last executing test programs: 3.131770107s ago: executing program 4 (id=2665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0x8, 0xa, {{0x27, 0x4, 0x1, 0xf, 0x9c, 0x64, 0x0, 0x4, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @generic={0x89, 0xe, "d6b248d02398d43162846bdc"}, @timestamp={0x44, 0x24, 0xaa, 0x0, 0xf, [0x1, 0x4bf, 0x3c2497ca, 0x3, 0x1, 0xca, 0x3, 0x10]}, @end, @timestamp={0x44, 0x28, 0x4c, 0x0, 0x2, [0x59, 0xe4, 0xf7d5, 0x2, 0x2, 0xeaab, 0x9, 0x4, 0x4]}, @ssrr={0x89, 0xb, 0x1a, [@multicast1, @broadcast]}, @cipso={0x86, 0x17, 0x3, [{0x0, 0x3, "ae"}, {0x0, 0xe, "842d6da7e7168cd3249089aa"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8002300}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) syz_emit_ethernet(0xde, &(0x7f0000000080)=ANY=[], 0x0) 3.028575458s ago: executing program 4 (id=2668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010000d0400"/20, @ANYRES32=r2, @ANYRES8=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001400)=ANY=[@ANYBLOB="20000000120001000000020000000000070001"], 0x20}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a60000000060a0b04661f794a000000000200000034000480300001800b0001006c6f6f6b75700000200002800900010073797a30000000000800054000000000080003400000001d0900010073797a30000000000900020073797a32"], 0x88}}, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @dev}, 0x107}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2.917792436s ago: executing program 4 (id=2670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1], 0x40}}, 0x24008810) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.73247826s ago: executing program 3 (id=2671): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.635735096s ago: executing program 3 (id=2672): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0x200, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x20000802}, 0x20000050) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x484d}, 0xb0b56cb0067515e1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000780000000000019078ac1e0001ac1414aa04009078030000004700000000000000002f0000ac141400ac1414bb0144440001ac1428bb00000000ac1414bb00000000ac141420000000000000000000000000e000000200000000ac1414aa00000000ac1414aa00000000e000000100000000000000"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000440)={{r1}, 0x0, 0x6, @inherit={0x90, &(0x7f0000000280)={0x1, 0x9, 0x9, 0x4f5, {0x2c, 0x7fffffffffffffff, 0x79c, 0x8000, 0x3}, [0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4, 0x3, 0x35d8, 0x0, 0xee]}}, @name="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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000010000000000f8850000"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f19679239a4593bf3b62a368248682722ea1d1fe86387bc45af34cfd1bd4227840be804f5c39bd75db9ea6e6be24c0455649f7ea1bd958b47d21ea865a18375a69ea07eb5ccf3d82788d9700fd6bf3e00081f76d991723fe5960202534a0ef1142e4a9452037a7a0b05d2707548e0c5d62faacca92e9b1eb9b0dba316f0a75f280ef9b2264d02f93864ab0ad8590a9454243362ea6ce10bf95243af12df8a837ded1a03a5c6d054595b"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000100001302002694689ff1de129e457674000003000000000000000000000000000000c4951fb5b27c06428aeafbb2b3247ffa98ce6edcb34d6b5dc2ee549d6b05ecb44717e4fa9b042745bf021a"], 0x0, 0x34}, 0x20) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r9 = accept4$unix(r7, 0x0, 0x0, 0x800) recvfrom$unix(r9, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r11, 0x203, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}}, 0x0) 2.602754879s ago: executing program 3 (id=2673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 2.53837617s ago: executing program 3 (id=2674): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0xf401, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) close(0x3) 2.077430025s ago: executing program 2 (id=2679): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) splice(0xffffffffffffffff, &(0x7f0000000180), 0xffffffffffffffff, &(0x7f00000001c0)=0x1000, 0xffffffffffffff80, 0x5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000340)=""/211, 0xd3}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000021420f000000000000010005"], 0x3c}, 0x1, 0x0, 0x0, 0x404c880}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000ffff1e0000000001ffffffff", @ANYRES32=r1, @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.994327538s ago: executing program 1 (id=2681): r0 = socket(0x10, 0x3, 0x80000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) 1.957194462s ago: executing program 2 (id=2682): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r1 = socket(0x2b, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async) close(0x4) 1.835612664s ago: executing program 1 (id=2684): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="6f585aa190c8906ddc"], 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000fa0b0018"], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYBLOB="07002abd5248ffdbdf2507"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ppoll(&(0x7f0000000600)=[{r0, 0x81a0}, {r0, 0x4}, {r5, 0x80e3}, {r2, 0x4001}, {r6, 0x2000}, {r7}, {r2, 0xa0}, {r2, 0x4}, {r9, 0x84}], 0x9, &(0x7f00000006c0)={r10, r11+10000000}, &(0x7f0000000700)={[0x1]}, 0x8) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r5, 0x0) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}], @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x4, 0x1}, {0x2, 0x1}, {0x24}, {0x5, 0x1}, {0x24, 0x1}, {0x60, 0x1}, {0x16}, {0x12, 0x1}, {0x12, 0x1}, {0x18}, {0x36, 0x1}, {0x36}, {0x6}, {0x6, 0x1}, {0x24}, {0x1}, {0x2}, {0x60, 0x1}, {0x12}, {0x16, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x12, 0x1}, {0x18}, {0xc}, {0x24}, {0x1b, 0x1}, {0x3, 0x1}, {0x1, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004002}, 0x4040005) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r3, 0x0, 0xd88d02a0}, 0x38) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x4004}, 0x4000854) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000060a0b0c000000000000000002000000140000001100010000000000000000000000000a0000000000000000"], 0x3c}}, 0x0) 1.671742866s ago: executing program 4 (id=2686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x6}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x6}]}, &(0x7f0000000100)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x34, 0x0, &(0x7f0000000040)=0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)={0x10}, 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)={0x10}, 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000001600), &(0x7f0000001680)=0x4) (async) getsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000001600), &(0x7f0000001680)=0x4) connect$bt_l2cap(r1, &(0x7f00000016c0)={0x1f, 0x8, @any, 0x9, 0x1}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f00000016c0)={0x1f, 0x8, @any, 0x9, 0x1}, 0xe) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) recvmsg$unix(r4, &(0x7f0000000240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}, {&(0x7f00000012c0)=""/209, 0xd1}, {&(0x7f00000013c0)=""/182, 0xb6}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000001640)=""/19, 0x13}], 0x7, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10000) shutdown(r3, 0x2) 1.655657003s ago: executing program 1 (id=2687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000380), 0x12) write$cgroup_pid(r0, &(0x7f0000000200), 0x12) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mr_dereg\x00', 0xffffffffffffffff, 0x0, 0x62}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x20, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x0, &(0x7f0000000140)}, 0x30) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110a3004745010000002c95194ba731"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) 1.563747427s ago: executing program 3 (id=2689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r8}, 0x20) ppoll(&(0x7f00000000c0)=[{r8, 0x9004}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddr={0xb0, 0x16, 0x108, 0x8070bd28, 0x25dfdbfe, {0xa, 0x1f, 0x2c, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x3ff, 0x68b52e37, 0xfffeffff}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x2, 0x7, 0x3}}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4, 0x2, 0x9}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0xce3, 0x4, 0x1ff, 0xd}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.562639492s ago: executing program 4 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x10000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.431496284s ago: executing program 0 (id=2691): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}}, 0x24) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r0, 0x68, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r0, 0xf1c1, 0x8000000}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r0, @in6={{0xa, 0x3ff, 0xfffffffb, @local, 0x5}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r0, 0x9}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={r0, 0x7ff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000400)={r3, 0x6}, &(0x7f0000000440)=0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000480)={0x92, 0x0, 0x2, 0xfffffffc, 0x2, [0xb896, 0x8, 0x4051b3c4, 0x6]}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000004c0)={0x8, 0xfff00, 0x6, 0xa0b, 0x9, 0x0, [{0xea2f, 0x6, 0x0, '\x00', 0x1480}, {0x8, 0x2, 0x38ab, '\x00', 0x200}, {0x8, 0x7, 0x184a, '\x00', 0x3004}, {0xc9, 0x5698, 0xf, '\x00', 0x2008}, {0x10001, 0x2000000000000000, 0x3, '\x00', 0x800}, {0x8380000000000000, 0x3, 0x44e9, '\x00', 0x200}, {0x10001, 0x7, 0xc}, {0x7, 0xfff, 0x0, '\x00', 0x2000}, {0x3, 0xfffffffffffffffd, 0x6, '\x00', 0x1000}]}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000700)={0xa158}, 0x4) connect$x25(0xffffffffffffffff, &(0x7f0000000740)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) setsockopt(r1, 0x7, 0x24a0, &(0x7f0000000780)="173451106c9c3d318b33889d75514aa7cb79ff838876d7b3d8cc8247ab5f07008320bc264b7a7bae527ed1a95f926632b92bc029", 0x34) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @remote}, &(0x7f0000000800)=0x10) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000840)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000880)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000008c0)=0x14) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000900)=0x100000001) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x101}, &(0x7f0000000a00)=0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000a40)={r0, 0x7, 0x3, 0x5}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000a80)={r5, 0x9}, &(0x7f0000000ac0)=0x8) r6 = accept4(r1, 0x0, &(0x7f0000000b00), 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000b40)) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000b80)={0x8, 0x20, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x81}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x5, 0xe3, "579861885123ecae0b682819e3be915d4d0d921cfb8163fe52be9e719e214649f9097485916b903f23cc917c17b94658caee5c42437347d448af94ef0275a2b00f0dd2ce62654cb5b17481eaec7ae5fed9aae85b8a9e7ca01a9e3a315b2eb3bcd179e8c7f9f745bebbc885489e1c5795853a8ec1e6bcd75d8de385c9f04ea3edb472aa364f00444186b4d13b82b4427efe7742a975a12a3c0ff6021c595530f5f709c6e1c1d95c0d101006b108fd67d20df51463e454abce81f06efcb35fbe045b8ce06a2627005dbe7936a99627cf1fcd6b590af0e5042b3a4295f21f30a5a92d7c5c"}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x110) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r6) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x4c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xd}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x30a0}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x448c0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000e40)={r2, 0x9, 0x30}, 0xc) recvfrom(r4, &(0x7f0000000e80)=""/150, 0x96, 0x2141, &(0x7f0000000f40)=@ax25={{0x3, @bcast, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2c0000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2a}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7f}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.359535352s ago: executing program 1 (id=2692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRES16=r4, @ANYBLOB="010029bd7000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="10005a800c0001800500020054000000"], 0x2c}}, 0x0) 1.175980956s ago: executing program 1 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r3, 0x100001) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r4], 0x80}}, 0x0) 1.175278758s ago: executing program 0 (id=2694): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0380025d2c00fe8000000000000000000000000000aaff020000000000000000000000000001020090780000d93f640000000f081120ff020000000000000000000000000001fe8000000000000000000000000000125d0200000000000007"], 0x293) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000002) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) 1.068217739s ago: executing program 0 (id=2695): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000003c0007010000000000000000017c00001800fc80140008800e0031002a27262d2e2b2a7b2e0000000c00018006000600800a000008010280040015800800050009000000"], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000003c0007010000000000000000017c00001800fc80140008800e0031002a27262d2e2b2a7b2e0000000c00018006000600800a000008010280040015800800050009000000"], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 994.62806ms ago: executing program 2 (id=2696): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001e000000000000000c0000000c"], 0x0, 0x2a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@restrict, @fwd={0x2, 0x0, 0x0, 0x12}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 860.014749ms ago: executing program 0 (id=2697): socketpair(0x1f, 0x4, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='ip6gretap0\x00') 710.235398ms ago: executing program 0 (id=2698): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x6, 0x215, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0xf0, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xb, 0x78, "533f33816da441f533f96794c51c59ac048e482bcd440fb08b4101e3fca356701e8ea9ad8e04a8614d249e00da0dd2d5b780a4faa990a6ed00279c3d474c926e8a0c9a477fe0d1c92e395a42e28df8e8f3b0de904c910f7d2856aa152dd310fffc15a917e800bc05a0fd138f1c60ee50a9539cf5e7c55780"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0xe4}]}, 0x10b8) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) syz_emit_ethernet(0x8c, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x1f, 0x7e, 0x64, 0x0, 0x10, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x14, 0xbd, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, "d45c6389a678ba19da746cda2a9c05127dd2c5c865a06387fdb129f6b0d538fd47137e84be3a9e8ce164691956b038127adcfd933945814129802bef014d232d61a7aa0109965d0deabca24dfe9b806f10b72bab174a9edcd8640fc5ccc720d0084c"}}}}}, 0x0) 694.394698ms ago: executing program 1 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r8 = socket$inet6(0xa, 0x1, 0x2) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) sendto$inet6(r8, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r8, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x0, 0x989680}) 643.97075ms ago: executing program 2 (id=2700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69fa01dadbec8db85ad0a147eabb22fc6896d6d3e706b0bc8e88325fe6d76e894a422b9116227af2d29f89510f70541336b3d4683107c0bbb678ae476a0c409c15fda7d5cdbaf1265605a79e9847258124c3a6cf28e1df891b8edaac28b82794422d4b2b0d13870eff73990ecde487d74267d83a5c16592feb0211e9b9b13e420c29ac2d21de289c4109553ec0949748802a31d68b2280ab9de82ba7019d6798bc961633741dae6a5b0314266fadeb001584395af710b03134456f3ae4e24b8a777a1848ca788d2a28d5dac39c", @generic="5860e64b3f515b4e2e3de25114d4302f5f36993c6250ac50688494c207e07c71442fadba75909e81940f6fed"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001012101010100001400490009ac0f"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 563.924635ms ago: executing program 0 (id=2701): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0x200, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x8000) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000240)=0x4ab8a40e, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 464.149772ms ago: executing program 2 (id=2702): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r1, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_DSTLEN={0x0, 0x2, 0x39e8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0xfffffffffffffe5f, 0x5, 0x3}]}, 0x3c}}, 0x4000) 295.497536ms ago: executing program 4 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 278.317229ms ago: executing program 2 (id=2704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000002046d4ebbf0976003b8ed84891a5d0afab484a810000e5ff54090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100d0000000bbdbdf250100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) (async, rerun: 32) socketpair(0x2a, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=[{0xf8, 0x110, 0x8, "916818bda54cfbfe5e60d72f677c4416fcc6e31de3a42a14755a6307f1c5e7b031552818bace523f451b11b6a376aefe93de06f2a87932236085ad18435657382b5a019fb2c04203ce03d1ababaa16083a102f1761e0fbc40fddd4192245559da6ecd2ffde40d0fcec65acfc662b6d097d0c519b86788f623fb710d36b7fcd98865727c92508ee7af7cdd9536461b920f080698bcc39c12c6eb39e90911625bd378c8c833d195a7b4a001c6088eca50bd27925c5da9cd2e16701229562bef3c984394080cd240af53d718776db86637b2e7ee6ffdaefec459378fe5a890dc5b5ab68"}, {0xc0, 