last executing test programs: 43.905674315s ago: executing program 4 (id=3688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair(0x2b, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x9, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "88dcfbcde16adec8", "7d2296094897fc27d5aefa33500ddbbb", "fc471024", "64ed5e54d748638d"}, 0x28) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 43.722794852s ago: executing program 3 (id=3689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000001600030600ffff"], 0x2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000540)=@getae={0x134, 0x1f, 0x101, 0x70bd2b, 0x25dfdbff, {{@in6=@empty, 0x4d5, 0xa, 0x6c}, @in6=@remote, 0xfffffc01, 0x3504}, [@iptfs_init_delay={0x8, 0x27, 0x8}, @algo_auth_trunc={0xec, 0x14, {{'sha3-256-generic\x00'}, 0x500, 0x40, "e2db795a0626ce1da4cef4fd057b6011dc3b9bc7419424eda0824dc66a6706c0306913b189784f3c89b89068cf9e0d712df28dba507045aa703a815fd650a92052a572fe0263cd059f6a17bc9956201222f839ae41bc552acb28305b9b731341abec0a652ff5610e9998d9eb0772eef463b8b845212827e4badcb27132253b93710681be944713abd8d30ae293f55170d16c120cd604a88c8abd9a8dce6e147d"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8084}, 0x26048050) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=r3, @ANYRES64, @ANYRES32=0x0, @ANYRES32=r4, @ANYRESOCT=r3], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x4}}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) 43.503229212s ago: executing program 4 (id=3692): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000240), 0xc, &(0x7f0000000c80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="50030000b7de6ef178cfca3adacd1142023746a22f4062b01b46b9e13df4b7f239770cf12693f8966478d34670dd", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf25080000007c020280e801038050000180040003000800020047504c00040003002f000200f6cdbf7a9f149c3119a8e56b941eff7778520d1db22932f0a10a1ad33393f36a19eb3958ac2f401e80aaec00080001000e000000040003001000018009000200243a5be000000000840101800400030063010200736b6369706865720536d25a1fc989160329f74fbaf5782437b3315e246bda49c5edd36e2ee7445e597c503debcefea0f08b7caa134b6aaf82798147e07b7dd5989e864bafa9622c933bcee1ea721cc023170fbb1164f2ea9a7befcb38f9163660061162cb88f70da4ea49fb5f3eac3078d9d4dc84aec076652dc3b073e6000000000000797f78504191db434b3fca658f452eb018b08fe11be39a5de2aebc465ef1c6085a25c15473cafa608758eac16f901a12cf746df93787502074d50c338742ede99e8026226aee76f917c7bf6b1aff17c19630a992a5cadb9e5cd34f746bf2e770b46bc869a48ecd8b351bd09cfdc8f6508592cbbfc4055e55393b81ea337ac1bdbe4dd0381b9e0b3a1d9551350079fe97f77585a5ad8449aa7ff7f7c08de50c4598f5f050bf6bcc357e3adb965a00430069e1345de92d9ab592544647983347e312bf58f0d3d6a042d762b572465ce7bcf10f81d32ec22833ae08d60008000200215e23000800010008000000080002005e295b0088000380380001800800020024e229000c00020008000000a89aaa14080002005e5c24000800010000020000080001000500000006000200255e00002c00018008000100850000000400030004000300080001000300000008000100cf20000008000100ff03000020000180080001000300000008000100b70b00000500020000000000040003000800020015100000940002808f000500b6ecbf518c431ffc4a95aa2902641a5daac4269751f3163f691429db48632dc5e92ca382dd4992b30f9d5fb646015a052d3bd50bf3a541dff89a9c71f89cdb44cb75324366550761c0fc82487ad57e8c680e60ed40854a8b7710d3be8c8c297e7a371249ab0028c964b40596854d17f22721f5b0f7b1917e21337ca98dfeab45d77fc4cc1e8a5d98915754002c000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r1, @ANYBLOB="0800030003000000"], 0x350}, 0x1, 0x0, 0x0, 0x20000000}, 0x4881) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000540)="ebe3a0e9796cfd164781f4a75803e2be", 0x10}], 0x1, 0x0, 0x0, 0x20048044}], 0x1, 0x400c800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) close(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) write(r2, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b00080001000b0000000800040001000000", 0x58) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000000)='%pK \x00'}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x800e, 0x3, 0x1ff, 0x7, 0xdff7, 0xb, r11}, 0x20) syz_emit_ethernet(0xe, &(0x7f00000018c0)={@random="a581e4cba1fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@generic={0x88f7}}}, 0x0) 43.374754891s ago: executing program 0 (id=3693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "7f000001"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) (async) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)="01020304", 0x4, 0x0, &(0x7f0000000700)={0x2, 0x1234, @local}, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x1234, @local}, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37}, 0x48) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r11, 0x36, 0x0, 0x965, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r10, &(0x7f0000000100), 0x0}, 0x20) (async) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r13}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 42.923513038s ago: executing program 3 (id=3696): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x10001, r1, 0x4}, 0x38) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) connect$rds(r2, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa) 42.423520438s ago: executing program 3 (id=3700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xcda0, 0x40800}}, 0x20}}, 0x0) 42.351149816s ago: executing program 0 (id=3702): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095"], 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 42.158319368s ago: executing program 4 (id=3704): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x2, {0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x32) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="006f61dc73ab0ff6d5e8c4527b8cf218b99a1cd8bc56734992bbcc63238422c14280435d16678aef3598ff9e6a05567af7e2c6b2c8cc18394d10976a55e64000100000000000003ac5b938b5f4a0001cf3ab3f9b5388e12c6781040554a8e8b13654c68f6418a2cacbfea7e9d3ac483cc58deed3ac729c1a4d15ac3b17b7bc084d6cbdc3489f9fc45d68a4108f8cf2e79e552330cd8fc9a3dce85c5b49e72f10c6a7930e53570073fd452d6e4d8e0225f9597f52569bbb93c2073cf55a319f1127f3bd420000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x400400c0) (async) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendfile(r0, r1, 0x0, 0xffffffff000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}}, 0x0) (async, rerun: 64) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000040)={0x7fff, 0xc6c, 0x40, 0x1e59, 0x3, 0x0, 0x6}) (rerun: 64) 42.012469574s ago: executing program 3 (id=3705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="66adc84a309fd68ae9dcf15cf9a419aeac0a00000000000061116c00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0x3, 0x5}, {0xe, 0x80}, {0x3, 0xffffffda}, {0xb, 0x4}]}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000c00)=""/4096, 0x4c, 0x1000, 0x1, 0x200, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket(0x0, 0x5, 0x80000000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000880)={r2, &(0x7f0000000780)=']-jq*:#\x00', 0x6200, &(0x7f00000007c0)={@align=0x8, {0xb, 0x3, 0x4, 0x1}}, 0x7, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x93}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb00040c"], 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x24800241}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xcc, r6, 0x424, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfea}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004001}, 0x4010) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20028}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="11002cbd8400fedbdf351c00000008000b0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004050) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000001c40)=0x5, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042b5f00"/18, @ANYRES32=r10, @ANYBLOB="0c00990008000000230000000800350006000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8041) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0], 0xa8}}, 0x4048000) 41.871446485s ago: executing program 1 (id=3707): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) sendmsg$kcm(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="5460ce7813", 0x5}], 0x1}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 41.538759875s ago: executing program 3 (id=3708): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}], &(0x7f0000000080)='syzkaller\x00', 0x7ff, 0xde, &(0x7f0000000180)=""/222, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0xfffffffb, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket(0x10, 0x803, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f00"], 0x0, 0x3a, 0x0, 0x6}, 0x28) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r8, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r3, r4, 0x4, r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{0x0, 0x9, 0xb, 0x8, 0xff, 0x5, 0x2, 0x7, 0x88d0, 0x80, 0xffff0001, 0x5, 0x9, 0x0, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001b40)={0x0, r11, "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", "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"}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x20000000) 41.472633996s ago: executing program 0 (id=3709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000240)=""/221, 0xa9}], 0x3}, 0x400000}], 0x1, 0x20000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a002, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) close(r3) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 41.414944637s ago: executing program 1 (id=3710): r0 = socket(0x1, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x42}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x7, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0, @ANYBLOB="1dbcdd9f457b7b06e16d69304ea1a88f2d255d46cb2bc577cc3a1545c253f9903c01220b4c2ca15d2e904ec9f67e4b"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000000)) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, 0x13, 0x4, 0x70bd25, 0x25dfdbff, {0x2b, 0x8, 0x7, 0x4, {0x4e22, 0x4e23, [0x8, 0x7, 0x3, 0x80], [0x5, 0x2, 0x3, 0x159f], r3, [0x400, 0x8]}, 0xb7b, 0xa}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "e83cc8e65867c69281ff1cbda5b85daf7f02de30d08a85027250d160a095e8cf4e0841b46c2415f3b6cc2eece2c08a06f08e87b7767b702ab92415e3c926429cfb5f1b310037c8c377860ac6ee0199878784d718212d8997c1e2423512863890e62addd75b6d042809adf89070efe382105570f5d535e7f0e1e7f8aa7dab2e51038bd49a624aaa7c0e3fa2c7e11b7d2c02d2b295580ed3b8bb5543bcdf229470a6510268879a"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "3cd4915895876dbf6f531e7b879de2691801be786cc620b12345ae84b7e6da8ca1774ee734be8f0493658f0f362ae340fdca70641c489a69e0d208de961620e26170753aa738b7b1cf6c"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "27508aed59ae80e17f34725ad4bf42365151b2e9b6435b746ea33b93846a35b623c229cad0891232"}]}, 0x174}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 41.148365458s ago: executing program 2 (id=3711): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000122) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) 41.13743399s ago: executing program 1 (id=3712): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040)='#@[(#+\x00', 0x805c2, &(0x7f0000000100)={@align=0x8, {0x1ff, 0x3, 0x2, 0xd98}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6}) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x100000001) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x108, 0x4, 0x5, 0x2, 0x2, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e030000000000000003000000000000080000000000000000000000020400000000000035873572d6fcfd8c00000000616100"], 0x0, 0x52}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f00000003c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff}, @call, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000007700000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000d80000010c0002847f7b4199fa6fed2b30983db89e4ff745dff8da44f2b7da63eeb86ade18c5dca6ccf98a49139307249dff16a7cecac58db731695a86c5ac83eb2da1b1226ad81b955351204d1c3a16c2a7c0c94bb4c111cead039b30e2e5272155299fa0ff00dd7715b28f3a826fd8cf878f1c2084cd523b008298b8a698544f849b"], 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg(r2, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) 40.999102416s ago: executing program 4 (id=3713): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @remote, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.902739526s ago: executing program 2 (id=3714): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001200010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00210100bf0dcf6208001d00f8ffffff140003007866726d30"], 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000240)) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706110800000000000000000a0000040500010007000000612d8066605179d35d5a4118611e36ff6fbab11aedc34ef5abdf1e5f6665fe8b65dd67acab077303ed6ece42e26f01c4a836e4c2aeba0b9d2a7fb7c01323e6c48d402fdf04eda3032fb9b80d268cbf101cd35871520a2f964a000188e2fb802359190b0bf087f044768ad6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, 0x0) sendto$packet(r11, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000001100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r13, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1782924ff47630b6) sendmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000100)=@ax25={{0x3, @default, 0x7}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="1699dee649460728b60ab3bde26e85b98346a273924e9050940bbe270c043fed573a7f4f893dd63764a607edddfa9d8541f4cd1b74dfd1bcf578e9689ad2843fddb318b5ea3a75de5fddde31712fa6be826ec73a5bb27c46f52fcde90bfbc9f4d42b2df8e82924620bd66b7f19e262ba8bebcffe4ed1d79f5a6aff1fb3d21331972da1f54353f22e91a68ac1dae365b3e2e6d2b0ba3485db3842e75bd37415987065", 0xa2}, {&(0x7f0000001140)="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", 0x150}, {&(0x7f0000000400)="63c5292606392d241933897320777e952a5361571e8b0b23a19e2595b182d2a98f566a627800bdbfc488b066b1170b55e733731de8aa7d06352b76b67c8329bee1ae07076b0853beb9f01e4e140af383db9fb2d025f1989042cb0a18a9d78edf54ec19a0cde25019d284084fbe30358342652a51d136007959a8f8c41609397c34cc8bea823ba32e", 0x88}, {&(0x7f00000004c0)="c19696151a96762917abd677c59a0387d44e8c16d46b9810bd6f3e3b0dab2f5c33477b6cc86487fb6aa09e5551bda453c6d3d44d5cb56c94087eae2533020938bea916b2e391caaa87700ee451df4a3f5bfe", 0x52}], 0x4}}, {{&(0x7f0000000580)=@nfc_llcp={0x27, r12, 0x1, 0x6, 0xf, 0x0, "03561dddfe6bf4de479dd474e59f7af8c71395a1eea2fcb1288c30a9bb9b4724564204f28ef81294ab1d59cab43f1ff87b581742eba1272f0f999aff2cf137", 0x10d}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)="e146c01e10203bc869ff400eacf79510a5044a05828c74befe02e575", 0x1c}], 0x1}}, {{&(0x7f0000000680)=@can, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000700)="716ba08bc5d94ab8ec08e95a4e06e2f4bd8bc541c73499fce71547d85c8af9af478486796762c2e5ecd0f2769cd224810a9c40c9fb14a191d9d12b41f7658ceba51b9d1c445eaf0003b610644ef320d52e3cba3b4b695ce6890097fded861cade0e740d5683e9e57f0fb7f8a6cf8665a21ca550f5c3d9a0f27ddb1c2674df0f30a0f72859ae1cd2537", 0x89}, {&(0x7f00000007c0)="7cea6d", 0x3}, {&(0x7f0000000800)="dbe2d5f7ee2c63c33b7bbc82d25bef1462d5bfcc0348525ca26b231a6fb299286fa4f3f4f71f48016e8755d01befd740fa560d9b542ae65d51342e4eae1bbabb83018edb4560bd365bfd7749f4a91866a7b433ae08de42883b4300ed50ebcf", 0x5f}, {&(0x7f0000000880)="f73ea0e353df0a198d6e85d6138d121dbc92897b03537ad871cf", 0x1a}, {&(0x7f00000008c0)="7dbb67a7aab5f5fee0b757b341d54e71927e9fc0905afb1420616b30bd69a542a6c2611cb0a6e9013fc84cc15d70b90dc1831a804b2bf50aa9a89dfe82a4e93ac5c176ef4838b1b07bea9ba0dce844238d1f73be35071736f941c9ed3958bb6136045bb833c12f9dbb25e2c85da9ebdad9e29baa9fdb7c7aaac49d", 0x7b}, {&(0x7f0000000940)="53ddcdca593bb2718743c7f86d7c4f98fe4541ab4cf3d8896b6ddb51c9a68d0fabf64e33877f351ccc46dc3549545188805fa618f9a9ecbbec027fa383ea7b06d1f5e60fbad379", 0x47}, {&(0x7f0000000b00)="b9f9107054aec8e137beda1f6cdab1559c7ef9d2ec2f9323112eba4ad59dabdaf4b0c873aaa9ec32f4b1801ee9cd98f5e78b27735723c5f60c086b34ff7d2ba23362147370fc75c691bfdfddc69cc1b5369dd339f901f45e91cd4608c0d168a80cb6711134086e28cf1a805f1e961cb6a247b3b207cceb214430ae6e71ea017d0f84df5f120c1654da50874f390024ba9ad639a183d0a6d0e8cee6a85832ee2d7ed29e53e7e8a040e7af6cbd7b19ae008f32c1b4ecdeb3871aa2deaf4b30b44da6ecbc03c3b8ec6e7ae90eb8eab2743d532b47619c24c73b007cf7b64fbe126b04d93e50c33bf09237239c", 0xeb}, {&(0x7f0000000c00)="0dc7c666a141baacaa4bb5b5743643fce2cab4420ad0da6e10e1676ba99ca09e9fbab9bc75fbdd126b28bd1a93d10e993d7590173b7ba5481fa886e7ed864d1def077d5fd3e3e25d4215a298a57516081599646fe0f88f47fa06f063160689296488f3689062218cb73049924dbb232659f81034151d2da31a5a054601f5119e14f1e34fb65f62e911", 