, 0x0, &(0x7f0000000780)="5ceced9e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 561.991498][T23537] netlink: 'syz.3.4929': attribute type 12 has an invalid length. [ 562.004047][T23537] netlink: 'syz.3.4929': attribute type 29 has an invalid length. [ 562.235596][T23549] tipc: Enabled bearer , priority 0 [ 562.307258][T23553] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 562.329449][T23553] tipc: Resetting bearer [ 562.565362][T23571] erspan0: entered promiscuous mode [ 562.581616][T23571] gretap0: entered promiscuous mode [ 562.728681][T23580] netlink: 'syz.0.4946': attribute type 11 has an invalid length. [ 563.059763][T23547] tipc: Disabling bearer [ 563.248652][T23613] tipc: New replicast peer: 255.255.255.255 [ 563.266309][T23613] tipc: Enabled bearer , priority 10 [ 563.479969][T23626] netlink: 'syz.4.4959': attribute type 29 has an invalid length. [ 563.503965][T23626] __nla_validate_parse: 19 callbacks suppressed [ 563.503988][T23626] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4959'. [ 563.664862][T23633] netlink: 'syz.0.4961': attribute type 1 has an invalid length. [ 563.675991][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4961'. [ 563.739898][T23636] ipt_REJECT: ECHOREPLY no longer supported. [ 563.777716][T23639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4964'. [ 564.192691][T23658] xt_hashlimit: max too large, truncated to 1048576 [ 564.263332][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4974'. [ 564.286271][T23664] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4974'. [ 564.304414][T23664] unsupported nlmsg_type 40 [ 564.396617][T23673] veth1_to_batadv: entered promiscuous mode [ 564.402990][T23673] veth1_to_batadv: entered allmulticast mode [ 564.472552][T23676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4977'. [ 564.491088][T23679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4979'. [ 564.838707][T23702] netlink: 'syz.4.4984': attribute type 2 has an invalid length. [ 564.904850][T23702] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.4984'. [ 564.943682][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 565.122308][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4990'. [ 565.136186][T23719] ksmbd: Unknown IPC event: 3, ignore. [ 565.508394][T23744] bridge0: port 3(team0) entered disabled state [ 565.516126][T23744] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.523984][T23744] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.606100][T23744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.624173][T23744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.844671][ T9708] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.870277][ T9708] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.894172][ T9708] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 565.923105][ T9708] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.957071][ T9708] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.978344][ T9708] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 565.988354][ T9708] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.008763][ T9708] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.029855][ T9708] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 566.052121][ T9708] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.079263][ T9708] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.088513][ T9708] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 566.101929][T23765] syzkaller1: entered promiscuous mode [ 566.111158][T23765] syzkaller1: entered allmulticast mode [ 566.212998][T23778] netlink: 'syz.0.5003': attribute type 2 has an invalid length. [ 566.244435][T23780] gre0: entered promiscuous mode [ 566.249935][T23780] gre0: entered allmulticast mode [ 566.626695][T23806] netlink: 'syz.2.5016': attribute type 1 has an invalid length. [ 566.864998][T23822] xt_hashlimit: invalid rate [ 568.000576][T23869] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 568.011925][T23869] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 568.108323][T23880] netlink: 'syz.0.5037': attribute type 1 has an invalid length. [ 568.310727][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 569.730185][T23886] __nla_validate_parse: 13 callbacks suppressed [ 569.730207][T23886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'. [ 569.846582][T23894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5042'. [ 569.858412][T23894] 8021q: VLANs not supported on vxcan0 [ 570.068987][T23908] netlink: 'syz.2.5047': attribute type 4 has an invalid length. [ 570.147440][T23909] netlink: 'syz.2.5047': attribute type 4 has an invalid length. [ 570.167159][T23910] netlink: 'syz.2.5047': attribute type 4 has an invalid length. [ 570.224431][T23912] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 570.262497][T23912] netlink: 'syz.0.5048': attribute type 1 has an invalid length. [ 570.539818][T23931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5056'. [ 570.715449][T23944] netlink: 'syz.1.5059': attribute type 4 has an invalid length. [ 570.832906][T23956] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 570.881215][T23956] tipc: Enabling of bearer rejected, already enabled [ 570.889687][T23956] tipc: Enabling of bearer rejected, failed to enable media [ 570.954729][T23959] ip6gretap1: entered allmulticast mode [ 571.046232][T23973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 571.173985][T23973] bond9 (unregistering): Released all slaves [ 571.661963][T23981] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 572.006994][T24016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.044422][T24018] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 572.142020][T24016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.219394][T24016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.301712][T24016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.430431][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.458647][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.488922][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.534270][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.604897][T24047] syzkaller0: entered promiscuous mode [ 572.610673][T24047] syzkaller0: entered allmulticast mode [ 572.743273][T24055] netlink: 'syz.0.5088': attribute type 9 has an invalid length. [ 572.910047][T24065] openvswitch: netlink: Missing key (keys=40, expected=80) [ 572.929118][T24065] syzkaller0: entered promiscuous mode [ 572.935348][T24065] syzkaller0: entered allmulticast mode [ 573.003934][T24065] : entered promiscuous mode [ 573.329301][T24088] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5098'. [ 573.404510][T24089] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5100'. [ 573.625716][T24098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5104'. [ 573.779417][T24101] netlink: 'syz.1.5105': attribute type 11 has an invalid length. [ 573.879420][T24106] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5107'. [ 573.893949][T24107] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5107'. [ 573.929517][T24109] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5109'. [ 574.062504][T24118] delete_channel: no stack [ 574.159014][T24123] tipc: Enabling of bearer rejected, already enabled [ 574.173453][T24123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5111'. [ 574.197947][T24125] tipc: Enabling not permitted [ 574.203729][T24125] tipc: Enabling of bearer rejected, failed to enable media [ 574.230945][T24127] ip6erspan0: entered promiscuous mode [ 574.243769][T24127] ip6erspan0: entered allmulticast mode [ 574.483727][T24153] bond9: Unable to set down delay as MII monitoring is disabled [ 574.494321][T24153] bond9 (unregistering): Released all slaves [ 574.577996][T24159] gtp0: entered promiscuous mode [ 574.583242][T24159] gtp0: entered allmulticast mode [ 575.190288][T24179] netlink: 'syz.2.5126': attribute type 58 has an invalid length. [ 575.210464][T24179] __nla_validate_parse: 10 callbacks suppressed [ 575.210489][T24179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5126'. [ 575.314218][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 575.510187][T24197] netlink: 'syz.4.5133': attribute type 22 has an invalid length. [ 575.560258][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5133'. [ 575.571249][T24197] netlink: 'syz.4.5133': attribute type 22 has an invalid length. [ 575.592967][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5133'. [ 575.982490][T24229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5144'. [ 576.026045][T24229] netlink: 'syz.0.5144': attribute type 7 has an invalid length. [ 576.053671][T24229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5144'. [ 576.195348][T24250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5150'. [ 576.344539][T24256] ip6gre1: entered allmulticast mode [ 576.760083][T24285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5161'. [ 576.774082][T24285] openvswitch: netlink: Flow key attr not present in new flow. [ 577.078319][T24299] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5165'. [ 577.194874][T24305] tipc: Enabling of bearer rejected, already enabled [ 577.223727][T24305] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 577.268675][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5167'. [ 577.411401][T24319] netlink: 'syz.3.5172': attribute type 18 has an invalid length. [ 577.435477][T24315] bond11: invalid ARP target 0.0.0.0 specified for addition [ 577.443213][T24315] bond11: option arp_ip_target: invalid value (0) [ 577.453328][T24315] bond11 (unregistering): Released all slaves [ 577.482476][T24322] syzkaller0: entered promiscuous mode [ 577.488315][T24322] syzkaller0: entered allmulticast mode [ 577.598157][T24325] xt_hashlimit: size too large, truncated to 1048576 [ 578.669651][T24377] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 579.560057][T24438] netlink: 'syz.4.5209': attribute type 21 has an invalid length. [ 579.578394][T24432] gtp1: entered promiscuous mode [ 579.589576][T24432] gtp1: entered allmulticast mode [ 579.620045][T24429] tipc: Enabled bearer , priority 0 [ 579.653545][T24433] syzkaller0: entered promiscuous mode [ 579.659444][T24433] syzkaller0: entered allmulticast mode [ 579.699803][T24429] tipc: Resetting bearer [ 579.748999][T24427] tipc: Resetting bearer [ 579.846256][T24427] tipc: Disabling bearer [ 579.912084][T24449] 8021q: adding VLAN 0 to HW filter on device bond8 [ 580.077327][T24457] 8021q: adding VLAN 0 to HW filter on device bond8 [ 580.096448][T24457] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 580.111485][T24457] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 580.448892][T24495] __nla_validate_parse: 14 callbacks suppressed [ 580.448913][T24495] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5225'. [ 580.557122][T24499] netlink: 'syz.1.5228': attribute type 2 has an invalid length. [ 580.577020][T24502] netlink: 'syz.1.5228': attribute type 2 has an invalid length. [ 580.615901][T24505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5229'. [ 580.628109][T24505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5229'. [ 580.665537][T24507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5229'. [ 580.700959][T24507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5229'. [ 580.742545][T24505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5229'. [ 580.776925][T24520] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 580.783716][T24505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5229'. [ 580.979716][T24536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.180383][T24545] bond11: option lp_interval: invalid value (0) [ 581.187757][T24545] bond11: option lp_interval: allowed values 1 - 2147483647 [ 581.196904][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5242'. [ 581.220289][T24545] bond11 (unregistering): Released all slaves [ 581.234918][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5242'. [ 581.359426][T24563] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5243'. [ 581.398165][T24566] delete_channel: no stack [ 581.427836][T24566] nbd: must specify a size in bytes for the device [ 581.530347][T24565] delete_channel: no stack [ 581.643916][T24580] netlink: 'syz.2.5248': attribute type 29 has an invalid length. [ 581.656241][T24577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.956982][T24599] netlink: 'syz.4.5256': attribute type 11 has an invalid length. [ 581.970595][T24597] netlink: 'syz.2.5255': attribute type 3 has an invalid length. [ 581.979179][T24597] netlink: 'syz.2.5255': attribute type 3 has an invalid length. [ 582.043383][T24597] IPv6: NLM_F_REPLACE set, but no existing node found! [ 582.058067][T24601] syzkaller0: entered promiscuous mode [ 582.079585][T24601] syzkaller0: entered allmulticast mode [ 582.096623][T24599] vlan3: entered allmulticast mode [ 582.102198][T24599] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 584.803573][T24655] netlink: 'syz.1.5269': attribute type 5 has an invalid length. [ 585.401883][T24692] nbd: socks must be embedded in a SOCK_ITEM attr [ 585.494403][T24696] __nla_validate_parse: 12 callbacks suppressed [ 585.494428][T24696] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5288'. [ 585.533052][T24702] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 585.738316][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.775917][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.809850][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.822663][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.840941][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.851607][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.864655][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.884967][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.903419][T24712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5293'. [ 585.928486][T24718] v: renamed from veth1_to_bridge [ 586.189373][T24730] can: request_module (can-proto-3) failed. [ 586.284744][T24741] netlink: 'syz.2.5300': attribute type 3 has an invalid length. [ 586.369560][T24746] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 586.393866][T24746] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 586.510751][T24746] team0: Port device dummy0 removed [ 586.549112][T24762] vlan0: entered promiscuous mode [ 586.576221][T24762] vlan0: entered allmulticast mode [ 586.582098][T24762] hsr_slave_1: entered allmulticast mode [ 586.645336][T24766] sctp: [Deprecated]: syz.1.5309 (pid 24766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.645336][T24766] Use struct sctp_sack_info instead [ 586.763502][T24774] veth1_to_bond: entered allmulticast mode [ 587.030480][T24773] veth1_to_bond: left allmulticast mode [ 587.153780][T24793] delete_channel: no stack [ 587.174464][T24799] syzkaller0: entered promiscuous mode [ 587.180493][T24799] syzkaller0: entered allmulticast mode [ 588.732548][T24850] tipc: Enabled bearer , priority 0 [ 588.811838][T24850] tipc: Disabling bearer [ 588.883376][T24855] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 