last executing test programs: 11.598665495s ago: executing program 3 (id=6033): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xb9420f771d0d1dda, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@private2, 0x42, r1}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200)=0x9, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="0081e4ffff3f570b16227cc4a7a65eb4ed86961d67", 0xfffffd04}], 0x1}, 0x4048045) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRESDEC=0x0, @ANYBLOB="000100da77b800", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.136682165s ago: executing program 3 (id=6038): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a}, 0x1c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x543504b4}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4deef2039e9c5aca}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0xed7152ea3e798190, 0x4) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, 0x0, 0x11) 10.907282575s ago: executing program 3 (id=6042): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00000800"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r1, 0x800, 0x32400000, 0x154}) 10.804218725s ago: executing program 3 (id=6043): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="000000000000000000000000892f", 0xe}], 0x1}, 0x44000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="38000000010003", 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 10.517091835s ago: executing program 3 (id=6046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfe}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16, @ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xfc9f, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0xfffffffffffffc4a, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000"], &(0x7f0000000580)='GPL\x00'}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$kcm(0x29, 0x0, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)=0x2) (async, rerun: 32) pipe(&(0x7f0000000080)) (async, rerun: 32) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 10.314580343s ago: executing program 3 (id=6050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)="2c050000000a4c05df4aea3c1a2dda9df89a760078fd2a3757a45c3940936b5a725d36bc6fa33b8837695c00083b36a8b89806fd93b647db836ab6", 0x3b}], 0x1) 2.980783147s ago: executing program 0 (id=6110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000600)=ANY=[], 0x33) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468305f746f5f62726964676500140003006772653000000000000000000000000014001680100001800c000700274d97e6"], 0x5c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x158, 0x31, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x930}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x33f08a01}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x140}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x75c5d71a}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) 2.28810047s ago: executing program 0 (id=6118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000002c0)={'sit0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000002c0)={'sit0\x00', 0x0}) (async) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) (async) 2.255737287s ago: executing program 2 (id=6120): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="340100005600010600000000fddbdf25f471d643985f9cb65bbd0a97fdf3da02219409000000031025ac281e5951a4cf8f8694dd6e846b635cf775ef53c336a6b583aab41d9ca4af2fd35dd5a9e0009a8008004e8004004c800800c300", @ANYRES32, @ANYBLOB="0800b08004006d8008006b0064010100a7005c80a8b4d50b285c5bdc5e1c5b619ab714eae82c3ab9eddde496bdd3020ce3b89f5292b20a2c5a04a3ccff572f1150ab63657ddfa0da69c03681cf983e0f25b2e53a6553a5e54ef14fb362f0c1d11ed856ad70d7a066a60cdfe1cf415cc81dbd91fc993a64cef340faf9d941ab869d7c1169d7e4ab2fda35e87d99070bfd15149551b9c74226e6675d1a20a4949777a910587c115b04f4939aa0d6cddb3cc5f66f04001a80001400c800ff02000000000000000000000000000104008000000000"], 0x134}], 0x1}, 0x0) 2.162073825s ago: executing program 1 (id=6121): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) (async) r1 = accept(r0, 0x0, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x5}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0)={0x77359400}, 0x10) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x7ca26d46efac3113, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) (async, rerun: 32) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/148, 0x94}], 0x4, &(0x7f0000000540)=""/89, 0x59}, 0x10100) (rerun: 32) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000600)={0x3, "da4c7e"}, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000640)) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/135, 0x87}, 0x2) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000007c0)={0x0, 0x87, 0x4}) (async, rerun: 64) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000cc0)={0x1, 0x3, 0xc6, &(0x7f0000000bc0)=""/198}) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000d00)={'vxcan1\x00', 0x4000}) (async, rerun: 32) recvmsg(r0, &(0x7f0000000e40)={&(0x7f0000000d40)=@generic, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=""/51, 0x33}, 0x10001) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket(0x2c, 0x1, 0x6) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000e80)={0x0, 0xbd4}, &(0x7f0000000ec0)=0x8) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@o_path={&(0x7f0000000f00)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) pipe(&(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x9, 0x3, 0xf, 0x8200, r7, 0x0, '\x00', 0x0, r8, 0x5, 0x1, 0x4, 0x8, @value=r10}, 0x50) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001080)={r6, 0x836, 0x6, [0xa, 0x6, 0x7, 0x2, 0x5, 0x5e8]}, 0x14) sendto$unix(r5, &(0x7f00000010c0)="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", 0x1000, 0x4000005, &(0x7f00000020c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002300)={r8, &(0x7f0000002140)="fac18a96e47944f24f7111a404f877016e24ece1c1a21ecf6d722e481d2d287c1ac65d739f21ea338425bdae1208e64b0b5ab3fba9ab47f9f3c45f9c662e4824aa2f0d3b9ab9e59a0b03c71ef6cbf42cf1da74ce8575826017d9fc22bf63604b13b99f1b212183747f894a0c18973e40e796bf60b300dda1e5d6f9eb213e80d97983bfcb8846dbcc54dc1b885c499ca3998102d40cf515e63c06e3ba340e27f77b85554ca1b4ed5f373ddc6e50d382450917e9", &(0x7f0000002200)=@buf="dad738eb9bd8f5956985e6c4ea4a9e18f8054824848455fee419713a7843d36d7f81f230081264911148c77fbe6976166b2844b7d6ccae9047d4f0ed78fa121fd6af50b677d24d0e1ce09800310886569f5c48901e56c1fe1502b40d97cd6f70eed0c069db2ba4bc223ed4a2622c68f9a8a5968e954e62c4b740fa64b3ab1137344d15012bfc52b053f371941b86e7e7eef18f23f1b924f2b6ec2ee78a494fae98c5a97bcdc840d97521e932fad72f426f4f802628870eecdd54705ca553351ca6b811ae37a661ed549680572f1d", 0x2}, 0x20) (async) recvmsg(r4, &(0x7f0000002500)={&(0x7f0000002340)=@rc, 0x80, &(0x7f00000024c0)=[{&(0x7f00000023c0)}, {&(0x7f0000002400)=""/65, 0x41}, {&(0x7f0000002480)=""/10, 0xa}], 0x3}, 0x40000000) setsockopt$inet6_tcp_int(r9, 0x6, 0x17, &(0x7f0000002540)=0x6, 0x4) recvfrom$unix(r9, &(0x7f0000002580)=""/99, 0x63, 0x100, &(0x7f0000002600)=@file={0x1, './file0\x00'}, 0x6e) 2.160613319s ago: executing program 2 (id=6122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) sendto(r1, &(0x7f0000000140)="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", 0xfc, 0x4004, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000300)={0x12, 0x6, 0x7, 0x4, 0x9, 0x81}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000340)={0x9, @remote}, &(0x7f0000000380)=0x12, 0x180800) r3 = accept4$x25(r2, &(0x7f00000003c0), &(0x7f0000000400)=0x12, 0x1800) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x194, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x32c6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6b85}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1f8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x83}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xefa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x146}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xaf}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8312}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x624}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe56}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000040) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000780)={[{0x2d, 'net_cls'}, {0x2b, 'memory'}]}, 0x11) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x160, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1308}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x90) r8 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000a40)={{0x3, @rose}, [@null, @bcast, @netrom, @netrom, @null, @default, @null, @default]}, &(0x7f0000000ac0)=0x48, 0x800) getsockname$netrom(r8, &(0x7f0000000b00)={{0x3, @rose}, [@null, @null, @netrom, @remote, @netrom, @default, @null, @bcast]}, &(0x7f0000000b80)=0x48) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000bc0)={0x3c, @rand_addr=0x64010102, 0x4e21, 0x4, 'lblcr\x00', 0x21, 0x30000000, 0x23}, 0x2c) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000c80)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000dc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x90, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000e40)={{r8}, 0x1, &(0x7f0000000e00)=[0xffffffffffffffff], 0xedb5, 0x1}) sendmsg$sock(r8, &(0x7f0000001000)={&(0x7f0000000ec0)=@can, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f40)}, {&(0x7f0000000f80)="a7d87f4feaf6ca0d0ed84d85c6b8f8cc500cc1623e138a79786c4e652ea25596200a49be2e56da2434ab8197b34f8a6ab57bb3a0843aa75b7b00c0621cc6c7", 0x3f}], 0x2}, 0x1) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r11, 0x0, 0x27, &(0x7f0000001040)="7943ed533bbc8e5651ac3de98c38734755ce2c6ce68fa9bca222bc847d7a46fbdfb2fa76b64d7b6b633d39", 0x2b) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) sendto$ax25(r12, &(0x7f0000001080)="362ffbe504770313022825d731b5d76fc2ea586aca639d74a842b1a9c8caa34d852a7e50165a45ad4464e3b69d0f0b389e2c4f7099fba2047ed160668d8ed6d720a5f75de248857b1cf8f755b9b744faf33bcf21501b4ef0bc4d47372764f02117d92ddd8eeb884723318184ba9dbd53556f141ed6076224f02e1f5c0411ed042d5185dbb2d8d85ef847b1af848649bd3c541cefd5ee5fe7ec402a221d54fc27d08c4a8a33a0e25ae23809eaea6c9bb1778e023ee648828035489b66628414d3cd3ec583e1b17145d38be4b02a6af87a1a8a119590544a", 0xd7, 0xf68c2619e511de14, &(0x7f0000001180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000001200)={0x10001, 0x5, 0x400, 0x3963cda, 0x5}) r13 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r13, &(0x7f0000001240)={0x2c, 0x5, r10, 0x27}, 0x10) 2.048373524s ago: executing program 1 (id=6124): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x20000800) ioctl$sock_netrom_SIOCADDRT(r3, 0x61f0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 1.92152627s ago: executing program 4 (id=6126): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff99, &(0x7f0000000100)=[{&(0x7f0000000040)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) (async) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) r6 = socket(0x200000000000011, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x3, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}}, 0x40084c0) (async) bind$x25(r4, &(0x7f0000000080), 0x12) 1.792128049s ago: executing program 4 (id=6127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f00000002c0)=@udp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12123, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_IFNAME={0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 979.222949ms ago: executing program 2 (id=6128): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x20004000) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x100000001) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r1) (async) r2 = accept4$inet(r0, 0x0, &(0x7f0000000100), 0x80800) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x1, @local, 0x4e24, 0x3, 'fo\x00', 0x9, 0x7, 0x6}, 0x2c) (async) setsockopt$sock_int(r0, 0x1, 0x30, &(0x7f0000000180)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x104, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9bd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x144d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x4042810) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000400)={0x6, {{0x2, 0x4e24, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e21, @remote}}]}, 0x310) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000740)={'veth1_to_batadv\x00', 0x800}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0xc0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0x1000, "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"}, &(0x7f0000001940)=0x1008) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001980)={r7, 0x3}, &(0x7f00000019c0)=0x8) r8 = accept4(r3, &(0x7f0000001a00)=@in={0x2, 0x0, @local}, &(0x7f0000001a80)=0x80, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000001ac0)=[@in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x10000}, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x4}, @in6={0xa, 0x4e22, 0x7fff, @loopback, 0x80000001}], 0x70) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000001b40)='wg2\x00', 0x4) (async) getsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = accept$unix(r8, &(0x7f0000001c00)=@abs, &(0x7f0000001c80)=0x6e) getsockopt(r10, 0x6, 0x4, &(0x7f0000001cc0)=""/252, &(0x7f0000001dc0)=0xfc) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e40), r8) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0xc0, r11, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xc0}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002500)={'vxcan1\x00', 0x0}) sendmsg$inet(r9, &(0x7f00000025c0)={&(0x7f0000001fc0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002000)="642f14277a5b0b8e1479bf28d70557c3d2b08235665124239b837c4daa1ca85ba2d2ba50712317d01423142b20014ffada7aa6345b04c84f3c4c10217f14f1901de8efd8de237f4d5f22782ce7ece3dcee1a85261e3e75485b7ebd8a6429255374fca52b5b1ed9b1bbaf256894e04e3aeff6b9efc77ef7aef5722983f774c1973460be80b2f8bfb7ae75c43f53ef8616da5e43c542dd9844dc4788235cc2b7eab138b1f2532970dda613982ed3032e90486f0835d584330bf3a5ffefb8cd42b721779f76e2c0919368dda6a5761e61a8a31512ba7d2cbe62da9f", 0xda}, {&(0x7f0000002100)="a515ac9a8e4afe5adc8f9067eca1fcb54fddfcbce2f3aaf80f0516fd4c7e86869cff129d630680b74899f6750f6b32e662f3fba141f84c0409ae67e464eec36f9cd8074ee2db5dd7d5029353a30aca2fb17717369c882388cc71aa37255e72ed288b6bdd0777696e2638c879ea75abccdb6463a384c373a07304f109641b0c2c4f54642fb23efddb16cd0dc1fc985601ede8474fbb1493d1014cf9ea328416884e0d605fad8a175653899cd5f188b909da4d07acbffa15d74e879afa6d72b9e19e991ef182780dacdfb863815c86cac8ce5c82ba5b4c536f33014e4d86c3ef63b37887ea4581b5afc71ed5ce634f94198d", 0xf1}, {&(0x7f0000002200)="ddb0bc6a0762555f173f42972502cc81d7efb0b6e7cdb92f111addbca2008eee7ead558feeb07598bee8a6c2e58eba886d3f39baa73727e68d7a393ff738db5cd675780a730695cf877d87529e8ee88c47ea3e7fbeae2ff3e091cf98727e3d358f85923c123557ba0b3a488b92b6938bddc19988cacb828c0de84ec06c6495b85afe62ae19f91dbb0d291bdb94b5c993b7ab3eceab01196ac98df21283122714b2e7a44fff3968903d494372aa488b190a0c86b7e9d1601dff5ea418d749e7da05e2e51b1ea3c6e8e51207cdfa6a6aef9c97d838579be6bc73995aa6c47a873977a8964b212813e23ee7ebf3ee22d07e60", 0xf1}, {&(0x7f0000002300)="49e5bdfd72ee57d0b1ed677da4354934a6761348f8e74608da254a7ab05d62b429be10ca235792321e3bdc2ac49d318d4f2ca900b835769f748db2c7a070017effcc568931ecbca9f175d72991a215beedb22bcde67d330781af5952fb4d57389c076e72752df3a6b44632fe9f01676b3e21", 0x72}, {&(0x7f0000002380)="b08375ae1f18cb7f8de06fcca39c435b08ef98688e73757e88b9a88de0c8ce0b946feac07f01f8bfdab5aa48106e2d263f0f7ecf8f570b8c04b0477d12e67d598cfc8eeb8a6009ef10bf7951928d0c9a0879f4eac27f27a22d9452299409867b714bcda34326ee526e500c54e71db15d90dfe3325d0defb20f374b3d48a54bd77fc5a9fb28aa3a777483ad192eea107b95e8d9dc35718c93f458a9be42cfef818977a6dd114c1508bc8b9cbd424b05d1b2f02056e1d10974c635b03bc3b87d3ddd3930cb3d2c5ea2d24a1145b3ad068782fe45fcf6480d14f4df34804e19dd4c214f6f2178601daa47", 0xe9}], 0x5, &(0x7f0000002540)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @noop, @noop, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x4, '<\r'}, {0x7, 0x8, "3c5a2b02cad5"}, {0x0, 0x9, "60e0b5c7564944"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @multicast2}}}], 0x60}, 0x10) (async) accept4$inet6(r8, &(0x7f0000002600)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000002640)=0x1c, 0x80000) 969.118526ms ago: executing program 4 (id=6129): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xbc1c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1f0, 0x1f0, 0x4, [@enum64={0x2, 0x9, 0x0, 0x13, 0x1, 0x0, [{0x5, 0x9, 0x3}, {0xa, 0x8000, 0x7d4}, {0xc, 0xa, 0x4}, {0xc, 0x1000, 0x7}, {0xf, 0x9, 0x100}, {0xa, 0xfffffff2, 0x1}, {0x10, 0x5}, {0x4, 0x10001, 0x8}, {0x1, 0x6, 0x627b855a}]}, @union={0x5, 0x4, 0x0, 0x5, 0x0, 0x4, [{0xe, 0x2, 0xffff2455}, {0xd, 0x3, 0x4e6f}, {0x0, 0x4, 0x1}, {0x5, 0x5, 0x1d3f}]}, @enum64={0x8, 0x9, 0x0, 0x13, 0x0, 0x8, [{0x4, 0x80, 0xe}, {0xb, 0xfffffff7, 0xa7}, {0x10, 0x1ff, 0x8}, {0x6, 0x1, 0x80000000}, {0x10, 0x814, 0x1ff}, {0xf, 0x728, 0x2}, {0x8, 0x9}, {0x7, 0x81, 0x4}, {0x1, 0x6d, 0x5}]}, @func={0x20000007, 0x0, 0x0, 0xc, 0x5}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @enum64={0x1, 0x6, 0x0, 0x13, 0x0, 0x5, [{0x5, 0x6, 0x2}, {0xf, 0x10001, 0x2}, {0xd, 0x562f, 0x7}, {0xd, 0x641, 0x6}, {0x9, 0x1, 0xffffffff}, {0x2, 0x9, 0x8}]}, @struct={0xd, 0x5, 0x0, 0x4, 0x1, 0xc, [{0x9, 0x4, 0x3}, {0x6, 0x0, 0xffff}, {0x6, 0x2, 0x4a2145be}, {0xe, 0x2, 0x5}, {0x8, 0x5, 0x1}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000740)=""/202, 0x20c, 0xca, 0x1, 0xfffffe00}, 0x28) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r8}, 0x20) (async) r11 = socket(0x2d, 0x2, 0x0) recvmmsg(r11, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c00000010000140000000b17a23cf000000000000000000", @ANYRES32=0x0, @ANYBLOB="010000000000000008001b000000000004001a80"], 0x2c}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7abfcebb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000340)='GPL\x00', 0x3, 0xce, &(0x7f0000000380)=""/206, 0x41100, 0x1e, '\x00', r5, 0x1c, r6, 0x8, &(0x7f0000000880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x7, 0x6, 0x3ff}, 0x10, 0x1fdb5, 0xffffffffffffffff, 0x7, &(0x7f0000000900)=[r10], &(0x7f0000000940)=[{0x0, 0x3, 0xc, 0x4}, {0x3, 0x2, 0xc, 0x3}, {0x2, 0x1, 0x0, 0xc}, {0x4, 0x5, 0x7, 0xa}, {0x0, 0x5, 0xa, 0x8}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x2, 0xe, 0xb}], 0x10, 