0x119, 0x2, "1e76bf6976dd8d68c2b74d51d2c7e7c5612f1d0aedc6a898212e2f6b53fa854cedc4f96238c7c6f40d673bd88ceab9f1a3275eaab7df93285fe5bfe5f5f85a78317ecf0f7b8f5773623801d0494cb121e40d6787abdd4ff99c55772a5cbb2494a6ea5c16cc3b8acf7be33912fafaf4df1f4f076d2273c0fce74813d2a8ea49c1e7f9ebe9a91afbc141c123e537b277af55f59741bee4f534e24af2990d4043f43fc572842ef5fbd6ac073f29ab"}, {0x18, 0x102, 0x2, "5fbe5f96"}, {0x20, 0x10f, 0x1, "895f4dab8a7a359ad418bb8353"}, {0x98, 0xff, 0x3, "05237be79dc87e24fd65bac4c9a51ca55e60691d589af6f905762ea0d819a24358b51b879f8dc89a3becd54efdcea7d7ca8adec0c779c779ed4b16d62ce642452bcf44bb3dd41e3ca66011744f5688fa0d9d20891b498acd82f55acc9c8a7dc15e32e855e7953360e1fd351815a71919b9488ab8728654332073c84b26b98ac4b45a247c"}], 0x288}, 0x20000004) (async) connect$l2tp(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1, 0x1}, 0x10) 0s ago: executing program 3 (id=2705): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x70}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) kernel console output (not intermixed with test programs): [ T7986] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 123.604923][ T7993] netlink: 68 bytes leftover after parsing attributes in process `syz.1.589'. [ 123.881731][ T8006] netlink: 'syz.3.592': attribute type 2 has an invalid length. [ 123.983382][ T8010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.432024][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.599'. [ 124.497604][ T8033] netlink: 112 bytes leftover after parsing attributes in process `syz.3.600'. [ 124.659372][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 124.978902][ T8057] bond0: option ad_select: unable to set because the bond device is up [ 125.155026][ T8068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'. [ 125.233142][ T8074] netlink: 'syz.1.613': attribute type 10 has an invalid length. [ 125.243486][ T8075] netlink: 'syz.1.613': attribute type 10 has an invalid length. [ 125.262511][ T8074] netlink: 'syz.1.613': attribute type 10 has an invalid length. [ 125.277066][ T8074] team0: Device veth1_macvtap failed to register rx_handler [ 125.380514][ T8079] netlink: 788 bytes leftover after parsing attributes in process `syz.1.614'. [ 125.414772][ T8080] netlink: 14 bytes leftover after parsing attributes in process `syz.2.615'. [ 125.571690][ T8086] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 125.602761][ T8086] netlink: 220 bytes leftover after parsing attributes in process `syz.0.618'. [ 125.618370][ T8086] unsupported nlmsg_type 40 [ 126.368318][ T8126] openvswitch: netlink: IP tunnel dst address not specified [ 126.599177][ T8098] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.242083][ T8172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.680225][ T5945] hid-generic 0005:0D45:1012.0002: item fetching failed at offset 0/1 [ 127.689101][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.726471][ T5945] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 127.878177][ T8203] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 127.905842][ T8209] Bluetooth: MGMT ver 1.23 [ 127.920810][ T8203] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.125874][ T8214] wg1 speed is unknown, defaulting to 1000 [ 128.224375][ T8227] FAULT_INJECTION: forcing a failure. [ 128.224375][ T8227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.302488][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.2.662 Not tainted syzkaller #0 PREEMPT(full) [ 128.302512][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.302522][ T8227] Call Trace: [ 128.302529][ T8227] [ 128.302544][ T8227] dump_stack_lvl+0x189/0x250 [ 128.302568][ T8227] ? __pfx____ratelimit+0x10/0x10 [ 128.302587][ T8227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.302606][ T8227] ? __pfx__printk+0x10/0x10 [ 128.302627][ T8227] ? __might_fault+0xb0/0x130 [ 128.302660][ T8227] should_fail_ex+0x414/0x560 [ 128.302688][ T8227] _copy_from_user+0x2d/0xb0 [ 128.302710][ T8227] ___sys_sendmsg+0x158/0x2a0 [ 128.302734][ T8227] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.302790][ T8227] ? __fget_files+0x2a/0x420 [ 128.302805][ T8227] ? __fget_files+0x3a0/0x420 [ 128.302831][ T8227] __x64_sys_sendmsg+0x19b/0x260 [ 128.302854][ T8227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.302884][ T8227] ? __pfx_ksys_write+0x10/0x10 [ 128.302911][ T8227] ? do_syscall_64+0xbe/0x3b0 [ 128.302933][ T8227] do_syscall_64+0xfa/0x3b0 [ 128.302949][ T8227] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.302966][ T8227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.302983][ T8227] ? clear_bhb_loop+0x60/0xb0 [ 128.303003][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.303019][ T8227] RIP: 0033:0x7f4b55f8eec9 [ 128.303041][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.303054][ T8227] RSP: 002b:00007f4b56eee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.303077][ T8227] RAX: ffffffffffffffda RBX: 00007f4b561e5fa0 RCX: 00007f4b55f8eec9 [ 128.303089][ T8227] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 128.303100][ T8227] RBP: 00007f4b56eee090 R08: 0000000000000000 R09: 0000000000000000 [ 128.303110][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.303120][ T8227] R13: 00007f4b561e6038 R14: 00007f4b561e5fa0 R15: 00007fffe4975d78 [ 128.303149][ T8227] [ 128.794247][ T8240] netlink: 'syz.1.665': attribute type 5 has an invalid length. [ 129.129204][ T8256] __nla_validate_parse: 9 callbacks suppressed [ 129.129221][ T8256] netlink: 48 bytes leftover after parsing attributes in process `syz.1.672'. [ 129.764330][ T8286] FAULT_INJECTION: forcing a failure. [ 129.764330][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 129.778907][ T8286] CPU: 0 UID: 0 PID: 8286 Comm: syz.1.677 Not tainted syzkaller #0 PREEMPT(full) [ 129.778927][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.778936][ T8286] Call Trace: [ 129.778941][ T8286] [ 129.778947][ T8286] dump_stack_lvl+0x189/0x250 [ 129.778971][ T8286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.778986][ T8286] ? __pfx__printk+0x10/0x10 [ 129.779008][ T8286] ? should_fail_ex+0x3c1/0x560 [ 129.779030][ T8286] should_fail_ex+0x414/0x560 [ 129.779050][ T8286] should_failslab+0xa8/0x100 [ 129.779069][ T8286] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 129.779087][ T8286] ? __alloc_skb+0x112/0x2d0 [ 129.779104][ T8286] __alloc_skb+0x112/0x2d0 [ 129.779121][ T8286] netlink_sendmsg+0x5c6/0xb30 [ 129.779145][ T8286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.779163][ T8286] ? aa_sock_msg_perm+0xf1/0x1d0 [ 129.779177][ T8286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.779192][ T8286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.779205][ T8286] __sock_sendmsg+0x219/0x270 [ 129.779226][ T8286] ____sys_sendmsg+0x505/0x830 [ 129.779246][ T8286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.779270][ T8286] ? import_iovec+0x74/0xa0 [ 129.779289][ T8286] ___sys_sendmsg+0x21f/0x2a0 [ 129.779307][ T8286] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.779357][ T8286] ? __fget_files+0x2a/0x420 [ 129.779378][ T8286] ? __fget_files+0x3a0/0x420 [ 129.779397][ T8286] __x64_sys_sendmsg+0x19b/0x260 [ 129.779415][ T8286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.779437][ T8286] ? __pfx_ksys_write+0x10/0x10 [ 129.779458][ T8286] ? do_syscall_64+0xbe/0x3b0 [ 129.779475][ T8286] do_syscall_64+0xfa/0x3b0 [ 129.779487][ T8286] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.779500][ T8286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.779513][ T8286] ? clear_bhb_loop+0x60/0xb0 [ 129.779528][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.779540][ T8286] RIP: 0033:0x7fcc8bd8eec9 [ 129.779553][ T8286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.779563][ T8286] RSP: 002b:00007fcc8cba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.779577][ T8286] RAX: ffffffffffffffda RBX: 00007fcc8bfe5fa0 RCX: 00007fcc8bd8eec9 [ 129.779587][ T8286] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 129.779595][ T8286] RBP: 00007fcc8cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.779603][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.779610][ T8286] R13: 00007fcc8bfe6038 R14: 00007fcc8bfe5fa0 R15: 00007fff2b6ab768 [ 129.779633][ T8286] [ 130.303504][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 130.508331][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 130.672052][ T8318] netlink: 252 bytes leftover after parsing attributes in process `syz.0.689'. [ 130.681707][ T8322] netlink: 'syz.3.690': attribute type 29 has an invalid length. [ 130.719472][ T8322] netlink: 'syz.3.690': attribute type 29 has an invalid length. [ 130.744597][ T8322] netlink: 500 bytes leftover after parsing attributes in process `syz.3.690'. [ 131.097020][ T8322] vlan1 (unregistering): left allmulticast mode [ 131.103406][ T8322] veth0_vlan (unregistering): left allmulticast mode [ 131.343766][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 131.475968][ T8362] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.561640][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 131.634267][ T8372] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 131.731901][ T8375] can: request_module (can-proto-5) failed. [ 131.792345][ T8379] FAULT_INJECTION: forcing a failure. [ 131.792345][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.813208][ T8379] CPU: 1 UID: 0 PID: 8379 Comm: syz.1.706 Not tainted syzkaller #0 PREEMPT(full) [ 131.813232][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.813242][ T8379] Call Trace: [ 131.813249][ T8379] [ 131.813256][ T8379] dump_stack_lvl+0x189/0x250 [ 131.813279][ T8379] ? __pfx____ratelimit+0x10/0x10 [ 131.813297][ T8379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.813315][ T8379] ? __pfx__printk+0x10/0x10 [ 131.813336][ T8379] ? __might_fault+0xb0/0x130 [ 131.813364][ T8379] should_fail_ex+0x414/0x560 [ 131.813390][ T8379] _copy_from_iter+0x1de/0x1790 [ 131.813423][ T8379] ? rcu_is_watching+0x15/0xb0 [ 131.813441][ T8379] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 131.813463][ T8379] ? __pfx__copy_from_iter+0x10/0x10 [ 131.813481][ T8379] ? __build_skb_around+0x257/0x3e0 [ 131.813502][ T8379] ? netlink_sendmsg+0x642/0xb30 [ 131.813517][ T8379] ? skb_put+0x11b/0x210 [ 131.813537][ T8379] netlink_sendmsg+0x6b2/0xb30 [ 131.813563][ T8379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.813582][ T8379] ? aa_sock_msg_perm+0xf1/0x1d0 [ 131.813599][ T8379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.813617][ T8379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.813634][ T8379] __sock_sendmsg+0x219/0x270 [ 131.813660][ T8379] ____sys_sendmsg+0x505/0x830 [ 131.813684][ T8379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.813712][ T8379] ? import_iovec+0x74/0xa0 [ 131.813735][ T8379] ___sys_sendmsg+0x21f/0x2a0 [ 131.813757][ T8379] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.813810][ T8379] ? __fget_files+0x2a/0x420 [ 131.813825][ T8379] ? __fget_files+0x3a0/0x420 [ 131.813849][ T8379] __x64_sys_sendmsg+0x19b/0x260 [ 131.813872][ T8379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.813899][ T8379] ? __pfx_ksys_write+0x10/0x10 [ 131.813917][ T8379] ? rcu_is_watching+0x15/0xb0 [ 131.813939][ T8379] ? do_syscall_64+0xbe/0x3b0 [ 131.813961][ T8379] do_syscall_64+0xfa/0x3b0 [ 131.813976][ T8379] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.813993][ T8379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.814009][ T8379] ? clear_bhb_loop+0x60/0xb0 [ 131.814028][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.814044][ T8379] RIP: 0033:0x7fcc8bd8eec9 [ 131.814060][ T8379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.814072][ T8379] RSP: 002b:00007fcc8cba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.814090][ T8379] RAX: ffffffffffffffda RBX: 00007fcc8bfe5fa0 RCX: 00007fcc8bd8eec9 [ 131.814102][ T8379] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 131.814113][ T8379] RBP: 00007fcc8cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.814123][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.814132][ T8379] R13: 00007fcc8bfe6038 R14: 00007fcc8bfe5fa0 R15: 00007fff2b6ab768 [ 131.814158][ T8379] [ 132.128819][ T8383] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 132.149963][ T8383] netlink: 224 bytes leftover after parsing attributes in process `syz.3.708'. [ 132.535390][ T8398] netlink: 'syz.4.713': attribute type 2 has an invalid length. [ 132.567521][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 132.695911][ T8416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'. [ 132.750495][ T8410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.753256][ T8420] FAULT_INJECTION: forcing a failure. [ 132.753256][ T8420] name failslab, interval 1, probability 0, space 0, times 0 [ 132.778758][ T8420] CPU: 0 UID: 0 PID: 8420 Comm: syz.1.719 Not tainted syzkaller #0 PREEMPT(full) [ 132.778785][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.778794][ T8420] Call Trace: [ 132.778802][ T8420] [ 132.778810][ T8420] dump_stack_lvl+0x189/0x250 [ 132.778834][ T8420] ? __pfx____ratelimit+0x10/0x10 [ 132.778853][ T8420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.778872][ T8420] ? __pfx__printk+0x10/0x10 [ 132.778895][ T8420] ? __lock_acquire+0xab9/0xd20 [ 132.778927][ T8420] should_fail_ex+0x414/0x560 [ 132.778956][ T8420] should_failslab+0xa8/0x100 [ 132.778980][ T8420] kmem_cache_alloc_noprof+0x73/0x3c0 [ 132.779001][ T8420] ? skb_clone+0x212/0x3a0 [ 132.779025][ T8420] skb_clone+0x212/0x3a0 [ 132.779049][ T8420] __netlink_deliver_tap+0x404/0x850 [ 132.779087][ T8420] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.779107][ T8420] netlink_deliver_tap+0x19c/0x1b0 [ 132.779125][ T8420] netlink_unicast+0x7fa/0x9e0 [ 132.779158][ T8420] ? __pfx_netlink_unicast+0x10/0x10 [ 132.779183][ T8420] ? netlink_sendmsg+0x642/0xb30 [ 132.779198][ T8420] ? skb_put+0x11b/0x210 [ 132.779220][ T8420] netlink_sendmsg+0x805/0xb30 [ 132.779248][ T8420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.779270][ T8420] ? aa_sock_msg_perm+0xf1/0x1d0 [ 132.779290][ T8420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.779308][ T8420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.779326][ T8420] __sock_sendmsg+0x219/0x270 [ 132.779351][ T8420] ____sys_sendmsg+0x505/0x830 [ 132.779377][ T8420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.779407][ T8420] ? import_iovec+0x74/0xa0 [ 132.779431][ T8420] ___sys_sendmsg+0x21f/0x2a0 [ 132.779454][ T8420] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.779511][ T8420] ? __fget_files+0x2a/0x420 [ 132.779526][ T8420] ? __fget_files+0x3a0/0x420 [ 132.779552][ T8420] __x64_sys_sendmsg+0x19b/0x260 [ 132.779576][ T8420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.779606][ T8420] ? __pfx_ksys_write+0x10/0x10 [ 132.779624][ T8420] ? rcu_is_watching+0x15/0xb0 [ 132.779651][ T8420] ? do_syscall_64+0xbe/0x3b0 [ 132.779673][ T8420] do_syscall_64+0xfa/0x3b0 [ 132.779689][ T8420] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.779706][ T8420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.779722][ T8420] ? clear_bhb_loop+0x60/0xb0 [ 132.779742][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.779758][ T8420] RIP: 0033:0x7fcc8bd8eec9 [ 132.779772][ T8420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.779785][ T8420] RSP: 002b:00007fcc8cba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.779802][ T8420] RAX: ffffffffffffffda RBX: 00007fcc8bfe5fa0 RCX: 00007fcc8bd8eec9 [ 132.779813][ T8420] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 132.779823][ T8420] RBP: 00007fcc8cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.779832][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.779842][ T8420] R13: 00007fcc8bfe6038 R14: 00007fcc8bfe5fa0 R15: 00007fff2b6ab768 [ 132.779869][ T8420] [ 133.229764][ T8432] geneve2: entered promiscuous mode [ 133.599698][ T8455] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 133.945469][ T8473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.162154][ T8489] __nla_validate_parse: 8 callbacks suppressed [ 134.162171][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 134.267043][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 134.484190][ T8330] IPVS: starting estimator thread 0... [ 134.501705][ T8505] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 134.539600][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 134.571505][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 134.572964][ T8512] netlink: 'syz.3.747': attribute type 19 has an invalid length. [ 134.594735][ T8510] IPVS: using max 41 ests per chain, 98400 per kthread [ 134.609402][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 134.692872][ T8512] netlink: 'syz.3.747': attribute type 19 has an invalid length. [ 134.727242][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 134.747315][ T8526] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 134.759448][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 134.837783][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 134.890360][ T8528] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 134.906225][ T8525] bond0: entered promiscuous mode [ 134.919349][ T8525] bond_slave_0: entered promiscuous mode [ 134.924721][ T8528] netlink: 232 bytes leftover after