0x89}, {&(0x7f0000000cc0)="e9", 0x1}, {&(0x7f0000000d00)="d42237dee0793462ed40f8eded54f8e8f6aee3a087931041f831052fff0572f2897a76d142384f888e770253470f8eea025bbd8c2b460249cb1d63641aedc8dbf31f24a6ec750b352329da403a5ef644ea3fa7adf2b230f1d856f19c63f027eecc2349e148545a733b2dbd67f50cadcdc778a97e9c269792dccf874d2ac8eda82effeaa687832d505f1412bf778d8f5179d8182e4cddabc1a65c0d27e167b32639c593dc57add30a0d6c5a790619c75abec88b503e6edb0d6623a3", 0xbb}], 0xa, &(0x7f0000000e80)=[{0x18, 0x1, 0x1311aa72, "0b95"}, {0xf8, 0x6, 0xdb54, "11e96deeef23b1ba95d57cf6770906014dc1c72c88bf91d792bc7908a1abc261084e53cb7ce708fb8c98f7d186e82f2c45fcd4ed819f97ecbd239021b60c5b66ab58661952f01fbecec6e535a3462b837c6a30d40696914e486bfb53c500fb37632cb5fb6183a9e9b47f1bbc357c8dfbec10c831a5b9a49513dbbe4ae3d5a3fc4cbd02cd02b84112571657fdc6618f50f4efb13022411b9360ac9473de4c21ae6049be83d5044f58e8364ebafaaf5d1bde9e2da2260c00ab44c70d1e794c543d90049cc6c7ba7a910e82653593fa88d6ea5a175729cbc05d2b6de40bf205ab82037be37592"}, {0x20, 0x107, 0x1, "6ed216ad729ea2d286"}], 0x130}}], 0x3, 0x0) 40.901648634s ago: executing program 0 (id=3715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@setlink={0x30, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x12301}, [@IFLA_LINKMODE={0x5, 0x11, 0xe2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x30}}, 0x0) 40.845804126s ago: executing program 1 (id=3716): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000000b14432e28bd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000000b14432e28bd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000004000000000000000000000000000000100005800c00018008e403000100000008000a", @ANYRES16=r4], 0x5c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000004000000000000000000000000000000100005800c00018008e403000100000008000a", @ANYRES16=r4], 0x5c}}, 0x0) 40.755791205s ago: executing program 0 (id=3717): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @loopback, 0x7f}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f0000000440)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYBLOB="330f227d5bec", @ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 40.566620398s ago: executing program 4 (id=3718): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x3, 0xc06a2f6, 0x8, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x9, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r10, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 40.395837351s ago: executing program 2 (id=3719): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000001f0f000000000300060000000e0002000000e0000009000c000000000000020001000029648fc000000200000100030005000000000002000000e10000010000"], 0x50}}, 0x0) getpeername$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x20) r4 = socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000001500)=""/4110, &(0x7f0000000000)=0x100e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000006a0000022bbd7000fddbdf25000000000000000008000500", @ANYRES32=r2, @ANYBLOB="0823000a0001f11d854e000b00"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6, r11, 0x6a98047402e98331, 0x70bd2c, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 40.361031389s ago: executing program 0 (id=3720): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x15) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x90) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x800) close(r4) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0x3}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=ANY=[@ANYBLOB="142bc5032d0007012bbd7000fedbdf25087c0000"], 0x14}}, 0x4008030) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0xe0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) 40.134780214s ago: executing program 1 (id=3721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x401}]}, 0x38}}, 0x0) 40.088085061s ago: executing program 4 (id=3722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x30}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r2], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040054) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x2b, r2}) 39.939391335s ago: executing program 2 (id=3723): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0x4, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) 39.863027516s ago: executing program 3 (id=3724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="000826bd7000fcdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="aef9fedf80d2d55c768b3c4c4f548a254540a05af509e20a96dea74a6e9134220b152549c628397ebe92a650a981f1546ac292d6efa4a218cca4c2c779cd23e9a4b7a92b581504bf1d7f79b1", @ANYRES32=r3, @ANYBLOB="b80002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000104000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400810b0000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400fbffffff08000100", @ANYRES32=r4, @ANYBLOB="04000280"], 0x130}, 0x1, 0x0, 0x0, 0x8081}, 0x40001) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r5, 0x271, 0x10001, 0x7, 0xbe4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00002c0f000104010000000041e3531000"/28], 0x1c}}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002340)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048c1}, 0x4000080) (async) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) 39.796678768s ago: executing program 2 (id=3725): pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x2, 0x0, 0xd5a, 0x6, 0x6, 0x4, 0x2, 0xfffffffffffffffe}], 0x1, 0x38, 0x0, 0x7}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0600000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="070006"], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000d9000000000000000000b0729793ba8941d35b528b"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4bd}, 0x94) 39.624477645s ago: executing program 1 (id=3726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={r5}, &(0x7f0000000740)=0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="4c00000011000f14001600020000020002000000200000", 0x17) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x48, r1, 0x91b, 0x70b527, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2004c048) 38.815950113s ago: executing program 2 (id=3727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="4cf7", 0x2}], 0x1}}], 0x1, 0x4040001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2023f, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x9}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x4004044) 0s ago: executing program 32 (id=3720): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x15) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x90) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x800) close(r4) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0x3}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=ANY=[@ANYBLOB="142bc5032d0007012bbd7000fedbdf25087c0000"], 0x14}}, 0x4008030) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0xe0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) kernel console output (not intermixed with test programs): ink: 20 bytes leftover after parsing attributes in process `syz.0.2127'. [ 322.355240][T14186] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 322.355260][T14186] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2125'. [ 322.518764][T14191] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2129'. [ 322.587127][T14194] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 322.695078][T14198] xfrm0: Caught tx_queue_len zero misconfig [ 322.879827][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 323.092587][T14214] syzkaller0: entered promiscuous mode [ 323.092608][T14214] syzkaller0: entered allmulticast mode [ 323.097112][T14218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2139'. [ 323.351402][T14228] bond8: option resend_igmp: invalid value (32767) [ 323.351424][T14228] bond8: option resend_igmp: allowed values 0 - 255 [ 323.376183][T14228] bond8 (unregistering): Released all slaves [ 323.556020][T14242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2144'. [ 323.562593][T14245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2145'. [ 323.562958][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 323.870019][T14257] vcan0: tx address claim with different name [ 324.424346][T14288] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 325.211600][T14305] ip6tnl0: Caught tx_queue_len zero misconfig [ 325.289146][T14337] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 325.453870][T14347] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 325.502227][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 325.601272][T14337] bond0: entered promiscuous mode [ 325.607918][T14337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.628918][T14345] netlink: 'syz.0.2172': attribute type 3 has an invalid length. [ 326.208562][T14371] ip6gre4: entered promiscuous mode [ 326.208584][T14371] ip6gre4: entered allmulticast mode [ 326.235717][T14371] netlink: 'syz.1.2179': attribute type 6 has an invalid length. [ 327.064390][T14414] __nla_validate_parse: 10 callbacks suppressed [ 327.064409][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 327.064421][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2191'. [ 327.118485][T14416] netlink: 'syz.1.2190': attribute type 4 has an invalid length. [ 327.118506][T14416] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2190'. [ 327.120688][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 327.264274][T14416] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.275555][T14423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2192'. [ 327.291506][T14416] bond8: entered allmulticast mode [ 327.292916][T14416] bond0: (slave bond8): Enslaving as a backup interface with a down link [ 327.294852][ T31] audit: type=1107 audit(1790641002.224:8): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 328.084365][T14449] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 328.510004][T14475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2207'. [ 328.567142][T14476] Unknown options in mask 4 [ 328.624661][T14479] x_tables: duplicate underflow at hook 3 [ 329.506566][T14530] sctp: [Deprecated]: syz.3.2225 (pid 14530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.506566][T14530] Use struct sctp_sack_info instead [ 329.586293][T14528] tipc: Enabled bearer , priority 0 [ 329.657329][T14533] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2225'. [ 329.754944][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2229'. [ 329.778439][T14540] syzkaller0: left promiscuous mode [ 329.778459][T14540] syzkaller0: left allmulticast mode [ 329.925001][T14548] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 329.929208][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 330.039612][T14555] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.2230'. [ 330.065566][T14548] bond9: option xmit_hash_policy: invalid value (64) [ 330.089712][T14548] bond9 (unregistering): Released all slaves [ 330.267273][T14576] netlink: 'syz.2.2234': attribute type 2 has an invalid length. [ 330.497286][T14567] bond8: peer notification delay (25) is not a multiple of miimon (1285), value rounded to 0 ms [ 330.498619][T14567] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 330.528038][T14567] bond8 (unregistering): Released all slaves [ 330.677638][T14565] bond8: peer notification delay (25) is not a multiple of miimon (1285), value rounded to 0 ms [ 330.677667][T14565] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 330.680596][T14565] bond8 (unregistering): Released all slaves [ 330.839152][T14565] bond8: peer notification delay (25) is not a multiple of miimon (1285), value rounded to 0 ms [ 330.839181][T14565] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 330.845942][T14565] bond8 (unregistering): Released all slaves [ 331.195350][T14615] netlink: 'syz.3.2240': attribute type 1 has an invalid length. [ 332.026189][T14668] netlink: 'syz.3.2251': attribute type 1 has an invalid length. [ 332.354699][T14677] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 332.356167][T14678] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 332.358059][T14677] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 332.535109][T14689] lo speed is unknown, defaulting to 1000 [ 332.711088][T14709] Bluetooth: hci0: unsupported parameter 5135 [ 332.711109][T14709] Bluetooth: hci0: unsupported parameter 8192 [ 332.711121][T14709] Bluetooth: hci0: unsupported parameter 5135 [ 332.711132][T14709] Bluetooth: hci0: unsupported parameter 8192 [ 332.875974][T14715] tap0: tun_chr_ioctl cmd 1074025676 [ 332.875998][T14715] tap0: owner set to 0 [ 333.076977][T14721] __nla_validate_parse: 14 callbacks suppressed [ 333.076996][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2266'. [ 333.826446][T14747] Unsupported ieee802154 address type: 0 [ 334.037331][T14754] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2275'. [ 334.364901][T14764] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2278'. [ 334.411062][T14764] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 334.440903][T14768] syzkaller0: entered promiscuous mode [ 334.440923][T14768] syzkaller0: entered allmulticast mode [ 334.541774][T14772] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2280'. [ 335.084316][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'. [ 335.127258][T14797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2288'. [ 335.623074][T14814] netlink: 'syz.0.2295': attribute type 3 has an invalid length. [ 335.635763][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2296'. [ 335.651837][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2296'. [ 335.664470][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2296'. [ 335.796859][T14828] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2294'. [ 336.136942][T14840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.226163][T14840] xt_addrtype: ipv6 does not support BROADCAST matching [ 336.493233][T14851] 8021q: adding VLAN 0 to HW filter on device team1 [ 336.528935][T14854] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 336.529113][T14854] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 336.588420][T14862] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 336.705476][T14871] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 337.022431][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 337.780991][T14915] team0: left allmulticast mode [ 337.781038][T14915] team_slave_0: left allmulticast mode [ 337.781057][T14915] team_slave_1: left allmulticast mode [ 337.783522][T14915] team0: left promiscuous mode [ 337.783540][T14915] team_slave_0: left promiscuous mode [ 337.783745][T14915] team_slave_1: left promiscuous mode [ 337.785098][T14915] bridge0: port 3(team0) entered disabled state [ 337.789497][T14915] bridge_slave_1: left allmulticast mode [ 337.789516][T14915] bridge_slave_1: left promiscuous mode [ 337.789734][T14915] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.813548][T14915] bridge_slave_0: left allmulticast mode [ 337.813569][T14915] bridge_slave_0: left promiscuous mode [ 337.813789][T14915] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.950324][T14907] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 338.424017][T14933] __nla_validate_parse: 9 callbacks suppressed [ 338.424036][T14933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2327'. [ 338.756727][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 338.756748][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2330'. [ 340.157384][T15012] ip_tables: iptables: counters copy to user failed while replacing table [ 342.242066][T15038] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 342.252667][T15031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2344'. [ 342.887325][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 342.913168][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 343.027975][T15067] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 343.112778][T15083] pim6reg: entered allmulticast mode [ 343.470903][T15091] bond12: entered promiscuous mode [ 343.470942][T15091] bond12: entered allmulticast mode [ 343.471342][T15091] 8021q: adding VLAN 0 to HW filter on device bond12 [ 343.478474][T15109] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2363'. [ 