0x5cea}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 888.542412ms ago: executing program 0 (id=6130): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000001800)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) 837.968292ms ago: executing program 2 (id=6131): socket$caif_stream(0x25, 0x1, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) socketpair(0x23, 0x3, 0x80000000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x74, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000095) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x6a}, @func={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50, 0x0, 0xfffffffc}, 0x28) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="0c61c760752a", 0x6}], 0x1}, 0x41) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r3}) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r5) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000800)={&(0x7f0000000280), 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1f0, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6e}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x0, 0x10000, 0x2}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 728.771052ms ago: executing program 0 (id=6132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010072656a656374000014000200080001400000009205000200000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010000108000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="50010000000000000c002b80080002000000000008001b0000000000293ba26405c1a4d15d17ec711908ccdef3d4d7aeacd22e0de1a9768a874834acffa02fb8a2c08af531ea96bdcdb35d3b7d9d87e28e3a7394cc337ca69ec1e8c07abf14544ced6e71be1191b7ef9a3217f6d6d24ab905edaf71409292b3b0fd2846"], 0x34}}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) 548.246921ms ago: executing program 4 (id=6133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200006d0873d20000040000001200002000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) close(r1) (async) close(r1) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) 543.357952ms ago: executing program 1 (id=6134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x7, 0x7f, 0x2}) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0xd, 0x8, 0xf, 0xfffffffffffffff0, 0xfffffffffffffff0}], &(0x7f00000000c0)='syzkaller\x00', 0x3ff, 0x7d, &(0x7f0000000100)=""/125, 0x40f00, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x40, 0x2}, 0x10, 0x25a8, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000240)=[{0x4, 0x3, 0xf}, {0x0, 0x4, 0xc, 0x4}, {0x0, 0x2, 0x2, 0xc}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=0xffffffffffffffff, 0x22, 0x1, 0xd, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r4, r1, 0x2, 0x8, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r6, &(0x7f0000000580)=""/136, 0x88, 0x10002, &(0x7f0000000640)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd8, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x2010, r1, 0x216a1000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) (async) sendmmsg(r8, &(0x7f0000001e40)=[{{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000ac0)="61b2f8398b392affd3d7f705412c5b4581662e955a31a89a5484723c3bfdd476af1da8375df47d41a37ff3e8fd49b6242966d2e4a60c4b4083c08566497646a792", 0x41}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="d80f45eff416f816e8eb29776e32e042a5462c0796a0322fc4b86901ba8dfd6f98478922275cec3f5a4ce3176178953881e753977db86f18bbe527d5684536ae133045b546b162fb26ab489154ca2777979c3e6d6397b3b48b03e0db3bcfd3c05e8de6e5a1fc8139e871baf22986d41465dce73ea95da916452e7df276e046adc2", 0x81}, {&(0x7f0000001c00)="d3133b4516449d26a1f41e852cbbf19dc085f24eed6ec025d87607b96ddccaa225e03d10ff6d779744603b88d5babbd696cb7c9156315c1cf639ea3b9ad8e22f043255348a75b82fda9ab28a6064b88f9b1673d054e0bfdcad76326f79ff81237da17922065b2ab1fd575c7346e673a4454af56fb5b2", 0x76}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="ae7bd143f04b366e89922763fa066a78febee66613d3841ede9d3a5e35e2e257329cd972aafbceb4d56d1484d492f1beabc57dcae13038132b1376d6ad304187af19358d28fddbe5f8a1f92f8141f8691896dbe7cf4f6c82c7cf02f52bfd2e60f0729e2c29494d9fa8b2951292070c6a10379cc3c415522664e37d0f2d4e939e674c6d7b", 0x84}], 0x6, &(0x7f0000001e00)=[{0x20, 0x134, 0x63fbbbae, "e4aaf1fbb6b924990b"}], 0x20}}], 0x1, 0x1) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r8) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f0000002240)={&(0x7f0000001e80), 0xc, &(0x7f0000002200)={&(0x7f0000001f00)={0x2d0, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72b2}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xceb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1959}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2112}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x88}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xddde}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7900}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbbf0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "17cc1b81479e49eb5126f82cc259c73e8fe6d07dcc83a60d846c82e0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x23, 0x3, "0467f85c34b210a94a184748e34f32a073fe51cacd8c433bcfc12950418511"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "a6603d74a1f02d36ed03e06e157ec403ca6b7cf4371f2ddd"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40}, 0x44840) (async) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r11, 0x89e1, &(0x7f0000002280)=0x3) ioctl$int_in(r2, 0x5421, &(0x7f00000022c0)=0xffffffffffff947e) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002340), r8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002380)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002440)={'ip6_vti0\x00', &(0x7f00000023c0)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x40, 0x5, 0x4c, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x20, 0xc6fb, 0xffffffff}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000003ac0)={&(0x7f0000002300), 0xc, &(0x7f0000003a80)={&(0x7f0000002480)={0x15f4, r12, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_WANTED={0x134, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xac0}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "1a0403a8b10ad4487dcdbc0562c61e2c6fcc69f3496673afbc659de3418059540a5eabd372b81df44f3ac26a6d07f6e166317fa807692cbfe5871f84160430a647ab17cfdc265cf65f24b6b443c9cd44acec911876e21f14153c575b548e6ca451b4fd98ddca253f2dd0271b86d9eb626feffb2bcc6faab44eacd36f7d53e53cef780ac2e73bd88bd15f6236a601c4b586408562268d3c0d2aef42e7b17bd904e9f7a20124bc815883af93aee5bf72049881dfdd1da1"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x10f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "48ec916f4aa3c4f63a1bf911d9114d6c9b75abb9673d1a6f7497503b01577989804145cebf5834e7d7beff5b394e189c68a328ab0517386ec2eb8060ff910d3f111f05d2d9dd3a5995d338267fb725312e5d9168c415f8a03676e5020b14fc8cee4c367bbc19ddc9017b45807c7a6962dbdb98a43233a9d1daab8bed8e11d627c2e0086b3f6d197f0cbbab7b453e499d1423d757a6110c118ca55379fd442550f84ed8a3be138ee6ba2ae367ff32eb6711393d6dae5016f28cde4fbf8ef334a2be128097242deee965eaffb3606346a258262fda"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_FEATURES_WANTED={0x338, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xee, 0x5, "57a3546e9942a30e4329908b7780f71e4df2c21afabd528bc20dbebaa25ccf3780a918b353533dcec26457f0eeccb2d0b931bdd521591dc69cde29c0aecffa9eca7c5f8e5494429297339de46d01df93fde4d0b87c84bfa74ea38e522ae2ad9148849964a6f2f29af6efd3a0e405a22226cda1f6cce857358c954d0dd89a8a33911194d8a2926bb034533b5e8846cb72ad579c5cfe2829859519a82717203fdc2dbc4b7628da67e3d03ca3d50c0644c1be88fbfcbbba120c70fd946bfda915025ed459d18f754cc622aa1ffb7493e83ba7ea5a871b4d1af9ca188a785dfd2651d8dc9a36fffa6b3f691c"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']&{&(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ea}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'^*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')^:\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')-#\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcd2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcccf}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x16$%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ee}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfed7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.\xe4-\x10\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x15f4}, 0x1, 0x0, 0x0, 0x40000}, 0x8090) r15 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x1a, &(0x7f0000003b40)={0x4, &(0x7f0000003b00)=[{0x5, 0x0, 0xf, 0x2}, {0x4, 0x4, 0xd, 0xffff}, {0x6, 0x9, 0xd, 0x10001}, {0x2, 0x3, 0x6, 0xf}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000003b80)={'veth1\x00'}) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000003bc0)={0x1, 0x2}) 460.051721ms ago: executing program 4 (id=6135): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000140)) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x2, 0x0, 0xfffffffc}, 0x50) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x8, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0xfff8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x35d6}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000), 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX], 0x28}}, 0x0) 438.22425ms ago: executing program 2 (id=6136): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x4, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xa0}, 0x90) (async) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xa0}, 0x90) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000001050000000000000000000700000708001a4008000c400000000300000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004000) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 376.424408ms ago: executing program 0 (id=6137): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x4}}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) getsockopt$inet6_buf(r3, 0x29, 0x2a, &(0x7f0000000100)=""/1, &(0x7f0000000140)=0x1) 304.051663ms ago: executing program 1 (id=6138): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@alu={0x7, 0x1, 0x1, 0x3, 0x6, 0xffffffffffffffc7, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 162.940374ms ago: executing program 2 (id=6139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280"], 0x4c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x123, 0x234}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 88.025316ms ago: executing program 1 (id=6140): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000000), 0x4, 0x8, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 87.255788ms ago: executing program 4 (id=6141): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[], 0x5c}}, 0x40080) 82.68273ms ago: executing program 0 (id=6142): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301edff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r1 = socket(0x22, 0x2, 0x3) sendmmsg$inet6(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x34, 0x66, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x4}, {0x0, 0x9}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xd600}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x10b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}]}, {0x11, 0x6, "36d553fab0280e6e0c5abc0512"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x2b, 0xb, 0x0, 0x0, {0xb}}, 0x14}}, 0x8000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x268}}, 0x840) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 0s ago: executing program 1 (id=6143): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000060a0b140000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000800)="f1816f307297d7b9e1282d5607600285a7ef191075d4735b9fe9848e02a9515cb18da4cecb71daf2ff1fde0bbe01aa3cadef8de7265c2f333fbe99f653224f24fb4e3a3af118b5c59fbea0dc3082e973be02ffb0f91ba11a88948104e550e3ef31e7d3c4a899894c7323ae9f2512", 0x6e}, {&(0x7f0000000500)="2990f838803e77b2c859fe43cb657d608988adad982c8076f1a2424507b9359cdc14648b5dfc98bed59957a21f", 0x2d}, {&(0x7f0000000540)="3b7651492c525e7c93cf7cb7e204d003832af808aa86eb642704207676edf752a6e4e9247085ce1c35c674d0c9aa582578d61d472dcd6e93442d739334b4cd7b08dcf82cf1a4f9dec2644cb8d5dd4e4dbdd38f6c519ccdbcd11769830925737566824402aa9f0934b19285826cc543f7f662a7ff6327a7988b14bad2ef627f775d2df7ca10f0c1824c92d0a8e4a0d84044d2a6c0b337b21d8626dbb367dba628edf243d7fed0b72b651f", 0xaa}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000700)="adf8067014e6dca773fd160857afbf4ab672731ac29b55290ff1203b4e99af15a499f16703f9a8874c64758cc14b948a13e270a72b0ae7521e09766c1c3fa14fc77f0494c817e1c5b28e860e62704d92fb049b0228feebfe2c7d2d74fe0ad9da020380b153531b983079e8a318cae13ec82f6810163c68b77fb42d893af05e9b5f9802b555e3aa73da8d274176ba6a1d2aa2c15e4fe9a458963213365ba78662ed340bf99c4556639df1a1e0eeca984a3b6983181ecb17a512469386e4d405478e3e48b151647658e551bfc8417b3da432", 0xd1}], 0x5, &(0x7f0000000580)}, 0x1) r1 = socket(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x0, 0x0, 0x0, 0x400000, 0x6, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r5, 0x0) socket(0x14, 0x2, 0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000080)) accept$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000004f00), 0x256200, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYRESDEC=r4, @ANYRES32=r9, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0xc5}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) kernel console output (not intermixed with test programs): ou must specify a L4 protocol and not use inversions on it [ 452.009328][T20052] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4075'. [ 452.311549][T20073] netlink: 'syz.4.4080': attribute type 1 has an invalid length. [ 452.313416][T20076] vxcan1: entered allmulticast mode [ 452.416998][T20079] bond3: (slave gretap2): making interface the new active one [ 452.425431][T20079] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 452.448852][T20073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4080'. [ 452.471355][T20073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.636679][T20094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4089'. [ 452.646939][T20094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4089'. [ 452.895828][T20115] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4095'. [ 453.395156][T20150] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4106'. [ 453.408898][T20150] netlink: 'syz.3.4106': attribute type 1 has an invalid length. [ 453.424361][T20150] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4106'. [ 453.454930][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4106'. [ 453.470389][T20155] netlink: 'syz.2.4109': attribute type 1 has an invalid length. [ 453.595373][T20162] 8021q: VLANs not supported on syzkaller0 [ 453.813151][T20177] syzkaller1: entered promiscuous mode [ 453.826084][T20177] syzkaller1: entered allmulticast mode [ 454.125242][T20204] : entered promiscuous mode [ 454.669672][T20235] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 454.681856][T20235] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 454.755271][T20233] macvlan2: entered promiscuous mode [ 454.760802][T20233] macvlan2: entered allmulticast mode [ 454.767553][T20233] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 454.790189][T20241] macvlan2: entered promiscuous mode [ 454.796026][T20241] macvlan2: entered allmulticast mode [ 454.801876][T20241] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 454.845130][T20248] netlink: 'syz.0.4136': attribute type 20 has an invalid length. [ 454.944980][T20256] tipc: Enabled bearer , priority 0 [ 454.954873][T20248] netlink: 'syz.0.4136': attribute type 20 has an invalid length. [ 455.047024][T20254] tipc: Disabling bearer [ 455.307839][T20278] netlink: 'syz.1.4147': attribute type 1 has an invalid length. [ 455.371868][T20278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.516162][T20284] bond3: (slave veth3): Enslaving as an active interface with a down link [ 455.575445][T20278] veth5: entered promiscuous mode [ 455.596364][T20278] bond3: (slave veth5): Enslaving as an active interface with a down link [ 455.651303][T20293] vlan2: entered allmulticast mode [ 455.660572][T20293] bond3: entered allmulticast mode [ 455.668043][T20293] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 455.710586][T20295] __nla_validate_parse: 9 callbacks suppressed [ 455.710604][T20295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4153'. [ 455.729296][T20311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4156'. [ 455.784498][T20305] netdevsim netdevsim2: Direct firmware load for . [ 455.784498][T20305] failed with error -2 [ 455.795930][T20305] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 455.795930][T20305] [ 455.882935][T20318] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 455.911791][T20318] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4159'. [ 456.337440][T20341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4164'. [ 456.680503][T20364] Cannot find add_set index 0 as target [ 456.849684][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'. [ 456.961548][T20381] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 457.317863][T20379] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 457.368043][T20379] gretap1: left promiscuous mode [ 457.391776][T20379] vxlan0: left promiscuous mode [ 457.402689][T20379] vxlan0: left allmulticast mode [ 457.472664][T20393] team0: Device geneve3 is up. Set it down before adding it as a team port [ 457.550948][ T60] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.567109][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.579179][ T60] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.589909][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.602629][ T60] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.613347][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.663400][ T60] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.683441][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.808071][T20429] netlink: 'syz.1.4189': attribute type 1 has an invalid length. [ 457.822165][T20429] netlink: 'syz.1.4189': attribute type 2 has an invalid length. [ 457.832675][T20427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4188'. [ 457.846398][T20418] bridge0: port 3(batadv1) entered blocking state [ 457.847870][T20429] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.4189'. [ 457.853710][T20418] bridge0: port 3(batadv1) entered disabled state [ 457.875738][T20432] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.4189'. [ 