588.981760][T24870] tipc: Enabling of bearer rejected, failed to enable media [ 589.028637][T24873] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 589.435475][T24893] netlink: 'syz.3.5348': attribute type 29 has an invalid length. [ 589.455215][T24893] netlink: 'syz.3.5348': attribute type 29 has an invalid length. [ 589.494128][T24895] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 589.669547][T24904] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 589.683809][T24904] bond8 (unregistering): Released all slaves [ 589.998001][T24924] bond9: option lp_interval: invalid value (0) [ 590.010797][T24924] bond9: option lp_interval: allowed values 1 - 2147483647 [ 590.039152][T24933] netlink: 'syz.4.5360': attribute type 11 has an invalid length. [ 590.055090][T24924] bond9 (unregistering): Released all slaves [ 591.022428][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.055150][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.067741][T24948] __nla_validate_parse: 46 callbacks suppressed [ 591.067766][T24948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5361'. [ 591.116212][T24951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5363'. [ 591.144234][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.175383][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.255837][T24955] bond11: option lp_interval: invalid value (0) [ 591.262167][T24955] bond11: option lp_interval: allowed values 1 - 2147483647 [ 591.385781][T24955] bond11 (unregistering): Released all slaves [ 591.403843][T24969] openvswitch: netlink: Duplicate or invalid key (type 0). [ 591.426642][T24969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.455566][T24969] openvswitch: netlink: Duplicate or invalid key (type 0). [ 591.485144][T24969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.501912][T24965] vetè0_virt_wifi: renamed from lo [ 591.574483][T24968] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 591.593064][T24968] syzkaller1: Refused to change device type [ 591.640979][T24968] xt_hashlimit: size too large, truncated to 1048576 [ 591.669776][T24982] netlink: 'syz.2.5372': attribute type 58 has an invalid length. [ 591.693521][T24982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5372'. [ 592.177818][T25005] IPVS: set_ctl: invalid protocol: 25965 114.121.46.115:30561 [ 592.565425][T25028] bond8: entered promiscuous mode [ 592.570823][T25028] bond8: entered allmulticast mode [ 592.576613][T25028] 8021q: adding VLAN 0 to HW filter on device bond8 [ 592.900905][T25053] netlink: 'syz.4.5395': attribute type 1 has an invalid length. [ 592.924162][T25054] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 592.974164][T25053] 8021q: adding VLAN 0 to HW filter on device bond9 [ 593.185765][T25073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5401'. [ 593.196792][T25071] netlink: 'syz.4.5400': attribute type 9 has an invalid length. [ 593.197532][T25072] delete_channel: no stack [ 593.213151][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5400'. [ 593.367356][T25077] delete_channel: no stack [ 593.409002][T25077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.998804][T25129] netlink: 'syz.2.5416': attribute type 1 has an invalid length. [ 594.054782][T25130] syzkaller0: entered promiscuous mode [ 594.060340][T25130] syzkaller0: entered allmulticast mode [ 594.487878][T25155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5419'. [ 594.557938][T25156] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5422'. [ 595.112200][T25186] netlink: 404 bytes leftover after parsing attributes in process `syz.3.5429'. [ 595.292336][T25191] x_tables: duplicate underflow at hook 2 [ 595.440780][T25197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5434'. [ 595.508894][T25203] tipc: Enabled bearer , priority 0 [ 595.522645][T25203] syzkaller0: entered promiscuous mode [ 595.533075][T25203] syzkaller0: entered allmulticast mode [ 595.550903][T25203] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 595.630533][T25203] tipc: Resetting bearer [ 595.668006][T25201] tipc: Resetting bearer [ 595.744864][T25201] tipc: Disabling bearer [ 596.073630][T25225] netlink: 'syz.3.5445': attribute type 3 has an invalid length. [ 596.298586][T25231] netlink: 'syz.3.5447': attribute type 1 has an invalid length. [ 596.309589][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 596.336946][T25231] netlink: 'syz.3.5447': attribute type 3 has an invalid length. [ 596.388057][T25231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5447'. [ 596.427799][T25239] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5449'. [ 596.481795][T25241] netlink: 'syz.1.5449': attribute type 10 has an invalid length. [ 596.508489][T25241] team0: left allmulticast mode [ 596.517226][T25241] team_slave_0: left allmulticast mode [ 596.523377][T25241] team_slave_1: left allmulticast mode [ 596.529646][T25241] team0: left promiscuous mode [ 596.536108][T25241] team_slave_0: left promiscuous mode [ 596.546985][T25241] team_slave_1: left promiscuous mode [ 596.553221][T25241] bridge0: port 3(team0) entered disabled state [ 596.912971][T25267] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5457'. [ 597.098783][T25279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5459'. [ 597.135958][T25279] bond0: entered promiscuous mode [ 597.146036][T25279] bond0: left promiscuous mode [ 597.242130][T25286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5462'. [ 597.341196][T25293] netlink: 'syz.0.5463': attribute type 10 has an invalid length. [ 597.352488][T25293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5463'. [ 597.362257][T25293] dummy0: entered promiscuous mode [ 597.372354][T25293] bridge0: port 4(dummy0) entered blocking state [ 597.379077][T25293] bridge0: port 4(dummy0) entered disabled state [ 597.386690][T25293] dummy0: entered allmulticast mode [ 597.397822][T25293] dummy0: left allmulticast mode [ 597.408039][T25293] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 597.427601][T25298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5463'. [ 597.455240][T25295] syzkaller0: entered promiscuous mode [ 597.461137][T25295] syzkaller0: entered allmulticast mode [ 597.580425][T25305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5467'. [ 597.621875][T25308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5468'. [ 597.646187][T25309] openvswitch: netlink: Flow actions attr not present in new flow. [ 597.700291][T25308] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 597.719802][T25308] macvlan2: entered promiscuous mode [ 597.733153][T25308] macvlan2: entered allmulticast mode [ 597.740302][T25308] bond9: entered promiscuous mode [ 597.749130][T25308] bridge6: entered promiscuous mode [ 597.756932][T25308] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.768919][T25308] bond9: left promiscuous mode [ 597.775995][T25308] bridge6: left promiscuous mode [ 598.050980][T25328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.159091][T25338] netlink: 'syz.2.5478': attribute type 11 has an invalid length. [ 598.185222][T25338] netlink: 'syz.2.5478': attribute type 11 has an invalid length. [ 598.428305][T25347] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 598.467546][T25347] bond10 (unregistering): Released all slaves [ 598.939354][T25389] netlink: 'syz.3.5489': attribute type 1 has an invalid length. [ 599.417420][T25413] nbd: device at index 64 is going down [ 599.981697][T25449] syzkaller1: entered promiscuous mode [ 599.989670][T25449] syzkaller1: entered allmulticast mode [ 600.827497][T25494] openvswitch: netlink: Message has -2 unknown bytes. [ 601.316415][T25525] netlink: 'syz.2.5526': attribute type 2 has an invalid length. [ 601.330701][T25525] netlink: 'syz.2.5526': attribute type 11 has an invalid length. [ 601.341549][T25525] __nla_validate_parse: 11 callbacks suppressed [ 601.341573][T25525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5526'. [ 601.491758][T25545] netlink: 'syz.4.5531': attribute type 31 has an invalid length. [ 601.510803][T25545] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5531'. [ 601.632186][T25551] tipc: Enabling of bearer rejected, already enabled [ 601.881739][T25576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5539'. [ 602.082497][T25583] dummy0: left promiscuous mode [ 602.140363][T25589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5545'. [ 602.162852][T25583] veth3: left promiscuous mode [ 602.170230][T25583] veth5: left promiscuous mode [ 602.177153][T25583] ip6erspan0: left promiscuous mode [ 602.183740][T25583] gtp0: left promiscuous mode [ 602.189946][T25583] gtp1: left promiscuous mode [ 602.525528][T25615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5552'. [ 602.538885][T25613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5550'. [ 602.590738][T25621] netlink: 'syz.3.5553': attribute type 1 has an invalid length. [ 602.599481][T25621] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5553'. [ 602.831225][T25631] netlink: 'syz.0.5557': attribute type 1 has an invalid length. [ 602.893178][T25631] bond20 (unregistering): Released all slaves [ 602.949229][T25643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5558'. [ 603.019384][T25644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5560'. [ 603.042290][T25638] bond9: entered promiscuous mode [ 603.047614][T25638] bond9: entered allmulticast mode [ 603.053349][T25644] netlink: 'syz.1.5560': attribute type 1 has an invalid length. [ 603.061661][T25638] 8021q: adding VLAN 0 to HW filter on device bond9 [ 603.079566][T25639] ip6tnl3: entered promiscuous mode [ 603.086027][T25639] ip6tnl3: entered allmulticast mode [ 603.214992][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 603.646776][T25682] netlink: 'syz.0.5573': attribute type 10 has an invalid length. [ 603.668520][T25689] netlink: 'syz.1.5575': attribute type 33 has an invalid length. [ 603.710147][T25689] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 603.724847][T25689] bond10 (unregistering): Released all slaves [ 603.752322][T25693] netlink: 'syz.0.5576': attribute type 3 has an invalid length. [ 603.768075][T25693] netlink: 'syz.0.5576': attribute type 1 has an invalid length. [ 603.930789][T25699] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 604.097972][T25710] geneve5: entered promiscuous mode [ 604.103661][T25710] geneve5: entered allmulticast mode [ 604.111026][ T9710] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 604.120840][ T9710] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 604.130299][ T9710] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 604.139054][ T9710] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 604.263715][T25710] veth0_virt_wifi: renamed from veth1_vlan [ 604.418916][T25732] netlink: 'syz.4.5589': attribute type 21 has an invalid length. [ 604.645326][T25747] netlink: 'syz.1.5593': attribute type 12 has an invalid length. [ 604.724702][T25747] bond10: option primary_reselect: invalid value (255) [ 604.739695][T25747] bond10 (unregistering): Released all slaves [ 605.032195][T25772] syzkaller1: entered promiscuous mode [ 605.039241][T25772] syzkaller1: entered allmulticast mode [ 605.139920][T25781] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 3, id = 0 [ 605.327479][T25786] netlink: 'syz.2.5606': attribute type 2 has an invalid length. [ 605.332088][T25791] netlink: 'syz.1.5607': attribute type 11 has an invalid length. [ 605.459892][T25797] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 605.480158][T25797] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 605.499418][T25797] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 605.770901][T25820] bond10 (unregistering): Released all slaves [ 605.959276][T25830] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 605.996057][T25836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.036867][T25836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.075758][T25836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.090722][T25836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.136181][T25836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.180346][T25836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.244751][T25847] syzkaller1: entered promiscuous mode [ 606.254050][T25847] syzkaller1: entered allmulticast mode [ 606.371676][T25854] __nla_validate_parse: 14 callbacks suppressed [ 606.371698][T25854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5625'. [ 606.629066][T25872] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 606.880351][T25890] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5638'. [ 607.148692][T25903] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5643'. [ 607.168167][T25903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'. [ 607.177540][T25903] batadv0: left promiscuous mode [ 607.183713][T25903] bridge0: port 3(batadv0) entered disabled state [ 607.239506][T25903] bridge_slave_1: left allmulticast mode [ 607.249250][T25903] bridge_slave_1: left promiscuous mode [ 607.262312][T25903] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.302304][T25903] bridge_slave_0: left allmulticast mode [ 607.312277][T25903] bridge_slave_0: left promiscuous mode [ 607.318687][T25903] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.484669][T25932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5649'. [ 607.897818][T25951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5655'. [ 607.924996][T25944] syzkaller0: entered promiscuous mode [ 607.930710][T25944] syzkaller0: entered allmulticast mode [ 607.938973][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5654'. [ 609.961477][T25965] syzkaller0: entered promiscuous mode [ 609.976556][T25965] syzkaller0: entered allmulticast mode [ 610.152670][ T9710] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.266576][ T9710] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.406601][ T9710] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.465093][T25995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5670'. [ 610.474773][T25993] sctp: [Deprecated]: syz.0.5667 (pid 25993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.474773][T25993] Use struct sctp_sack_info instead [ 610.497241][T25992] validate_nla: 7 callbacks suppressed [ 610.497262][T25992] netlink: 'syz.3.5669': attribute type 4 has an invalid length. [ 610.575641][T25994] netlink: 'syz.0.5667': attribute type 1 has an invalid length. [ 610.591219][T25988] syzkaller0: entered promiscuous mode [ 610.596942][T25988] syzkaller0: entered allmulticast mode [ 610.619112][ T9710] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.783838][T26007] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5672'. [ 610.839373][T26010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.852227][T26010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.861783][T26010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.871394][T26010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.883401][T26010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.927947][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.943233][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.950975][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.959810][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.967913][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 