last executing test programs: 1m48.25971057s ago: executing program 1 (id=1173): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000007000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 1m47.983760203s ago: executing program 1 (id=1175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x590, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) syz_extract_tcp_res(&(0x7f0000000800)={0x41424344}, 0x9, 0x9) syz_emit_ethernet(0x15a, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x14c, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@gre_packet={0x1, 0x6, "636fce", 0x52, 0x2f, 0x1, @private2, @mcast1, {[@dstopts], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "d3ef6e5774f3"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x0, 0x0, 0x1, 0x2, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x8000, 0x400, 0x3, 0x4, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}, @ipv4=@tcp={{0xe, 0x4, 0x3, 0x5, 0xb0, 0x68, 0x0, 0xfd, 0x6, 0x0, @private=0xa010101, @private=0xa010102, {[@cipso={0x86, 0x23, 0x1, [{0x2, 0x11, "1a526fa6a376f294d96e7b61e7eb6e"}, {0x7, 0xc, "fe89329921f9ae5d0eee"}]}]}}, {{0x4e23, 0x4e21, r1, r2, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x3, {[@generic={0x0, 0x4, '.C'}, @generic={0x1, 0xd, "4fe4cc642ab0007fc5dba5"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "b686d6818a5ad70e50cf5e59e346dd02"}, @sack={0x5, 0x6, [0x3ff]}]}}, {"d15f12d175832acce5e503fadc3c86238f4184c04bf8f2f5f4cf7fc313ff3f4374dd5b2d1d82a11af38bc4dd5062e9978c9dfc7d"}}}]}}}}}}, 0x0) 1m47.855276264s ago: executing program 1 (id=1176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x70, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x2, 0x60, 0x6, 0x5, 0x23, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@rand_addr=0x64010102, 0x2, 0x4, 0xc}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@private=0xa010100, 0x3, 0x4, 0x14}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bbb, 0xfee, {0x6, 0x50, 0xfe, 0x4, 0x0, 0x8, 0x0, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @sadb_ident={0x2, 0x0, 0x200, 0x0, 0xd}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb6, 0x6, {0x6, 0x3c, 0xe7, 0x7f, 0x0, 0x4, 0x0, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0x118}}, 0x4040080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x68, 0x2, {{'cbc(camellia)\x00'}, 0x100, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b27056624"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x68, 0x2, {{'cbc(camellia)\x00'}, 0x100, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b27056624"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x7, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f0000000640)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 1m46.335888181s ago: executing program 1 (id=1184): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x80800) getsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303, 0x38}, '\x00\x00Q\x00\b\x009\x00', "00000000000000000000000000c1f900", "f8385450", "00000000000000fd"}, 0x28) write(r0, &(0x7f00000002c0)="7e93cdd13736f05b9f7fecc5be365c3057a7289913bd06c25616dc65d166d683b208a3b0ae138e06f900f87d4a3c15b233d93e6fc9c94361fd58a5a3cc70943b897894f0e23fe9ad60095e6b752650cbf495cb9257f4d805871f95adc6db402d10ce843d4eab07c0a72a58bb8ae08564949f16b78718a693c18121ccc1a20425b5d9b9b270b1e78bb753e389df20bb0c473755c438d153868b5d1ef3810a446047ccfe4b2f3824", 0xa7) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x266041, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1) 1m46.057079989s ago: executing program 1 (id=1186): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x590, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) syz_extract_tcp_res(&(0x7f0000000800)={0x41424344}, 0x9, 0x9) syz_emit_ethernet(0x15a, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x14c, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@gre_packet={0x1, 0x6, "636fce", 0x52, 0x2f, 0x1, @private2, @mcast1, {[@dstopts], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "d3ef6e5774f3"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x0, 0x0, 0x1, 0x2, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x8000, 0x400, 0x3, 0x4, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}, @ipv4=@tcp={{0xe, 0x4, 0x3, 0x5, 0xb0, 0x68, 0x0, 0xfd, 0x6, 0x0, @private=0xa010101, @private=0xa010102, {[@cipso={0x86, 0x23, 0x1, [{0x2, 0x11, "1a526fa6a376f294d96e7b61e7eb6e"}, {0x7, 0xc, "fe89329921f9ae5d0eee"}]}]}}, {{0x4e23, 0x4e21, r1, r2, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x3, {[@generic={0x0, 0x4, '.C'}, @generic={0x1, 0xd, "4fe4cc642ab0007fc5dba5"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "b686d6818a5ad70e50cf5e59e346dd02"}, @sack={0x5, 0x6, [0x3ff]}]}}, {"d15f12d175832acce5e503fadc3c86238f4184c04bf8f2f5f4cf7fc313ff3f4374dd5b2d1d82a11af38bc4dd5062e9978c9dfc7d"}}}]}}}}}}, 0x0) 1m45.896250243s ago: executing program 1 (id=1188): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb27}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x7, 0x0, 0x5, 0xa, 0x3, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x45, &(0x7f00000001c0)=""/69, 0x41000, 0x42, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0xb4, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000003c0)={0xe739, 0x8}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@arena={0x21, 0x0, 0x0, 0x3d, 0x60000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000480)={0x1f, 0x0, @none}, &(0x7f00000004c0)=0xe, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000500)) gettid() r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x8, [@enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0xd, 0x1000}, {0x4, 0x101}]}, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x40}, {0x8, 0x3ff}, {0x3, 0x5}, {0xa, 0xfb3}, {0x1, 0xffff}, {0xd, 0x1acf}, {0xe, 0x7}]}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x1}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30, 0x5f, 0x30, 0x0, 0x2e, 0x1]}}, &(0x7f0000000600)=""/157, 0x9c, 0x9d, 0x1, 0x4, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1c, 0x2, 0x5, 0x1, 0x100, r2, 0x7fff, '\x00', 0x0, r4, 0x3, 0x4, 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x34, 0x40, {{0x3a, 0x4, 0x0, 0x6, 0xe8, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x1b, 0xf6, [@dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x44}, @loopback]}, @ssrr={0x89, 0x23, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @private=0xa010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0xce, [@local, @private=0xa010101, @multicast1, @multicast2, @rand_addr=0x64010101, @local, @multicast1, @multicast1, @private=0xa010100, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0x0, [{@rand_addr=0x64010102, 0x5}, {@local, 0xc4ad}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x7}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x6c, 0x3, 0x8, [{@loopback, 0x4}, {@broadcast, 0x9117}, {@broadcast, 0x3}, {@loopback, 0x6}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xbd, 0x1, 0x6, [{@broadcast, 0x1}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x45}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x0, 0xf, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000012c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000d00)={0x56c, r7, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xef, 0x3, "30899b921a2658635dcfbe5d4fdd9896e40b242c8c663016157f19337c9934fa1bd8be7ed310635c3a1acb78193894624e5a33697a0a933c0582799afbb4ccc0b836bd7ef4f36664b710b18823af791529893ee49388ae21e52ee403c14ce4552c8af502c83ca6a749e7565ae96707db39417e2a461b9c8559c436534826b993332b5defb078c19f29ea39da1a2ad6b2e81f38164da12987073a2fb436b0c9ed9d95bd4da085c308f6edc74a824b519cc00f1e4ed2619c2f1a3fa240e2af4a162c37311e9f493fde55930c7bca92302062bf1acc52218e3fec8d1d86ef533d9ac1352e607f39484cc55399"}, @ETHTOOL_A_WOL_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_WOL_SOPASS={0x94, 0x3, "ea1a575a8e0048e0ce245cc7c1197f2083875949a64dd8eaee2d4074a417bd80aab8631df90f3fe39fe324a8d534ae128fc2341ecd03b590744fb47b5b00eb77c4dc0c0571a52c6bb64e03c6428706928954cbc38b96441e9d9bd8e74675e7021d96e9f3ecc58b34ed32b1d51f555430708e1c98e91d5f2462444a781356fcc55e8c581ceb577c5902b6b8f0fc837ad4"}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_WOL_MODES={0x1f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "b303242064e8537320f769a99ef0582281345345f5cc5e8640c53e235ea06a2b766190a1e410ce77fd5c0dea5a"}, @ETHTOOL_A_BITSET_MASK={0x100, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'wm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[\'},{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5e3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, 'a'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe70}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "291f5b9fcd0e37416ce124b2b5dfe7c4190ebefbb247f2780c4a7d3ccf56f9d50eefbb0d48ab4b2e7a427b6905bb7b4749dbc200d6ab41057eaa2af9e52abf0aac9f97579cad81478cb4925a8733df84bffb7703926707dd219d88ab04cbeb22743a900086af517d5da3c8ae434d4a13a42559373b85ded8"}]}]}, 0x56c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001300)={0x1f, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001340)={'veth1_to_batadv\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@arena={0x21, 0x0, 0x0, 0x12, 0x400, r12, 0x80000001, '\x00', r11, r0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={r2, &(0x7f0000001440)="87c43ba989bc04ed108cb15122cfe87703cef1a77259b2db8021dc48c9c748f5c4fa50daf80b55e1187c7fad697a0795399f82c0631a19bff8b095777449eb7f452578f0ded706956714feffb8bcbcb17e2b3c793727dbc6a14e6e2201ec498ebca7210f32f811c392d08961b5226b051fcb75744378b26fb1b8ed4008ad146b8d7857d498d804d685e17ec1e2a4de3cdd9cde9c8301799f17df4eb68acde3c3d06fce99db3a728cf107dff406e4ec8f1d28b4aa92e630f78cc781668ecf10679b9c7156d18444e8d3ea4881cbdf2f1dc387fb124798dacc523a0129eea25331b7e5d41f15437c417029f114afe3fc5e55", &(0x7f0000001540)=@buf="8de18e7907d83704b581a1f3e1a8597bfd46d46f47213dbad3172bc7f11c8f9a1d342e0c6c2b7e605a1055582881a7875a1dcce93f1c8e8fbb3f553f41371f31f2e163d1d48ac759b5a981d7b408877bde62629abbb16c23b64f692a701f5e1a9de1b234ff6c9aad390348651186c3ac16ac9ac11951018909ca6b2b455225db1d1a86fd23d0101107a0c8a8e779b8c28d8b56950aef28c6e6857713b6", 0x1}, 0x20) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@setneightbl={0x40, 0x43, 0x400, 0x70bd2d, 0x25dfdbfb, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x40}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4}, @NDTA_THRESH1={0x8, 0x2, 0xcd9}, @NDTA_THRESH3={0x8, 0x4, 0x10e}, @NDTA_THRESH3={0x8, 0x4, 0x5fa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001780)={r1, r9, 0x25, 0x8, @val=@iter={&(0x7f0000001740)=@map_fd=r5, 0x10}}, 0x20) syz_emit_ethernet(0x1e, &(0x7f00000017c0)={@random="cd5fb0f36772", @random="2d6619a91b1f", @void, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "b166ca9d8ca7fd12"}}}}, &(0x7f0000001800)={0x0, 0x3, [0x46f, 0xbed, 0x2cc, 0x998]}) ioctl$XFS_IOC_START_COMMIT(r14, 0x80585882, &(0x7f0000001840)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000018c0)={0x0, @in6={{0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, 0x1000, 0xff}, &(0x7f0000001980)=0x90) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r15, 0x84, 0x84, &(0x7f00000019c0)={r16, @in6={{0xa, 0x4e22, 0xffffffe2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x4e22}, &(0x7f0000001a80)=0x90) 1m30.656078814s ago: executing program 32 (id=1188): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb27}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x7, 0x0, 0x5, 0xa, 0x3, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x45, &(0x7f00000001c0)=""/69, 0x41000, 0x42, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0xb4, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000003c0)={0xe739, 0x8}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@arena={0x21, 0x0, 0x0, 0x3d, 0x60000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000480)={0x1f, 0x0, @none}, &(0x7f00000004c0)=0xe, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000500)) gettid() r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x8, [@enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0xd, 0x1000}, {0x4, 0x101}]}, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x40}, {0x8, 0x3ff}, {0x3, 0x5}, {0xa, 0xfb3}, {0x1, 0xffff}, {0xd, 0x1acf}, {0xe, 0x7}]}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x1}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30, 0x5f, 0x30, 0x0, 0x2e, 0x1]}}, &(0x7f0000000600)=""/157, 0x9c, 0x9d, 0x1, 0x4, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1c, 0x2, 0x5, 0x1, 0x100, r2, 0x7fff, '\x00', 0x0, r4, 0x3, 0x4, 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x34, 0x40, {{0x3a, 0x4, 0x0, 0x6, 0xe8, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x1b, 0xf6, [@dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x44}, @loopback]}, @ssrr={0x89, 0x23, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @private=0xa010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0xce, [@local, @private=0xa010101, @multicast1, @multicast2, @rand_addr=0x64010101, @local, @multicast1, @multicast1, @private=0xa010100, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0x0, [{@rand_addr=0x64010102, 0x5}, {@local, 0xc4ad}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x7}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x6c, 0x3, 0x8, [{@loopback, 0x4}, {@broadcast, 0x9117}, {@broadcast, 0x3}, {@loopback, 0x6}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xbd, 0x1, 0x6, [{@broadcast, 0x1}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x45}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x0, 0xf, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000012c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000d00)={0x56c, r7, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xef, 0x3, "30899b921a2658635dcfbe5d4fdd9896e40b242c8c663016157f19337c9934fa1bd8be7ed310635c3a1acb78193894624e5a33697a0a933c0582799afbb4ccc0b836bd7ef4f36664b710b18823af791529893ee49388ae21e52ee403c14ce4552c8af502c83ca6a749e7565ae96707db39417e2a461b9c8559c436534826b993332b5defb078c19f29ea39da1a2ad6b2e81f38164da12987073a2fb436b0c9ed9d95bd4da085c308f6edc74a824b519cc00f1e4ed2619c2f1a3fa240e2af4a162c37311e9f493fde55930c7bca92302062bf1acc52218e3fec8d1d86ef533d9ac1352e607f39484cc55399"}, @ETHTOOL_A_WOL_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_WOL_SOPASS={0x94, 0x3, "ea1a575a8e0048e0ce245cc7c1197f2083875949a64dd8eaee2d4074a417bd80aab8631df90f3fe39fe324a8d534ae128fc2341ecd03b590744fb47b5b00eb77c4dc0c0571a52c6bb64e03c6428706928954cbc38b96441e9d9bd8e74675e7021d96e9f3ecc58b34ed32b1d51f555430708e1c98e91d5f2462444a781356fcc55e8c581ceb577c5902b6b8f0fc837ad4"}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_WOL_MODES={0x1f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "b303242064e8537320f769a99ef0582281345345f5cc5e8640c53e235ea06a2b766190a1e410ce77fd5c0dea5a"}, @ETHTOOL_A_BITSET_MASK={0x100, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'wm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[\'},{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5e3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, 'a'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe70}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "291f5b9fcd0e37416ce124b2b5dfe7c4190ebefbb247f2780c4a7d3ccf56f9d50eefbb0d48ab4b2e7a427b6905bb7b4749dbc200d6ab41057eaa2af9e52abf0aac9f97579cad81478cb4925a8733df84bffb7703926707dd219d88ab04cbeb22743a900086af517d5da3c8ae434d4a13a42559373b85ded8"}]}]}, 0x56c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001300)={0x1f, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001340)={'veth1_to_batadv\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@arena={0x21, 0x0, 0x0, 0x12, 0x400, r12, 0x80000001, '\x00', r11, r0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={r2, &(0x7f0000001440)="87c43ba989bc04ed108cb15122cfe87703cef1a77259b2db8021dc48c9c748f5c4fa50daf80b55e1187c7fad697a0795399f82c0631a19bff8b095777449eb7f452578f0ded706956714feffb8bcbcb17e2b3c793727dbc6a14e6e2201ec498ebca7210f32f811c392d08961b5226b051fcb75744378b26fb1b8ed4008ad146b8d7857d498d804d685e17ec1e2a4de3cdd9cde9c8301799f17df4eb68acde3c3d06fce99db3a728cf107dff406e4ec8f1d28b4aa92e630f78cc781668ecf10679b9c7156d18444e8d3ea4881cbdf2f1dc387fb124798dacc523a0129eea25331b7e5d41f15437c417029f114afe3fc5e55", &(0x7f0000001540)=@buf="8de18e7907d83704b581a1f3e1a8597bfd46d46f47213dbad3172bc7f11c8f9a1d342e0c6c2b7e605a1055582881a7875a1dcce93f1c8e8fbb3f553f41371f31f2e163d1d48ac759b5a981d7b408877bde62629abbb16c23b64f692a701f5e1a9de1b234ff6c9aad390348651186c3ac16ac9ac11951018909ca6b2b455225db1d1a86fd23d0101107a0c8a8e779b8c28d8b56950aef28c6e6857713b6", 0x1}, 0x20) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@setneightbl={0x40, 0x43, 0x400, 0x70bd2d, 0x25dfdbfb, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x40}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4}, @NDTA_THRESH1={0x8, 0x2, 0xcd9}, @NDTA_THRESH3={0x8, 0x4, 0x10e}, @NDTA_THRESH3={0x8, 0x4, 0x5fa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001780)={r1, r9, 0x25, 0x8, @val=@iter={&(0x7f0000001740)=@map_fd=r5, 0x10}}, 0x20) syz_emit_ethernet(0x1e, &(0x7f00000017c0)={@random="cd5fb0f36772", @random="2d6619a91b1f", @void, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "b166ca9d8ca7fd12"}}}}, &(0x7f0000001800)={0x0, 0x3, [0x46f, 0xbed, 0x2cc, 0x998]}) ioctl$XFS_IOC_START_COMMIT(r14, 0x80585882, &(0x7f0000001840)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000018c0)={0x0, @in6={{0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, 0x1000, 0xff}, &(0x7f0000001980)=0x90) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r15, 0x84, 0x84, &(0x7f00000019c0)={r16, @in6={{0xa, 0x4e22, 0xffffffe2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x4e22}, &(0x7f0000001a80)=0x90) 8.583729135s ago: executing program 5 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x5, 0x0, &(0x7f00000001c0)=0xfffffffffffffe3b) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="86453b9408a71760799b707b617f9d36fa9c3639bf3139fc8d3978ceda780fbf482f3918dd526b3b5fd4b250b5a111a65877222ebff84652b685b8c2f590c78cd7db3f7974971437c306", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000002400038008000300030000000800020007000000080003000a00000008000300efeb83b4"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000001000000000000000000000097000100ffff05ff95"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) 7.798308895s ago: executing program 2 (id=1604): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000041000100fcff0700040000000100000004004880140001801000108004000b8008000100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x5, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000680)="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", 0x1000) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000580)=0x2, 0x4) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000005c0)=0x8000, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000240)='FROZEN\x00', 0x7) (async) mkdirat$cgroup(r3, &(0x7f0000000280)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x1ff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x881, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000540)=0x1) sendfile(r4, r4, 