457.885423][T20418] batadv1: entered allmulticast mode [ 457.885510][T20429] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.4189'. [ 457.905682][T20418] batadv1: entered promiscuous mode [ 457.946996][T20426] veth0: entered promiscuous mode [ 458.037609][T20417] veth0: left promiscuous mode [ 458.053102][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 458.342698][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 458.343102][T20454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.351970][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 458.385719][T20460] sctp: [Deprecated]: syz.2.4194 (pid 20460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.385719][T20460] Use struct sctp_sack_info instead [ 458.447990][T20462] can: request_module (can-proto-0) failed. [ 458.494116][T20470] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 458.680048][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4200'. [ 459.566909][T20534] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 459.575114][T20534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.975036][T20557] IPv6: Can't replace route, no match found [ 461.378273][T20559] __nla_validate_parse: 7 callbacks suppressed [ 461.378290][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4226'. [ 461.623137][T20584] tipc: Enabled bearer , priority 0 [ 461.634821][T20577] syzkaller0: entered promiscuous mode [ 461.641647][T20577] syzkaller0: entered allmulticast mode [ 461.711696][T20588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4232'. [ 461.746539][T20585] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 461.787380][T20597] netlink: 'syz.1.4235': attribute type 1 has an invalid length. [ 461.848858][T20585] bond6 (unregistering): Released all slaves [ 461.874562][T20577] tipc: Resetting bearer [ 461.908462][T20597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.940748][T20599] bond4: (slave veth7): Enslaving as an active interface with a down link [ 461.962005][T20576] tipc: Resetting bearer [ 461.980598][T20576] tipc: Disabling bearer [ 461.999648][T20595] pim6reg: entered allmulticast mode [ 462.058804][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 462.081659][T20601] veth9: entered promiscuous mode [ 462.093067][T20601] bond4: (slave veth9): Enslaving as an active interface with a down link [ 462.136599][T20597] vlan2: entered allmulticast mode [ 462.137001][T20616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 462.150917][T20597] bond4: entered allmulticast mode [ 462.178451][T20597] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 462.410655][T20618] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4237'. [ 462.501300][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 462.572430][T20648] lo speed is unknown, defaulting to 1000 [ 462.714773][T20650] netlink: 'syz.4.4247': attribute type 1 has an invalid length. [ 462.812396][T20664] Cannot find add_set index 65532 as target [ 462.866307][T20650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.876709][T20648] lo speed is unknown, defaulting to 1000 [ 462.885146][T20648] batadv0 speed is unknown, defaulting to 1000 [ 463.174213][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 463.180754][T20679] netlink: 'syz.0.4254': attribute type 1 has an invalid length. [ 463.197975][T20679] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4254'. [ 463.213599][T20680] netlink: 'syz.0.4254': attribute type 13 has an invalid length. [ 463.241641][T20680] veth0_macvtap: left promiscuous mode [ 463.260953][T20680] macvtap0: entered allmulticast mode [ 463.284057][T20680] macvtap0: refused to change device tx_queue_len [ 463.817245][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4267'. [ 463.865787][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4268'. [ 463.886516][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4267'. [ 464.034697][T20734] netlink: 'syz.1.4271': attribute type 58 has an invalid length. [ 464.181209][T20742] nbd: must specify at least one socket [ 464.357406][ T5892] IPVS: starting estimator thread 0... [ 464.462921][T20758] IPVS: using max 29 ests per chain, 69600 per kthread [ 464.656200][T20784] netlink: 'syz.4.4287': attribute type 4 has an invalid length. [ 464.754150][T20790] netlink: 'syz.3.4288': attribute type 1 has an invalid length. [ 464.834070][T20790] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 464.883270][T20790] veth5: entered promiscuous mode [ 464.906729][T20790] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 465.170026][T20817] netlink: 'syz.0.4296': attribute type 21 has an invalid length. [ 465.187313][T20817] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.198543][T20817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.205838][T20817] IPv6: NLM_F_CREATE should be set when creating new route [ 465.213232][T20817] IPv6: NLM_F_CREATE should be set when creating new route [ 465.220556][T20817] IPv6: NLM_F_CREATE should be set when creating new route [ 465.358149][T20828] tipc: Enabled bearer , priority 10 [ 465.704075][T20858] can: request_module (can-proto-4) failed. [ 465.723850][T20856] can: request_module (can-proto-4) failed. [ 466.145076][T20904] netlink: 'syz.2.4322': attribute type 4 has an invalid length. [ 466.199881][T20906] 8021q: VLANs not supported on ip6_vti0 [ 466.472698][ T5892] tipc: Node number set to 3451574151 [ 466.866294][T20935] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 466.896987][T20935] __nla_validate_parse: 9 callbacks suppressed [ 466.897005][T20935] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4334'. [ 466.972269][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4332'. [ 467.566550][T20977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4347'. [ 467.585356][T20974] netlink: 'syz.2.4346': attribute type 11 has an invalid length. [ 467.678421][T20987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4349'. [ 467.709732][T20987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4349'. [ 467.770361][T20991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4351'. [ 467.782442][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'. [ 467.993755][T21011] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000 [ 468.011468][T21011] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 468.023742][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4355'. [ 468.107667][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4356'. [ 468.226608][T21029] netlink: 'syz.0.4357': attribute type 1 has an invalid length. [ 468.289299][T21029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.315767][T21033] netlink: 'syz.2.4360': attribute type 1 has an invalid length. [ 468.334848][T21033] netlink: 'syz.2.4360': attribute type 4 has an invalid length. [ 468.351241][T21036] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4361'. [ 468.373664][T21034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.380783][T21034] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 468.404139][T21034] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 468.495093][T21029] veth9: entered promiscuous mode [ 468.513791][T21029] bond4: (slave veth9): Enslaving as an active interface with a down link [ 468.573400][T21044] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.183340][T21085] nbd5: detected capacity change from 0 to 127 [ 469.191491][ T5840] block nbd5: Receive control failed (result -32) [ 469.277240][T21093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.289066][T21093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.300243][T21093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.387788][T21093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.401018][T21093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.411767][T21093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.512174][T21093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.523952][T21093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.539831][T21093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.696332][T21093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.729630][T21093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.761171][T21093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 469.778210][T21119] netlink: 'syz.4.4386': attribute type 5 has an invalid length. [ 470.055961][ T1141] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.066028][ T1141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.083210][ T1141] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 470.140034][T21132] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.152320][T21132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.160948][T21132] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 470.199109][T21132] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.222724][T21132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.239725][T21132] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 470.250065][T21132] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.259838][T21132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.269081][T21132] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 470.327098][T21150] netlink: 'syz.0.4399': attribute type 21 has an invalid length. [ 470.573533][T21178] sock: sock_timestamping_bind_phc: sock not bind to device [ 470.858050][T21193] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 470.923006][T21195] tipc: Enabled bearer , priority 0 [ 470.930530][T21195] syzkaller0: entered promiscuous mode [ 470.938010][T21195] syzkaller0: entered allmulticast mode [ 470.950444][T21195] tipc: Resetting bearer [ 471.009967][T21191] tipc: Resetting bearer [ 471.089077][T21191] tipc: Disabling bearer [ 471.286631][T21225] xfrm1: entered promiscuous mode [ 471.303205][T21225] xfrm1: entered allmulticast mode [ 471.312755][T21225] openvswitch: netlink: IPv6 tunnel dst address is zero [ 471.402192][T21234] x_tables: duplicate underflow at hook 2 [ 471.953327][T21273] __nla_validate_parse: 27 callbacks suppressed [ 471.953461][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4438'. [ 472.170299][T21291] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 472.179562][T21291] bond2: option packets_per_slave: allowed values 0 - 65535 [ 472.189348][T21291] bond2 (unregistering): Released all slaves [ 472.216927][T21301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4448'. [ 472.258597][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4445'. [ 472.267181][T21301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4448'. [ 472.498566][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4451'. [ 472.728363][T21323] Bluetooth: MGMT ver 1.23 [ 472.848669][T21332] netlink: 'syz.3.4459': attribute type 1 has an invalid length. [ 472.858933][T21332] netlink: 'syz.3.4459': attribute type 3 has an invalid length. [ 472.867506][T21332] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4459'. [ 473.080558][T21345] lo speed is unknown, defaulting to 1000 [ 473.082887][T21347] macsec0: entered promiscuous mode [ 473.106023][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'. [ 473.496038][T21361] netlink: 'syz.0.4468': attribute type 21 has an invalid length. [ 473.526192][T21361] netlink: 'syz.0.4468': attribute type 6 has an invalid length. [ 473.545468][T21361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4468'. [ 473.699384][T21345] lo speed is unknown, defaulting to 1000 [ 473.711246][T21369] netlink: 'syz.0.4473': attribute type 10 has an invalid length. [ 473.719880][T21369] bridge0: port 3(team0) entered blocking state [ 473.726566][T21369] bridge0: port 3(team0) entered disabled state [ 473.746989][T21369] team0: entered allmulticast mode [ 473.752197][T21369] team_slave_0: entered allmulticast mode [ 473.758740][T21369] team_slave_1: entered allmulticast mode [ 473.776426][T21369] team0: entered promiscuous mode [ 473.784378][T21369] team_slave_0: entered promiscuous mode [ 473.790594][T21369] team_slave_1: entered promiscuous mode [ 473.800042][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4474'. [ 473.810534][T21345] batadv0 speed is unknown, defaulting to 1000 [ 473.828485][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4474'. [ 473.898798][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 474.231893][T21394] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 474.245555][T21394] bond5 (unregistering): Released all slaves [ 474.804367][T21406] lo speed is unknown, defaulting to 1000 [ 474.886202][T21423] netlink: 'syz.3.4485': attribute type 1 has an invalid length. [ 474.979792][T21423] bond3: entered promiscuous mode [ 475.031122][T21423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.050302][T21431] netlink: 'syz.4.4487': attribute type 1 has an invalid length. [ 475.157592][T21431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 475.228608][T21429] vlan0: entered promiscuous mode [ 475.253249][T21429] bond8: entered promiscuous mode [ 475.278335][T21429] vlan0: entered allmulticast mode [ 475.291813][T21429] bond8: entered allmulticast mode [ 475.350122][T21431] bond8: (slave gretap3): making interface the new active one [ 475.368821][T21431] gretap3: entered promiscuous mode [ 475.382438][T21431] gretap3: entered allmulticast mode [ 475.399725][T21431] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 475.420206][ T3501] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 475.455339][ T3501] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 475.596665][ T3501] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 475.651500][T21406] lo speed is unknown, defaulting to 1000 [ 475.685926][T21461] netlink: 'syz.3.4493': attribute type 13 has an invalid length. [ 475.693547][T21406] batadv0 speed is unknown, defaulting to 1000 [ 475.915538][T21479] netlink: 'syz.2.4496': attribute type 18 has an invalid length. [ 475.975130][T21461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.984477][T21461] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.998919][T21461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.141126][T21482] netlink: 'syz.4.4497': attribute type 10 has an invalid length. [ 476.749055][T21513] syzkaller0: entered promiscuous mode [ 476.761778][T21513] syzkaller0: entered allmulticast mode [ 476.880337][T21531] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 477.137917][T21545] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 477.206066][T21544] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.214977][T21544] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.222228][T21544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.395987][T21560] __nla_validate_parse: 3 callbacks suppressed [ 477.396006][T21560] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4513'. [ 477.758371][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4519'. [ 477.898796][T21592] xt_ecn: cannot match TCP bits for non-tcp packets [ 477.909317][T21592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4523'. [ 478.036253][T21602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4527'. [ 478.047508][T21602] tipc: Invalid UDP bearer configuration [ 478.047788][T21602] tipc: Enabling of bearer rejected, failed to enable media [ 478.085010][T21604] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 478.171641][T21602] team0: Device geneve3 is up. Set it down before adding it as a team port [ 478.275876][T21604] gretap2: entered promiscuous mode [ 478.281150][T21604] gretap2: entered allmulticast mode [ 478.357659][T21616] syzkaller1: entered promiscuous mode [ 478.379800][T21616] syzkaller1: entered allmulticast mode [ 478.444526][T21622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4535'. [ 478.533049][ T5837] Bluetooth: hci2: command 0x0405 tx timeout [ 478.549970][T21630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4539'. [ 478.601867][T21632] 8021q: VLANs not supported on lo [ 478.621437][T21632] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4538'. [ 478.761536][T21642] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 478.779743][T21642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4541'. [ 478.825750][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4544'. [ 478.988087][T21658] xt_hashlimit: invalid rate [ 479.052132][T21658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4548'. [ 479.290207][T21676] bridge0: left allmulticast mode [ 479.741897][T21687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.757686][T21687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.833587][T21687] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 479.863939][T21687] gretap1: left promiscuous mode [ 479.869685][T21687] gretap1: left allmulticast mode [ 479.877996][T21687] geneve2: left promiscuous mode [ 479.883290][T21687] geneve2: left allmulticast mode [ 479.892155][T21687] ip6gre1: left allmulticast mode [ 479.903185][T21687] vlan2: left allmulticast mode [ 479.908215][T21687] hsr0: left allmulticast mode [ 479.914889][T21687] hsr_slave_0: left allmulticast mode [ 479.920529][T21687] hsr_slave_1: left allmulticast mode [ 479.943020][T21687] vlan0: left promiscuous mode [ 479.947995][T21687] bond8: left promiscuous mode [ 479.953284][T21687] gretap3: left promiscuous mode [ 479.958507][T21687] vlan0: left allmulticast mode [ 479.963434][T21687] bond8: left allmulticast mode [ 479.968341][T21687] gretap3: left allmulticast mode [ 480.300259][T21132] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.320359][T21132] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.334014][T21132] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 480.343690][T21132] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.355465][T21132] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.369855][T21132] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 480.388652][T21132] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.397995][T21132] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.407202][T21132] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 480.446868][T21132] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.473995][T21132] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.488723][T21132] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 480.659355][T21740] syzkaller1: entered promiscuous mode [ 480.665214][T21740] syzkaller1: entered allmulticast mode [ 480.684031][T21740] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 481.252112][T21762] openvswitch: netlink: Missing valid actions attribute. [ 