last executing test programs: 8.026385928s ago: executing program 1 (id=2137): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a0904000000000000000001000000ff0104802c0001800b0001006e756d67656e00001c0002800800014000000000080003400000000208000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100080c10000000000000000000", 0x58}], 0x1) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000000)={0x7, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @multicast}]}) 7.935116003s ago: executing program 1 (id=2138): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 7.030410356s ago: executing program 1 (id=2144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002500000000000500260000080000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) 6.590369954s ago: executing program 1 (id=2150): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x800, 0x5, 0x2, 0x8001, 0x101, 0x7, 0x8, {0x0, @in6={{0xa, 0x4e24, 0x4222, @empty, 0x200}}, 0x52, 0x5, 0x2, 0x10001, 0x3}}, &(0x7f0000000100)=0xb0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x8ae3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x40, r5, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x8}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, r6}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr=' \x01\x00', r6}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f0000006940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x12}]}}, 0x0, 0x26}, 0x20) 6.236823918s ago: executing program 1 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1c}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}]}}}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001e00)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @dev, @remote}, &(0x7f0000001e80)=0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="11feb4cbda28f1f2f6f8cdd3b7c2df66d206bd7678b46205aecbe6be4ceac015ffd17080802b773c3e704065242a9a6ef8286455b5b4f491a6a128070f913dd0cda0b5a968a8020c47271ef0c150b76a5e14e3da8ac84b70fc387ed59b12f8b5b5e16092ade841c4ec5a86bd940d248e384c85c79bae82c33385c761cb9c4c43e10816ed6283ef29f1f12819fa364e74b906e05fed4021db21e7351ed17fac18fb2047d5137ef9e34a7737b8f3af04a244326cfd2cdb5cbf901a001661a6391ebc86ea53e792d9", 0xc7}, {&(0x7f0000000080)="c9240c19bf780f25fcbed3ce60ff36e29c6bf524d5c6a6dc3453426eb878a7170665ac211f", 0x25}, {&(0x7f00000000c0)="559c1c8aaf447a5c0c710433463cc6882e4857793a3135fc6be296ce39b1128cf4b5e6db", 0x24}, {&(0x7f00000012c0)="9fef40436ed26728794de3b916a6c55ce244debf7bf16f7188c6b0afa7d35919a3c2d3b967fb076e25d27cd301dfb3d1636f2499d5ce038df02ca4e6951432638f6a0ad5735cdd5cdda9ec62fdc13d3ce91236a28ca7e3690ab69eafc7a9621500e353f0532c1a8109a33c5f3ceb177a6878d4dcb7d6b20b0d942ae840c30c7bf219051645d0df62feb10e10a0e58c7a0a0249bd0adb3ba08b1f49e0064575349c37e42312a522", 0xa7}, {&(0x7f0000001380)="5a11639974c8aee981a2a479c9bd3497404e6f0e95942e33890e640dd7d9a6d7716fef46dcce4cd0", 0x28}], 0x6, &(0x7f0000001440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @cipso={0x86, 0x4d, 0x0, [{0x6, 0xc, "f658d8ba2ac37242f6d8"}, {0x6, 0x10, "573e0aa322f96cf47614f005daf9"}, {0x1, 0x12, "887477e418aa73dcae2faf544d83482a"}, {0x1, 0xe, "3ddd425b37f62711d8df398c"}, {0x6, 0x8, "c73103aabe48"}, {0x0, 0x3, "06"}]}, @noop]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@generic={0x44, 0x10, "2fe41a5322a0c4026f0822a85f20"}, @generic={0x94, 0xc, "c22443e65e59f054ce91"}, @ssrr={0x89, 0x1b, 0x3a, [@broadcast, @private=0xa010100, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x24, 0xf5, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @timestamp={0x44, 0x28, 0xe6, 0x0, 0x7, [0x2715, 0x5, 0xcf, 0x4ba3, 0x6, 0xdc2, 0xa, 0x8, 0x10000]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x170}}, {{&(0x7f00000015c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001600)="0c26765318fd80a515acd3fd2d6e8d5517a62cae6df7", 0x16}, {&(0x7f0000001640)="7a412fab1b72a7909f1d02a831fd0c39478a5f524d0168db11d2122f7a8a3add9d801c8b95291f6f7992304a1562325bd007a0f528c70a5d341d15947e659d92e71db09a9ea4b84eb2ab0c0b9d323b3998994ccbd72f812a0398289cd39ecd93db84e032b30e4a1f1e6322e713a9df01f3aba1357164ec6cf4a1f26866fe0b3b864914f2a0c15f73903c3bc48fc81665971c4571c74d28abef967f0f8630c47a4b5847aa3d85e00715f62c2181eddd445199e0355c5a7330e3751de7f6e5e41d0636dd85b0923e144890beaa72811ec8ef376a35a3898ddf6aa3db2c21d4e8e50ff5", 0xe2}, {&(0x7f0000001740)="13b79871181d3e06c0b42fbee65f91bfc60b5803ff3195df62473d0f031108d19087c10b1c409e72d1f13f946b9aa2ced8fb1b088435ad1b0eac3be99bd7e29b77d46a993f6061e9b8677c39d577439d6e0959fb0a616998b1d4d323010a4ab3703484f9142057508432751af3", 0x6d}, {&(0x7f00000017c0)="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", 0xfe}], 0x4, &(0x7f0000001900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x41, 0x1, 0x7, [{@empty, 0x2}, {@rand_addr=0x64010102, 0x1a00}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x40}, {@empty, 0x1000}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xffffffff}, {@remote}]}, @cipso={0x86, 0x63, 0x3, [{0x0, 0x6, "8047e81d"}, {0x7, 0x10, "040ba7adf0152c306bcbf85d5b2d"}, {0x2, 0xe, "cad8c8c3bdc8f08c7f3dfd91"}, {0x2, 0x12, "3a36f86b998209fcf29de72ccb73277b"}, {0x7, 0xa, "9e55bb0faa5f1f62"}, {0x6, 0xb, "d26b14698246b2e119"}, {0x2, 0x10, "5793b66908f49c743e822934e07e"}, {0x0, 0x2}]}]}}}], 0xd0}}, {{&(0x7f0000001a00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001a40)="010a5ecb93f8f146f4e94032fb1850ec6c3c50c15896c1d8a7d0d1a6e3b5617df7674546aaa0183f", 0x28}, {&(0x7f0000001a80)="dd21dbedf7ed5b6810260fc97b266d3e4cea6b46ba2efd4135511343637ef64b3110ac5b1c29dcc4fbf3ac6957298f86d84141ad31b9eebfb75a57c397449187ef7e02c35b47979d240bd932d221e5dcb4176e8151f9fd9f387306f7bec711c20bb5c1e979ceda725a74a208aa72cbdf391245ac17192866a65b0d32bd2be455bd55a34d41cc44ae20148de8a29d38935997e90598c1c70a38945175c8a84764316166dcfcba0eff11832440dd6a63061aa7c07eb55226b7f8861307f464fd325fae8704a6b4d8c20e070e512e527e7fdc3685349a0374709ec5348dd70f8f1a1b013c03d36082d69f71a3b0429440648c0e7856", 0xf4}, {&(0x7f0000001b80)="f6a9187fdb4383782ae48a24bc8b49882a0da8b4315d8d8300e9e1324667d3a0d697e0753228656534bef30b9bc09237851ce6f9955bb2715ef8e85a4bbf71cf2cd5871e372b7c9489a063dc9c9da196ff206f38", 0x54}, {&(0x7f0000001c00)="a5798e653351b1b9ffc1a28c1d67ee3c99ad45f087e80d5ea9559e5b7f3369d684067b1e", 0x24}, {&(0x7f0000001c40)="cc5ba43c34", 0x5}, {&(0x7f0000001c80)="5d4bd01845d38b6486ecb7131cf02ab9dc26cc93297b5229521a6d44acde6961e51d7f7c76a53d096df445783d9ff922b8be73959c2d5f3a57e75fe2e9acf93f1d3100d2e5808941721a164477c31098e73a0d5984ee503edcac445c90100b43cc3aaa4a4f5e01ea2ddaf083cc9cd2e3921f3a7a3a64283480d618eb70d65ddc150054ce0f542a38fa7d1b1ba64bd3429b172e93ec7ec131caccb15eed26fcc9628f723fc543d36fa8baad54c7e15934e997e10a42ac349ccaf1021814d8408945f3a459113846b7fbc191856b48f6defb4d3b6d55c45a", 0xd7}], 0x6, &(0x7f0000001ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @noop]}}}], 0xc0}}, {{&(0x7f0000001f80)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000001fc0)="5dc0347aca295686a62d14ca42d384f2576b0afd6b12189197a26ad9c17251aa813b7d3df763fcd22f1c828bcd58ea78b3a87b5f", 0x34}, {&(0x7f0000002000)="54f6c3b1381284d541647b2af7509ce01761e2427fe79c10b1b3c83f1c1afc8f8e0a7c5eb175a12ead3f373fce77dd1bf0247509", 0x34}, {&(0x7f0000002040)="6d3e554f47e26ca9c4f9ded7e31959728854b968c403b2e3474680941fa19174bbc51ad5caaa7fb2d16719b40bf26ba905478b7a562531c5911250a31c2ff4855ef3e405780b0364cdb0bafedfe2b9f05de57dfef4903ad9a34cf7d54f90bbc4a046fb9424be1a9e71733a7ce50e66deb61fc8772bef8487eff690a6db5266124b9d6cac13c4f27b7ee79d90998292cb9685cded24f407c11ed30555e05cab8838b29e34443bf6e817438b7389b9067677f1c9b5b7db15b0", 0xb8}, {&(0x7f0000002100)="1e8f21eddd627c635d6149d121de4ffc8137f0cf7a3753d999c6fbdb0ae7725e64b7f7b05023ce641c399e8cecc93f51b8caa161d14909f0d0fa3fef007c18cf7c9775f6ec653e4627724d27fccb6b2f01224ee96bc97882218af22cbb08c5e40cb1d49c260e5a384b87fe7eed48707a006b388c014b19a130d51f788f07fba01431270d11f4d889279185b91e4352431a6fce8de1ac5bbc4795eb4bc8a8a11f62b98d3680d2b61a6696d59b7c85d8e9c2c751a9d09ce1d04187c8172bd6b72b363e7693d127adfec3c5675cd94c498a948db8fd289ac39277c6975f5ccea826aab1a96a44212f1429690a8cb8f861ea10f4be035c", 0xf5}, {&(0x7f0000002200)="fe56fa521e6322596d03e151ef1472882f99dbed6fa3eae84764333458beeaeaaec27894660db5eabc717668ed59e7dd205a9792c601dea96670e3b02e84818f989604c7e273706d66830c74e6c3a075fbce6551079114bb395658e74796e67ac3646ab1", 0x64}, {&(0x7f0000002280)="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", 0xfb}], 0x6, &(0x7f0000002400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}], 0x4, 0x0) 5.651528831s ago: executing program 1 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93e", 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001280)="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", 0x3ec}], 0x1}}], 0x3, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0xb}, 0x94) 5.239541021s ago: executing program 32 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93e", 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001280)="ae2fea8fb3938a040c1af08cd22f90b03f8a4bbd15396c2da555d27ad9406afb51b60f39417d4b8a4ac6ba1565e330840da4b642961d8b9990f8d43ac2eb741a4ed5abbe1d180a02b74fffefe2f6677e3d79124216ed5d038e082556f3afad9f05d65a19850228e5e337f27e8d3784a72ea691132251002e049c55cc96b01d02621d8b7c57dd504b666c05087a601cc705315d0af1a8a44e0988d519c3a439a5b0bb241f2f5282534b6b822db676cc73000b91a8f836d368ce32ae369e5a4fa6cf69ab4808880b6d7d0156cea4b3051ff2b8f6a03cc4eab86ba6c1ff5befadf045654477fb45b8cee5e0b5b51097da7c299c79f77a84c35bea7494c627da27e6a1720a520cd2ace36dd7cfac67ab80803909cb7e7c0aecca8999f433243447965d8926ac8dfab24a0208db1f2bba61f90e70925881994f15dc3798da673ccf699051ab972ec92c7d181bee02e5753bb0ba873800379e15da095a3a21d958a9af0020cdace68972c6a06726c15e67da08f84dbb543f0e1890a66635ed251910fa741998422a8cb23a5616df595bcaf828d145228f2f8b7e21b23ef162de38dd872fd0cd390abbd8512bd5e583b6722ad585dbce47a13ae6f3a91e45f6190c6e7d3824ff8038b745e919f2a152ac285cffa9246cc4ed65904f6113ad17f538fa60d9235f32c59a3b8794859b3b8e38cb3e8c1d273201527a6bcc7086b27d5165944d715ca8294e5f564d0f85f26eeb8851703bd22203f7eab34794677e8eb8445c8d1adc044ef678b781d057c986bc840ccb2e20de21976b0997c69972fdc70e305cb5911f9c52fc75f9c1cfb34bd4c40e7ef868909b6e58d3caa54e0a6a9038eadfa517ec93c2a321f5fae60d506a08e83a4cdee2e552b6171c73e20002c9632bbf0786fcd18b996256617b9bd1559e1d9f2a5b2e5fb62542332b50a244cfe546fe7d0440a8398e3671b12ed35846b71b014213e42667be675a502cd83264112face0f4534aca20c92a9b9dd32e9eb49c23c93721d138e649866fbf3802c92abe1c35a1c4a13eb0f6bc661b287711000092372e50da69e9450f699e5edfc7de7bfab13d578583a6c5d74e9d3d2849c5659fdf1a54defcb72d89fb46234cbe9257bb1c84dbaa0f6567b59d630b3293d7361584ba18c839afe35d43d0b2b833acca710fa61c24da6650ea4c7baa09d74437ccd6ad0ca360aee6ea8d87f78d72bb6681884a75624752c6aa9951b6b5eb1172f3ab2494f6808d2dbbea2d0b419800667260f96cdd989db91ff8930eba64c3729c525f089620a0759aef3ce2d8a1be2e6e4bc189f88b343e5e222d36177f7f9fce377d3cdebd149890acd3072b02f5b73bceeef96d992e5fce80128a400d6d0a7c67343462625ac72f5f89c2ec3e9828b6bc0b62ad84733c6066c81a", 0x3ec}], 0x1}}], 0x3, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0xb}, 0x94) 2.078411377s ago: executing program 3 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x42) syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x17, 0x4, 0x3, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x9, 0x3, 0x1, [{@rand_addr=0x64010102, 0x80000000}, {@private=0xa010102, 0x7}, {@local}, {@empty, 0x1}, {@local, 0x8}, {@empty, 0xc0000}]}, @rr={0x7, 0x13, 0xd0, [@multicast1, @remote, @loopback, @broadcast]}]}}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) 2.049589062s ago: executing program 0 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="2f094301cbe5", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12109b", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x4, 0xad, 0x689}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f00000108000d007f0000000800230002000000140014007665746830000000000000000000000008000400"], 0x64}, 0x1, 0x0, 0x0, 0x4008845}, 0x844) 1.999326423s ago: executing program 4 (id=2202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x40, 0x40, 0x7c, 0xfffffffc, {{0x6, 0x4, 0x1, 0x31, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x89, 0x4, "a88c"}]}}}}}) sendto$packet(r2, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xf}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8000, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 1.85369981s ago: executing program 0 (id=2203): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0xe, 0x4) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x420, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_FRAME={0x3fc, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6000}, @broadcast, @device_b, @random="965f126760fa", {0x0, 0x657}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x4b8, 0x3, 0x29, @val={0x10, 0x1, 0xf3}, [{0xdd, 0x2e, "50b9e8c72e32982fe7a9b17d1540b73306467d0fd9d92ba6196e7879075a590770feb6f214b5e6856ea3178c6c40"}, {0xdd, 0x67, "47fb3857e4c57bbc7c93387d2dedaafadbe2b09dc75fbb27c6de3556a0beec87ac893af64e5092e9d5dd3ee89329dbbc353126433eb789a8aea5ab3522836121492c1eb8352a40aad27c191d85df8f3f902fbb0f2257c4a4b22ec0bbef8770e89861675aaa7dd6"}, {0xdd, 0xd2, "8ff2920eb23140021dbbce1dd5e0b396c355369f7b5f9e282a595331113febb64658595eccc0b5524c3ded4a53f278c170fee09bc704ff05c1b038d8acf49c7dc6bedb7db68cf6b78f9f7a959781d5c1cff2ccc3aa5224d26454952f77b5b397fdb7c21412968b944c984d4393e41d0ef4d561b46d9a8a0f5b303c301cf145d9daf35888fab3b1bc24a2675b28dc09319a6bbf7d10c05ece37cd2c9376272de8c113373ffc6856f0ee737d399eb3e2cdc1a7ed12bfc0d1f3d411daf4536982f7d62fdca9df52a76c933ae6ac1e92644eaabe"}, {0xdd, 0x65, "63da048448aca754525ac20558fc01601acd73464b99967efefc589c34686ff4596529d32a11437286bb3c0ba1faaafd32aaa2d40ee06921edfab65be7c8bc19d423a0113831c9976a751d2f48840c9f6a0fc271992b5592be0745ad314edb786e06dc6e03"}, {0xdd, 0xb1, "dacbfd8bb56ba33403d432c51a8f1c91dcaa219881b518777130a23a895bbd2e45a545e64e426f16932ac5bbde1bb91ccb72809dfc2a5edc85328e0a8d98031397aa07d05558f7148001eb0a98262b4b0031e49621d904f4f4b800d44e8ad170730cc6b0ca7d9bb63e2bcf080bf852c9e3e80872daa545fc1702791d73ad49e32f0aa2879f4bdd6379a8982207aa09dcfc1bff0d17e70faf25cfb7456c658dc68c0bde550417b3a1fc19cc18392f3215f8"}, {0xdd, 0x7c, "4519c0c2a81605ca2a101553fb9235d5ca221369d03c15c69b8acd6a3864f092ab60e632aabce599225f7252f7cb399fee11a3794f0649e34ff0ba71450f215351cbe52de8972d7aa7c36bff643b21623311dd1b089dc1ec905a255fd4088cb97b3ddc8bcd653b8d709866380f053a142a8f6849b8734e5d08a7319d"}, {0xdd, 0xad, "9a1deebdcfb5bb551e0f0f2cf80882b9d9f75af71f91d87eccf8d8ebf68b591b05b1f11ffc1485c29b4270d21fe77ef7a3719e9090eaac479f4ee422534535dcb87c8d28edda108f249e3b6f077c7ae6c034eeb7db88ac4e116ab7402d013efe78e854b877ee8904c95e37c7fb21d6f6f366a0e2c361e1f459adc88e69d0bea54a15822873ffcb509a44cca65a42e02bf966851529189805784764afc935c953dcc2dce2d43ac31126a090dd37"}, {0xdd, 0x1d, "206e543f39da164f1f80cf7d05b74575f84b1f0f0753548b9290f7440c"}]}}]}, 0x420}, 0x1, 0x0, 0x0, 0x24008880}, 0x800) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000600)) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000640)=""/198, &(0x7f0000000740)=0xc6) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x28400, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000007c0)={'dvmrp1\x00', @random="7afd18e2ea93"}) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r6, &(0x7f0000000880)="f327a0405b7cd3e518d1aa6cda53ec3e53087e046408915cbc850d950910969b7a0ffec10b20206dc4c1c30c3c76b2365b921015d416002708892a913efc3191a178df0cd57396f80c76cc3e06100ba2", &(0x7f0000000900)=""/154, 0x4}, 0x20) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x54}, 0x1, 0x0, 0x0, 0x48080}, 0x44) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r1) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c00)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x70, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x74}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4e}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2fa747bba3b83d19) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000d40)={0x7, 'batadv0\x00', {0x3}}) (async, rerun: 64) sendmsg$inet6(r0, &(0x7f00000022c0)={&(0x7f0000000d80)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="abb6b4439c33c9f03d1a101c0bf61bbf94962190564e8ffa3e97522b26201ab0199109771d8ccdd360d2941d60ad0e87c1bcc7fc40cf89bd16edfc3627a861379e1190aacd4d4928f0609b71a94b4962d564bf22949fffb417c79e584336f5bfb6301b7f9d8e43082f571975a0348e1832dcc458d8c197c02ff679910f75af304fa8d4b9940990d8f9cdc2c31c40b2c47d1b53f9a60d31a3341c9254a0f15b13d7b1", 0xa2}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)="b0103880a10b91de2d29316e1efd21c0e005383d655b7c89a843f665cf10c2043b74ef45aa9048b91c9fa4c2770ebea5247e735e511b05d1ed4cbf2434ec63747c2b752375d1cef4609cb798c68f32cd202779929fa4c43c9bd4cdf6570c29b92fb12c2d8a950092fb2124731f1aa01951fb4ee62b49d9ce1baa23043f0be4f4516f8b61eb6b10f62dd8cd7e4d2b4f763fa7f63efc160a0906447fc90068d65b3a4d3f4a212598004b153f841c664fe93bf489a7f99da2d16dafde6343c406befe3499ee928a170dee9ab1b8c3ee26e996e0a0f919931fd07e78d9af625dd50e26f7ad5a410dad20f226", 0xea}, {&(0x7f0000000fc0)="2670ae28176f6e60fde8ebf2ea38cc68134625693c6ca1a81e4b0e5b7136c29f1e9f2816e75c6491b5d9641128456cf8492307a4d69a9eeed49e043df5123e329acd1813c7369de859394d0cee3c28c98904de06e67debda581d4240fbc1937de09763a15a0ef11afa192b0b", 0x6c}, {&(0x7f0000001040)="da5bbf1899f83da08ec855c2", 0xc}, {&(0x7f0000001080)}, {&(0x7f00000010c0)="c3f27523ff4071ed3bdf2cccc57f7c6039f86a00e86ee50e", 0x18}, {&(0x7f0000001100)="e5073315a1b9411a32844fe200d824a3f1e3e71f833ac1eab405934165e369c612ae14c511a34426429fbc93f9c843b7ff59dcb7e5578c034b11959e155d37688e4034b1d3bf4456505fbf0eac3a309ff712cf4590c287bb2bfe00a6281be18d46741a7feb1aebfc222dd402a3444b3183d1e7dcb64e610ec38818b9aa60be4fb20dcc6c68c75dec0895afd79dde023f76f0d450e327ce7f305cfd9820ce0b40d5801d2e8f09", 0xa6}], 0x8, &(0x7f0000001240)=[@rthdrdstopts={{0x1050, 0x29, 0x37, {0x2f, 0x206, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x1b9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}}, @generic={0x3, 0x1000, "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"}]}}}], 0x1050}, 0xc850) (rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002340), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x24, r10, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r13, 0x114, 0x7, &(0x7f0000002600)={@x25, {&(0x7f00000024c0)=""/252, 0xfc}, &(0x7f00000025c0), 0x4}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000026c0)={'vxcan0\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002700), r9) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002740), 0xffffffffffffffff) write(r1, &(0x7f0000002780)="50eec1b95bd39f14aac155c3dae7ebc3837814c00059559caab9625078ba3178181b187ebce11dea", 0x28) (async) sendmsg$IPSET_CMD_LIST(r13, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x60, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xf3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000041}, 0x20004040) 1.853317186s ago: executing program 3 (id=2204): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8=r3, @ANYRESOCT=0x0, @ANYRES8=r1], 0x50}}, 0x0) 1.852940625s ago: executing program 4 (id=2205): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="04"], 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x50) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000980)=0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={r6, 