343.511484][T15110] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2363'. [ 343.804033][T15118] ip6t_hbh: unknown flags 38 [ 343.874620][T15123] netlink: 'syz.0.2364': attribute type 16 has an invalid length. [ 343.874640][T15123] netlink: 'syz.0.2364': attribute type 17 has an invalid length. [ 343.960675][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2368'. [ 343.960703][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2368'. [ 344.027759][T15131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.067300][T15123] gretap0: left promiscuous mode [ 344.114571][T15134] ip_tables: iptables: counters copy to user failed while replacing table [ 344.136419][T15123] batadv_slave_0: left promiscuous mode [ 344.154449][T15123] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 344.155589][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 344.641294][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 344.703447][T15149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2374'. [ 344.979625][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'. [ 345.023411][ T52] block nbd1: Receive control failed (result -107) [ 345.195576][T15183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2380'. [ 345.409111][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'. [ 345.799215][T15222] netlink: 'syz.4.2389': attribute type 2 has an invalid length. [ 346.208307][T15237] netlink: 'syz.2.2396': attribute type 1 has an invalid length. [ 346.515516][T15249] veth7: entered allmulticast mode [ 346.572368][T15249] bond6: (slave veth7): Enslaving as an active interface with a down link [ 346.665537][T15258] bond5: (slave veth0_to_bond): Releasing active interface [ 346.665564][T15258] veth0_to_bond: left promiscuous mode [ 346.665833][T15258] veth0_to_bond: left allmulticast mode [ 346.693846][T15258] bond6: (slave veth0_to_bond): making interface the new active one [ 346.711459][T15258] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 347.037851][T15281] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 347.213766][T15292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 347.793200][T15319] syzkaller1: entered promiscuous mode [ 347.793223][T15319] syzkaller1: entered allmulticast mode [ 348.165624][T15328] netlink: 'syz.1.2413': attribute type 1 has an invalid length. [ 348.385410][T15333] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 348.527003][T15343] __nla_validate_parse: 4 callbacks suppressed [ 348.527045][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'. [ 348.657208][T15345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2419'. [ 348.903620][T15360] openvswitch: netlink: Unknown key attributes 1 [ 348.927941][T15356] netlink: 'syz.3.2423': attribute type 4 has an invalid length. [ 349.094809][T15371] tipc: Started in network mode [ 349.094831][T15371] tipc: Node identity 2, cluster identity 4711 [ 349.094842][T15371] tipc: Node number set to 2 [ 349.276283][T15386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2430'. [ 349.347037][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 349.386328][T15393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2428'. [ 349.423868][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2431'. [ 349.484378][T15397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.485795][T15397] IPv6: NLM_F_CREATE should be set when creating new route [ 349.829083][T15401] syzkaller0: entered promiscuous mode [ 349.829106][T15401] syzkaller0: entered allmulticast mode [ 349.889455][T15416] xt_hashlimit: size too large, truncated to 1048576 [ 350.204264][T15425] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 350.205139][T15426] netlink: 'syz.1.2441': attribute type 1 has an invalid length. [ 350.559030][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'. [ 352.238241][T15443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2444'. [ 352.393548][T15458] syzkaller0: entered promiscuous mode [ 352.393569][T15458] syzkaller0: entered allmulticast mode [ 352.657749][T15475] xt_ecn: cannot match TCP bits for non-tcp packets [ 353.123845][T15491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'. [ 353.263096][T15499] syzkaller0: entered promiscuous mode [ 353.263127][T15499] syzkaller0: entered allmulticast mode [ 353.265647][T15502] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.335638][T15504] bond9: option resend_igmp: invalid value (32767) [ 353.335654][T15504] bond9: option resend_igmp: allowed values 0 - 255 [ 353.336833][T15504] bond9 (unregistering): Released all slaves [ 353.424810][T15508] bond9: option resend_igmp: invalid value (32767) [ 353.424831][T15508] bond9: option resend_igmp: allowed values 0 - 255 [ 353.427655][T15508] bond9 (unregistering): Released all slaves [ 353.517824][T15513] ip_tables: iptables: counters copy to user failed while replacing table [ 353.893994][T15532] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2463'. [ 353.894118][T15534] netlink: 'syz.3.2464': attribute type 16 has an invalid length. [ 353.894177][T15534] netlink: 'syz.3.2464': attribute type 17 has an invalid length. [ 353.897331][T15532] x_tables: duplicate entry at hook 1 [ 353.923347][T15534] wg1: left promiscuous mode [ 353.973883][T15534] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 354.111074][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'. [ 354.224941][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2467'. [ 355.289856][T15589] ip6tnl0: Caught tx_queue_len zero misconfig [ 355.581493][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.581517][ C1] bridge0: topology change detected, propagating [ 356.217588][T15639] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 356.310993][T15639] bond7: entered promiscuous mode [ 356.311410][T15639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 356.412837][T15612] netlink: 'syz.3.2489': attribute type 61 has an invalid length. [ 356.415114][T15612] ip_tables: iptables: counters copy to user failed while replacing table [ 356.631467][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2496'. [ 356.893060][T15658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2498'. [ 357.064608][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 357.064737][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.152061][T15666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.628625][T15682] syzkaller0: entered promiscuous mode [ 357.628646][T15682] syzkaller0: entered allmulticast mode [ 357.752222][T15682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2503'. [ 357.753417][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 357.943055][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 358.233792][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 358.308939][T15701] veth11: entered allmulticast mode [ 359.104010][T15748] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 359.150821][T15751] sctp: [Deprecated]: syz.2.2519 (pid 15751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.150821][T15751] Use struct sctp_sack_info instead [ 359.542404][T15769] openvswitch: netlink: Duplicate or invalid key (type 0). [ 359.547120][T15769] ip6t_frag: unknown flags 6 [ 359.798127][T15785] __nla_validate_parse: 1 callbacks suppressed [ 359.798144][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 359.947303][T15788] openvswitch: netlink: Message has 12 unknown bytes. [ 360.534999][T15820] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.676063][T15827] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2542'. [ 360.713717][T15819] bond9: entered promiscuous mode [ 360.713740][T15819] bond9: entered allmulticast mode [ 360.932317][T15843] Bluetooth: hci0: unsupported parameter 5135 [ 360.932336][T15843] Bluetooth: hci0: unsupported parameter 8192 [ 360.932348][T15843] Bluetooth: hci0: unsupported parameter 5135 [ 360.932358][T15843] Bluetooth: hci0: unsupported parameter 8192 [ 360.967838][T15838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2546'. [ 361.498436][T15863] xt_CT: No such helper "snmp_trap" [ 361.535818][T15869] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2554'. [ 361.666587][T15876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2555'. [ 361.668620][T15877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2555'. [ 361.668944][T15877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2555'. [ 361.669278][T15876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2555'. [ 361.669565][T15876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2555'. [ 361.696249][T15880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2556'. [ 362.313756][T15911] netlink: 'syz.2.2565': attribute type 8 has an invalid length. [ 362.327631][T15913] netlink: 'syz.2.2565': attribute type 8 has an invalid length. [ 363.522787][T15912] bond6: (slave dummy0): Releasing active interface [ 363.998224][T15974] openvswitch: netlink: EtherType 2 is less than min 600 [ 364.405066][T15994] nbd: illegal input index -8454144 [ 364.456171][T15996] nbd3: detected capacity change from 0 to 63 [ 364.469986][T15996] block nbd3: NBD_DISCONNECT [ 364.489585][T15996] block nbd3: Disconnected due to user request. [ 364.495657][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.495786][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 364.498698][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.498724][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 364.499762][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.499795][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 364.500565][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.500589][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 364.502055][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.502081][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 364.505561][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.505587][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 364.505677][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.505699][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 364.505802][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.505823][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 364.505924][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.505945][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 364.506050][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.506071][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 364.518447][ T7978] ldm_validate_partition_table(): Disk read failed. [ 364.522877][ T7978] Dev nbd3: unable to read RDB block 0 [ 364.527871][ T7978] nbd3: unable to read partition table [ 364.570449][T15996] block nbd3: shutting down sockets [ 364.592224][ T7978] ldm_validate_partition_table(): Disk read failed. [ 364.598477][ T7978] Dev nbd3: unable to read RDB block 0 [ 364.599328][ T7978] nbd3: unable to read partition table [ 365.157320][T16017] Cannot find add_set index 2 as target [ 365.214431][T16019] __nla_validate_parse: 12 callbacks suppressed [ 365.214451][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 365.777480][T16049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 365.973122][T16060] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2604'. [ 366.047647][T16068] netlink: 'syz.0.2606': attribute type 1 has an invalid length. [ 366.047668][T16068] netlink: 'syz.0.2606': attribute type 3 has an invalid length. [ 366.047680][T16068] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2606'. [ 366.050030][T16068] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2606'. [ 366.560146][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'. [ 366.882540][T16105] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 366.970517][T16113] ip_tables: iptables: counters copy to user failed while replacing table [ 366.974865][T16111] netlink: 'syz.4.2619': attribute type 49 has an invalid length. [ 367.278314][T16111] ip6gretap0: entered promiscuous mode [ 367.278337][T16111] ip6gretap0: entered allmulticast mode [ 367.382631][ T6330] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 367.384127][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 367.682015][T16132] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 367.990495][T16155] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2627'. [ 367.995574][T16155] netlink: 'syz.3.2627': attribute type 2 has an invalid length. [ 368.971389][T16181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2631'. [ 369.020403][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 369.374784][T16192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2633'. [ 369.597519][T16192] netlink: 'syz.3.2633': attribute type 29 has an invalid length. [ 369.598547][T16196] netlink: 'syz.3.2633': attribute type 29 has an invalid length. [ 369.752918][T16200] netlink: 'syz.4.2634': attribute type 12 has an invalid length. [ 370.081497][ T5278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.092617][ T5278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.187901][T16219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.274998][T16224] x_tables: duplicate underflow at hook 1 [ 370.369040][T16229] syzkaller1: entered promiscuous mode [ 370.369062][T16229] syzkaller1: entered allmulticast mode [ 370.803722][T16240] ip_tables: iptables: counters copy to user failed while replacing table [ 370.808994][T16245] ip_tables: iptables: counters copy to user failed while replacing table [ 370.839972][T16240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2643'. [ 370.868817][T16248] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2646'. [ 370.913538][T16252] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 371.056327][T16263] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 371.082734][T16252] bond8: entered promiscuous mode [ 371.085923][T16252] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.169207][T16263] bond9: entered promiscuous mode [ 371.171001][T16263] 8021q: adding VLAN 0 to HW filter on device bond9 [ 371.584442][T16297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.638197][T16297] bond2: (slave bond0): Releasing backup interface [ 371.649075][T16299] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2657'. [ 371.725135][T16297] bridge_slave_1: left allmulticast mode [ 371.725161][T16297] bridge_slave_1: left promiscuous mode [ 371.725364][T16297] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.787740][T16297] bond0: (slave bond_slave_0): Releasing backup interface [ 371.823284][T16297] bond0: (slave bond_slave_1): Releasing backup interface [ 371.862421][T16297] bond1: (slave geneve2): Releasing active interface [ 371.867270][T16307] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.925711][T16312] lo: entered promiscuous mode [ 371.926641][T16312] tunl0: entered promiscuous mode [ 371.932401][T16307] ip_tables: iptables: counters copy to user failed while replacing table [ 371.933453][T16312] gre0: entered promiscuous mode [ 371.938294][T16312] gretap0: entered promiscuous mode [ 371.938956][T16312] erspan0: entered promiscuous mode [ 371.943096][T16307] netlink: 'syz.4.2658': attribute type 4 has an invalid length. [ 371.946209][T16312] ip_vti0: entered promiscuous mode [ 372.149543][T16324] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2663'. [ 372.601951][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 372.602122][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 372.608341][ T7182] IPVS: starting estimator thread 0... [ 372.710220][T16353] IPVS: using max 30 ests per chain, 72000 per kthread [ 372.831629][T16361] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 372.898170][T16360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2674'. [ 373.003424][T16364] bridge0: entered promiscuous mode [ 373.037049][T16364] bond8: (slave bridge0): making interface the new active one [ 373.037527][T16364] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 373.134567][T16366] bridge7: entered promiscuous mode [ 373.174213][T16366] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 373.174493][T16375] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2675'. [ 373.284428][T16387] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 373.575576][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2684'. [ 373.576659][T16405] netlink: 'syz.0.2684': attribute type 1 has an invalid length. [ 373.638212][T16416] netlink: 