481.264305][T21762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.719533][T21789] vlan0: entered promiscuous mode [ 481.733650][T21789] vlan0: entered allmulticast mode [ 481.738899][T21789] veth0_vlan: entered allmulticast mode [ 481.963244][T21803] netlink: 'syz.3.4592': attribute type 1 has an invalid length. [ 482.376525][T21830] netlink: 'syz.2.4601': attribute type 33 has an invalid length. [ 482.410353][T21835] __nla_validate_parse: 12 callbacks suppressed [ 482.410371][T21835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4602'. [ 482.433483][T21830] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4601'. [ 482.577661][T21849] bond2: option min_links: invalid value (18446744073709551614) [ 482.594963][T21849] bond2: option min_links: allowed values 0 - 2147483647 [ 482.608588][T21849] bond2 (unregistering): Released all slaves [ 482.756167][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4611'. [ 482.760000][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4611'. [ 482.797019][T21864] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 482.814803][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 482.890418][T21872] netlink: 'syz.2.4613': attribute type 1 has an invalid length. [ 482.898486][T21872] netlink: 'syz.2.4613': attribute type 4 has an invalid length. [ 482.909324][T21872] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4613'. [ 482.919840][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4613'. [ 482.961122][T21878] netlink: 'syz.3.4616': attribute type 6 has an invalid length. [ 482.961807][T21877] siw: device registration error -23 [ 482.975912][T21878] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 482.988789][T21878] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4616'. [ 483.109215][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4620'. [ 483.137740][T21886] netlink: 'syz.3.4619': attribute type 29 has an invalid length. [ 483.161333][T21886] netlink: 'syz.3.4619': attribute type 29 has an invalid length. [ 483.174191][T21886] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4619'. [ 483.185643][T21886] unsupported nla_type 58 [ 483.253526][T21894] netlink: 'syz.3.4623': attribute type 10 has an invalid length. [ 483.353924][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4627'. [ 483.530381][T21904] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 483.547063][T21904] bond4 (unregistering): Released all slaves [ 483.566529][T21914] x_tables: duplicate underflow at hook 2 [ 484.169026][T21958] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 484.186873][T21952] lo speed is unknown, defaulting to 1000 [ 484.444543][T21952] lo speed is unknown, defaulting to 1000 [ 484.452341][T21952] batadv0 speed is unknown, defaulting to 1000 [ 484.548843][T21970] sctp: [Deprecated]: syz.1.4647 (pid 21970) Use of int in max_burst socket option deprecated. [ 484.548843][T21970] Use struct sctp_assoc_value instead [ 485.135643][T22007] netlink: 'syz.4.4657': attribute type 3 has an invalid length. [ 485.229358][T22008] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 485.321205][T22008] bond4 (unregistering): Released all slaves [ 485.714402][T22038] geneve3: entered promiscuous mode [ 485.719644][T22038] geneve3: entered allmulticast mode [ 485.741598][T22040] ip6gre3: entered allmulticast mode [ 486.153587][T22063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.165090][T22063] netlink: 'syz.3.4676': attribute type 30 has an invalid length. [ 486.167342][T22067] tipc: Enabling of bearer rejected, media not registered [ 486.182929][T22070] tipc: Enabling of bearer rejected, media not registered [ 486.249964][T22067] syzkaller0: entered promiscuous mode [ 486.257125][T22067] syzkaller0: entered allmulticast mode [ 486.908192][T22055] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 488.055642][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 488.773953][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 489.055798][T22092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.142186][T22107] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 489.251659][T22117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.291817][T22122] __nla_validate_parse: 14 callbacks suppressed [ 489.291834][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4690'. [ 489.296269][T22121] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4688'. [ 489.304517][T22122] batadv_slave_1: entered promiscuous mode [ 489.323209][T22122] batadv_slave_1: left promiscuous mode [ 489.328394][T22121] NCSI netlink: No device for ifindex 0 [ 489.475459][T22136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4693'. [ 489.526884][T22145] netlink: 'syz.0.4693': attribute type 5 has an invalid length. [ 489.551347][T22144] netlink: 'syz.3.4695': attribute type 83 has an invalid length. [ 549.839579][T22162] netlink: 'syz.2.4701': attribute type 1 has an invalid length. [ 549.855867][T22162] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20000 [ 550.091529][T22183] netlink: 'syz.3.4708': attribute type 11 has an invalid length. [ 550.100749][T22183] netlink: 'syz.3.4708': attribute type 11 has an invalid length. [ 550.130112][T22183] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4708'. [ 550.269900][T22177] pim6reg1: entered promiscuous mode [ 550.285365][T22177] pim6reg1: entered allmulticast mode [ 550.411399][T22205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.420686][T22201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4710'. [ 550.610954][T22216] netlink: 'syz.1.4719': attribute type 32 has an invalid length. [ 550.856780][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4724'. [ 550.961167][T22251] openvswitch: netlink: ct_state flags 000010b8 unsupported [ 551.037008][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4726'. [ 551.605260][T22274] can: request_module (can-proto-4) failed. [ 551.742826][T22287] netlink: 'syz.2.4737': attribute type 3 has an invalid length. [ 551.813427][T22290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4738'. [ 551.848003][T22293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4742'. [ 551.859159][T22297] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 551.873603][T22297] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.881426][T22297] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.983666][T22304] netlink: 'syz.2.4745': attribute type 7 has an invalid length. [ 552.070285][T22311] bridge6: entered promiscuous mode [ 552.075736][T22311] bridge6: entered allmulticast mode [ 552.555378][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4756'. [ 552.566552][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4756'. [ 552.579206][T22337] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4756'. [ 552.728758][T22344] netlink: 'syz.4.4758': attribute type 178 has an invalid length. [ 552.841533][T22346] netlink: 'syz.1.4759': attribute type 11 has an invalid length. [ 552.957239][T22352] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4761'. [ 553.009866][T22352] syzkaller0: entered promiscuous mode [ 553.015902][T22352] syzkaller0: entered allmulticast mode [ 553.017379][T22356] netlink: 'syz.4.4763': attribute type 3 has an invalid length. [ 554.842945][ T30] audit: type=1107 audit(1759941693.184:3): pid=22372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ê PaÍ—ÛâV `N6Ä6d¦iMß-@Œ„ÜOèçYýùËQŽŒ˜pb·<ä¾à ÌXJ"BÎǦ²Z ®”.S–"Ð’5“D§s³wC… õ¥OBá¥VxïºÀw®(¼2œ]RiŽ»è)kȇ—vJ`Bnº•=r-' [ 554.922986][T22379] delete_channel: no stack [ 555.203308][T22402] sctp: [Deprecated]: syz.4.4776 (pid 22402) Use of int in max_burst socket option. [ 555.203308][T22402] Use struct sctp_assoc_value instead [ 555.324346][T22405] __nla_validate_parse: 2 callbacks suppressed [ 555.324445][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4777'. [ 555.344839][T22405] batadv_slave_1: entered promiscuous mode [ 555.351343][T22405] batadv_slave_1: left promiscuous mode [ 555.501043][T22410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4779'. [ 555.784786][T22422] netlink: 'syz.0.4782': attribute type 1 has an invalid length. [ 555.813453][T22422] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4782'. [ 555.834747][T22422] netlink: 'syz.0.4782': attribute type 2 has an invalid length. [ 555.844316][T22422] netlink: 'syz.0.4782': attribute type 1 has an invalid length. [ 556.081599][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4789'. [ 556.160658][T22444] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 556.238984][T22439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4789'. [ 556.287228][T22439] Cannot find del_set index 49151 as target [ 556.372795][T22439] netlink: 'syz.0.4789': attribute type 1 has an invalid length. [ 556.380571][T22439] netlink: 'syz.0.4789': attribute type 3 has an invalid length. [ 556.397581][T22439] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4789'. [ 556.415195][T22439] NCSI netlink: No device for ifindex 813332851 [ 556.420310][T22468] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4795'. [ 556.432122][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'. [ 556.443318][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'. [ 556.456055][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'. [ 556.836009][T22490] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 556.847766][T22490] bond2 (unregistering): Released all slaves [ 556.859406][T22494] SET target dimension over the limit! [ 556.868649][T22494] netlink: 'syz.0.4804': attribute type 1 has an invalid length. [ 556.877350][T22496] ipt_rpfilter: unknown options [ 556.918175][T22494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 556.952182][T22495] vlan4: entered allmulticast mode [ 556.958270][T22495] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 556.983143][T22494] bond5: (slave gretap1): making interface the new active one [ 556.996979][T22494] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 557.144584][T22508] netlink: 'syz.2.4806': attribute type 39 has an invalid length. [ 557.377678][ T10] IPVS: starting estimator thread 0... [ 557.403320][T22517] ip6erspan0: entered promiscuous mode [ 557.409552][T22517] ip6erspan0: entered allmulticast mode [ 557.475942][T22524] IPVS: using max 26 ests per chain, 62400 per kthread [ 557.533935][T22534] netlink: 'syz.1.4816': attribute type 4 has an invalid length. [ 558.169245][T22569] netlink: 'syz.0.4823': attribute type 7 has an invalid length. [ 558.341101][T22585] netlink: 'syz.3.4829': attribute type 23 has an invalid length. [ 558.566903][T22599] tc_dump_action: action bad kind [ 558.601616][T22603] veth0: entered promiscuous mode [ 558.641320][T22601] veth0: left promiscuous mode [ 559.474394][T22663] tipc: Enabled bearer , priority 0 [ 559.527338][T22664] tipc: Resetting bearer [ 559.561725][T22664] tipc: Disabling bearer [ 560.148860][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 560.151548][T22729] sctp: [Deprecated]: syz.1.4869 (pid 22729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.151548][T22729] Use struct sctp_sack_info instead [ 560.367674][T22743] __nla_validate_parse: 24 callbacks suppressed [ 560.367693][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4873'. [ 560.393159][T22743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4873'. [ 560.421522][T22743] gretap0: entered promiscuous mode [ 560.575465][T22743] gretap0: left promiscuous mode [ 560.650452][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4875'. [ 560.875541][T22766] IPVS: Error connecting to the multicast addr [ 560.911268][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4878'. [ 560.971597][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4883'. [ 561.113318][T22771] hsr_slave_0 (unregistering): left promiscuous mode [ 561.126888][T22760] validate_nla: 2 callbacks suppressed [ 561.126906][T22760] netlink: 'syz.0.4878': attribute type 1 has an invalid length. [ 561.401704][T22791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4889'. [ 561.543166][T22806] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4890'. [ 561.752216][T22817] tipc: Enabled bearer , priority 0 [ 561.760093][T22818] syzkaller0: entered promiscuous mode [ 561.770126][T22818] syzkaller0: entered allmulticast mode [ 561.871352][T22829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4900'. [ 561.883896][T22818] tipc: Resetting bearer [ 561.931703][T22816] tipc: Resetting bearer [ 561.975286][T22816] tipc: Disabling bearer [ 562.058686][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4901'. [ 562.071187][T22835] bond0: entered promiscuous mode [ 562.076703][T22835] bond_slave_0: entered promiscuous mode [ 562.082805][T22835] bond_slave_1: entered promiscuous mode [ 562.227008][T22832] syzkaller0: entered promiscuous mode [ 562.232791][T22832] syzkaller0: entered allmulticast mode [ 564.144636][T22867] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 564.520166][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4919'. [ 564.648380][T22898] netlink: 'syz.0.4920': attribute type 10 has an invalid length. [ 564.662388][T22901] netlink: 'syz.2.4921': attribute type 6 has an invalid length. [ 564.685420][T22905] netlink: 'syz.2.4921': attribute type 6 has an invalid length. [ 564.696499][T22898] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 565.651700][T22968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4940'. [ 566.097291][T22996] netlink: 'syz.1.4949': attribute type 21 has an invalid length. [ 566.105589][T22996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4949'. [ 566.119684][T22996] netlink: 'syz.1.4949': attribute type 4 has an invalid length. [ 566.226869][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4952'. [ 566.341147][T23011] xt_l2tp: missing protocol rule (udp|l2tpip) [ 566.349374][T23011] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4954'. [ 566.363152][T23011] xt_l2tp: missing protocol rule (udp|l2tpip) [ 566.404695][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4956'. [ 566.414562][T23018] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 566.445381][T23018] team1: entered promiscuous mode [ 566.450673][T23018] team1: entered allmulticast mode [ 566.634700][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4962'. [ 566.678995][T23037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4963'. [ 566.714282][T23037] bond5 (unregistering): Released all slaves [ 566.771414][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4965'. [ 566.860060][T23048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4966'. [ 567.444798][T23101] x_tables: duplicate underflow at hook 1 [ 567.785569][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4986'. [ 567.953138][T23122] netlink: 'syz.1.4986': attribute type 4 has an invalid length. [ 568.257674][T23134] netlink: 'syz.1.4990': attribute type 1 has an invalid length. [ 569.044501][T23175] block nbd6: server does not support multiple connections per device. [ 569.053155][T23175] block nbd6: shutting down sockets [ 569.121029][T23185] netlink: 'syz.1.5008': attribute type 2 has an invalid length. [ 569.461632][T23206] macvtap1: entered promiscuous mode [ 569.467398][T23206] macvtap1: entered allmulticast mode [ 569.474354][T23206] bond0: entered allmulticast mode [ 569.479568][T23206] bond_slave_0: entered allmulticast mode [ 569.485547][T23206] bond_slave_1: entered allmulticast mode [ 569.491386][T23206] bond0: entered promiscuous mode [ 569.497511][T23206] bond_slave_0: entered promiscuous mode [ 569.504731][T23206] bond_slave_1: entered promiscuous mode [ 569.512962][T23206] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 569.520116][T23206] team0: Device macvtap1 failed to register rx_handler [ 569.527998][T23206] bond0: left allmulticast mode [ 569.533411][T23206] bond_slave_0: left allmulticast mode [ 569.538888][T23206] bond_slave_1: left allmulticast mode [ 569.544531][T23206] bond0: left promiscuous mode [ 569.549333][T23206] bond_slave_0: left promiscuous mode [ 569.555472][T23206] bond_slave_1: left promiscuous mode [ 569.589240][T23210] netlink: 'syz.1.5017': attribute type 9 has an invalid length. [ 569.608020][T23210] netlink: 'syz.1.5017': attribute type 9 has an invalid length. [ 569.661511][T17008] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.675226][T17008] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.702546][T17008] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.712784][T17008] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.821912][T23226] netlink: 'syz.1.5022': attribute type 1 has an invalid length. [ 569.940100][T23226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.023747][T23317] __nla_validate_parse: 19 callbacks suppressed [ 571.023767][T23317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5050'. [ 571.043283][T23317] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5050'. [ 571.242977][T23326] syzkaller0: entered promiscuous mode [ 571.248583][T23326] syzkaller0: entered allmulticast mode [ 571.473320][T23344] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5059'. [ 571.558517][T23341] bond6: Unable to set down delay as MII monitoring is disabled [ 571.569159][T23341] bond6 (unregistering): Released all slaves [ 571.578801][T23352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5060'. [ 571.619593][T23352] netlink: 'syz.4.5060': attribute type 1 has an invalid length. [ 571.848750][T23365] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5063'. [ 572.024756][T23376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5068'. [ 572.096481][T23381] netlink: 'syz.3.5071': attribute type 1 has an invalid length. [ 572.124074][T23381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5071'. [ 572.215211][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5072'. [ 572.319413][T23393] syz.3.5074: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 572.336883][T23395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5074'. [ 572.351861][T23393] CPU: 0 UID: 0 PID: 23393 Comm: syz.3.5074 Not tainted syzkaller #0 PREEMPT(full) [ 572.351886][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 572.351900][T23393] Call Trace: [ 572.351907][T23393] [ 572.351915][T23393] dump_stack_lvl+0x189/0x250 [ 572.351941][T23393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.351959][T23393] ? __pfx__printk+0x10/0x10 [ 572.351978][T23393] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 572.351999][T23393] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 