parsing attributes in process `syz.3.754'. [ 134.939578][ T8525] bond_slave_1: entered promiscuous mode [ 134.951623][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 134.960841][ T8525] bond0: left promiscuous mode [ 134.970918][ T8525] bond_slave_0: left promiscuous mode [ 134.977425][ T8525] bond_slave_1: left promiscuous mode [ 135.012716][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 135.119173][ T8531] syzkaller1: entered promiscuous mode [ 135.148669][ T8531] syzkaller1: entered allmulticast mode [ 135.182696][ T30] audit: type=1107 audit(1758788018.543:2): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';jC™Æ®5¯™Ê 7þC—í|KÒ$ó$¬*0­°“ÿpñµc ¼ìÒ*à/NbàÕ#ý}[`»)ä ^|­zÎ#‰»vȧpÚ‹œ–ÎÉ»&D(iâý"jÁC“¸ª“صÿØIß•¼ìÅihä¤÷Ž— U 'Ž6aŸŒ:.E' [ 135.207282][ T8544] netlink: 'syz.4.759': attribute type 12 has an invalid length. [ 135.523013][ T8563] wg1 speed is unknown, defaulting to 1000 [ 135.618849][ T8567] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 135.736108][ T8567] bond1: entered promiscuous mode [ 135.741616][ T8567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.827363][ T8567] bond1: (slave bridge2): making interface the new active one [ 135.864030][ T8567] bridge2: entered promiscuous mode [ 135.883818][ T8567] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 136.073917][ T8601] netlink: 'syz.2.776': attribute type 19 has an invalid length. [ 136.252582][ T8608] tipc: Started in network mode [ 136.259764][ T8608] tipc: Node identity de0d046ee366, cluster identity 4711 [ 136.279832][ T8608] tipc: Enabled bearer , priority 0 [ 136.304321][ T8610] syzkaller0: entered promiscuous mode [ 136.316734][ T8610] syzkaller0: entered allmulticast mode [ 136.395314][ T8613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.406204][ T8613] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 136.413046][ T8618] tipc: Resetting bearer [ 136.414542][ T8613] nbd: illegal input index 1048576 [ 136.426209][ T8615] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 136.439048][ T8615] nbd: illegal input index 1048576 [ 136.444458][ T8606] tipc: Resetting bearer [ 136.485893][ T8606] tipc: Disabling bearer [ 136.538163][ T8623] dvmrp0: entered allmulticast mode [ 136.705855][ T8633] gretap0: entered promiscuous mode [ 136.793353][ T5880] Bluetooth: hci4: link tx timeout [ 136.799456][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.810747][ T5875] Bluetooth: hci4: link tx timeout [ 136.816896][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.824561][ T5875] Bluetooth: hci4: link tx timeout [ 136.829787][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.837553][ T5875] Bluetooth: hci4: link tx timeout [ 136.842671][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.881823][ T8636] 0ªî{X¹¦: renamed from gretap0 [ 136.928937][ T8636] 0ªî{X¹¦: left promiscuous mode [ 136.968222][ T8636] 0ªî{X¹¦: entered allmulticast mode [ 137.011521][ T8636] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 137.070674][ T8646] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 137.121137][ T8649] lo: entered allmulticast mode [ 137.147805][ T8651] syzkaller0: entered promiscuous mode [ 137.187548][ T8651] syzkaller0: entered allmulticast mode [ 137.201389][ T8653] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 137.422596][ T8330] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 137.580689][ T8665] fido_id[8665]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 137.611934][ T5875] Bluetooth: hci4: link tx timeout [ 137.617133][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.722823][ T8676] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 137.731912][ T8676] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 138.147734][ T8712] bridge_slave_0: invalid flags given to default FDB implementation [ 138.163854][ T8711] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 138.273520][ T8718] IPVS: length: 157 != 24 [ 138.518329][ T8734] can: request_module (can-proto-0) failed. [ 138.671469][ T8742] syzkaller1: entered promiscuous mode [ 138.680116][ T8742] syzkaller1: entered allmulticast mode [ 138.854806][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 139.078148][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.094129][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.113615][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.130503][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.234305][ T8779] pim6reg1: entered promiscuous mode [ 139.240390][ T8779] pim6reg1: entered allmulticast mode [ 139.253859][ T8779] __nla_validate_parse: 20 callbacks suppressed [ 139.253876][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 139.511917][ T8794] netlink: 256 bytes leftover after parsing attributes in process `syz.1.837'. [ 139.766442][ T8818] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 139.794395][ T8821] netlink: 96 bytes leftover after parsing attributes in process `syz.4.842'. [ 139.807313][ T8814] bond3: entered promiscuous mode [ 139.812583][ T8814] bond3: entered allmulticast mode [ 139.822354][ T8814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.848928][ T8820] tipc: Enabled bearer , priority 0 [ 139.864039][ T8820] syzkaller0: entered promiscuous mode [ 139.872070][ T8820] syzkaller0: entered allmulticast mode [ 139.909999][ T8820] tipc: Resetting bearer [ 139.935333][ T8819] tipc: Resetting bearer [ 139.953793][ T8819] tipc: Disabling bearer [ 140.201370][ T8834] wg1 speed is unknown, defaulting to 1000 [ 140.675201][ T8847] tipc: Enabling of bearer rejected, failed to enable media [ 140.708548][ T8847] nbd: socks must be embedded in a SOCK_ITEM attr [ 140.860288][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 140.884163][ T8855] bridge_slave_1: left allmulticast mode [ 140.890371][ T8855] bridge_slave_1: left promiscuous mode [ 140.904980][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.948705][ T8855] bridge_slave_0: left allmulticast mode [ 140.970113][ T8855] bridge_slave_0: left promiscuous mode [ 140.987270][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.488579][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 141.611965][ T8890] tipc: Started in network mode [ 141.628237][ T8890] tipc: Node identity 5e9b76785f7b, cluster identity 4711 [ 141.637638][ T8890] tipc: Enabled bearer , priority 0 [ 141.647610][ T8890] syzkaller0: entered promiscuous mode [ 141.653107][ T8890] syzkaller0: entered allmulticast mode [ 141.724553][ T8890] tipc: Resetting bearer [ 141.759450][ T8899] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 141.772452][ T8889] tipc: Resetting bearer [ 141.874536][ T8889] tipc: Disabling bearer [ 141.965002][ T8907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.869'. [ 142.042634][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 142.115088][ T8917] netlink: 'syz.4.869': attribute type 39 has an invalid length. [ 142.144891][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.869'. [ 142.153803][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 142.341818][ T8932] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 142.355419][ T8929] erspan0: entered promiscuous mode [ 142.360652][ T8929] erspan0: entered allmulticast mode [ 142.426619][ T8937] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 142.473778][ T8940] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 142.488990][ T8937] netlink: 232 bytes leftover after parsing attributes in process `syz.4.878'. [ 142.519037][ T8940] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.989333][ T8981] netlink: 'syz.3.888': attribute type 3 has an invalid length. [ 147.914523][ T4948] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 178.839122][ T1101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 196.298529][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 196.303269][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 196.305180][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 200.634902][ T8988] __nla_validate_parse: 1 callbacks suppressed [ 200.634924][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 200.687581][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'. [ 200.691237][ T8995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.896'. [ 200.913118][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 201.021998][ T9009] netlink: 'syz.4.899': attribute type 10 has an invalid length. [ 201.192022][ T9009] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.252983][ T9020] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 201.288751][ T9020] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.622096][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 201.691223][ T9038] veth0_macvtap: mtu less than device minimum [ 201.904571][ T9052] netlink: 244 bytes leftover after parsing attributes in process `syz.0.912'. [ 202.059225][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 202.138452][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 202.149608][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 202.162870][ T9070] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.919'. [ 202.173829][ T9070] openvswitch: netlink: Message has 5 unknown bytes. [ 202.226528][ T9062] batadv_slave_1: entered promiscuous mode [ 202.263284][ T9062] macsec1: entered promiscuous mode [ 202.423367][ T9078] pim6reg1: entered promiscuous mode [ 202.429408][ T9078] pim6reg1: entered allmulticast mode [ 202.673666][ T9086] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 202.723541][ T9100] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 202.736633][ T9100] bond4: (slave vcan1): Error -95 calling set_mac_address [ 202.807334][ T9086] bond2: entered promiscuous mode [ 202.812971][ T9086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.899841][ T6950] IPVS: starting estimator thread 0... [ 202.913082][ T9099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.944287][ T9099] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 202.967353][ T9099] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 202.992389][ T9099] bond2: (slave wireguard0): making interface the new active one [ 202.995610][ T9116] IPVS: using max 28 ests per chain, 67200 per kthread [ 203.007443][ T9099] wireguard0: entered promiscuous mode [ 203.019651][ T9099] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 203.034121][ T9108] xfrm1: entered promiscuous mode [ 203.039874][ T9108] xfrm1: entered allmulticast mode [ 203.106256][ T9127] tipc: Enabled bearer , priority 0 [ 203.127986][ T9119] syzkaller0: entered promiscuous mode [ 203.148597][ T9119] syzkaller0: entered allmulticast mode [ 203.229158][ T9131] netlink: 'syz.4.938': attribute type 24 has an invalid length. [ 203.244239][ T9119] tipc: Resetting bearer [ 203.257577][ T9129] siw: device registration error -23 [ 203.263697][ T9131] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 203.276894][ T9117] tipc: Resetting bearer [ 203.304389][ T9117] tipc: Disabling bearer [ 203.334335][ T9129] bridge_slave_1: left allmulticast mode [ 203.340372][ T9129] bridge_slave_1: left promiscuous mode [ 203.347729][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.359527][ T9129] bridge_slave_0: left allmulticast mode [ 203.368181][ T9129] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.449841][ T9131] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 203.461821][ T9133] veth0: entered promiscuous mode [ 203.494719][ T9146] dvmrp0: left allmulticast mode [ 203.669551][ T9133] netlink: 'syz.3.940': attribute type 25 has an invalid length. [ 203.768398][ T9159] team0: left allmulticast mode [ 203.773382][ T9159] team_slave_1: left allmulticast mode [ 203.780776][ T9159] team0: left promiscuous mode [ 203.785726][ T9159] team_slave_0: left promiscuous mode [ 203.791358][ T9159] team_slave_1: left promiscuous mode [ 203.801479][ T9159] bridge0: port 3(team0) entered disabled state [ 203.814169][ T9159] bridge_slave_0: left allmulticast mode [ 203.822306][ T9159] bridge_slave_0: left promiscuous mode [ 203.829999][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.841029][ T9159] bridge_slave_1: left allmulticast mode [ 203.846977][ T9159] bridge_slave_1: left promiscuous mode [ 203.853439][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.865651][ T9159] bond0: (slave bond_slave_0): Releasing backup interface [ 203.884152][ T9159] bond0: (slave bond_slave_1): Releasing backup interface [ 203.906969][ T9159] team0: Port device team_slave_0 removed [ 203.920934][ T9159] team0: Port device team_slave_1 removed [ 203.934428][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.942328][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.951473][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.959577][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.972488][ T9159] bond0: (slave geneve1): Releasing backup interface [ 204.078350][ T9132] veth0: left promiscuous mode [ 204.323992][ T9185] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 204.339605][ T9185] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 204.977124][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 205.051714][ T9228] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 205.409835][ T9245] netlink: 'syz.2.970': attribute type 5 has an invalid length. [ 205.426660][ T9245] geneve2: entered promiscuous mode [ 205.431996][ T9245] geneve2: entered allmulticast mode [ 205.439214][ T1112] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 205.448305][ T1112] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 205.457413][ T1112] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 205.469004][ T1112] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 206.153390][ T9288] __nla_validate_parse: 12 callbacks suppressed [ 206.153408][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 206.211069][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 206.438694][ T9304] netlink: 'syz.3.985': attribute type 13 has an invalid length. [ 206.454440][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 206.481314][ T9289] wg1 speed is unknown, defaulting to 1000 [ 206.491767][ T9283] netlink: 'syz.0.980': attribute type 4 has an invalid length. [ 206.605121][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 206.649294][ T9304] netlink: 'syz.3.985': attribute type 13 has an invalid length. [ 206.710842][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 206.875210][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.899118][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.988'. [ 206.913852][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.971305][ T9328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.989'. [ 207.002794][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.034710][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.256755][ T9362] netlink: 240 bytes leftover after parsing attributes in process `syz.0.994'. [ 207.278549][ T9362] ip6erspan0: entered promiscuous mode [ 207.295892][ T9362] ip6erspan0: entered allmulticast mode [ 207.456955][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 207.606605][ T9375] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 207.688107][ T9380] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 207.844042][ T9392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'. [ 207.897617][ T9394] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 207.967487][ T9380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.234021][ T9416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.293424][ T9421] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 208.311715][ T9421] netlink: zone id is out of range [ 208.328304][ T9421] netlink: zone id is out of range [ 208.340826][ T9421] netlink: del zone limit has 4 unknown bytes [ 208.679654][ T9440] syzkaller0: entered promiscuous mode [ 208.689408][ T9440] syzkaller0: entered allmulticast mode [ 209.764241][ T9344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.509656][ T9480] netem: change failed [ 210.834582][ T9501] xt_limit: Overflow, try lower: 604147548/4200216962 [ 211.192003][ T9532] __nla_validate_parse: 14 callbacks suppressed [ 211.192029][ T9532] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1041'. [ 211.644170][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 211.701510][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 211.781244][ T9573] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 211.816351][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 211.827233][ T9575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.860836][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 211.956175][ T9585] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 211.967432][ T9588] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 211.993461][ T9590] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 212.025768][ T9590] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 212.742597][ T9631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1069'. [ 213.046138][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 213.079568][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 213.131578][ T9658] netlink: 'syz.1.1077': attribute type 4 has an invalid length. [ 213.162464][ T9657] netlink: 'syz.3.1078': attribute type 2 has an invalid length. [ 213.318453][ T9668] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 213.328430][ T9670] tipc: Enabling of bearer rejected, failed to enable media [ 213.441499][ T9677] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1084'. [ 213.584329][ T9684] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 213.950211][ T9692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.988624][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1090'. [ 214.455090][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 214.688115][ T9732] openvswitch: netlink: Flow key attr not present in new flow. [ 214.892030][ T9743] IPv6: sit2: Disabled Multicast RS [ 214.898887][ T9743] sit2: entered allmulticast mode [ 215.229293][ T9772] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 215.524602][ T9789] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 215.669315][ T9793] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.697566][ T9793] bond5: (slave bond6): making interface the new active one [ 215.723171][ T9793] bond5: (slave bond6): Enslaving as an active interface with an up link [ 215.806620][ T9789] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.852697][ T9789] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 216.043083][ T9818] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 216.084072][ T9818] netlink: 'syz.2.1124': attribute type 4 has an invalid length. [ 216.205797][ T9824] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 216.241299][ T9824] __nla_validate_parse: 5 callbacks suppressed [ 216.241316][ T9824] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1126'. [ 216.442914][ T9842] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1131'. [ 216.646420][ T9851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1134'. [ 216.646451][ T9852] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 216.660431][ T9851] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1134'. [ 216.674829][ T9852] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 216.886520][ T9866] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1139'. [ 216.901002][ T9866] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1139'. [ 216.910532][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 216.982764][ T13] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 216.992576][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 217.007108][ T13] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 217.029783][ T13] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 217.064932][ T1166] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 217.283743][ T9881] syzkaller0: entered promiscuous mode [ 217.293075][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 217.316493][ T9881] syzkaller0: entered allmulticast mode [ 217.341031][ T9890] netlink: 'syz.3.1145': attribute type 10 has an invalid length. [ 217.363115][ T9890] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.372480][ T9885] bridge0: port 3(syz_tun) entered blocking state [ 217.400917][ T9885] bridge0: port 3(syz_tun) entered disabled state [ 217.417210][ T9885] syz_tun: entered allmulticast mode [ 217.437388][ T9885] syz_tun: entered promiscuous mode [ 217.501734][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'. [ 217.682956][ T9906] netlink: 'syz.4.1150': attribute type 3 has an invalid length. [ 217.781543][ T9912] sctp: [Deprecated]: syz.2.1153 (pid 9912) Use of int in max_burst socket option deprecated. [ 217.781543][ T9912] Use struct sctp_assoc_value instead [ 217.794758][ T9903] can: request_module (can-proto-0) failed. [ 217.835786][ T9910] netlink: 'syz.1.1152': attribute type 8 has an invalid length. [ 218.453347][ T9953] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 218.492191][ T9955] netlink: 'syz.3.1166': attribute type 12 has an invalid length. [ 218.535418][ T9955] netlink: 'syz.3.1166': attribute type 29 has an invalid length. [ 218.570800][ T9955] netlink: 'syz.3.1166': attribute type 2 has an invalid length. [ 218.871419][ T9977] sctp: [Deprecated]: syz.4.1173 (pid 9977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.871419][ T9977] Use struct sctp_sack_info instead [ 219.203528][ T9994] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 219.337304][ T9994] hsr_slave_0 (unregistering): left promiscuous mode [ 219.534894][T10007] tunl0: entered promiscuous mode [ 219.551644][T10007] gre0: entered promiscuous mode [ 219.582365][T10007] gretap0: entered promiscuous mode [ 219.603603][T10007] erspan0: left allmulticast mode [ 219.613786][T10007] ip_vti0: entered promiscuous mode [ 219.710770][T10018] netlink: 'syz.2.1183': attribute type 142 has an invalid length. [ 220.281137][T10057] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 220.445804][T10062] team0: Device macvtap1 is already an upper device of the team interface [ 220.499460][T10063] team0: Device macvtap1 is already an upper device of the team interface [ 220.525026][T10070] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 220.709600][T10081] netlink: 'syz.2.1204': attribute type 10 has an invalid length. [ 220.756831][T10081] wg1 speed is unknown, defaulting to 1000 [ 220.996353][T10088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.270424][T10106] __nla_validate_parse: 16 callbacks suppressed [ 221.270443][T10106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 221.376622][T10112] netlink: 'syz.3.1210': attribute type 6 has an invalid length. [ 221.718269][T10119] pim6reg: entered allmulticast mode [ 221.752598][T10122] pim6reg: left allmulticast mode [ 221.820868][T10126] tipc: Enabled bearer , priority 0 [ 221.839406][T10126] syzkaller0: entered promiscuous mode [ 221.845420][T10126] syzkaller0: entered allmulticast mode [ 221.936579][T10126] tipc: Resetting bearer [ 221.942521][T10126] syzkaller0: tun_net_xmit 90 [ 221.947513][T10126] syzkaller0: tun_net_xmit 90 [ 221.997551][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 222.025495][T10125] tipc: Resetting bearer [ 222.046076][T10125] tipc: Disabling bearer [ 222.261164][T10140] tipc: Enabled bearer , priority 0 [ 222.286789][T10140] syzkaller0: entered promiscuous mode [ 222.292301][T10140] syzkaller0: entered allmulticast mode [ 222.358499][T10140] tipc: Resetting bearer [ 222.390323][T10139] tipc: Resetting bearer [ 222.439743][T10139] tipc: Disabling bearer [ 222.560637][T10163] bond0: entered promiscuous mode [ 222.571020][T10163] netlink: 'syz.1.1226': attribute type 6 has an invalid length. [ 223.011160][T10193] 8021q: VLANs not supported on pim6reg0 [ 223.355836][T10217] tipc: Enabling of bearer rejected, failed to enable media [ 223.402691][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 224.042607][T10250] tunl0: entered promiscuous mode [ 224.075115][T10250] netlink: 'syz.4.1259': attribute type 3 has an invalid length. [ 224.097683][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1256'. [ 224.111241][T10250] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1259'. [ 224.258500][T10276] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1260'. [ 224.404181][T10285] netlink: 'syz.0.1265': attribute type 3 has an invalid length. [ 224.463637][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 224.526388][T10296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1268'. [ 224.584378][T10298] netlink: 'syz.3.1270': attribute type 5 has an invalid length. [ 224.690648][T10302] netlink: 'syz.2.1271': attribute type 1 has an invalid length. [ 224.721415][T10302] tipc: Enabled bearer , priority 0 [ 224.739853][T10302] syzkaller0: entered promiscuous mode [ 224.747574][T10304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1272'. [ 224.758415][T10302] syzkaller0: entered allmulticast mode [ 224.799264][T10302] tipc: Resetting bearer [ 224.847596][T10301] tipc: Resetting bearer [ 225.068371][T10301] tipc: Disabling bearer [ 225.273084][T10336] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1283'. [ 225.560307][T10348] netlink: 'syz.2.1287': attribute type 11 has an invalid length. [ 225.606404][T10349] tipc: New replicast peer: 255.255.255.255 [ 225.616929][T10351] smc: removing ib device syz1 [ 225.622709][T10349] tipc: Enabled bearer , priority 10 [ 225.656407][T10356] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 226.033746][T10364] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 226.081362][T10364] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 226.303039][T10366] gretap0: entered promiscuous mode [ 226.339002][T10366] bond7: (slave gretap0): making interface the new active one [ 226.372974][T10366] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 226.460065][T10356] macvlan2: entered promiscuous mode [ 226.473075][T10356] macvlan2: entered allmulticast mode [ 226.482381][T10356] bond7: entered promiscuous mode [ 226.488932][T10356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.500122][T10356] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 226.513387][T10356] bond7: left promiscuous mode [ 226.631310][T10381] tipc: Enabled bearer , priority 0 [ 226.663264][T10384] syzkaller0: entered promiscuous mode [ 226.681419][T10384] syzkaller0: entered allmulticast mode [ 226.734462][T10398] tipc: Resetting bearer [ 226.745245][ T6948] tipc: Node number set to 3644961388 [ 226.983178][T10398] tipc: Resetting bearer [ 227.053244][T10398] tipc: Disabling bearer [ 227.963142][T10457] openvswitch: netlink: IPv6 tunnel dst address is zero [ 229.191087][T10462] __nla_validate_parse: 5 callbacks suppressed [ 229.191106][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 229.245935][T10465] tipc: Enabled bearer , priority 0 [ 229.274059][T10465] syzkaller0: entered promiscuous mode [ 229.284955][T10465] syzkaller0: entered allmulticast mode [ 229.329991][T10465] tipc: Resetting bearer [ 229.348489][T10465] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1316'. [ 229.402476][T10463] tipc: Resetting bearer [ 229.461629][T10463] tipc: Disabling bearer [ 229.470735][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1322'. [ 230.325443][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 230.400286][T10506] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 230.528773][T10522] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 230.535489][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 230.553661][T10522] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.568857][T10527] openvswitch: netlink: Unknown nsh attribute 0 [ 230.576035][T10522] gretap0: entered promiscuous mode [ 230.577438][T10527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.590304][T10522] gretap0: entered allmulticast mode [ 230.885763][T10548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1341'. [ 231.004606][T10558] netlink: 'syz.3.1344': attribute type 4 has an invalid length. [ 231.054009][T10558] bond5: entered promiscuous mode [ 231.059652][T10558] bond5: entered allmulticast mode [ 231.065935][T10558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.151574][T10568] tls_set_device_offload: netdev not found [ 231.166487][T10568] tls_set_device_offload_rx: netdev not found [ 231.293615][T10581] tipc: Enabled bearer , priority 0 [ 231.304058][T10581] syzkaller0: entered promiscuous mode [ 231.310041][T10581] syzkaller0: entered allmulticast mode [ 231.337658][T10581] tipc: Resetting bearer [ 231.352139][T10580] tipc: Resetting bearer [ 231.403568][T10580] tipc: Disabling bearer [ 231.438555][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1354'. [ 231.626776][T10598] tipc: Enabled bearer , priority 0 [ 231.642330][T10598] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 231.650369][T10598] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 231.799530][T10606] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 231.812094][T10606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1361'. [ 231.836799][T10606] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 231.866859][ T1166] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.875734][ T1166] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.888025][ T1166] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.919864][ T1166] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.006292][T10612] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 232.132099][T10618] netlink: 'syz.4.1366': attribute type 6 has an invalid length. [ 232.156001][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 232.163443][T10618] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1366'. [ 232.275963][T10634] netlink: 'syz.1.1371': attribute type 4 has an invalid length. [ 232.429681][T10643] netlink: 'syz.3.1375': attribute type 7 has an invalid length. [ 232.476574][T10646] netlink: 'syz.3.1375': attribute type 7 has an invalid length. [ 232.765441][ T5953] tipc: Node number set to 1030423662 [ 232.912435][T10676] netlink: 'syz.1.1385': attribute type 26 has an invalid length. [ 233.171997][T10682] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 233.556055][T10708] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 233.760209][T10708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.824163][T10714] vlan4: entered promiscuous mode [ 233.833578][T10714] bond3: entered promiscuous mode [ 233.842486][T10714] vlan4: entered allmulticast mode [ 233.857038][T10714] bond3: entered allmulticast mode [ 233.904496][T10716] bond3: (slave gretap2): making interface the new active one [ 233.912537][T10716] gretap2: entered promiscuous mode [ 233.917987][T10716] gretap2: entered allmulticast mode [ 233.935286][T10716] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 233.986870][T10730] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 234.182091][T10740] gre1: entered promiscuous mode [ 234.194943][T10740] gre1: entered allmulticast mode [ 234.289160][T10754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.315299][T10748] __nla_validate_parse: 5 callbacks suppressed [ 234.315316][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1405'. [ 234.335096][T10748] netlink: 'syz.0.1405': attribute type 1 has an invalid length. [ 234.351103][T10748] syzkaller1: entered promiscuous mode [ 234.356706][T10748] syzkaller1: entered allmulticast mode [ 234.468181][T10759] batadv0: entered promiscuous mode [ 234.478265][T10759] bond0: entered promiscuous mode [ 234.483417][T10759] bond_slave_0: entered promiscuous mode [ 234.495037][T10759] bond_slave_1: entered promiscuous mode [ 234.501257][T10759] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 234.524926][T10759] hsr1: entered allmulticast mode [ 234.534975][T10759] batadv0: entered allmulticast mode [ 234.545269][T10759] bond0: entered allmulticast mode [ 234.554792][T10759] bond_slave_0: entered allmulticast mode [ 234.560902][T10759] bond_slave_1: entered allmulticast mode [ 234.568643][T10759] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 234.733183][T10782] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1415'. [ 234.781447][T10782] netlink: zone id is out of range [ 234.829518][T10782] netlink: zone id is out of range [ 234.863346][T10782] netlink: zone id is out of range [ 234.878642][T10782] netlink: zone id is out of range [ 234.942039][T10782] netlink: zone id is out of range [ 234.981375][T10782] netlink: zone id is out of range [ 235.003789][T10782] netlink: get zone limit has 8 unknown bytes [ 235.320604][T10809] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.346782][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 235.452856][T10816] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1426'. [ 235.579595][T10820] wg1 speed is unknown, defaulting to 1000 [ 235.810623][T10839] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1432'. [ 235.831488][T10833] siw: device registration error -23 [ 235.838064][T10828] syzkaller0: entered allmulticast mode [ 235.845321][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 235.855618][T10838] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1432'. [ 236.017533][T10847] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1435'. [ 236.059401][T10847] 8021q: VLANs not supported on gre0 [ 236.188890][T10850] erspan0: entered promiscuous mode [ 236.194380][T10850] erspan0: entered allmulticast mode [ 236.808031][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 236.848904][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1446'. [ 236.869766][T10887] validate_nla: 3 callbacks suppressed [ 236.869782][T10887] netlink: 'syz.1.1446': attribute type 11 has an invalid length. [ 237.167174][T10899] netlink: 'syz.4.1449': attribute type 5 has an invalid length. [ 237.522161][T10923] veth1_to_bond: entered allmulticast mode [ 237.621340][T10920] bond0: (slave bond_slave_1): Releasing backup interface [ 237.641277][T10920] bond_slave_1 (unregistering): left promiscuous mode [ 237.650009][T10920] bond_slave_1 (unregistering): left allmulticast mode [ 237.672739][T10920] veth1_to_bond (unregistering): left allmulticast mode [ 237.725540][T10933] tipc: Enabling of bearer rejected, already enabled [ 237.883367][T10945] Bluetooth: MGMT ver 1.23 [ 237.921887][ T6948] IPVS: starting estimator thread 0... [ 238.026775][T10946] IPVS: using max 27 ests per chain, 64800 per kthread [ 238.068246][T10955] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 238.160337][T10960] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 238.223283][T10963] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 238.254982][T10965] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 