0x800, 0x6, "2184e34d4650"}, 0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000240)={r6, 0xb6, "73ab2be1520a7d36a63b2445d967477906f19710daa07e193e7af65445fdbcc8f8046aad4dd7ac10e89ae0c5b6a8945cbcca774401132a0d0d937cc658858ee0e61c971287e5f3d422d565f9ffe0c290f73cfed34e653006d193afd22277d1a7f96018105c3dad23a981679f07312617915284bb976944e9ed40b53480e53b0e58d82cce3bfbedee4d99f5406225097611d8c837c329cd61b0a467a37fbe18e56a7348930da0cfd6393e04def588de04ff69f5b38f28"}, &(0x7f0000000000)=0xbe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x5c, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0) 1.128644931s ago: executing program 4 (id=2206): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) close(r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', r0, 0x29, 0x0, 0x1, 0x9, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7, 0x8, 0x1}}) 1.098194571s ago: executing program 3 (id=2207): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{0xff4, 0x1, [@m_ipt={0xff0, 0x16, 0x0, 0x0, {{0x8}, {0xf30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf21, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "fcc8aa17e073ace3a465fb1f316b63346b3b0038030789464fe9b3026886b803a3ed9b20a4c7ab4d0333715e32dc340615c3c96d6e9f5026358f801200b66ff28fbf2054ba78a88d89e1bd985040b6ecae6ff2bc172498b5d0bc735b10ac6bc25ea6d58be52665570ff1ea5a7fcf2016215b2ec2827501f1048d41476a0180b1f148390c2e0fceae7a1eee6cfd295c91b0a7ef2330cb1ea5bc9aa4a3a26303639c1c64dc9121ee831b5307cf82770643e84b150a1e0ab0017a4c7a7ded5b19eca758fcb2f8dd6ab338c84b223b7bb066eef71a433f244abf5f9f7c15ebdd63e8ea36084744d1ac4a81fa1707afa656e2bdef94b8acee8de0caedc596b94b1d4c05cbd13cc762a552c4793f4b3d8f46d4b94fb5f53fe3e84b441c397afc8ab53436982a02b60bb95a93031ccf8f3e1a632fa1a3b920aeb46583327641c5e45e02354cd980deda497f7f1233cec52b1d7fea354dd2495b3c01eee8bc7cb1114a159963f6d9ca3cdb6b3c469b4ee202e4b774e6b67c6b357d26833f4a913af8cd97c68ed2fbc45c075940624e37dc9924be6783f5a969801af4b9f32a7dd7119710a68655e8f3b5f33041e639c1652f26880dbda819c040fcb12185d075c35d3825a15e1c51c0c92821e188cf53d4c4614aaab14e00bf9d4da4e785354b9c0bcd6702c093eb07f10b606e4385c55ef0b114e953050b54334874b6d683e9f528ed2267724571f156bcb48a142434d49ecd5865e164d8c920cbe666ae448a8ac4c4cc183c856dd2d69fff0197220e783d001a477efc50fcdc0d113614d09d5102ab90448ff1cfe7eaa0206fb2afb31309904aff75047b019791646bbc1896293dee1947954c2e46f63fe166ea08ede71546b5519a9bfae054832a55f04803d59b0688a40f075b4316838159f49e7d6d6ffee35b8ffb409b15833ce8c0754fee4b8bb37e87d8b021120da3d5778b7abe8efe467f99426d0d8c6bc4ecb542496ed1f2842fe2488e4026980ca30cdf4f44e4745980cf219ec6c1ba2caf23d0395454755292e3be7d108d4cc7c3d6f23374f99c7d0ef2e3c4b72596c7fa12e6272862544d314d2f972d43b663c8bda50660fb6bd56e7c7c647ba15837010491118fee8a74b162935db534d404afb1d17f063b2bb2c43380c5921d96fe9e7eac0decdb26eb5050c54021a8268f0c4d1b7f44a7e5697fd8489dbe74ca6a0e354868fe30559616d0b2cbdda7e955ddaa0755257012a768fd8b8c112e4283fda06405779d497c4d7b9d51059aae162d71bfd841effe362948c9280af87b06b3d0366361cb72332f350fd91be594034f1c8f3a7b0bca76e8cc5a220c5e13fc8b92f33c8c08a398a976720daae8f7a70a8804254c5288666be55eb4c3bd4d1b4ced9d1a47127b3be753cbe6fbce1bfa8ffd5aacd27813dcd6878d28fd2a8105baed54ca440c09430364dbd67aaa56d8ad34d44c574feb610bd967f0d72af4d8e99833686498200d348acd3d2da4c339bfd05765d5f1383526006252fa03d9bb89e5fd6d8bd3a32e72571f88b69d7d044223430bfd9df00f3f565c1974691ddd658f3711a831ca4cdbc44a39f47b29547f32691d06cb89bb777aa97ceca98e50042134921ae93c2ae4ee6a5d63b02e441a20aedd4278b791fa4acb992e13abe52afe0e10dbec8042c51b17b012aa19eab962834a6df21671a834b01171ad49ffbf68b2b9786924120c35faa0184b3f7ae6947fdb52d2bdf432457053612d124c97538bd9c052da2d767241a2ca463ea710ea6a0b8a46f5d6cae39466fb7e0b04ba044c48f75e2b9164ae37af3a0acd567c46681358435289dc45d1e863e56f428df07d421d4ad31a445467a817703797e4c9e8784dd9f1a1dc552894ffe7d0725c8f09acba4b43ca19e57d73e047ca9c927c1872662750b120551cd6ae4c657817294b6c6d51eb225d6fed895d2acde59b0a96970d140638c85828c6da4cb22a591043f80b91403a1d0bd85eb0c0ad3d02d5a13ace459c005e64b3fd7bf9afcdc2c72d9bb8696408e1bf8bed4255a2b733467e52b7c055ff1b0db9d625dc15271f02cb817bc3882c425bff8db85b0326aac7bdd8298a118d0f97c20bcf5ace3d1a4b99f7789b4f0b70cf9776ee104340bd562ccdc9be8804753f9a4b9b464cf277474eccd6fc79240bdabdaf4b90815a20493fc753c1d5145ebed0440d4d0759e87083f51bfcdbfcff4f537bd15a8c79ca9215c994a6b13e00a3082b65658b838581e3308ac814d9f4a73b23621ae1606fb63bdc24cd271a52a60d7a9d614c858ae7475c7e706b5316fc2c9681042513aceb75a3bb58b3f6fcc560c5b35103b67dce73fa2f2e213ac29695566a9e8571fbb17619e943c7663a805ed3628a7c3722ff432c0d71730f587ded6a9bf8fef1f106d32b39a979a45e3dd9ff575f3307476a582683820d31c46547ad514e309459891fd24d047e00a7ebd7ec3747ab0748de5ad8c265b5f67b7af526bcfd9ee95dc928dc70302c49563c69c58a99f66e3ecc6607b949014e1f8defadf6b4310655fb91bbbeed6e2258bbeb2e5c948f41c2d302b73178d4e14a585ee98f4dc8edee684bd5c7d9f10d4170a3b4a9e4a723cd566cd51c6fd327b14145d371a40c9c6def8d6e767f9fdebd880e37a26d1e9c64bcff323b505f8cc88a5648856ab8c9cbf3fa9f9fd1f94899e8e5907bf047b2032a2d93ed8e73f74a636d7735eae9e7806546c0d421d0fd90eb2b943d3b10e201055d31642d0ee04cb7f33e1a2c270eb43a72aa545d23946574539bb70071151a3c72407d24cbd6134bc7372a2444ce12de02653a8abad589ed2b22fa037989a59d812a648d3e9c0b7f4a88ace584aedde918291e5f66135b2f78701f6cca61b08a64e146d5380e09e129ab1b2c5129b5bd1f1ec70f491c5cd86315890bdc5108207c0c7e461ab07d5849a4895fbb390980ac2c414305e3790c642d435d8ae2388760c37116e561ddd9e791c5ec25657af9233694a57348664c8de11abe9784e3bbbb636aefa4aab97a385ac724c83fe6a38453f41064bd4a99ce63968cc4a1394ee8169b7bcdf998ec64b6ea086a114519f4c2399ecd739a528fd3dcc16e6e696396d089e8fbc5a5cc0f8daf1f9b80993ce181fe8c476087593191a066b1b2f5fb97f01ac0b13a91920ad59fdc141d0190e02d99301bc79c73107b882ddbc29d86d932945bc57d6c1f4395c07f75743b1cb66b6e2bf4791d6a52ac12281ca7ad2016269b926ebf90489914681e5ebb6783b59e8abf79964ce3e1800a4e3499940de3a2a0d5410e81a386b463baa035da27f2ca11fd47c19c554581eb3467031864596e91f73a815e6e32212be246e7ac6164d0f49d603b9d469e712bbb5b6432e100dd7f95f392d556f983954bc4ec7f74767a51d812fd66a5a895ef57658b13e95bb6cbc9f2af15a9825db05e7ab20a8523b0ef8c890e693ba10d9b922b3768b1ef10310cc67fb5e0260078e95ddb5ef6d10c5028c7b84db403b1fbcdbb003d986f1cd25d1810ebdda1b7fc59307da5f09b37c113084a23762286c5e68f17482f24cebc0d28652b09eb466671155b28e347ad536459556997b481d1d0627679984d1a987c0c413010a96cd93937d1e21fca6b84bf26d333e4e45014da3479f8dac432c256968ce2141a0ba54f1c477796731e2d5babcbfcadc580b8dc4446d35b525658509a5240e6ddf16670e244ed318d77cef80a95b0d6de528df644f7721142aba52cac6a1cc7f2ba9d7de4112151ffc8edc9b14f6b396b838f719ccc0cfc81f5c16b899056b04a31f5aa916f0cbf159df9d1ac6bbc79d6c6bb3b40b23a6a4994c6d5ee66e750cd66fac0f8a6308be783b5a4552dcb43c140be0f6d4096195a3cfcf5d38033860ecbd6c30da2a3c1ec642d371b62a9ba413743c0fb6acb8d0636b28e0ca137872d0d8e2ff8d4313cf25d6d8a81c3b8baddc807d4e07ebfbeb4d0954f29ff21782563a06c51fbb25b1a4ca7e0dd939a62a149d38beb2dcc7a10e42c35f9b8653eb9832d29f83509d9085e63de1e3200f38fa3388011bacd50c9087af3d917ea3f4285002d517f6289c7c0814dc9b7bd9393ef1a83189065045729093cb79bde4aea4770ebb1ab7b28afcd6a1ec2f94dfd47fc08d216791f04f4a09d2ed833f3f1edcf3d30a776f4fec692f3082c25e59b3136665caea9d3652ea79433520ad9ee9a02a80222ec139f3b3d3227108bad86c1f82156242a8731686719a9372b84c5c6578b82fbedb50d94ab150ef23926db1bfe223c4e208bff77b72d1fe6300b2b17f296bd7305efef3df6c33b9d76dcd895c99fba676085204c236a330936a3deba55b264af3e7591ca05f95d0877b3252a21315c6c8e942277eca9bff0c9713c199da30308901d68b1d2f8347f1c2f87c47f6abc4140642da7c46b8b43493cec39f6154edc3a9e15fe1d6cd34843af9fc1145662a3cb18b0a4603d8e8ef9c766006d295154fab03070dbe83010eb7fc29aff21a464aa853f5a722301aba50d6809ed4c25198e10932321fc48f9d4e0b971a6ac81767ad247551fe38d5b6d0cc28c98a649a19cda61ddfca09fc903e1b84128f8ecf995fe564ae069df912d539f405f750667457b87f95531caf8a264ef4856c8284f08e9360355179e9e48ea700d11a8b3ab5be0a09c7189d98ba2aae2f2d32dd770ad70388404cbb2a285c6a93f8f89976097eb6da402c8c060d579651f79641fa54658cfcdc6faccdd3bfdc2f000e43ffe10508086a524c5229983b3745c5e9e6ed41e249f646105d5b7a45d9452af6390727c568b144fec4efc0419b441caf5cc9cf852e5946c96d26abbd5026280a85d562632fc4b401a22295c69b0d3f8157f2174c1159c11e2e975293946c72819da6e848d9ebe504134ac989d0b426e5edfe7dfd99b9d14d660e414233f71d3fd01d9049a07d76cac441801a0b2a71cbeda07a0328ae639573aa74dcbffb213aa9874bdad23b5ff2cd8de2b9b9c49318c7f874a6f28978309feec9352bf8586709f4407b0c9f65e44c483e41ca6746e575d7ec00e4831a5dce4649145e59bd550c4844dab76b72bdc3e500c88a261e5aec2e8c954d4bdabffebe49a40bcaafc600d5a54ec7be2d5ed06031719c0133c335f8a0fc737b3c40af62dc59ba50a1ad1a45dc35c1a62a0fe7bb2903926340c16c41692c97af6475823f2dbbf6e66a57a33412dc358dff1750d8690e6f634bfed37f1799d1fa60a31e49365750753d701a69c8926930dd090ff18fdedb8b08469593f9b2b520a49948b7098d29320904a987dfcddf607715d191083d53796d377c8198aa8fa4565faa60b7f010ddbf970b98b37100e73174943ba69e7ca215778551eb4181f46b6abd1e6463588e96e4b1a901a6e9125e07ddddea504f86b07fdeb"}}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1008}}, 0x4000000) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x9, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x260008e8}, 0x804) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000500)}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010103}, 0x10, &(0x7f0000000180), 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r8, 0x5}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r10, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$rxrpc(0x21, 0x2, 0xa) accept4(r12, 0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000b9832c35110be0605ccd6576538450a3fce834a74f461eecbfe9", @ANYRES16=r13, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468315f746f5f62617461647600200003801c0003801800018008000100020000000c000200657468746f6f6c00"], 0x4c}}, 0x804) socket(0x2a, 0x2, 0x0) 945.392241ms ago: executing program 2 (id=2208): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 941.752832ms ago: executing program 4 (id=2209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='bridge0\x00') setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) 933.991497ms ago: executing program 0 (id=2210): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x24000800) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 846.390166ms ago: executing program 3 (id=2211): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x4}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000300)={0xffffffff, 0x9, 0x4, 0x8dd, 0x4}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0xffff8001, @loopback, 0x8, 0x4}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0x10, 0x70b524, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x266}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6e35}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008858}, 0xc884) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}]}}}]}, 0x40}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 758.362329ms ago: executing program 2 (id=2212): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4216}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 736.707443ms ago: executing program 4 (id=2213): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x18, &(0x7f0000000800)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x9, 0x2, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7800, 0x10, 0x68000, 0x620bca37}}) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x6, 0x4) (rerun: 64) 722.147548ms ago: executing program 0 (id=2214): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4, 0xd7}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x8080) 650.429376ms ago: executing program 2 (id=2215): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 589.227982ms ago: executing program 0 (id=2216): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r6, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) 563.832452ms ago: executing program 3 (id=2217): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0xff0e}, 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x10) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x40000000) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x8, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0xffffffffffffffa5, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x4000) 422.28148ms ago: executing program 2 (id=2218): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (rerun: 64) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) listen(r0, 0x8) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async) socket(0x10, 0x3, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) (async) epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @local}, 0x4a, {0x2, 0x4e23}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x8, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) r5 = socket(0x22, 0x2, 0x4) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0x4, 0x4}, 0x6) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x32e64000) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r6, 0x1, 0x0, 0x0, 0x0) 267.441583ms ago: executing program 0 (id=2219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], &(0x7f00000005c0)='GPL\x00', 0x1}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket(0x11, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRESDEC=r1, @ANYRES32=r0], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000006c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r8, 0x3) accept4(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f0000000600)=ANY=[@ANYRESDEC=r9], &(0x7f0000000200)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(0xffffffffffffffff, 0x0, r10, 0x0, 0x7, 0x7) r11 = socket$rxrpc(0x21, 0x2, 0xa) unshare(0x40600) tee(r11, r11, 0x66f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) sendmsg$sock(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x440a0) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv6=@udp={0x2, 0x6, "6d0b11", 0x136a, 0x11, 0xff, @mcast2, @local, {[@hopopts={0x0, 0x23e, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x4, 0xd2, "bb5c0e5cf3b68406afff8821cef1371a382bdd451301bfe3ef91f8119ea9f08d4ecb565f83e34692052f84ee7fa5b387bf82b624b455bde49550a6e6022e7ef7d8bd5676162810f1bab3a5398b64d12aefe85e4b971949c7b3a9e31a618f4260f3bd1ab5631b9d2cbfe55322f876c6889e5b51310ce7adbe9a05def097ee0927a245c9edf4de2e958e61f1213a619af29971ba0bea3ba8b78ffd175b24e831edbfdcedb5618c79f67958bcd352da9135e1096c1667afa0c77177bdacffdfc54083b85d874df8076d71db13acad7f23e14327"}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x7, 0x1000, "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"}, @hao={0xc9, 0x10, @mcast1}, @generic={0x1, 0xf4, "2f2043597721cd2c0d4793eaeb71ea649c2e118e5d64c8850fbe9c7bd66aa9c27bd44fa96a6577075b86d457d411e5d8aec4b8e7294fc9107b25fb20fe73626b2162901dcda5fddafce4ef401753177f7e97e2bb26e9949abd7bdbe8d597f0cde32a1859e44e80c3cf531cc4b853627f7ec7fda550914aaa716dfd9e134d371e570763715de5ab4a5166ca9b219751a90450daeb7d8421f4744b2f7ace3ebc77a795afdd6794dea6a42e0c97dcf2858edf4da74e2cf00f3505f343aefb15757b353ecb4c842eb900d6b22065a853a986a2d3c09749f2b0440b11e41a880a2af3a72bd21b6fc2a656d1ae685ee228e0959c7cc7bd"}]}, @srh={0x16, 0xe, 0x4, 0x7, 0x5, 0x20, 0x5, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast2, @local, @local, @ipv4={'\x00', '\xff\xff', @remote}]}, @dstopts={0x67, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xb, 0x79, "315d089fb8802f7cba7dea3402df97f60531711034cd8842829e0c837c4130dcc9ffd84d1acb985468772305409739d066986a83eb78d19cd7f233bcdbf455be9d6bc152c4a5d1638e6c9272f67c0c34dcad9c5282b56223ed7236cc762aa34fdc60859475fde23173d0f7d97071a3bf2dd0f0027d29e3b47d"}, @enc_lim={0x4, 0x1, 0xc6}, @enc_lim={0x4, 0x1, 0x51}]}, @fragment={0x6c, 0x0, 0x29, 0x1, 0x0, 0x8, 0x64}], {0x4e22, 0x4e20, 0x5a, 0x0, @gue={{0x1, 0x1, 0x2, 0x5, 0x100, @void}, "9c76fd684280d21698e299faac0079507d25b6b9dbf334766cbadc18b6c9a2f5d74cae2f12872e6dccee571f4686c3fe38837c3c3cf9868c5da78438620e98a1abefd1df15dc769cedb9df7ec1d4"}}}}}, 0x1392) close(r1) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) write$rfkill(r1, &(0x7f0000000000)={0x3d37, 0x8, 0x3, 0x1}, 0x8) 240.324279ms ago: executing program 4 (id=2220): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd3, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tipc={{0x25, 0x4, 0x2, 0x2, 0xc5, 0x64, 0x0, 0xdb, 0x6, 0x0, @empty, @remote, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x35, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0xab, [@remote, @private=0xa010100, @remote]}, @lsrr={0x83, 0x1f, 0x23, [@broadcast, @rand_addr=0x64010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}, @ssrr={0x89, 0x1f, 0xdc, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @local, @local, @loopback, @multicast1, @multicast1]}, @lsrr={0x83, 0xb, 0x44, [@loopback, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x43, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@local, 0x6}]}]}}, @payload_named={{{{{0x31, 0x0, 0x0, 0x0, 0x1, 0xa, 0x3, 0x2, 0x8, 0x0, 0x0, 0x4, 0x5, 0x2, 0x7fff, 0x8, 0x1, 0x4e23, 0x4e24}, 0x3, 0x1}, 0x0, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r2 = socket(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r9, 0x0, 0x14) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x880) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x0, 0x340, 0x1d8, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}, @common=@addrtype={{0x30}, {0x800, 0x2a0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@local, @empty, 0x0, 0xff000000, '\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x8, 0x1, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xf, 'q^'}}, @common=@icmp={{0x28}, {0x0, "75b6", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0xffffff00, 0xff, 'veth1_to_hsr\x00', 'veth0\x00', {0xff}, {}, 0x4, 0x3, 0x10}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'pptp\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x6aa, 0x2, [0xe, 0x3d, 0xe, 0x35, 0x3d, 0x27, 0xa, 0x1f, 0x21, 0x1d, 0x1b, 0x22, 0x1d, 0x3f, 0x5, 0x1a], 0x2, 0x8, 0x7fff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r10, 0x3a, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8580ac, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1c, 0x8, 0x8, 0x9, 0x8000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1b, 0x3, 0x0, 0x349, 0x20008, r11, 0xffff, '\x00', r7, r12, 0x0, 0x1, 0x2}, 0x50) 182.230797ms ago: executing program 2 (id=2221): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x25, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) (async) socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)=',&+-&\x00', 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64) sendfile(r5, r6, 0x0, 0xffffffff000) (async, rerun: 64) write$cgroup_devices(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xfffffffffffffd51) (async) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="40000000007678f2616e000000180002801400010000000000dbc171b47745048f32e7b1139b254cc43b02b39281777a85465e32951f8b5d07694583cdfd8e80a831cf3b1f1c7d84c25f64bd7c19b8709dad9d0de0bddef927ddd2a17d", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) 502.056µs ago: executing program 3 (id=2222): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40), 0x1, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@deltclass={0x8c, 0x29, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0x2, 