572.352035][T23393] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 572.352058][T23393] warn_alloc+0x214/0x310 [ 572.352081][T23393] ? stack_depot_save_flags+0x40/0x860 [ 572.352101][T23393] ? __pfx_warn_alloc+0x10/0x10 [ 572.352124][T23393] ? kasan_save_track+0x4f/0x80 [ 572.352142][T23393] ? xskq_create+0x56/0x170 [ 572.352162][T23393] ? xsk_init_queue+0xb0/0x110 [ 572.352181][T23393] ? xsk_setsockopt+0x4dc/0x8d0 [ 572.352199][T23393] ? do_sock_setsockopt+0x179/0x1b0 [ 572.352218][T23393] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 572.352236][T23393] ? do_syscall_64+0xfa/0xfa0 [ 572.352257][T23393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.352283][T23393] __vmalloc_node_range_noprof+0x125/0x12f0 [ 572.352333][T23393] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 572.352359][T23393] ? __kasan_kmalloc+0x93/0xb0 [ 572.352381][T23393] vmalloc_user_noprof+0xad/0xf0 [ 572.352399][T23393] ? xskq_create+0xbf/0x170 [ 572.352423][T23393] xskq_create+0xbf/0x170 [ 572.352446][T23393] xsk_init_queue+0xb0/0x110 [ 572.352469][T23393] xsk_setsockopt+0x4dc/0x8d0 [ 572.352491][T23393] ? __pfx_xsk_setsockopt+0x10/0x10 [ 572.352513][T23393] ? __pfx_aa_sk_perm+0x10/0x10 [ 572.352534][T23393] ? aa_sock_opt_perm+0xff/0x1b0 [ 572.352559][T23393] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 572.352581][T23393] ? __pfx_xsk_setsockopt+0x10/0x10 [ 572.352603][T23393] do_sock_setsockopt+0x179/0x1b0 [ 572.352631][T23393] __x64_sys_setsockopt+0x13f/0x1b0 [ 572.352659][T23393] do_syscall_64+0xfa/0xfa0 [ 572.352680][T23393] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.352702][T23393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.352719][T23393] ? clear_bhb_loop+0x60/0xb0 [ 572.352739][T23393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.352762][T23393] RIP: 0033:0x7f4432b8eec9 [ 572.352779][T23393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.352794][T23393] RSP: 002b:00007f4433aea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.352813][T23393] RAX: ffffffffffffffda RBX: 00007f4432de5fa0 RCX: 00007f4432b8eec9 [ 572.352825][T23393] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 572.352835][T23393] RBP: 00007f4432c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 572.352845][T23393] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.352856][T23393] R13: 00007f4432de6038 R14: 00007f4432de5fa0 R15: 00007ffd0e763398 [ 572.352885][T23393] [ 572.669757][T23393] Mem-Info: [ 572.673227][T23393] active_anon:4791 inactive_anon:0 isolated_anon:0 [ 572.673227][T23393] active_file:3148 inactive_file:40045 isolated_file:0 [ 572.673227][T23393] unevictable:768 dirty:160 writeback:0 [ 572.673227][T23393] slab_reclaimable:13186 slab_unreclaimable:142524 [ 572.673227][T23393] mapped:29152 shmem:1355 pagetables:1144 [ 572.673227][T23393] sec_pagetables:0 bounce:0 [ 572.673227][T23393] kernel_misc_reclaimable:0 [ 572.673227][T23393] free:1280433 free_pcp:13588 free_cma:0 [ 572.720460][T23402] netlink: 'syz.4.5075': attribute type 1 has an invalid length. [ 572.763165][T23393] Node 0 active_anon:19128kB inactive_anon:0kB active_file:12592kB inactive_file:159976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116596kB dirty:644kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14708kB pagetables:4476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 572.782231][T23410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5077'. [ 572.803565][T23393] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 572.835939][T23393] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.866597][T23393] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 572.873633][T23393] Node 0 DMA32 free:1211164kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19180kB inactive_anon:0kB active_file:12592kB inactive_file:158168kB unevictable:1536kB writepending:644kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:40396kB local_pcp:19596kB free_cma:0kB [ 572.907505][T23393] lowmem_reserve[]: 0 0 1 1 1 [ 572.912278][T23393] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 572.943418][T23393] lowmem_reserve[]: 0 0 0 0 0 [ 572.948595][T23393] Node 1 Normal free:3895180kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13316kB local_pcp:5568kB free_cma:0kB [ 572.980938][T23393] lowmem_reserve[]: 0 0 0 0 0 [ 572.985982][T23393] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 573.018881][T23393] Node 0 DMA32: 2358*4kB (UME) 911*8kB (UME) 210*16kB (UME) 409*32kB (UM) 135*64kB (UM) 38*128kB (UME) 16*256kB (UME) 13*512kB (UME) 9*1024kB (UME) 5*2048kB (UM) 277*4096kB (UM) = 1211472kB [ 573.075014][T23393] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 573.075510][T23418] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 573.104755][T23393] 0*1024kB 0*2048kB 0*4096kB = 28kB [ 573.110847][T23393] Node 1 Normal: 203*4kB (UM) 56*8kB (UME) 46*16kB (UME) 192*32kB (UME) 57*64kB (UME) 15*128kB (UME) 6*256kB (UME) 4*512kB (UM) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3895180kB [ 573.159049][T23393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.177595][T23393] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 573.192504][T23393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.220590][T23426] vlan2: entered promiscuous mode [ 573.225986][T23426] bridge0: entered promiscuous mode [ 573.236425][T23393] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 573.246847][T23393] 44544 total pagecache pages [ 573.251557][T23393] 0 pages in swap cache [ 573.256450][T23393] Free swap = 124996kB [ 573.260928][T23393] Total swap = 124996kB [ 573.265290][T23393] 2097051 pages RAM [ 573.269170][T23393] 0 pages HighMem/MovableOnly [ 573.274756][T23393] 424452 pages reserved [ 573.278998][T23393] 0 pages cma reserved [ 573.516211][T23442] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 574.094087][T23487] sctp: [Deprecated]: syz.4.5104 (pid 23487) Use of int in max_burst socket option. [ 574.094087][T23487] Use struct sctp_assoc_value instead [ 574.110470][T23488] netlink: 'syz.0.5103': attribute type 10 has an invalid length. [ 574.175906][T23492] netlink: 'syz.3.5106': attribute type 11 has an invalid length. [ 574.205095][T23492] netlink: 'syz.3.5106': attribute type 11 has an invalid length. [ 574.230766][T23495] tipc: Enabled bearer , priority 0 [ 574.258945][T23495] syzkaller0: entered promiscuous mode [ 574.267621][T23495] syzkaller0: entered allmulticast mode [ 574.310804][T23496] tipc: Resetting bearer [ 574.361083][T23494] tipc: Resetting bearer [ 574.418928][T23494] tipc: Disabling bearer [ 574.561138][T23515] nbd: must specify at least one socket [ 574.941884][T23539] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 576.683082][T23537] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 576.845111][T23581] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 576.882983][T23581] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 576.891117][T23581] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 576.959857][T23581] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 576.985220][T23581] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 577.012278][T23581] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 577.039289][T23594] wg2: entered promiscuous mode [ 577.044704][T23594] wg2: entered allmulticast mode [ 577.051743][T23581] netlink: 'syz.4.5134': attribute type 7 has an invalid length. [ 577.062985][T23598] __nla_validate_parse: 35 callbacks suppressed [ 577.063004][T23598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5137'. [ 577.078501][T23598] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5137'. [ 577.106065][T23603] wg2: left promiscuous mode [ 577.111478][T23603] wg2: left allmulticast mode [ 577.293943][T23610] lo speed is unknown, defaulting to 1000 [ 577.438118][T23610] lo speed is unknown, defaulting to 1000 [ 577.445309][T23610] batadv0 speed is unknown, defaulting to 1000 [ 577.452251][T23614] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 577.613588][T23607] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5139'. [ 577.852927][T23626] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5143'. [ 578.018570][T23643] rdma_rxe: rxe_newlink: failed to add lo [ 578.044622][T23644] rdma_rxe: rxe_newlink: failed to add lo [ 578.096994][T23646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5150'. [ 578.179000][T23650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5153'. [ 578.365803][T23657] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5156'. [ 578.771672][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5161'. [ 578.811235][T23683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5161'. [ 579.154500][T23699] lo speed is unknown, defaulting to 1000 [ 579.535245][T23721] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5167'. [ 579.730499][T23699] lo speed is unknown, defaulting to 1000 [ 579.786727][T23699] batadv0 speed is unknown, defaulting to 1000 [ 580.136978][T23763] validate_nla: 62 callbacks suppressed [ 580.136997][T23763] netlink: 'syz.3.5177': attribute type 1 has an invalid length. [ 580.197380][T23745] netlink: 'syz.0.5174': attribute type 29 has an invalid length. [ 580.267408][T23763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.316290][T23766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.343611][T23766] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 580.355068][T23766] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 580.401486][T23749] netlink: 'syz.0.5174': attribute type 29 has an invalid length. [ 580.428853][T23759] veth7: entered promiscuous mode [ 580.491634][T23773] lo speed is unknown, defaulting to 1000 [ 580.882170][T23798] netlink: 'syz.1.5185': attribute type 1 has an invalid length. [ 581.092208][T23773] lo speed is unknown, defaulting to 1000 [ 581.100826][T23773] batadv0 speed is unknown, defaulting to 1000 [ 581.197665][T23807] tipc: Enabled bearer , priority 0 [ 581.244323][T23805] tipc: Disabling bearer [ 581.402568][T23818] batadv1: left allmulticast mode [ 581.408031][T23818] batadv1: left promiscuous mode [ 581.418794][T23818] bridge0: port 3(batadv1) entered disabled state [ 581.429588][T23818] bridge_slave_1: left allmulticast mode [ 581.436319][T23818] bridge_slave_1: left promiscuous mode [ 581.442284][T23818] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.452285][T23818] bridge_slave_0: left allmulticast mode [ 581.459218][T23818] bridge_slave_0: left promiscuous mode [ 581.467130][T23818] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.118012][T23847] tipc: Enabled bearer , priority 0 [ 582.138831][T23847] veth1: entered allmulticast mode [ 582.364565][T23858] tipc: Resetting bearer [ 582.421806][T23874] openvswitch: netlink: Missing valid actions attribute. [ 582.441958][T23874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.498088][T23846] tipc: Disabling bearer [ 582.625306][T23887] __nla_validate_parse: 9 callbacks suppressed [ 582.625325][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5216'. [ 582.658797][T23887] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5216'. [ 582.668163][T23887] netlink: 'syz.4.5216': attribute type 5 has an invalid length. [ 582.874923][T23902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5220'. [ 582.996672][T23904] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 583.077218][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5221'. [ 583.868211][T23951] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:0 [ 583.933209][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5234'. [ 583.952934][T23957] netlink: 'syz.2.5235': attribute type 4 has an invalid length. [ 583.964724][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5234'. [ 584.070894][T23961] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5234'. [ 584.080677][T23961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.100820][T23961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.379206][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5240'. [ 584.416838][T23979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5241'. [ 584.578499][T23989] netlink: 'syz.0.5244': attribute type 1 has an invalid length. [ 584.623967][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5245'. [ 584.677720][T23992] netlink: 'syz.3.5245': attribute type 11 has an invalid length. [ 584.864421][T24001] netlink: 'syz.3.5248': attribute type 1 has an invalid length. [ 584.957976][T24001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.605665][T24040] tipc: Enabled bearer , priority 0 [ 585.633399][T24040] syzkaller0: entered promiscuous mode [ 585.653385][T24040] syzkaller0: entered allmulticast mode [ 585.696821][T24040] tipc: Resetting bearer [ 585.705973][T24037] tipc: Resetting bearer [ 585.734196][T24037] tipc: Disabling bearer [ 585.909360][T24056] netlink: 'syz.2.5265': attribute type 10 has an invalid length. [ 585.926439][T24056] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 587.105985][T24112] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 587.576135][T24134] netlink: 'syz.2.5287': attribute type 1 has an invalid length. [ 587.758244][T24142] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.770502][T24142] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.781889][T24142] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.841469][T24142] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.853462][T24142] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.883461][T24142] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.988871][T24142] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.003326][T24142] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 588.016367][T24142] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.060000][T24142] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.082832][T24142] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 588.105573][T24142] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.275184][T24166] __nla_validate_parse: 16 callbacks suppressed [ 588.275203][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5301'. [ 588.313150][T24166] netlink: 'syz.2.5301': attribute type 18 has an invalid length. [ 588.321477][T24166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5301'. [ 588.464581][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5301'. [ 588.488363][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.497073][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 588.506236][T24166] netlink: 'syz.2.5301': attribute type 18 has an invalid length. [ 588.514687][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.523162][T24166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5301'. [ 588.549897][T17008] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.562343][T17008] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 588.574655][T17008] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.609027][ T3570] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.618517][ T3570] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 588.630656][ T3570] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.660019][ T3570] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.671842][ T3570] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 588.673335][T24184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5309'. [ 588.681336][ T3570] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.846552][T24198] netlink: 'syz.0.5314': attribute type 4 has an invalid length. [ 588.908958][T24199] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 588.927762][T24199] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5312'. [ 588.946085][T24204] netlink: 'syz.2.5316': attribute type 1 has an invalid length. [ 588.954678][T24199] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 588.960836][T24204] netlink: 'syz.2.5316': attribute type 1 has an invalid length. [ 590.625557][T24213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5319'. [ 590.831275][T24224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5323'. [ 590.841293][T24226] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5323'. [ 590.865091][T24225] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 591.381765][T24243] netlink: 'syz.2.5327': attribute type 2 has an invalid length. [ 591.399686][T24243] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5327'. [ 591.429655][T24243] nbd: must specify at least one socket [ 591.648043][T24262] geneve3: entered promiscuous mode [ 591.662878][T24262] geneve3: entered allmulticast mode [ 591.683839][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.695506][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.704393][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.714455][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.950174][T24289] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 592.059434][T24303] netlink: 'syz.3.5349': attribute type 2 has an invalid length. [ 592.067583][T24303] nbd: must specify a device to reconfigure [ 592.116188][T24306] FAULT_INJECTION: forcing a failure. [ 592.116188][T24306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.152525][T24306] CPU: 1 UID: 0 PID: 24306 Comm: syz.4.5347 Not tainted syzkaller #0 PREEMPT(full) [ 592.152571][T24306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.152593][T24306] Call Trace: [ 592.152600][T24306] [ 592.152608][T24306] dump_stack_lvl+0x189/0x250 [ 592.152633][T24306] ? __pfx____ratelimit+0x10/0x10 [ 592.152658][T24306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.152676][T24306] ? __pfx__printk+0x10/0x10 [ 592.152708][T24306] should_fail_ex+0x414/0x560 [ 592.152733][T24306] _copy_to_user+0x31/0xb0 [ 592.152759][T24306] simple_read_from_buffer+0xe1/0x170 [ 592.152785][T24306] proc_fail_nth_read+0x1b3/0x220 [ 592.152812][T24306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.152839][T24306] ? rw_verify_area+0x2a6/0x4d0 [ 592.152854][T24306] ? __lock_acquire+0xab9/0xd20 [ 592.152874][T24306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.152899][T24306] vfs_read+0x1fd/0xa30 [ 592.152916][T24306] ? fdget_pos+0x247/0x320 [ 592.152940][T24306] ? __pfx___mutex_lock+0x10/0x10 [ 592.152977][T24306] ? __pfx_vfs_read+0x10/0x10 [ 592.152998][T24306] ? __fget_files+0x2a/0x420 [ 592.153023][T24306] ? __fget_files+0x3a0/0x420 [ 592.153041][T24306] ? __fget_files+0x2a/0x420 [ 592.153079][T24306] ksys_read+0x145/0x250 [ 592.153100][T24306] ? __pfx_ksys_read+0x10/0x10 [ 592.153122][T24306] ? do_syscall_64+0xbe/0xfa0 [ 592.153149][T24306] do_syscall_64+0xfa/0xfa0 [ 592.153171][T24306] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.153197][T24306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.153214][T24306] ? clear_bhb_loop+0x60/0xb0 [ 592.153235][T24306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.153251][T24306] RIP: 0033:0x7f3e0df8d8dc [ 592.153268][T24306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 592.153283][T24306] RSP: 002b:00007f3e0eea5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.153302][T24306] RAX: ffffffffffffffda RBX: 00007f3e0e1e6090 RCX: 00007f3e0df8d8dc [ 592.153316][T24306] RDX: 000000000000000f RSI: 00007f3e0eea50a0 RDI: 0000000000000003 [ 592.153326][T24306] RBP: 00007f3e0eea5090 R08: 0000000000000000 R09: 0000000000000000 [ 592.153338][T24306] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 592.153348][T24306] R13: 00007f3e0e1e6128 R14: 00007f3e0e1e6090 R15: 00007ffc2d393818 [ 592.153381][T24306] [ 592.499243][T24313] sch_fq: defrate 0 ignored. [ 593.321357][T24359] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 593.449011][T24370] __nla_validate_parse: 4 callbacks suppressed [ 593.449028][T24370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5370'. [ 593.620843][T24390] netlink: 'syz.1.5375': attribute type 32 has an invalid length. [ 593.758057][T24402] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5378'. [ 594.253444][T24434] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 594.269898][T24434] bond7 (unregistering): Released all slaves [ 594.410045][T24446] netlink: 'syz.0.5391': attribute type 30 has an invalid length. [ 594.491687][T24446] netlink: 'syz.0.5391': attribute type 30 has an invalid length. [ 594.511506][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5394'. [ 594.564821][T24454] bond6: Invalid ad_actor_system MAC address. [ 594.571048][T24454] bond6: option ad_actor_system: invalid value (1) [ 594.591255][T24454] bond6 (unregistering): Released all slaves [ 595.045438][T24489] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 595.059009][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 595.197636][T24498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5408'. [ 595.263874][T24498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5408'. [ 595.352640][T24506] netlink: 'syz.3.5411': attribute type 10 has an invalid length. [ 595.388661][T24506] batman_adv: batadv0: Adding interface: team0 [ 595.401726][T24506] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.455356][T24506] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 595.510125][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5411'. [ 595.538724][T24510] veth1_to_batadv: mtu less than device minimum [ 595.870075][T24532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5416'. [ 596.117375][T24546] bridge8: entered allmulticast mode [ 596.187437][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 596.271112][T24545] bridge8: left allmulticast mode [ 596.293846][T24561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5429'. [ 596.810666][T24599] tipc: Started in network mode [ 596.816360][T24599] tipc: Node identity 8e5c774de4d2, cluster identity 4711 [ 596.825537][T24599] tipc: Enabled bearer , priority 0 [ 596.836345][T24599] sit0: entered allmulticast mode [ 596.929837][T24597] tipc: Disabling bearer [ 597.000770][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 597.044849][ T1154] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 597.087777][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 597.122983][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 597.170866][T24617] netlink: 'syz.4.5445': attribute type 10 has an invalid length. [ 597.252225][T24617] veth1_macvtap: left promiscuous mode [ 597.260005][T24617] team0: Device veth1_macvtap failed to register rx_handler [ 597.327470][T24620] bond6: option mode: invalid value (133) [ 597.349290][T24620] bond6 (unregistering): Released all slaves [ 597.724868][T24646] lo speed is unknown, defaulting to 1000 [ 597.790616][T24649] No such timeout policy "syz1" [ 597.836449][T24655] bridge4: entered promiscuous mode [ 597.869969][T24655] bridge4: entered allmulticast mode [ 597.935344][T24656] tipc: Enabled bearer , priority 0 [ 597.998759][T24648] tipc: Resetting bearer [ 598.026169][T24662] syzkaller0: entered promiscuous mode [ 598.062174][T24662] syzkaller0: entered allmulticast mode [ 598.080700][T24655] bridge5: entered promiscuous mode [ 598.086176][T24655] bridge5: entered allmulticast mode [ 598.107571][T24655] bridge6: entered promiscuous mode [ 598.113933][T24655] bridge6: entered allmulticast mode [ 598.142717][T24647] tipc: Resetting bearer [ 598.205343][T24647] tipc: Disabling bearer [ 598.241154][T24655] bridge7: entered promiscuous mode [ 598.247064][T24655] bridge7: entered allmulticast mode [ 598.258713][T24646] lo speed is unknown, defaulting to 1000 [ 598.266728][T24646] batadv0 speed is unknown, defaulting to 1000 [ 598.276098][T24655] bridge8: entered promiscuous mode [ 598.283793][T24655] bridge8: entered allmulticast mode [ 598.356546][T24671] IPv6: sit2: Disabled Multicast RS [ 598.363277][T24671] sit2: entered allmulticast mode [ 598.413493][T24655] bridge9: entered promiscuous mode [ 598.422324][T24655] bridge9: entered allmulticast mode [ 598.441092][T24655] bridge10: entered promiscuous mode [ 598.449791][T24655] bridge10: entered allmulticast mode [ 598.481720][T24655] bridge11: entered promiscuous mode [ 598.500346][T24655] bridge11: entered allmulticast mode [ 598.548603][T24655] bridge12: entered promiscuous mode [ 598.583283][T24655] bridge12: entered allmulticast mode [ 598.617454][T24655] bridge13: entered promiscuous mode [ 598.632056][T24655] bridge13: entered allmulticast mode [ 598.669027][T24685] __nla_validate_parse: 73 callbacks suppressed [ 598.669048][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'. [ 598.759885][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5466'. [ 598.771776][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5466'. [ 598.857030][T24696] bridge0: port 1(macsec0) entered blocking state [ 598.863800][T24696] bridge0: port 1(macsec0) entered disabled state [ 598.870976][T24696] macsec0: entered allmulticast mode [ 598.882135][T24696] macsec0: left allmulticast mode [ 598.996416][T24703] ipt_ECN: cannot use operation on non-tcp rule [ 599.354558][T24719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5479'. [ 599.705693][T24744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5486'. [ 599.838919][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5489'. [ 600.143630][T24763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5493'. [ 600.230837][T24769] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5494'. [ 600.277444][T24772] delete_channel: no stack [ 600.521926][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5503'. [ 600.555099][T24797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5503'. [ 600.902460][T24796] hsr_slave_1 (unregistering): left promiscuous mode [ 601.108041][T24825] x_tables: duplicate underflow at hook 1 [ 601.193704][T24829] bond6: Unable to set down delay as MII monitoring is disabled [ 601.223119][T24829] bond6 (unregistering): Released all slaves [ 601.294805][T24831] batadv_slave_1: entered promiscuous mode [ 601.304512][T24831] batadv_slave_1: left promiscuous mode [ 601.422120][T24836] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 601.428273][T24836] syzkaller0: Linktype set failed because interface is up [ 601.538990][T24850] bridge0: port 3(batadv2) entered blocking state [ 601.550016][T24850] bridge0: port 3(batadv2) entered disabled state [ 601.558761][T24850] batadv2: entered allmulticast mode [ 601.569427][T24850] batadv2: entered promiscuous mode [ 601.866196][T24871] syzkaller1: entered promiscuous mode [ 601.871798][T24871] syzkaller1: entered allmulticast mode [ 602.032630][ T1154] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 602.041902][ T1154] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 602.052510][T24882] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 602.557940][T24900] netlink: 'syz.3.5539': attribute type 1 has an invalid length. [ 603.255654][ T5837] Bluetooth: hci2: command 0x0405 tx timeout [ 603.263531][ T5145] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 603.753257][T24900] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 603.862118][T24904] veth11: entered promiscuous mode [ 603.877017][T24908] __nla_validate_parse: 8 callbacks suppressed [ 603.877035][T24908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5540'. [ 603.894658][T24911] veth1_macvtap: entered promiscuous mode [ 603.903203][T24910] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 603.936400][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5542'. [ 603.949743][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5541'. [ 603.996145][T24915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5543'. [ 604.013865][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5542'. [ 604.027077][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5542'. [ 604.079491][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5542'. [ 604.081819][T24926] netlink: 'syz.1.5546': attribute type 33 has an invalid length. [ 604.101478][T24926] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5546'. [ 604.123455][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5545'. [ 604.239003][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5545'. [ 604.428042][T24942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 604.486669][T24942] gretap3: entered promiscuous mode [ 604.491932][T24942] gretap3: entered allmulticast mode [ 604.504208][T24951] netlink: 'syz.4.5555': attribute type 30 has an invalid length. [ 604.837708][T24967] tunl0: entered promiscuous mode [ 604.845984][T24967] netlink: 'syz.2.5561': attribute type 3 has an invalid length. [ 604.892245][T24974] lo: left promiscuous mode [ 604.900200][T24974] tunl0: left promiscuous mode [ 604.907737][T24974] gre0: left promiscuous mode [ 604.955567][T24974] gretap0: left promiscuous mode [ 604.966278][T24974] ip_vti0: left promiscuous mode [ 604.975588][T24974] ip6_vti0: left allmulticast mode [ 604.987886][T24974] sit0: left allmulticast mode [ 605.039542][T24974] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.046829][T24974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.054382][T24974] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.061563][T24974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.081267][T24974] bridge0: port 3(team0) entered blocking state [ 605.087823][T24974] bridge0: port 3(team0) entered forwarding state [ 605.095677][T24974] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.109515][T24974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.135118][T24984] netlink: 'syz.2.5566': attribute type 1 has an invalid length. [ 605.308673][T24989] sctp: [Deprecated]: syz.3.5569 (pid 24989) Use of int in maxseg socket option. [ 605.308673][T24989] Use struct sctp_assoc_value instead [ 605.537147][T25012] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 606.326695][T25057] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 606.515648][T25068] netlink: 'syz.0.5590': attribute type 1 has an invalid length. [ 606.544817][T25068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.119016][T25157] xt_hashlimit: overflow, try lower: 3/0 [ 608.242926][T25161] rdma_op ffff8880539581f0 conn xmit_rdma 0000000000000000 [ 608.253104][T25160] delete_channel: no stack [ 608.319503][T25166] syz.1.5627: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 608.343609][T25166] CPU: 0 UID: 0 PID: 25166 Comm: syz.1.5627 Not tainted syzkaller #0 PREEMPT(full) [ 608.343636][T25166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 608.343648][T25166] Call Trace: [ 608.343655][T25166] [ 608.343664][T25166] dump_stack_lvl+0x189/0x250 [ 608.343691][T25166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.343711][T25166] ? __pfx__printk+0x10/0x10 [ 608.343734][T25166] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 608.343756][T25166] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 608.343778][T25166] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 608.343801][T25166] warn_alloc+0x214/0x310 [ 608.343822][T25166] ? stack_depot_save_flags+0x40/0x860 [ 608.343843][T25166] ? __pfx_warn_alloc+0x10/0x10 [ 608.343866][T25166] ? kasan_save_track+0x4f/0x80 [ 608.343884][T25166] ? xskq_create+0x56/0x170 [ 608.343905][T25166] ? xsk_init_queue+0xb0/0x110 [ 608.343925][T25166] ? xsk_setsockopt+0x4dc/0x8d0 [ 608.343943][T25166] ? do_sock_setsockopt+0x179/0x1b0 [ 608.343964][T25166] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 608.343983][T25166] ? do_syscall_64+0xfa/0xfa0 [ 608.344005][T25166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.344032][T25166] __vmalloc_node_range_noprof+0x125/0x12f0 [ 608.344084][T25166] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 608.344105][T25166] ? xskq_create+0x56/0x170 [ 608.344131][T25166] ? __kasan_kmalloc+0x93/0xb0 [ 608.344152][T25166] vmalloc_user_noprof+0xad/0xf0 [ 608.344171][T25166] ? xskq_create+0xbf/0x170 [ 608.344192][T25166] xskq_create+0xbf/0x170 [ 608.344217][T25166] xsk_init_queue+0xb0/0x110 [ 608.344242][T25166] xsk_setsockopt+0x4dc/0x8d0 [ 608.344267][T25166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 608.344291][T25166] ? __pfx_aa_sk_perm+0x10/0x10 [ 608.344325][T25166] ? aa_sock_opt_perm+0xff/0x1b0 [ 608.344351][T25166] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 608.344373][T25166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 608.344396][T25166] do_sock_setsockopt+0x179/0x1b0 [ 608.344424][T25166] __x64_sys_setsockopt+0x13f/0x1b0 [ 608.344451][T25166] do_syscall_64+0xfa/0xfa0 [ 608.344473][T25166] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.344497][T25166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.344513][T25166] ? clear_bhb_loop+0x60/0xb0 [ 608.344535][T25166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.344551][T25166] RIP: 0033:0x7f441b38eec9 [ 608.344569][T25166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.344585][T25166] RSP: 002b:00007f441c1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 608.344606][T25166] RAX: ffffffffffffffda RBX: 00007f441b5e5fa0 RCX: 00007f441b38eec9 [ 608.344620][T25166] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 608.344631][T25166] RBP: 00007f441b411f91 R08: 0000000000000004 R09: 0000000000000000 [ 608.344642][T25166] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.344653][T25166] R13: 00007f441b5e6038 R14: 00007f441b5e5fa0 R15: 00007ffc350dcc18 [ 608.344685][T25166] [ 608.344760][T25166] Mem-Info: [ 608.658028][T25166] active_anon:4792 inactive_anon:0 isolated_anon:0 [ 608.658028][T25166] active_file:3217 inactive_file:40061 isolated_file:0 [ 608.658028][T25166] unevictable:768 dirty:136 writeback:0 [ 608.658028][T25166] slab_reclaimable:13149 slab_unreclaimable:141212 [ 608.658028][T25166] mapped:29184 shmem:1355 pagetables:1266 [ 608.658028][T25166] sec_pagetables:0 bounce:0 [ 608.658028][T25166] kernel_misc_reclaimable:0 [ 608.658028][T25166] free:1263884 free_pcp:31534 free_cma:0 [ 608.704455][T25166] Node 0 active_anon:19168kB inactive_anon:0kB active_file:12868kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116736kB dirty:540kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14860kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 608.738298][T25166] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 608.784260][T25166] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.815531][T25166] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 608.843220][T25166] Node 0 DMA32 free:1144656kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19020kB inactive_anon:0kB active_file:12868kB inactive_file:158232kB unevictable:1536kB writepending:540kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:112988kB local_pcp:88960kB free_cma:0kB [ 608.892576][T25166] lowmem_reserve[]: 0 0 1 1 1 [ 608.897618][T25166] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 609.008855][T25166] lowmem_reserve[]: 0 0 0 0 0 [ 609.032537][T25166] Node 1 Normal free:3895948kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13164kB local_pcp:7820kB free_cma:0kB [ 609.087746][T25166] lowmem_reserve[]: 0 0 0 0 0 [ 609.105424][T25166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 609.127965][T25166] Node 0 DMA32: 2355*4kB (UME) 1242*8kB (UM) 476*16kB (UM) 443*32kB (UME) 128*64kB (UM) 33*128kB (UME) 20*256kB (UME) 12*512kB (UME) 8*1024kB (UME) 5*2048kB (UM) 259*4096kB (M) = 1144124kB [ 609.164140][T25200] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 609.173250][T25200] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 609.183280][T25166] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 609.197111][T25166] Node 1 Normal: 203*4kB (UM) 56*8kB (UME) 46*16kB (UME) 192*32kB (UME) 61*64kB (UME) 15*128kB (UME) 6*256kB (UME) 5*512kB (UM) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3895948kB [ 609.216009][T25200] __nla_validate_parse: 20 callbacks suppressed [ 609.216038][T25200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5634'. [ 609.232961][T25166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.265588][T25166] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 609.275319][T25166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.285869][T25203] wg2: entered promiscuous mode [ 609.287702][T25166] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 609.290871][T25203] wg2: entered allmulticast mode [ 609.300212][T25166] 44629 total pagecache pages [ 609.300228][T25166] 0 pages in swap cache [ 609.300236][T25166] Free swap = 124996kB [ 609.300245][T25166] Total swap = 124996kB [ 609.300256][T25166] 2097051 pages RAM [ 609.300265][T25166] 0 pages HighMem/MovableOnly [ 609.300273][T25166] 424452 pages reserved [ 609.300281][T25166] 0 pages cma reserved [ 609.545724][T25216] bond6 (unregistering): Released all slaves [ 609.549763][T25229] netlink: 'syz.3.5643': attribute type 1 has an invalid length. [ 609.641641][T25229] 8021q: adding VLAN 0 to HW filter on device bond7 [ 609.831528][T25245] xt_ecn: cannot match TCP bits for non-tcp packets [ 609.957247][T25256] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5647'. [ 609.979582][T25256] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5647'. [ 609.990771][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5647'. [ 