612.402293][T26011] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5672'. [ 612.412180][T26012] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5672'. [ 612.494727][T26016] ip6gre1: entered allmulticast mode [ 612.568399][T26008] wg1 speed is unknown, defaulting to 1000 [ 612.593462][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5673'. [ 612.616342][T26008] wlan0 speed is unknown, defaulting to 1000 [ 612.686931][T26008] lo speed is unknown, defaulting to 1000 [ 612.731727][T26029] netlink: 81 bytes leftover after parsing attributes in process `syz.1.5677'. [ 613.023308][ T5835] Bluetooth: hci1: command tx timeout [ 613.461376][ T9710] bond4 (unregistering): (slave gretap2): Releasing active interface [ 613.659418][T26053] netlink: 'syz.4.5684': attribute type 1 has an invalid length. [ 613.742174][ T9710] bridge0 (unregistering): left allmulticast mode [ 613.795431][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5684'. [ 614.153913][ T9710] bond0 (unregistering): Released all slaves [ 614.175045][ T9710] bond1 (unregistering): Released all slaves [ 614.357943][ T9710] bond2 (unregistering): Released all slaves [ 614.672462][ T9710] bond3 (unregistering): Released all slaves [ 614.688577][ T9710] bond4 (unregistering): Released all slaves [ 614.703974][ T9710] bond5 (unregistering): Released all slaves [ 614.830150][ T9710] bond6 (unregistering): Released all slaves [ 614.845422][ T9710] bond7 (unregistering): Released all slaves [ 614.860300][ T9710] bond8 (unregistering): Released all slaves [ 614.875026][ T9710] bond9 (unregistering): Released all slaves [ 614.891154][ T9710] bond10 (unregistering): Released all slaves [ 614.914408][ T9710] bond11 (unregistering): Released all slaves [ 614.930030][ T9710] bond12 (unregistering): Released all slaves [ 614.944321][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5679'. [ 614.995761][T26068] netlink: 'syz.3.5686': attribute type 29 has an invalid length. [ 615.104432][ T5835] Bluetooth: hci1: command tx timeout [ 615.109778][ T9710] 9: left promiscuous mode [ 615.237568][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5687'. [ 615.335328][T26102] netlink: 'syz.3.5689': attribute type 19 has an invalid length. [ 615.344074][T26105] netlink: 'syz.4.5690': attribute type 9 has an invalid length. [ 615.382375][ T9710] tipc: Disabling bearer [ 615.396174][ T9710] tipc: Disabling bearer [ 615.422324][ T9710] tipc: Left network mode [ 615.525707][T26101] syzkaller0: entered promiscuous mode [ 615.550268][T26101] syzkaller0: entered allmulticast mode [ 615.579069][T26112] netlink: 'syz.1.5694': attribute type 1 has an invalid length. [ 615.606822][T26114] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5693'. [ 615.666774][ T9710] IPVS: stopping backup sync thread 25872 ... [ 615.685640][T26117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5693'. [ 615.720034][T26112] bond10: entered promiscuous mode [ 615.738631][T26112] 8021q: adding VLAN 0 to HW filter on device bond10 [ 615.791326][T26118] bond10: (slave bridge7): making interface the new active one [ 615.799699][T26118] bridge7: entered promiscuous mode [ 615.809843][T26118] bridge7: left promiscuous mode [ 615.917929][T26117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5693'. [ 616.130781][T26132] syzkaller0: entered promiscuous mode [ 616.136984][T26132] syzkaller0: entered allmulticast mode [ 616.540183][T26008] chnl_net:caif_netlink_parms(): no params data found [ 617.172837][ T9710] hsr_slave_0: left promiscuous mode [ 617.183012][ T5835] Bluetooth: hci1: command tx timeout [ 617.928089][T26156] tipc: Enabled bearer , priority 0 [ 618.004358][T26164] syzkaller0: entered promiscuous mode [ 618.010071][T26164] syzkaller0: entered allmulticast mode [ 618.016606][T26164] tipc: Resetting bearer [ 618.039793][T26155] tipc: Resetting bearer [ 618.401807][T26183] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 619.263064][ T5835] Bluetooth: hci1: command tx timeout [ 619.707695][T26155] tipc: Disabling bearer [ 619.717318][T26008] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.724712][T26008] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.731978][T26008] bridge_slave_0: entered allmulticast mode [ 619.739586][T26008] bridge_slave_0: entered promiscuous mode [ 619.748214][T26008] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.756195][T26008] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.764963][T26008] bridge_slave_1: entered allmulticast mode [ 619.773839][T26008] bridge_slave_1: entered promiscuous mode [ 619.786398][T26182] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 619.814416][T26182] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 619.822588][T26182] tipc: Resetting bearer [ 619.854622][T26185] __nla_validate_parse: 1 callbacks suppressed [ 619.854642][T26185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5709'. [ 619.879945][T26185] netlink: 'syz.4.5709': attribute type 3 has an invalid length. [ 619.944993][T26189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5709'. [ 619.986738][T26188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5710'. [ 619.998166][T26192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5711'. [ 620.010662][T26008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.077003][T26008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.211530][T26008] team0: Port device team_slave_0 added [ 620.246987][T26008] team0: Port device team_slave_1 added [ 620.327227][T26008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.352112][T26008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.391103][T26008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.405362][T26008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.413404][T26008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.463123][T26008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.484927][T26210] netlink: 'syz.3.5718': attribute type 12 has an invalid length. [ 620.494893][T26210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5718'. [ 620.640351][ T9710] IPVS: stop unused estimator thread 0... [ 620.661004][T26008] hsr_slave_0: entered promiscuous mode [ 620.685764][T26008] hsr_slave_1: entered promiscuous mode [ 620.713051][T26008] debugfs: 'hsr0' already exists in 'hsr' [ 620.718857][T26008] Cannot create hsr debugfs directory [ 620.749529][T26228] netlink: 'syz.4.5720': attribute type 21 has an invalid length. [ 620.797454][T26228] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5720'. [ 620.847461][T26228] netlink: 544 bytes leftover after parsing attributes in process `syz.4.5720'. [ 620.878350][ T36] tipc: Resetting bearer [ 620.916284][T26239] IPVS: length: 24 != 12312 [ 621.276251][T26008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 621.295589][T26008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 621.304222][T26260] netlink: 'syz.4.5730': attribute type 1 has an invalid length. [ 621.314683][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5729'. [ 621.317726][T26008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 621.333272][T26263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5729'. [ 621.337324][T26008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 621.375929][T26260] bond10 (unregistering): Released all slaves [ 621.403915][T26262] netlink: 'syz.4.5730': attribute type 10 has an invalid length. [ 621.407765][T26261] ip6tnl2: entered promiscuous mode [ 621.418125][T26261] ip6tnl2: entered allmulticast mode [ 621.451457][T26263] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 621.463584][T26263] bond11 (unregistering): Released all slaves [ 621.649735][T26008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.675077][T26008] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.717012][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.724248][ T7288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.769062][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.776345][ T9710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.836998][T26284] syzkaller1: entered promiscuous mode [ 621.844933][T26284] syzkaller1: entered allmulticast mode [ 622.070778][T26293] syzkaller0: entered promiscuous mode [ 622.077145][T26293] syzkaller0: entered allmulticast mode [ 622.130565][T26295] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5740'. [ 622.254068][T26301] macvlan0: entered promiscuous mode [ 622.261410][T26301] macvlan0: entered allmulticast mode [ 622.268705][T26301] bond0: (slave macvlan0): Opening slave failed [ 622.478160][T26314] macsec0: entered allmulticast mode [ 622.499462][T26008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.515173][T26319] netlink: 'syz.3.5745': attribute type 11 has an invalid length. [ 623.185294][T26008] veth0_vlan: entered promiscuous mode [ 623.220572][T26008] veth1_vlan: entered promiscuous mode [ 623.292229][T26008] veth0_macvtap: entered promiscuous mode [ 623.308615][T26008] veth1_macvtap: entered promiscuous mode [ 623.334792][T26008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.358862][T26008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.409322][T21288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.428690][T21288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.460148][T21288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.483643][T21288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.644104][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.683495][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.781058][T26385] netlink: 'syz.3.5764': attribute type 1 has an invalid length. [ 623.823590][ T7288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.844535][ T7288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.242382][T26405] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 624.269039][T26405] bond11 (unregistering): Released all slaves [ 624.585184][T26427] netlink: 'syz.4.5774': attribute type 25 has an invalid length. [ 624.603405][T26427] netlink: 'syz.4.5774': attribute type 7 has an invalid length. [ 624.611203][T26427] netlink: 'syz.4.5774': attribute type 1 has an invalid length. [ 624.665749][T26427] netlink: 'syz.4.5774': attribute type 4 has an invalid length. [ 624.884606][T26440] __nla_validate_parse: 3 callbacks suppressed [ 624.884627][T26440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5781'. [ 625.140230][T26443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5780'. [ 625.466085][T26479] xt_hashlimit: size too large, truncated to 1048576 [ 628.248564][T26457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.494659][T26496] FAULT_INJECTION: forcing a failure. [ 628.494659][T26496] name failslab, interval 1, probability 0, space 0, times 1 [ 628.509776][T26495] netlink: 'syz.5.5793': attribute type 10 has an invalid length. [ 628.518322][T26483] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5791'. [ 628.532774][T26496] CPU: 0 UID: 0 PID: 26496 Comm: syz.3.5792 Not tainted syzkaller #0 PREEMPT(full) [ 628.532805][T26496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.532828][T26496] Call Trace: [ 628.532837][T26496] [ 628.532847][T26496] dump_stack_lvl+0x189/0x250 [ 628.532882][T26496] ? __pfx____ratelimit+0x10/0x10 [ 628.532914][T26496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.532945][T26496] ? __pfx__printk+0x10/0x10 [ 628.532985][T26496] should_fail_ex+0x414/0x560 [ 628.533026][T26496] should_failslab+0xa8/0x100 [ 628.533058][T26496] kmem_cache_alloc_noprof+0x74/0x6e0 [ 628.533088][T26496] ? nf_ct_pernet+0x45/0x270 [ 628.533113][T26496] ? __nf_conntrack_alloc+0x98/0x400 [ 628.533151][T26496] __nf_conntrack_alloc+0x98/0x400 [ 628.533189][T26496] init_conntrack+0x155/0xef0 [ 628.533229][T26496] ? __pfx_init_conntrack+0x10/0x10 [ 628.533265][T26496] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 628.533291][T26496] ? __local_bh_enable_ip+0x12d/0x1c0 [ 628.533317][T26496] ? __siphash_unaligned+0x232/0x3b0 [ 628.533359][T26496] nf_conntrack_in+0xbb7/0x15c0 [ 628.533417][T26496] ? __pfx_nf_conntrack_in+0x10/0x10 [ 628.533459][T26496] ? ipt_do_table+0x2a3/0x1640 [ 628.533497][T26496] ? nf_hook+0x9d/0x380 [ 628.533523][T26496] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 628.533543][T26496] ? ipv4_conntrack_local+0x126/0x210 [ 628.533567][T26496] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 628.533596][T26496] nf_hook_slow+0xc5/0x220 [ 628.533627][T26496] nf_hook+0x217/0x380 [ 628.533660][T26496] ? nf_hook+0x9d/0x380 [ 628.533687][T26496] ? __pfx_nf_hook+0x10/0x10 [ 628.533718][T26496] ? __pfx_dst_output+0x10/0x10 [ 628.533756][T26496] ? ip_fast_csum+0x1ee/0x2b0 [ 628.533785][T26496] __ip_local_out+0x4db/0x600 [ 628.533812][T26496] ? __pfx_dst_output+0x10/0x10 [ 628.533845][T26496] ip_send_skb+0x4a/0x100 [ 628.533879][T26496] udp_send_skb+0xaf1/0x14c0 [ 628.533925][T26496] udp_sendmsg+0x195a/0x2170 [ 628.533964][T26496] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 628.533999][T26496] ? __pfx_udp_sendmsg+0x10/0x10 [ 628.534046][T26496] ? get_random_u32+0x155/0x940 [ 628.534084][T26496] ? register_lock_class+0x51/0x320 [ 628.534104][T26496] ? get_random_u32+0x155/0x940 [ 628.534132][T26496] ? __lock_acquire+0xab9/0xd20 [ 628.534167][T26496] udpv6_sendmsg+0xc1c/0x2510 [ 628.534215][T26496] ? udp_lib_get_port+0x164b/0x1b10 [ 628.534251][T26496] ? udp_lib_get_port+0x164b/0x1b10 [ 628.534284][T26496] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 628.534324][T26496] ? __lock_acquire+0xab9/0xd20 [ 628.534367][T26496] ? __local_bh_enable_ip+0x12d/0x1c0 [ 628.534392][T26496] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 628.534434][T26496] ? inet_send_prepare+0x1b9/0x270 [ 628.534458][T26496] ? inet_send_prepare+0x1b9/0x270 [ 628.534484][T26496] ? inet6_sendmsg+0xe4/0x120 [ 628.534513][T26496] __sock_sendmsg+0xe5/0x270 [ 628.534549][T26496] ____sys_sendmsg+0x52d/0x830 [ 628.534581][T26496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.534618][T26496] ? import_iovec+0x74/0xa0 [ 628.534652][T26496] ___sys_sendmsg+0x21f/0x2a0 [ 628.534680][T26496] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.534756][T26496] ? __fget_files+0x2a/0x420 [ 628.534777][T26496] ? __fget_files+0x3a0/0x420 [ 628.534813][T26496] __sys_sendmmsg+0x227/0x430 [ 628.534845][T26496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 628.534883][T26496] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 628.534940][T26496] ? ksys_write+0x22a/0x250 [ 628.534975][T26496] ? __pfx_ksys_write+0x10/0x10 [ 628.535013][T26496] __x64_sys_sendmmsg+0xa0/0xc0 [ 628.535051][T26496] do_syscall_64+0xfa/0xfa0 [ 628.535082][T26496] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.535114][T26496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.535136][T26496] ? clear_bhb_loop+0x60/0xb0 [ 628.535165][T26496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.535192][T26496] RIP: 0033:0x7fc8c598f749 [ 628.535212][T26496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.535232][T26496] RSP: 002b:00007fc8c3bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 628.535256][T26496] RAX: ffffffffffffffda RBX: 00007fc8c5be6180 RCX: 00007fc8c598f749 [ 628.535272][T26496] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 628.535286][T26496] RBP: 00007fc8c3bac090 R08: 0000000000000000 R09: 0000000000000000 [ 628.535300][T26496] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 628.535314][T26496] R13: 00007fc8c5be6218 R14: 00007fc8c5be6180 R15: 00007ffdbbe4a298 [ 628.535353][T26496] [ 628.541828][T26483] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5791'. [ 629.054745][T26483] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5791'. [ 629.073922][T26484] !