0x6}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2c}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x5e}}, @tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa38}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xdd8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x4, 0xfc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000010) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000003400"], 0x18}}], 0x2, 0x4001) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000006c0)={0xa, 0x5}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYRESHEX=r7], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31000000000800044000000000fcff000073797a30000000000800034000000001140000001100010000000000000000000200000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000130a01020000000000000014020000000900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x23, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="400000000d0a01010000000000000000010000080900020073797a30000000000900010073797a31000000000900020073797a32000000000800234000000003"], 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) 0s ago: executing program 2 (id=2223): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) kernel console output (not intermixed with test programs): empty skb [ 85.494097][ T5967] 8021q: VLANs not supported on wg0 [ 85.697768][ T5976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'. [ 85.846726][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.056336][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 86.134929][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 86.339562][ T6002] : entered promiscuous mode [ 86.374975][ T6010] pim6reg: entered allmulticast mode [ 86.468484][ T5846] Bluetooth: hci1: command tx timeout [ 86.628370][ T5846] Bluetooth: hci0: command tx timeout [ 86.633868][ T5842] Bluetooth: hci3: command tx timeout [ 86.633980][ T5833] Bluetooth: hci2: command tx timeout [ 86.639476][ T5846] Bluetooth: hci4: command tx timeout [ 87.080811][ T6036] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 87.271559][ T6048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.296291][ T6049] netlink: 'syz.4.27': attribute type 2 has an invalid length. [ 87.316858][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 87.341161][ T6050] vxlan0: entered promiscuous mode [ 87.346353][ T6050] vxlan0: entered allmulticast mode [ 87.400954][ T3509] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.425506][ T6052] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.477418][ T3509] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.505275][ T6048] netlink: 51 bytes leftover after parsing attributes in process `syz.3.29'. [ 87.521578][ T3509] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.546713][ T3509] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.722061][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34'. [ 87.901710][ T6067] macvtap1: entered promiscuous mode [ 87.950625][ T6067] vlan0: entered promiscuous mode [ 87.954402][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'. [ 87.974769][ T6067] macvtap1: entered allmulticast mode [ 87.986258][ T6067] vlan0: entered allmulticast mode [ 88.011177][ T6067] veth0_vlan: entered allmulticast mode [ 88.040805][ T6070] macvtap2: entered promiscuous mode [ 88.046330][ T6070] macvtap2: entered allmulticast mode [ 88.282425][ T6092] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 88.422806][ T6092] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 88.466490][ T6101] netlink: 'syz.1.46': attribute type 11 has an invalid length. [ 88.527031][ T6110] xt_socket: unknown flags 0xe4 [ 88.527084][ T6093] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.602939][ T6093] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 88.943446][ T6126] netlink: 2 bytes leftover after parsing attributes in process `syz.3.51'. [ 89.086425][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 89.334381][ T6147] netlink: 'syz.3.55': attribute type 29 has an invalid length. [ 89.412643][ T6147] netlink: 'syz.3.55': attribute type 29 has an invalid length. [ 89.415092][ T6149] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.426907][ T6149] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.708926][ T6157] raw_sendmsg: syz.0.57 forgot to set AF_INET. Fix it! [ 89.914992][ T6170] IPVS: length: 171 != 24 [ 89.977988][ T6166] syzkaller1: entered promiscuous mode [ 89.992248][ T6166] syzkaller1: entered allmulticast mode [ 90.135048][ T6180] __nla_validate_parse: 3 callbacks suppressed [ 90.135067][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 90.223233][ T6185] netlink: 63 bytes leftover after parsing attributes in process `syz.4.64'. [ 90.292598][ T6187] trusted_key: syz.1.65 sent an empty control message without MSG_MORE. [ 90.437710][ T6196] netlink: 72 bytes leftover after parsing attributes in process `syz.0.67'. [ 90.539293][ T6196] bond1 (unregistering): Released all slaves [ 90.702908][ T6208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.408727][ T6243] Bluetooth: MGMT ver 1.23 [ 91.443653][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 91.478029][ T6243] nbd: device at index 0 is going down [ 91.681207][ T24] cfg80211: failed to load regulatory.db [ 91.931590][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 91.931742][ T5830] udevd[5830]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 91.986635][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.84'. [ 92.004920][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 92.014374][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 92.336251][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058711000: rx timeout, send abort [ 92.345432][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058711000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.478281][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 92.663208][ T6314] tipc: Enabling of bearer rejected, media not registered [ 92.664557][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 93.882377][ T6367] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 93.972205][ T6370] sctp: [Deprecated]: syz.4.109 (pid 6370) Use of int in maxseg socket option. [ 93.972205][ T6370] Use struct sctp_assoc_value instead [ 94.005435][ T6367] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 94.016212][ T6367] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 94.582441][ T6395] veth1_macvtap: left promiscuous mode [ 94.598087][ T6395] macsec0: entered promiscuous mode [ 94.628410][ T6395] macsec0: entered allmulticast mode [ 94.664893][ T6398] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 94.668342][ T6397] veth1_macvtap: entered promiscuous mode [ 94.718830][ T6397] veth1_macvtap: entered allmulticast mode [ 94.724899][ T6397] macsec0: left promiscuous mode [ 94.730135][ T6397] macsec0: left allmulticast mode [ 94.736038][ T6397] veth1_macvtap: left allmulticast mode [ 94.770732][ T6395] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 94.924754][ T6408] tipc: Enabling of bearer rejected, failed to enable media [ 94.955475][ T6408] tipc: Enabling of bearer rejected, failed to enable media [ 95.003071][ T6408] tipc: Enabling of bearer rejected, failed to enable media [ 95.096309][ T6408] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 95.304273][ T6426] veth0: entered promiscuous mode [ 95.402177][ T6426] veth0: left promiscuous mode [ 95.415141][ T6436] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 95.423567][ T6436] __nla_validate_parse: 7 callbacks suppressed [ 95.423583][ T6436] netlink: 204 bytes leftover after parsing attributes in process `syz.1.132'. [ 95.605730][ T6447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.134'. [ 95.616575][ T6447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.134'. [ 95.801924][ T6454] netlink: 100 bytes leftover after parsing attributes in process `syz.1.138'. [ 95.833621][ T6454] netlink: 100 bytes leftover after parsing attributes in process `syz.1.138'. [ 95.860089][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 95.884313][ T6449] syzkaller0: entered promiscuous mode [ 95.891707][ T6449] syzkaller0: entered allmulticast mode [ 95.898990][ T6453] netlink: 84 bytes leftover after parsing attributes in process `syz.3.137'. [ 95.910347][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 95.980869][ T6452] bond1: Invalid ad_actor_system MAC address. [ 95.988349][ T6452] bond1: option ad_actor_system: invalid value (1) [ 96.001387][ T6452] bond1 (unregistering): Released all slaves [ 96.048903][ T6470] x_tables: duplicate underflow at hook 1 [ 96.066472][ T6455] dvmrp0: entered allmulticast mode [ 97.206121][ T6493] netlink: 'syz.3.148': attribute type 4 has an invalid length. [ 97.730219][ T6521] syzkaller1: entered promiscuous mode [ 97.755991][ T6521] syzkaller1: entered allmulticast mode [ 97.801631][ T6526] ip6gre1: entered allmulticast mode [ 98.406392][ T6535] bond1: Unable to set down delay as MII monitoring is disabled [ 98.417827][ T6535] bond1 (unregistering): Released all slaves [ 98.484056][ T6537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.162'. [ 98.522037][ T6537] netlink: zone id is out of range [ 98.528199][ T6537] netlink: zone id is out of range [ 98.544736][ T6537] netlink: zone id is out of range [ 98.566397][ T6537] netlink: zone id is out of range [ 98.583405][ T6537] netlink: zone id is out of range [ 98.613761][ T6537] netlink: zone id is out of range [ 98.651545][ T6537] netlink: zone id is out of range [ 98.691358][ T6537] netlink: zone id is out of range [ 98.696517][ T6537] netlink: zone id is out of range [ 98.762371][ T6537] netlink: zone id is out of range [ 98.813201][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.168'. [ 100.226183][ T6643] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.449849][ T6651] __nla_validate_parse: 7 callbacks suppressed [ 100.449867][ T6651] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.195'. [ 100.521931][ T6658] netlink: 'syz.1.196': attribute type 62 has an invalid length. [ 100.664213][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 100.714967][ T6664] x_tables: duplicate underflow at hook 2 [ 100.990437][ T6680] netlink: 88 bytes leftover after parsing attributes in process `syz.0.203'. [ 101.240017][ T6693] netlink: 'syz.2.205': attribute type 12 has an invalid length. [ 101.721543][ T6723] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 101.925573][ T6729] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 101.956227][ T6735] netlink: 'syz.1.219': attribute type 21 has an invalid length. [ 101.973270][ T6735] netlink: 128 bytes leftover after parsing attributes in process `syz.1.219'. [ 101.983875][ T6733] C: renamed from team_slave_0 (while UP) [ 102.007481][ T6733] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 102.016255][ T6735] netlink: 3 bytes leftover after parsing attributes in process `syz.1.219'. [ 102.221016][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.223'. [ 102.309751][ T6758] veth1_macvtap: left promiscuous mode [ 102.407126][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 102.906175][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 102.951648][ T5891] IPVS: starting estimator thread 0... [ 102.968632][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 102.992045][ T6785] netlink: 'syz.4.232': attribute type 3 has an invalid length. [ 103.002763][ T6786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.233'. [ 103.011852][ T6786] netlink: 'syz.2.233': attribute type 6 has an invalid length. [ 103.060299][ T6786] netlink: 'syz.2.233': attribute type 5 has an invalid length. [ 103.088896][ T6783] IPVS: using max 28 ests per chain, 67200 per kthread [ 103.089393][ T6788] netlink: 'syz.2.233': attribute type 12 has an invalid length. [ 103.224643][ T6788] bond1: option primary_reselect: invalid value (255) [ 103.241172][ T6788] bond1 (unregistering): Released all slaves [ 103.280327][ T6796] netlink: 'syz.0.236': attribute type 12 has an invalid length. [ 103.300767][ T6796] netlink: 'syz.0.236': attribute type 11 has an invalid length. [ 103.641893][ T6816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.942735][ T6789] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 104.394172][ T6848] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.601056][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.668633][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.785676][ T6874] bond1: entered promiscuous mode [ 104.795824][ T6874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.892152][ T6873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.908415][ T6873] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 104.940254][ T6873] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 104.968491][ T6873] bond1: (slave wireguard0): making interface the new active one [ 104.976924][ T6873] wireguard0: entered promiscuous mode [ 105.011609][ T6873] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 105.022781][ T6869] syzkaller1: entered promiscuous mode [ 105.029811][ T6869] syzkaller1: entered allmulticast mode [ 105.143812][ T6886] tipc: MTU too low for tipc bearer [ 106.135981][ T6902] __nla_validate_parse: 12 callbacks suppressed [ 106.136001][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 106.402026][ T6916] net_ratelimit: 510 callbacks suppressed [ 106.402044][ T6916] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 106.622147][ T1015] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 106.632626][ T6933] dvmrp0: entered allmulticast mode [ 106.652171][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 106.663576][ T6933] validate_nla: 1 callbacks suppressed [ 106.663592][ T6933] netlink: 'syz.4.274': attribute type 83 has an invalid length. [ 106.677215][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.685486][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 106.705959][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.719396][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 106.757041][ T6934] team1: entered promiscuous mode [ 106.762771][ T6934] team1: entered allmulticast mode [ 106.788939][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'. [ 106.852703][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 106.913336][ T5891] IPVS: starting estimator thread 0... [ 107.008942][ T6950] IPVS: using max 29 ests per chain, 69600 per kthread [ 107.115601][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 107.250663][ T6972] netlink: 'syz.4.290': attribute type 1 has an invalid length. [ 107.285718][ T6972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.339221][ T6972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.364191][ T6972] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.375558][ T6972] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 107.427570][ T6976] veth3: entered promiscuous mode [ 107.445274][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 107.458190][ T6976] bond1: (slave veth3): Enslaving as an active interface with a down link [ 107.570672][ T6988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.611507][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 107.664089][ T6993] bond2: Invalid ad_actor_system MAC address. [ 107.675543][ T6993] bond2: option ad_actor_system: invalid value (1) [ 107.688977][ T6993] bond2 (unregistering): Released all slaves [ 107.714271][ T7000] veth0_to_team: entered promiscuous mode [ 107.721186][ T7000] veth0_to_team: entered allmulticast mode [ 108.070211][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 108.397340][ T7048] netlink: 'syz.0.311': attribute type 12 has an invalid length. [ 108.406222][ T7048] netlink: 'syz.0.311': attribute type 12 has an invalid length. [ 108.450156][ T7050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.450333][ T3509] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 108.872731][ T7085] tipc: Started in network mode [ 108.877644][ T7085] tipc: Node identity 165d857290c5, cluster identity 4711 [ 108.933618][ T7085] tipc: Enabled bearer , priority 0 [ 109.015093][ T7094] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 109.028722][ T7094] bond1 (unregistering): Released all slaves [ 109.091385][ T7079] tipc: Disabling bearer [ 109.146584][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.174613][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.253183][ T7107] netlink: 'syz.4.326': attribute type 16 has an invalid length. [ 109.277107][ T7107] netlink: 'syz.4.326': attribute type 17 has an invalid length. [ 109.351764][ T7104] bond1: option miimon: invalid value (18446744073709551585) [ 109.360081][ T7104] bond1: option miimon: allowed values 0 - 2147483647 [ 109.372731][ T7104] bond1 (unregistering): Released all slaves [ 109.450693][ T7107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.504331][ T7124] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 109.540904][ T7121] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 109.635923][ T7129] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 109.683839][ T7129] bond1 (unregistering): Released all slaves [ 110.061078][ T7152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.205501][ T7174] Cannot find add_set index 1 as target [ 110.333248][ T7180] tipc: Enabled bearer , priority 13 [ 110.578895][ T7196] xt_hashlimit: size too large, truncated to 1048576 [ 111.417193][ T7222] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 111.452863][ T5933] tipc: Node number set to 2258142578 [ 111.541807][ T7228] __nla_validate_parse: 15 callbacks suppressed [ 111.541826][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 111.848825][ T7208] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 112.260732][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 112.321182][ T7283] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 112.343103][ T7283] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.352311][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.371694][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.388688][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.397708][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.417111][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 112.466403][ T7293] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20001 [ 112.661954][ T7308] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 112.675447][ T7308] netlink: 224 bytes leftover after parsing attributes in process `syz.3.380'. [ 112.904507][ T7325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.385'. [ 112.935731][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 113.085540][ T7341] netlink: 64 bytes leftover after parsing attributes in process `syz.1.388'. [ 113.185131][ T7349] netlink: 'syz.0.394': attribute type 24 has an invalid length. [ 113.355891][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.363918][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.371831][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.379730][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.387577][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.395468][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.403335][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.411247][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.419165][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.427034][ T7362] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.590357][ T5833] Bluetooth: hci4: command tx timeout [ 113.616849][ T7378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'. [ 113.716433][ T7381] : left promiscuous mode [ 113.931216][ T7391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.993141][ T7401] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.022719][ T7391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.099417][ T7391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.139780][ T7398] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 114.151839][ T7398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.409'. [ 114.366008][ T7427] netlink: 'syz.4.419': attribute type 27 has an invalid length. [ 114.394416][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.405906][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.419721][ T7429] netlink: 'syz.1.417': attribute type 16 has an invalid length. [ 114.436269][ T7429] netlink: 'syz.1.417': attribute type 17 has an invalid length. [ 114.730339][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 114.869717][ T7449] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.904515][ T7455] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.532679][ T7496] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 115.592061][ T7496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.615603][ T7496] bond2: (slave gretap1): making interface the new active one [ 115.625296][ T7496] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 116.270916][ T7547] netlink: 'syz.2.455': attribute type 11 has an invalid length. [ 116.478700][ T7557] atomic_op ffff88801125c198 conn xmit_atomic 0000000000000000 [ 116.834427][ T7586] __nla_validate_parse: 10 callbacks suppressed [ 116.834444][ T7586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.467'. [ 116.960283][ T7596] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 117.057815][ T7600] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 117.096900][ T7601] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 117.363656][ T7623] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 117.390563][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 117.416315][ T7635] team0: Device ip6gre1 is of different type [ 117.591660][ T7647] netlink: 'syz.2.483': attribute type 83 has an invalid length. [ 117.717169][ T7656] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 117.755545][ T7656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.820284][ T7661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.487'. [ 117.837567][ T7656] bond2: (slave veth5): Enslaving as an active interface with a down link [ 117.860097][ T7662] bond2: (slave veth0_to_bond): making interface the new active one [ 117.870491][ T7662] veth0_to_bond: entered promiscuous mode [ 117.876738][ T7662] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 117.978435][ T7671] xt_time: unknown flags 0xf4 [ 118.042315][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 118.052571][ T7678] pim6reg: entered allmulticast mode [ 118.115597][ T7681] netlink: 'syz.4.491': attribute type 10 has an invalid length. [ 118.453058][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 118.613905][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 118.633186][ T7714] macvtap1: entered promiscuous mode [ 118.641174][ T7714] vlan0: entered promiscuous mode [ 118.646614][ T7714] macvtap1: entered allmulticast mode [ 118.652515][ T7689] netlink: 'syz.4.494': attribute type 11 has an invalid length. [ 118.660987][ T7714] vlan0: entered allmulticast mode [ 118.666573][ T7714] veth0_vlan: entered allmulticast mode [ 118.719544][ T7700] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 118.761008][ T7700] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.498'. [ 118.782419][ T7700] nbd: must specify a device to reconfigure [ 118.800072][ T7714] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 118.816372][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 118.840886][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 118.850343][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 118.880654][ T7714] macvtap2: entered promiscuous mode [ 118.886312][ T7714] macvtap2: entered allmulticast mode [ 119.004567][ T7733] netlink: 'syz.4.507': attribute type 5 has an invalid length. [ 119.125933][ T7740] netlink: 'syz.3.510': attribute type 10 has an invalid length. [ 119.212299][ T7740] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 119.281571][ T7751] netlink: 'syz.1.514': attribute type 11 has an invalid length. [ 119.431943][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 119.572515][ T7774] net_ratelimit: 48 callbacks suppressed [ 119.572531][ T7774] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 119.657186][ T7783] tipc: Enabled bearer , priority 0 [ 119.664841][ T7783] syzkaller0: entered promiscuous mode [ 119.671233][ T7783] syzkaller0: entered allmulticast mode [ 119.789310][ T7783] tipc: Resetting bearer [ 119.811976][ T7775] tipc: Resetting bearer [ 119.868931][ T7775] tipc: Disabling bearer [ 120.118201][ T7814] tipc: Started in network mode [ 120.123135][ T7814] tipc: Node identity 7293586c2f1c, cluster identity 4711 [ 120.138377][ T7814] tipc: Enabled bearer , priority 0 [ 120.160220][ T7812] tipc: Started in network mode [ 120.197902][ T7812] tipc: Node identity 4a4553d3ba, cluster identity 4711 [ 120.227025][ T7812] tipc: Enabled bearer , priority 0 [ 120.246036][ T7824] syzkaller0: entered promiscuous mode [ 120.252030][ T7824] syzkaller0: entered allmulticast mode [ 120.277993][ C1] syzkaller0: tun_net_xmit 90 [ 120.284041][ T7830] xt_TCPMSS: Only works on TCP SYN packets [ 120.287734][ T3509] syzkaller0: tun_net_xmit 70 [ 120.313325][ T7814] tipc: Resetting bearer [ 120.328292][ T7814] syzkaller0: tun_net_xmit 90 [ 120.333142][ T7814] syzkaller0: tun_net_xmit 90 [ 120.362103][ T7812] tipc: Disabling bearer [ 120.418329][ T7835] veth0_to_team: entered promiscuous mode [ 120.424138][ T7835] veth0_to_team: entered allmulticast mode [ 120.468399][ C1] syzkaller0: tun_net_xmit 90 [ 120.473239][ C1] syzkaller0: tun_net_xmit 90 [ 120.607941][ C1] syzkaller0: tun_net_xmit 90 [ 120.612769][ C1] syzkaller0: tun_net_xmit 90 [ 120.748345][ C1] syzkaller0: tun_net_xmit 90 [ 120.753146][ C1] syzkaller0: tun_net_xmit 90 [ 120.858378][ T7805] tipc: Resetting bearer [ 120.943999][ T7805] tipc: Disabling bearer [ 120.957978][ T7862] netlink: 'syz.3.548': attribute type 39 has an invalid length. [ 121.086381][ T7868] openvswitch: netlink: IP tunnel dst address not specified [ 121.112212][ T7868] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 121.177688][ T7868] bond1: entered promiscuous mode [ 121.187169][ T7868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.332157][ T7890] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 121.510295][ T7898] syz.2.556: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.528223][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.2.556 Not tainted syzkaller #0 PREEMPT(full) [ 121.528246][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.528263][ T7898] Call Trace: [ 121.528271][ T7898] [ 121.528279][ T7898] dump_stack_lvl+0x189/0x250 [ 121.528313][ T7898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.528332][ T7898] ? __pfx__printk+0x10/0x10 [ 121.528350][ T7898] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.528372][ T7898] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.528395][ T7898] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 121.528420][ T7898] warn_alloc+0x214/0x310 [ 121.528448][ T7898] ? __pfx_warn_alloc+0x10/0x10 [ 121.528480][ T7898] ? __get_vm_area_node+0x28f/0x300 [ 121.528500][ T7898] ? xskq_create+0xbf/0x170 [ 121.528529][ T7898] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 121.528580][ T7898] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.528608][ T7898] ? __kasan_kmalloc+0x93/0xb0 [ 121.528631][ T7898] vmalloc_user_noprof+0xad/0xf0 [ 121.528652][ T7898] ? xskq_create+0xbf/0x170 [ 121.528695][ T7898] xskq_create+0xbf/0x170 [ 121.528725][ T7898] xsk_init_queue+0xb0/0x110 [ 121.528753][ T7898] xsk_setsockopt+0x57b/0x8d0 [ 121.528787][ T7898] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.528815][ T7898] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.528841][ T7898] ? aa_sock_opt_perm+0xff/0x1b0 [ 121.528869][ T7898] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 121.528895][ T7898] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.528921][ T7898] do_sock_setsockopt+0x179/0x1b0 [ 121.528954][ T7898] __x64_sys_setsockopt+0x13f/0x1b0 [ 121.528986][ T7898] do_syscall_64+0xfa/0xfa0 [ 121.529014][ T7898] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.529043][ T7898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.529062][ T7898] ? clear_bhb_loop+0x60/0xb0 [ 121.529087][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.529106][ T7898] RIP: 0033:0x7feb1438eec9 [ 121.529128][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.529143][ T7898] RSP: 002b:00007feb125f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.529166][ T7898] RAX: ffffffffffffffda RBX: 00007feb145e6090 RCX: 00007feb1438eec9 [ 121.529180][ T7898] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 121.529191][ T7898] RBP: 00007feb14411f91 R08: 0000000000000004 R09: 0000000000000000 [ 121.529202][ T7898] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 121.529214][ T7898] R13: 00007feb145e6128 R14: 00007feb145e6090 R15: 00007ffffab3c828 [ 121.529247][ T7898] [ 121.529342][ T7898] Mem-Info: [ 121.792252][ T7898] active_anon:5216 inactive_anon:0 isolated_anon:0 [ 121.792252][ T7898] active_file:2821 inactive_file:39886 isolated_file:0 [ 121.792252][ T7898] unevictable:768 dirty:133 writeback:0 [ 121.792252][ T7898] slab_reclaimable:11184 slab_unreclaimable:96193 [ 121.792252][ T7898] mapped:29011 shmem:1355 pagetables:1070 [ 121.792252][ T7898] sec_pagetables:0 bounce:0 [ 121.792252][ T7898] kernel_misc_reclaimable:0 [ 121.792252][ T7898] free:1331049 free_pcp:16558 free_cma:0 [ 121.854322][ T7898] Node 0 active_anon:21080kB inactive_anon:0kB active_file:11284kB inactive_file:159336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116032kB dirty:564kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12152kB pagetables:4120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.886663][ T7898] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.919354][ T7898] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.964912][ T7898] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 121.970868][ T7898] Node 0 DMA32 free:1416980kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21132kB inactive_anon:0kB active_file:11284kB inactive_file:157520kB unevictable:1536kB writepending:564kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:51312kB local_pcp:21004kB free_cma:0kB [ 122.005441][ T7898] lowmem_reserve[]: 0 0 1 1 1 [ 122.011434][ T7898] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 122.056993][ T7898] lowmem_reserve[]: 0 0 0 0 0 [ 122.062639][ T7898] Node 1 Normal free:3891776kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16972kB local_pcp:8684kB free_cma:0kB [ 122.102582][ T7898] lowmem_reserve[]: 0 0 0 0 0 [ 122.109973][ T7898] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.122925][ T7898] Node 0 DMA32: 176*4kB (UME) 118*8kB (M) 61*16kB (UM) 79*32kB (UME) 77*64kB (UM) 21*128kB (UM) 17*256kB (UM) 8*512kB (UME) 9*1024kB (UME) 7*2048kB (UM) 335*4096kB (UM) = 1416928kB [ 122.141218][ T7898] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 122.155327][ T7898] Node 1 Normal: 188*4kB (UE) 46*8kB (UME) 42*16kB (UME) 86*32kB (UME) 26*64kB (UME) 4*128kB (ME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891776kB [ 122.178956][ T7898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.188680][ T7898] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.198249][ T7898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.203031][ T7915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.209267][ T7898] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.224516][ T7898] 44059 total pagecache pages [ 122.229667][ T7898] 0 pages in swap cache [ 122.231063][ T7921] netem: incorrect gi model size [ 122.233841][ T7898] Free swap = 124996kB [ 122.233853][ T7898] Total swap = 124996kB [ 122.233863][ T7898] 2097051 pages RAM [ 122.251212][ T7898] 0 pages HighMem/MovableOnly [ 122.255896][ T7898] 424452 pages reserved [ 122.259539][ T7921] netem: change failed [ 122.260079][ T7898] 0 pages cma reserved [ 122.435748][ T7937] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 122.619709][ T7948] __nla_validate_parse: 10 callbacks suppressed [ 122.619726][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 122.637423][ T7951] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.571'. [ 122.678918][ T7948] validate_nla: 5 callbacks suppressed [ 122.678935][ T7948] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 122.693252][ T7948] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 122.814268][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'. [ 122.829559][ T7946] tipc: Enabled bearer , priority 0 [ 122.885718][ T7954] syzkaller0: entered promiscuous mode [ 122.891329][ T7954] syzkaller0: entered allmulticast mode [ 122.897582][ T7954] tipc: Resetting bearer [ 122.958288][ T7944] tipc: Resetting bearer [ 122.989258][ T7968] netlink: 216 bytes leftover after parsing attributes in process `syz.4.574'. [ 123.017251][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 123.135451][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 123.346869][ T7983] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 124.085780][ T7944] tipc: Disabling bearer [ 124.112359][ T7983] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 124.457684][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'. [ 124.497712][ T8006] Cannot find add_set index 1 as target [ 124.567985][ T8013] tipc: Started in network mode [ 124.572878][ T8013] tipc: Node identity 42f5, cluster identity 1 [ 124.580125][ T8013] tipc: Node number set to 17141 [ 124.672124][ T8018] : entered promiscuous mode [ 124.833786][ T8024] bridge0: port 3(batadv1) entered blocking state [ 124.842860][ T8024] bridge0: port 3(batadv1) entered disabled state [ 124.858066][ T8024] batadv1: entered allmulticast mode [ 124.911741][ T8024] batadv1: entered promiscuous mode [ 124.926724][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.599'. [ 124.956770][ T8042] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 125.066006][ T8045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 125.184669][ T8050] IPVS: length: 142 != 24 [ 125.329545][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 125.339015][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 125.443400][ T8067] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 125.523113][ T8067] veth1_macvtap: left promiscuous mode [ 125.559703][ T8049] syz.1.602 (8049) used greatest stack depth: 17864 bytes left [ 125.671648][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'. [ 125.939873][ T8083] IPv6: sit2: Disabled Multicast RS [ 125.946235][ T8083] sit2: entered allmulticast mode [ 126.176827][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 126.186870][ T8112] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 126.199654][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 126.215181][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 126.221705][ T8112] netlink: 'syz.4.617': attribute type 3 has an invalid length. [ 126.230772][ T8112] NCSI netlink: No device for ifindex 813332851 [ 126.467910][ T8108] infiniband syz0: set active [ 126.473121][ T8108] infiniband syz0: added gretap0 [ 126.484909][ T5898] gretap0 speed is unknown, defaulting to 1000 [ 126.528785][ T8108] RDS/IB: syz0: added [ 126.551333][ T8108] smc: adding ib device syz0 with port count 1 [ 126.557709][ T8108] smc: ib device syz0 port 1 has no pnetid [ 126.588334][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 126.620425][ T5891] gretap0 speed is unknown, defaulting to 1000 [ 127.155497][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 127.238399][ T8156] bridge_slave_0: left allmulticast mode [ 127.251581][ T8156] bridge_slave_0: left promiscuous mode [ 127.265425][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.279510][ T8156] bridge_slave_1: left allmulticast mode [ 127.285295][ T8156] bridge_slave_1: left promiscuous mode [ 127.295132][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.307019][ T8156] bond2: (slave veth0_to_bond): Releasing active interface [ 127.323349][ T8156] veth0_to_bond: left promiscuous mode [ 127.354441][ T8156] bond0: (slave bond_slave_0): Releasing backup interface [ 127.365586][ T8156] bond0: (slave bond_slave_1): Releasing backup interface [ 127.382215][ T8156] team0: Port device team_slave_0 removed [ 127.394245][ T8156] team0: Port device team_slave_1 removed [ 127.401593][ T8156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.409236][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.418079][ T8156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.425535][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.436329][ T8156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.508459][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 127.521141][ T8163] delete_channel: no stack [ 127.526442][ T5933] IPVS: starting estimator thread 0... [ 127.618248][ T8164] IPVS: using max 29 ests per chain, 69600 per kthread [ 127.626332][ T8166] delete_channel: no stack [ 127.804477][ T8174] __nla_validate_parse: 4 callbacks suppressed [ 127.804493][ T8174] netlink: 2 bytes leftover after parsing attributes in process `syz.0.634'. [ 127.975795][ T8181] netlink: 'syz.4.636': attribute type 11 has an invalid length. [ 127.988039][ T8181] netlink: 224 bytes leftover after parsing attributes in process `syz.4.636'. [ 128.025755][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 128.400920][ T8196] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 128.408026][ T8108] gretap0 speed is unknown, defaulting to 1000 [ 128.416002][ T8196] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 128.429864][ T8196] netlink: 'syz.1.642': attribute type 4 has an invalid length. [ 128.437522][ T8196] netlink: 136 bytes leftover after parsing attributes in process `syz.1.642'. [ 128.447281][ T8198] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 128.495979][ T8198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.643'. [ 128.558233][ T8198] block nbd1: not configured, cannot reconfigure [ 128.589323][ T8205] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 128.657349][ T8205] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 128.684403][ T8205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.744074][ T8212] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 128.937022][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 128.958023][ T30] audit: type=1800 audit(1759944934.890:2): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.641" name="memory.events" dev="tmpfs" ino=761 res=0 errno=0 [ 129.520486][ T8252] tipc: Enabling of bearer rejected, media not registered [ 