0x0, 0x9) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000000893c8519d3001301c4f4487313d40d5497f1eb98c1288b5fa2042d12846564cfad29717241b588", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00210009000000000000000c0022000200000000000000"], 0x4c}}, 0x0) 7.338867057s ago: executing program 5 (id=1607): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001600)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001640)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x9}, {0x6, 0x2}, {0xfff2, 0x4}}, [{0x8, 0xb, 0x9e5c}]}, 0x2c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r0, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r11 = socket$inet(0x2, 0x2, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r12, 0x29, 0x46, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@newqdisc={0x24, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xfff1, 0x1e}}}, 0x24}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x5}, 0x8, 0x10, &(0x7f0000001440), 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r13, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x1, 0x8}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xf9, 0x7c}}]}, 0x2c}}, 0x0) write(r9, &(0x7f0000000480)="443e4cd0", 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100)='batadv_slave_0\x00', 0x14) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) 6.551805762s ago: executing program 3 (id=1610): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4044084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000830) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000005c0), 0x4) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0) 6.319417813s ago: executing program 2 (id=1611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81}]}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.90749218s ago: executing program 5 (id=1614): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/243, 0xfffffdef}], 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x1, 0x70bd29, 0xe53, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x8, 0xc, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x66, 0x0, 0x6, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0x42, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', r6, 0x2f, 0x2, 0x2, 0x43, 0x4, @remote, @mcast2, 0x80, 0x80, 0xffff5e20, 0x5a}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x1], [0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xf, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r1, r7, 0x25, 0x0, @val=@target_btf_id=r8}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="b39552eacb8a202636b2c338de3774d77d1e1fe0f85553e6f7423fc84976f213b7dc29bf8876002722"], 0x2580}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000050) 5.880354013s ago: executing program 3 (id=1615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={@rand_addr=0x64010102, 0x0, 0x0, 0x60, 0x0, [{@remote}, {@local}, {@broadcast}, {@dev}, {@broadcast}, {@empty}]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r6, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000104000000000000005d00000000", @ANYRES32=0x0, @ANYBLOB="c327050001190000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2004d809}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302080000000000080002"], 0x30}}, 0x0) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1_macvtap\x00', 0x10) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x101, 0x9, 0x4, 0x7fff, 0x38]}, &(0x7f0000000180)=0x54) 5.849834823s ago: executing program 2 (id=1616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair(0x1e, 0x5, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000740)) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000e30c", @ANYRES16=0x0, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x48014}, 0x8040) (async) listen(r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000140)=@udp=r0}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0xfffffffffffffe9f) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000380)=@ethtool_eeprom={0xc, 0x2, 0xffffff47, 0xde, "bf3c40b03006f4665d832bd2facbd42ac087493325986df274b3bf8da2de4ee4be9bcc516c173d7a0f643fbfb98ef76f2bab6ad711809c25c1552ca9fac7b1aa84b75171f30440221ee2d4f5c985cb070ad81b38dc8e13ceb851646392d2d649ceb4ce9519d76a70d3e27c171251f2c1a7329edece49c8eff7ea39393c9b5f51d39bff79bb2bd1f3c05a049bb30ffb4bc7bcd4aa1de6e0d4b85865a3b9a4bda06921c5212b5540a6a3d34b99b667cd869e17c69d1ffddd58ee5380d304a0cb06dabdaa060ecbcb4c6372dcdcb4287312f61f2cbfa3afbf33d8822d06deb0"}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x2, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x1}}}}]}, 0x38}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x4b, 0x0, 0x6) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f00000004c0)=0xffff7659) (async) sendmsg$IPSET_CMD_DEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) (async) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r2) 5.775942153s ago: executing program 0 (id=1617): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d00000800030000000000080001"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 5.606482427s ago: executing program 4 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040), 0x4) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) (rerun: 32) 5.54633782s ago: executing program 0 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000280)={@void, @void, @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3, 0x130, 0x68, 0x0, 0x5, 0x6, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x5, [{@empty, 0x4}]}]}}, {{0x4e21, 0x4e23, 0x41424344, r2, 0x0, 0x0, 0x17, 0x68, 0x8, 0x0, 0xbd7, {[@nop, @sack={0x5, 0x6, [0xfffeffff]}, @fastopen={0x22, 0x12, "f402d1bb9473e476494202b98234ce1b"}, @eol, @fastopen={0x22, 0x7, "eb45c1d2e0"}, @nop, @eol, @generic={0x2, 0x12, "e65a50fe72f4668844e10d1e92c7252a"}, @timestamp={0x8, 0xa, 0xd6c, 0x7ff}, @exp_smc={0xfe, 0x6}]}}, {"bbb949ea1b683c10433d13e65491a7eb6beb8a1a1c19ea3b81a419c691b6b1e134342d75e0fba50992cd42a0cc2c497b464f3c85035927b491e99d1c0f416454daf8fc80c2956621bd98d92b97969c1f6808136a8be9dd3d6d0c0e91cf0fe78db6e7906cb8184003390a3875132b181d6d77c1f451b6cb842ad90c573d60a29f9d54f1122f5f95c8568e187da776c777f67262e09abbae8cde2158c0015a10550c047316ed966eb4436d08fc489c409ff6b144ec"}}}}, 0x130) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic="09fa6c93"]}, 0x14}], 0x1}, 0x0) (async) r4 = socket$inet(0x2, 0x4, 0xd) socket$unix(0x1, 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 5.159373061s ago: executing program 4 (id=1620): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000420001000000000000000000030100000f0000003e00010000112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbded357065ae44132403b1fd606412c3258e3c67aa5b000004000280040003"], 0x60}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001640)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xac, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040082}, 0x4000801) connect(r2, &(0x7f00000002c0)=@generic={0x1f, "0102030405060100"}, 0xa) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000340)=0x1f, &(0x7f0000000380)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34aed}, 0x94) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002940)=""/4146, 0x1032}, {&(0x7f0000000400)=""/4066, 0xfe2}, {&(0x7f0000003980)=""/4168, 0x1048}], 0x3}, 0x0) 5.148058353s ago: executing program 2 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000406030000000000000000005e2c50a40500000705000100070000000900020073797a30bb0c718b1cb514e06f"], 0x28}}, 0x24044040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xffffff60, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x140a, 0x8, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0xb7}, 0x1, 0x0, 0x0, 0x25221bc2e2134df9}, 0x40) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r5, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[@ANYBLOB="18000000101401000000000000000000080001000100000068f694b85dacd62924723118f70b79411cef0cc1300d5e978a929e1540939b6d718a204594ecb11def1d43c60404ac88d3942e80f6677203f8740d93863466bff64ac873050ae6f35ae0e25eca821aa3b19e6951164b78f2fb39430b55f9958f698fbaf6d45b9c91d8dcfc8df81c4bd0c5a4559dcec0eff85aa7f34f701668c9cdbaba4a6225b1ad02abc330298bcd044bb6774e09387de3c1a135d86013ee46af5a7ef34b0a1bddfd244d"], 0x18}}, 0x0) getsockopt(r8, 0x1000004, 0xa, &(0x7f0000000300)=""/151, &(0x7f00000003c0)=0x97) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@loopback}, {@dev}, {@broadcast}]}}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000ac0), 0x4) sendmsg$kcm(r10, &(0x7f0000000b00)={&(0x7f0000000b40)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f0000000c40)="88a8", 0x2}, {&(0x7f0000000c80)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffe36, &(0x7f0000000a40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="00000000ac0b3e3280648bf7a76ed4f1c909a9b13a5ad73a1aeb697562fcda1f8f1d34b86eb5515fed4890d8e1b3d51d0fd3e586e8ae9d0eee2ff4d81adbc9348ed3707d8c6bcd426f5d3bc1b8cb3cb18f1d2f978d1af88e0abd10a78b4fa9c47241652f6cb55beeeb8213eb68cf10ea0765dc98e49f4924ed85fb6180b714bc56efb2e812929bfffb4abff7185a3e999c1ac9aad9e7639a0e9d178e9d525e", @ANYRES16=r11, @ANYBLOB="04002abd7000fcdbdf25790000000f009900090000006a0000000400f4000400f4000400f4000400f4000400f4000400f4000400f4000400f400"], 0x40}, 0x1, 0x0, 0x0, 0x64000005}, 0x20000004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) sendmsg$nl_xfrm(r9, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000e40)=ANY=[@ANYRES64=r9], 0x0) 4.73476562s ago: executing program 5 (id=1622): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr=0xffffffff, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0xc0, 0x108, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0x1}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2, 0xb, [0x1d, 0x7, 0x17, 0x13, 0x2b, 0x18, 0x14, 0x2022, 0x2e, 0x5, 0x24, 0x36, 0x13, 0x13, 0xd85, 0x31], 0x1, 0xb406, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x74, 0x800}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.507072353s ago: executing program 3 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000800), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060100000000000000000000000000000000000000000000000c00030064756d6d79300000100012000a00010064756d6d7900000008001f0002000000"], 0x44}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) sendmsg$inet6(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="42ab10691d6b1096d87b9edf2c585c42577b2507d89c3354545acb59106a19786bb22c30a3145499a01910b598911e33f52dcb7be4a04cb5ebdcf22e96f3d65232d8345032dc", 0x46}, {&(0x7f00000001c0)="a8a165e76b50d669be5f7bfbedf1", 0xe}, {&(0x7f0000000280)="8f3ef5b48e44b205393b32ae183d73ec61e59bc15bc3236f557a8dc78a514d91", 0x20}], 0x44, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff7f000001", @ANYRES32=r3, @ANYBLOB="00000000140000000000000029000000340000000700000000000000140000000000000029000000080000000a01001000000000140000000000000029000000340000000600000000000000b80000000000000029000000390000003a14010700000000fe880000000000000000000000000101fc020000000000000000000000000001fc000000000000000000000000000000fc00000000000000000000000000000100000000000000000000000000000000fc020000000000000000000000000001fe88000000000000000000000000010120010000000000000000000000000000fe80000000000000000000000000002720010000000000000000000000000000b186ad0cd07e240f3fc69235144d43cb2a5be01650a939b14d76ce372e99aa9e28e2446956b125c58982f5eacbfe44796a8b34aabbf9259bc1022114fafebe13a3da31b647e995ebd7f781153b33b6be84a8d7b109326d572c859db7904f6bdb86fc72f11d274a0e6be9113a2ba2f9f85e10e8b5fcb80273167ce2fb18150b2215581e5e78f537068fa17cc416a472e564afeef0827b871778d0dd9438591da3df1fb49328d3a090743baff1e016b720eb4f1c534e1ef9e546"], 0x128}, 0x4010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000440)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000010000100000000006355bc318a974a37200000fa0000050000000230000000002c000000030a01010000000000000000050010000900030073797a32000000000c000240000000000000000514000000060a0104000000000000000005000000140000001100010000000000000000000300000a000000000000"], 0x88}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000a00)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x20008880) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r9, @ANYBLOB="0100ab851aea2abd7000fddbdf2509000000050007000200040008000300", @ANYRES16=0x0, @ANYBLOB="050008000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x14019) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000480)=0x200080) pwritev(r5, &(0x7f00000004c0)=[{&(0x7f0000000540)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000080), 0x6) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r12}, 0xc) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 4.340427409s ago: executing program 4 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 4.180622137s ago: executing program 0 (id=1625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b40)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80)=r4, 0x4) close(0x3) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000940)={0x2c, r7, 0x200, 0x70bd27, 0x0, {{}, {@void, @void}}}, 0xfffffffffffffea8}}, 0xc4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r7, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x18}}}}, [@NL80211_ATTR_VENDOR_DATA={0x33, 0xc5, "a0d6326c2bbb20e53954400ebaa442126adad2cddbea8fa44201317b3014b6c8f78a3759029e21992cd045bca4bf00"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x220, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000001, 0x3b}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe63}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xef, 0x5b, "dd54b9e293291bd257b9676101d9d91faec72bdb77713d3d712410e154ac130202fb5e01764a6ba9ef721d95e849bf9513de5a29cc0634b16ec59b77c1e85333854b8b188e7c15435c376c3415e24fe7ac597476df0ecbaaf0979d51192893b45516036f4506c68ca2ee4755cc6922f2b17b5923c93257e1b7c6d969fa4f6dae27f7bb0514c825c6e2fa54ef43d6bd7782adee15a552d2d107c09b824d86107c386ebd9e8ae52da7494a540bc483e6abb1a71cda4a887b5c96f6c5da3f241acbc657fafddeb576bafec9ce01ad697acfaa7711fefad90e0aea3ee78fcec7c04a31393a7291da8a95dfbea2"}]}, 0x220}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000b00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x844}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x884) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) sendmsg$inet(r2, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c00)="b70001066c5f5f3242c0b9434d627ce56f3e4550112c19397430866b5281a967973b1f7e3b92b61742d47336da50558712e7b4ae63d57fc13837b5ee7f10d502f81674e5ac84a5b3924651550a3addef634a6847acd02d6b477d5a5f1d730ffefa4bc7c9097cd54979eeaa561229e948d9f77dc01530b6f9c734b3acd453dde820d842fd336c98", 0x87}, {&(0x7f0000000cc0)="f83c78a9d4c8d36115ffdda108a070efb7431d11bb0437d71bc346c2f03642df1d003a7b6144a23a020a51edfe1255896800560c0a5a033c3aab1949be9a5351bdd061ca5aa1736e1ed801e3168f949bf9002d9ec5286df9e8de9b601310d792ec1ba9639696ec1032528d9dc153dd7d730725bdb3dc6eb1ed479858b3cfc572b7a42b67da1e8571009cf78b119d4be0b07b36dc9122767cd72bdb592993873a9fcd7030cf8ae831173fa9e441ff756734e2765ae13907180be40227686fd2580d488d060b0f27d41d96c3b5ef798f81dad13ec58d49ddfbf432", 0xda}, {&(0x7f0000000dc0)="3e43eca5009213cd0cac5476772b73aca7b9b36afa354ed0270d153dbc578caa599bd65a9ab5d01743ee40ea4fe1fdabab3c10591a8beaf8dbd4e3a1b11665999e4e7698b5730d415cdb6a43477f67a82a8b82eed8a47c8ecc1f7408ddf5e1914013860498140cd401e53b", 0x6b}], 0x3}, 0x4) 4.028356137s ago: executing program 4 (id=1626): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000226531728b7134df42f414b42cdbde16ff5008500000047"], &(0x7f00000001c0)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000200), 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000c80)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000073842e2fde06f51000010000000000000000000100000a74000000060a010400000000000000000a00010000000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a31000000000c0005800800024000000004140000001100010000000000000000000100000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x786c1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x10, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="7fcc623eaa635215822e2bf0a484c5c7864601fa6318d02e6330220cef7a2b97ae2e0997dd36"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffbe}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x26, 0x803, 0x8000000) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100085061000"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = accept4$nfc_llcp(r4, &(0x7f00000009c0), &(0x7f0000000a40)=0x60, 0x1800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b00)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x53}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r12], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r13 = socket(0x10, 0x4, 0x0) getsockname$packet(r13, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="000a15827200fcdbdf470a0000c80000000000000000", @ANYRES32=r12, @ANYRESDEC=r14, @ANYRESHEX=r2, @ANYRES16], 0x18}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 4.026482597s ago: executing program 2 (id=1627): r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)={0x8c, 0x10, 0x100, 0x0, 0x25dfdbfe, "", [@generic="6f6d8864d22a3f2ffaa46c88bcb24ca965b6f607400206b4ea9dacdddf366b9a899fb040b8ae3503d88f4e78da5290f45804bab8505e4dbb27c7860ee9904f9ae531d773b418c8f95ea48d5548a4a3f7b8dbac319cda68244fc54f5e82abcca64436d7", @nested={0x14, 0x119, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x4}]}, 0x8c}], 0x1}, 0x40040) 3.619471135s ago: executing program 2 (id=1628): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000e5a800000000000000007a000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200000d0000"], 0x50}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff}) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbf9, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4c000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000540)) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000005c0)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000640)={0x1f, 0x112, 0x0, 0x5, 0x0, 0x0, 0x1, 0x4000000000000004}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000003c0)="ffffffffffff0011223344554305000f3200000000010011221f445500112233445500ff00009d", 0x27, 0x4c004, &(0x7f0000000400)={0x11, 0x1a, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000146664723000"/24], 0x34}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r6, 0x80186e83, &(0x7f0000000240)) 3.392513978s ago: executing program 5 (id=1629): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x2b, &(0x7f0000000280)=0x1000, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="38046cd35115c85d00", @ANYRES16=r2, @ANYBLOB="2d0000000000fddbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a0018000303030303030000080026006c09000007002400ec016000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24004004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000840) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="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"], 