238.316219][T10965] netlink: 'syz.0.1469': attribute type 11 has an invalid length. [ 238.463820][T10974] netlink: 'syz.3.1471': attribute type 11 has an invalid length. [ 238.608046][T10980] tipc: Enabled bearer , priority 0 [ 238.638841][T10976] tipc: Resetting bearer [ 238.796721][T10968] infiniband syz0: set down [ 238.818509][T10968] infiniband syz0: added ipvlan1 [ 238.849240][T10983] bridge_slave_0: default FDB implementation only supports local addresses [ 238.900809][T10973] tipc: Resetting bearer [ 238.952588][T10994] netlink: 'syz.3.1475': attribute type 2 has an invalid length. [ 238.961429][T10968] RDS/IB: syz0: added [ 238.979074][T10968] smc: adding ib device syz0 with port count 1 [ 238.986623][T10968] smc: ib device syz0 port 1 has pnetid [ 239.153628][T10997] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 240.163846][T10973] tipc: Disabling bearer [ 240.177880][T10983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.431682][T11013] __nla_validate_parse: 14 callbacks suppressed [ 240.431698][T11013] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1480'. [ 240.688930][ T1112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.197297][T11032] openvswitch: netlink: IPv6 tunnel dst address is zero [ 241.484073][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 241.720162][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 241.817812][T11052] syz.4.1492: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.882289][T11052] CPU: 0 UID: 0 PID: 11052 Comm: syz.4.1492 Not tainted syzkaller #0 PREEMPT(full) [ 241.882335][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.882357][T11052] Call Trace: [ 241.882364][T11052] [ 241.882373][T11052] dump_stack_lvl+0x189/0x250 [ 241.882402][T11052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.882421][T11052] ? __pfx__printk+0x10/0x10 [ 241.882444][T11052] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.882463][T11052] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.882484][T11052] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 241.882507][T11052] warn_alloc+0x214/0x310 [ 241.882537][T11052] ? __pfx_warn_alloc+0x10/0x10 [ 241.882569][T11052] ? __get_vm_area_node+0x28f/0x300 [ 241.882591][T11052] ? xskq_create+0xbf/0x170 [ 241.882613][T11052] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 241.882666][T11052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.882689][T11052] ? xskq_create+0x56/0x170 [ 241.882715][T11052] ? __kasan_kmalloc+0x93/0xb0 [ 241.882740][T11052] vmalloc_user_noprof+0xad/0xf0 [ 241.882766][T11052] ? xskq_create+0xbf/0x170 [ 241.882784][T11052] xskq_create+0xbf/0x170 [ 241.882804][T11052] xsk_init_queue+0xb0/0x110 [ 241.882824][T11052] xsk_setsockopt+0x57b/0x8d0 [ 241.882851][T11052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.882874][T11052] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.882900][T11052] ? __fget_files+0x2a/0x420 [ 241.882914][T11052] ? aa_sock_opt_perm+0xff/0x1b0 [ 241.882935][T11052] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 241.882952][T11052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.882977][T11052] do_sock_setsockopt+0x179/0x1b0 [ 241.883002][T11052] __x64_sys_setsockopt+0x13f/0x1b0 [ 241.883033][T11052] do_syscall_64+0xfa/0x3b0 [ 241.883050][T11052] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.883067][T11052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.883083][T11052] ? clear_bhb_loop+0x60/0xb0 [ 241.883103][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.883119][T11052] RIP: 0033:0x7fc00dd8eec9 [ 241.883136][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.883149][T11052] RSP: 002b:00007fc00ebca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.883167][T11052] RAX: ffffffffffffffda RBX: 00007fc00dfe5fa0 RCX: 00007fc00dd8eec9 [ 241.883179][T11052] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 241.883189][T11052] RBP: 00007fc00de11f91 R08: 0000000000000004 R09: 0000000000000000 [ 241.883200][T11052] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 241.883210][T11052] R13: 00007fc00dfe6038 R14: 00007fc00dfe5fa0 R15: 00007ffeceb08cc8 [ 241.883239][T11052] [ 241.935801][T11052] Mem-Info: [ 242.177391][T11052] active_anon:9339 inactive_anon:0 isolated_anon:0 [ 242.177391][T11052] active_file:2759 inactive_file:39947 isolated_file:0 [ 242.177391][T11052] unevictable:768 dirty:88 writeback:0 [ 242.177391][T11052] slab_reclaimable:11709 slab_unreclaimable:101479 [ 242.177391][T11052] mapped:29148 shmem:5363 pagetables:1024 [ 242.177391][T11052] sec_pagetables:0 bounce:0 [ 242.177391][T11052] kernel_misc_reclaimable:0 [ 242.177391][T11052] free:1300511 free_pcp:30374 free_cma:0 [ 242.199751][T11060] wg1 speed is unknown, defaulting to 1000 [ 242.272064][T11052] Node 0 active_anon:34656kB inactive_anon:0kB active_file:11036kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116592kB dirty:352kB writeback:0kB shmem:17516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12824kB pagetables:4068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 242.334279][T11052] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 242.376451][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 242.401359][T11052] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.465563][T11052] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 242.475600][T11052] Node 0 DMA32 free:1320440kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23112kB inactive_anon:0kB active_file:11036kB inactive_file:158016kB unevictable:1536kB writepending:352kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:100956kB local_pcp:59872kB free_cma:0kB [ 242.564760][T11052] lowmem_reserve[]: 0 0 1 1 1 [ 242.569528][T11052] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 242.599591][T11052] lowmem_reserve[]: 0 0 0 0 0 [ 242.634855][T11052] Node 1 Normal free:3879360kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22028kB local_pcp:11716kB free_cma:0kB [ 242.690525][T11052] lowmem_reserve[]: 0 0 0 0 0 [ 242.705704][T11052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.719816][T11052] Node 0 DMA32: 148*4kB (UM) 532*8kB (UME) 126*16kB (UM) 704*32kB (UME) 84*64kB (UME) 25*128kB (UME) 20*256kB (UM) 16*512kB (UME) 9*1024kB (UM) 5*2048kB (UM) 305*4096kB (M) = 1320016kB [ 242.773879][T11079] tipc: MTU too low for tipc bearer [ 242.796448][T11052] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 242.823941][T11052] Node 1 Normal: 206*4kB (UE) 47*8kB (UME) 37*16kB (UME) 54*32kB (UME) 20*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3879360kB [ 242.871346][T11052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.884993][T11052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.894305][T11052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.913224][T11081] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 242.922830][T11052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.936477][T11081] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 242.947039][T11083] 8021q: VLANs not supported on ip_vti0 [ 242.949007][T11052] 44068 total pagecache pages [ 242.959932][T11052] 0 pages in swap cache [ 242.964394][T11052] Free swap = 124996kB [ 242.973349][T11052] Total swap = 124996kB [ 242.979916][T11052] 2097051 pages RAM [ 242.983898][T11052] 0 pages HighMem/MovableOnly [ 242.988759][T11052] 425672 pages reserved [ 242.992986][T11052] 0 pages cma reserved [ 243.135668][T11086] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 243.568509][T11102] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 244.166492][T11125] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1510'. [ 244.176019][T11125] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1510'. [ 244.189975][T11131] tipc: Enabled bearer , priority 0 [ 244.207757][T11131] syzkaller0: entered promiscuous mode [ 244.223476][T11131] syzkaller0: entered allmulticast mode [ 244.273879][T11125] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1510'. [ 244.292298][T11125] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1510'. [ 244.343620][T11131] tipc: Resetting bearer [ 244.362536][T11139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1513'. [ 244.383241][T11141] tipc: Enabling of bearer rejected, failed to enable media [ 244.403810][T11130] tipc: Resetting bearer [ 244.411773][T11139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1513'. [ 244.461546][T11130] tipc: Disabling bearer [ 244.567172][T11147] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 244.675566][ T30] audit: type=1107 audit(1758788128.023:3): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='- 1’QŠ*Y,t0M¾!Àž•%ù ' [ 244.906306][T11173] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 245.270697][T11193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.101305][T11259] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 246.113167][T11260] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 246.123925][T11259] __nla_validate_parse: 1 callbacks suppressed [ 246.123938][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 246.134102][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 246.194346][T11265] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 246.228872][T11263] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1550'. [ 246.337765][T11265] macvlan2: entered promiscuous mode [ 246.343330][T11265] macvlan2: entered allmulticast mode [ 246.352699][T11265] bond4: entered promiscuous mode [ 246.359232][T11265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 246.378120][T11265] bond4: left promiscuous mode [ 246.432982][T11270] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.445229][T11270] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 246.511231][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 246.531457][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 246.554977][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 246.564600][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 246.621018][T11292] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1556'. [ 246.646586][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 246.866723][T11308] tipc: Enabled bearer , priority 0 [ 246.939341][T11308] syzkaller0: entered promiscuous mode [ 246.995361][T11308] syzkaller0: entered allmulticast mode [ 247.015699][T11308] tipc: Resetting bearer [ 247.101349][T11300] tipc: Resetting bearer [ 247.758093][T11343] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 247.979976][ T8331] tipc: Node number set to 3435263125 [ 248.851494][T11300] tipc: Disabling bearer [ 248.922380][T11354] tipc: Can't bind to reserved service type 0 [ 249.056057][T11357] syzkaller1: entered promiscuous mode [ 249.061566][T11357] syzkaller1: entered allmulticast mode [ 249.117816][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 249.143970][T11371] netlink: 'syz.3.1576': attribute type 2 has an invalid length. [ 249.183516][T11371] netlink: 'syz.3.1576': attribute type 1 has an invalid length. [ 250.156727][T11424] sit1: entered promiscuous mode [ 250.161719][T11424] sit1: entered allmulticast mode [ 250.220076][T11430] tipc: Enabled bearer , priority 0 [ 250.271694][T11428] tipc: Disabling bearer [ 250.351432][T11432] wg1 speed is unknown, defaulting to 1000 [ 250.993361][T11450] tipc: Enabled bearer , priority 0 [ 251.157821][T11450] tipc: Disabling bearer [ 251.597936][T11492] __nla_validate_parse: 4 callbacks suppressed [ 251.597954][T11492] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1609'. [ 251.895694][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 252.005352][T11501] xfrm1: entered promiscuous mode [ 252.052056][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 252.162137][T11501] xfrm1: entered allmulticast mode [ 252.310777][T11536] tipc: Enabling of bearer rejected, already enabled [ 252.545460][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 252.669647][T11561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1626'. [ 252.873396][T11574] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 252.969468][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 253.104441][T11580] syzkaller0: entered promiscuous mode [ 253.115194][T11580] syzkaller0: entered allmulticast mode [ 253.496096][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 254.022143][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 254.053953][T11622] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 254.933323][T11636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1651'. [ 255.163227][T11646] netlink: 'syz.4.1654': attribute type 4 has an invalid length. [ 255.577448][T11679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1663'. [ 255.600513][T11679] netlink: 'syz.4.1663': attribute type 7 has an invalid length. [ 255.639208][T11679] netlink: 'syz.4.1663': attribute type 8 has an invalid length. [ 255.688911][T11683] netlink: 'syz.0.1665': attribute type 13 has an invalid length. [ 255.703234][T11679] batadv_slave_1: entered promiscuous mode [ 255.721260][T11679] batadv_slave_1: left promiscuous mode [ 256.142108][T11702] netlink: 'syz.3.1668': attribute type 11 has an invalid length. [ 256.470701][T11730] bond0: Caught tx_queue_len zero misconfig [ 256.865558][T11753] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 256.948423][T11761] bond6: (slave bridge5): making interface the new active one [ 256.959104][T11761] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 256.987494][T11763] __nla_validate_parse: 6 callbacks suppressed [ 256.987510][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'. [ 257.084406][T11712] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 257.113750][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1686'. [ 257.217625][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 257.222933][T11776] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 257.274349][T11776] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.282653][T11773] syzkaller0: entered promiscuous mode [ 257.289255][T11773] syzkaller0: entered allmulticast mode [ 257.322921][T11773] netlink: 'syz.1.1689': attribute type 10 has an invalid length. [ 257.371483][T11783] bond7: (slave geneve2): making interface the new active one [ 257.414542][T11783] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 257.476689][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.516683][T11773] team0: entered promiscuous mode [ 257.535393][T11773] bond0: (slave team0): Enslaving as an active interface with an up link [ 257.553825][T11786] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 257.739614][T11810] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1696'. [ 257.886395][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 257.916843][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 257.930668][T11820] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 257.936705][T11821] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 257.961883][T11821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.972361][T11820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.991924][T11816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1698'. [ 258.033089][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 258.105015][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.118455][T11832] netlink: 'syz.2.1702': attribute type 8 has an invalid length. [ 258.141156][T11827] IPv6: sit3: Disabled Multicast RS [ 258.148366][T11827] sit3: entered allmulticast mode [ 258.164894][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 258.209458][T11835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.377525][T11847] tipc: Enabling of bearer rejected, already enabled [ 258.419189][T11847] tipc: Resetting bearer [ 258.427969][T11845] netlink: 'syz.0.1706': attribute type 2 has an invalid length. [ 258.465718][T11851] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1709'. [ 258.616648][T11856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.686996][T11863] bond4: (slave veth3): Enslaving as an active interface with a down link [ 258.787534][T11856] veth5: entered promiscuous mode [ 258.803044][T11856] bond4: (slave veth5): Enslaving as an active interface with a down link [ 258.823903][T11863] vlan5: entered allmulticast mode [ 258.839057][T11863] bond4: entered allmulticast mode [ 258.846715][T11863] bond4: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 258.891513][T11875] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 259.236409][T11900] C: renamed from team_slave_0 (while UP) [ 259.289834][T11900] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 259.791730][T11943] geneve3: entered promiscuous mode [ 259.819414][T11943] geneve3: entered allmulticast mode [ 260.118382][T11962] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 260.343764][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.365076][T11976] sock: sock_timestamping_bind_phc: sock not bind to device [ 260.622313][T11946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.652419][T11946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.726777][T11946] veth1_vlan: left allmulticast mode [ 260.808597][T11946] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 260.903056][T11946] geneve2: left promiscuous mode [ 260.908399][T11946] geneve2: left allmulticast mode [ 260.918207][T11946] veth7: left promiscuous mode [ 