609.999446][T25257] lo speed is unknown, defaulting to 1000 [ 610.131975][T25269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5656'. [ 610.249342][T25257] lo speed is unknown, defaulting to 1000 [ 610.257254][T25257] batadv0 speed is unknown, defaulting to 1000 [ 610.323816][T25277] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5659'. [ 610.573548][T25288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5663'. [ 610.784862][T25294] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 610.801866][T25296] IPVS: length: 211 != 8 [ 610.839331][T25294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5665'. [ 610.840662][T25298] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5666'. [ 610.910466][T25305] tipc: Enabled bearer , priority 0 [ 610.918214][T25305] syzkaller0: entered promiscuous mode [ 610.924787][T25305] syzkaller0: entered allmulticast mode [ 610.934424][T25307] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5665'. [ 610.968322][T25309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.973333][T25305] tipc: Resetting bearer [ 610.987976][T25304] tipc: Resetting bearer [ 611.012359][T25304] tipc: Disabling bearer [ 611.026146][T25309] xfrm2: entered allmulticast mode [ 611.134308][T25318] tipc: Failed to remove unknown binding: 66,1,1/0:2216944901/2216944903 [ 611.266510][T25330] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 611.274951][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 611.355580][T25326] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 611.406173][T25338] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 611.423398][T25338] bond6 (unregistering): Released all slaves [ 611.591919][T25347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.640431][T25352] netlink: 'syz.0.5683': attribute type 6 has an invalid length. [ 611.775770][T25358] netlink: 'syz.0.5685': attribute type 1 has an invalid length. [ 611.785099][T25358] netlink: 'syz.0.5685': attribute type 10 has an invalid length. [ 611.805104][T25358] !: entered promiscuous mode [ 611.810113][T25358] !: entered allmulticast mode [ 611.816367][T25358] team0: Port device 0! added [ 611.882678][T25361] gretap0: entered promiscuous mode [ 611.899522][T25364] 0ªî{X¹¦: renamed from gretap0 [ 611.907459][T25364] 0ªî{X¹¦: left promiscuous mode [ 611.913944][T25364] 0ªî{X¹¦: entered allmulticast mode [ 611.921016][T25364] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 612.519845][T25393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.602143][T25393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.062215][T25410] 8021q: adding VLAN 0 to HW filter on device bond8 [ 613.504477][T25449] bond0: entered promiscuous mode [ 613.526363][T25449] bond0: entered allmulticast mode [ 613.550018][T25449] bridge0: entered allmulticast mode [ 613.590524][T25449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.645847][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.655460][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.665945][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.692490][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.706400][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.937429][T25460] lo speed is unknown, defaulting to 1000 [ 613.984885][T25477] netlink: 'syz.1.5718': attribute type 1 has an invalid length. [ 614.067777][T25483] nbd: must specify a device to reconfigure [ 614.421112][T25460] lo speed is unknown, defaulting to 1000 [ 614.446722][T25460] batadv0 speed is unknown, defaulting to 1000 [ 614.461379][T25508] netlink: 'syz.4.5727': attribute type 10 has an invalid length. [ 614.579858][T25514] __nla_validate_parse: 20 callbacks suppressed [ 614.579876][T25514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5728'. [ 614.817429][T25531] sctp: [Deprecated]: syz.4.5731 (pid 25531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.817429][T25531] Use struct sctp_sack_info instead [ 614.893135][T25533] sctp: [Deprecated]: syz.3.5732 (pid 25533) Use of int in maxseg socket option. [ 614.893135][T25533] Use struct sctp_assoc_value instead [ 615.030987][T25460] chnl_net:caif_netlink_parms(): no params data found [ 615.218078][T25460] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.226022][T25460] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.234291][T25460] bridge_slave_0: entered allmulticast mode [ 615.242294][T25460] bridge_slave_0: entered promiscuous mode [ 615.251728][T25460] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.259264][T25460] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.266879][T25460] bridge_slave_1: entered allmulticast mode [ 615.275366][T25460] bridge_slave_1: entered promiscuous mode [ 615.362353][T25460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.397225][T25460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.490700][T25566] netlink: 'syz.1.5742': attribute type 10 has an invalid length. [ 615.520639][T25566] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.528803][T25566] bridge_slave_1: left allmulticast mode [ 615.534662][T25566] bridge_slave_1: left promiscuous mode [ 615.540579][T25566] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.552089][T25566] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 615.571898][T25460] team0: Port device team_slave_0 added [ 615.588896][T25460] team0: Port device team_slave_1 added [ 615.656216][T25460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.673473][T25460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.709834][T25460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.769859][T25460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.785932][T25460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.815362][ T5837] Bluetooth: hci0: command tx timeout [ 615.841462][T25460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.931966][T25587] tipc: Enabling of bearer rejected, failed to enable media [ 615.959965][T25460] hsr_slave_0: entered promiscuous mode [ 615.978507][T25460] hsr_slave_1: entered promiscuous mode [ 616.379225][T25460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.421122][T25460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.454811][T25460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 616.675496][T25460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.699046][T25460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.720512][T25460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 616.802663][T25624] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5755'. [ 616.814159][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 616.822205][T25624] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5755'. [ 616.839490][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 616.858516][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 616.866823][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 616.878047][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 616.900295][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 616.921450][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 616.932324][T25460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.947694][T25460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.958428][T25460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 616.978944][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 616.988902][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 616.997048][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 617.009350][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 617.018209][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5756'. [ 617.030333][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'. [ 617.043134][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 617.066002][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 617.111574][T25626] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 617.331045][T25460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 617.376108][T25460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 617.422379][T25650] bond3 (unregistering): Released all slaves [ 617.459888][T25460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 617.554974][T25460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 617.739583][T25680] ksmbd: Unknown IPC event: 3, ignore. [ 617.900936][T25460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.909083][ T5837] Bluetooth: hci0: command tx timeout [ 617.979972][T25460] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.007946][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.015162][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.037449][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.044670][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.302391][T25460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.348042][T25460] veth0_vlan: entered promiscuous mode [ 618.358907][T25460] veth1_vlan: entered promiscuous mode [ 618.388383][T25460] veth0_macvtap: entered promiscuous mode [ 618.398763][T25460] veth1_macvtap: entered promiscuous mode [ 618.416940][T25460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.430986][T25460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.447356][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.456777][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.468114][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.477082][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.705841][T21132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.723760][T21132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.878957][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.894099][T25721] lo speed is unknown, defaulting to 1000 [ 618.907084][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.066501][T25733] veth7: entered allmulticast mode [ 619.225160][T25721] lo speed is unknown, defaulting to 1000 [ 619.232776][T25721] batadv0 speed is unknown, defaulting to 1000 [ 619.673422][T25768] tipc: Enabled bearer , priority 0 [ 619.685664][T25768] syzkaller0: entered promiscuous mode [ 619.691172][T25768] syzkaller0: entered allmulticast mode [ 619.754499][T25772] __nla_validate_parse: 30 callbacks suppressed [ 619.754519][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5793'. [ 619.775811][T25768] tipc: Resetting bearer [ 619.790937][T25770] openvswitch: netlink: Key type 29 is not supported [ 619.798488][T25766] tipc: Resetting bearer [ 619.883430][T25766] tipc: Disabling bearer [ 619.930794][T25770] veth1_macvtap: left promiscuous mode [ 619.973306][ T5145] Bluetooth: hci0: command tx timeout [ 620.109071][T25792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5798'. [ 620.123239][T25790] syzkaller1: entered promiscuous mode [ 620.157890][T25790] syzkaller1: entered allmulticast mode [ 620.278043][T25804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5802'. [ 620.444705][T25824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 620.601887][T25830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5810'. [ 620.852262][T25845] xt_l2tp: missing protocol rule (udp|l2tpip) [ 620.883837][T25849] xt_l2tp: missing protocol rule (udp|l2tpip) [ 621.664056][T25907] x_tables: duplicate underflow at hook 1 [ 621.670551][T25907] x_tables: duplicate underflow at hook 3 [ 621.713464][T25914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5835'. [ 622.053127][ T5145] Bluetooth: hci0: command 0x0419 tx timeout [ 622.232145][T25946] validate_nla: 25 callbacks suppressed [ 622.232163][T25946] netlink: 'syz.0.5844': attribute type 3 has an invalid length. [ 622.246287][T25946] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5844'. [ 622.368412][T25949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5845'. [ 622.531987][T25962] netlink: 'syz.1.5848': attribute type 4 has an invalid length. [ 622.557053][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5847'. [ 622.562102][T25962] batadv_slave_0: left allmulticast mode [ 622.885314][T25990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5855'. [ 623.547838][T26034] tap0: tun_chr_ioctl cmd 1074025673 [ 623.555443][T26040] tap0: tun_chr_ioctl cmd 1074025676 [ 623.561175][T26040] tap0: owner set to 0 [ 623.697872][T26048] netlink: 'syz.4.5872': attribute type 10 has an invalid length. [ 623.723225][T26048] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 624.075149][T26073] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 624.096646][T26074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.134025][ T5837] Bluetooth: hci0: command 0x0419 tx timeout [ 624.175120][T26081] veth0: entered promiscuous mode [ 624.183083][T26081] veth0: left promiscuous mode [ 624.205907][T26081] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 624.350328][T26090] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 624.362216][T26090] openvswitch: netlink: Message has 4 unknown bytes. [ 624.375174][T26090] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 624.559546][T26114] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 624.859758][T26143] __nla_validate_parse: 6 callbacks suppressed [ 624.859779][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5902'. [ 624.982154][T26148] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5904'. [ 624.993931][T26148] netlink: zone id is out of range [ 624.999113][T26148] netlink: zone id is out of range [ 625.004758][T26148] netlink: zone id is out of range [ 625.010399][T26148] netlink: zone id is out of range [ 625.018072][T26156] netlink: 'syz.1.5905': attribute type 12 has an invalid length. [ 625.026584][T26148] netlink: zone id is out of range [ 625.032256][T26148] netlink: zone id is out of range [ 625.038326][T26148] netlink: zone id is out of range [ 625.040741][T26160] netlink: 'syz.1.5905': attribute type 7 has an invalid length. [ 625.049456][T26148] netlink: zone id is out of range [ 625.060717][T26148] netlink: del zone limit has 4 unknown bytes [ 625.087577][T26163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5906'. [ 625.140489][T26157] lo speed is unknown, defaulting to 1000 [ 625.346635][T26174] x_tables: duplicate underflow at hook 3 [ 625.423390][T26178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5910'. [ 625.530303][T26157] lo speed is unknown, defaulting to 1000 [ 625.539305][T26157] batadv0 speed is unknown, defaulting to 1000 [ 625.591005][T26183] IPVS: Error connecting to the multicast addr [ 625.701561][T26195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5917'. [ 625.724656][T26195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5917'. [ 625.874865][T26202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5920'. [ 625.934029][T26204] º: renamed from veth1_vlan [ 626.128029][T26218] pimreg: entered allmulticast mode [ 626.264317][T26232] tipc: Enabling of bearer rejected, media not registered [ 626.374125][T26234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5929'. [ 626.553217][T26246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5933'. [ 626.950354][T26269] pim6reg525: entered allmulticast mode [ 627.264303][T26278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5946'. [ 627.439771][T26283] IPVS: Error connecting to the multicast addr [ 627.524265][T26285] bond6: option all_slaves_active: invalid value (222) [ 627.566658][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 627.579560][T26285] bond6 (unregistering): Released all slaves [ 627.581007][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 627.597447][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 627.609260][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 627.623389][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 627.652186][T26293] veth0_to_bond: entered allmulticast mode [ 627.714116][T26289] lo speed is unknown, defaulting to 1000 [ 627.898717][T26304] netlink: 'syz.0.5953': attribute type 62 has an invalid length. [ 628.117952][T15779] batadv0 speed is unknown, defaulting to 1000 [ 628.207875][T26289] lo speed is unknown, defaulting to 1000 [ 628.270931][T26289] batadv0 speed is unknown, defaulting to 1000 [ 628.379057][T26335] netlink: 'syz.0.5964': attribute type 11 has an invalid length. [ 628.458067][T26336] netlink: 'syz.4.5963': attribute type 1 has an invalid length. [ 628.550161][T26343] netlink: 'syz.4.5963': attribute type 10 has an invalid length. [ 628.611192][T26346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.635064][T26343] geneve1: entered promiscuous mode [ 628.641723][T26343] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 628.741149][T26289] chnl_net:caif_netlink_parms(): no params data found [ 629.010485][T26377] rdma_rxe: rxe_newlink: failed to add bond0 [ 629.045606][T26289] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.054030][T26289] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.061325][T26289] bridge_slave_0: entered allmulticast mode [ 629.069896][T26289] bridge_slave_0: entered promiscuous mode [ 629.080874][T26289] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.088765][T26289] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.096582][T26289] bridge_slave_1: entered allmulticast mode [ 629.104560][T26289] bridge_slave_1: entered promiscuous mode [ 629.188592][T26289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.235423][T26289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.314235][T26289] team0: Port device team_slave_0 added [ 629.335335][T26289] team0: Port device team_slave_1 added [ 629.487370][T26289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.497082][T26289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.530227][T26289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.561065][T26289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.577582][T26289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.611542][T26289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.652926][ T5837] Bluetooth: hci4: command tx timeout [ 629.839873][T26289] hsr_slave_0: entered promiscuous mode [ 629.852365][T26289] hsr_slave_1: entered promiscuous mode [ 629.887795][T26289] debugfs: 'hsr0' already exists in 'hsr' [ 629.907090][T26289] Cannot create hsr debugfs directory [ 629.940775][T26435] __nla_validate_parse: 5 callbacks suppressed [ 629.940793][T26435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5992'. [ 629.969755][T26428] syzkaller1: entered promiscuous mode [ 629.975796][T26428] syzkaller1: entered allmulticast mode [ 630.004275][T26435] xt_ecn: cannot match TCP bits for