'syz.0.2684': attribute type 1 has an invalid length. [ 373.640675][T16411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2686'. [ 373.853730][T16219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.086664][ T5278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.468984][T16456] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 374.475779][T16457] netlink: 'syz.1.2693': attribute type 2 has an invalid length. [ 374.554165][T16459] netlink: 'syz.2.2696': attribute type 29 has an invalid length. [ 375.100374][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.226403][T16485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.265685][T16487] netlink: 'syz.3.2700': attribute type 4 has an invalid length. [ 375.545445][T16494] Cannot find del_set index 4 as target [ 375.646483][T16501] x_tables: duplicate underflow at hook 1 [ 375.895550][T16509] netlink: 'syz.0.2704': attribute type 7 has an invalid length. [ 376.446045][T16531] veth0: entered promiscuous mode [ 376.639874][T16530] veth0: left promiscuous mode [ 376.890756][T16485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 377.098606][T16560] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 377.098689][T16560] gretap2: entered promiscuous mode [ 377.098704][T16560] gretap2: entered allmulticast mode [ 377.246445][T16570] openvswitch: netlink: IP tunnel TTL not specified. [ 377.246478][T16570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.248649][T16570] ip_tables: iptables: counters copy to user failed while replacing table [ 377.566300][T16572] __nla_validate_parse: 3 callbacks suppressed [ 377.566319][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2722'. [ 377.618279][T16583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2724'. [ 377.668717][T16578] tipc: Enabled bearer , priority 0 [ 377.683184][T16576] tipc: Disabling bearer [ 377.737537][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2726'. [ 377.737558][T16592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2726'. [ 378.008882][T16485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.087468][ T5278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.206016][T16611] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 378.207784][T16607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'. [ 378.263441][T16612] netlink: 'syz.4.2730': attribute type 2 has an invalid length. [ 378.263462][T16612] netlink: 'syz.4.2730': attribute type 2 has an invalid length. [ 378.299239][T16617] netlink: 'syz.4.2730': attribute type 2 has an invalid length. [ 378.299261][T16617] netlink: 'syz.4.2730': attribute type 2 has an invalid length. [ 378.625276][ T1309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.027674][T16651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.276364][T16665] netlink: 'syz.0.2741': attribute type 10 has an invalid length. [ 379.715442][T16665] : (slave bridge0): Enslaving as an active interface with an up link [ 379.749110][T16674] tipc: Resetting bearer [ 379.858335][T16674] tipc: Disabling bearer [ 380.150521][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.165459][T16684] syzkaller0: entered promiscuous mode [ 380.165480][T16684] syzkaller0: entered allmulticast mode [ 381.087224][T16750] netlink: 'syz.0.2753': attribute type 11 has an invalid length. [ 381.087245][T16750] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2753'. [ 381.303842][T16756] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 381.303862][T16756] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2754'. [ 381.309293][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2754'. [ 383.797584][T16787] netlink: 'syz.4.2760': attribute type 7 has an invalid length. [ 383.797603][T16787] netlink: 'syz.4.2760': attribute type 3 has an invalid length. [ 383.797619][T16787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2760'. [ 384.207578][T16807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2765'. [ 384.223884][T16808] netlink: 'syz.3.2766': attribute type 4 has an invalid length. [ 384.636919][T16824] lo speed is unknown, defaulting to 1000 [ 384.645062][T16825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2772'. [ 384.706145][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'. [ 384.756221][T16828] netlink: 'syz.0.2771': attribute type 9 has an invalid length. [ 385.079513][T16847] bond10: option min_links: invalid value (18446744073709551614) [ 385.079537][T16847] bond10: option min_links: allowed values 0 - 2147483647 [ 385.180302][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.224443][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2776'. [ 385.224465][T16851] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2776'. [ 385.286839][ T5278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.290622][T16219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.458331][T16847] bond10 (unregistering): Released all slaves [ 385.650878][T16851] veth9: entered promiscuous mode [ 385.792460][T16861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2779'. [ 385.827525][T16870] Bluetooth: MGMT ver 1.23 [ 386.003910][T16877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.163707][T16881] tap0: tun_chr_ioctl cmd 1074025676 [ 386.163729][T16881] tap0: owner set to 0 [ 386.166739][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 386.398420][T16902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2785'. [ 386.422776][T16902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2785'. [ 386.477274][T16901] netlink: 'syz.4.2786': attribute type 2 has an invalid length. [ 390.220282][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 395.260456][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.300396][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 401.297296][T16219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.340341][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.158899][T16925] syzkaller0: entered promiscuous mode [ 409.158922][T16925] syzkaller0: entered allmulticast mode [ 409.205292][T16925] tipc: Enabled bearer , priority 0 [ 409.229383][T16922] tipc: Resetting bearer [ 409.286161][T16922] tipc: Disabling bearer [ 409.305334][T16937] ip_tables: iptables: counters copy to user failed while replacing table [ 409.506099][T16938] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 409.858899][T16965] __nla_validate_parse: 1 callbacks suppressed [ 409.858918][T16965] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2805'. [ 409.922592][T16970] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2807'. [ 409.963748][T16970] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2807'. [ 410.380363][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.765179][T17013] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 411.329748][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.343433][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.351657][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.351748][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2823'. [ 411.358771][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.367919][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.422382][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.425207][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.427037][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.445929][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.448850][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.485533][T17040] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2825'. [ 411.573788][T17035] openvswitch: netlink: Message has 8 unknown bytes. [ 412.133874][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.136678][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.176159][T17071] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 412.203781][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 412.312634][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.312667][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.654497][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.654533][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.018490][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.018535][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.157105][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2834'. [ 413.501111][ T5618] Bluetooth: hci5: command tx timeout [ 414.037598][T17031] lo speed is unknown, defaulting to 1000 [ 414.135999][T17148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2842'. [ 414.231744][T17151] netlink: 'syz.2.2844': attribute type 10 has an invalid length. [ 414.311306][T17151] team0: Device veth0_macvtap failed to register rx_handler [ 414.527119][T17157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2845'. [ 414.606493][ T50] bridge_slave_1: left allmulticast mode [ 414.606547][ T50] bridge_slave_1: left promiscuous mode [ 414.608438][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.749598][T17171] openvswitch: netlink: Invalid VLAN frame [ 414.810236][ T50] bridge_slave_0: left allmulticast mode [ 414.810263][ T50] bridge_slave_0: left promiscuous mode [ 414.810589][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.013893][ T50] pimreg: left allmulticast mode [ 415.420352][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 415.577070][T17196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2848'. [ 415.580228][ T5618] Bluetooth: hci5: command tx timeout [ 415.614148][ T50] bond6 (unregistering): (slave ip6gretap0): Releasing active interface [ 415.821883][ T50] batman_adv: batadv0: Removing interface: gretap1 [ 415.938764][ T50] bond1 (unregistering): Released all slaves [ 415.949647][ T50] bond2 (unregistering): Released all slaves [ 415.991654][ T50] bond0 (unregistering): (slave bond8): Releasing backup interface [ 415.992056][ T50] bond8 (unregistering): left allmulticast mode [ 415.992229][ T50] bond0 (unregistering): Released all slaves [ 415.999696][ T50] bond3 (unregistering): Released all slaves [ 416.012184][ T50] bond4 (unregistering): Released all slaves [ 416.030442][ T50] bond5 (unregistering): Released all slaves [ 416.059490][ T50] bond6 (unregistering): Released all slaves [ 416.079524][ T50] bond7 (unregistering): Released all slaves [ 416.095516][ T50] bond8 (unregistering): Released all slaves [ 416.109457][ T50] bond9 (unregistering): Released all slaves [ 416.156354][T17150] lo speed is unknown, defaulting to 1000 [ 416.168204][T17186] tipc: Resetting bearer [ 416.176835][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 416.403973][T17214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2851'. [ 416.429932][ T50] ovs-dp0: left promiscuous mode [ 416.575327][ T50] tipc: Left network mode [ 416.925350][T17227] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 417.573412][T17238] netlink: Invalid conntrack timeout [ 417.573444][T17238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.662591][ T5618] Bluetooth: hci5: command tx timeout [ 418.232923][T17262] sctp: [Deprecated]: syz.0.2863 (pid 17262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.232923][T17262] Use struct sctp_sack_info instead [ 418.386573][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 419.605499][T17322] netlink: 'syz.2.2875': attribute type 1 has an invalid length. [ 419.740515][ T52] Bluetooth: hci5: command tx timeout [ 419.837446][T17331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2876'. [ 420.071912][T17304] bond13: option mode: invalid value (10) [ 420.076420][T17304] bond13 (unregistering): Released all slaves [ 420.460699][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 420.495787][ T50] hsr_slave_0: left promiscuous mode [ 420.496531][ T50] hsr_slave_1: left promiscuous mode [ 420.499686][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.499734][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.519924][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.519944][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.234048][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 421.291701][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 421.291735][T17348] netlink: 'syz.2.2878': attribute type 6 has an invalid length. [ 421.291760][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 421.446074][T17031] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.446224][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.446432][T17031] bridge_slave_0: entered allmulticast mode [ 421.448320][T17031] bridge_slave_0: entered promiscuous mode [ 421.456515][T17351] openvswitch: netlink: Unknown key attributes 1 [ 421.484113][T17031] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.484207][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.484317][T17031] bridge_slave_1: entered allmulticast mode [ 421.485865][T17031] bridge_slave_1: entered promiscuous mode [ 421.659388][T17031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.681668][T17031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.743807][T17031] team0: Port device team_slave_0 added [ 421.749567][T17031] team0: Port device team_slave_1 added [ 421.872450][T17031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.872466][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.872484][T17031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.874224][T17031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.874236][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.874253][T17031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.963271][T17031] hsr_slave_0: entered promiscuous mode [ 421.965416][T17031] hsr_slave_1: entered promiscuous mode [ 422.022886][T17372] bridge0: Caught tx_queue_len zero misconfig [ 422.055461][ T50] IPVS: stop unused estimator thread 0... [ 424.420531][T17351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.447921][T17031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.502570][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.537144][T17031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.583980][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.651596][T17031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.672872][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.673932][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 424.676540][T17384] ip_tables: iptables: counters copy to user failed while replacing table [ 424.763399][T17031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.782974][T17031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.143437][T17031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.197713][T17031] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.263538][T15427] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.263678][T15427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.307669][T11779] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.307808][T11779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.500223][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 425.656542][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2895'. [ 426.117586][T17443] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 426.117607][T17443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2900'. [ 426.117621][T17443] NCSI netlink: No device for ifindex 0 [ 426.117914][T17444] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 426.117928][T17444] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2900'. [ 426.117940][T17444] NCSI netlink: No device for ifindex 0 [ 426.762535][T17481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2904'. [ 426.847114][T17483] nbd: must specify a size in bytes for the device [ 426.999906][T17031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.014261][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 427.414244][T17031] veth0_vlan: entered promiscuous mode [ 427.418420][T17508] netlink: 'syz.2.2911': attribute type 1 has an invalid length. [ 427.518544][T17508] bond9: entered promiscuous mode [ 427.518938][T17508] 8021q: adding VLAN 0 to HW filter on device bond9 [ 427.526867][T17031] veth1_vlan: entered promiscuous mode [ 427.638241][T17031] veth0_macvtap: entered promiscuous mode [ 427.682981][T17031] veth1_macvtap: entered promiscuous mode [ 