260.924436][T11946] vlan2: left promiscuous mode [ 260.934206][T11946] bridge0: left promiscuous mode [ 260.970705][T11946] ip6erspan0: left promiscuous mode [ 260.979286][T11946] ip6erspan0: left allmulticast mode [ 261.012112][T11946] xfrm1: left promiscuous mode [ 261.020962][T11946] xfrm1: left allmulticast mode [ 261.077893][T11946] geneve3: left promiscuous mode [ 261.082886][T11946] geneve3: left allmulticast mode [ 261.102591][T11974] tipc: Enabled bearer , priority 10 [ 261.122811][ T1166] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.136520][ T1166] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.145969][ T1166] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 261.160702][T11990] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 261.212397][ T1166] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.251393][ T1166] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.291665][ T1166] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 261.343552][ T9344] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.371937][ T9344] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.400343][ T9344] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 261.410946][ T9344] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.428101][ T9344] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.448192][ T9344] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 261.476800][T11999] team0: Port device geneve4 added [ 261.536934][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 261.558324][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 261.584788][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 261.644320][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 261.893127][T12038] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 261.926431][T12037] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 262.418599][T12064] __nla_validate_parse: 19 callbacks suppressed [ 262.418617][T12064] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1763'. [ 262.556392][T12068] openvswitch: netlink: Unknown key attributes 2 [ 262.788452][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 262.852085][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 262.870224][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 262.879400][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 263.825514][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 263.915146][T12152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.020622][T12159] nft_compat: unsupported protocol 0 [ 264.174146][T12165] validate_nla: 8 callbacks suppressed [ 264.174165][T12165] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 264.202513][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 264.222786][T12165] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 264.240403][T12165] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 264.261511][T12165] gretap2: entered promiscuous mode [ 264.285877][T12165] gretap2: entered allmulticast mode [ 264.621870][T12193] netlink: 'syz.2.1797': attribute type 2 has an invalid length. [ 264.641512][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 264.920872][T12212] 8021q: VLANs not supported on ip6gre0 [ 264.941716][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 264.989184][T12215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.143065][T12221] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1806'. [ 265.408666][T12240] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 265.473587][T12245] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 265.529570][T12247] bridge0: port 1(syz_tun) entered blocking state [ 265.545255][T12247] bridge0: port 1(syz_tun) entered disabled state [ 265.551897][T12247] syz_tun: entered allmulticast mode [ 265.580655][T12247] syz_tun: entered promiscuous mode [ 265.589223][T12252] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 265.621350][T12253] netlink: 'syz.4.1816': attribute type 15 has an invalid length. [ 265.634959][T12255] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 265.665452][T12247] bridge0: port 1(syz_tun) entered blocking state [ 265.672338][T12247] bridge0: port 1(syz_tun) entered forwarding state [ 265.686526][T12257] IPVS: length: 217 != 8 [ 265.728242][T12260] netlink: 'syz.3.1819': attribute type 6 has an invalid length. [ 265.768342][T12255] bridge0: port 1(syz_tun) entered disabled state [ 265.791706][T12255] bridge0: port 1(syz_tun) entered blocking state [ 265.798367][T12255] bridge0: port 1(syz_tun) entered forwarding state [ 265.823850][T12255] bridge0: entered promiscuous mode [ 265.831480][T12255] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 265.853233][T12269] netlink: 'syz.2.1820': attribute type 11 has an invalid length. [ 266.093989][T12279] sctp: [Deprecated]: syz.0.1823 (pid 12279) Use of int in max_burst socket option deprecated. [ 266.093989][T12279] Use struct sctp_assoc_value instead [ 266.218330][T12287] netlink: 'syz.2.1825': attribute type 11 has an invalid length. [ 266.242283][T12287] netlink: 'syz.2.1825': attribute type 4 has an invalid length. [ 266.251023][T12289] netlink: 'syz.0.1826': attribute type 6 has an invalid length. [ 266.282153][T12289] netlink: 'syz.0.1826': attribute type 5 has an invalid length. [ 266.341406][T12276] wg1 speed is unknown, defaulting to 1000 [ 267.223806][T12335] wg1 speed is unknown, defaulting to 1000 [ 267.298518][T12277] lo: left promiscuous mode [ 267.320898][T12277] tunl0: left promiscuous mode [ 267.340193][T12277] gre0: left promiscuous mode [ 267.439026][T12347] __nla_validate_parse: 16 callbacks suppressed [ 267.439043][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1841'. [ 267.460041][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1841'. [ 267.527960][T12277] gretap0: left promiscuous mode [ 267.535315][T12277] erspan0: left promiscuous mode [ 267.542963][T12277] ip_vti0: left promiscuous mode [ 267.553707][T12277] bridge0: port 3(syz_tun) entered blocking state [ 267.560290][T12277] bridge0: port 3(syz_tun) entered forwarding state [ 267.573299][T12277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.622248][T12352] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 267.656718][T12351] bond0: option ad_select: unable to set because the bond device is up [ 267.860246][T12360] IPVS: Scheduler module ip_vs_sip not found [ 268.188229][T12366] team0 (unregistering): Port device C removed [ 268.198544][T12366] team0 (unregistering): Port device team_slave_1 removed [ 269.031192][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1855'. [ 269.062986][T12408] sctp: [Deprecated]: syz.1.1854 (pid 12408) Use of int in maxseg socket option. [ 269.062986][T12408] Use struct sctp_assoc_value instead [ 269.070727][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 269.362539][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 269.863753][T12449] validate_nla: 3 callbacks suppressed [ 269.863770][T12449] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 269.881742][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1864'. [ 270.569932][T12458] syzkaller1: entered promiscuous mode [ 270.578653][T12463] netlink: 'syz.1.1868': attribute type 30 has an invalid length. [ 270.579813][T12458] syzkaller1: entered allmulticast mode [ 270.625155][T12463] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 270.646332][T12463] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 270.671015][T12458] lo: entered allmulticast mode [ 270.694408][T12458] tunl0: Caught tx_queue_len zero misconfig [ 270.762404][T12474] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 270.938691][T12474] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.948697][ T6941] hid-generic 0005:04F3:1010.0004: item fetching failed at offset 0/1 [ 270.965713][ T6941] hid-generic 0005:04F3:1010.0004: probe with driver hid-generic failed with error -22 [ 270.988069][T12483] tipc: Enabled bearer , priority 0 [ 271.017782][T12486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1876'. [ 271.031958][T12483] syzkaller0: entered promiscuous mode [ 271.051947][T12483] syzkaller0: entered allmulticast mode [ 271.141206][T12483] tipc: Resetting bearer [ 271.201225][T12488] wg1 speed is unknown, defaulting to 1000 [ 271.230719][T12483] tipc: Resetting bearer [ 271.283268][T12496] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1880'. [ 271.301608][T12483] tipc: Disabling bearer [ 271.334278][T12496] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1880'. [ 271.365077][T12496] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1880'. [ 271.726669][T12513] netlink: 'syz.4.1887': attribute type 1 has an invalid length. [ 272.043900][T12531] veth0: entered promiscuous mode [ 272.049858][T12531] veth0: left promiscuous mode [ 272.085472][T12489] netlink: 'syz.1.1877': attribute type 4 has an invalid length. [ 272.561457][T12567] __nla_validate_parse: 69 callbacks suppressed [ 272.561473][T12567] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1900'. [ 272.584455][T12570] netlink: 'syz.3.1900': attribute type 11 has an invalid length. [ 272.814308][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1902'. [ 272.843243][T12575] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 272.858627][T12575] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1901'. [ 272.901683][T12575] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 273.015320][T12542] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 273.308446][T12601] netlink: 'syz.4.1908': attribute type 8 has an invalid length. [ 273.356533][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 273.378298][T12601] netlink: 'syz.4.1908': attribute type 5 has an invalid length. [ 273.409262][T12601] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1908'. [ 273.589972][T12625] netem: change failed [ 273.814128][T12640] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 273.832952][T12640] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1919'. [ 274.293388][T12664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.340764][T12670] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1929'. [ 274.442481][T12681] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1931'. [ 274.469606][T12681] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1931'. [ 274.597083][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1935'. [ 274.836378][T12706] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 274.855230][T12706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.031923][T12716] netlink: 'syz.3.1942': attribute type 8 has an invalid length. [ 275.194141][T12724] bridge0: Device is already in use. [ 275.453270][T12739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.499830][T12741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.523410][ T6941] IPVS: starting estimator thread 0... [ 276.645730][T12805] IPVS: using max 30 ests per chain, 72000 per kthread [ 276.692665][T12810] tipc: Enabled bearer , priority 0 [ 276.830221][T12810] syzkaller0: entered promiscuous mode [ 276.842289][T12810] syzkaller0: entered allmulticast mode [ 276.852234][T12810] tipc: Resetting bearer [ 277.084038][T12808] tipc: Resetting bearer [ 277.189609][T12842] netlink: 'syz.0.1977': attribute type 32 has an invalid length. [ 277.805628][ T24] tipc: Node number set to 31487608 [ 278.740835][T12808] tipc: Disabling bearer [ 279.009751][T12874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.079074][T12877] __nla_validate_parse: 8 callbacks suppressed [ 279.079091][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1984'. [ 279.193017][T12889] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 279.222996][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 279.253508][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 279.278948][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'. [ 279.311158][T12889] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 279.562579][T12916] veth0: entered promiscuous mode [ 279.832230][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 279.863307][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 279.874140][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 280.000524][T12939] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 280.063421][T12946] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 280.072626][T12939] netlink: 'syz.3.1999': attribute type 1 has an invalid length. [ 280.084296][T12941] Can't find ip_set type [ 280.094160][T12939] netlink: 'syz.3.1999': attribute type 2 has an invalid length. [ 280.159144][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2001'. [ 280.171543][T12946] 8021q: adding VLAN 0 to HW filter on device bond10 [ 280.336311][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 280.375672][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 280.399009][T12906] veth0: left promiscuous mode [ 280.491622][T12961] hsr_slave_0 (unregistering): left promiscuous mode [ 280.597698][T12982] netlink: 'syz.4.2010': attribute type 1 has an invalid length. [ 280.632441][T12982] 8021q: adding VLAN 0 to HW filter on device bond11 [ 280.862440][T12991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.314873][T13024] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 281.341290][T13028] tipc: Enabling of bearer rejected, already enabled [ 281.393135][ T5880] Bluetooth: hci4: link tx timeout [ 281.410576][T13029] lo: Caught tx_queue_len zero misconfig [ 281.417265][ T5880] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 281.867588][T13072] netlink: 'syz.1.2030': attribute type 4 has an invalid length. [ 281.963615][T13072] `: renamed from bond0 [ 281.991482][T13076] netlink: 'syz.2.2032': attribute type 1 has an invalid length. [ 282.260587][T13087] ip6tnl0: mtu greater than device maximum [ 282.391861][T13107] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 282.553706][T13113] netlink: 'syz.0.2043': attribute type 12 has an invalid length. [ 282.601257][ T9349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.617450][T13116] xt_policy: neither incoming nor outgoing policy selected [ 282.622672][ T9349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.016713][T13162] netlink: 'syz.0.2051': attribute type 4 has an invalid length. [ 283.032437][T13165] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 283.271595][T13171] netlink: 'syz.2.2057': attribute type 1 has an invalid length. [ 283.296357][T13170] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 283.342134][T13171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.497832][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 284.058358][T13206] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 284.179177][T13218] __nla_validate_parse: 31 callbacks suppressed [ 284.179195][T13218] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2069'. [ 284.531301][T13246] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2076'. [ 284.569627][T13246] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2076'. [ 284.634962][T13253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2079'. [ 284.717346][T13262] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2081'. [ 284.801327][T13264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2082'. [ 284.830186][T13264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2082'. [ 284.911978][T13274] tipc: Enabling of bearer rejected, already enabled [ 285.005590][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'. [ 285.309056][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 285.519162][T13305] bond0: Error: Cannot enslave bond to itself. [ 285.533612][T13308] C: renamed from lo (while UP) [ 285.550445][T13308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.638895][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2097'. [ 285.742959][T13317] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 285.929183][T13325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.930227][T13322] syz.2.2100 (13322) used greatest stack depth: 17864 bytes left [ 286.191855][T13346] x_tables: ip_tables: udp match: only valid for protocol 17 [ 286.314307][T13346] openvswitch: netlink: IP tunnel dst address not specified [ 286.506334][T13366] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 286.994529][T13397] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 287.247791][T13402] validate_nla: 1 callbacks suppressed [ 287.247808][T13402] netlink: 'syz.0.2124': attribute type 25 has an invalid length. [ 287.491303][T13425] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 287.628390][T13436] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 287.644953][T13438] netlink: 'syz.3.2131': attribute type 6 has an invalid length. [ 288.006018][T13456] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 288.132037][T13462] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 288.176880][T13462] 8021q: adding VLAN 0 to HW filter on device bond12 [ 288.202114][T13473] bond12: (slave geneve2): making interface the new active one [ 288.212404][T13473] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 288.542631][T13496] bond0: (slave bond_slave_0): Releasing backup interface [ 288.599866][T13496] bond0: (slave bond_slave_1): Releasing backup interface [ 288.645726][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.666792][T13496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.679311][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.713527][T13496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.748040][T13496] bond1: (slave bridge2): Releasing backup interface [ 288.755334][T13496] bridge2: left promiscuous mode [ 288.770255][T13496] bond2: (slave wireguard0): Releasing backup interface [ 288.781182][T13496] wireguard0: left promiscuous mode [ 289.030838][T13531] netlink: 'syz.3.2152': attribute type 4 has an invalid length. [ 289.061579][T13531] netlink: 'syz.3.2152': attribute type 4 has an invalid length. [ 291.291188][T13546] netlink: 'syz.3.2157': attribute type 2 has an invalid length. [ 291.331275][T13544] __nla_validate_parse: 13 callbacks suppressed [ 291.331294][T13544] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2158'. [ 291.360646][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 291.636784][T13567] bond0: (slave bond_slave_0): Releasing backup interface [ 291.656719][T13567] bond_slave_0: left promiscuous mode [ 291.674332][T13567] bond_slave_0: left allmulticast mode [ 291.694511][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'. [ 291.707502][T13567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.733114][T13567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.761775][T13567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.791228][T13567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.838535][T13567] bond0: (slave ÿ): Releasing backup interface [ 291.879287][T13567] mac80211_hwsim hwsim7 ÿ: left promiscuous mode [ 291.888175][T13567] mac80211_hwsim hwsim7 ÿ: left allmulticast mode [ 291.933919][T13567] bond2: (slave ip6gretap1): Removing an active aggregator [ 291.944588][T13567] bond2: (slave ip6gretap1): Releasing backup interface [ 291.952049][T13567] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 46:3a:0b:e8:05:47 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 291.988009][T13567] bond2: (slave veth3): Releasing backup interface [ 292.008188][T13567] bond5: (slave bond6): Releasing backup interface [ 292.037550][T13567] bond7: (slave gretap0): Releasing active interface [ 292.057499][T13567] bond12: (slave geneve2): Releasing active interface [ 292.080056][ T1573] wg1 speed is unknown, defaulting to 1000 [ 292.276894][T13599] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 292.326276][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'. [ 292.491731][T13614] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2173'. [ 292.523799][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 292.553729][T13619] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2175'. [ 292.570681][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2175'. [ 292.581969][T13621] delete_channel: no stack [ 292.582280][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 292.619190][T13622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.720689][T13627] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 292.796953][T13628] syzkaller1: entered promiscuous mode [ 292.802474][T13628] syzkaller1: entered allmulticast mode [ 292.823809][T13635] netlink: 'syz.1.2180': attribute type 21 has an invalid length. [ 292.839525][T13635] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2180'. [ 292.894486][T13635] netlink: 'syz.1.2180': attribute type 5 has an invalid length. [ 292.922951][T13637] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 293.152893][T13660] netlink: 'syz.1.2188': attribute type 4 has an invalid length. [ 293.270539][T13667] veth0: entered promiscuous mode [ 293.277177][T13667] veth0: left promiscuous mode [ 293.413203][T13672] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 293.465432][T13675] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 294.117314][T13722] veth0: entered promiscuous mode [ 294.937554][T13719] veth0: left promiscuous mode [ 295.370583][T13790] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 295.377894][T13789] vlan0: entered allmulticast mode [ 295.383419][T13789] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 295.480539][T13794] veth0: entered promiscuous mode [ 295.488254][T13793] veth0: left promiscuous mode [ 295.945315][T13824] netlink: 'syz.4.2234': attribute type 26 has an invalid length. [ 296.321002][T13848] xfrm2: entered allmulticast mode [ 296.696075][T13879] netlink: 'syz.0.2248': attribute type 33 has an invalid length. [ 296.717067][T13879] __nla_validate_parse: 14 callbacks suppressed [ 296.717083][T13879] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2248'. [ 296.772932][T13883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2251'. [ 296.795375][T13884] sctp: [Deprecated]: syz.1.2250 (pid 13884) Use of int in maxseg socket option. [ 296.795375][T13884] Use struct sctp_assoc_value instead [ 296.840097][T13886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.926344][T13891] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 297.654761][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 298.114120][T13938] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2268'. [ 298.153513][T13942] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 298.236678][T13948] netlink: 'syz.1.2272': attribute type 4 has an invalid length. [ 298.264852][T13948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2272'. [ 298.468983][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 298.488253][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 298.502085][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 298.514017][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 298.528749][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 298.549905][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 298.930809][T13987] : renamed from bridge_slave_0 (while UP) [ 299.021975][T13992] sctp: [Deprecated]: syz.2.2288 (pid 13992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.021975][T13992] Use struct sctp_sack_info instead [ 299.071256][T13992] sctp: [Deprecated]: syz.2.2288 (pid 13992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.071256][T13992] Use struct sctp_sack_info instead [ 299.099812][T13992] sctp: [Deprecated]: syz.2.2288 (pid 13992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.099812][T13992] Use struct sctp_sack_info instead [ 299.121569][T13996] sctp: [Deprecated]: syz.2.2288 (pid 13996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.121569][T13996] Use struct sctp_sack_info instead [ 299.680680][T14036] netlink: 'syz.1.2300': attribute type 4 has an invalid length. [ 299.734819][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 299.796038][T14043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.954789][T14052] openvswitch: netlink: Missing key (keys=40, expected=100) [ 299.993400][T14054] netlink: 'syz.0.2306': attribute type 2 has an invalid length. [ 300.021392][T14054] netlink: 'syz.0.2306': attribute type 15 has an invalid length. [ 300.046039][T14054] bridge_slave_0: left allmulticast mode [ 300.051752][T14054] bridge_slave_0: left promiscuous mode [ 300.069340][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.097283][T14054] bridge_slave_1: left allmulticast mode [ 300.106972][T14054] bridge_slave_1: left promiscuous mode [ 300.112853][T14054] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.140188][T14054] bond0: (slave bond_slave_0): Releasing backup interface [ 300.174268][T14054] bond0: (slave bond_slave_1): Releasing backup interface [ 300.204537][T14054] team0: Port device team_slave_0 removed [ 300.224487][T14054] team0: Port device team_slave_1 removed [ 300.232606][T14054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.246702][T14054] bond2: (slave ip6gretap1): Releasing backup interface [ 300.258150][T14054] veth3: left allmulticast mode [ 300.266755][T14054] veth3: left promiscuous mode [ 300.271882][T14054] bridge1: port 1(veth3) entered disabled state [ 300.283765][T14054] veth5: left allmulticast mode [ 300.289224][T14054] veth5: left promiscuous mode [ 300.304921][T14054] bridge1: port 2(veth5) entered disabled state [ 300.318193][T14054] bond3: (slave veth7): Releasing active interface [ 300.352753][T14054] team0: Port device geneve4 removed [ 300.372995][T13147] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 300.397504][T13147] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 300.412542][T13147] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 300.442968][T13147] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 300.948641][T14112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.992849][T14112] veth1_macvtap: left promiscuous mode [ 301.935702][T14173] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 302.009707][T14177] __nla_validate_parse: 97 callbacks suppressed [ 302.009725][T14177] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2344'. [ 302.221900][T14186] wg1 speed is unknown, defaulting to 1000 [ 302.380149][T14196] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2348'. [ 302.465307][T14198] tipc: Enabled bearer , priority 0 [ 302.635976][T14198] syzkaller0: entered promiscuous mode [ 302.654771][T14198] syzkaller0: entered allmulticast mode [ 302.666120][T14198] tipc: Resetting bearer [ 302.749674][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 302.762195][T14197] tipc: Resetting bearer [ 304.131830][T14197] tipc: Disabling bearer [ 304.321115][T14232] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2360'. [ 304.341916][T14231] netlink: 'syz.0.2359': attribute type 1 has an invalid length. [ 304.357431][T14230] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2360'. [ 304.357936][T14236] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2361'. [ 304.411221][T14234] net veth1_virt_wifi .: renamed from virt_wifi0 [ 304.520344][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 304.648545][T14249] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.2363'. [ 304.851798][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'. [ 304.889820][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 304.891613][T14257] bridge0: port 1(ipvlan0) entered blocking state [ 304.908284][T14257] bridge0: port 1(ipvlan0) entered disabled state [ 304.915720][T14257] ipvlan0: entered allmulticast mode [ 304.921051][T14257] bridge0: entered allmulticast mode [ 304.931177][T14257] ipvlan0: left allmulticast mode [ 304.937449][T14257] bridge0: left allmulticast mode [ 304.944420][T14264] netlink: 'syz.0.2368': attribute type 7 has an invalid length. [ 305.008294][T14264] : entered promiscuous mode [ 305.036922][T14263] nbd0: detected capacity change from 0 to 127 [ 305.052763][ T51] block nbd0: Receive control failed (result -32) [ 305.065315][ T9224] block nbd0: Dead connection, failed to find a fallback [ 305.074115][ T9224] block nbd0: shutting down sockets [ 305.080348][ T9224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.090755][ T9224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 305.101620][ T9224] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.110849][ T9224] Buffer I/O error on dev nbd0, logical block 1, async page read [ 305.119018][ T9224] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.128465][ T9224] Buffer I/O error on dev nbd0, logical block 2, async page read [ 305.137456][ T9224] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.152861][ T9224] Buffer I/O error on dev nbd0, logical block 3, async page read [ 305.174135][T14266] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 305.184330][ T9224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.206212][ T9224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 305.236488][T14266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.253389][ T9224] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.287665][ T9224] Buffer I/O error on dev nbd0, logical block 1, async page read [ 305.298924][ T9224] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.311068][ T9224] Buffer I/O error on dev nbd0, logical block 2, async page read [ 305.323632][ T9224] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.341421][T14274] netlink: 'syz.1.2372': attribute type 23 has an invalid length. [ 305.353693][ T9224] Buffer I/O error on dev nbd0, logical block 3, async page read [ 305.379825][ T9224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.410297][T14275] pim6reg1: entered promiscuous mode [ 305.416672][T14275] pim6reg1: entered allmulticast mode [ 305.437625][T14278] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 305.439437][ T9224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 305.454092][ T9224] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.555423][ T9224] Buffer I/O error on dev nbd0, logical block 1, async page read [ 305.587440][ T9224] ldm_validate_partition_table(): Disk read failed. [ 305.618311][ T9224] Dev nbd0: unable to read RDB block 0 [ 305.660554][ T9224] nbd0: unable to read partition table [ 305.703499][ T9224] ldm_validate_partition_table(): Disk read failed. [ 305.767214][ T9224] Dev nbd0: unable to read RDB block 0 [ 305.789488][ T9224] nbd0: unable to read partition table [ 305.840008][T14296] gretap0: entered promiscuous mode [ 305.864581][T14304] netlink: 'syz.1.2382': attribute type 83 has an invalid length. [ 305.994532][T14307] tipc: Enabled bearer , priority 0 [ 306.001780][T14308] syzkaller0: entered promiscuous mode [ 306.031977][T14308] syzkaller0: entered allmulticast mode [ 306.102970][T14308] tipc: Resetting bearer [ 306.163378][T14308] tipc: Disabling bearer [ 306.248939][T14317] bond8: entered promiscuous mode [ 306.253996][T14317] bond8: entered allmulticast mode [ 306.276033][T14317] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.463852][T14326] wg1 speed is unknown, defaulting to 1000 [ 306.499075][T14336] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 306.516921][T14336] block nbd1: Unsupported socket: shutdown callout must be supported. [ 307.054571][T14366] __nla_validate_parse: 7 callbacks suppressed [ 307.054589][T14366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2400'. [ 307.095343][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 307.304452][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 307.474275][T14386] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2407'. [ 307.567138][T14395] netlink: 'syz.2.2409': attribute type 21 has an invalid length. [ 307.575565][T14395] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.302943][T14426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 308.359122][T14426] netlink: 'syz.3.2417': attribute type 7 has an invalid length. [ 308.395340][T14426] netlink: 'syz.3.2417': attribute type 8 has an invalid length. [ 308.433596][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 308.510391][T14426] erspan0: entered promiscuous mode [ 308.519222][T14426] erspan0: left promiscuous mode [ 308.541294][T14437] netlink: 'syz.0.2421': attribute type 2 has an invalid length. [ 309.023704][T14472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2430'. [ 309.406097][T14499] netlink: 'syz.4.2439': attribute type 83 has an invalid length. [ 309.587724][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2442'. [ 309.618415][T14511] netlink: 'syz.3.2443': attribute type 4 has an invalid length. [ 309.630844][T14512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2444'. [ 309.900026][T14525] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 309.931748][T14525] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2448'. [ 309.992562][T14480] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 310.345901][T14555] bridge_slave_0: entered promiscuous mode [ 311.357915][T14579] delete_channel: no stack [ 311.970868][T14620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.005630][T14628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.118463][T14641] __nla_validate_parse: 5 callbacks suppressed [ 312.118480][T14641] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2480'. [ 312.172718][T14641] 0ªî{X¹¦: entered promiscuous mode [ 312.188466][T14641] 0ªî{X¹¦: left allmulticast mode [ 312.212766][T14646] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2480'. [ 312.239698][T14646] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 312.258759][T14646] 1ªî{X¹¦: left promiscuous mode [ 312.285090][T14646] 1ªî{X¹¦: entered allmulticast mode [ 312.302402][T14646] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 312.364174][T14655] syzkaller1: entered promiscuous mode [ 312.383371][T14655] syzkaller1: entered allmulticast mode [ 312.416942][T14658] gtp0: entered promiscuous mode [ 312.425812][T14658] gtp0: entered allmulticast mode [ 312.694461][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 312.711758][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'. [ 313.130186][T14706] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2500'. [ 313.207054][T14715] netlink: 'syz.0.2501': attribute type 11 has an invalid length. [ 313.323769][T14713] bridge0: port 1(macsec1) entered blocking state [ 313.344963][T14713] bridge0: port 1(macsec1) entered disabled state [ 313.357152][T14713] macsec1: entered allmulticast mode [ 313.383232][T14713] bridge0: entered allmulticast mode [ 313.399169][T14713] macsec1: left allmulticast mode [ 313.425873][T14713] bridge0: left allmulticast mode [ 313.982647][T14754] veth0_macvtap: left promiscuous mode [ 314.181057][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'. [ 