€ÿ: renamed from bond_slave_0 [ 629.106851][T26495] team0: Port device dummy0 added [ 629.287818][T26510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5799'. [ 629.299654][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5799'. [ 629.332257][T26508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.544510][T26533] : entered promiscuous mode [ 629.681201][T26541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5806'. [ 629.691115][T26541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5806'. [ 629.707148][T26541] gretap1: entered promiscuous mode [ 629.712391][T26541] gretap1: entered allmulticast mode [ 629.748153][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 630.219141][T26553] bond0: entered promiscuous mode [ 630.241847][T26553] bond_slave_0: entered promiscuous mode [ 630.270799][T26553] bond_slave_1: entered promiscuous mode [ 630.272338][T26554] block nbd3: Unsupported socket: should be TCP or UNIX. [ 630.308342][T26553] batadv0: entered promiscuous mode [ 630.352388][T26553] debugfs: 'hsr1' already exists in 'hsr' [ 630.367413][T26553] Cannot create hsr debugfs directory [ 630.374541][T26553] hsr1: entered allmulticast mode [ 630.379754][T26553] bond0: entered allmulticast mode [ 630.397606][T26553] bond_slave_0: entered allmulticast mode [ 630.413707][T26553] bond_slave_1: entered allmulticast mode [ 630.426751][T26553] batadv0: entered allmulticast mode [ 630.450482][T26553] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 630.518146][T26553] bond0: left promiscuous mode [ 630.530817][T26569] netlink: 'syz.1.5813': attribute type 1 has an invalid length. [ 630.542976][T26553] bond_slave_0: left promiscuous mode [ 630.560495][T26553] bond_slave_1: left promiscuous mode [ 630.570391][T26569] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5813'. [ 630.598159][T26553] batadv0: left promiscuous mode [ 630.897424][T26597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5816'. [ 630.907921][T26597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5816'. [ 630.936410][T26597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5816'. [ 630.955019][T26597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5816'. [ 630.997462][T26596] syzkaller0: entered promiscuous mode [ 631.003143][T26596] syzkaller0: entered allmulticast mode [ 631.074087][T26604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5822'. [ 631.089261][T26596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 631.098627][T26596] netlink: 'syz.1.5818': attribute type 14 has an invalid length. [ 631.107409][T26596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5818'. [ 631.123780][T26596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 631.135677][T26604] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5822'. [ 631.145700][T26596] netlink: 'syz.1.5818': attribute type 14 has an invalid length. [ 631.537897][T26631] netlink: 'syz.1.5828': attribute type 1 has an invalid length. [ 631.590055][T26631] gretap2: entered promiscuous mode [ 631.686765][T26636] x_tables: unsorted entry at hook 2 [ 632.149783][T26666] netlink: 'syz.0.5839': attribute type 29 has an invalid length. [ 632.160864][T26669] netlink: 'syz.0.5839': attribute type 29 has an invalid length. [ 632.177503][T26666] netlink: 'syz.0.5839': attribute type 29 has an invalid length. [ 632.187958][T26669] netlink: 'syz.0.5839': attribute type 29 has an invalid length. [ 632.197324][T26669] netlink: 'syz.0.5839': attribute type 29 has an invalid length. [ 632.444389][T26687] bond1 (unregistering): Released all slaves [ 633.339385][T26750] macsec0: entered promiscuous mode [ 633.358621][T26750] macsec0: entered allmulticast mode [ 633.374624][T26750] veth1_macvtap: entered allmulticast mode [ 633.380815][T26750] macsec0: left promiscuous mode [ 633.390558][T26750] macsec0: left allmulticast mode [ 633.395921][T26750] veth1_macvtap: left allmulticast mode [ 633.532652][T26762] syzkaller1: entered promiscuous mode [ 633.545775][T26762] syzkaller1: entered allmulticast mode [ 633.887114][T26781] wg1 speed is unknown, defaulting to 1000 [ 633.924944][T26781] wlan0 speed is unknown, defaulting to 1000 [ 633.948426][T26781] lo speed is unknown, defaulting to 1000 [ 634.002530][T26793] vxcan2: entered allmulticast mode [ 634.155015][T26794] bridge1: entered promiscuous mode [ 634.171508][T26794] bridge1: entered allmulticast mode [ 634.188839][T26794] team0: Port device bridge1 added [ 634.204138][T26796] bridge0: port 3(team0) entered blocking state [ 634.228752][T26796] bridge0: port 3(team0) entered disabled state [ 634.243424][T26796] team0: entered allmulticast mode [ 634.253776][T26796] team_slave_0: entered allmulticast mode [ 634.268376][T26796] team_slave_1: entered allmulticast mode [ 634.289156][T26796] team0: entered promiscuous mode [ 634.303653][T26796] team_slave_0: entered promiscuous mode [ 634.311968][T26796] team_slave_1: entered promiscuous mode [ 634.478381][T26800] batadv_slave_1: entered allmulticast mode [ 634.500733][T26806] wg1 speed is unknown, defaulting to 1000 [ 634.511328][T26806] wlan0 speed is unknown, defaulting to 1000 [ 634.640570][T26806] lo speed is unknown, defaulting to 1000 [ 634.683668][T26825] validate_nla: 9 callbacks suppressed [ 634.683690][T26825] netlink: 'syz.0.5885': attribute type 1 has an invalid length. [ 634.900106][T26825] 8021q: adding VLAN 0 to HW filter on device bond20 [ 635.097535][T26841] netlink: 'syz.0.5889': attribute type 33 has an invalid length. [ 635.142292][T26840] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 635.802226][T26878] __nla_validate_parse: 93 callbacks suppressed [ 635.802249][T26878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5897'. [ 636.205915][T26887] Bluetooth: MGMT ver 1.23 [ 636.339563][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5901'. [ 636.354041][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5901'. [ 636.638438][T26905] syzkaller1: entered promiscuous mode [ 636.644692][T26905] syzkaller1: entered allmulticast mode [ 636.935628][T26917] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5903'. [ 636.980373][T26916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5906'. [ 637.270569][T26928] x_tables: duplicate entry at hook 2 [ 637.277653][T26929] x_tables: duplicate entry at hook 2 [ 637.718486][T26944] tipc: New replicast peer: 255.255.255.255 [ 637.723512][T26942] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5914'. [ 637.733734][T26944] tipc: Enabled bearer , priority 10 [ 637.773959][T26944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5915'. [ 637.794045][T26945] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5914'. [ 637.858139][T26949] veth0_to_bond: entered allmulticast mode [ 637.984454][T26952] siw: device registration error -23 [ 638.045397][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5918'. [ 638.056121][T26958] netlink: 'syz.3.5919': attribute type 2 has an invalid length. [ 638.066653][T26958] netlink: 'syz.3.5919': attribute type 10 has an invalid length. [ 638.078986][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5918'. [ 638.093646][T26958] netlink: 'syz.3.5919': attribute type 10 has an invalid length. [ 638.235949][T26964] netlink: 'syz.0.5921': attribute type 1 has an invalid length. [ 638.264854][T26010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 638.276231][T26010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 638.286194][T26010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 638.296946][T26010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 638.307758][T26010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 638.357711][T26964] 8021q: adding VLAN 0 to HW filter on device bond21 [ 638.376178][T26970] bond21: entered allmulticast mode [ 638.431504][T26978] bond21: (slave ip6gretap2): making interface the new active one [ 638.439560][T26978] ip6gretap2: entered allmulticast mode [ 638.447509][T26978] bond21: (slave ip6gretap2): Enslaving as an active interface with an up link [ 638.559746][T26965] wg1 speed is unknown, defaulting to 1000 [ 638.595905][T26965] wlan0 speed is unknown, defaulting to 1000 [ 638.635125][T26965] lo speed is unknown, defaulting to 1000 [ 639.156660][T27013] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 639.223232][T27016] netlink: 'syz.5.5935': attribute type 7 has an invalid length. [ 639.231300][T27018] netlink: 'syz.5.5935': attribute type 7 has an invalid length. [ 639.292251][T27022] x_tables: duplicate underflow at hook 3 [ 639.340868][T27024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.537332][T27031] dvmrp0: left allmulticast mode [ 640.024124][T27060] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 640.164932][T27068] sctp: [Deprecated]: syz.3.5952 (pid 27068) Use of int in maxseg socket option. [ 640.164932][T27068] Use struct sctp_assoc_value instead [ 640.208810][T27069] sctp: [Deprecated]: syz.3.5952 (pid 27069) Use of int in maxseg socket option. [ 640.208810][T27069] Use struct sctp_assoc_value instead [ 640.269161][T26965] chnl_net:caif_netlink_parms(): no params data found [ 640.314873][T27073] netlink: 'syz.1.5954': attribute type 1 has an invalid length. [ 640.383017][ T5835] Bluetooth: hci2: command tx timeout [ 640.596767][T26965] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.613692][T26965] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.628837][T26965] bridge_slave_0: entered allmulticast mode [ 640.656240][T26965] bridge_slave_0: entered promiscuous mode [ 640.676270][T26965] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.690986][T26965] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.699498][T26965] bridge_slave_1: entered allmulticast mode [ 640.710006][T26965] bridge_slave_1: entered promiscuous mode [ 640.757370][T27101] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 640.769947][T27101] bond11 (unregistering): Released all slaves [ 640.811068][T27106] veth0: entered promiscuous mode [ 640.821949][T27106] __nla_validate_parse: 8 callbacks suppressed [ 640.821969][T27106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5961'. [ 640.875343][T26965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.948775][T27106] veth0 (unregistering): left promiscuous mode [ 640.991953][T26965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.004016][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5963'. [ 641.023066][T27116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5963'. [ 641.040622][T27113] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 641.057069][T27118] ip6t_srh: unknown srh invflags 4000 [ 641.061554][T27113] bond11 (unregistering): Released all slaves [ 641.236120][T27119] netlink: 'syz.5.5964': attribute type 2 has an invalid length. [ 641.267890][T26965] team0: Port device team_slave_0 added [ 641.279030][T26965] team0: Port device team_slave_1 added [ 641.385025][T26965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.403528][T26965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.450872][T26965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.468773][T26965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.474050][T27134] netlink: 'syz.5.5969': attribute type 1 has an invalid length. [ 641.476044][T26965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.518518][T26965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.545104][T27137] sctp: [Deprecated]: syz.0.5970 (pid 27137) Use of int in max_burst socket option deprecated. [ 641.545104][T27137] Use struct sctp_assoc_value instead [ 641.599750][T27135] 8021q: VLANs not supported on tunl0 [ 641.610984][T27138] macvlan2: entered promiscuous mode [ 641.616612][T27138] macvlan2: entered allmulticast mode [ 641.624082][T27138] bond1: entered promiscuous mode [ 641.630019][T27138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 641.642014][T27138] bond1: left promiscuous mode [ 641.691078][T27141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5971'. [ 641.719638][T27141] pim6reg1: entered promiscuous mode [ 641.733730][T27141] pim6reg1: entered allmulticast mode [ 641.821933][T26965] hsr_slave_0: entered promiscuous mode [ 641.831848][T26965] hsr_slave_1: entered promiscuous mode [ 641.839798][T26965] debugfs: 'hsr0' already exists in 'hsr' [ 641.850224][T26965] Cannot create hsr debugfs directory [ 642.149037][T26965] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.160863][T26965] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.212542][T26965] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.371638][T26965] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.390249][T26965] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.402580][T26965] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.464394][ T5835] Bluetooth: hci2: command tx timeout [ 642.498822][T26965] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.530119][T26965] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.545217][T27172] netlink: 212216 bytes leftover after parsing attributes in process `syz.0.5980'. [ 642.580071][T26965] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.704990][T26965] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.716862][T27181] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5985'. [ 642.734423][T26965] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.751125][T27188] netlink: 'syz.3.5984': attribute type 9 has an invalid length. [ 642.760943][T26965] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.772163][T27188] netlink: 'syz.3.5984': attribute type 6 has an invalid length. [ 643.058075][T27205] netlink: 'syz.3.5990': attribute type 1 has an invalid length. [ 643.059592][T26965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 643.085817][T26965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 643.098590][T26965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 643.243841][T26965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 643.319449][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5993'. [ 643.349829][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5993'. [ 643.421154][T27223] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 643.520274][T27225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5996'. [ 643.533741][T26965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.542333][T27226] netlink: 'syz.5.5996': attribute type 27 has an invalid length. [ 