129.540470][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.565732][ T8258] veth0: entered promiscuous mode [ 129.566078][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.603178][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.612566][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.626038][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.681490][ T8253] veth0: left promiscuous mode [ 129.689483][ T8263] netlink: 'syz.1.657': attribute type 21 has an invalid length. [ 129.697417][ T8266] netlink: 'syz.1.657': attribute type 21 has an invalid length. [ 129.942792][ T8278] tipc: Enabled bearer , priority 0 [ 129.974252][ T8276] tipc: Disabling bearer [ 130.667521][ T8298] bridge_slave_0: left allmulticast mode [ 130.692262][ T8298] bridge_slave_0: left promiscuous mode [ 130.728738][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.788550][ T8298] bridge_slave_1: left allmulticast mode [ 130.795790][ T8298] bridge_slave_1: left promiscuous mode [ 130.812326][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.855440][ T8298] bond0: (slave bond_slave_0): Releasing backup interface [ 130.877595][ T8298] bond0: (slave bond_slave_1): Releasing backup interface [ 130.919077][ T8298] team0: Port device team_slave_0 removed [ 130.949823][ T8298] team0: Port device team_slave_1 removed [ 130.961526][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.984116][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.010988][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.027031][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.039819][ T8298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.075838][ T5898] gretap0 speed is unknown, defaulting to 1000 [ 131.335124][ T8352] IPVS: length: 99 != 8 [ 131.599838][ T8371] dvmrp0: left allmulticast mode [ 131.886659][ T8390] pimreg: entered allmulticast mode [ 131.920312][ T8390] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 131.960095][ T8395] syzkaller1: entered promiscuous mode [ 131.972371][ T8395] syzkaller1: entered allmulticast mode [ 132.074018][ T8390] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 132.633392][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.110950][ T8455] tipc: Enabling of bearer rejected, failed to enable media [ 133.209730][ T8460] netlink: 'syz.0.706': attribute type 27 has an invalid length. [ 133.600639][ T8480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.761730][ T8494] bridge_slave_0: left allmulticast mode [ 133.784283][ T8494] bridge_slave_0: left promiscuous mode [ 133.801488][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.852185][ T8494] bridge_slave_1: left allmulticast mode [ 133.867121][ T8494] bridge_slave_1: left promiscuous mode [ 133.881977][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.915627][ T8494] bond0: (slave bond_slave_0): Releasing backup interface [ 133.942191][ T8494] bond0: (slave bond_slave_1): Releasing backup interface [ 133.989778][ T8494] team0: Port device team_slave_0 removed [ 134.027176][ T8494] team0: Port device team_slave_1 removed [ 134.046429][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.054503][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.067283][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.075134][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.098525][ T8494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.388455][ T8521] __nla_validate_parse: 69 callbacks suppressed [ 134.388473][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 134.571365][ T8521] netlink: 52 bytes leftover after parsing attributes in process `syz.0.719'. [ 134.616457][ T8530] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 134.744589][ T8536] validate_nla: 1 callbacks suppressed [ 134.744607][ T8536] netlink: 'syz.3.720': attribute type 11 has an invalid length. [ 134.783926][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.720'. [ 134.844305][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.723'. [ 135.015009][ T8553] netlink: 'syz.0.726': attribute type 3 has an invalid length. [ 135.022874][ T8540] syzkaller0: entered promiscuous mode [ 135.040801][ T8540] syzkaller0: entered allmulticast mode [ 135.220260][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 135.333524][ T8572] delete_channel: no stack [ 136.394278][ T8588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 136.552995][ T8604] netlink: 96 bytes leftover after parsing attributes in process `syz.1.738'. [ 136.831942][ T8613] netlink: 'syz.3.741': attribute type 23 has an invalid length. [ 137.230583][ T8634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.273783][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 137.757572][ T8657] syzkaller1: entered promiscuous mode [ 137.769801][ T8657] syzkaller1: entered allmulticast mode [ 137.784001][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 137.875401][ T8670] netlink: 'syz.0.757': attribute type 33 has an invalid length. [ 137.901782][ T8670] netlink: 152 bytes leftover after parsing attributes in process `syz.0.757'. [ 138.594833][ T8734] openvswitch: netlink: Message has 4 unknown bytes. [ 138.601917][ T8734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.656193][ T8736] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20001 [ 139.268278][ T8780] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 139.446880][ T8795] __nla_validate_parse: 9 callbacks suppressed [ 139.446897][ T8795] netlink: 14 bytes leftover after parsing attributes in process `syz.0.801'. [ 139.573246][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.804'. [ 139.666949][ T8795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.689833][ T8803] netlink: 48 bytes leftover after parsing attributes in process `syz.4.802'. [ 139.690310][ T8795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.718026][ T8795] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 139.734429][ T8795] bond0 (unregistering): Released all slaves [ 139.756799][ T8798] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 139.896218][ T8818] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 139.918422][ T8818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.808'. [ 140.067283][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 140.078122][ T8832] netlink: 80 bytes leftover after parsing attributes in process `syz.0.811'. [ 140.098111][ T8832] netlink: 80 bytes leftover after parsing attributes in process `syz.0.811'. [ 140.240014][ T8845] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 140.278038][ T8845] netlink: 'syz.0.815': attribute type 4 has an invalid length. [ 140.301402][ T8845] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.815'. [ 140.493734][ T8851] syzkaller0: entered promiscuous mode [ 140.499439][ T8851] syzkaller0: entered allmulticast mode [ 140.651989][ T8872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.825'. [ 141.674097][ T8891] netlink: 'syz.2.827': attribute type 4 has an invalid length. [ 141.778418][ T8893] ip6gre1: entered allmulticast mode [ 141.785318][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.969304][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 141.999601][ T8906] netlink: 'syz.3.831': attribute type 6 has an invalid length. [ 142.017976][ T8904] bridge_slave_1: left allmulticast mode [ 142.037698][ T8904] bridge_slave_1: left promiscuous mode [ 142.058067][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.084490][ T8904] bridge_slave_0: left allmulticast mode [ 142.097656][ T8904] bridge_slave_0: left promiscuous mode [ 142.127367][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.477166][ T8929] tipc: Enabled bearer , priority 0 [ 142.500533][ T8931] syzkaller0: entered promiscuous mode [ 142.516278][ T8931] syzkaller0: entered allmulticast mode [ 142.708379][ T8939] bond4 (unregistering): Released all slaves [ 142.956484][ T8967] netlink: 'syz.4.854': attribute type 1 has an invalid length. [ 143.078172][ T8977] Cannot find del_set index 49151 as target [ 143.251621][ T8987] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 143.263617][ T8988] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 143.317611][ T8987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.397380][ T8996] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.412274][ T8996] netlink: 'syz.4.862': attribute type 33 has an invalid length. [ 143.580498][ T9003] tipc: Enabled bearer , priority 0 [ 143.608756][ T8176] tipc: Node number set to 4031075283 [ 143.618940][ T9002] tipc: Disabling bearer [ 143.842922][ T9013] batadv_slave_1: entered promiscuous mode [ 143.955144][ T9012] batadv_slave_1: left promiscuous mode [ 144.066175][ T9020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.077654][ T9020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 144.200543][ T9020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.221285][ T9020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 144.262641][ T9030] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 144.361485][ T9020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.376164][ T9020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 144.444125][ T9020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.454738][ T9020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 144.639381][ T7256] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 144.655471][ T7256] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.674704][ T7256] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 144.677150][ T9044] xt_l2tp: missing protocol rule (udp|l2tpip) [ 144.693689][ T7256] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.733632][ T7256] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 144.745818][ T7256] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.766509][ T7252] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 144.778722][ T7252] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.788264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.063805][ T9058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.125849][ T9058] xt_l2tp: missing protocol rule (udp|l2tpip) [ 145.156531][ T9071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.330290][ T9079] __nla_validate_parse: 9 callbacks suppressed [ 145.330308][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 145.416912][ T9084] netlink: 'syz.1.891': attribute type 4 has an invalid length. [ 145.439162][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 145.528785][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'. [ 145.614257][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 145.851991][ T9087] tipc: Enabled bearer , priority 0 [ 145.893634][ T9087] syzkaller0: entered promiscuous mode [ 145.927954][ T9087] syzkaller0: entered allmulticast mode [ 146.117615][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 146.137997][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 146.259393][ T9086] tipc: Resetting bearer [ 146.299568][ T9086] tipc: Disabling bearer [ 146.300763][ T9128] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 146.431126][ T9128] bond3 (unregistering): Released all slaves [ 146.584916][ T9131] ip6tnl1: entered promiscuous mode [ 146.598338][ T9131] ip6tnl1: entered allmulticast mode [ 146.793984][ T9137] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 146.802766][ T9137] bond0: (slave wlan1): Opening slave failed [ 146.860482][ T9139] tipc: Started in network mode [ 146.874006][ T9139] tipc: Node identity ce7493fb821a, cluster identity 4711 [ 146.894113][ T9139] tipc: Enabled bearer , priority 0 [ 146.917507][ T9143] syzkaller0: entered promiscuous mode [ 146.937924][ T9143] syzkaller0: entered allmulticast mode [ 146.968641][ T9139] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 147.003420][ T9139] tipc: Resetting bearer [ 147.072054][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.1.907'. [ 147.148181][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 147.593735][ T30] audit: type=1804 audit(1759944953.530:3): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.916" name="/newroot/177/cgroup.controllers" dev="tmpfs" ino=918 res=1 errno=0 [ 147.640793][ T30] audit: type=1800 audit(1759944953.550:4): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.916" name="cgroup.controllers" dev="tmpfs" ino=918 res=0 errno=0 [ 147.664982][ T9138] tipc: Resetting bearer [ 147.689732][ T9138] tipc: Disabling bearer [ 147.702368][ T9172] veth0: entered promiscuous mode [ 147.715654][ T9171] veth0: left promiscuous mode [ 148.344408][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 148.375385][ T9200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.928'. [ 148.541003][ T8944] tipc: Resetting bearer [ 148.593632][ T9215] Illegal XDP return value 4294967274 on prog (id 181) dev N/A, expect packet loss! [ 148.605990][ T8944] tipc: Disabling bearer [ 148.789993][ T9226] netlink: 'syz.4.935': attribute type 9 has an invalid length. [ 149.182717][ T9251] IPVS: Scheduler module ip_vs_sip not found [ 149.199133][ T9257] tipc: Enabled bearer , priority 0 [ 149.214265][ T9261] veth0_to_bridge: entered promiscuous mode [ 149.228470][ T9257] syzkaller0: entered promiscuous mode [ 149.241397][ T9257] syzkaller0: entered allmulticast mode [ 149.289289][ T9257] tipc: Resetting bearer [ 149.296684][ T9255] tipc: Resetting bearer [ 149.307004][ T9255] tipc: Disabling bearer [ 149.320093][ T9261] veth0_to_bridge: left promiscuous mode [ 150.415066][ T9322] __nla_validate_parse: 11 callbacks suppressed [ 150.415084][ T9322] netlink: 68 bytes leftover after parsing attributes in process `syz.3.967'. [ 150.440805][ T9325] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 150.448752][ T9325] netlink: 244 bytes leftover after parsing attributes in process `syz.4.969'. [ 150.508243][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 150.563480][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 150.615544][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 150.912779][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 150.942344][ T9349] netlink: 260 bytes leftover after parsing attributes in process `syz.2.976'. [ 151.235252][ T9367] xfrm1: entered allmulticast mode [ 151.567382][ T9377] xt_TCPMSS: Only works on TCP SYN packets [ 152.042169][ T9397] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 152.055978][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.992'. [ 152.068777][ T9401] netlink: 'syz.4.992': attribute type 1 has an invalid length. [ 152.076655][ T9401] netlink: 244 bytes leftover after parsing attributes in process `syz.4.992'. [ 152.100037][ T9397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.111226][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 152.163189][ T9406] SET target dimension over the limit! [ 152.376845][ T43] gretap0 speed is unknown, defaulting to 1000 [ 152.637132][ T9443] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20001 [ 152.742444][ T9449] netlink: 'syz.3.1008': attribute type 27 has an invalid length. [ 153.833430][ T9533] netlink: 'syz.4.1035': attribute type 21 has an invalid length. [ 153.844753][ T9533] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.854073][ T9533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.861668][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 153.869134][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 153.876355][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 154.015371][ T9539] bond4 (unregistering): Released all slaves [ 154.150633][ T9557] !€ÿ: renamed from bond_slave_0 [ 154.245219][ T9571] x_tables: duplicate underflow at hook 1 [ 155.272333][ T9584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.659497][ T9613] netlink: 'syz.0.1056': attribute type 5 has an invalid length. [ 155.680050][ T9618] __nla_validate_parse: 6 callbacks suppressed [ 155.680067][ T9618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1059'. [ 155.688529][ T9619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1057'. [ 155.732954][ T9619] Bluetooth: MGMT ver 1.23 [ 155.747948][ T5829] Bluetooth: hci1: command tx timeout [ 156.006954][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 156.018247][ T9636] tipc: Enabled bearer , priority 0 [ 156.026780][ T9636] syzkaller0: entered promiscuous mode [ 156.040764][ T9636] syzkaller0: entered allmulticast mode [ 156.166045][ T9644] tipc: Resetting bearer [ 156.176764][ T9635] tipc: Resetting bearer [ 156.232288][ T9635] tipc: Disabling bearer [ 156.283253][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 156.324614][ T9648] bridge_slave_0: entered promiscuous mode [ 156.423536][ T9666] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 156.437089][ T9665] syzkaller1: entered promiscuous mode [ 156.442783][ T9665] syzkaller1: entered allmulticast mode [ 156.454930][ T9668] tipc: Enabling of bearer rejected, failed to enable media [ 156.962460][ T9697] syzkaller0: entered promiscuous mode [ 156.983204][ T9697] syzkaller0: entered allmulticast mode [ 157.023038][ T9712] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 157.037431][ T9712] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1084'. [ 157.069315][ T9712] nbd: must specify a device to reconfigure [ 157.158905][ T9720] ieee802154 phy1 wpan1: encryption failed: -90 [ 157.186379][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1085'. [ 157.304758][ T9734] netlink: 'syz.3.1085': attribute type 2 has an invalid length. [ 157.838309][ T5833] Bluetooth: hci2: command 0x0401 tx timeout [ 157.844997][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 158.581670][ T9759] sctp: [Deprecated]: syz.2.1097 (pid 9759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.581670][ T9759] Use struct sctp_sack_info instead [ 158.726899][ T9766] IPVS: ip_vs_add_dest(): server weight less than zero [ 158.787651][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 159.061901][ T9789] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 159.071375][ T9789] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 159.207260][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 159.226242][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1111'. [ 159.236216][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 160.020236][ T30] audit: type=1800 audit(1759944965.960:5): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1128" name="memory.events" dev="tmpfs" ino=1102 res=0 errno=0 [ 160.046586][ T30] audit: type=1804 audit(1759944965.980:6): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1128" name="/newroot/213/memory.events" dev="tmpfs" ino=1102 res=1 errno=0 [ 160.288715][ T9878] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 160.346469][ T9882] gretap0 speed is unknown, defaulting to 1000 [ 160.371122][ T9887] netlink: 'syz.2.1132': attribute type 4 has an invalid length. [ 160.811986][ T9910] __nla_validate_parse: 6 callbacks suppressed [ 160.812003][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 160.840442][ T9912] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1145'. [ 160.876312][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 160.938448][ T9918] netlink: 'syz.4.1144': attribute type 11 has an invalid length. [ 161.468350][ T9949] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1153'. [ 161.624441][ T9952] bond0 (unregistering): Released