427.815384][T17031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.856152][T17031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.951711][T12270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.953988][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.954030][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.954064][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.298357][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.298379][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.310681][T17537] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 428.419034][T17537] 8021q: adding VLAN 0 to HW filter on device bond10 [ 428.429330][T17549] openvswitch: netlink: EtherType 548 is less than min 600 [ 428.576949][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.576970][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.841903][T17569] netlink: 'syz.3.2919': attribute type 12 has an invalid length. [ 428.846567][T17569] netlink: 'syz.3.2919': attribute type 12 has an invalid length. [ 429.457665][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2922'. [ 429.457698][T17582] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 429.615710][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.624961][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.631438][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.645967][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.647964][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.962883][T17582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.123198][T17616] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 430.123651][T17616] tipc: Resetting bearer [ 430.419610][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 430.454134][T17628] bond4: entered allmulticast mode [ 430.454516][T17628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.540331][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 430.616067][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2929'. [ 430.878918][T17650] dvmrp8: entered allmulticast mode [ 431.332093][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2934'. [ 431.332983][T17602] lo speed is unknown, defaulting to 1000 [ 431.580892][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 431.677776][T17699] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2938'. [ 431.677801][T17699] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2938'. [ 431.699981][T17699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.740349][ T52] Bluetooth: hci4: command tx timeout [ 432.499292][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2946'. [ 432.523375][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 432.523487][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2945'. [ 432.523502][T17731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2945'. [ 432.574113][T17732] ipvlan4: entered allmulticast mode [ 432.784478][T17734] veth0: entered promiscuous mode [ 432.784905][T17737] veth0: left promiscuous mode [ 433.016493][T17748] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2949'. [ 433.103915][T17750] bond13: option fail_over_mac: invalid value (16) [ 433.110539][T17750] bond13 (unregistering): Released all slaves [ 433.820940][ T52] Bluetooth: hci4: command tx timeout [ 434.186567][T16219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 434.228340][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 434.228364][T17801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2961'. [ 434.228378][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 434.228578][T17801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2961'. [ 434.228592][T17801] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2961'. [ 434.732859][T17824] bridge4: entered promiscuous mode [ 434.732881][T17824] bridge4: entered allmulticast mode [ 435.288433][T17602] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.289430][T17602] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.289573][T17602] bridge_slave_0: entered allmulticast mode [ 435.297091][T17602] bridge_slave_0: entered promiscuous mode [ 435.305479][T17602] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.305582][T17602] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.305710][T17602] bridge_slave_1: entered allmulticast mode [ 435.317107][T17602] bridge_slave_1: entered promiscuous mode [ 435.395280][T17869] netlink: zone id is out of range [ 435.395295][T17869] netlink: zone id is out of range [ 435.395303][T17869] netlink: set zone limit has 4 unknown bytes [ 435.565603][T17602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.576661][T17602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.580561][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.838778][T17602] team0: Port device team_slave_0 added [ 435.857083][T17602] team0: Port device team_slave_1 added [ 435.901576][ T52] Bluetooth: hci4: command tx timeout [ 436.031283][T17602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.031300][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.031322][T17602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.049968][T17602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.049985][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.050004][T17602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.231427][T17906] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 436.231635][T17906] Cannot find map_set index 2 as target [ 436.322649][T17908] xt_policy: output policy not valid in PREROUTING and INPUT [ 436.455588][T17892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.509779][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f031000: rx timeout, send abort [ 436.510144][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f031000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 436.523798][T17602] hsr_slave_0: entered promiscuous mode [ 436.527899][T17602] hsr_slave_1: entered promiscuous mode [ 436.533174][T17602] debugfs: 'hsr0' already exists in 'hsr' [ 436.533210][T17602] Cannot create hsr debugfs directory [ 436.806328][T17892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.147358][T17937] netlink: 'syz.3.2983': attribute type 30 has an invalid length. [ 437.171259][T17892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.216189][T17944] netlink: NAT attribute has 4 unknown bytes [ 437.216230][T17944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.418486][T17892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.989100][ T52] Bluetooth: hci4: command tx timeout [ 438.123546][T17602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.123581][T17602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.202388][ T7182] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.219058][T17979] syz2: rxe_newlink: already configured on lo [ 438.236431][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.237356][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.240213][ T7182] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.518183][T17602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.518217][T17602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.560444][T17993] __nla_validate_parse: 42 callbacks suppressed [ 438.560461][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'. [ 438.915167][T17993] 8021q: adding VLAN 0 to HW filter on device bond11 [ 438.922867][T17993] bond0: (slave bond11): Enslaving as an active interface with an up link [ 439.237078][T17602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.237113][T17602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.399419][T18041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2999'. [ 439.619749][T17602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.619782][T17602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.707841][T18052] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3000'. [ 439.707910][T18052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3000'. [ 440.006797][T18058] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3002'. [ 440.068565][ T1309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.179111][T18068] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3003'. [ 440.296712][T17602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.337243][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.346329][T17602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.391715][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.392497][T17602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.451803][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.452922][T17602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.494533][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.620460][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.836646][T18104] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.053161][T18104] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.084423][T18112] openvswitch: netlink: Missing key (keys=40, expected=100) [ 441.136717][T17602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.187962][T17602] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.221016][T18104] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.262845][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.262953][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.289647][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.289729][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.379005][T18104] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.690634][T15427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.731092][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3015'. [ 441.753702][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.759580][T18128] siw: device registration error -23 [ 441.813440][T15427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.906173][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.123680][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'. [ 442.123719][T18143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.412471][T18151] veth5: entered allmulticast mode [ 442.417201][T18154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3023'. [ 442.488203][T18154] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 442.488217][T18154] netlink: 'syz.3.3023': attribute type 268 has an invalid length. [ 442.488225][T18154] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3023'. [ 442.718695][T17602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.895516][T17602] veth0_vlan: entered promiscuous mode [ 442.939344][T17602] veth1_vlan: entered promiscuous mode [ 443.015464][T17602] veth0_macvtap: entered promiscuous mode [ 443.039736][T17602] veth1_macvtap: entered promiscuous mode [ 443.137542][T17602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.157998][T17602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.216784][ T6343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.219516][T15427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.242931][T11779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.243637][T11779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.308721][T12270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.308740][T12270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.448656][T11779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.448677][T11779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.489905][T18187] bridge4: entered promiscuous mode [ 443.489927][T18187] bridge4: entered allmulticast mode [ 443.779218][T18198] __nla_validate_parse: 2 callbacks suppressed [ 443.779236][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 443.814164][T18200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3033'. [ 443.814795][T18200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3033'. [ 444.047768][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3037'. [ 444.074941][T18209] ipvlan2: entered allmulticast mode [ 444.074970][T18209] syz_tun: entered allmulticast mode [ 444.112235][T18214] netlink: 'syz.2.3036': attribute type 1 has an invalid length. [ 444.197946][T18216] lo speed is unknown, defaulting to 1000 [ 444.480025][T18226] sctp: [Deprecated]: syz.1.3042 (pid 18226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.480025][T18226] Use struct sctp_sack_info instead [ 444.735630][T18232] netlink: 'syz.1.3043': attribute type 4 has an invalid length. [ 445.073836][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 445.177029][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.191895][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.193932][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.197796][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.199044][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.660281][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.928240][T18267] bond0: entered promiscuous mode [ 445.928263][T18267] bond_slave_0: entered promiscuous mode [ 445.928499][T18267] bond_slave_1: entered promiscuous mode [ 445.937501][T18267] batadv0: entered promiscuous mode [ 445.954480][T18267] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 446.548510][T18295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3058'. [ 446.671438][T18248] lo speed is unknown, defaulting to 1000 [ 446.833073][T18307] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 447.149045][T18307] bond1: entered promiscuous mode [ 447.149150][T18307] bond1: entered allmulticast mode [ 447.162919][T18307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.266340][T18314] erspan1: entered allmulticast mode [ 447.268202][ T52] Bluetooth: hci2: command tx timeout [ 447.282645][T18314] bond1: (slave erspan1): making interface the new active one [ 447.282666][T18314] erspan1: entered promiscuous mode [ 447.313602][T18314] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 447.676185][ T7182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.725360][T18326] netlink: 'syz.3.3066': attribute type 3 has an invalid length. [ 447.896396][T18334] team0: Device gtp0 is up. Set it down before adding it as a team port [ 448.084896][ T7182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.382699][T18337] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 448.406594][T18337] bond5 (unregistering): Released all slaves [ 448.421070][T18361] openvswitch: netlink: Duplicate or invalid key (type 0). [ 448.618012][T18350] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 448.643215][T18350] bond5 (unregistering): Released all slaves [ 448.837343][ T7182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.975744][ T7182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.165570][T18377] tunl0: Caught tx_queue_len zero misconfig [ 449.340854][ T52] Bluetooth: hci2: command tx timeout [ 450.700516][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 450.863150][ T7182] bond7: left allmulticast mode [ 450.864330][ T7182] bond7: left promiscuous mode [ 450.864621][ T7182] bridge0: port 1(bond7) entered disabled state [ 451.050651][T18412] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3082'. [ 451.421269][ T52] Bluetooth: hci2: command tx timeout [ 451.519490][T18435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3087'. [ 451.519520][T18435] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 451.524533][T18431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3087'. [ 451.524561][T18431] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 451.826882][ T7182] bond9 (unregistering): (slave erspan2): Releasing active interface [ 451.826950][ T7182] erspan2 (unregistering): left promiscuous mode [ 451.927288][ T7182] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 451.961581][ T7182] bond10 (unregistering): (slave geneve3): Releasing active interface [ 451.987334][ T7182]  (unregistering): (slave bridge0): Releasing backup interface [ 452.005679][ T7182] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 452.005704][ T7182] bridge1 (unregistering): left promiscuous mode [ 452.005722][ T7182] bridge1 (unregistering): left allmulticast mode [ 452.051819][ T7182]  (unregistering): Released all slaves [ 452.055823][ T7182] bond1 (unregistering): Released all slaves [ 452.084419][ T7182] bond2 (unregistering): (slave bond3): Releasing backup interface [ 452.084877][ T7182] bond2 (unregistering): Released all slaves [ 452.113345][ T7182] bond3 (unregistering): Released all slaves [ 452.143010][ T7182] bond4 (unregistering): Released all slaves [ 452.166583][ T7182] bond5 (unregistering): Released