643.550747][T27225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5996'. [ 643.632158][T26965] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.651734][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.659005][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.726389][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.733639][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.288399][T26965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.543363][ T5835] Bluetooth: hci2: command tx timeout [ 644.788386][T27300] xt_hashlimit: invalid interval [ 644.806601][T27304] xt_hashlimit: invalid interval [ 645.053920][T26965] veth0_vlan: entered promiscuous mode [ 645.099860][T26965] veth1_vlan: entered promiscuous mode [ 645.202477][T27319] kthread_run failed with err -4 [ 645.489652][T26965] veth0_macvtap: entered promiscuous mode [ 645.528564][T26965] veth1_macvtap: entered promiscuous mode [ 645.577731][T26965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.617361][T26965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.653550][ T6025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.672548][ T6025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.695552][ T6025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.705570][ T6025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.878249][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.896556][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.940234][ T6025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.950242][ T6025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.998360][T27346] __nla_validate_parse: 3 callbacks suppressed [ 645.998381][T27346] netlink: 45 bytes leftover after parsing attributes in process `syz.1.6027'. [ 646.294537][T27352] netlink: 'syz.4.5910': attribute type 4 has an invalid length. [ 646.336217][T27352] netlink: 'syz.4.5910': attribute type 4 has an invalid length. [ 646.581173][T27356] syzkaller1: entered promiscuous mode [ 646.593058][T27358] netlink: 'syz.5.6030': attribute type 11 has an invalid length. [ 646.611242][T27356] syzkaller1: entered allmulticast mode [ 646.617114][T27358] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6030'. [ 646.627304][ T5835] Bluetooth: hci2: command tx timeout [ 646.656408][T27358] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 646.861529][T26010] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.874329][T26010] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.890859][T26010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.900959][T26010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.910544][T26010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 646.990380][T27360] wg1 speed is unknown, defaulting to 1000 [ 646.999771][T27360] wlan0 speed is unknown, defaulting to 1000 [ 647.008044][T27360] lo speed is unknown, defaulting to 1000 [ 647.040010][T27365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6034'. [ 647.063059][T27365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6034'. [ 647.105563][T27371] tipc: Started in network mode [ 647.117132][T27371] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 647.139966][T27371] tipc: Enabled bearer , priority 2 [ 647.147425][T16040] IPVS: starting estimator thread 0... [ 647.243078][T27374] IPVS: using max 24 ests per chain, 57600 per kthread [ 647.369332][T27378] netlink: 'syz.4.6036': attribute type 1 has an invalid length. [ 648.946423][T26010] Bluetooth: hci5: command tx timeout [ 649.154836][T27380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 649.257413][ T9] tipc: Node number set to 10463914 [ 649.320214][T27391] syzkaller0: entered promiscuous mode [ 649.350635][T27391] syzkaller0: entered allmulticast mode [ 649.475822][T27396] tipc: Enabled bearer , priority 0 [ 649.499821][T27396] syzkaller0: entered promiscuous mode [ 649.511444][T27396] syzkaller0: entered allmulticast mode [ 649.538970][T27396] netlink: 45 bytes leftover after parsing attributes in process `syz.1.6039'. [ 649.665230][T27396] tipc: Resetting bearer [ 649.710142][T27413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6044'. [ 649.722461][T27414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6044'. [ 649.732931][T27395] tipc: Resetting bearer [ 649.761973][T27395] tipc: Disabling bearer [ 649.859955][T27416] netlink: 'syz.4.6045': attribute type 2 has an invalid length. [ 649.873170][T27419] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6046'. [ 649.882189][T27419] netlink: 'syz.5.6046': attribute type 1 has an invalid length. [ 649.913859][T27419] nbd: error processing sock list [ 650.068762][T27424] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 650.142434][T27424] gtp1: entered promiscuous mode [ 650.172447][T27424] gtp1: entered allmulticast mode [ 650.356946][T27360] chnl_net:caif_netlink_parms(): no params data found [ 650.546336][T27456] pimreg: left allmulticast mode [ 650.553402][T27456] dvmrp6: left allmulticast mode [ 650.676065][T27469] tipc: New replicast peer: 255.255.255.255 [ 650.687273][T27469] tipc: Enabled bearer , priority 10 [ 650.793667][T27360] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.801549][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6057'. [ 650.803668][T27360] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.833861][T27360] bridge_slave_0: entered allmulticast mode [ 650.843088][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6057'. [ 650.849205][T27360] bridge_slave_0: entered promiscuous mode [ 650.882858][T27360] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.890239][T27360] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.899120][T27360] bridge_slave_1: entered allmulticast mode [ 650.908252][T27360] bridge_slave_1: entered promiscuous mode [ 650.925430][T27477] bridge0: port 1(vlan2) entered blocking state [ 650.943656][T27477] bridge0: port 1(vlan2) entered disabled state [ 650.950345][T27477] vlan2: entered allmulticast mode [ 650.960300][T27477] bridge0: entered allmulticast mode [ 650.969202][T27477] vlan2: left allmulticast mode [ 650.974670][T27477] bridge0: left allmulticast mode [ 651.023018][T26010] Bluetooth: hci5: command tx timeout [ 651.119076][T27360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.198334][T27485] syzkaller0: entered promiscuous mode [ 651.204842][T27485] syzkaller0: entered allmulticast mode [ 651.216510][T27360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.267057][T27497] netlink: 'syz.0.6064': attribute type 23 has an invalid length. [ 653.103342][T26010] Bluetooth: hci5: command tx timeout [ 653.267534][T27360] team0: Port device team_slave_0 added [ 653.279899][T27360] team0: Port device team_slave_1 added [ 653.401527][T27360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.408095][T27529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6071'. [ 653.430163][T27360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.460817][T27529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6071'. [ 653.509314][T27360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.527729][T27533] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6072'. [ 653.540907][T27360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.548439][T27360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.575404][T27360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.711935][T27545] netlink: 'syz.4.6076': attribute type 1 has an invalid length. [ 653.733333][T27360] hsr_slave_0: entered promiscuous mode [ 653.743676][T27360] hsr_slave_1: entered promiscuous mode [ 653.750381][T27360] debugfs: 'hsr0' already exists in 'hsr' [ 653.757042][T27360] Cannot create hsr debugfs directory [ 653.801251][T27553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6079'. [ 653.901305][T27555] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6079'. [ 653.979297][T27562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6081'. [ 654.004063][T27560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6080'. [ 654.249249][T27360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.264300][T27360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 654.398864][T27360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.453620][T27360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 654.466250][T27586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6088'. [ 654.607632][T27360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.638617][T27360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 654.741561][T27360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.763740][T27360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 654.932151][T27600] netlink: 'syz.4.6093': attribute type 1 has an invalid length. [ 655.080750][T27360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 655.155959][T27360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 655.188388][T26010] Bluetooth: hci5: command tx timeout [ 655.379858][T27615] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6098'. [ 655.736631][T27608] syzkaller0: entered promiscuous mode [ 655.742291][T27608] syzkaller0: entered allmulticast mode [ 655.819454][T27360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 655.896598][T27360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 656.107096][T27360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.147768][T27360] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.172607][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.179891][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.236830][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.244084][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.720975][T27671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6114'. [ 656.745858][T27360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.766059][T27671] vxcan2: entered allmulticast mode [ 656.856117][T27671] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 656.923388][T27360] veth0_vlan: entered promiscuous mode [ 656.984369][T27360] veth1_vlan: entered promiscuous mode [ 657.082380][T27360] veth0_macvtap: entered promiscuous mode [ 657.100161][T27685] netlink: 'syz.1.6119': attribute type 4 has an invalid length. [ 657.108086][T27360] veth1_macvtap: entered promiscuous mode [ 657.206065][T27360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.226959][T27360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.296388][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.315758][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.354729][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.405842][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.636382][T27713] netlink: 'syz.1.6126': attribute type 10 has an invalid length. [ 657.649503][T27713] team0: Port device geneve0 added [ 657.658130][ T7288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.685314][ T7288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.707503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.727725][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.775024][ T7288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.792956][ T7288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.906361][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.916209][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.156812][T27736] netlink: 'syz.3.6028': attribute type 1 has an invalid length. [ 658.352158][T27744] tipc: Enabling of bearer rejected, failed to enable media [ 658.471882][T27756] __nla_validate_parse: 9 callbacks suppressed [ 658.471908][T27756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6137'. [ 658.505785][T27754] netlink: 'syz.1.6136': attribute type 21 has an invalid length. [ 658.571973][T27767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6139'. [ 658.866948][T27779] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 658.902200][T27779] netlink: 'syz.3.6143': attribute type 21 has an invalid length. [ 658.927300][T27779] netlink: 'syz.3.6143': attribute type 1 has an invalid length. [ 659.089938][T27785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6146'. [ 659.187475][T27788] syzkaller0: entered allmulticast mode [ 659.404087][T27799] pimreg: entered allmulticast mode [ 659.410211][T27800] sctp: [Deprecated]: syz.0.6148 (pid 27800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.410211][T27800] Use struct sctp_sack_info instead [ 659.595891][T27807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6152'. [ 659.610338][T27807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6152'. [ 659.635035][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6154'. [ 659.645226][T27807] team0: Device ipvlan1 failed to register rx_handler [ 659.647540][T27809] netlink: 'syz.4.6154': attribute type 1 has an invalid length. [ 659.660325][T27809] netlink: 'syz.4.6154': attribute type 2 has an invalid length. [ 659.677730][T27809] netlink: 'syz.4.6154': attribute type 1 has an invalid length. [ 659.678062][T27807] netlink: 'syz.3.6152': attribute type 2 has an invalid length. [ 659.697463][T27809] netlink: 'syz.4.6154': attribute type 2 has an invalid length. [ 659.699081][T27807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6152'. [ 659.740761][T27811] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 659.770055][T27811] bond12 (unregistering): Released all slaves [ 659.805092][T27817] tipc: Started in network mode [ 659.860422][T27817] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 659.879333][T27817] tipc: Enabled bearer , priority 10 [ 659.881712][T27821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6157'. [ 660.144493][T27834] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6160'. [ 660.164610][T27836] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6162'. [ 660.549868][T27861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.659514][T27869] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 660.992895][T11582] tipc: Node number set to 4269801492 [ 661.658207][T27889] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 661.733689][ T9710] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.773482][ T9710] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.782355][ T9710] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.829542][ T9710] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.941385][T27905] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 662.110015][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 662.121921][T27909] netlink: 'syz.3.6185': attribute type 5 has an invalid length. [ 662.130108][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 662.140537][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 662.183948][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 662.198926][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 662.274133][T27913] wg1 speed is unknown, defaulting to 1000 [ 662.282409][T27913] wlan0 speed is unknown, defaulting to 1000 [ 662.291338][T27913] lo speed is unknown, defaulting to 1000 [ 662.490249][ T9710] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.686461][ T9710] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.786346][ T9710] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.881716][ T9710] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.436811][ T9710] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 663.507694][ T9710] bond21 (unregistering): (slave ip6gretap2): Releasing active interface [ 663.517979][ T9710] ip6gretap2 (unregistering): left allmulticast mode [ 663.830158][ T9710] team0: Port device geneve0 removed [ 664.177208][ T9710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.190347][ T9710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.205170][ T9710] bond0 (unregistering): Released all slaves [ 664.221142][ T9710] bond1 (unregistering): Released all slaves [ 664.239138][ T9710] bond2 (unregistering): Released all slaves [ 664.307994][T26010] Bluetooth: hci4: command tx timeout [ 664.370566][ T9710] bond3 (unregistering): Released all slaves [ 664.386935][ T9710] bond4 (unregistering): Released all slaves [ 664.503477][ T9710] bond5 (unregistering): (slave veth3): Releasing active interface [ 664.515526][ T9710] bond5 (unregistering): (slave veth5): Releasing active interface [ 664.526028][ T9710] bond5 (unregistering): Released all slaves [ 664.541140][ T9710] bond6 (unregistering): Released all slaves [ 664.558202][ T9710] bond7 (unregistering): Released all slaves [ 664.573602][ T9710] bond8 (unregistering): Released all slaves [ 664.592484][ T9710] bond9 (unregistering): Released all slaves [ 664.611861][ T9710] bond10 (unregistering): Released all slaves [ 664.630028][ T9710] bond11 (unregistering): Released all slaves [ 664.646314][ T9710] bond12 (unregistering): Released all slaves [ 664.662646][ T9710] bond13 (unregistering): Released all slaves [ 664.684387][ T9710] bond14 (unregistering): Released all slaves [ 664.701091][ T9710] bond15 (unregistering): Released all slaves [ 664.716210][ T9710] bond16 (unregistering): Released all slaves [ 664.731448][ T9710] bond17 (unregistering): Released all slaves [ 664.746719][ T9710] bond18 (unregistering): Released all slaves [ 664.761197][ T9710] bond19 (unregistering): Released all slaves [ 664.878457][ T9710] bond20 (unregistering): Released all slaves [ 664.989962][ T9710] bond21 (unregistering): Released all slaves [ 665.355564][T27913] chnl_net:caif_netlink_parms(): no params data found [ 665.453833][T27991] __nla_validate_parse: 13 callbacks suppressed [ 665.453861][T27991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6204'. [ 665.529642][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6204'. [ 665.574433][T27913] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.582060][T27913] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.593379][T27913] bridge_slave_0: entered allmulticast mode [ 665.602353][T27913] bridge_slave_0: entered promiscuous mode [ 665.647546][T27913] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.667277][T27913] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.683218][T27913] bridge_slave_1: entered allmulticast mode [ 665.703610][T27913] bridge_slave_1: entered promiscuous mode [ 665.726084][T28005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 665.812155][T27913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.836898][T27913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.932552][T28013] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6209'. [ 665.949073][T27913] team0: Port device team_slave_0 added [ 665.989806][T27913] team0: Port device team_slave_1 added [ 666.092193][T27913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.109805][T27913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.169498][T27913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.201711][T27913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.217859][T27913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.277775][T27913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.301877][T28034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6215'. [ 666.385362][T26010] Bluetooth: hci4: command tx timeout [ 666.452328][T27913] hsr_slave_0: entered promiscuous mode [ 666.461500][T27913] hsr_slave_1: entered promiscuous mode [ 666.485212][T27913] debugfs: 'hsr0' already exists in 'hsr' [ 666.491022][T27913] Cannot create hsr debugfs directory [ 666.567310][T28044] syzkaller0: entered promiscuous mode [ 666.579770][T28044] syzkaller0: entered allmulticast mode [ 666.749369][ T9710] tipc: Left network mode [ 666.909656][T28066] netlink: zone id is out of range [ 666.919385][T28066] netlink: zone id is out of range [ 666.927366][T28066] netlink: zone id is out of range [ 666.949893][T28066] netlink: zone id is out of range [ 666.963015][T28066] netlink: zone id is out of range [ 666.992497][T28066] netlink: zone id is out of range [ 667.002630][T28066] netlink: zone id is out of range [ 667.016757][T28066] netlink: set zone limit has 4 unknown bytes [ 667.114653][T28072] xt_NFQUEUE: number of total queues is 0 [ 667.178139][T28073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.305443][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6229'. [ 667.545533][T28092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6232'. [ 667.837674][T28103] netlink: 'syz.3.6234': attribute type 4 has an invalid length. [ 667.845325][T27913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 667.863760][T27913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 667.902480][T27913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 667.948516][T27913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 668.028552][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880586c1800: rx timeout, send abort [ 668.191432][T28116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6236'. [ 668.228377][ T9710] hsr_slave_0: left promiscuous mode [ 668.245444][ T9710] hsr_slave_1: left promiscuous mode [ 668.253742][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.261322][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.272474][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.293625][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.351899][ T9710] veth1_vlan: left promiscuous mode [ 668.363182][ T9710] veth0_vlan: left promiscuous mode [ 668.462852][T26010] Bluetooth: hci4: command tx timeout [ 668.491953][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6241'. [ 668.528620][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880586c2000: rx timeout, send abort [ 668.537052][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880586c1800: abort rx timeout. Force session deactivation [ 669.036996][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880586c2000: abort rx timeout. Force session deactivation [ 669.127049][ T9710] team0 (unregistering): Port device team_slave_1 removed [ 669.198179][ T9710] team0 (unregistering): Port device team_slave_0 removed [ 669.698732][T27913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.782627][T27913] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.834186][ T9708] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.841450][ T9708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.904454][ T9708] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.911724][ T9708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.142532][T28180] vlan2: entered promiscuous mode [ 670.164866][T28180] bridge0: entered promiscuous mode [ 670.240104][T28184] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6255'. [ 670.286369][ T9710] IPVS: stop unused estimator thread 0... [ 670.554717][T26010] Bluetooth: hci4: command tx timeout [ 670.650802][T28211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6258'. [ 670.788358][T28216] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 670.819093][T27913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.888505][T27913] veth0_vlan: entered promiscuous mode [ 670.902075][T27913] veth1_vlan: entered promiscuous mode [ 670.941308][T27913] veth0_macvtap: entered promiscuous mode [ 670.954956][T27913] veth1_macvtap: entered promiscuous mode [ 670.976839][T27913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.995557][T27913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.010807][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.020007][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.039747][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.050805][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.276824][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.313114][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.412280][T28228] gre4: entered promiscuous mode [ 671.424983][T28228] gre4: entered allmulticast mode [ 671.459782][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.472608][T28236] netlink: 'syz.3.6266': attribute type 2 has an invalid length. [ 671.485690][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.610318][T28239] netlink: 'syz.5.6267': attribute type 24 has an invalid length. [ 671.859299][T28263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6273'. [ 671.899204][T28264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6274'. [ 671.957055][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6274'. [ 671.966954][T28266] netem: change failed [ 671.982180][T28266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6275'. [ 672.030524][T28266] netlink: 'syz.5.6275': attribute type 3 has an invalid length. [ 672.042881][T28266] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6275'. [ 672.055275][T28274] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6276'. [ 672.057780][T28266] netlink: 'syz.5.6275': attribute type 2 has an invalid length. [ 672.131904][T28277] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.6278'. [ 672.250596][T28286] netlink: 'syz.5.6279': attribute type 6 has an invalid length. [ 672.387477][T28292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6283'. [ 672.399637][T28288] syzkaller0: entered promiscuous mode [ 672.406368][T28288] syzkaller0: entered allmulticast mode [ 672.540546][T28296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.636352][T28296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.715315][T28310] geneve5: entered promiscuous mode [ 672.756722][T28296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.790470][ T36] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20002 - 0 [ 672.800079][ T36] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20002 - 0 [ 672.825650][ T6025] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20002 - 0 [ 672.853714][ T6025] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20002 - 0 [ 672.917142][T28296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.950490][T28311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6288'. [ 673.098433][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.132622][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.177472][ T9708] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.214794][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.272434][T28329] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 673.307125][T28329] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 673.497789][T28345] netlink: 'syz.1.6300': attribute type 15 has an invalid length. [ 673.898325][T28362] wg1 speed is unknown, defaulting to 1000 [ 673.927925][T28362] wlan0 speed is unknown, defaulting to 1000 [ 673.937010][T28362] lo speed is unknown, defaulting to 1000 [ 674.785657][T28411] lo: entered allmulticast mode [ 674.909652][T28419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.249894][T28444] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 675.308209][T28444] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 675.405525][T28452] netlink: 'syz.3.6331': attribute type 1 has an invalid length. [ 675.527745][T28452] ip6gre1: entered promiscuous mode [ 675.540445][T28452] ip6gre1: entered allmulticast mode [ 675.601233][T28455] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 675.819173][T28472] __nla_validate_parse: 4 callbacks suppressed [ 675.819193][T28472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6335'. [ 676.013868][T28484] netlink: 'syz.4.6339': attribute type 1 has an invalid length. [ 676.143673][T28495] netlink: 'syz.3.6342': attribute type 1 has an invalid length. [ 676.155360][T28491] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 676.169901][T28491] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 676.180740][T28491] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 676.235712][T28482] tipc: Started in network mode [ 676.240731][T28482] tipc: Node identity c2ec783c8f5, cluster identity 4711 [ 676.248274][T28482] tipc: Enabled bearer , priority 0 [ 676.257908][T28497] syzkaller0: entered promiscuous mode [ 676.288557][T28497] syzkaller0: entered allmulticast mode [ 676.315245][T28482] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 676.354565][T28482] tipc: Resetting bearer [ 676.369038][T28479] tipc: Resetting bearer [ 676.453913][T28479] tipc: Disabling bearer [ 676.870559][T28512] pim6reg1: entered promiscuous mode [ 676.882827][T28512] pim6reg1: entered allmulticast mode [ 677.047114][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.059557][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.068555][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.078154][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.090284][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.266411][T28525] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 677.272306][T28525] syzkaller0: group set to 0 [ 677.328625][T28528] bond1: Removing last arp target with arp_interval on [ 677.350116][T28519] wg1 speed is unknown, defaulting to 1000 [ 677.400441][T28519] wlan0 speed is unknown, defaulting to 1000 [ 677.411715][ T6025] syzkaller0: tun_net_xmit 76 [ 677.433301][ T5935] syzkaller0: tun_net_xmit 76 [ 677.438092][ T5935] syzkaller0: tun_net_xmit 48 [ 677.459905][T28526] syzkaller0: entered promiscuous mode [ 677.470408][T28526] syzkaller0: entered allmulticast mode [ 677.480108][T28519] lo speed is unknown, defaulting to 1000 [ 677.489898][ T8004] syzkaller0: tun_net_xmit 76 [ 677.653052][T16040] syzkaller0: tun_net_xmit 76 [ 677.717396][T28542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.256815][T28563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6359'. [ 679.184694][ T5835] Bluetooth: hci0: command tx timeout [ 679.921452][T28574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6363'. [ 679.940248][T28576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6364'. [ 679.962432][T28574] xfrm1: entered promiscuous mode [ 679.970173][T28574] xfrm1: entered allmulticast mode [ 679.992198][T28578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6363'. [ 680.045210][T28579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6365'. [ 680.120449][T28582] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 680.151912][T28579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.196155][T28584] netlink: 'syz.5.6367': attribute type 1 has an invalid length. [ 680.461552][T28596] dvmrp0: entered allmulticast mode [ 680.527779][T28596] dvmrp0: left allmulticast mode [ 680.548319][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6369'. [ 