all slaves [ 161.718521][ T9949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.737349][ T9949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.753403][ T9949] bond0 (unregistering): Released all slaves [ 161.854511][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.947072][ T9979] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.960324][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 161.994255][ T49] syzkaller0: tun_net_xmit 76 [ 161.995801][ T9982] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1163'. [ 161.999534][ T49] syzkaller0: tun_net_xmit 48 [ 162.018065][ T5898] syzkaller0: tun_net_xmit 76 [ 162.036981][ T9977] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 162.047924][ T9977] syzkaller0: Linktype set failed because interface is up [ 162.058506][ T5898] syzkaller0: tun_net_xmit 76 [ 162.118679][ T5898] syzkaller0: tun_net_xmit 76 [ 162.162078][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 180.487525][T10025] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 180.570790][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.615739][T10041] sock: sock_set_timeout: `syz.4.1180' (pid 10041) tries to set negative timeout [ 180.640783][T10025] bond0: (slave gretap1): making interface the new active one [ 180.649759][T10025] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 180.896911][T10061] netlink: 'syz.0.1184': attribute type 15 has an invalid length. [ 180.907574][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 180.944775][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 180.956110][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 180.958308][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 180.974155][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 180.997152][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1186'. [ 181.018877][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 181.075698][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 181.095788][T10073] bridge0: port 1(bridge_slave_1) entered blocking state [ 181.108726][T10073] bridge0: port 1(bridge_slave_1) entered disabled state [ 181.150494][T10073] bridge_slave_1: entered allmulticast mode [ 181.167160][T10073] bridge_slave_1: entered promiscuous mode [ 181.180415][T10076] netlink: 'syz.0.1189': attribute type 4 has an invalid length. [ 181.196041][T10079] netlink: 'syz.4.1188': attribute type 3 has an invalid length. [ 181.295613][T10086] xt_l2tp: missing protocol rule (udp|l2tpip) [ 181.682176][T10118] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1202'. [ 181.699125][T10117] vlan2: entered promiscuous mode [ 181.707057][T10117] bond0: entered promiscuous mode [ 181.865560][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 181.980441][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 182.010027][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1207'. [ 182.530185][T10164] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1216'. [ 182.534103][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1215'. [ 182.706732][T10174] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 183.063267][T10208] netlink: 'syz.0.1225': attribute type 8 has an invalid length. [ 183.348475][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 183.358008][ T5829] Bluetooth: hci2: command 0x0401 tx timeout [ 183.631204][T10246] tipc: Enabling of bearer rejected, failed to enable media [ 183.774333][T10259] team0: Device geneve3 is up. Set it down before adding it as a team port [ 184.147008][T10287] netlink: 'syz.1.1247': attribute type 3 has an invalid length. [ 184.343537][T10298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.354532][T10298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.470937][T10298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.497867][T10298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.568512][T10312] netlink: 'syz.0.1254': attribute type 7 has an invalid length. [ 184.676685][T10312] xt_TCPMSS: Only works on TCP SYN packets [ 184.797078][T10298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.807700][T10298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.822249][T10319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.901678][T10338] Cannot find add_set index 0 as target [ 185.026831][T10298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.038512][T10298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.204607][ T7260] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.228053][ T7260] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.264290][ T7260] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.285662][ T7260] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.324281][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.338051][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.376533][ T7258] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.385075][ T7258] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.581673][T10382] openvswitch: netlink: IPv4 frag type 56 is out of range max 2 [ 185.621902][T10385] ip6t_srh: unknown srh invflags 4000 [ 185.937397][T10391] tipc: MTU too low for tipc bearer [ 186.326345][T10425] veth0: entered promiscuous mode [ 186.332753][T10427] __nla_validate_parse: 16 callbacks suppressed [ 186.332770][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 186.589903][T10448] x_tables: duplicate underflow at hook 4 [ 186.813010][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 186.832062][T10468] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1298'. [ 186.875314][T10464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1297'. [ 187.072801][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 187.082483][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1299'. [ 187.112229][ T7258] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.125111][ T7258] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.147215][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1299'. [ 187.167311][ T7258] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.179879][ T7258] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.577075][T10504] tipc: Enabled bearer , priority 0 [ 187.587341][T10505] syzkaller0: entered promiscuous mode [ 187.593047][T10505] syzkaller0: entered allmulticast mode [ 187.607937][T10499] tipc: Resetting bearer [ 187.648312][T10499] tipc: Disabling bearer [ 188.159651][T10529] syzkaller1: entered promiscuous mode [ 188.165707][T10529] syzkaller1: entered allmulticast mode [ 188.174885][T10544] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1323'. [ 188.420600][T10562] gre2: entered promiscuous mode [ 188.430105][T10562] gre2: entered allmulticast mode [ 188.481834][T10567] lo speed is unknown, defaulting to 1000 [ 188.491684][T10567] lo speed is unknown, defaulting to 1000 [ 188.557788][T10567] lo speed is unknown, defaulting to 1000 [ 188.565593][T10575] 8021q: VLANs not supported on gre0 [ 188.586720][T10567] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 188.707387][T10567] lo speed is unknown, defaulting to 1000 [ 188.717325][T10567] lo speed is unknown, defaulting to 1000 [ 188.730412][T10567] lo speed is unknown, defaulting to 1000 [ 188.738506][T10567] lo speed is unknown, defaulting to 1000 [ 188.747003][T10567] lo speed is unknown, defaulting to 1000 [ 188.774003][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 188.812526][T10587] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 188.826316][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 189.187463][T10611] atomic_op ffff888028f44998 conn xmit_atomic 0000000000000000 [ 189.438675][T10629] netlink: 'syz.4.1349': attribute type 11 has an invalid length. [ 189.459406][T10629] netlink: 'syz.4.1349': attribute type 11 has an invalid length. [ 189.565894][T10643] netlink: 'syz.3.1354': attribute type 11 has an invalid length. [ 189.941790][T10670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.993163][T10670] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 190.727690][T10735] tipc: Enabled bearer , priority 0 [ 190.748230][T10735] syzkaller0: entered promiscuous mode [ 190.756475][T10735] syzkaller0: entered allmulticast mode [ 190.838523][T10735] tipc: Resetting bearer [ 190.849538][T10734] tipc: Resetting bearer [ 190.876557][T10734] tipc: Disabling bearer [ 191.614802][T10793] __nla_validate_parse: 13 callbacks suppressed [ 191.614821][T10793] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1405'. [ 191.635285][T10793] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1405'. [ 191.695512][T10799] sctp: [Deprecated]: syz.4.1406 (pid 10799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.695512][T10799] Use struct sctp_sack_info instead [ 191.847623][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 192.211931][T10825] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 192.239069][T10825] bond5: entered promiscuous mode [ 192.244416][T10825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.263564][T10825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.270837][T10825] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 192.281864][T10825] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 192.295755][T10825] bond5: (slave wireguard0): making interface the new active one [ 192.303696][T10825] wireguard0: entered promiscuous mode [ 192.310828][T10825] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 192.405978][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 192.438345][T10833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'. [ 192.447540][T10835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1419'. [ 192.466300][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 192.476078][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'. [ 192.777266][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1425'. [ 192.813713][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 192.820285][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 192.826815][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.834679][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.842601][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.850422][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.858360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.866178][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.874122][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.882006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.889996][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.897853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.905795][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.911745][T10863] xt_policy: too many policy elements [ 192.913653][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.926954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.934830][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.942773][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.950617][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.958575][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.966395][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.974350][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.982203][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 192.990161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 192.998017][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.005888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.013718][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.021654][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.029502][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.037362][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.045192][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.053141][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.061001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.068954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.076767][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.084649][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.092462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.100342][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.108175][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.116052][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.123871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.131794][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.139618][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.147480][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.155307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.163186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.171037][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.178920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.186712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.194677][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.202517][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.210486][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.218328][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.226230][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.234078][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.242008][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.249838][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.257712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.265547][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.273501][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.281354][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.289250][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.297059][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.304972][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.312792][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.320717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.328540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.336408][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.344234][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.352182][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.360032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.368017][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.375823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.383737][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.391589][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.399491][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.407299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.415258][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.423105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.431088][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.438946][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.446876][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.454734][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.462689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.470544][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.478497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 193.486322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 193.534787][T10869] netlink: 'syz.1.1428': attribute type 24 has an invalid length. [ 193.557632][T10860] syzkaller1: entered promiscuous mode [ 193.563198][T10860] syzkaller1: entered allmulticast mode [ 193.586730][T10872] netlink: 'syz.4.1429': attribute type 2 has an invalid length. [ 193.600562][T10872] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1429'. [ 194.072936][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.249182][T10918] netlink: 'syz.1.1443': attribute type 11 has an invalid length. [ 194.264196][T10918] netlink: 'syz.1.1443': attribute type 5 has an invalid length. [ 194.738432][T10956] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.825507][T10958] netlink: 'syz.4.1455': attribute type 15 has an invalid length. [ 194.884567][ T7252] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 194.894990][T10958] netlink: 'syz.4.1455': attribute type 15 has an invalid length. [ 194.913190][ T7252] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 194.926790][ T7252] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 194.966380][ T7252] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 194.972553][T10967] netlink: ct family unspecified [ 194.980570][T10967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.240447][T10981] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 195.260284][T10983] bridge_slave_0: left allmulticast mode [ 195.271643][T10983] bridge_slave_0: left promiscuous mode [ 195.281562][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.341604][T10983] bridge_slave_1: left allmulticast mode [ 195.350023][T10983] bridge_slave_1: left promiscuous mode [ 195.355870][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.397106][T10983] team0: Port device C removed [ 195.417595][T10983] team0: Port device team_slave_1 removed [ 195.445302][T10983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.466972][T10983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.487704][T10983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.568578][T11007] netlink: 'syz.3.1467': attribute type 4 has an invalid length. [ 195.648783][T11014] netlink: 'syz.0.1468': attribute type 8 has an invalid length. [ 195.902087][T11025] bond5 (unregistering): Released all slaves [ 196.083657][T11046] tipc: Enabling of bearer rejected, failed to enable media [ 196.430614][T11070] bond5: option miimon: invalid value (18446744073709551585) [ 196.442463][T11070] bond5: option miimon: allowed values 0 - 2147483647 [ 196.455960][T11070] bond5 (unregistering): Released all slaves [ 196.652380][T11088] netlink: 'syz.4.1486': attribute type 10 has an invalid length. [ 196.676652][T11088] batman_adv: batadv0: Adding interface: team0 [ 196.684125][T11088] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.710257][T11088] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 197.082943][T11115] gretap0 speed is unknown, defaulting to 1000 [ 197.156277][T11121] __nla_validate_parse: 85 callbacks suppressed [ 197.156294][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 197.174575][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'. [ 197.204209][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 197.271778][T11115] lo speed is unknown, defaulting to 1000 [ 197.388549][T11124] pim6reg527: entered allmulticast mode [ 197.593748][T11131] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1497'. [ 197.648219][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 197.714025][T11136] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 197.785458][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 197.892494][T11136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.937525][T11135] bond2: (slave veth3): Enslaving as an active interface with a down link [ 197.963376][T11138] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 198.060053][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 198.104529][T11149] syzkaller0: entered promiscuous mode [ 198.111799][T11149] syzkaller0: entered allmulticast mode [ 198.255533][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'. [ 