0xe4}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) 3.031148214s ago: executing program 0 (id=1630): ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000080)) (async) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.699600877s ago: executing program 3 (id=1631): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20044840}, 0x79a2568fe44a053c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0xa, 0xfffc, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, &(0x7f0000000340)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc52db000) setsockopt$sock_timeval(r3, 0x1, 0x50, &(0x7f00000000c0), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000"], 0x48) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) 2.160544287s ago: executing program 4 (id=1632): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000000140)={0x1, 0x0, 0x21a4, 0x10001, 0x2, 0x9}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000440)={0x1100, 0x1, 0x8, 0x10003}) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x10, &(0x7f0000000f00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000f80)='GPL\x00', 0x4, 0xe4, &(0x7f0000000fc0)=""/228}, 0x90) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001300)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="e499767e78ef3df09ea669c46f1c499415abec0764355f421233ef23e83bf0450f7f98b1cf0a3c9c81c001fd6f6cdea594", @ANYRES8=r1], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_tracing={0x1a, 0x2a, &(0x7f00000010c0)=@raw=[@jmp={0x5, 0x0, 0x8, 0x1, 0x6, 0xfffffffffffffffe, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x186}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000001240)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0xd, 0x2, 0x6}, 0x10, 0x2239a, 0xffffffffffffffff, 0x7, &(0x7f00000013c0)=[r5, 0xffffffffffffffff, r6], &(0x7f0000001400)=[{0x0, 0x2, 0x8, 0x7}, {0x0, 0x4, 0x8}, {0x3, 0x5, 0xc, 0x1}, {0x1, 0x3, 0x9, 0xa}, {0x5, 0x2, 0xd, 0x7}, {0x1, 0x3, 0x8, 0x8}, {0x3, 0x2, 0x8, 0x1}], 0x10, 0x400}, 0x94) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000600), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/net\x00') (async, rerun: 32) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x2, 0x0, &(0x7f00000006c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00", @ANYRESDEC], 0xc0}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000007c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x5, 0xb68, 0x0, &(0x7f00000008c0)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c0000000300000000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.974969113s ago: executing program 5 (id=1633): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=@getrule={0x14, 0x22, 0x200, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40091) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x200040c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="c000000000000000000000000000000069869f9b4a0074586c9f0c522844c650"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 1.603624616s ago: executing program 0 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa}]}, 0x40}}, 0x404c080) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0xb, 0x79}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 704.840654ms ago: executing program 3 (id=1635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480100001a00330600000000fddbdf25fe8000000000000000000000000000aaffffffff000000000000000000000000000040004e2480010000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) 306.993209ms ago: executing program 0 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) write(0xffffffffffffffff, &(0x7f0000000080)="0b000300010001", 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) close(0x3) 23.744178ms ago: executing program 3 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e00108000200e00000010c00020cfe4ef1000000000000000000"], 0x4c}}, 0x4000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e00108000200e00000010c00020cfe4ef1000000000000000000"], 0x4c}}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e, 0x3e]}}, 0x0, 0x2c}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f3dd403de6f073cb5e452647533b90864868a2cc1779c36b6000076f5b81fc32c979c5beaebd72780947f21718d80c46ab44f286f9aa4eb186d75446cdae25d6f7eeba19990dd3fe22a56ce092d2b194c0bb2917c6acfcc1809646ad1739066c49b60ab0b9c4df0a85ddda23083afefa56aa4cbdc75370e16335c5ec26f78a22d5d4bd679dde6c1bc288bb297f175150aae79177b696ad96928bc10434c64812f6deb78b945556d2c23c27d2e519dba0e580324ccb581fe13d75b75b72d7c02ee3ab3dcc472dd4dc2be5f0467f244dce97661fca32", @ANYRES32=r2], 0x3c}}, 0x4000000) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f3dd403de6f073cb5e452647533b90864868a2cc1779c36b6000076f5b81fc32c979c5beaebd72780947f21718d80c46ab44f286f9aa4eb186d75446cdae25d6f7eeba19990dd3fe22a56ce092d2b194c0bb2917c6acfcc1809646ad1739066c49b60ab0b9c4df0a85ddda23083afefa56aa4cbdc75370e16335c5ec26f78a22d5d4bd679dde6c1bc288bb297f175150aae79177b696ad96928bc10434c64812f6deb78b945556d2c23c27d2e519dba0e580324ccb581fe13d75b75b72d7c02ee3ab3dcc472dd4dc2be5f0467f244dce97661fca32", @ANYRES32=r2], 0x3c}}, 0x4000000) 0s ago: executing program 4 (id=1638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/208, 0xd0}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x2}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000380001800c000100626974776973650028000280080003400000f003080001400000001408000240000000120800064000000005040005800900010073797a30"], 0x10c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x8, 0x3892, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x24}, {[@ssrr={0x89, 0x1f, 0xbc, [@remote, @remote, @local, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x27, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0x6, @empty, @private=0xa010101, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0010211}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008881}, 0x44001) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "55667788"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r6, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10980148}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, 0x12, 0x200, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x9, 0x2, {0x4e22, 0x4e21, [0x101, 0x6, 0x4, 0x9], [0x6f9, 0x8001, 0x3ff, 0x7], r3, [0xfff, 0xb]}, 0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "d164c7e0a54896f1baf9d7e615aff918fa43cf062b8f54f015830e02dc582cf68033e034a4337a6c75a833401b644a2d0202b4189648918a24dd61d6b47661be301f16b649b032e45cf36375d564e1233b0147ca7ecacd74fa456b256c53b3a12cd2e37669a29a974b79e0c8d25a6885d8f249e8a006af87153ed17d54461a6b71ca4bd79a7048806194b6757744f3710d1ed25b39f9d4ead7614203c4021fed6e7a7d2884b97c23efb67e02efc07d5f3c75678f9161eb93b0cb570830e0dfc779b4be6a50f21095e68e1756d4db249f856868767e7d"}]}, 0x128}}, 0x8000) kernel console output (not intermixed with test programs): [ 76.454177][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.454302][ T5615] bridge_slave_1: entered allmulticast mode [ 76.456673][ T5615] bridge_slave_1: entered promiscuous mode [ 76.533065][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.534239][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.534410][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.534525][ T5612] bridge_slave_0: entered allmulticast mode [ 76.535990][ T5612] bridge_slave_0: entered promiscuous mode [ 76.544306][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.592716][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.593050][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.593220][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.593322][ T5612] bridge_slave_1: entered allmulticast mode [ 76.596996][ T5612] bridge_slave_1: entered promiscuous mode [ 76.614822][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.645021][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.675347][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.676119][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.676511][ T5616] bridge_slave_0: entered allmulticast mode [ 76.680455][ T5616] bridge_slave_0: entered promiscuous mode [ 76.715107][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.732019][ T5613] team0: Port device team_slave_0 added [ 76.732220][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.732334][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.732454][ T5616] bridge_slave_1: entered allmulticast mode [ 76.735373][ T5616] bridge_slave_1: entered promiscuous mode [ 76.739673][ T5615] team0: Port device team_slave_0 added [ 76.743350][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.745622][ T5613] team0: Port device team_slave_1 added [ 76.802772][ T5615] team0: Port device team_slave_1 added [ 76.851898][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.900852][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.918299][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.918315][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.918342][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.924564][ T5612] team0: Port device team_slave_0 added [ 76.925264][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.925275][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.925296][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.931273][ T5612] team0: Port device team_slave_1 added [ 76.947232][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.947248][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.947268][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.960833][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.960851][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.960871][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.978059][ T5616] team0: Port device team_slave_0 added [ 77.007013][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.007031][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.007052][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.015819][ T5616] team0: Port device team_slave_1 added [ 77.050507][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.050524][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.050544][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.212660][ T5615] hsr_slave_0: entered promiscuous mode [ 77.213870][ T5615] hsr_slave_1: entered promiscuous mode [ 77.215199][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.215212][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.215228][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.226066][ T5613] hsr_slave_0: entered promiscuous mode [ 77.227334][ T5613] hsr_slave_1: entered promiscuous mode [ 77.229203][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 77.229289][ T5613] Cannot create hsr debugfs directory [ 77.230104][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.233466][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.233480][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.233501][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.392556][ T5612] hsr_slave_0: entered promiscuous mode [ 77.393587][ T5612] hsr_slave_1: entered promiscuous mode [ 77.394305][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 77.394322][ T5612] Cannot create hsr debugfs directory [ 77.533593][ T5616] hsr_slave_0: entered promiscuous mode [ 77.534954][ T5616] hsr_slave_1: entered promiscuous mode [ 77.535752][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 77.535769][ T5616] Cannot create hsr debugfs directory [ 77.996775][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.012979][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.013874][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.033027][ T52] Bluetooth: hci0: command tx timeout [ 78.033049][ T5629] Bluetooth: hci2: command tx timeout [ 78.033061][ T52] Bluetooth: hci3: command tx timeout [ 78.035816][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.037982][ T4935] Bluetooth: hci4: command tx timeout [ 78.071658][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.089983][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.090802][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.095565][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.119500][ T4935] Bluetooth: hci1: command tx timeout [ 78.233377][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.233567][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.233897][ T5614] bridge_slave_0: entered allmulticast mode [ 78.235135][ T5614] bridge_slave_0: entered promiscuous mode [ 78.240137][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.240233][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.240373][ T5614] bridge_slave_1: entered allmulticast mode [ 78.245025][ T5614] bridge_slave_1: entered promiscuous mode [ 78.283482][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.294784][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.317603][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.317840][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.321269][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.321887][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.326396][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.335489][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.380119][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.382389][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.401149][ T5614] team0: Port device team_slave_0 added [ 78.403789][ T5614] team0: Port device team_slave_1 added [ 78.443030][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.443046][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.443066][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.460070][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.460085][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.460105][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.545270][ T5614] hsr_slave_0: entered promiscuous mode [ 78.545911][ T5614] hsr_slave_1: entered promiscuous mode [ 78.546306][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 78.546323][ T5614] Cannot create hsr debugfs directory [ 78.583597][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.587582][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.635339][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.639645][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.640517][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.649390][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.671923][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.675594][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.811261][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.815101][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.842552][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.846684][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.870392][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.874169][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.877025][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.897158][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.922560][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.994810][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.000439][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.002804][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.009509][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.025601][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.033508][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.046441][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.052527][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.074265][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.124648][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.124749][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.162859][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.162950][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.198543][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.236057][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.272396][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.310705][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.310811][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.326558][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.344419][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.344533][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.369846][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.387342][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.387401][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.421309][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.421376][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.496786][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.560070][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.562003][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.562090][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.596335][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.596440][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.683382][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.733426][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.733526][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.775671][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.775782][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.110293][ T5629] Bluetooth: hci2: command tx timeout [ 80.110326][ T5629] Bluetooth: hci0: command tx timeout [ 80.110380][ T52] Bluetooth: hci4: command tx timeout [ 80.110390][ T4935] Bluetooth: hci3: command tx timeout [ 80.189679][ T4935] Bluetooth: hci1: command tx timeout [ 80.513683][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.718485][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.744039][ T5615] veth0_vlan: entered promiscuous mode [ 80.801406][ T5615] veth1_vlan: entered promiscuous mode [ 80.861503][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.978443][ T5615] veth0_macvtap: entered promiscuous mode [ 80.987095][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.036205][ T5615] veth1_macvtap: entered promiscuous mode [ 81.041628][ T5613] veth0_vlan: entered promiscuous mode [ 81.074504][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.099614][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.103761][ T5613] veth1_vlan: entered promiscuous mode [ 81.136288][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.254824][ T5612] veth0_vlan: entered promiscuous mode [ 81.305544][ T5614] veth0_vlan: entered promiscuous mode [ 81.347460][ T5612] veth1_vlan: entered promiscuous mode [ 81.361231][ T5614] veth1_vlan: entered promiscuous mode [ 81.366755][ T5613] veth0_macvtap: entered promiscuous mode [ 81.373886][ T5613] veth1_macvtap: entered promiscuous mode [ 81.389926][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.433684][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.433704][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.495074][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.519566][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.519585][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.531716][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.564586][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.564875][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578273][ T5616] veth0_vlan: entered promiscuous mode [ 81.586652][ T5614] veth0_macvtap: entered promiscuous mode [ 81.612892][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.614676][ T5614] veth1_macvtap: entered promiscuous mode [ 81.632940][ T5612] veth0_macvtap: entered promiscuous mode [ 81.650562][ T5616] veth1_vlan: entered promiscuous mode [ 81.670895][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.681980][ T5612] veth1_macvtap: entered promiscuous mode [ 81.755307][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.758504][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.785016][ T5616] veth0_macvtap: entered promiscuous mode [ 81.795002][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.795131][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.846348][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.869341][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.887932][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.922687][ T5616] veth1_macvtap: entered promiscuous mode [ 81.956000][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.975951][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.975971][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.101796][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.101816][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.121222][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.122813][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.122854][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.122886][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.122926][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.122958][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.122989][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.123021][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.148842][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.194262][ T4935] Bluetooth: hci3: command tx timeout [ 82.194281][ T52] Bluetooth: hci0: command tx timeout [ 82.197997][ T4935] Bluetooth: hci2: command tx timeout [ 82.198043][ T52] Bluetooth: hci4: command tx timeout [ 82.222550][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.267872][ T52] Bluetooth: hci1: command tx timeout [ 82.330662][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.330682][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.338169][ T155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.339326][ T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.339365][ T155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.339397][ T155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.501847][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.501871][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.615067][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.615087][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.703096][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.703120][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.783449][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.783469][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.842127][ T5844] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8'. [ 82.896506][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.896526][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.913996][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.998211][ T5853] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 83.004543][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.005850][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.028457][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.028588][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.029342][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.029472][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.035329][ T5853] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 83.037455][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 83.037966][ T5853] bridge_slave_1: left allmulticast mode [ 83.037985][ T5853] bridge_slave_1: left promiscuous mode [ 83.038267][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.104636][ T5853] bridge_slave_0: left allmulticast mode [ 83.104662][ T5853] bridge_slave_0: left promiscuous mode [ 83.104869][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.161446][ T5853] bond0: (slave bridge0): Releasing backup interface [ 83.211670][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 83.215527][ T5858] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11'. [ 83.441754][ T5862] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 83.459317][ T5862] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 83.531130][ T5868] syz_tun: entered allmulticast mode [ 83.534161][ T5864] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 83.584882][ T5873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.623556][ T5866] syz_tun: left allmulticast mode [ 83.797083][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 83.831767][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 83.836372][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 84.120777][ T5886] sctp: [Deprecated]: syz.2.19 (pid 5886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.120777][ T5886] Use struct sctp_sack_info instead [ 84.546742][ T5898] xt_policy: too many policy elements [ 84.656345][ T5907] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.779727][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 85.288945][ T5921] tunl0: entered promiscuous mode [ 85.360013][ T5921] netlink: 'syz.4.23': attribute type 3 has an invalid length. [ 85.360034][ T5921] netlink: 9 bytes leftover after parsing attributes in process `syz.4.23'. [ 85.623708][ T5929] openvswitch: netlink: IP tunnel dst address not specified [ 86.046916][ T5954] netlink: 'syz.4.33': attribute type 21 has an invalid length. [ 86.065913][ T5954] x_tables: duplicate underflow at hook 1 [ 86.468311][ T5983] ip6gretap1: entered allmulticast mode [ 86.487353][ T5986] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 86.606879][ T5988] netlink: Failed to add helper -22 [ 86.606933][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.843255][ T30] cfg80211: failed to load regulatory.db [ 86.938675][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.938720][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.938751][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.938781][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.953455][ T6005] IPVS: ip_vs_edit_dest(): server weight less than zero [ 86.958846][ T43] IPVS: starting estimator thread 0... [ 86.993424][ T6005] netlink: 'syz.4.44': attribute type 2 has an invalid length. [ 86.993459][ T6005] netlink: 'syz.4.44': attribute type 2 has an invalid length. [ 87.048237][ T6009] IPVS: using max 30 ests per chain, 72000 per kthread [ 87.112991][ T6002] syzkaller0: entered promiscuous mode [ 87.113013][ T6002] syzkaller0: entered allmulticast mode [ 87.484722][ T6031] openvswitch: netlink: Flow key attr not present in new flow. [ 87.485139][ T6030] openvswitch: netlink: Flow key attr not present in new flow. [ 88.517770][ T52] Bluetooth: hci4: command tx timeout [ 88.576232][ T190] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.253918][ T6064] Zero length message leads to an empty skb [ 89.463783][ T6072] ksmbd: Unknown IPC event: 0, ignore. [ 89.464293][ T6073] xt_hashlimit: size too large, truncated to 1048576 [ 89.564124][ T6072] __nla_validate_parse: 12 callbacks suppressed [ 89.564145][ T6072] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.62'. [ 89.564329][ T6072] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 89.609617][ T6072] 0ªX¹¦Dö»: entered allmulticast mode [ 90.017201][ T6110] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 90.026725][ T6115] batman_adv: batadv0: Adding interface: syzkaller0 [ 90.026740][ T6115] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.026761][ T6115] batman_adv: batadv0: Interface activated: syzkaller0 [ 90.115384][ T6112] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 90.141077][ T6112] batman_adv: batadv0: Removing interface: syzkaller0 [ 90.204954][ T6121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.73'. [ 90.331751][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 90.331773][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.76'. [ 90.377273][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 90.377346][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 90.436463][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 90.436521][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 90.633473][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 90.721320][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 90.721673][ T6152] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000005ÿÿÿ [ 90.873917][ T6159] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 90.894380][ T6159] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 90.894587][ T6159] dummy0: entered promiscuous mode [ 91.134504][ T6182] IPv6: addrconf: prefix option has invalid lifetime [ 91.619190][ T6209] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 91.925361][ T6235] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.120388][ T6239] syzkaller1: entered promiscuous mode [ 92.120410][ T6239] syzkaller1: entered allmulticast mode [ 92.663039][ T6272] IPv4: Oversized IP packet from 127.202.26.0 [ 92.768693][ T6286] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.190826][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b024800: rx timeout, send abort [ 93.191874][ T6315] block nbd0: Unsupported socket: should be TCP or UNIX. [ 93.192243][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b024800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 93.215618][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805587f000: rx timeout, send abort [ 93.216770][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805587f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.377233][ T6323] FAULT_INJECTION: forcing a failure. [ 93.377233][ T6323] name failslab, interval 1, probability 0, space 0, times 1 [ 93.377280][ T6323] CPU: 1 UID: 0 PID: 6323 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT(full) [ 93.377300][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.377318][ T6323] Call Trace: [ 93.377329][ T6323] [ 93.377337][ T6323] dump_stack_lvl+0xe8/0x150 [ 93.377368][ T6323] should_fail_ex+0x410/0x560 [ 93.377400][ T6323] ? __alloc_skb+0x1db/0x7a0 [ 93.377417][ T6323] should_failslab+0xa8/0x100 [ 93.377443][ T6323] ? __alloc_skb+0x1db/0x7a0 [ 93.377456][ T6323] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 93.377477][ T6323] ? __alloc_skb+0x18d/0x7a0 [ 93.377494][ T6323] ? __alloc_skb+0x1db/0x7a0 [ 93.377515][ T6323] __alloc_skb+0x1db/0x7a0 [ 93.377536][ T6323] netlink_ack+0x136/0xb30 [ 93.377576][ T6323] netlink_rcv_skb+0x2a4/0x4a0 [ 93.377607][ T6323] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 93.377628][ T6323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.377657][ T6323] ? bpf_lsm_capable+0x9/0x20 [ 93.377674][ T6323] ? security_capable+0x7e/0x2c0 [ 93.377705][ T6323] nfnetlink_rcv+0x2b9/0x28c0 [ 93.377729][ T6323] ? __dev_queue_xmit+0x29b/0x3920 [ 93.377754][ T6323] ? __local_bh_enable_ip+0xd6/0x140 [ 93.377778][ T6323] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.377799][ T6323] ? __dev_queue_xmit+0x29b/0x3920 [ 93.377818][ T6323] ? __local_bh_enable_ip+0xd6/0x140 [ 93.377841][ T6323] ? __dev_queue_xmit+0x29b/0x3920 [ 93.377860][ T6323] ? __dev_queue_xmit+0x1efb/0x3920 [ 93.377879][ T6323] ? do_syscall_64+0x166/0x520 [ 93.377903][ T6323] ? __dev_queue_xmit+0x29b/0x3920 [ 93.377933][ T6323] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 93.377960][ T6323] ? __pfx___dev_queue_xmit+0x10/0x10 [ 93.377988][ T6323] ? ref_tracker_free+0x689/0x830 [ 93.378017][ T6323] ? __pfx_ref_tracker_free+0x10/0x10 [ 93.378052][ T6323] ? __skb_clone+0x4a2/0x760 [ 93.378078][ T6323] ? skb_clone+0x246/0x3a0 [ 93.378101][ T6323] ? __netlink_deliver_tap+0x811/0x860 [ 93.378122][ T6323] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.378151][ T6323] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.378172][ T6323] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.378200][ T6323] netlink_unicast+0x8ef/0xa80 [ 93.378237][ T6323] netlink_sendmsg+0x813/0xb40 [ 93.378269][ T6323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.378300][ T6323] ? apparmor_socket_sendmsg+0x98/0x360 [ 93.378327][ T6323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.378348][ T6323] sock_sendmsg_nosec+0x13a/0x180 [ 93.378375][ T6323] ____sys_sendmsg+0x54e/0x850 [ 93.378401][ T6323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.378430][ T6323] ? import_iovec+0x73/0xa0 [ 93.378461][ T6323] ___sys_sendmsg+0x2a5/0x360 [ 93.378479][ T6323] ? __lock_acquire+0x747/0x2de0 [ 93.378503][ T6323] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.378559][ T6323] ? __fget_files+0x2a/0x420 [ 93.378575][ T6323] ? __fget_files+0x3a2/0x420 [ 93.378608][ T6323] __x64_sys_sendmsg+0x1b1/0x290 [ 93.378631][ T6323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.378672][ T6323] do_syscall_64+0x166/0x520 [ 93.378692][ T6323] ? trace_irq_disable+0x3b/0x140 [ 93.378711][ T6323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.378729][ T6323] ? clear_bhb_loop+0x70/0xc0 [ 93.378752][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.378770][ T6323] RIP: 0033:0x7fb033f9f559 [ 93.378793][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.378808][ T6323] RSP: 002b:00007fb034e79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.378831][ T6323] RAX: ffffffffffffffda RBX: 00007fb034225fa0 RCX: 00007fb033f9f559 [ 93.378844][ T6323] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 93.378855][ T6323] RBP: 00007fb034e79090 R08: 0000000000000000 R09: 0000000000000000 [ 93.378866][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.378876][ T6323] R13: 00007fb034226038 R14: 00007fb034225fa0 R15: 00007ffd1dc56318 [ 93.378907][ T6323] [ 93.827506][ T6336] veth2: entered promiscuous mode [ 93.827529][ T6336] veth2: entered allmulticast mode [ 94.052500][ T6349] warning: `syz.4.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.104259][ T6356] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 94.797214][ T6404] __nla_validate_parse: 21 callbacks suppressed [ 94.797234][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 95.074863][ T6411] netlink: 'syz.3.161': attribute type 8 has an invalid length. [ 95.075139][ T6411] sch_fq: defrate 0 ignored. [ 95.195272][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 95.221548][ T6418] netlink: 68 bytes leftover after parsing attributes in process `syz.0.164'. [ 95.524575][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.168'. [ 95.537776][ T6434] netlink: 140 bytes leftover after parsing attributes in process `syz.3.168'. [ 95.712459][ T6440] syzkaller0: entered promiscuous mode [ 95.712524][ T6440] syzkaller0: entered allmulticast mode [ 95.920858][ T6447] bridge_slave_1: entered promiscuous mode [ 95.945150][ T6451] netlink: 96 bytes leftover after parsing attributes in process `syz.2.174'. [ 95.945398][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 95.970659][ T6447] syzkaller0: entered promiscuous mode [ 95.970680][ T6447] syzkaller0: entered allmulticast mode [ 96.011446][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 96.025044][ T6453] netlink: 9 bytes leftover after parsing attributes in process `syz.4.175'. [ 96.067040][ T6457] netlink: 96 bytes leftover after parsing attributes in process `syz.2.174'. [ 96.101321][ T6453] 0·: renamed from hsr0 (while UP) [ 96.110816][ T6453] 0·: entered allmulticast mode [ 96.110837][ T6453] hsr_slave_0: entered allmulticast mode [ 96.110853][ T6453] hsr_slave_1: entered allmulticast mode [ 96.111298][ T6453] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 97.678039][ T6549] ip_tables: iptables: counters copy to user failed while replacing table [ 97.952832][ T6558] syzkaller0: entered promiscuous mode [ 97.952857][ T6558] syzkaller0: entered allmulticast mode [ 97.967297][ T6560] batman_adv: batadv0: Adding interface: syzkaller0 [ 97.967314][ T6560] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.967339][ T6560] batman_adv: batadv0: Interface activated: syzkaller0 [ 98.011214][ T6556] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 98.083251][ T6556] batman_adv: batadv0: Removing interface: syzkaller0 [ 98.511218][ T6578] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 101.930603][ T6594] tipc: Started in network mode [ 101.930634][ T6594] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 101.932098][ T6594] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 101.933926][ T6594] tipc: Enabled bearer , priority 10 [ 102.214353][ T6591] tipc: Enabling of bearer rejected, already enabled [ 102.313251][ T6643] __nla_validate_parse: 3 callbacks suppressed [ 102.313273][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 102.529884][ T6648] netlink: 59 bytes leftover after parsing attributes in process `syz.0.198'. [ 102.599185][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 102.599243][ T6648] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 102.610361][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 103.050132][ T5757] tipc: Node number set to 1 [ 103.402718][ T6677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.422261][ T6677] bond0: (slave bond1): Enslaving as an active interface with an up link [ 103.984156][ T6692] bond1 (unregistering): Released all slaves [ 104.044468][ T6709] netlink: 'syz.2.217': attribute type 3 has an invalid length. [ 104.044490][ T6709] netlink: 3 bytes leftover after parsing attributes in process `syz.2.217'. [ 104.046079][ T6709] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.217'. [ 104.054521][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 104.862934][ T6728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.868408][ T6732] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.868589][ T6732] xt_SECMARK: invalid mode: 9 [ 104.942994][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 105.493696][ T6756] netlink: 'syz.3.223': attribute type 10 has an invalid length. [ 105.911067][ T6772] netlink: 'syz.2.228': attribute type 12 has an invalid length. [ 105.942914][ T6769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.037315][ T6772] bond1: option primary_reselect: invalid value (255) [ 106.074017][ T6772] bond1 (unregistering): Released all slaves [ 106.758156][ T6789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 106.953004][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 107.191325][ T6797] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 107.419789][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.735659][ T6825] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 