680.609972][T28592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6369'. [ 680.634494][T28519] chnl_net:caif_netlink_parms(): no params data found [ 680.977081][T28519] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.995241][T28519] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.011783][T28519] bridge_slave_0: entered allmulticast mode [ 681.031770][T28519] bridge_slave_0: entered promiscuous mode [ 681.049484][T28519] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.060459][T28519] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.068880][T28519] bridge_slave_1: entered allmulticast mode [ 681.090368][T28519] bridge_slave_1: entered promiscuous mode [ 681.263186][T28635] xt_hashlimit: overflow, rate too high: 0 [ 681.266251][ T5835] Bluetooth: hci0: command tx timeout [ 681.698669][T28519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.727673][T28519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.806316][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6384'. [ 681.835254][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6384'. [ 681.852472][T28654] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6386'. [ 681.880106][T28519] team0: Port device team_slave_0 added [ 681.894880][T28654] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6386'. [ 681.915063][T28519] team0: Port device team_slave_1 added [ 682.063903][T28519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.081179][T28519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.116020][T28665] netlink: 'syz.4.6388': attribute type 33 has an invalid length. [ 682.138295][T28519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.179150][T28665] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6388'. [ 682.179212][T28519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.246738][T28519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.312187][T28519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.369211][T28680] xfrm1: entered allmulticast mode [ 682.395133][T28680] netlink: 'syz.3.6393': attribute type 1 has an invalid length. [ 682.449493][T28689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6393'. [ 682.561035][T28682] wg1 speed is unknown, defaulting to 1000 [ 682.569946][T28519] hsr_slave_0: entered promiscuous mode [ 682.579522][T28519] hsr_slave_1: entered promiscuous mode [ 682.605047][T28519] debugfs: 'hsr0' already exists in 'hsr' [ 682.610843][T28519] Cannot create hsr debugfs directory [ 682.630439][T28682] wlan0 speed is unknown, defaulting to 1000 [ 682.680513][T28699] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.6397'. [ 682.719871][T28688] syzkaller0: entered promiscuous mode [ 682.724960][T28699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6397'. [ 682.726811][T28688] syzkaller0: entered allmulticast mode [ 682.737102][T28699] netlink: 'syz.3.6397': attribute type 83 has an invalid length. [ 682.750033][T28682] lo speed is unknown, defaulting to 1000 [ 683.069022][T28709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'. [ 683.346260][ T5835] Bluetooth: hci0: command tx timeout [ 683.417650][T28720] xt_CT: No such helper "snmp_trap" [ 685.341755][T28519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.354242][T28519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 685.365528][T28519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 685.410802][T28730] bond0: entered promiscuous mode [ 685.418605][T28730] bond_slave_0: entered promiscuous mode [ 685.430006][ T5835] Bluetooth: hci0: command tx timeout [ 685.441146][T28730] bond_slave_1: entered promiscuous mode [ 685.456909][T28730] batadv0: entered promiscuous mode [ 685.475566][T28730] debugfs: 'hsr1' already exists in 'hsr' [ 685.481582][T28730] Cannot create hsr debugfs directory [ 685.497205][T28730] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 685.555783][T28519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.566347][T28519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 685.577331][T28519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 685.621590][T28739] tipc: Enabled bearer , priority 0 [ 685.634928][T28733] tipc: Disabling bearer [ 685.711866][T28519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.728541][T28519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 685.739662][T28519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 685.937293][T28752] sctp: [Deprecated]: syz.3.6413 (pid 28752) Use of int in max_burst socket option deprecated. [ 685.937293][T28752] Use struct sctp_assoc_value instead [ 685.946460][T28519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.967478][T28519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 685.978054][T28519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 685.994634][T28759] netlink: 'syz.3.6413': attribute type 1 has an invalid length. [ 686.175797][T28768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6413'. [ 686.265657][T28759] bond3: entered promiscuous mode [ 686.271227][T28759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.478288][T28775] bond3: (slave bridge2): making interface the new active one [ 686.521540][T28775] bridge2: entered promiscuous mode [ 686.567030][T28775] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 686.980622][T28794] netlink: 'syz.3.6422': attribute type 1 has an invalid length. [ 687.009385][T28794] __nla_validate_parse: 2 callbacks suppressed [ 687.009408][T28794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6422'. [ 687.061538][T28519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 687.174603][T28519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 687.218633][T28519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 687.250354][T28519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 687.284076][T28801] netlink: 'syz.0.6424': attribute type 4 has an invalid length. [ 687.383815][T28815] tipc: Enabling of bearer rejected, failed to enable media [ 687.571416][T28823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 687.580965][T28823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 687.597863][T28519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.667915][T28519] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.700596][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.707831][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.736235][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.743464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.807078][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6432'. [ 687.833485][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6432'. [ 687.955507][T28838] netlink: 'syz.5.6435': attribute type 9 has an invalid length. [ 688.330224][T28862] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 688.382358][T28519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.516997][T28519] veth0_vlan: entered promiscuous mode [ 688.553978][T28519] veth1_vlan: entered promiscuous mode [ 688.636893][T28519] veth0_macvtap: entered promiscuous mode [ 688.677156][T28519] veth1_macvtap: entered promiscuous mode [ 688.736323][T28876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6443'. [ 688.754972][T28519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.781968][T28519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.808660][ T9710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.820221][ T9710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.856098][ T9710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.881688][ T9710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.029630][ T7288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.047222][ T7288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.145562][ T6025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.174198][ T6025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.761942][T28936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6460'. [ 690.256503][T28949] syzkaller0: entered promiscuous mode [ 690.262114][T28949] syzkaller0: entered allmulticast mode [ 690.317513][T28958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6465'. [ 690.595187][T28971] netlink: 'syz.1.6468': attribute type 1 has an invalid length. [ 690.747526][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6470'. [ 690.788422][ T6022] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.788682][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6470'. [ 690.819504][ T6022] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.850350][ T6022] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.896561][ T6022] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.103819][T29001] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 691.119936][T29001] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 691.132249][T29001] 0ªî{X¹¦: entered allmulticast mode [ 691.143463][T29001] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 691.199270][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 691.236523][T29009] netlink: 'syz.5.6478': attribute type 10 has an invalid length. [ 691.245257][T29005] syzkaller0: entered promiscuous mode [ 691.262925][T29005] syzkaller0: entered allmulticast mode [ 691.282350][T29009] dummy0: entered promiscuous mode [ 691.319063][T29009] team0: Port device dummy0 removed [ 691.328226][T29009] bridge0: port 3(dummy0) entered blocking state [ 691.335084][T29009] bridge0: port 3(dummy0) entered disabled state [ 691.341940][T29009] dummy0: entered allmulticast mode [ 691.650219][T29023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.829478][T29029] team1: entered promiscuous mode [ 691.843869][T29029] team1: entered allmulticast mode [ 692.032139][T29046] __nla_validate_parse: 4 callbacks suppressed [ 692.032160][T29046] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6494'. [ 692.093942][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6494'. [ 692.209823][T29053] bridge0: port 3(batadv1) entered blocking state [ 692.233759][T29053] bridge0: port 3(batadv1) entered disabled state [ 692.253129][T29053] batadv1: entered allmulticast mode [ 692.260953][T29053] batadv1: entered promiscuous mode [ 692.712926][ T972] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 692.722243][ T972] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 692.825200][T29072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.868429][T29081] syzkaller0: entered promiscuous mode [ 692.879003][T29081] syzkaller0: entered allmulticast mode [ 693.041528][T29072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.195376][T29072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.376602][T29072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.396009][T29110] netlink: 'syz.5.6517': attribute type 4 has an invalid length. [ 693.396973][T29112] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6516'. [ 693.404679][T29110] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6517'. [ 693.416062][T29112] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6516'. [ 693.657173][ T972] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.714981][ T972] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.799268][ T7299] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.838106][T29134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6524'. [ 693.845203][T29135] syzkaller0: entered promiscuous mode [ 693.858065][T29135] syzkaller0: entered allmulticast mode [ 693.880639][ T7299] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.981191][T29135] tipc: Started in network mode [ 694.013941][T29135] tipc: Node identity dee3cc22ea16, cluster identity 4711 [ 694.021712][T29135] tipc: Enabled bearer , priority 0 [ 694.054809][T29148] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6526'. [ 694.116444][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6528'. [ 694.147947][T29132] tipc: Resetting bearer [ 694.236769][T29132] tipc: Disabling bearer [ 694.272282][T29158] syzkaller1: entered promiscuous mode [ 694.278294][T29158] syzkaller1: entered allmulticast mode [ 694.646163][T29173] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6535'. [ 694.679779][T29178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6536'. [ 694.937591][T29192] nftables ruleset with unbound chain [ 694.984680][T29195] netlink: 'syz.0.6542': attribute type 39 has an invalid length. [ 695.197583][T29204] erspan0: entered promiscuous mode [ 695.228622][T29206] openvswitch: netlink: Message has 592 unknown bytes. [ 695.237027][T29206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.724485][T29240] SET target dimension over the limit! [ 695.729444][T29241] netlink: zone id is out of range [ 695.735738][T29241] netlink: zone id is out of range [ 695.741136][T29241] netlink: zone id is out of range [ 695.746877][T29241] netlink: zone id is out of range [ 695.752182][T29241] netlink: zone id is out of range [ 695.762337][T29241] netlink: zone id is out of range [ 695.767858][T29241] netlink: zone id is out of range [ 695.773446][T29241] netlink: zone id is out of range [ 695.815012][T29240] tipc: Enabled bearer , priority 0 [ 695.932400][T29240] syzkaller0: entered promiscuous mode [ 695.953440][T29240] syzkaller0: entered allmulticast mode [ 695.963908][T29240] tipc: Resetting bearer [ 696.001106][T29238] tipc: Resetting bearer [ 698.012407][T29238] tipc: Disabling bearer [ 698.025506][T29255] syzkaller1: entered promiscuous mode [ 698.031005][T29255] syzkaller1: entered allmulticast mode [ 698.093018][ T5935] tipc: Node number set to 1304197180 [ 698.157981][T29277] netlink: 'syz.5.6568': attribute type 1 has an invalid length. [ 698.248407][T29282] __nla_validate_parse: 4 callbacks suppressed [ 698.248430][T29282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6569'. [ 699.132170][T29326] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6581'. [ 699.240031][T29335] tap0: tun_chr_ioctl cmd 1074025676 [ 699.246510][T29335] tap0: owner set to 0 [ 699.253257][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6580'. [ 699.287286][T29337] geneve2: entered promiscuous mode [ 699.293690][T29338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6583'. [ 699.683679][T29353] pim6reg: entered allmulticast mode [ 699.695701][T29353] netlink: 'syz.1.6588': attribute type 4 has an invalid length. [ 699.718335][T29353] netlink: 'syz.1.6588': attribute type 4 has an invalid length. [ 699.729404][T29349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6586'. [ 699.814848][T29362] vlan3: entered promiscuous mode [ 699.820004][T29362] bridge0: entered promiscuous mode [ 699.995797][T29349] netlink: 408 bytes leftover after parsing attributes in process `syz.5.6586'. [ 700.191516][T29381] xt_time: unknown flags 0xf4 [ 700.636191][T29397] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6600'. [ 700.752407][T29406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6604'. [ 700.979233][T29417] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 701.126264][T29380] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 701.163786][T29434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6608'. [ 701.213580][T29434] netlink: 