all slaves [ 452.182826][ T7182] bond6 (unregistering): (slave veth3): Releasing active interface [ 452.184513][ T7182] bond6 (unregistering): Released all slaves [ 452.216388][ T7182] bond7 (unregistering): Released all slaves [ 452.235783][ T7182] bond8 (unregistering): Released all slaves [ 452.251054][ T7182] bond9 (unregistering): Released all slaves [ 452.258988][ T7182] bond0 (unregistering): (slave bond11): Releasing active interface [ 452.259573][ T7182] bond0 (unregistering): Released all slaves [ 452.294784][ T7182] bond10 (unregistering): Released all slaves [ 452.312259][ T7182] bond11 (unregistering): Released all slaves [ 452.319561][ T7182] bond12 (unregistering): Released all slaves [ 452.366697][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 452.761422][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3090'. [ 452.815394][ T7182] : left promiscuous mode [ 453.001701][ T7182] tipc: Disabling bearer [ 453.006821][ T7182] tipc: Disabling bearer [ 453.045750][ T7182] tipc: Left network mode [ 453.240878][T18248] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.242990][T18248] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.243122][T18248] bridge_slave_0: entered allmulticast mode [ 453.253382][T18248] bridge_slave_0: entered promiscuous mode [ 453.269594][T18248] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.269755][T18248] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.269880][T18248] bridge_slave_1: entered allmulticast mode [ 453.277351][T18248] bridge_slave_1: entered promiscuous mode [ 453.454508][T18248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.479398][T18248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.503888][ T52] Bluetooth: hci2: command tx timeout [ 453.779446][T18478] bond0: (slave team0): Releasing backup interface [ 453.879428][T18478] bond7: (slave veth0_to_bond): Releasing active interface [ 454.015072][T18478] bond0: (slave bond_slave_0): Releasing backup interface [ 454.051714][T18478] bond0: (slave bond_slave_1): Releasing backup interface [ 454.134323][T18478] team0: Port device team_slave_1 removed [ 454.134994][T18478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.135012][T18478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.193550][T18478] bond1: (slave bridge1): Releasing backup interface [ 454.193576][T18478] bridge1: left promiscuous mode [ 454.194165][T18478] bridge1: left allmulticast mode [ 454.267066][T18478] bond7: (slave veth7): Releasing active interface [ 454.339260][T18478] bond0: (slave bond11): Releasing backup interface [ 454.431442][T18248] team0: Port device team_slave_0 added [ 454.627114][T18502] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 454.627138][T18502] bond2: option packets_per_slave: allowed values 0 - 65535 [ 454.662993][T18502] bond2 (unregistering): Released all slaves [ 454.750723][ T3105] syz0: Port: 1 Link DOWN [ 454.753425][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 454.760421][T18248] team0: Port device team_slave_1 added [ 455.028857][T18248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.028874][T18248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.028891][T18248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.047116][T18248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.047141][T18248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.047164][T18248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.327416][T18248] hsr_slave_0: entered promiscuous mode [ 455.335387][T18248] hsr_slave_1: entered promiscuous mode [ 455.337111][T18248] debugfs: 'hsr0' already exists in 'hsr' [ 455.337130][T18248] Cannot create hsr debugfs directory [ 455.740280][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 457.064514][T18609] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3117'. [ 457.064564][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 457.077014][T18610] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.3117'. [ 457.143257][T18612] syzkaller1: entered promiscuous mode [ 457.143278][T18612] syzkaller1: entered allmulticast mode [ 457.204114][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 457.512886][T18619] gretap1: entered promiscuous mode [ 457.517725][T18619] batman_adv: batadv0: Adding interface: gretap1 [ 457.517740][T18619] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 457.517760][T18619] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 457.781511][T18635] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3121'. [ 457.785836][T18637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3123'. [ 457.785856][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 457.786128][T18638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3123'. [ 457.786145][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 457.908701][T18641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3122'. [ 457.967126][T18644] netlink: 'syz.3.3124': attribute type 2 has an invalid length. [ 458.498105][T18665] netlink: 'syz.4.3128': attribute type 1 has an invalid length. [ 458.789883][ T7182] hsr_slave_0: left promiscuous mode [ 458.804267][ T7182] hsr_slave_1: left promiscuous mode [ 458.864047][ T7182] veth1_macvtap: left promiscuous mode [ 458.864125][ T7182] veth0_macvtap: left promiscuous mode [ 458.864376][ T7182] veth1_vlan: left promiscuous mode [ 459.789200][ T33] smc: removing ib device syz2 [ 459.810770][ T2251] infiniband syz2: ib_query_port failed (-19) [ 459.816835][T18706] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 459.853777][ T33] smbdirect: ib_dev[syz2] removed [ 460.038702][T18248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.082609][T18248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.083558][T18248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 460.156529][T18248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.157358][T18248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 460.206082][T18248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.344851][T18248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 460.393948][T18248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.412445][T18732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.780242][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 460.995784][T18248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.081137][T18761] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 461.127243][T18248] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.162351][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.162476][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.223699][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.223828][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.645120][T18814] syzkaller0: entered promiscuous mode [ 462.645142][T18814] syzkaller0: entered allmulticast mode [ 463.036734][T18831] __nla_validate_parse: 3 callbacks suppressed [ 463.036753][T18831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3157'. [ 463.077644][T18831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3157'. [ 463.506931][T18248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.704945][T18841] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3159'. [ 463.908366][T18248] veth0_vlan: entered promiscuous mode [ 463.926134][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 463.926155][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 463.938339][T18248] veth1_vlan: entered promiscuous mode [ 464.147216][T18248] veth0_macvtap: entered promiscuous mode [ 464.169355][T18248] veth1_macvtap: entered promiscuous mode [ 464.268093][T18248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.313354][T18248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.389451][T11785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.421280][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.422283][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.422318][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.535769][T18872] ip_tables: iptables: counters copy to user failed while replacing table [ 465.052701][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.052723][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.268275][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.268296][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.639355][T18903] syzkaller0: entered promiscuous mode [ 465.639378][T18903] syzkaller0: entered allmulticast mode [ 465.820418][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 466.285270][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.292019][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.300017][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.316511][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.317849][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.883353][ T7182] IPVS: stop unused estimator thread 0... [ 467.354203][T18955] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3189'. [ 467.427152][T18948] batadv_slave_0: entered promiscuous mode [ 467.437080][T18948] bridge_slave_0: entered promiscuous mode [ 467.437851][T18948] debugfs: 'hsr0' already exists in 'hsr' [ 467.437871][T18948] Cannot create hsr debugfs directory [ 467.729522][T18967] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 467.738371][T18967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3191'. [ 467.830536][T18970] ip_tables: iptables: counters copy to user failed while replacing table [ 467.868717][T18970] ip6t_rt: address list match requested but addrnr is 0 [ 468.047058][T18978] sctp: [Deprecated]: syz.3.3193 (pid 18978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.047058][T18978] Use struct sctp_sack_info instead [ 468.380796][ T5618] Bluetooth: hci0: command tx timeout [ 468.399660][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'. [ 468.486114][T18998] vcan0: tx address claim with dlc 0 [ 468.584541][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'. [ 468.606374][T19000] veth1_to_bond: Caught tx_queue_len zero misconfig [ 469.158040][T19017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3204'. [ 469.241955][T19021] sctp: [Deprecated]: syz.3.3206 (pid 19021) Use of int in maxseg socket option. [ 469.241955][T19021] Use struct sctp_assoc_value instead [ 469.398249][T19024] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 469.419692][T19031] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3208'. [ 469.622144][T19037] bond0: option ad_select: unable to set because the bond device is up [ 469.853923][T19050] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.855317][T19050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3212'. [ 470.147755][T19028] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 470.296741][T18919] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.296845][T18919] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.296977][T18919] bridge_slave_0: entered allmulticast mode [ 470.322920][T18919] bridge_slave_0: entered promiscuous mode [ 470.337064][T18919] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.337170][T18919] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.337300][T18919] bridge_slave_1: entered allmulticast mode [ 470.340902][T18919] bridge_slave_1: entered promiscuous mode [ 470.425117][T18919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.428883][T18919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.461096][ T5618] Bluetooth: hci0: command tx timeout [ 470.527637][T18919] team0: Port device team_slave_0 added [ 470.537495][T18919] team0: Port device team_slave_1 added [ 470.585776][T18919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.585792][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.585815][T18919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.587738][T18919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.587751][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.587773][T18919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.809526][T18919] hsr_slave_0: entered promiscuous mode [ 470.815615][T18919] hsr_slave_1: entered promiscuous mode [ 470.816321][T18919] debugfs: 'hsr0' already exists in 'hsr' [ 470.816338][T18919] Cannot create hsr debugfs directory [ 470.850925][T19085] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 470.860259][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.935023][T19085] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 470.981146][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 471.047417][T19085] bond0: (slave bridge0): Releasing backup interface [ 471.359087][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'. [ 471.468516][T19110] veth0: entered promiscuous mode [ 471.668228][T19131] Cannot find del_set index 4 as target [ 471.864108][T18919] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.199414][T19152] Bluetooth: MGMT ver 1.23 [ 472.215299][T18919] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.404567][T19156] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 472.419947][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 472.424750][T18919] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.475317][T19109] veth0: left promiscuous mode [ 472.481891][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 472.481909][T19159] bridge: RTM_NEWNEIGH with invalid ether address [ 472.540255][ T52] Bluetooth: hci0: command 0x040f tx timeout [ 472.542406][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 472.662970][T18919] netdevsim netdevsim4  (unregistering): left allmulticast mode [ 472.681036][T18919] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.878924][T19181] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 472.954029][T19184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3247'. [ 473.121354][T19191] sctp: [Deprecated]: syz.2.3250 (pid 19191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.121354][T19191] Use struct sctp_sack_info instead [ 473.122209][T19190] sctp: [Deprecated]: syz.2.3250 (pid 19190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.122209][T19190] Use struct sctp_sack_info instead [ 473.196922][T19188] veth0_to_bond: entered allmulticast mode [ 473.681933][T19211] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 473.756332][T18919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.777294][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.778262][T18919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.801418][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.803718][T18919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.831517][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.832278][T18919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.875686][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.182572][T19230] netlink: 'syz.3.3259': attribute type 3 has an invalid length. [ 474.301874][T18919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.417342][T18919] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.458460][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.458564][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.484435][T19239] __nla_validate_parse: 1 callbacks suppressed [ 474.484453][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3262'. [ 474.608711][T19241] netlink: zone id is out of range [ 474.608753][T19241] netlink: zone id is out of range [ 474.608801][T19241] netlink: zone id is out of range [ 474.608829][T19241] netlink: zone id is out of range [ 474.608836][T19241] netlink: zone id is out of range [ 474.608880][T19241] netlink: zone id is out of range [ 474.609812][T19245] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3265'. [ 474.622088][ T5618] Bluetooth: hci0: command 0x040f tx timeout [ 474.690037][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.690207][T11781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.955534][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'. [ 475.092326][T19268] netlink: 528 bytes leftover after parsing attributes in process `syz.0.3269'. [ 475.101119][T19268] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3269'. [ 475.170804][T19273] x_tables: duplicate underflow at hook 1 [ 475.646777][T19298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3276'. [ 475.646802][T19298] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3276'. [ 475.646815][T19298] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3276'. [ 