107.996521][ T6825] bond1: entered promiscuous mode [ 108.000706][ T6825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.121564][ T6829] bond1: (slave bridge2): making interface the new active one [ 108.121588][ T6829] bridge2: entered promiscuous mode [ 108.155133][ T6829] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 108.191414][ T6843] __nla_validate_parse: 64 callbacks suppressed [ 108.191435][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 108.371429][ T6843] bond1: Invalid ad_actor_system MAC address. [ 108.371450][ T6843] bond1: option ad_actor_system: invalid value (1) [ 108.397826][ T6843] bond1 (unregistering): Released all slaves [ 108.664002][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 108.693476][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.079931][ T6867] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 109.111570][ T6867] Bluetooth: MGMT ver 1.23 [ 109.111609][ T6867] Bluetooth: hci0: unsupported parameter 5134 [ 109.111622][ T6867] Bluetooth: hci0: unsupported parameter 8192 [ 109.111637][ T6867] Bluetooth: hci0: unsupported parameter 5134 [ 109.111647][ T6867] Bluetooth: hci0: unsupported parameter 8192 [ 109.285832][ T6875] netlink: 'syz.1.251': attribute type 2 has an invalid length. [ 109.330395][ T6875] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.330476][ T6875] gretap1: entered promiscuous mode [ 109.330491][ T6875] gretap1: entered allmulticast mode [ 109.856655][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 110.320953][ T6891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.402646][ T6912] TC_ACT_REPEAT abuse ? [ 110.654927][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 110.672417][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 111.609380][ T6966] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 111.693190][ T6973] netlink: 56 bytes leftover after parsing attributes in process `syz.3.273'. [ 112.263761][ T6972] netlink: 14 bytes leftover after parsing attributes in process `syz.4.274'. [ 112.702303][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.278'. [ 112.847969][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 112.848801][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 112.852046][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 112.852242][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 112.852376][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 112.852504][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 112.852633][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 112.852767][ T7005] netlink: 'syz.4.278': attribute type 8 has an invalid length. [ 113.306698][ T7009] tipc: Enabling of bearer rejected, media not registered [ 113.838518][ T7025] netlink: 'syz.4.286': attribute type 11 has an invalid length. [ 114.054880][ T7030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.288'. [ 114.125427][ T7023] team0: Device gtp0 is up. Set it down before adding it as a team port [ 114.398446][ T7035] validate_nla: 25 callbacks suppressed [ 114.398466][ T7035] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 114.398479][ T7035] netlink: 220 bytes leftover after parsing attributes in process `syz.1.290'. [ 114.463023][ T7030] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.288'. [ 114.497127][ T7041] netlink: 'syz.3.289': attribute type 11 has an invalid length. [ 114.855221][ T7050] syzkaller1: entered promiscuous mode [ 114.855243][ T7050] syzkaller1: entered allmulticast mode [ 115.107661][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 115.328993][ T7077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.515400][ T7081] tunl0: left promiscuous mode [ 115.598252][ T7088] netlink: 'syz.4.300': attribute type 83 has an invalid length. [ 115.991386][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.992115][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.015671][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 116.126874][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.153077][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.202496][ T7081] 0·: left allmulticast mode [ 116.202537][ T7081] hsr_slave_0: left allmulticast mode [ 116.202551][ T7081] hsr_slave_1: left allmulticast mode [ 116.464758][ T7118] ip_tables: iptables: counters copy to user failed while replacing table [ 116.524491][ T7081] bond1: left promiscuous mode [ 116.524516][ T7081] bridge2: left promiscuous mode [ 116.573962][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 116.584131][ T7117] lo: entered promiscuous mode [ 116.586972][ T7117] lo: left promiscuous mode [ 116.598990][ T3786] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.602486][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.602544][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.602576][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.910462][ T7127] netlink: 72 bytes leftover after parsing attributes in process `syz.0.312'. [ 116.935275][ T7127] netlink: 72 bytes leftover after parsing attributes in process `syz.0.312'. [ 116.942670][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.313'. [ 117.374640][ T7151] xt_esp: unknown flags DD [ 117.922329][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922329][ T7160] Use struct sctp_sack_info instead [ 117.922368][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922368][ T7160] Use struct sctp_sack_info instead [ 117.922387][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922387][ T7160] Use struct sctp_sack_info instead [ 117.922407][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922407][ T7160] Use struct sctp_sack_info instead [ 117.922429][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922429][ T7160] Use struct sctp_sack_info instead [ 117.922450][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922450][ T7160] Use struct sctp_sack_info instead [ 117.922472][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922472][ T7160] Use struct sctp_sack_info instead [ 117.922493][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922493][ T7160] Use struct sctp_sack_info instead [ 117.922515][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922515][ T7160] Use struct sctp_sack_info instead [ 117.922536][ T7160] sctp: [Deprecated]: syz.1.320 (pid 7160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.922536][ T7160] Use struct sctp_sack_info instead [ 118.112271][ T7165] netlink: 'syz.4.322': attribute type 5 has an invalid length. [ 118.285458][ T7163] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 118.695595][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 118.856321][ T7190] netlink: 'syz.2.330': attribute type 30 has an invalid length. [ 118.861966][ T7189] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 118.886684][ T7189] bond1 (unregistering): Released all slaves [ 119.006696][ T7190] bond1: option arp_missed_max: invalid value (0) [ 119.006721][ T7190] bond1: option arp_missed_max: allowed values 1 - 255 [ 119.052488][ T7190] bond1 (unregistering): Released all slaves [ 119.074682][ T7207] __nla_validate_parse: 3 callbacks suppressed [ 119.074702][ T7207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 119.513995][ T7211] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.737885][ T7197] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 120.042608][ T3786] IPVS: starting estimator thread 0... [ 120.159342][ T7235] IPVS: using max 28 ests per chain, 67200 per kthread [ 120.692757][ T7255] ip_tables: iptables: counters copy to user failed while replacing table [ 120.946830][ T7248] syz.1.344 (7248) used greatest stack depth: 18024 bytes left [ 120.989667][ T52] Bluetooth: hci1: command 0x0401 tx timeout [ 121.007966][ T7263] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 121.146692][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 121.386466][ T7285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.434993][ T7290] netlink: 27 bytes leftover after parsing attributes in process `syz.1.354'. [ 121.881378][ T7306] xt_LOG: prefix is not null-terminated [ 121.972877][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 121.973259][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 122.025291][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 122.704648][ T7335] netlink: 336 bytes leftover after parsing attributes in process `syz.2.368'. [ 122.704676][ T7335] openvswitch: netlink: Flow key attr not present in new flow. [ 122.731067][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 123.357518][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.373'. [ 123.806339][ T7365] SET target dimension over the limit! [ 123.932492][ T7365] SET target dimension over the limit! [ 124.189235][ T7375] syzkaller0: entered promiscuous mode [ 124.189440][ T7375] syzkaller0: entered allmulticast mode [ 124.250903][ T7375] tipc: Started in network mode [ 124.250919][ T7375] tipc: Node identity , cluster identity 4711 [ 124.250934][ T7375] tipc: Failed to obtain node identity [ 124.250964][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 124.610834][ T7401] xt_SECMARK: invalid mode: 9 [ 124.703939][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 124.704265][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'. [ 124.861463][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.861814][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.874745][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.875089][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.875376][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.875671][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.876137][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.892016][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.892335][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.023126][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 125.084085][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 125.412033][ T7429] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 125.588781][ T7429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.747171][ T7435] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 125.747199][ T7435] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 125.914516][ T7432] bond1: (slave veth9): Enslaving as an active interface with a down link [ 125.936644][ T7429] dummy0: left promiscuous mode [ 126.004124][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 126.004153][ T7455] netlink: 14 bytes leftover after parsing attributes in process `syz.4.401'. [ 126.084156][ T7429] bond1: (slave dummy0): making interface the new active one [ 126.094057][ T7429] dummy0: entered promiscuous mode [ 126.107291][ T7429] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 126.495219][ T7460] syz_tun: entered allmulticast mode [ 126.521262][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 126.522448][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 126.522472][ T7455] netlink: 14 bytes leftover after parsing attributes in process `syz.4.401'. [ 126.584298][ T7456] bond2 (unregistering): Released all slaves [ 126.785555][ T7462] pimreg: entered allmulticast mode [ 126.794396][ T7463] syzkaller0: entered promiscuous mode [ 126.794420][ T7463] syzkaller0: entered allmulticast mode [ 127.012249][ T7451] syz_tun: left allmulticast mode [ 127.056261][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 127.399336][ T7491] x_tables: unsorted underflow at hook 4 [ 128.411010][ T7525] syzkaller0: entered promiscuous mode [ 128.411033][ T7525] syzkaller0: entered allmulticast mode [ 129.195932][ T7559] C: renamed from veth1_to_team [ 129.209873][ T7559] netlink: 'syz.4.439': attribute type 2 has an invalid length. [ 129.209897][ T7559] net_ratelimit: 56 callbacks suppressed [ 129.209908][ T7559] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 129.523927][ T7575] gretap0: entered promiscuous mode [ 129.536754][ T7575] macsec1: entered promiscuous mode [ 129.554000][ T7575] gretap0: left promiscuous mode [ 130.769325][ T7608] netlink: ct family unspecified [ 130.769362][ T7608] openvswitch: netlink: Actions may not be safe on all matching packets [ 131.042989][ T7614] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 131.660573][ T7630] openvswitch: netlink: IPv4 tun info is not correct [ 132.213435][ T4935] Bluetooth: hci4: link tx timeout [ 132.213489][ T4935] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.549393][ T7657] __nla_validate_parse: 6 callbacks suppressed [ 132.549415][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 132.683505][ T7661] syz_tun: entered allmulticast mode [ 132.916378][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.264485][ T7666] ip_tables: iptables: counters copy to user failed while replacing table [ 134.725322][ T7695] syzkaller0: entered promiscuous mode [ 134.725505][ T7695] syzkaller0: entered allmulticast mode [ 135.137800][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 136.112631][ T7714] Bluetooth: MGMT ver 1.23 [ 137.101212][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 137.393292][ T3786] dummy0: left promiscuous mode [ 137.801449][ T7735] netlink: 'syz.3.509': attribute type 5 has an invalid length. [ 137.967289][ T7741] ip_tables: iptables: counters copy to user failed while replacing table [ 139.928805][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 139.989609][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 141.103706][ T7751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.141799][ T7768] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 141.721941][ T7780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.462850][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 143.076849][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.536'. [ 143.146893][ T7811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 143.471841][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 143.639146][ T7813] veth4: entered allmulticast mode [ 146.043448][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 146.535938][ T7865] ip_tables: iptables: counters copy to user failed while replacing table [ 146.844930][ T7872] netlink: 76 bytes leftover after parsing attributes in process `syz.4.556'. [ 146.852489][ T7872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.556'. [ 147.207527][ T7885] ip_tables: iptables: counters copy to user failed while replacing table [ 148.557392][ T7905] openvswitch: netlink: Message has 48 unknown bytes. [ 148.573836][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 148.729277][ T7911] netlink: 76 bytes leftover after parsing attributes in process `syz.0.571'. [ 148.745203][ T7911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.571'. [ 149.409873][ T7933] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 150.076901][ T7940] netlink: 'syz.3.581': attribute type 3 has an invalid length. [ 150.102963][ T7945] ip_tables: iptables: counters copy to user failed while replacing table [ 151.016139][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 151.170843][ T7965] syz_tun: entered allmulticast mode [ 151.535065][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 152.732110][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.597'. [ 152.942997][ T7996] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 152.957968][ T7996] bond1 (unregistering): Released all slaves [ 153.085570][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 153.726886][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 156.014628][ T8065] syzkaller0: entered promiscuous mode [ 156.014683][ T8065] syzkaller0: entered allmulticast mode [ 156.571801][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 162.314484][ T8121] ip_tables: iptables: counters copy to user failed while replacing table [ 162.432007][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 162.573582][ T8124] netlink: 'syz.3.628': attribute type 16 has an invalid length. [ 162.573605][ T8124] netlink: 'syz.3.628': attribute type 17 has an invalid length. [ 162.823084][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.880275][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.607397][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.608406][ T8124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.631872][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.632123][ T8124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.788861][ T8124] veth0_vlan: left promiscuous mode [ 163.793782][ T8124] veth0_vlan: entered promiscuous mode [ 163.885833][ T8124] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 163.886886][ T8124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.517132][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 165.533035][ T8179] ip6gre1: entered allmulticast mode [ 165.656308][ T8179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 166.586157][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 166.837073][ T8196] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.484635][ T8216] syz_tun: entered allmulticast mode [ 167.622570][ T8160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.315675][ T8222] netlink: 'syz.4.653': attribute type 4 has an invalid length. [ 168.315737][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.653'. [ 168.530637][ T8232] netlink: 'syz.4.653': attribute type 4 has an invalid length. [ 168.530697][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.653'. [ 169.710261][ T8255] ip_tables: iptables: counters copy to user failed while replacing table [ 169.735357][ T8255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.658'. [ 169.778392][ T8245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.658'. [ 170.146319][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'. [ 170.244922][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 170.587429][ T8275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.672'. [ 171.612152][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 171.612178][ T8290] nbd: must specify at least one socket [ 172.343961][ T8305] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 172.923327][ T8317] netlink: 'syz.1.689': attribute type 19 has an invalid length. [ 172.968605][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 174.698518][ T8356] netlink: 'syz.3.701': attribute type 13 has an invalid length. [ 174.698542][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 174.859873][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.859916][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.859948][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.859978][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.864060][ T8356] netlink: 'syz.3.701': attribute type 13 has an invalid length. [ 174.864081][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 175.085876][ T8367] netlink: 3584 bytes leftover after parsing attributes in process `syz.3.705'. [ 175.101609][ T8367] netlink: 3604 bytes leftover after parsing attributes in process `syz.3.705'. [ 175.422719][ T8378] netlink: 'syz.2.707': attribute type 12 has an invalid length. [ 176.467512][ T8388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.582795][ T8388] bond0: (slave bond2): Enslaving as an active interface with an up link [ 177.025277][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 177.125068][ T8409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.717'. [ 177.162574][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 177.456332][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 177.467371][ T8417] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 177.469709][ T8417] netlink: 152 bytes leftover after parsing attributes in process `syz.3.721'. [ 177.552595][ T8430] netlink: 64 bytes leftover after parsing attributes in process `syz.1.722'. [ 177.966343][ T4935] Bluetooth: hci3: unexpected cc 0x2040 length: 3 > 1 [ 179.707785][ T4935] Bluetooth: hci4: command 0x0405 tx timeout [ 179.864896][ T52] Bluetooth: hci1: unexpected cc 0x2040 length: 2 > 1 [ 179.864962][ T52] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 180.539046][ T8500] __nla_validate_parse: 6 callbacks suppressed [ 180.539067][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 180.540688][ T8502] netlink: 44 bytes leftover after parsing attributes in process `syz.1.745'. [ 181.143258][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 182.213128][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 182.295588][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.757'. [ 182.408040][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 182.715145][ T8551] netlink: 'syz.2.761': attribute type 21 has an invalid length. [ 182.715516][ T8551] netlink: 156 bytes leftover after parsing attributes in process `syz.2.761'. [ 182.938473][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 182.938904][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 182.939264][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 184.206670][ T8580] syz_tun: entered allmulticast mode [ 184.575647][ T8592] ipvlan2: entered allmulticast mode [ 184.575707][ T8592] virt_wifi0: entered allmulticast mode [ 184.704616][ T8592] batman_adv: batadv0: Adding interface: ipvlan2 [ 184.704655][ T8592] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.704720][ T8592] batman_adv: batadv0: Interface activated: ipvlan2 [ 184.926243][ T8598] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 185.160827][ T8602] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 185.574577][ T8608] __nla_validate_parse: 68 callbacks suppressed [ 185.574631][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 186.240444][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 186.338476][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 186.733373][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.355538][ T8662] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 187.692176][ T8662] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 187.951528][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 187.969494][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 188.139017][ T8669] bond5 (unregistering): Released all slaves [ 188.341027][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.798'. [ 188.372948][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.373213][ T8672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.926404][ T8707] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.012082][ T8662] bond3: (slave bridge1): making interface the new active one [ 189.013488][ T8662] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 189.534813][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 190.229272][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 190.481763][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.806'. [ 190.838699][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 192.024328][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 192.634808][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 193.051665][ T8787] netlink: 'syz.1.821': attribute type 2 has an invalid length. [ 193.182111][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 193.868662][ T8795] xt_nat: multiple ranges no longer supported [ 194.357407][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.925230][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 194.998588][ T8828] openvswitch: netlink: Flow key attr not present in new flow. [ 195.164936][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 195.918665][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 195.970208][ T8859] x_tables: duplicate underflow at hook 2 [ 196.428097][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 196.428256][ T5618] Bluetooth: hci1: command 0x0401 tx timeout [ 196.429651][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 197.479211][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 198.073597][ T8894] syzkaller0: entered promiscuous mode [ 198.073792][ T8894] syzkaller0: entered allmulticast mode [ 198.112351][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 198.180919][ T8913] ip_tables: iptables: counters copy to user failed while replacing table [ 198.596465][ T8920] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.736655][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 198.818175][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 199.884634][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 199.884661][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 203.144155][ T8897] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 203.178202][ T8932] syz_tun: entered allmulticast mode [ 203.556287][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.858'. [ 203.572875][ T8952] netlink: 'syz.3.858': attribute type 11 has an invalid length. [ 203.645539][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 203.645562][ T8952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.858'. [ 204.096678][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 204.297224][ T8967] netlink: 100 bytes leftover after parsing attributes in process `syz.1.864'. [ 204.555136][ T8980] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 204.558030][ T8980] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 204.633743][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 205.017326][ T8987] tipc: Started in network mode [ 205.017394][ T8987] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 205.059830][ T8987] tipc: Enabled bearer , priority 10 [ 205.086446][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 205.086510][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 205.141669][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 206.168558][ T1219] tipc: Node number set to 10070698 [ 206.461083][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 207.019822][ T9034] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 207.024520][ T9034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.034558][ T9034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.926743][ T9072] bridge_slave_0: left allmulticast mode [ 208.927075][ T9072] bridge_slave_0: left promiscuous mode [ 208.950011][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.000458][ T9072] bridge_slave_1: left allmulticast mode [ 209.000504][ T9072] bridge_slave_1: left promiscuous mode [ 209.000915][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.130474][ T9072] bond0: (slave bond_slave_0): Releasing backup interface [ 209.270254][ T9086] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 209.301877][ T9072] bond0: (slave bond_slave_1): Releasing backup interface [ 209.389234][ T9072] team0: Port device team_slave_0 removed [ 209.464176][ T9072] team0: Port device team_slave_1 removed [ 209.493544][ T9072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.493599][ T9072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.527235][ T9072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.527294][ T9072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.576857][ T9072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.577203][ T9076] netlink: 'syz.3.892': attribute type 5 has an invalid length. [ 209.953285][ T9086] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 209.990546][ T9094] __nla_validate_parse: 1 callbacks suppressed [ 209.990567][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.896'. [ 210.637002][ T9123] IPv6: addrconf: prefix option has invalid lifetime [ 212.880010][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 213.581474][ T9178] netlink: 144 bytes leftover after parsing attributes in process `syz.2.916'. [ 214.225390][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 215.184659][ T9225] netlink: 36 bytes leftover after parsing attributes in process `syz.4.929'. [ 215.754712][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.932'. [ 215.882137][ T9231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.995495][ T9231] bond0: (slave bond1): Enslaving as an active interface with an up link [ 216.054294][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 216.218820][ T9240] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 216.218876][ T9240] netlink: 'syz.1.933': attribute type 2 has an invalid length. [ 216.244612][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 216.328263][ T9244] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 216.328301][ T9244] netlink: 'syz.1.933': attribute type 2 has an invalid length. [ 216.410280][ T9258] openvswitch: netlink: Flow key attr not present in new flow. [ 216.490912][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 216.490947][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.936'. [ 216.709503][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 216.835427][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 216.956687][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 217.026146][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 217.236263][ T9265] batman_adv: batadv0: Adding interface: syzkaller0 [ 217.236302][ T9265] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.236357][ T9265] batman_adv: batadv0: Interface activated: syzkaller0 [ 217.829999][ T9263] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 218.052724][ T9263] batman_adv: batadv0: Removing interface: syzkaller0 [ 218.476761][ T9288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.745200][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.769230][ T9290] bond2: (slave bond0): making interface the new active one [ 218.822299][ T9290] bond2: (slave bond0): Enslaving as an active interface with an up link [ 218.903840][ T9308] bond2 (unregistering): (slave bond0): Releasing active interface [ 218.950497][ T9308] bond2 (unregistering): Released all slaves [ 219.381825][ T9324] veth0_to_bond: entered allmulticast mode [ 221.094665][ T9372] __nla_validate_parse: 12 callbacks suppressed [ 221.094684][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 221.135869][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 221.138403][ T9368] syzkaller1: entered promiscuous mode [ 221.138578][ T9368] syzkaller1: entered allmulticast mode [ 221.807617][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 221.829955][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 221.858448][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 222.103011][ T9395] netlink: 84 bytes leftover after parsing attributes in process `syz.2.970'. [ 222.721532][ T4935] Bluetooth: hci4: unexpected cc 0x2040 length: 2 > 1 [ 222.721565][ T4935] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 223.337658][ T9424] ip_tables: iptables: counters copy to user failed while replacing table [ 223.509254][ T9429] netlink: 'syz.4.977': attribute type 16 has an invalid length. [ 223.509295][ T9429] netlink: 'syz.4.977': attribute type 17 has an invalid length. [ 224.154347][ T9429] erspan0: entered promiscuous mode [ 224.454522][ T9429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.475836][ T9429] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.541238][ T9429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.029612][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.046490][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.123847][ T9429] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.123878][ T9429] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.195332][ T9429] veth1_vlan: left promiscuous mode [ 225.206177][ T9429] veth0_vlan: left promiscuous mode [ 225.223311][ T9429] veth0_vlan: entered promiscuous mode [ 225.242897][ T9429] veth1_vlan: entered promiscuous mode [ 225.262942][ T9429] veth1_macvtap: left promiscuous mode [ 225.265539][ T9429] veth0_macvtap: left promiscuous mode [ 225.288357][ T9429] veth0_macvtap: entered promiscuous mode [ 225.289619][ T9429] veth1_macvtap: entered promiscuous mode [ 225.316369][ T9429] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 225.318557][ T9429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.319770][ T9429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.359501][ T9429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.406024][ T9429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.434194][ T9429] ip6gre1: left allmulticast mode [ 225.493477][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.493813][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.536968][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.537073][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.006292][ T9415] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 226.118065][ T81] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.166948][ T8686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.172563][ T81] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.172653][ T81] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.506863][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.985'. [ 226.609889][ T9468] netlink: Conntrack attr has 4 unknown bytes [ 226.654944][ T9470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 226.937319][ T9473] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 226.983879][ T9473] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.299940][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.992'. [ 228.089561][ T9498] xt_connbytes: Forcing CT accounting to be enabled [ 228.089871][ T9498] set match dimension is over the limit! [ 228.091701][ T9498] set match dimension is over the limit! [ 228.120630][ T9498] set match dimension is over the limit! [ 228.262239][ T9498] set match dimension is over the limit! [ 228.263348][ T9498] set match dimension is over the limit! [ 228.286348][ T9498] set match dimension is over the limit! [ 228.332002][ T9498] set match dimension is over the limit! [ 228.345796][ T9498] set match dimension is over the limit! [ 228.347109][ T9498] set match dimension is over the limit! [ 228.423092][ T9498] set match dimension is over the limit! [ 228.503093][ T9500] syzkaller1: entered promiscuous mode [ 228.503151][ T9500] syzkaller1: entered allmulticast mode [ 228.641175][ T9505] sctp: [Deprecated]: syz.4.997 (pid 9505) Use of int in max_burst socket option. [ 228.641175][ T9505] Use struct sctp_assoc_value instead [ 228.991088][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.998'. [ 228.991149][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.998'. [ 229.089396][ T9521] netlink: 220 bytes leftover after parsing attributes in process `syz.2.998'. [ 229.089455][ T9521] tc_dump_action: action bad kind [ 229.745593][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 229.763921][ T9535] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 229.764134][ T9535] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 229.776219][ T9535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.440676][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 230.782925][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 230.951671][ T9559] ip_tables: iptables: counters copy to user failed while replacing table [ 231.030293][ T9562] netlink: 'syz.0.1010': attribute type 16 has an invalid length. [ 231.030329][ T9562] netlink: 'syz.0.1010': attribute type 17 has an invalid length. [ 231.376790][ T9562] 0ªX¹¦Dö»: left allmulticast mode [ 231.558115][ T9562] bridge_slave_1: left promiscuous mode [ 231.560438][ T9562] veth0_to_bond: left allmulticast mode [ 231.754432][ T9562] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 231.876923][ T9562] veth4: left allmulticast mode [ 231.921856][ T9562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.955795][ T9562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.968011][ T9530] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 232.670313][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 233.430419][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431174][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431189][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431214][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431239][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431249][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431273][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431283][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431307][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431317][ T9573] tc action pedit 'at' offset 5 out of bounds [ 233.431350][ T9573] 0: reclassify loop, rule prio 0, protocol 800 [ 233.762283][ T9578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.602811][ T9603] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20002 [ 236.164178][ T9640] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 236.182300][ T9640] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.528553][ T9679] ip_tables: iptables: counters copy to user failed while replacing table [ 237.600922][ T9680] netlink: 'syz.3.1045': attribute type 16 has an invalid length. [ 237.600944][ T9680] netlink: 'syz.3.1045': attribute type 17 has an invalid length. [ 238.312620][ T9680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.827721][ T9680] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 238.949317][ T9680] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 239.101426][ T9689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.641336][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 239.767519][ T9706] syz_tun (unregistering): left allmulticast mode [ 240.172583][ T9670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.132549][ T9732] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1060'. [ 241.132610][ T9732] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1060'. [ 241.132640][ T9732] netlink: 'syz.3.1060': attribute type 5 has an invalid length. [ 241.132653][ T9732] netlink: 'syz.3.1060': attribute type 6 has an invalid length. [ 241.132682][ T9732] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1060'. [ 241.709875][ T9747] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 241.972884][ T9757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 242.035389][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'. [ 242.051336][ T9757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 242.315213][ T9759] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 242.328391][ T9759] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 242.626592][ T9764] tipc: Started in network mode [ 242.626625][ T9764] tipc: Node identity 5636cd8885d9, cluster identity 4711 [ 242.627024][ T9764] tipc: Enabled bearer , priority 0 [ 242.650847][ T9764] syzkaller0: entered promiscuous mode [ 242.651029][ T9764] syzkaller0: entered allmulticast mode [ 242.674822][ T9764] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 242.853674][ T9768] tipc: Resetting bearer [ 242.907695][ T9767] netlink: 'syz.1.1070': attribute type 7 has an invalid length. [ 242.907721][ T9767] netlink: 'syz.1.1070': attribute type 5 has an invalid length. [ 242.907731][ T9767] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1070'. [ 242.929593][ T9762] tipc: Resetting bearer [ 243.121324][ T9762] tipc: Disabling bearer [ 243.275824][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 243.695940][ T9742] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 244.609534][ T9799] syz_tun: left allmulticast mode [ 245.086596][ T9815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 246.056489][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 246.183312][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 246.541076][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1092'. [ 246.792230][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 246.792252][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 246.792275][ T9851] netlink: 'syz.0.1092': attribute type 6 has an invalid length. [ 250.782418][ T9861] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 250.785990][ T9861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.797991][ T8689] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.803052][ T8689] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.803122][ T8689] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.803155][ T8689] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.935782][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 250.935823][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 250.935880][ T9851] netlink: 'syz.0.1092': attribute type 6 has an invalid length. [ 251.132100][ T9866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 251.168050][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 251.547116][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 251.870085][ T9891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.038816][ T9894] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1106'. [ 252.675298][ T9904] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1110'. [ 252.677129][ T9904] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1110'. [ 252.705631][ T9904] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1110'. [ 252.731431][ T9904] tipc: Enabled bearer , priority 0 [ 252.748434][ T9904] syzkaller0: entered promiscuous mode [ 252.748491][ T9904] syzkaller0: entered allmulticast mode [ 252.780219][ T9904] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 252.840732][ T9903] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.891503][ T9904] tipc: Resetting bearer [ 253.458504][ T9915] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 253.546713][ T9915] bond2 (unregistering): Released all slaves [ 254.183982][ T1219] tipc: Node number set to 3555708296 [ 254.233360][ T9901] tipc: Resetting bearer [ 254.257264][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 254.313799][ T9901] tipc: Disabling bearer [ 255.490263][ T9949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.533694][ T9952] netlink: 'syz.4.1125': attribute type 10 has an invalid length. [ 255.616364][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 255.784993][ T9960] tipc: Can't bind to reserved service type 0 [ 255.802755][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.839953][ T9962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'. [ 255.890548][ T9969] No such timeout policy "s" [ 255.890586][ T9969] netlink: Failed to associated timeout policy 's' [ 256.492753][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 256.645703][ T9985] syz_tun: entered allmulticast mode [ 256.894136][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 256.970095][ T9994] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.437278][T10009] IPVS: sed: TCP 127.0.0.1:5376 - no destination available [ 257.492626][T10014] ip_tables: iptables: counters copy to user failed while replacing table [ 257.627861][T10014] netlink: 'syz.3.1143': attribute type 21 has an invalid length. [ 257.627992][T10014] netlink: 'syz.3.1143': attribute type 6 has an invalid length. [ 257.628003][T10014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1143'. [ 257.629675][T10014] syzkaller1: entered promiscuous mode [ 257.629729][T10014] syzkaller1: entered allmulticast mode [ 257.722271][T10014] netlink: 'syz.3.1143': attribute type 21 has an invalid length. [ 257.722405][T10014] netlink: 'syz.3.1143': attribute type 6 has an invalid length. [ 257.722435][T10014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1143'. [ 257.759763][T10023] ip_tables: iptables: counters copy to user failed while replacing table [ 258.607071][T10043] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1149'. [ 258.607130][T10043] openvswitch: netlink: Flow key attr not present in new flow. [ 258.858369][T10049] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.881770][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 259.194548][T10044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 261.953989][T10109] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 262.190027][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 262.707809][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 262.707879][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 262.767116][T10129] geneve2: entered promiscuous mode [ 262.802027][T10128] netlink: 'syz.0.1172': attribute type 9 has an invalid length. [ 262.802050][T10128] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 263.181869][T10141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1174'. [ 263.914625][T10155] erspan0: entered promiscuous mode [ 263.995278][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 264.678948][T10171] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 264.689276][T10171] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 265.684934][T10200] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 265.847085][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 265.847107][T10209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1191'. [ 266.164881][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1191'. [ 266.324386][T10207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.336618][ T4935] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 266.366609][T10207] bond3: (slave bond4): making interface the new active one [ 266.414783][T10207] bond3: (slave bond4): Enslaving as an active interface with an up link [ 267.160544][T10232] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 267.658751][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 267.771609][T10239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.021601][T10246] netlink: 'syz.2.1201': attribute type 3 has an invalid length. [ 268.027504][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 268.907020][T10258] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 268.907078][T10258] netlink: 'syz.4.1204': attribute type 268 has an invalid length. [ 268.907109][T10258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1204'. [ 269.309564][T10268] batman_adv: batadv0: Adding interface: syz_tun [ 269.309581][T10268] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.316310][T10268] batman_adv: batadv0: Interface activated: syz_tun [ 269.486461][T10269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1208'. [ 271.101572][T10294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.237630][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 272.562869][ T1124] IPVS: starting estimator thread 0... [ 272.668205][T10321] IPVS: using max 31 ests per chain, 74400 per kthread [ 273.019554][T10327] atomic_op ffff88802a6189e0 conn xmit_atomic 0000000000000000 [ 273.081270][T10330] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1225'. [ 273.114284][T10334] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1225'. [ 273.581399][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 273.766912][T10344] netlink: Failed to add helper -22 [ 273.767022][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.104565][T10354] batman_adv: batadv0: Adding interface: veth0 [ 274.104603][T10354] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.104665][T10354] batman_adv: batadv0: Interface activated: veth0 [ 274.307737][T10353] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1231'. [ 274.308163][T10353] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1231'. [ 274.308196][T10353] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1231'. [ 274.357574][T10354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.357826][T10354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.396256][T10354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.396454][T10354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.474182][T10354] batman_adv: batadv0: Interface deactivated: syz_tun [ 274.474374][T10354] batman_adv: batadv0: Removing interface: syz_tun [ 274.538887][T10354] batman_adv: batadv0: Interface deactivated: veth0 [ 274.539082][T10354] batman_adv: batadv0: Removing interface: veth0 [ 275.137015][T10363] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 275.273207][T10369] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1234'. [ 275.301557][T10369] x_tables: unsorted underflow at hook 3 [ 276.127072][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 276.779634][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.779704][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1244'. [ 280.769630][T10421] __nla_validate_parse: 2 callbacks suppressed [ 280.769672][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1254'. [ 280.826955][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1256'. [ 280.851917][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.872042][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.879297][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.887988][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.890820][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.991605][ T4935] Bluetooth: hci5: command tx timeout [ 283.441581][T10423] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.800551][T10496] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.900733][T10496] netlink: 'syz.0.1271': attribute type 83 has an invalid length. [ 285.068785][ T4935] Bluetooth: hci5: command tx timeout [ 285.679093][T10527] netlink: 'syz.2.1282': attribute type 16 has an invalid length. [ 285.679136][T10527] netlink: 'syz.2.1282': attribute type 17 has an invalid length. [ 286.642195][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1283'. [ 286.665557][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1283'. [ 286.823421][T10527] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 286.961987][T10527] ip6gretap1: left allmulticast mode [ 287.148570][ T4935] Bluetooth: hci5: command tx timeout [ 287.249460][ T8689] bond1: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 287.307494][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 287.455563][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.455755][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.153821][T10563] hsr_slave_1 (unregistering): left promiscuous mode [ 288.249829][T10566] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.227686][ T4935] Bluetooth: hci5: command tx timeout [ 289.415319][T10611] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1293'. [ 290.884136][T10423] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.884562][T10423] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.884890][T10423] bridge_slave_0: entered allmulticast mode [ 290.900324][T10423] bridge_slave_0: entered promiscuous mode [ 290.937788][T10423] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.940522][T10423] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.948832][T10423] bridge_slave_1: entered allmulticast mode [ 290.959337][T10423] bridge_slave_1: entered promiscuous mode [ 291.322712][T10423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.741190][T10184] syz_tun (unregistering): left allmulticast mode [ 291.845565][T10423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.867284][T10654] lo: entered allmulticast mode [ 291.953805][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 292.070565][T10423] team0: Port device team_slave_0 added [ 292.578378][ T8686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.749424][T10423] team0: Port device team_slave_1 added [ 293.055698][T10664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.134233][T10674] batadv0: entered promiscuous mode [ 293.149153][T10674] macsec1: entered promiscuous mode [ 293.152000][T10674] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 293.184866][T10674] batadv0: left promiscuous mode [ 293.189634][T10683] netlink: 'syz.3.1312': attribute type 11 has an invalid length. [ 293.189653][T10683] netlink: 'syz.3.1312': attribute type 4 has an invalid length. [ 293.189663][T10683] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1312'. [ 293.432697][T10423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.432733][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.432789][T10423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.639824][ T8686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.694593][T10423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.694629][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.694681][T10423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.864761][T10691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.115211][ T8686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.223062][T10423] hsr_slave_0: entered promiscuous mode [ 294.239511][T10423] hsr_slave_1: entered promiscuous mode [ 294.246294][T10423] debugfs: 'hsr0' already exists in 'hsr' [ 294.246359][T10423] Cannot create hsr debugfs directory [ 294.790775][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 294.799765][ T8686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.303713][T10713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.446783][T10725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.867759][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 296.871574][T10740] syzkaller0: entered promiscuous mode [ 296.871636][T10740] syzkaller0: entered allmulticast mode [ 297.060082][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 297.578996][ T8686] bridge_slave_1: left allmulticast mode [ 297.586394][ T8686] bridge_slave_1: left promiscuous mode [ 297.626143][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.700002][ T8686] bridge_slave_0: left allmulticast mode [ 297.700067][ T8686] bridge_slave_0: left promiscuous mode [ 297.700520][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.766984][ T8686] pimreg: left allmulticast mode [ 298.664492][ T8686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.703361][ T8686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.707616][ T8686] bond0 (unregistering): Released all slaves [ 298.878187][ T8686] tipc: Disabling bearer [ 298.880382][ T8686] tipc: Left network mode [ 300.224424][T10797] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1342'. [ 300.326250][T10423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 300.368535][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.374705][T10423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.444162][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.783493][T10423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.943145][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.032550][T10423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.157035][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.421797][T10805] vlan3: entered allmulticast mode [ 301.421820][T10805] bond0: entered allmulticast mode [ 301.421833][T10805] bond_slave_0: entered allmulticast mode [ 301.422176][T10805] bond_slave_1: entered allmulticast mode [ 301.866997][T10827] syzkaller0: entered promiscuous mode [ 301.867177][T10827] syzkaller0: entered allmulticast mode [ 302.325606][T10822] can: request_module (can-proto-0) failed. [ 302.498253][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 303.359988][T10845] tipc: Enabling of bearer rejected, failed to enable media [ 303.755558][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 304.065224][ T8686] hsr_slave_0: left promiscuous mode [ 304.081565][ T8686] hsr_slave_1: left promiscuous mode [ 304.094701][T10870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 304.096549][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.096637][ T8686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.144918][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.144975][ T8686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.168677][ T8686] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 304.168734][ T8686] batman_adv: batadv0: Removing interface: ipvlan2 [ 304.465746][ T8686] veth1_macvtap: left promiscuous mode [ 304.466512][ T8686] veth0_macvtap: left promiscuous mode [ 304.488886][ T8686] veth1_vlan: left promiscuous mode [ 304.492629][ T8686] veth0_vlan: left promiscuous mode [ 304.886610][ T8683] IPVS: starting estimator thread 0... [ 304.977871][T10887] IPVS: using max 32 ests per chain, 76800 per kthread [ 306.224562][ T8686] team0 (unregistering): Port device team_slave_1 removed [ 306.272377][ T8686] team0 (unregistering): Port device team_slave_0 removed [ 306.932178][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 307.244338][T10423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.471354][T10423] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.504235][T10912] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 307.504269][T10912] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 307.504303][T10912] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 307.555059][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.555239][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.570389][T10910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.669777][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1364'. [ 307.816880][T10912] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 308.121788][T10915] syz_tun (unregistering): left allmulticast mode [ 308.155567][T10912] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 308.179163][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.179293][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.336168][ T1219] infiniband syz1: ib_query_port failed (-19) [ 309.252423][T10423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.439881][ T8689] smbdirect: ib_dev[syz1] removed [ 309.551208][T10912] siw: device registration error -19 [ 309.806532][T10942] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 