'syz.5.6608': attribute type 9 has an invalid length. [ 701.251526][T29437] tipc: Enabled bearer , priority 0 [ 701.389566][T29446] wg1 speed is unknown, defaulting to 1000 [ 701.403572][T29437] tipc: Resetting bearer [ 701.411831][T29446] wlan0 speed is unknown, defaulting to 1000 [ 701.464836][T29446] lo speed is unknown, defaulting to 1000 [ 701.541964][T29459] netlink: 'syz.5.6616': attribute type 4 has an invalid length. [ 701.740540][T29468] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6621'. [ 701.845561][T29473] net_ratelimit: 24 callbacks suppressed [ 701.853776][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.896686][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.937263][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.959574][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.982489][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.003336][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.038145][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.058494][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.108111][T29436] tipc: Disabling bearer [ 702.121151][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.139857][T29473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.227303][ T5835] Bluetooth: hci0: command 0x0c20 tx timeout [ 702.607884][T29501] sctp: [Deprecated]: syz.1.6629 (pid 29501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.607884][T29501] Use struct sctp_sack_info instead [ 702.787551][T29507] netlink: 'syz.1.6633': attribute type 8 has an invalid length. [ 703.453272][T29544] netlink: 'syz.3.6645': attribute type 32 has an invalid length. [ 703.462392][T29544] __nla_validate_parse: 2 callbacks suppressed [ 703.462412][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6645'. [ 703.528470][T29544] bond4: Setting coupled_control to off (0) [ 703.779165][T29562] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 703.858146][T29562] syzkaller0: entered promiscuous mode [ 703.864005][T29562] syzkaller0: entered allmulticast mode [ 704.279746][T29587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6659'. [ 704.342170][T29590] netlink: 'syz.0.6658': attribute type 10 has an invalid length. [ 704.365244][T29590] veth1_macvtap: left promiscuous mode [ 704.366846][T29591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6660'. [ 721.916163][ T12] bridge_slave_1: left allmulticast mode [ 721.921854][ T12] bridge_slave_1: left promiscuous mode [ 721.928017][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.937954][ T12] bridge_slave_0: left allmulticast mode [ 721.945147][ T12] bridge_slave_0: left promiscuous mode [ 721.951022][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.265552][ T12] bond0 (unregistering): (slave gretap1): Releasing active interface [ 722.767660][ T12] bond1 (unregistering): Released all slaves [ 722.890649][ T12] bond2 (unregistering): Released all slaves [ 722.906102][ T12] bond3 (unregistering): Released all slaves [ 722.922038][ T12] bond0 (unregistering): Released all slaves [ 722.937838][ T12] bond4 (unregistering): Released all slaves [ 722.958550][ T12] bond5 (unregistering): Released all slaves [ 722.974584][ T12] bond6 (unregistering): Released all slaves [ 723.113499][ T12] bond7 (unregistering): Released all slaves [ 723.240687][ T12] bond8 (unregistering): Released all slaves [ 723.255156][ T12] bond9 (unregistering): Released all slaves [ 723.273155][ T12] bond10 (unregistering): (slave bond11): Releasing backup interface [ 723.282300][ T12] bond10 (unregistering): Released all slaves [ 723.417112][ T12] bond11 (unregistering): Released all slaves [ 723.558996][ T12] : left promiscuous mode [ 723.654283][ T12] tipc: Disabling bearer [ 723.659846][ T12] tipc: Left network mode [ 723.684709][ T12] IPVS: stopping backup sync thread 9599 ... [ 724.215020][ T12] hsr_slave_0: left promiscuous mode [ 724.222206][ T12] hsr_slave_1: left promiscuous mode [ 724.241387][ T12] veth1_macvtap: left promiscuous mode [ 724.247488][ T12] veth1_vlan: left promiscuous mode [ 724.253229][ T12] veth0_vlan: left promiscuous mode [ 724.387641][ T12] pimreg (unregistering): left allmulticast mode [ 725.295003][ T12] IPVS: stop unused estimator thread 0... [ 739.824729][ C0] [ 739.827120][ C0] ============================================ [ 739.833305][ C0] WARNING: possible recursive locking detected [ 739.839493][ C0] syzkaller #0 Not tainted [ 739.843911][ C0] -------------------------------------------- [ 739.850055][ C0] swapper/0/0 is trying to acquire lock: [ 739.855682][ C0] ffff88809b526a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#10){+.-.}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 739.867982][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 739.867982][ C0] but task is already holding lock: [ 739.875356][ C0] ffff88809b526a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#10){+.-.}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 739.887823][ C0] [ 739.887823][ C0] other info that might help us debug this: [ 739.895928][ C0] Possible unsafe locking scenario: [ 739.895928][ C0] [ 739.903405][ C0] CPU0 [ 739.906787][ C0] ---- [ 739.910081][ C0] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#10); [ 739.917296][ C0] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#10); [ 739.924522][ C0] [ 739.924522][ C0] *** DEADLOCK *** [ 739.924522][ C0] [ 739.932678][ C0] May be due to missing lock nesting notation [ 739.932678][ C0] [ 739.941058][ C0] 12 locks held by swapper/0/0: [ 739.945925][ C0] #0: ffffc90000007be0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 739.955606][ C0] #1: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 739.965216][ C0] #2: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 739.974312][ C0] #3: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 739.984437][ C0] #4: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 739.993533][ C0] #5: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 740.003527][ C0] #6: ffff88809b526a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#10){+.-.}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 740.016289][ C0] #7: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 740.025462][ C0] #8: ffff88802f3481e0 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 740.034883][ C0] #9: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 740.044128][ C0] #10: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 740.053288][ C0] #11: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 740.063317][ C0] [ 740.063317][ C0] stack backtrace: [ 740.069219][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 740.069242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.069254][ C0] Call Trace: [ 740.069261][ C0] [ 740.069268][ C0] dump_stack_lvl+0x189/0x250 [ 740.069297][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.069321][ C0] ? __pfx__printk+0x10/0x10 [ 740.069341][ C0] ? print_lock_name+0xde/0x100 [ 740.069359][ C0] print_deadlock_bug+0x28b/0x2a0 [ 740.069383][ C0] validate_chain+0x1a3f/0x2140 [ 740.069403][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 740.069429][ C0] ? arch_stack_walk+0x11c/0x150 [ 740.069453][ C0] ? common_startup_64+0x13e/0x147 [ 740.069480][ C0] ? stack_trace_save+0x9c/0xe0 [ 740.069504][ C0] __lock_acquire+0xab9/0xd20 [ 740.069524][ C0] ? __dev_queue_xmit+0x22b7/0x3b50 [ 740.069546][ C0] lock_acquire+0x120/0x360 [ 740.069562][ C0] ? __dev_queue_xmit+0x22b7/0x3b50 [ 740.069585][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 740.069611][ C0] _raw_spin_lock+0x2e/0x40 [ 740.069633][ C0] ? __dev_queue_xmit+0x22b7/0x3b50 [ 740.069654][ C0] __dev_queue_xmit+0x22b7/0x3b50 [ 740.069680][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 740.069706][ C0] ? neigh_connected_output+0x1ea/0x460 [ 740.069734][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 740.069756][ C0] ? read_seqbegin+0x122/0x250 [ 740.069785][ C0] ? neigh_connected_output+0x1ea/0x460 [ 740.069812][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.069838][ C0] ? read_seqbegin+0x1ac/0x250 [ 740.069862][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 740.069903][ C0] ip6_finish_output2+0xfb3/0x1480 [ 740.069938][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 740.069966][ C0] ? ip6_mtu+0x7d/0x490 [ 740.069990][ C0] ? ip6_mtu+0x38c/0x490 [ 740.070013][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 740.070038][ C0] ? ip6_output+0x126/0x550 [ 740.070061][ C0] ip6_output+0x340/0x550 [ 740.070085][ C0] ? ip6_send_skb+0x10f/0x390 [ 740.070112][ C0] ip6_send_skb+0x1d5/0x390 [ 740.070140][ C0] icmp6_send+0x12c6/0x1940 [ 740.070160][ C0] ? icmp6_send+0x1e9/0x1940 [ 740.070187][ C0] ? __pfx_icmp6_send+0x10/0x10 [ 740.070205][ C0] ? __kasan_check_write+0xf/0x20 [ 740.070229][ C0] ? fib_multipath_hash+0x1b20/0x2030 [ 740.070260][ C0] ? ip_route_output_key_hash+0x209/0x280 [ 740.070286][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 740.070316][ C0] ? dst_cache_get_ip4+0xf6/0x820 [ 740.070342][ C0] ip6_link_failure+0x3b/0x4c0 [ 740.070363][ C0] ? __pfx_ip6_link_failure+0x10/0x10 [ 740.070385][ C0] sit_tunnel_xmit+0xaa1/0x1b90 [ 740.070410][ C0] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 740.070430][ C0] ? validate_xmit_skb+0xbc1/0x1270 [ 740.070455][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 740.070483][ C0] sch_direct_xmit+0x241/0x4b0 [ 740.070512][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 740.070539][ C0] ? lockdep_unlock+0x89/0x120 [ 740.070569][ C0] __dev_queue_xmit+0x1a47/0x3b50 [ 740.070591][ C0] ? register_lock_class+0x51/0x320 [ 740.070610][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 740.070636][ C0] ? neigh_connected_output+0x1ea/0x460 [ 740.070663][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 740.070685][ C0] ? read_seqbegin+0x122/0x250 [ 740.070709][ C0] ? neigh_connected_output+0x1ea/0x460 [ 740.070735][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.070761][ C0] ? read_seqbegin+0x1ac/0x250 [ 740.070791][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 740.070831][ C0] ip6_finish_output2+0xfb3/0x1480 [ 740.070865][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 740.070893][ C0] ? ip6_mtu+0x7d/0x490 [ 740.070915][ C0] ? ip6_mtu+0x38c/0x490 [ 740.070939][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 740.070963][ C0] ? ip6_output+0x126/0x550 [ 740.070987][ C0] ip6_output+0x340/0x550 [ 740.071012][ C0] ip6tunnel_xmit+0x1c5/0x3e0 [ 740.071037][ C0] ip6_tnl_xmit+0x22d4/0x2b90 [ 740.071057][ C0] ? kasan_save_track+0x4f/0x80 [ 740.071081][ C0] ? kasan_save_track+0x3e/0x80 [ 740.071115][ C0] ? __pfx_ip6_tnl_xmit+0x10/0x10 [ 740.071134][ C0] ? gre_build_header+0x31c/0xa40 [ 740.071165][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 740.071195][ C0] ? __gre6_xmit+0x1af/0xd40 [ 740.071223][ C0] __gre6_xmit+0xa47/0xd40 [ 740.071251][ C0] ? prepare_ip6gre_xmit_ipv6+0x203/0x630 [ 740.071279][ C0] ? __pfx___gre6_xmit+0x10/0x10 [ 740.071305][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 740.071329][ C0] ip6gre_tunnel_xmit+0xd6e/0x10e0 [ 740.071362][ C0] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 740.071390][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 740.071413][ C0] ? __lock_acquire+0xab9/0xd20 [ 740.071436][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 740.071463][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 740.071483][ C0] ? unwind_next_frame+0xa5/0x2390 [ 740.071511][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 740.071540][ C0] __dev_queue_xmit+0x1b8d/0x3b50 [ 740.071561][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.071590][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 740.071620][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 740.071640][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 740.071659][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.071685][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 740.071703][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 740.071722][ C0] ? ___neigh_create+0x1c83/0x2260 [ 740.071748][ C0] ? ___neigh_create+0x1c83/0x2260 [ 740.071789][ C0] ip6_finish_output2+0xfb3/0x1480 [ 740.071823][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 740.071851][ C0] ? ip6_mtu+0x7d/0x490 [ 740.071874][ C0] ? ip6_mtu+0x38c/0x490 [ 740.071898][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 740.071923][ C0] ? ip6_output+0x126/0x550 [ 740.071946][ C0] ip6_output+0x340/0x550 [ 740.071972][ C0] ndisc_send_skb+0xbce/0x1510 [ 740.071992][ C0] ? ndisc_send_skb+0x1e4/0x1510 [ 740.072015][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 740.072035][ C0] ? __pfx_dst_output+0x10/0x10 [ 740.072059][ C0] ? __asan_memset+0x22/0x50 [ 740.072085][ C0] addrconf_rs_timer+0x369/0x670 [ 740.072104][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 740.072125][ C0] call_timer_fn+0x17e/0x5f0 [ 740.072141][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 740.072156][ C0] ? call_timer_fn+0xbe/0x5f0 [ 740.072172][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 740.072192][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.072215][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.072240][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 740.072256][ C0] __run_timer_base+0x61a/0x860 [ 740.072289][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 740.072313][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 740.072344][ C0] run_timer_softirq+0xb7/0x180 [ 740.072371][ C0] handle_softirqs+0x286/0x870 [ 740.072391][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 740.072412][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 740.072433][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 740.072459][ C0] __irq_exit_rcu+0xca/0x1f0 [ 740.072477][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 740.072500][ C0] irq_exit_rcu+0x9/0x30 [ 740.072516][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 740.072542][ C0] [ 740.072548][ C0] [ 740.072555][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 740.072574][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 740.072601][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 740.072616][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 740.072636][ C0] RAX: 26c2aecc106c3200 RBX: ffffffff81967b47 RCX: 26c2aecc106c3200 [ 740.072652][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e844 RDI: ffffffff8bbf08e0 [ 740.072668][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 740.072684][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf270 [ 740.072700][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 740.072716][ C0] ? do_idle+0x1e7/0x510 [ 740.072745][ C0] default_idle+0x13/0x20 [ 740.072765][ C0] default_idle_call+0x73/0xb0 [ 740.072794][ C0] do_idle+0x1e7/0x510 [ 740.072818][ C0] ? __pfx_do_idle+0x10/0x10 [ 740.072878][ C0] cpu_startup_entry+0x44/0x60 [ 740.072904][ C0] rest_init+0x2de/0x300 [ 740.072929][ C0] start_kernel+0x3ae/0x410 [ 740.072960][ C0] x86_64_start_reservations+0x24/0x30 [ 740.072998][ C0] x86_64_start_kernel+0x143/0x1c0 [ 740.073034][ C0] common_startup_64+0x13e/0x147 [ 740.073071][ C0]