198.389281][T11168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1510'. [ 198.402554][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 198.413532][T11168] netlink: 'syz.3.1510': attribute type 3 has an invalid length. [ 198.438673][T11168] netlink: 'syz.3.1510': attribute type 2 has an invalid length. [ 198.647376][T11188] tipc: Enabled bearer , priority 0 [ 198.669215][T11188] syzkaller0: entered promiscuous mode [ 198.678936][T11188] syzkaller0: entered allmulticast mode [ 198.742355][T11193] netlink: 'syz.4.1518': attribute type 11 has an invalid length. [ 198.753828][T11188] tipc: Resetting bearer [ 198.790242][T11187] tipc: Resetting bearer [ 198.822423][T11187] tipc: Disabling bearer [ 199.077351][T11221] netlink: zone id is out of range [ 199.095494][T11221] netlink: zone id is out of range [ 199.105608][T11221] netlink: zone id is out of range [ 199.122567][T11221] netlink: zone id is out of range [ 199.127711][T11221] netlink: zone id is out of range [ 199.841596][T11268] validate_nla: 2 callbacks suppressed [ 199.841614][T11268] netlink: 'syz.3.1537': attribute type 10 has an invalid length. [ 199.919820][T11273] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 199.976159][T11273] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.023378][T11279] bond6: (slave geneve3): making interface the new active one [ 200.039686][T11279] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 200.178022][T11280] vlan3: entered allmulticast mode [ 200.183207][T11280] bridge_slave_0: entered allmulticast mode [ 200.359582][T11287] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 200.447927][T11298] 8021q: VLANs not supported on lo [ 200.453263][T11301] tipc: Invalid UDP bearer configuration [ 200.453309][T11301] tipc: Enabling of bearer rejected, failed to enable media [ 200.507178][T11306] vlan3: entered promiscuous mode [ 200.517919][T11306] bridge0: entered promiscuous mode [ 200.562367][T11301] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 200.747563][T11314] bond6 (unregistering): Released all slaves [ 200.775682][T11322] netlink: 'syz.2.1551': attribute type 9 has an invalid length. [ 201.126324][T11341] tipc: Enabled bearer , priority 0 [ 201.146821][T11341] syzkaller0: entered promiscuous mode [ 201.160625][T11348] nbd: must specify at least one socket [ 201.161621][T11341] syzkaller0: entered allmulticast mode [ 201.234319][T11349] tipc: Resetting bearer [ 201.268012][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.274246][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.280641][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 201.286979][T11338] tipc: Resetting bearer [ 201.344437][T11338] tipc: Disabling bearer [ 201.443499][T11359] ipvlan2: entered promiscuous mode [ 201.788371][T11389] netlink: 'syz.2.1572': attribute type 29 has an invalid length. [ 201.965139][ T5842] Bluetooth: hci4: link tx timeout [ 201.971732][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.982142][ T5829] Bluetooth: hci4: link tx timeout [ 201.987610][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.996039][ T5829] Bluetooth: hci4: link tx timeout [ 202.001657][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.009491][ T5829] Bluetooth: hci4: link tx timeout [ 202.014625][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.022475][ T5829] Bluetooth: hci4: link tx timeout [ 202.027603][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.035737][ T5829] Bluetooth: hci4: link tx timeout [ 202.040977][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.048837][ T5829] Bluetooth: hci4: link tx timeout [ 202.053961][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.066732][ T5829] Bluetooth: hci4: link tx timeout [ 202.074211][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.186434][T11423] __nla_validate_parse: 33 callbacks suppressed [ 202.186451][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1584'. [ 202.221791][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'. [ 202.233189][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 202.259659][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 202.299772][T11435] netlink: 'syz.3.1584': attribute type 2 has an invalid length. [ 202.353589][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 202.583000][T11459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 202.614509][T11459] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 202.629080][T11459] gretap2: entered promiscuous mode [ 202.634407][T11459] gretap2: entered allmulticast mode [ 202.666055][T11469] sctp: [Deprecated]: syz.0.1596 (pid 11469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.666055][T11469] Use struct sctp_sack_info instead [ 202.670292][T11467] netlink: 'syz.2.1595': attribute type 8 has an invalid length. [ 202.790030][T11474] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 202.811356][T11474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1598'. [ 202.825920][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 202.881701][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 203.156591][T11505] : entered promiscuous mode [ 203.194046][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 203.319875][T11521] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1612'. [ 203.462275][T11530] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 203.922662][T11555] gretap0: entered promiscuous mode [ 203.954754][T11555] 0ªî{X¹¦: renamed from gretap0 [ 203.972710][T11555] 0ªî{X¹¦: left promiscuous mode [ 203.980009][T11555] 0ªî{X¹¦: entered allmulticast mode [ 203.987256][T11555] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 204.006051][T11557] SET target dimension over the limit! [ 204.024233][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 204.308732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.427446][T11592] ksmbd: Daemon and kernel module version mismatch. ksmbd: 3, kernel module: 1. User-space ksmbd should terminate. [ 204.498968][T11594] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 204.650470][T11600] netlink: 'syz.1.1641': attribute type 10 has an invalid length. [ 204.730081][T11609] Bluetooth: MGMT ver 1.23 [ 204.747718][T11600] team0: Port device dummy0 added [ 204.887692][T11615] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 205.175751][T11634] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 205.484662][T11634] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.550662][T11635] bond6: (slave geneve3): making interface the new active one [ 205.560572][T11635] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 205.907358][T11673] vlan2: entered allmulticast mode [ 206.336562][T11693] bond7 (unregistering): Released all slaves [ 206.470194][T11709] batman_adv: batadv0: Removing interface: team0 [ 206.479504][T11709] team0: Device vti0 is up. Set it down before adding it as a team port [ 206.670174][T11720] bridge0: entered allmulticast mode [ 206.730514][T11724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.925077][T11740] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 206.933337][T11740] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 206.942778][T11740] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 206.950650][T11740] netlink: 'syz.1.1682': attribute type 2 has an invalid length. [ 207.284837][T11765] __nla_validate_parse: 15 callbacks suppressed [ 207.284857][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 207.383307][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 207.428721][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 207.448068][T11776] ip6t_srh: unknown srh invflags 4000 [ 207.578703][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 207.759172][T11799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1705'. [ 207.817473][T11808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1706'. [ 208.042961][T11828] netlink: 'syz.2.1712': attribute type 83 has an invalid length. [ 208.208791][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'. [ 208.218103][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'. [ 208.234022][T11834] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1714'. [ 208.259499][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 208.473832][T11857] veth7: entered promiscuous mode [ 208.479333][T11857] veth7: entered allmulticast mode [ 208.620743][T11872] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 208.781303][T11882] netlink: 'syz.2.1730': attribute type 23 has an invalid length. [ 209.053153][T11901] netlink: 'syz.3.1737': attribute type 1 has an invalid length. [ 209.072552][T11901] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.092486][T11901] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.717158][T11940] dvmrp0: entered allmulticast mode [ 209.949845][T11954] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 210.085178][T11959] pim6reg: entered allmulticast mode [ 210.098395][T11959] pim6reg: left allmulticast mode [ 210.105097][T11959] bridge0: left allmulticast mode [ 210.133322][T11960] syzkaller1: entered promiscuous mode [ 210.139103][T11960] syzkaller1: entered allmulticast mode [ 210.460286][ T3583] gretap0 speed is unknown, defaulting to 1000 [ 210.494741][T11991] validate_nla: 3 callbacks suppressed [ 210.494770][T11991] netlink: 'syz.2.1767': attribute type 13 has an invalid length. [ 210.835719][T12018] ipvlan2: entered promiscuous mode [ 210.964704][T12022] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 211.042244][T12029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.061932][T12030] netlink: 'syz.3.1777': attribute type 10 has an invalid length. [ 211.228608][T12046] openvswitch: netlink: Flow key attr not present in new flow. [ 211.342662][T12058] netlink: 'syz.3.1787': attribute type 3 has an invalid length. [ 211.837282][T12025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.989846][ T5842] Bluetooth: hci0: command tx timeout [ 212.085421][T12091] openvswitch: netlink: Flow key attr not present in new flow. [ 212.446273][T12132] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 212.810190][T12160] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.979459][T12172] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.125366][T12186] __nla_validate_parse: 22 callbacks suppressed [ 213.125384][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 213.163189][T12186] netlink: 'syz.1.1824': attribute type 1 has an invalid length. [ 213.656521][T12213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1832'. [ 214.120198][T12225] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 214.418510][T12235] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 214.418674][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1840'. [ 214.436567][T12235] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1839'. [ 214.471904][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1840'. [ 214.488271][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1840'. [ 214.511643][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1840'. [ 214.529158][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1840'. [ 214.560753][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1840'. [ 214.592074][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1840'. [ 214.632724][T12242] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 214.806670][T12246] bond7: (slave bridge6): making interface the new active one [ 214.840906][T12246] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 214.928542][T12255] netlink: 'syz.0.1846': attribute type 4 has an invalid length. [ 215.556282][T12300] team0: Device ip6gre2 is of different type [ 215.667336][T12303] syzkaller1: entered allmulticast mode [ 215.891841][T12319] bridge0: port 1(ipvlan3) entered blocking state [ 215.898711][T12319] bridge0: port 1(ipvlan3) entered disabled state [ 215.905322][T12319] ipvlan3: entered allmulticast mode [ 215.911228][T12319] bridge0: entered allmulticast mode [ 215.919227][T12319] ipvlan3: left allmulticast mode [ 215.927909][T12319] bridge0: left allmulticast mode [ 215.967249][T12325] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 216.005380][T12323] syzkaller0: entered promiscuous mode [ 216.019002][T12323] syzkaller0: entered allmulticast mode [ 216.058699][T12322] bond6: Invalid ad_actor_system MAC address. [ 216.064889][T12322] bond6: option ad_actor_system: invalid value (1) [ 216.075621][T12322] bond6 (unregistering): Released all slaves [ 216.099681][T12325] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 216.267399][T12332] syzkaller0: entered promiscuous mode [ 216.302567][T12332] syzkaller0: entered allmulticast mode [ 216.311789][T12340] xt_hashlimit: overflow, try lower: 3/0 [ 216.459828][T12334] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 216.664758][T12357] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 218.496505][T12390] __nla_validate_parse: 75 callbacks suppressed [ 218.496523][T12390] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1883'. [ 218.570769][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 219.149222][T12403] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1885'. [ 219.166304][T12403] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 219.200226][T12403] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1885'. [ 241.248430][T12431] tipc: Enabled bearer , priority 0 [ 241.265630][T12431] syzkaller0: entered promiscuous mode [ 241.291726][T12431] syzkaller0: entered allmulticast mode [ 241.321442][T12429] tipc: Resetting bearer [ 241.366597][T12429] tipc: Disabling bearer [ 241.391953][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 241.408246][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 241.436839][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 241.610217][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 241.719343][T12440] x_tables: duplicate underflow at hook 1 [ 241.735128][T12440] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1898'. [ 241.798320][T12470] xt_l2tp: missing protocol rule (udp|l2tpip) [ 241.824549][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1907'. [ 241.834986][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1907'. [ 242.096381][T12486] gretap0 speed is unknown, defaulting to 1000 [ 242.162009][T12491] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 242.173349][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1916'. [ 242.185114][T12495] netlink: 'syz.4.1917': attribute type 30 has an invalid length. [ 242.220768][T12498] netlink: 211576 bytes leftover after parsing attributes in process `syz.4.1917'. [ 242.297756][T12493] bond8: entered promiscuous mode [ 242.303787][T12493] bond8: entered allmulticast mode [ 242.309753][T12493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.319239][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1919'. [ 242.447516][T12486] lo speed is unknown, defaulting to 1000 [ 242.451124][T12499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.661584][T12527] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 242.673603][T12527] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 242.873714][T12534] geneve3: entered promiscuous mode [ 242.879729][T12534] geneve3: entered allmulticast mode [ 243.001062][T12548] tipc: New replicast peer: 255.255.255.255 [ 243.010723][T12548] tipc: Enabled bearer , priority 10 [ 243.536131][T12576] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 243.617746][T12580] netlink: 'syz.0.1940': attribute type 16 has an invalid length. [ 243.625892][T12580] netlink: 'syz.0.1940': attribute type 3 has an invalid length. [ 243.666775][T12582] netlink: 'syz.4.1941': attribute type 10 has an invalid length. [ 243.693206][T12582] Unsupported xt match [ 243.693221][T12582] unable to load match [ 243.874432][T12592] sctp: [Deprecated]: syz.3.1944 (pid 12592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.874432][T12592] Use struct sctp_sack_info instead [ 244.138176][ T5891] tipc: Node number set to 1569675372 [ 244.267529][T12618] netlink: 'syz.0.1952': attribute type 29 has an invalid length. [ 244.753181][T12654] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 244.787765][T12654] gretap0 speed is unknown, defaulting to 1000 [ 244.973415][T12664] block nbd1: Unsupported socket: should be TCP or UNIX. [ 244.983202][T12665] IPv6: sit3: Disabled Multicast RS [ 244.989715][T12665] sit3: entered allmulticast mode [ 245.111477][T12654] lo speed is unknown, defaulting to 1000 [ 245.202496][T12670] syzkaller0: entered promiscuous mode [ 245.208109][T12670] syzkaller0: entered allmulticast mode [ 245.221905][T12670] netlink: 'syz.1.1969': attribute type 10 has an invalid length. [ 245.323729][T12680] netlink: 'syz.2.1971': attribute type 12 has an invalid length. [ 245.459093][T12684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.545833][T12755] Cannot find map_set index 33 as target [ 246.790787][T12779] __nla_validate_parse: 24 callbacks suppressed [ 246.790806][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 246.837428][T12781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 246.861337][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 247.241605][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2006'. [ 247.574944][T12839] validate_nla: 4 callbacks suppressed [ 247.574963][T12839] netlink: 'syz.2.2014': attribute type 10 has an invalid length. [ 247.907440][T12859] syzkaller0: entered promiscuous mode [ 247.933145][T12859] syzkaller0: entered allmulticast mode [ 248.607289][T12902] gretap0 speed is unknown, defaulting to 1000 [ 248.767732][T12914] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 248.885299][T12902] lo speed is unknown, defaulting to 1000 [ 249.253135][T12931] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2037'. [ 249.304698][T12935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2039'. [ 249.639987][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'. [ 249.817352][T12954] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 249.877023][T12959] vlan2: entered promiscuous mode [ 249.974314][T12977] netlink: 'syz.2.2049': attribute type 10 has an invalid length. [ 250.192245][T12994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2055'. [ 250.216154][T12991] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 250.219919][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 250.948828][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2063'. [ 250.967590][T13029] netlink: 'syz.0.2063': attribute type 7 has an invalid length. [ 250.984610][T13029] netlink: 'syz.0.2063': attribute type 8 has an invalid length. [ 251.274146][T13050] netlink: 'syz.1.2074': attribute type 10 has an invalid length. [ 251.459978][T13051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.476947][T13051] bond0: (slave rose0): Enslaving as an active interface with an up link [ 251.546403][T13050] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 251.559759][T13050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.716710][T13069] netlink: 'syz.3.2076': attribute type 9 has an invalid length. [ 251.846633][T13078] syzkaller0: create flow: hash 2709909302 index 1 [ 252.033950][ T7256] syzkaller0: tun_net_xmit 76 [ 252.040103][ T7256] syzkaller0: tun_net_xmit 48 [ 252.045143][T13090] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 252.058419][ T43] syzkaller0: tun_net_xmit 76 [ 252.080433][T13091] netlink: 'syz.0.2081': attribute type 39 has an invalid length. [ 252.121495][T13093] __nla_validate_parse: 1 callbacks suppressed [ 252.121513][T13093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2080'. [ 252.159102][T13068] syzkaller0: delete flow: hash 2709909302 index 1 [ 252.264731][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 253.540511][T13122] netlink: 'syz.0.2084': attribute type 4 has an invalid length. [ 253.548979][T13123] netlink: 'syz.0.2084': attribute type 4 has an invalid length. [ 253.632999][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'. [ 253.750840][T13140] nbd: must specify a device to reconfigure [ 253.922216][T13147] 8021q: VLANs not supported on lo [ 253.947711][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2089'. [ 254.136390][T13156] netem: incorrect ge model size [ 254.162286][T13156] netem: change failed [ 254.175123][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2093'. [ 254.603582][T13192] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2101'. [ 254.672633][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 254.720782][T13194] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2102'. [ 254.736326][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 254.752598][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 255.016613][T13212] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 255.522791][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.693789][T13258] sctp: [Deprecated]: syz.4.2120 (pid 13258) Use of int in maxseg socket option. [ 255.693789][T13258] Use struct sctp_assoc_value instead [ 256.022752][T13286] netlink: 'syz.2.2131': attribute type 1 has an invalid length. [ 256.060199][ T43] hid (null): unknown global tag 0xe [ 256.067522][ T43] hid (null): nested delimiters [ 256.081035][ T43] hid (null): global environment stack underflow [ 256.087484][ T43] hid (null): unknown global tag 0xc [ 256.115290][T13286] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.140440][T13297] bond4: (slave ip6erspan1): making interface the new active one [ 256.150297][T13297] bond4: (slave ip6erspan1): Enslaving as an active interface with an up link [ 256.225943][ T43] hid (null): unknown global tag 0xe [ 256.254668][T13304] netlink: 'syz.3.2132': attribute type 39 has an invalid length. [ 256.258806][ T43] hid (null): invalid report_count 1305270971 [ 256.299837][ T43] hid (null): unknown global tag 0xe3 [ 256.306949][T13304] veth0_macvtap: left promiscuous mode [ 256.325245][ T43] hid (null): global environment stack underflow [ 256.346431][ T43] hid (null): invalid report_count 17766 [ 256.358131][ T43] hid (null): invalid report_count -1210961113 [ 256.396498][ T43] hid (null): unknown global tag 0xe [ 256.407135][ T43] hid (null): unknown global tag 0xe [ 256.449530][ T43] hid (null): unknown global tag 0xd [ 256.471522][ T43] hid (null): bogus close delimiter [ 256.488739][ T43] hid (null): report_id 2855111699 is invalid [ 256.505327][ T43] hid (null): unknown global tag 0x8e [ 256.524052][ T43] hid (null): unknown global tag 0xe [ 256.525869][T13319] ªªªªªª: renamed from vlan0 (while UP) [ 256.534193][ T43] hid (null): unknown global tag 0x62 [ 256.547706][ T43] hid (null): invalid report_size 536541063 [ 256.568282][ T43] hid (null): unknown global tag 0x48 [ 256.579118][ T43] hid (null): unknown global tag 0xe [ 256.600276][ T43] hid (null): unknown global tag 0xc [ 256.611335][ T43] hid (null): unknown global tag 0xd [ 256.624787][ T43] hid (null): bogus close delimiter [ 256.634157][T13322] gretap1: entered promiscuous mode [ 256.638987][ T43] hid (null): unknown global tag 0xd [ 256.653849][T13322] gretap1: entered allmulticast mode [ 256.657280][ T43] hid (null): global environment stack underflow [ 256.685472][ T43] hid (null): unknown global tag 0xd [ 256.698781][ T43] hid (null): report_id 9271 is invalid [ 256.712666][ T43] hid (null): unknown global tag 0xc [ 256.727216][ T43] hid (null): global environment stack underflow [ 256.742632][ T43] hid (null): unknown global tag 0xe [ 256.754886][ T43] hid (null): global environment stack underflow [ 256.755485][T13327] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 256.774408][ T43] hid (null): unknown global tag 0xc [ 256.774598][T13328] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 256.801419][ T43] hid (null): unknown global tag 0xa4 [ 256.818107][ T43] hid (null): report_id 2150676455 is invalid [ 256.830972][ T43] hid (null): global environment stack underflow [ 256.845226][ T43] hid (null): bogus close delimiter [ 256.874195][ T43] hid (null): invalid report_size 968950313 [ 256.892704][ T43] hid (null): unknown global tag 0xd [ 256.909437][ T43] hid (null): invalid report_count -450573914 [ 256.921279][ T43] hid (null): unknown global tag 0xe [ 256.931338][ T43] hid (null): report_id 0 is invalid [ 256.940412][T13332] gretap0 speed is unknown, defaulting to 1000 [ 256.946694][ T43] hid (null): unknown global tag 0xc [ 256.958998][ T43] hid (null): report_id 0 is invalid [ 256.964341][ T43] hid (null): unknown global tag 0xc [ 256.987977][ T43] hid (null): unknown global tag 0xd [ 256.993487][ T43] hid (null): global environment stack underflow [ 257.010102][ T43] hid (null): global environment stack underflow [ 257.026913][ T43] hid (null): unknown global tag 0xd [ 257.047083][ T43] hid (null): unknown global tag 0xe [ 257.057213][ T43] hid (null): unknown global tag 0xd [ 257.067320][ T43] hid (null): unknown global tag 0xd [ 257.077407][ T43] hid (null): invalid report_count 13547 [ 257.120415][T13337] xt_hashlimit: size too large, truncated to 1048576 [ 257.238461][T13341] 8021q: VLANs not supported on gre0 [ 257.532531][T13332] lo speed is unknown, defaulting to 1000 [ 257.585682][T13353] netlink: 'syz.1.2144': attribute type 10 has an invalid length. [ 257.632802][T13353] veth0_vlan: entered allmulticast mode [ 257.808291][T13353] veth0_vlan: left promiscuous mode [ 257.828930][T13353] veth0_vlan: entered promiscuous mode [ 257.861431][T13353] team0: Device veth0_vlan failed to register rx_handler [ 257.951791][T13371] netlink: 'syz.3.2149': attribute type 12 has an invalid length. [ 258.110991][T13380] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 258.250486][T13386] netlink: 'syz.3.2153': attribute type 6 has an invalid length. [ 258.279324][ T30] audit: type=1107 audit(1759945064.210:7): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 258.572239][ T43] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 258.572443][T13398] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 258.666801][ T43] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 258.705225][ T43] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 258.773042][T13399] tipc: Enabling of bearer rejected, failed to enable media [ 258.819324][T13398] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.828004][T13402] tipc: Enabled bearer , priority 0 [ 258.835122][T13394] syzkaller0: entered promiscuous mode [ 258.840851][T13394] syzkaller0: entered allmulticast mode [ 258.892848][T13394] tipc: Resetting bearer [ 258.956549][T13393] tipc: Resetting bearer [ 259.069034][T13393] tipc: Disabling bearer [ 259.143696][ T7260] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 259.177873][ T7260] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.265281][ T7260] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 259.275565][ T7260] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.398968][ T7260] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 259.413746][ T7260] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.440550][T13429] bridge5: entered promiscuous mode [ 259.448906][T13429] bridge5: entered allmulticast mode [ 259.456068][T13438] __nla_validate_parse: 8 callbacks suppressed [ 259.456083][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 259.561708][ T7260] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 259.590656][ T7260] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.635228][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2173'. [ 259.737280][T13452] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 260.043553][T13467] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2179'. [ 260.066272][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.089741][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.097363][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.107116][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.116365][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.348413][ T7260] bond2 (unregistering): (slave gretap1): Releasing active interface [ 260.400437][ T7260] dvmrp0 (unregistering): left allmulticast mode [ 260.417172][ T7260] bond6 (unregistering): (slave geneve3): Releasing active interface [ 260.439349][ T7260] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 260.707277][ T7260] bond7 (unregistering): (slave bridge6): Releasing active interface [ 260.819706][ T7260] bond0 (unregistering): Released all slaves [ 260.834138][ T7260] bond1 (unregistering): Released all slaves [ 260.912343][ T7260] bond2 (unregistering): Released all slaves [ 260.927173][ T7260] bond3 (unregistering): Released all slaves [ 261.004796][ T7260] bond4 (unregistering): Released all slaves [ 261.081451][ T7260] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 261.089902][ T7260] wireguard0: left promiscuous mode [ 261.097242][ T7260] bond5 (unregistering): Released all slaves [ 261.173977][ T7260] bond6 (unregistering): Released all slaves [ 261.188308][ T7260] bond7 (unregistering): Released all slaves [ 261.267382][ T7260] bond8 (unregistering): Released all slaves [ 261.401897][T13484] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2184'. [ 261.432975][T13485] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 261.456858][ T7260] : left promiscuous mode [ 261.468407][T13485] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2183'. [ 261.493154][T13487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2183'. [ 261.544863][T13468] gretap0 speed is unknown, defaulting to 1000 [ 261.588085][ T7260] tipc: Left network mode [ 261.693599][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 261.920150][T13468] lo speed is unknown, defaulting to 1000 [ 261.921879][T13509] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 261.960493][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 262.148192][ T5842] Bluetooth: hci1: command tx timeout [ 262.234961][T13528] veth0: entered promiscuous mode [ 262.326776][T13527] veth0: left promiscuous mode [ 262.614093][T13549] batadv_slave_0: entered promiscuous mode [ 262.620152][T13549] batadv_slave_0: entered allmulticast mode [ 262.681229][ T7260] hsr_slave_0: left promiscuous mode [ 262.716156][ T7260] hsr_slave_1: left promiscuous mode [ 262.760623][ T7260] veth1_vlan: left promiscuous mode [ 262.925821][ T7260] pimreg (unregistering): left allmulticast mode [ 263.351824][ T7260] team0 (unregistering): Port device dummy0 removed [ 263.401264][T13561] syzkaller0: entered promiscuous mode [ 263.406925][T13561] syzkaller0: entered allmulticast mode [ 263.614380][T13468] chnl_net:caif_netlink_parms(): no params data found [ 263.676389][T13585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.736032][T13587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2210'. [ 263.754354][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 263.955899][T13607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.004891][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.017978][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.026535][T13468] bridge_slave_0: entered allmulticast mode [ 264.036544][T13468] bridge_slave_0: entered promiscuous mode [ 264.045684][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.054302][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.089098][T13468] bridge_slave_1: entered allmulticast mode [ 264.096975][T13468] bridge_slave_1: entered promiscuous mode [ 264.214920][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.235746][ T7260] IPVS: stop unused estimator thread 0... [ 264.243849][ T5842] Bluetooth: hci1: command tx timeout [ 264.252757][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.418376][T13468] team0: Port device team_slave_0 added [ 264.476626][T13468] team0: Port device team_slave_1 added [ 264.513426][T13630] netlink: 'syz.4.2220': attribute type 33 has an invalid length. [ 264.614453][ T7260] ------------[ cut here ]------------ [ 264.620057][ T7260] WARNING: CPU: 1 PID: 7260 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 264.620552][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.629747][ T7260] Modules linked in: [ 264.640847][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 264.647004][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.650477][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.650501][ T7260] Workqueue: netns cleanup_net [ 264.650535][ T7260] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 264.650560][ T7260] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8b a9 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 56 19 f8 e8 74 ff d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 ff d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 264.650579][ T7260] RSP: 0018:ffffc90003e1f878 EFLAGS: 00010293 [ 264.650600][ T7260] RAX: ffffffff89eb1bfc RBX: ffff888032118000 RCX: ffff88806ab59e40 [ 264.650618][ T7260] RDX: 0000000000000000 RSI: ffffffff8d9c68e1 RDI: ffff88806ab59e40 [ 264.650635][ T7260] RBP: ffffc90003e1f990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 264.650652][ T7260] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 264.650669][ T7260] R13: 1ffff920007c3f3c R14: ffff8880321194c0 R15: dffffc0000000000 [ 264.650687][ T7260] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 264.650706][ T7260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.650722][ T7260] CR2: 000000110c3a7e67 CR3: 000000007288e000 CR4: 00000000003526f0 [ 264.650741][ T7260] Call Trace: [ 264.650751][ T7260] [ 264.650767][ T7260] xfrm_net_exit+0x2d/0x70 [ 264.650792][ T7260] ops_undo_list+0x49a/0x990 [ 264.650847][ T7260] ? __pfx_ops_undo_list+0x10/0x10 [ 264.650882][ T7260] ? do_raw_spin_unlock+0x122/0x240 [ 264.650915][ T7260] cleanup_net+0x4d8/0x820 [ 264.650948][ T7260] ? __pfx_cleanup_net+0x10/0x10 [ 264.650981][ T7260] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.651012][ T7260] ? process_scheduled_works+0x9ef/0x17b0 [ 264.651046][ T7260] ? process_scheduled_works+0x9ef/0x17b0 [ 264.651083][ T7260] process_scheduled_works+0xade/0x17b0 [ 264.651152][ T7260] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.651206][ T7260] worker_thread+0x8a0/0xda0 [ 264.651272][ T7260] kthread+0x711/0x8a0 [ 264.651302][ T7260] ? __pfx_worker_thread+0x10/0x10 [ 264.651336][ T7260] ? __pfx_kthread+0x10/0x10 [ 264.651365][ T7260] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.651404][ T7260] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.651436][ T7260] ? __pfx_kthread+0x10/0x10 [ 264.651463][ T7260] ret_from_fork+0x4b9/0x870 [ 264.735658][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.740373][ T7260] ? __pfx_ret_from_fork+0x10/0x10 [ 264.813289][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.814002][ T7260] ? __switch_to_asm+0x39/0x70 [ 264.828626][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.828658][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.953737][ T7260] ? __switch_to_asm+0x33/0x70 [ 264.958576][ T7260] ? __pfx_kthread+0x10/0x10 [ 264.963189][ T7260] ret_from_fork_asm+0x1a/0x30 [ 264.968039][ T7260] [ 264.971084][ T7260] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.978371][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 264.987919][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.997967][ T7260] Workqueue: netns cleanup_net [ 265.002740][ T7260] Call Trace: [ 265.006027][ T7260] [ 265.008966][ T7260] dump_stack_lvl+0x99/0x250 [ 265.013565][ T7260] ? __asan_memcpy+0x40/0x70 [ 265.018167][ T7260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.023370][ T7260] ? __pfx__printk+0x10/0x10 [ 265.027994][ T7260] vpanic+0x281/0x750 [ 265.032014][ T7260] ? __pfx__printk+0x10/0x10 [ 265.036610][ T7260] ? __pfx_vpanic+0x10/0x10 [ 265.041135][ T7260] ? is_bpf_text_address+0x292/0x2b0 [ 265.046444][ T7260] panic+0xb9/0xc0 [ 265.050174][ T7260] ? __pfx_panic+0x10/0x10 [ 265.054608][ T7260] __warn+0x31b/0x4b0 [ 265.058593][ T7260] ? xfrm_state_fini+0x26d/0x2f0 [ 265.063522][ T7260] ? xfrm_state_fini+0x26d/0x2f0 [ 265.068468][ T7260] report_bug+0x2be/0x4f0 [ 265.072803][ T7260] ? xfrm_state_fini+0x26d/0x2f0 [ 265.077753][ T7260] ? xfrm_state_fini+0x26d/0x2f0 [ 265.082701][ T7260] ? xfrm_state_fini+0x26f/0x2f0 [ 265.087641][ T7260] handle_bug+0x84/0x160 [ 265.091885][ T7260] exc_invalid_op+0x1a/0x50 [ 265.096401][ T7260] asm_exc_invalid_op+0x1a/0x20 [ 265.101247][ T7260] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 265.106884][ T7260] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8b a9 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 56 19 f8 e8 74 ff d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 ff d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 265.126575][ T7260] RSP: 0018:ffffc90003e1f878 EFLAGS: 00010293 [ 265.132641][ T7260] RAX: ffffffff89eb1bfc RBX: ffff888032118000 RCX: ffff88806ab59e40 [ 265.140612][ T7260] RDX: 0000000000000000 RSI: ffffffff8d9c68e1 RDI: ffff88806ab59e40 [ 265.148576][ T7260] RBP: ffffc90003e1f990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 265.156543][ T7260] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 265.164510][ T7260] R13: 1ffff920007c3f3c R14: ffff8880321194c0 R15: dffffc0000000000 [ 265.172485][ T7260] ? xfrm_state_fini+0x26c/0x2f0 [ 265.177427][ T7260] ? xfrm_state_fini+0x26c/0x2f0 [ 265.182362][ T7260] xfrm_net_exit+0x2d/0x70 [ 265.186778][ T7260] ops_undo_list+0x49a/0x990 [ 265.191383][ T7260] ? __pfx_ops_undo_list+0x10/0x10 [ 265.196509][ T7260] ? do_raw_spin_unlock+0x122/0x240 [ 265.201717][ T7260] cleanup_net+0x4d8/0x820 [ 265.206148][ T7260] ? __pfx_cleanup_net+0x10/0x10 [ 265.211096][ T7260] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.216319][ T7260] ? process_scheduled_works+0x9ef/0x17b0 [ 265.222051][ T7260] ? process_scheduled_works+0x9ef/0x17b0 [ 265.227780][ T7260] process_scheduled_works+0xade/0x17b0 [ 265.233372][ T7260] ? __pfx_process_scheduled_works+0x10/0x10 [ 265.239497][ T7260] worker_thread+0x8a0/0xda0 [ 265.244111][ T7260] kthread+0x711/0x8a0 [ 265.248181][ T7260] ? __pfx_worker_thread+0x10/0x10 [ 265.253299][ T7260] ? __pfx_kthread+0x10/0x10 [ 265.257917][ T7260] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.263124][ T7260] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.268332][ T7260] ? __pfx_kthread+0x10/0x10 [ 265.272919][ T7260] ret_from_fork+0x4b9/0x870 [ 265.277517][ T7260] ? __pfx_ret_from_fork+0x10/0x10 [ 265.282642][ T7260] ? __switch_to_asm+0x39/0x70 [ 265.287401][ T7260] ? __switch_to_asm+0x33/0x70 [ 265.292166][ T7260] ? __pfx_kthread+0x10/0x10 [ 265.296756][ T7260] ret_from_fork_asm+0x1a/0x30 [ 265.301546][ T7260] [ 265.304962][ T7260] Kernel Offset: disabled [ 265.309294][ T7260] Rebooting in 86400 seconds..