non-tcp packets [ 630.199721][T26442] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5994'. [ 630.221709][T26447] tipc: Enabling of bearer rejected, failed to enable media [ 630.277519][T26443] lo speed is unknown, defaulting to 1000 [ 630.575732][T26443] lo speed is unknown, defaulting to 1000 [ 630.584119][T26443] batadv0 speed is unknown, defaulting to 1000 [ 630.697902][T26464] Bluetooth: MGMT ver 1.23 [ 630.717515][T26465] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 630.847015][T26470] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6004'. [ 630.949427][T26481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6007'. [ 631.264819][T26489] bond14: option packets_per_slave: invalid value (18446744073709551615) [ 631.282792][T26489] bond14: option packets_per_slave: allowed values 0 - 65535 [ 631.306086][T26489] bond14 (unregistering): Released all slaves [ 631.403904][T26481] syzkaller0: entered promiscuous mode [ 631.409430][T26481] syzkaller0: entered allmulticast mode [ 631.617061][T26289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.655309][T26289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.690097][T26289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 631.708360][T26289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 631.732957][ T5837] Bluetooth: hci4: command tx timeout [ 631.986446][T26289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.087304][T26289] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.131346][T17008] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.138662][T17008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.172971][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.180172][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.264556][T26549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6025'. [ 632.309180][T26549] netlink: 'syz.4.6025': attribute type 1 has an invalid length. [ 632.589938][T26564] vlan0: entered promiscuous mode [ 632.619250][T26564] vlan0: entered allmulticast mode [ 632.630239][T26564] veth0_vlan: entered allmulticast mode [ 632.805888][T26289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.849492][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 632.865323][T26583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6033'. [ 632.883146][T26583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6033'. [ 632.958869][T26587] C: renamed from team_slave_0 (while UP) [ 632.979247][T26587] netlink: 'syz.0.6034': attribute type 1 has an invalid length. [ 633.009244][T26587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 633.037294][T26591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.056312][T26289] veth0_vlan: entered promiscuous mode [ 633.065376][T26586] netlink: 'syz.0.6034': attribute type 1 has an invalid length. [ 633.074046][T26586] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 633.105600][T26289] veth1_vlan: entered promiscuous mode [ 633.185480][T26289] veth0_macvtap: entered promiscuous mode [ 633.211200][T26289] veth1_macvtap: entered promiscuous mode [ 633.258147][T26603] tipc: Enabled bearer , priority 0 [ 633.270465][T26605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6041'. [ 633.281157][T26603] syzkaller0: entered promiscuous mode [ 633.288951][T26603] syzkaller0: entered allmulticast mode [ 633.315376][T26603] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 633.339686][T26289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.370295][T26603] tipc: Resetting bearer [ 633.388351][T26289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.392687][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6040'. [ 633.437934][T21132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.449974][T21132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.478089][T21132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.504391][T26602] tipc: Resetting bearer [ 633.546073][T26602] tipc: Disabling bearer [ 633.568523][T21132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.791591][T17008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.813113][ T5837] Bluetooth: hci4: command tx timeout [ 633.819875][T17008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.862284][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.874598][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.927219][T26638] netlink: 'syz.4.6049': attribute type 7 has an invalid length. [ 633.942236][T26638] netlink: 'syz.4.6049': attribute type 8 has an invalid length. [ 634.085298][T26605] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 634.221903][T26653] netlink: 'syz.2.6054': attribute type 1 has an invalid length. [ 634.944026][T26690] netlink: 'syz.0.6063': attribute type 1 has an invalid length. [ 634.961976][T26690] __nla_validate_parse: 3 callbacks suppressed [ 634.961995][T26690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6063'. [ 635.054662][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.068526][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.084353][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.093651][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.110099][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.225799][T26706] netlink: 'syz.0.6065': attribute type 1 has an invalid length. [ 635.285182][T26666] team0 (unregistering): Port device team_slave_0 removed [ 635.317807][T26666] team0 (unregistering): Port device team_slave_1 removed [ 635.379735][T26713] tipc: Enabling of bearer rejected, media not registered [ 635.447464][T26718] veth3: entered promiscuous mode [ 635.468398][T26720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6069'. [ 635.610220][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'. [ 635.623060][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6071'. [ 635.649066][ T1154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.664395][ T1154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 635.800126][ T1154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.823089][ T1154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 635.870376][T26693] lo speed is unknown, defaulting to 1000 [ 635.905324][ T5837] Bluetooth: hci4: command tx timeout [ 635.915036][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6076'. [ 636.026730][ T1154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.068144][ T1154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 636.098764][T26750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6080'. [ 636.107864][T26752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6081'. [ 636.362729][T26693] lo speed is unknown, defaulting to 1000 [ 636.370329][T26693] batadv0 speed is unknown, defaulting to 1000 [ 636.521102][T26773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6087'. [ 636.781137][T26790] netlink: 'syz.2.6094': attribute type 1 has an invalid length. [ 636.944608][T26781] syzkaller0: entered allmulticast mode [ 637.134359][ T1154] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 637.144570][ T1154] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ae:f9:06:c2:22:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 637.183205][ T5837] Bluetooth: hci3: command tx timeout [ 638.218010][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.228940][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.239394][ T1154] bond0 (unregistering): Released all slaves [ 638.252198][ T1154] bond1 (unregistering): Released all slaves [ 638.265479][ T1154] bond2 (unregistering): (slave veth5): Releasing backup interface [ 638.275836][ T1154] bond2 (unregistering): Released all slaves [ 638.399419][ T1154] bond3 (unregistering): Released all slaves [ 638.512753][ T1154] bond4 (unregistering): Released all slaves [ 638.621450][ T1154] bond5 (unregistering): Released all slaves [ 638.635441][ T1154] bond6 (unregistering): Released all slaves [ 638.746547][ T1154] bond7 (unregistering): Released all slaves [ 638.859212][ T1154] bond8 (unregistering): Released all slaves [ 639.254955][ T5837] Bluetooth: hci3: command tx timeout [ 640.712192][ T1154] tipc: Disabling bearer [ 640.719249][ T1154] tipc: Left network mode [ 640.768998][T26693] chnl_net:caif_netlink_parms(): no params data found [ 640.936573][T26835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6102'. [ 641.159470][T26849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6109'. [ 641.181852][T26693] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.197580][T26693] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.214085][T26693] bridge_slave_0: entered allmulticast mode [ 641.229829][T26693] bridge_slave_0: entered promiscuous mode [ 641.262311][T26693] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.285162][T26693] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.295479][T26693] bridge_slave_1: entered allmulticast mode [ 641.313694][T26693] bridge_slave_1: entered promiscuous mode [ 641.336211][ T5837] Bluetooth: hci3: command tx timeout [ 641.399829][T26853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6110'. [ 641.540753][T26693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.550843][T26861] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 641.568842][T26863] netlink: 'syz.2.6113': attribute type 29 has an invalid length. [ 641.578969][T26864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6110'. [ 641.591059][T26863] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6113'. [ 641.633601][T26693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.646108][T26867] netlink: 'syz.2.6113': attribute type 29 has an invalid length. [ 641.774333][T26875] netlink: zone id is out of range [ 641.779510][T26875] netlink: zone id is out of range [ 641.788553][T26874] netlink: zone id is out of range [ 641.801714][T26874] netlink: zone id is out of range [ 641.948874][ T1154] hsr_slave_0: left promiscuous mode [ 641.960759][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.021347][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.038152][ T5829] IPVS: starting estimator thread 0... [ 642.048096][ T1154] batman_adv: batadv0: Removing interface: team0 [ 642.084739][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6123'. [ 642.131041][T26897] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20001 [ 642.141766][T26890] IPVS: using max 39 ests per chain, 93600 per kthread [ 642.664499][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 642.708013][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 643.057401][T26693] team0: Port device team_slave_0 added [ 643.067421][T26693] team0: Port device team_slave_1 added [ 643.113097][ T5829] batadv0 speed is unknown, defaulting to 1000 [ 643.119328][ T5829] infiniband syz1: ib_query_port failed (-19) [ 643.126707][T26913] netlink: 'syz.4.6127': attribute type 4 has an invalid length. [ 643.247420][T26693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.286556][T26693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.338399][T26693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.371325][T26693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.382168][T26693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.421119][ T5837] Bluetooth: hci3: command tx timeout [ 643.460299][T26693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.581471][T26933] lo: entered promiscuous mode [ 643.593606][T26933] netlink: 'syz.0.6132': attribute type 2 has an invalid length. [ 643.601796][T26933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.699739][T26693] hsr_slave_0: entered promiscuous mode [ 643.719654][T26693] hsr_slave_1: entered promiscuous mode [ 643.759562][T26693] debugfs: 'hsr0' already exists in 'hsr' [ 643.782648][T26693] Cannot create hsr debugfs directory [ 644.030850][ T1154] IPVS: stop unused estimator thread 0... [ 644.099006][T26967] netlink: 'syz.2.6139': attribute type 2 has an invalid length. [ 644.116999][T26967] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6139'. [ 644.117968][T26965] xt_nat: multiple ranges no longer supported [ 644.199608][ T1154] ------------[ cut here ]------------ [ 644.205288][ T1154] WARNING: CPU: 1 PID: 1154 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 644.215244][ T1154] Modules linked in: [ 644.219494][ T1154] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 644.229058][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.239356][ T1154] Workqueue: netns cleanup_net [ 644.244206][ T1154] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 644.249767][ T1154] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8b a9 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 56 19 f8 e8 74 ff d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 ff d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 644.271569][ T1154] RSP: 0018:ffffc900041df878 EFLAGS: 00010293 [ 644.278424][ T1154] RAX: ffffffff89eb1bfc RBX: ffff88805643a480 RCX: ffff888026ca5ac0 [ 644.286850][ T1154] RDX: 0000000000000000 RSI: ffffffff8d9c68e1 RDI: ffff888026ca5ac0 [ 644.295218][ T1154] RBP: ffffc900041df990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 644.304173][ T1154] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 644.312648][ T1154] R13: 1ffff9200083bf3c R14: ffff88805643b940 R15: dffffc0000000000 [ 644.321160][ T1154] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 644.330507][ T1154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.337500][ T1154] CR2: 00007fddc768c440 CR3: 000000007eaae000 CR4: 00000000003526f0 [ 644.345992][ T1154] Call Trace: [ 644.349293][ T1154] [ 644.352241][ T1154] xfrm_net_exit+0x2d/0x70 [ 644.356936][ T1154] ops_undo_list+0x49a/0x990 [ 644.361566][ T1154] ? __pfx_ops_undo_list+0x10/0x10 [ 644.367165][ T1154] ? do_raw_spin_unlock+0x122/0x240 [ 644.372790][ T1154] cleanup_net+0x4d8/0x820 [ 644.377249][ T1154] ? __pfx_cleanup_net+0x10/0x10 [ 644.382222][ T1154] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.387498][ T1154] ? process_scheduled_works+0x9ef/0x17b0 [ 644.393333][ T1154] ? process_scheduled_works+0x9ef/0x17b0 [ 644.399095][ T1154] process_scheduled_works+0xade/0x17b0 [ 644.404783][ T1154] ? __pfx_process_scheduled_works+0x10/0x10 [ 644.410781][ T1154] worker_thread+0x8a0/0xda0 [ 644.415606][ T1154] kthread+0x711/0x8a0 [ 644.419869][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 644.425157][ T1154] ? __pfx_kthread+0x10/0x10 [ 644.429786][ T1154] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.435072][ T1154] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.440289][ T1154] ? __pfx_kthread+0x10/0x10 [ 644.444992][ T1154] ret_from_fork+0x4b9/0x870 [ 644.449616][ T1154] ? __pfx_ret_from_fork+0x10/0x10 [ 644.455016][ T1154] ? __switch_to_asm+0x39/0x70 [ 644.459829][ T1154] ? __switch_to_asm+0x33/0x70 [ 644.464706][ T1154] ? __pfx_kthread+0x10/0x10 [ 644.469664][ T1154] ret_from_fork_asm+0x1a/0x30 [ 644.474977][ T1154] [ 644.478043][ T1154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 644.485349][ T1154] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 644.495005][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.505083][ T1154] Workqueue: netns cleanup_net [ 644.509900][ T1154] Call Trace: [ 644.513198][ T1154] [ 644.516146][ T1154] dump_stack_lvl+0x99/0x250 [ 644.520761][ T1154] ? __asan_memcpy+0x40/0x70 [ 644.525381][ T1154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.530616][ T1154] ? __pfx__printk+0x10/0x10 [ 644.535278][ T1154] vpanic+0x281/0x750 [ 644.539301][ T1154] ? __pfx__printk+0x10/0x10 [ 644.543930][ T1154] ? __pfx_vpanic+0x10/0x10 [ 644.548490][ T1154] ? is_bpf_text_address+0x292/0x2b0 [ 644.553860][ T1154] panic+0xb9/0xc0 [ 644.557713][ T1154] ? __pfx_panic+0x10/0x10 [ 644.562188][ T1154] __warn+0x31b/0x4b0 [ 644.566214][ T1154] ? xfrm_state_fini+0x26d/0x2f0 [ 644.571176][ T1154] ? xfrm_state_fini+0x26d/0x2f0 [ 644.576138][ T1154] report_bug+0x2be/0x4f0 [ 644.580507][ T1154] ? xfrm_state_fini+0x26d/0x2f0 [ 644.585474][ T1154] ? xfrm_state_fini+0x26d/0x2f0 [ 644.590420][ T1154] ? xfrm_state_fini+0x26f/0x2f0 [ 644.595447][ T1154] handle_bug+0x84/0x160 [ 644.599684][ T1154] exc_invalid_op+0x1a/0x50 [ 644.604175][ T1154] asm_exc_invalid_op+0x1a/0x20 [ 644.609014][ T1154] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 644.614548][ T1154] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8b a9 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 56 19 f8 e8 74 ff d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 ff d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 644.634153][ T1154] RSP: 0018:ffffc900041df878 EFLAGS: 00010293 [ 644.640321][ T1154] RAX: ffffffff89eb1bfc RBX: ffff88805643a480 RCX: ffff888026ca5ac0 [ 644.648577][ T1154] RDX: 0000000000000000 RSI: ffffffff8d9c68e1 RDI: ffff888026ca5ac0 [ 644.656551][ T1154] RBP: ffffc900041df990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 644.664530][ T1154] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 644.672760][ T1154] R13: 1ffff9200083bf3c R14: ffff88805643b940 R15: dffffc0000000000 [ 644.680773][ T1154] ? xfrm_state_fini+0x26c/0x2f0 [ 644.685728][ T1154] ? xfrm_state_fini+0x26c/0x2f0 [ 644.690670][ T1154] xfrm_net_exit+0x2d/0x70 [ 644.695082][ T1154] ops_undo_list+0x49a/0x990 [ 644.699675][ T1154] ? __pfx_ops_undo_list+0x10/0x10 [ 644.704788][ T1154] ? do_raw_spin_unlock+0x122/0x240 [ 644.710006][ T1154] cleanup_net+0x4d8/0x820 [ 644.714424][ T1154] ? __pfx_cleanup_net+0x10/0x10 [ 644.719352][ T1154] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.724546][ T1154] ? process_scheduled_works+0x9ef/0x17b0 [ 644.730266][ T1154] ? process_scheduled_works+0x9ef/0x17b0 [ 644.735995][ T1154] process_scheduled_works+0xade/0x17b0 [ 644.741570][ T1154] ? __pfx_process_scheduled_works+0x10/0x10 [ 644.747563][ T1154] worker_thread+0x8a0/0xda0 [ 644.752192][ T1154] kthread+0x711/0x8a0 [ 644.756347][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 644.761536][ T1154] ? __pfx_kthread+0x10/0x10 [ 644.766118][ T1154] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.771316][ T1154] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.776536][ T1154] ? __pfx_kthread+0x10/0x10 [ 644.781127][ T1154] ret_from_fork+0x4b9/0x870 [ 644.785729][ T1154] ? __pfx_ret_from_fork+0x10/0x10 [ 644.790875][ T1154] ? __switch_to_asm+0x39/0x70 [ 644.795648][ T1154] ? __switch_to_asm+0x33/0x70 [ 644.800433][ T1154] ? __pfx_kthread+0x10/0x10 [ 644.805040][ T1154] ret_from_fork_asm+0x1a/0x30 [ 644.809841][ T1154] [ 644.813205][ T1154] Kernel Offset: disabled [ 644.817929][ T1154] Rebooting in 86400 seconds..