314.282913][T14766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.311520][T14778] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 314.331569][T14776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.338776][T14776] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 314.344571][T14778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2521'. [ 314.351182][T14776] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 314.398451][T14785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.700744][T14804] netlink: 'syz.1.2525': attribute type 11 has an invalid length. [ 314.725878][T14804] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2525'. [ 314.946948][T14818] syzkaller1: entered promiscuous mode [ 314.968146][T14818] syzkaller1: entered allmulticast mode [ 315.097833][T14830] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 315.245198][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 315.260792][T13139] nci: nci_ntf_packet: unknown ntf opcode 0x1d [ 315.270764][T14840] netlink: 'syz.0.2535': attribute type 5 has an invalid length. [ 315.290870][T14840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2535'. [ 315.366182][T14849] ip6gre0: Master is either lo or non-ether device [ 316.119233][T14861] siw: device registration error -23 [ 316.246547][T14869] netlink: 'syz.1.2544': attribute type 4 has an invalid length. [ 316.467288][T14888] netem: change failed [ 316.614391][T14906] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 316.936576][T14931] sock: sock_set_timeout: `syz.4.2553' (pid 14931) tries to set negative timeout [ 317.058721][T14936] IPVS: set_ctl: invalid protocol: 92 172.30.255.3:20001 [ 317.372038][T14950] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 317.393451][ T30] audit: type=1107 audit(1758788200.753:4): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 317.393451][ T30] g#`#‹´W ˆ&/‰úÆu˜Äó¢¸}¾V¹û)—P)Õådÿ, priority 0 [ 317.874359][T14985] __nla_validate_parse: 3 callbacks suppressed [ 317.874373][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 317.874609][T14984] syzkaller0: entered promiscuous mode [ 317.912139][T14984] syzkaller0: entered allmulticast mode [ 317.926587][T14979] netlink: 212136 bytes leftover after parsing attributes in process `syz.3.2569'. [ 317.951736][T14979] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 317.962194][T14990] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 317.980142][T14979] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 317.990374][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'. [ 318.059277][T14979] tipc: Resetting bearer [ 318.097788][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2574'. [ 318.110938][T14979] tipc: Disabling bearer [ 318.152235][T15001] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2575'. [ 318.175992][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'. [ 318.290874][T15009] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2578'. [ 318.529926][T15024] bridge9: entered promiscuous mode [ 318.577939][T15024] bridge9: entered allmulticast mode [ 318.625941][T15037] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2586'. [ 318.852726][T15052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.159065][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2596'. [ 319.169166][T15075] netlink: 'syz.0.2597': attribute type 4 has an invalid length. [ 319.193384][T15075] netlink: 'syz.0.2597': attribute type 4 has an invalid length. [ 319.220298][T15075] tap0: tun_chr_ioctl cmd 2148553947 [ 319.352609][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 319.692448][T15108] netlink: 'syz.2.2607': attribute type 1 has an invalid length. [ 319.762903][T15108] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.805187][T15108] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 319.980814][T15121] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 320.109528][T15131] netlink: 'syz.3.2613': attribute type 7 has an invalid length. [ 320.151901][T15126] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.167155][T15121] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 320.175323][T15126] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 320.186853][T15126] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 320.799692][T15175] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 321.064231][T15188] IPv6: sit2: Disabled Multicast RS [ 321.085397][T15188] sit2: entered allmulticast mode [ 321.292397][T15197] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 321.357747][T15203] netlink: 'syz.1.2634': attribute type 6 has an invalid length. [ 321.497907][T15211] netlink: 'syz.2.2636': attribute type 8 has an invalid length. [ 321.515393][T15212] netlink: 'syz.2.2636': attribute type 8 has an invalid length. [ 321.921021][T15240] tipc: Enabling of bearer rejected, already enabled [ 321.934228][T15240] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 322.149283][T15251] netlink: 'syz.2.2647': attribute type 10 has an invalid length. [ 322.186972][T15251] netlink: 'syz.2.2647': attribute type 10 has an invalid length. [ 322.227744][T15251] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 322.347958][T15262] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 323.292419][T15321] __nla_validate_parse: 23 callbacks suppressed [ 323.292437][T15321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2668'. [ 323.317803][T15321] bridge_slave_0: left promiscuous mode [ 323.380175][T15324] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.244013][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 324.716502][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 324.726627][T15378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2687'. [ 324.749646][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 324.775528][T15378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2687'. [ 324.782710][T15389] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 324.784501][T15378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2687'. [ 324.859243][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 325.024510][T15389] 8021q: adding VLAN 0 to HW filter on device bond14 [ 325.253434][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2695'. [ 325.323471][T15421] netlink: 'syz.2.2696': attribute type 12 has an invalid length. [ 325.452337][T15393] bond14 (unregistering): Released all slaves [ 325.671882][T15434] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 325.728152][T15434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2700'. [ 326.073101][ T9343] smc: removing ib device syz0 [ 326.360050][ T8330] ================================================================== [ 326.368143][ T8330] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 326.376900][ T8330] Read of size 8 at addr ffff88805649e2e8 by task kworker/0:9/8330 [ 326.384776][ T8330] [ 326.387089][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 326.387102][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.387110][ T8330] Workqueue: events smc_ib_port_event_work [ 326.387130][ T8330] Call Trace: [ 326.387136][ T8330] [ 326.387142][ T8330] dump_stack_lvl+0x189/0x250 [ 326.387156][ T8330] ? rcu_is_watching+0x15/0xb0 [ 326.387166][ T8330] ? __kasan_check_byte+0x12/0x40 [ 326.387185][ T8330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.387202][ T8330] ? rcu_is_watching+0x15/0xb0 [ 326.387217][ T8330] ? lock_release+0x4b/0x3e0 [ 326.387240][ T8330] ? __virt_addr_valid+0x1c8/0x5c0 [ 326.387254][ T8330] ? __virt_addr_valid+0x4a5/0x5c0 [ 326.387266][ T8330] print_report+0xca/0x240 [ 326.387275][ T8330] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 326.387288][ T8330] kasan_report+0x118/0x150 [ 326.387302][ T8330] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 326.387315][ T8330] __ethtool_get_link_ksettings+0x6e/0x190 [ 326.387328][ T8330] ib_get_eth_speed+0x15e/0x7b0 [ 326.387342][ T8330] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 326.387356][ T8330] ? do_raw_spin_unlock+0x122/0x240 [ 326.387369][ T8330] rxe_query_port+0x93/0x3b0 [ 326.387380][ T8330] ib_query_port+0x16d/0x830 [ 326.387394][ T8330] smc_ib_port_event_work+0x15a/0x940 [ 326.387410][ T8330] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.387419][ T8330] ? process_scheduled_works+0x9ef/0x17b0 [ 326.387428][ T8330] ? process_scheduled_works+0x9ef/0x17b0 [ 326.387437][ T8330] process_scheduled_works+0xae1/0x17b0 [ 326.387452][ T8330] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.387465][ T8330] worker_thread+0x8a0/0xda0 [ 326.387480][ T8330] kthread+0x70e/0x8a0 [ 326.387492][ T8330] ? __pfx_worker_thread+0x10/0x10 [ 326.387501][ T8330] ? __pfx_kthread+0x10/0x10 [ 326.387514][ T8330] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.387522][ T8330] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.387532][ T8330] ? __pfx_kthread+0x10/0x10 [ 326.387543][ T8330] ret_from_fork+0x439/0x7d0 [ 326.387553][ T8330] ? __pfx_ret_from_fork+0x10/0x10 [ 326.387564][ T8330] ? __switch_to_asm+0x39/0x70 [ 326.387576][ T8330] ? __switch_to_asm+0x33/0x70 [ 326.387587][ T8330] ? __pfx_kthread+0x10/0x10 [ 326.387599][ T8330] ret_from_fork_asm+0x1a/0x30 [ 326.387615][ T8330] [ 326.387618][ T8330] [ 326.608994][ T8330] Allocated by task 5873: [ 326.613306][ T8330] kasan_save_track+0x3e/0x80 [ 326.617974][ T8330] __kasan_kmalloc+0x93/0xb0 [ 326.622548][ T8330] __kvmalloc_node_noprof+0x30d/0x5f0 [ 326.627913][ T8330] alloc_netdev_mqs+0xa3/0x11b0 [ 326.632760][ T8330] rtnl_create_link+0x31f/0xd10 [ 326.637613][ T8330] rtnl_newlink_create+0x25c/0xb00 [ 326.642720][ T8330] rtnl_newlink+0x16d6/0x1c70 [ 326.647409][ T8330] rtnetlink_rcv_msg+0x7cf/0xb70 [ 326.652330][ T8330] netlink_rcv_skb+0x208/0x470 [ 326.657080][ T8330] netlink_unicast+0x82f/0x9e0 [ 326.661834][ T8330] netlink_sendmsg+0x805/0xb30 [ 326.666583][ T8330] __sock_sendmsg+0x219/0x270 [ 326.671246][ T8330] __sys_sendto+0x3bd/0x520 [ 326.675732][ T8330] __x64_sys_sendto+0xde/0x100 [ 326.680474][ T8330] do_syscall_64+0xfa/0x3b0 [ 326.684960][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.690833][ T8330] [ 326.693137][ T8330] Freed by task 15429: [ 326.697179][ T8330] kasan_save_track+0x3e/0x80 [ 326.701839][ T8330] kasan_save_free_info+0x46/0x50 [ 326.706849][ T8330] __kasan_slab_free+0x5b/0x80 [ 326.711599][ T8330] kfree+0x18e/0x440 [ 326.715489][ T8330] device_release+0x9c/0x1c0 [ 326.720063][ T8330] kobject_put+0x22b/0x480 [ 326.724462][ T8330] netdev_run_todo+0xd2e/0xea0 [ 326.729212][ T8330] rtnl_dellink+0x537/0x710 [ 326.733696][ T8330] rtnetlink_rcv_msg+0x7cf/0xb70 [ 326.738611][ T8330] netlink_rcv_skb+0x208/0x470 [ 326.743353][ T8330] netlink_unicast+0x82f/0x9e0 [ 326.748097][ T8330] netlink_sendmsg+0x805/0xb30 [ 326.752839][ T8330] __sock_sendmsg+0x219/0x270 [ 326.757501][ T8330] ____sys_sendmsg+0x505/0x830 [ 326.762248][ T8330] ___sys_sendmsg+0x21f/0x2a0 [ 326.766911][ T8330] __x64_sys_sendmsg+0x19b/0x260 [ 326.771831][ T8330] do_syscall_64+0xfa/0x3b0 [ 326.776313][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.782183][ T8330] [ 326.784487][ T8330] The buggy address belongs to the object at ffff88805649e000 [ 326.784487][ T8330] which belongs to the cache kmalloc-cg-4k of size 4096 [ 326.798779][ T8330] The buggy address is located 744 bytes inside of [ 326.798779][ T8330] freed 4096-byte region [ffff88805649e000, ffff88805649f000) [ 326.812650][ T8330] [ 326.814961][ T8330] The buggy address belongs to the physical page: [ 326.821361][ T8330] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56498 [ 326.830128][ T8330] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 326.838620][ T8330] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 326.846147][ T8330] page_type: f5(slab) [ 326.850114][ T8330] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 326.858684][ T8330] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 326.867256][ T8330] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 326.875907][ T8330] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 326.884557][ T8330] head: 00fff00000000003 ffffea0001592601 00000000ffffffff 00000000ffffffff [ 326.893205][ T8330] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 326.901850][ T8330] page dumped because: kasan: bad access detected [ 326.908252][ T8330] page_owner tracks the page as allocated [ 326.913947][ T8330] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5873, tgid 5873 (syz-executor), ts 76574542398, free_ts 21523931711 [ 326.935291][ T8330] post_alloc_hook+0x240/0x2a0 [ 326.940047][ T8330] get_page_from_freelist+0x21e4/0x22c0 [ 326.945577][ T8330] __alloc_frozen_pages_noprof+0x181/0x370 [ 326.951363][ T8330] alloc_pages_mpol+0x232/0x4a0 [ 326.956200][ T8330] allocate_slab+0x8a/0x370 [ 326.960689][ T8330] ___slab_alloc+0xbeb/0x1420 [ 326.965351][ T8330] __kmalloc_cache_noprof+0x296/0x3d0 [ 326.970708][ T8330] ipv6_add_dev+0x6ca/0x1370 [ 326.975279][ T8330] addrconf_notify+0x794/0x1010 [ 326.980116][ T8330] notifier_call_chain+0x1b3/0x3e0 [ 326.985213][ T8330] register_netdevice+0x1608/0x1ae0 [ 326.990397][ T8330] virt_wifi_newlink+0x428/0x860 [ 326.995323][ T8330] rtnl_newlink_create+0x310/0xb00 [ 327.000417][ T8330] rtnl_newlink+0x16d6/0x1c70 [ 327.005079][ T8330] rtnetlink_rcv_msg+0x7cf/0xb70 [ 327.009998][ T8330] netlink_rcv_skb+0x208/0x470 [ 327.014744][ T8330] page last free pid 1 tgid 1 stack trace: [ 327.020528][ T8330] __free_frozen_pages+0xbc4/0xd30 [ 327.025625][ T8330] free_contig_range+0x1bd/0x4a0 [ 327.030545][ T8330] destroy_args+0x69/0x660 [ 327.034946][ T8330] debug_vm_pgtable+0x39f/0x3b0 [ 327.039781][ T8330] do_one_initcall+0x233/0x820 [ 327.044530][ T8330] do_initcall_level+0x104/0x190 [ 327.049451][ T8330] do_initcalls+0x59/0xa0 [ 327.053759][ T8330] kernel_init_freeable+0x334/0x4b0 [ 327.058940][ T8330] kernel_init+0x1d/0x1d0 [ 327.063253][ T8330] ret_from_fork+0x439/0x7d0 [ 327.067824][ T8330] ret_from_fork_asm+0x1a/0x30 [ 327.072587][ T8330] [ 327.074892][ T8330] Memory state around the buggy address: [ 327.080518][ T8330] ffff88805649e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.088562][ T8330] ffff88805649e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.096604][ T8330] >ffff88805649e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.104642][ T8330] ^ [ 327.112082][ T8330] ffff88805649e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.120124][ T8330] ffff88805649e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 327.128166][ T8330] ================================================================== [ 327.172858][ T8330] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 327.180078][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 327.189453][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.199519][ T8330] Workqueue: events smc_ib_port_event_work [ 327.205357][ T8330] Call Trace: [ 327.208639][ T8330] [ 327.211579][ T8330] dump_stack_lvl+0x99/0x250 [ 327.216178][ T8330] ? __asan_memcpy+0x40/0x70 [ 327.220762][ T8330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.225976][ T8330] ? __pfx__printk+0x10/0x10 [ 327.230583][ T8330] vpanic+0x281/0x750 [ 327.234567][ T8330] ? preempt_schedule+0xae/0xc0 [ 327.239416][ T8330] ? __pfx_vpanic+0x10/0x10 [ 327.243918][ T8330] ? preempt_schedule_common+0x83/0xd0 [ 327.249379][ T8330] ? preempt_schedule+0xae/0xc0 [ 327.254231][ T8330] ? __pfx_preempt_schedule+0x10/0x10 [ 327.259597][ T8330] panic+0xb9/0xc0 [ 327.263305][ T8330] ? __pfx_panic+0x10/0x10 [ 327.267705][ T8330] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 327.273592][ T8330] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 327.279560][ T8330] check_panic_on_warn+0x89/0xb0 [ 327.284488][ T8330] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 327.290454][ T8330] end_report+0x78/0x160 [ 327.294684][ T8330] kasan_report+0x129/0x150 [ 327.299172][ T8330] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 327.305141][ T8330] __ethtool_get_link_ksettings+0x6e/0x190 [ 327.310934][ T8330] ib_get_eth_speed+0x15e/0x7b0 [ 327.315771][ T8330] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 327.321132][ T8330] ? do_raw_spin_unlock+0x122/0x240 [ 327.326320][ T8330] rxe_query_port+0x93/0x3b0 [ 327.330897][ T8330] ib_query_port+0x16d/0x830 [ 327.335476][ T8330] smc_ib_port_event_work+0x15a/0x940 [ 327.340842][ T8330] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.346022][ T8330] ? process_scheduled_works+0x9ef/0x17b0 [ 327.351721][ T8330] ? process_scheduled_works+0x9ef/0x17b0 [ 327.357421][ T8330] process_scheduled_works+0xae1/0x17b0 [ 327.362970][ T8330] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.368934][ T8330] worker_thread+0x8a0/0xda0 [ 327.373514][ T8330] kthread+0x70e/0x8a0 [ 327.377579][ T8330] ? __pfx_worker_thread+0x10/0x10 [ 327.382693][ T8330] ? __pfx_kthread+0x10/0x10 [ 327.387278][ T8330] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.392465][ T8330] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.397655][ T8330] ? __pfx_kthread+0x10/0x10 [ 327.402233][ T8330] ret_from_fork+0x439/0x7d0 [ 327.406807][ T8330] ? __pfx_ret_from_fork+0x10/0x10 [ 327.411903][ T8330] ? __switch_to_asm+0x39/0x70 [ 327.416654][ T8330] ? __switch_to_asm+0x33/0x70 [ 327.421402][ T8330] ? __pfx_kthread+0x10/0x10 [ 327.425979][ T8330] ret_from_fork_asm+0x1a/0x30 [ 327.430738][ T8330] [ 327.434004][ T8330] Kernel Offset: disabled [ 327.438310][ T8330] Rebooting in 86400 seconds..