310.532075][T10942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.290587][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 312.399461][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1375'. [ 312.475444][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 313.581884][T10423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.200513][T11062] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 316.148633][T10423] veth0_vlan: entered promiscuous mode [ 316.385080][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 316.559448][T10423] veth1_vlan: entered promiscuous mode [ 317.001662][T10423] veth0_macvtap: entered promiscuous mode [ 317.040023][T10423] veth1_macvtap: entered promiscuous mode [ 317.106022][T10423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.154395][T11091] netlink: 'syz.0.1395': attribute type 8 has an invalid length. [ 317.211576][T10423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.234391][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.564172][T11096] netlink: 'syz.0.1395': attribute type 8 has an invalid length. [ 317.838258][T11092] netlink: 'syz.0.1395': attribute type 12 has an invalid length. [ 317.838319][T11092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1395'. [ 317.926283][T11105] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1397'. [ 317.957007][T11100] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 317.969353][T11100] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 317.970376][T11102] netlink: 'syz.0.1395': attribute type 12 has an invalid length. [ 317.970416][T11102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1395'. [ 318.089403][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.094102][ T1124] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.095431][ T1124] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.098586][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.643466][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 319.010985][T11114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.194068][T11118] macvlan4: entered promiscuous mode [ 319.194283][T11118] macvlan4: entered allmulticast mode [ 319.206320][T11118] bond2: entered promiscuous mode [ 319.215610][T11118] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 319.247154][T11118] bond2: left promiscuous mode [ 319.636058][T11129] syzkaller1: entered promiscuous mode [ 319.636114][T11129] syzkaller1: entered allmulticast mode [ 320.131420][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.131462][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.562996][T11156] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 320.563053][T11156] sctp: [Deprecated]: syz.3.1404 (pid 11156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.563053][T11156] Use struct sctp_sack_info instead [ 320.693587][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 320.834943][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.835007][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.594951][T11164] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.928974][T11171] netlink: 'syz.5.1252': attribute type 16 has an invalid length. [ 321.929034][T11171] netlink: 'syz.5.1252': attribute type 17 has an invalid length. [ 323.731631][T11190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1411'. [ 324.245376][T11222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1418'. [ 324.498428][T11220] netlink: 'syz.0.1417': attribute type 2 has an invalid length. [ 324.498451][T11220] netlink: 'syz.0.1417': attribute type 1 has an invalid length. [ 324.797778][T11227] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 324.800223][T11227] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.984467][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 325.220482][T11237] bridge3: entered allmulticast mode [ 325.451731][T11249] veth1_to_bond: entered allmulticast mode [ 325.814396][T11255] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 325.843288][ T5279] veth1_vlan: left promiscuous mode [ 326.095049][T11247] veth1_to_bond: left allmulticast mode [ 326.479024][T11264] sctp: [Deprecated]: syz.0.1428 (pid 11264) Use of int in max_burst socket option. [ 326.479024][T11264] Use struct sctp_assoc_value instead [ 326.712024][T11268] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 326.848080][T11231] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 326.887954][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 327.036281][T11268] bond5 (unregistering): Released all slaves [ 327.939395][T11285] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 328.461327][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 328.597470][T11295] bridge5: entered allmulticast mode [ 328.710086][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 329.886889][T11329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'. [ 330.195468][T11335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1446'. [ 330.343942][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 330.937553][T11347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 331.212744][T11307] raw_sendmsg: syz.3.1440 forgot to set AF_INET. Fix it! [ 331.426018][T11361] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 331.533397][T11361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.834271][T11361] bond5: (slave veth0_to_bond): making interface the new active one [ 331.926167][T11361] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 332.705902][T11386] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 332.926099][T11368] bond5: entered promiscuous mode [ 332.926124][T11368] veth0_to_bond: entered promiscuous mode [ 332.927160][T11368] bond5: entered allmulticast mode [ 332.927173][T11368] veth0_to_bond: entered allmulticast mode [ 333.975038][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'. [ 334.256706][T11412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 334.770734][T11420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1466'. [ 335.605075][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 335.647371][T11441] bridge_slave_1: left allmulticast mode [ 335.647440][T11441] bridge_slave_1: left promiscuous mode [ 335.648251][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.699218][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 335.849896][T11441] bridge_slave_0: left allmulticast mode [ 335.850254][T11441] bridge_slave_0: left promiscuous mode [ 335.851196][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.902489][T11467] Bluetooth: MGMT ver 1.23 [ 337.411969][T11476] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 337.950937][T11489] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 338.518396][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 338.523437][ T4935] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 338.790085][T11511] xt_NETMAP: bad MAP_IPS. [ 339.372716][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 339.788266][ T4935] Bluetooth: hci4: command 0x0405 tx timeout [ 339.894110][T11534] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 340.053690][T11546] sit0: entered promiscuous mode [ 340.167919][T11546] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 340.168158][T11546] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1492'. [ 340.588741][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 340.850725][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1497'. [ 341.538759][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.539682][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.540571][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.541434][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.542502][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.543362][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.544209][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.545056][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 341.545898][T11593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 342.312846][T11608] ip_tables: iptables: counters copy to user failed while replacing table [ 342.652407][T11607] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.975730][T11646] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 344.294394][T11646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.583469][ T3807] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 344.617684][T11649] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 344.714613][ T3807] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 344.845102][T11657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.264445][T11712] __nla_validate_parse: 59 callbacks suppressed [ 347.264499][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 347.523378][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 347.810497][T11720] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 348.457186][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 348.457224][T11738] netlink: 'syz.5.1538': attribute type 5 has an invalid length. [ 348.457239][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1538'. [ 348.570583][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 348.665278][T11738] geneve2: entered promiscuous mode [ 348.665318][T11738] geneve2: entered allmulticast mode [ 348.817645][T11743] bridge3: entered allmulticast mode [ 348.838052][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 348.838437][ T43] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 348.840308][ T43] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 348.840499][ T43] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 351.095614][T11801] netlink: 'syz.4.1549': attribute type 4 has an invalid length. [ 351.330731][T11791] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 351.936534][T11813] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1555'. [ 354.265692][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 354.421757][T11860] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 354.730989][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'. [ 355.872086][T11898] bond6: (slave dummy0): Removing an active aggregator [ 355.936820][T11898] bond6: (slave dummy0): Releasing backup interface [ 356.803679][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 357.303541][T11939] xt_time: unknown flags 0x68 [ 358.208027][T11944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.109773][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 359.109862][T11969] netlink: 'syz.4.1586': attribute type 9 has an invalid length. [ 359.109876][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 359.265600][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 359.383209][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 359.383245][T11969] netlink: 'syz.4.1586': attribute type 9 has an invalid length. [ 359.383259][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 359.518246][ T8688] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.542426][ T8688] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.542581][ T8688] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.542650][ T8688] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.309500][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1592'. [ 361.169362][T12000] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.956885][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 361.988535][T12021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1599'. [ 362.068057][T12025] block nbd2: not configured, cannot reconfigure [ 363.718804][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 364.180484][T12073] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 366.123346][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 366.991305][T12153] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 367.238569][T12160] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 367.368740][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 367.516854][T12165] netlink: 'syz.2.1628': attribute type 8 has an invalid length. [ 367.686266][T12165] smc: removing ib device rxe0 [ 368.131985][T12172] batman_adv: batadv0: Adding interface: veth0 [ 368.132022][T12172] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.132083][T12172] batman_adv: batadv0: Interface activated: veth0 [ 368.288602][T12172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 368.955257][T12165] smbdirect: ib_dev[rxe0] removed [ 369.412692][T12190] ip_tables: iptables: counters copy to user failed while replacing table [ 369.444979][T12187] openvswitch: netlink: IP tunnel dst address not specified [ 369.521229][T12184] netlink: 'syz.4.1632': attribute type 2 has an invalid length. [ 369.825886][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1633'. [ 370.591042][T12184] : entered promiscuous mode [ 370.680596][T12209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1635'. [ 370.876444][ T8686] ------------[ cut here ]------------ [ 370.876460][ T8686] conntrack cleanup blocked for 60s [ 370.876470][ T8686] WARNING: net/netfilter/nf_conntrack_core.c:2505 at nf_conntrack_cleanup_net_list+0x21f/0x360, CPU#0: kworker/u8:15/8686 [ 370.904690][ T8686] Modules linked in: [ 370.908923][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 370.920428][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 370.931927][ T8686] Workqueue: netns cleanup_net [ 370.937228][ T8686] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x360 [ 370.944216][ T8686] Code: 4c 89 ef e8 b3 69 35 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 65 89 c4 f7 45 31 e4 e9 a5 fe ff ff e8 58 89 c4 f7 48 8d 3d 21 ae 86 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 370.964069][ T8686] RSP: 0018:ffffc900063ef8b0 EFLAGS: 00010293 [ 370.970341][ T8686] RAX: ffffffff8a038728 RBX: dffffc0000000000 RCX: ffff888069babe80 [ 370.978872][ T8686] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: ffffffff918a3550 [ 370.987750][ T8686] RBP: 0000000000000001 R08: ffff888031f6fc03 R09: 1ffff110063edf80 [ 370.996091][ T8686] R10: dffffc0000000000 R11: ffffed10063edf81 R12: 0000000100001af0 [ 371.004800][ T8686] R13: ffffc900063efa50 R14: ffffc900063efa50 R15: 0000000100001af4 [ 371.013436][ T8686] FS: 0000000000000000(0000) GS:ffff888123abd000(0000) knlGS:0000000000000000 [ 371.022593][ T8686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.029315][ T8686] CR2: 000000110c322133 CR3: 000000007dac8000 CR4: 00000000003526f0 [ 371.037416][ T8686] Call Trace: [ 371.041037][ T8686] [ 371.043999][ T8686] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 371.051185][ T8686] ops_undo_list+0x4b4/0x8d0 [ 371.056367][ T8686] ? __pfx_ops_undo_list+0x10/0x10 [ 371.062481][ T8686] ? idr_destroy+0x218/0x290 [ 371.067148][ T8686] ? do_raw_spin_unlock+0xf5/0x200 [ 371.074101][ T8686] cleanup_net+0x572/0x810 [ 371.078815][ T8686] ? __pfx_cleanup_net+0x10/0x10 [ 371.083784][ T8686] ? rcu_is_watching+0x16/0xb0 [ 371.088685][ T8686] ? process_scheduled_works+0x97a/0x1630 [ 371.094441][ T8686] process_scheduled_works+0xc3d/0x1630 [ 371.100517][ T8686] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.106538][ T8686] ? assign_work+0x3cf/0x5d0 [ 371.111242][ T8686] worker_thread+0xa47/0xfb0 [ 371.115890][ T8686] kthread+0x38b/0x480 [ 371.120057][ T8686] ? __pfx_worker_thread+0x10/0x10 [ 371.125393][ T8686] ? __pfx_kthread+0x10/0x10 [ 371.130279][ T8686] ret_from_fork+0x514/0xb70 [ 371.134904][ T8686] ? __pfx_ret_from_fork+0x10/0x10 [ 371.140339][ T8686] ? __switch_to+0xc89/0x1420 [ 371.145144][ T8686] ? __pfx_kthread+0x10/0x10 [ 371.150372][ T8686] ret_from_fork_asm+0x1a/0x30 [ 371.155916][ T8686] [ 371.159602][ T8686] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 371.167010][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 371.177297][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 371.187849][ T8686] Workqueue: netns cleanup_net [ 371.192831][ T8686] Call Trace: [ 371.196419][ T8686] [ 371.199564][ T8686] vpanic+0x56d/0xa60 [ 371.204446][ T8686] ? __pfx__printk+0x10/0x10 [ 371.209167][ T8686] ? __pfx_vpanic+0x10/0x10 [ 371.213889][ T8686] ? is_bpf_text_address+0x292/0x2b0 [ 371.219381][ T8686] ? is_bpf_text_address+0x26/0x2b0 [ 371.225150][ T8686] panic+0xc5/0xd0 [ 371.228910][ T8686] ? __pfx_panic+0x10/0x10 [ 371.233456][ T8686] ? ret_from_fork_asm+0x1a/0x30 [ 371.239329][ T8686] __warn+0x315/0x4c0 [ 371.243433][ T8686] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 371.249704][ T8686] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 371.255877][ T8686] __report_bug+0x276/0x570 [ 371.260404][ T8686] ? __pfx___schedule+0x10/0x10 [ 371.265269][ T8686] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 371.271491][ T8686] ? __pfx___report_bug+0x10/0x10 [ 371.276544][ T8686] ? nf_conntrack_cleanup_net_list+0x136/0x360 [ 371.282725][ T8686] report_bug_entry+0x19b/0x290 [ 371.287599][ T8686] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 371.293772][ T8686] ? nf_conntrack_cleanup_net_list+0x224/0x360 [ 371.299985][ T8686] handle_bug+0xce/0x200 [ 371.304264][ T8686] exc_invalid_op+0x1a/0x50 [ 371.308801][ T8686] asm_exc_invalid_op+0x1a/0x20 [ 371.314027][ T8686] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x360 [ 371.320899][ T8686] Code: 4c 89 ef e8 b3 69 35 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 65 89 c4 f7 45 31 e4 e9 a5 fe ff ff e8 58 89 c4 f7 48 8d 3d 21 ae 86 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 371.340696][ T8686] RSP: 0018:ffffc900063ef8b0 EFLAGS: 00010293 [ 371.346962][ T8686] RAX: ffffffff8a038728 RBX: dffffc0000000000 RCX: ffff888069babe80 [ 371.354984][ T8686] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: ffffffff918a3550 [ 371.363109][ T8686] RBP: 0000000000000001 R08: ffff888031f6fc03 R09: 1ffff110063edf80 [ 371.371104][ T8686] R10: dffffc0000000000 R11: ffffed10063edf81 R12: 0000000100001af0 [ 371.381125][ T8686] R13: ffffc900063efa50 R14: ffffc900063efa50 R15: 0000000100001af4 [ 371.390975][ T8686] ? nf_conntrack_cleanup_net_list+0x218/0x360 [ 371.397173][ T8686] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 371.403274][ T8686] ops_undo_list+0x4b4/0x8d0 [ 371.407905][ T8686] ? __pfx_ops_undo_list+0x10/0x10 [ 371.413045][ T8686] ? idr_destroy+0x218/0x290 [ 371.417651][ T8686] ? do_raw_spin_unlock+0xf5/0x200 [ 371.422888][ T8686] cleanup_net+0x572/0x810 [ 371.427323][ T8686] ? __pfx_cleanup_net+0x10/0x10 [ 371.432275][ T8686] ? rcu_is_watching+0x16/0xb0 [ 371.437062][ T8686] ? process_scheduled_works+0x97a/0x1630 [ 371.442803][ T8686] process_scheduled_works+0xc3d/0x1630 [ 371.448511][ T8686] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.454528][ T8686] ? assign_work+0x3cf/0x5d0 [ 371.459155][ T8686] worker_thread+0xa47/0xfb0 [ 371.463804][ T8686] kthread+0x38b/0x480 [ 371.467907][ T8686] ? __pfx_worker_thread+0x10/0x10 [ 371.473069][ T8686] ? __pfx_kthread+0x10/0x10 [ 371.477684][ T8686] ret_from_fork+0x514/0xb70 [ 371.482311][ T8686] ? __pfx_ret_from_fork+0x10/0x10 [ 371.487478][ T8686] ? __switch_to+0xc89/0x1420 [ 371.492182][ T8686] ? __pfx_kthread+0x10/0x10 [ 371.496800][ T8686] ret_from_fork_asm+0x1a/0x30 [ 371.501600][ T8686] [ 371.505197][ T8686] Kernel Offset: disabled [ 371.509630][ T8686] Rebooting in 86400 seconds..