475.841050][T19305] openvswitch: netlink: Unknown key attributes 1 [ 476.056457][T19313] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 476.443038][T18919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.514553][T19340] syzkaller0: entered promiscuous mode [ 476.514576][T19340] syzkaller0: entered allmulticast mode [ 476.708890][ T5618] Bluetooth: hci0: command 0x040f tx timeout [ 477.203292][T18919] veth0_vlan: entered promiscuous mode [ 477.219219][T18919] veth1_vlan: entered promiscuous mode [ 477.297805][T18919] veth0_macvtap: entered promiscuous mode [ 477.343355][T18919] veth1_macvtap: entered promiscuous mode [ 477.427440][T18919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.484596][T18919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.577064][T19375] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3291'. [ 477.578320][T19375] ip6t_ah: unknown flags 5 [ 477.578770][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 477.591750][T11779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.611034][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.657928][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.710678][ T6343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.815505][T11779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.815525][T11779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.916800][ T6343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.916822][ T6343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.104964][T19392] netlink: 'syz.3.3296': attribute type 7 has an invalid length. [ 478.123032][T19392] netlink: 'syz.3.3296': attribute type 7 has an invalid length. [ 478.141652][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.141757][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.141789][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.141820][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.790596][ T5618] Bluetooth: hci0: command 0x040f tx timeout [ 478.798874][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.824443][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.826456][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.827772][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.828389][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.533147][T11779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.533182][T11779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.553571][T19451] __nla_validate_parse: 4 callbacks suppressed [ 479.553587][T19451] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3310'. [ 479.688916][T11779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.688948][T11779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.762466][T19459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3312'. [ 479.769939][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'. [ 479.769958][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 479.799240][T19428] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 479.944704][T11779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.944739][T11779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.992817][T11785] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.010710][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.010973][ T33] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.011006][ T33] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.064130][T19467] ip_tables: iptables: counters copy to user failed while replacing table [ 480.067235][T19470] netlink: 'syz.1.3312': attribute type 32 has an invalid length. [ 480.067254][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 480.087189][T19467] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3314'. [ 480.137264][T19474] No such timeout policy "syz0" [ 480.151930][T19470] bond2: option coupled_control: invalid value (12) [ 480.153809][T19470] bond2 (unregistering): Released all slaves [ 480.329736][T11779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.329771][T11779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.861133][ T5618] Bluetooth: hci3: command tx timeout [ 480.965545][T19501] ip_tables: iptables: counters copy to user failed while replacing table [ 480.965925][T19501] netlink: 'syz.2.3322': attribute type 2 has an invalid length. [ 480.965941][T19501] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3322'. [ 481.214958][T11779] bond0 (unregistering): Released all slaves [ 481.228340][T11779] bond1 (unregistering): Released all slaves [ 481.244192][T11779] bond2 (unregistering): Released all slaves [ 481.253018][T11779] bond3 (unregistering): Released all slaves [ 481.266956][T11779] bond4 (unregistering): Released all slaves [ 481.395068][T11779] tipc: Left network mode [ 482.155674][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3325'. [ 482.158561][T11779] IPVS: stopping backup sync thread 14862 ... [ 482.224052][T19542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3327'. [ 482.440050][T19411] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.448443][T19411] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.448603][T19411] bridge_slave_0: entered allmulticast mode [ 482.467587][T19411] bridge_slave_0: entered promiscuous mode [ 482.476344][T19411] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.476454][T19411] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.476587][T19411] bridge_slave_1: entered allmulticast mode [ 482.488592][T19411] bridge_slave_1: entered promiscuous mode [ 482.734141][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 482.755504][T19554] xt_l2tp: missing protocol rule (udp|l2tpip) [ 482.777381][T19411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.808126][T19411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.940637][ T5618] Bluetooth: hci3: command tx timeout [ 482.999069][T19411] team0: Port device team_slave_0 added [ 483.016712][T19411] team0: Port device team_slave_1 added [ 483.110694][T19561] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3332'. [ 483.366102][T19411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.366119][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.366142][T19411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.473592][T19411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.473608][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.473630][T19411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.976260][T19411] hsr_slave_0: entered promiscuous mode [ 483.980045][T19411] hsr_slave_1: entered promiscuous mode [ 483.989316][T19411] debugfs: 'hsr0' already exists in 'hsr' [ 483.989335][T19411] Cannot create hsr debugfs directory [ 484.201734][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 484.339956][T19612] syzkaller1: entered promiscuous mode [ 484.339981][T19612] syzkaller1: entered allmulticast mode [ 484.652966][T19640] __nla_validate_parse: 1 callbacks suppressed [ 484.652984][T19640] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3346'. [ 484.654204][T19625] dvmrp0: entered allmulticast mode [ 484.722110][T19640] openvswitch: netlink: Flow key attr not present in new flow. [ 484.967680][T19656] xt_REDIRECT: bad MAP_IPS. [ 485.020263][ T5618] Bluetooth: hci3: command tx timeout [ 485.055693][T19663] openvswitch: netlink: IP tunnel dst address not specified [ 485.056690][T19662] openvswitch: netlink: IP tunnel dst address not specified [ 485.422378][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 485.527308][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 485.669935][T19683] netlink: 'syz.2.3357': attribute type 10 has an invalid length. [ 485.779936][T19683] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.781176][T19683] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.807921][T19683] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.808048][T19683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.808292][T19683] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.808395][T19683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.848012][T19683] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 485.896679][T19695] vlan2: entered promiscuous mode [ 485.896700][T19695] geneve1: entered promiscuous mode [ 485.897155][T19695] vlan2: entered allmulticast mode [ 485.897170][T19695] geneve1: entered allmulticast mode [ 485.983225][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 485.983303][T19695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.983313][T19695] IPv6: NLM_F_CREATE should be set when creating new route [ 485.983339][T19695] IPv6: NLM_F_CREATE should be set when creating new route [ 486.072702][T19705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 486.250600][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3363'. [ 486.961583][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'. [ 487.074502][T19735] pimreg: entered allmulticast mode [ 487.074651][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3365'. [ 487.100817][ T5618] Bluetooth: hci3: command tx timeout [ 487.221228][T11779] batadv_slave_0: left promiscuous mode [ 487.226355][T11779] bridge_slave_0: left promiscuous mode [ 487.332016][T11779] veth1_vlan: left promiscuous mode [ 487.343339][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3371'. [ 487.653378][T19782] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 487.704831][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3372'. [ 488.109029][T19782] IPv6: sit1: Disabled Multicast RS [ 488.130257][T19775] macsec1: entered promiscuous mode [ 488.130278][T19775] bridge0: entered promiscuous mode [ 488.130457][T19775] macsec1: entered allmulticast mode [ 488.130470][T19775] bridge0: entered allmulticast mode [ 488.132530][T19775] bridge0: port 3(macsec1) entered blocking state [ 488.132647][T19775] bridge0: port 3(macsec1) entered disabled state [ 488.168024][T19775] bridge0: left allmulticast mode [ 488.255459][T19792] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 488.279875][ T2251] bridge0: left promiscuous mode [ 488.312534][T19795] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3374'. [ 488.375427][T19411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.385873][T19792] ip_tables: iptables: counters copy to user failed while replacing table [ 488.409504][T19411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.410383][T19411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.423554][T19411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.442355][T19795] xt_l2tp: unknown flags: 43 [ 488.494421][T19411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.514429][T19411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.515232][T19793] netlink: 'syz.0.3374': attribute type 13 has an invalid length. [ 488.527624][T19411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.594286][T19411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.633037][T19801] Set syz1 is full, maxelem 2 reached [ 488.651199][T11779] IPVS: stop unused estimator thread 0... [ 488.858161][T19411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.892543][T19411] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.899483][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.899544][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.927724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.927784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.365945][T19845] syzkaller0: entered promiscuous mode [ 489.365967][T19845] syzkaller0: entered allmulticast mode [ 489.796121][T19855] __nla_validate_parse: 2 callbacks suppressed [ 489.796140][T19855] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3384'. [ 489.819276][T19855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.819363][T19865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3386'. [ 490.220625][ T5618] Bluetooth: hci3: command tx timeout [ 490.647934][T19890] syzkaller1: entered promiscuous mode [ 490.647964][T19890] syzkaller1: entered allmulticast mode [ 490.718613][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 490.797086][T19411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.949633][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3394'. [ 491.009400][T19411] veth0_vlan: entered promiscuous mode [ 491.046541][T19411] veth1_vlan: entered promiscuous mode [ 491.168182][T19411] veth0_macvtap: entered promiscuous mode [ 491.189256][T19411] veth1_macvtap: entered promiscuous mode [ 491.307901][T19924] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 491.334938][T19411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.375986][T19411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.480058][T19945] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 491.527362][T11779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.590937][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.610404][ T6343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.611833][ T6343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.761311][ T6343] IPVS: starting estimator thread 0... [ 491.781992][T19957] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 491.782023][T19957] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 491.845781][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.845802][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.851299][T19959] IPVS: using max 38 ests per chain, 91200 per kthread [ 491.967228][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.967247][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.111082][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 492.116252][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.159532][T19969] bridge_slave_1 (unregistering): left allmulticast mode [ 492.159554][T19969] bridge_slave_1 (unregistering): left promiscuous mode [ 492.159625][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.276325][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 492.276358][T19976] netlink: 'syz.4.3409': attribute type 30 has an invalid length. [ 492.331663][T19981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3409'. [ 492.333472][T19981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 492.333501][T19981] netlink: 'syz.4.3409': attribute type 30 has an invalid length. [ 492.405996][T19984] veth0: mtu less than device minimum [ 492.406535][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3410'. [ 492.443779][T19984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.669434][T20001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.715404][T19998] pimreg: entered allmulticast mode [ 492.742773][T19993] pimreg: left allmulticast mode [ 492.798745][T20010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3416'. [ 493.216556][T20028] syzkaller0: entered promiscuous mode [ 493.216578][T20028] syzkaller0: entered allmulticast mode [ 493.377287][T20034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.776025][T20054] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 493.887131][T20056] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 494.084418][T20069] xt_nat: multiple ranges no longer supported [ 494.321859][T20081] ovs-s: entered promiscuous mode [ 494.325622][T20078] openvswitch: ovs-s: Dropping previously announced user features [ 494.815061][T20100] syzkaller0: entered promiscuous mode [ 494.815084][T20100] syzkaller0: entered allmulticast mode [ 494.833240][T20100] tipc: Started in network mode [ 494.833266][T20100] tipc: Node identity ca8ba20f9415, cluster identity 4711 [ 494.833496][T20100] tipc: Enabled bearer , priority 0 [ 494.842671][T20099] tipc: Resetting bearer [ 494.935986][T20099] tipc: Disabling bearer [ 495.161519][T20116] __nla_validate_parse: 6 callbacks suppressed [ 495.161538][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3451'. [ 495.667945][T20147] Bluetooth: hci0: unsupported parameter 5134 [ 495.667968][T20147] Bluetooth: hci0: unsupported parameter 8192 [ 495.667980][T20147] Bluetooth: hci0: unsupported parameter 5134 [ 495.667992][T20147] Bluetooth: hci0: unsupported parameter 8192 [ 495.864021][T20152] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3459'. [ 495.996565][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'. [ 496.098456][T20119] netlink: 872 bytes leftover after parsing attributes in process `syz.0.3450'. [ 496.114681][T20118] netlink: 872 bytes leftover after parsing attributes in process `syz.0.3450'. [ 496.203824][T20125] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 496.203844][T20125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3450'. [ 496.216380][T20174] netlink: 'syz.1.3461': attribute type 1 has an invalid length. [ 496.346508][T20174] bond3: entered promiscuous mode [ 496.346785][T20174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.347764][T20168] syzkaller0: entered promiscuous mode [ 496.347775][T20168] syzkaller0: entered allmulticast mode [ 496.441229][T20184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.441610][T20184] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 496.441628][T20184] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 496.489474][T20189] x_tables: unsorted entry at hook 4 [ 496.568676][T20184] bond3: (slave wireguard0): making interface the new active one [ 496.568700][T20184] wireguard0: entered promiscuous mode [ 496.579008][T20184] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 496.579141][T20173] tipc: Started in network mode [ 496.579164][T20173] tipc: Node identity e2c0e184a65a, cluster identity 4711 [ 496.579335][T20173] tipc: Enabled bearer , priority 0 [ 496.612539][T20155] tipc: Resetting bearer [ 496.724352][T20155] tipc: Disabling bearer [ 496.992530][T20208] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3467'. [ 497.031234][T20214] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3467'. [ 497.033408][T20207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.218164][T20223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3475'. [ 497.407976][T20227] syzkaller1: entered promiscuous mode [ 497.407998][T20227] syzkaller1: entered allmulticast mode [ 497.494009][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 497.812400][T20245] syzkaller0: entered promiscuous mode [ 497.812422][T20245] syzkaller0: entered allmulticast mode [ 497.826230][T20245] tipc: Started in network mode [ 497.826255][T20245] tipc: Node identity 5a94d0681b33, cluster identity 4711 [ 497.826494][T20245] tipc: Enabled bearer , priority 0 [ 497.854627][T20244] tipc: Resetting bearer [ 497.966298][T20244] tipc: Disabling bearer [ 498.618097][T20281] netlink: 'syz.0.3493': attribute type 1 has an invalid length. [ 498.687581][T16219] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 498.829843][T20290] ip_tables: iptables: counters copy to user failed while replacing table [ 498.979958][T20295] syzkaller0: entered promiscuous mode [ 498.979979][T20295] syzkaller0: entered allmulticast mode [ 499.005637][T20295] tipc: Enabled bearer , priority 0 [ 499.016943][T20294] tipc: Resetting bearer [ 499.065370][T20294] tipc: Disabling bearer [ 499.090468][T20297] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 499.365226][T20310] netlink: 'syz.0.3503': attribute type 30 has an invalid length. [ 499.450224][T20322] netlink: 'syz.3.3506': attribute type 7 has an invalid length. [ 499.817217][T20342] syzkaller1: entered promiscuous mode [ 499.817237][T20342] syzkaller1: entered allmulticast mode [ 499.847375][T20345] syzkaller0: entered promiscuous mode [ 499.847395][T20345] syzkaller0: entered allmulticast mode [ 499.879381][T20345] tipc: Started in network mode [ 499.879408][T20345] tipc: Node identity 1a398da53fb3, cluster identity 4711 [ 499.879742][T20345] tipc: Enabled bearer , priority 0 [ 499.973748][T20344] tipc: Resetting bearer [ 500.054520][T20344] tipc: Disabling bearer [ 500.235331][T20356] __nla_validate_parse: 6 callbacks suppressed [ 500.235349][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 500.300969][T20360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3518'. [ 500.397669][T20363] xt_limit: Overflow, try lower: 536871034/127 [ 500.397857][T20362] xt_limit: Overflow, try lower: 536871034/127 [ 500.517293][T20362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.576153][T20363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.578542][T20380] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3523'. [ 500.584012][ T5619] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 500.584045][ T5619] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 500.597711][ T7182] wlan1: authenticated [ 500.630953][ T33] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 500.634663][ T12] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 500.634920][ T12] wlan1: associated [ 500.644061][T20363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.035752][T20396] syzkaller0: entered promiscuous mode [ 501.035770][T20396] syzkaller0: entered allmulticast mode [ 501.049080][T20396] tipc: Enabled bearer , priority 0 [ 501.063315][T20394] tipc: Resetting bearer [ 501.143379][T20394] tipc: Disabling bearer [ 501.147300][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3529'. [ 501.374724][T20409] netlink: 'syz.1.3536': attribute type 2 has an invalid length. [ 501.395343][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 501.395367][T20409] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3536'. [ 501.399045][T20411] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3536'. [ 501.450696][T20419] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3537'. [ 501.486866][T20419] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3537'. [ 501.504746][ T1309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.689151][T20430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3539'. [ 501.779271][T20435] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 501.919213][T20433] pimreg: entered allmulticast mode [ 502.145441][T20453] syzkaller0: entered promiscuous mode [ 502.145461][T20453] syzkaller0: entered allmulticast mode [ 502.156208][T20453] tipc: Enabled bearer , priority 0 [ 502.170889][T20452] tipc: Resetting bearer [ 502.254705][T20452] tipc: Disabling bearer [ 502.272876][T20455] netlink: 'syz.2.3550': attribute type 8 has an invalid length. [ 502.273108][T20455] sch_fq: defrate 0 ignored. [ 502.273416][T20458] netlink: 'syz.2.3550': attribute type 8 has an invalid length. [ 502.273432][T20458] sch_fq: defrate 0 ignored. [ 503.000712][T20489] xt_hashlimit: size too large, truncated to 1048576 [ 503.000910][T20489] xt_hashlimit: max too large, truncated to 1048576 [ 503.001015][T20489] xt_hashlimit: invalid rate [ 503.169803][T20473] nbd2: detected capacity change from 0 to 63 [ 503.206941][T20501] tipc: Enabled bearer , priority 0 [ 503.228752][T20500] tipc: Disabling bearer [ 503.370675][ T5618] block nbd2: Receive control failed (result -104) [ 503.415639][T20506] syzkaller1: entered promiscuous mode [ 503.415653][T20506] syzkaller1: entered allmulticast mode [ 504.249246][T20541] bond1: entered promiscuous mode [ 504.249269][T20541] bond1: entered allmulticast mode [ 504.290558][T20549] tipc: Enabled bearer , priority 0 [ 504.455841][T20548] tipc: Disabling bearer [ 505.100552][T20598] netlink: 'syz.1.3591': attribute type 21 has an invalid length. [ 505.302513][T20598] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 505.304123][T20598] bond4 (unregistering): Released all slaves [ 505.405393][T20610] 0: reclassify loop, rule prio 0, protocol 03 [ 505.410359][T20607] 0: reclassify loop, rule prio 0, protocol 03 [ 505.411062][T20613] tipc: Enabled bearer , priority 0 [ 505.557891][T20612] tipc: Disabling bearer [ 505.761569][T20628] tipc: Can't bind to reserved service type 1 [ 505.812275][T20633] netlink: 'syz.4.3602': attribute type 10 has an invalid length. [ 505.847338][T20633] team0: Device veth0_macvtap failed to register rx_handler [ 505.853156][T20635] __nla_validate_parse: 70 callbacks suppressed [ 505.853185][T20635] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3601'. [ 506.103731][T20645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.273531][T20660] syzkaller1: entered promiscuous mode [ 506.273561][T20660] syzkaller1: entered allmulticast mode [ 506.278045][T20659] netlink: 'syz.0.3609': attribute type 4 has an invalid length. [ 506.289812][T20660] netlink: 'syz.1.3605': attribute type 11 has an invalid length. [ 506.393899][T20665] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.413331][T20663] tipc: Enabled bearer , priority 0 [ 506.451198][T20662] tipc: Disabling bearer [ 506.518989][T20672] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 506.722467][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 507.382576][T20717] netlink: 'syz.1.3630': attribute type 12 has an invalid length. [ 507.446665][T20727] netlink: 'syz.1.3630': attribute type 12 has an invalid length. [ 507.507035][T20717] bond4: option primary_reselect: invalid value (255) [ 507.518604][T20717] bond4 (unregistering): Released all slaves [ 507.567934][T20730] block nbd0: Unsupported socket: should be TCP or UNIX. [ 507.665540][T20737] netlink: 9416 bytes leftover after parsing attributes in process `syz.4.3632'. [ 507.666207][T20727] bond4: option primary_reselect: invalid value (255) [ 507.688095][T20727] bond4 (unregistering): Released all slaves [ 507.816855][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 507.816893][T20744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3635'. [ 507.895614][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 507.895645][T20744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3635'. [ 507.920252][T11785] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.934714][ T6343] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.934755][ T6343] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.934784][ T6343] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.021255][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 508.021285][T20744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3635'. [ 508.661944][T20787] bond1 (unregistering): Released all slaves [ 508.715476][T20792] veth0_to_bond: entered promiscuous mode [ 508.926288][T20801] syzkaller1: entered promiscuous mode [ 508.926309][T20801] syzkaller1: entered allmulticast mode [ 509.149095][T20808] netlink: 'syz.0.3646': attribute type 2 has an invalid length. [ 509.149115][T20808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3646'. [ 509.260030][T20808] : entered promiscuous mode [ 509.677016][T20836] IPVS: sh: FWM 1 0x00000001 - no destination available [ 509.714762][ T7182] IPVS: starting estimator thread 0... [ 509.804134][T20842] IPVS: using max 27 ests per chain, 64800 per kthread [ 509.975746][T20850] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 509.986188][T20847] sctp: [Deprecated]: syz.2.3657 (pid 20847) Use of int in max_burst socket option. [ 509.986188][T20847] Use struct sctp_assoc_value instead [ 510.158467][T20856] netlink: 'syz.0.3659': attribute type 1 has an invalid length. [ 510.614409][T20861] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.614442][T20861] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.079616][T20899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.246451][T20907] netlink: 'syz.0.3672': attribute type 1 has an invalid length. [ 511.670877][T20907] bond3: entered promiscuous mode [ 511.671273][T20907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.823938][T20932] __nla_validate_parse: 1 callbacks suppressed [ 511.823956][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3675'. [ 511.888633][T20903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.888978][T20903] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 511.888996][T20903] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 512.081728][T20903] bond3: (slave wireguard0): making interface the new active one [ 512.081752][T20903] wireguard0: entered promiscuous mode [ 512.087251][T20903] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 512.782694][T20954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3679'. [ 512.848375][T20970] netlink: 'syz.1.3681': attribute type 2 has an invalid length. [ 512.873561][T20970] : entered promiscuous mode [ 512.967670][T20972] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 513.132415][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.213663][T20972] block nbd296: server does not support multiple connections per device. [ 513.213951][T20972] block nbd296: shutting down sockets [ 513.519561][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 513.531952][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3688'. [ 513.715296][T21003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3690'. [ 513.715317][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'. [ 513.785140][T21003] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.876211][T21018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3690'. [ 513.876232][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'. [ 513.954660][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 513.979161][T21018] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 513.993412][T21013] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.994043][T21013] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.158062][T21023] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 514.309306][T21023] bond4: entered promiscuous mode [ 514.309683][T21023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.410616][T21031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3696'. [ 514.506308][T21023] bond4: (slave bridge1): making interface the new active one [ 514.506331][T21023] bridge1: entered promiscuous mode [ 514.531492][T21023] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 514.635841][T21025] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 515.043066][T21047] veth1_to_bond: entered allmulticast mode [ 515.085591][T21047] veth1_to_bond: left allmulticast mode [ 515.159478][T21051] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 515.159498][T21051] netlink: 'syz.2.3703': attribute type 2 has an invalid length. [ 515.253161][T21058] netlink: 'syz.3.3705': attribute type 30 has an invalid length. [ 515.369024][T21058] bond2: option arp_missed_max: invalid value (0) [ 515.369048][T21058] bond2: option arp_missed_max: allowed values 1 - 255 [ 515.400885][T21058] bond2 (unregistering): Released all slaves [ 515.543504][T21060] geneve2: entered promiscuous mode [ 515.543526][T21060] geneve2: entered allmulticast mode [ 515.596367][T21065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.620927][T21068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.722946][T21100] veth0: entered promiscuous mode [ 516.866954][T21096] veth0: left promiscuous mode [ 516.867592][T21111] syzkaller0: entered promiscuous mode [ 516.867610][T21111] syzkaller0: entered allmulticast mode [ 516.975940][T21113] __nla_validate_parse: 3 callbacks suppressed [ 516.975959][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'. [ 517.219425][T21117] veth1_macvtap: left promiscuous mode [ 517.274261][T21124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3722'. [ 517.484833][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3724'. [ 517.485929][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3724'. [ 517.831354][T21134] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 526.290109][ C0] sched: DL replenish lagged too much [ 532.233302][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.319714][T21143] Bluetooth: hci5: command 0x0406 tx timeout [ 564.467681][ T1309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.809669][ T1979] block nbd2: Possible stuck request ffff888026fa7000: control (read@0,1024B). Runtime 30 seconds [ 581.826710][ T1979] block nbd2: Possible stuck request ffff888026fa71c0: control (read@1024,1024B). Runtime 30 seconds [ 581.826744][ T1979] block nbd2: Possible stuck request ffff888026fa7380: control (read@2048,1024B). Runtime 30 seconds [ 581.826769][ T1979] block nbd2: Possible stuck request ffff888026fa7540: control (read@3072,1024B). Runtime 30 seconds [ 616.515719][ T4983] udevd[4983]: worker [16985] /devices/virtual/block/nbd2 is taking a long time [ 624.860650][ T1309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 626.358519][T21144] block nbd2: Possible stuck request ffff888026fa7000: control (read@0,1024B). Runtime 60 seconds [ 626.358564][T21144] block nbd2: Possible stuck request ffff888026fa71c0: control (read@1024,1024B). Runtime 60 seconds [ 626.358588][T21144] block nbd2: Possible stuck request ffff888026fa7380: control (read@2048,1024B). Runtime 60 seconds [ 626.358612][T21144] block nbd2: Possible stuck request ffff888026fa7540: control (read@3072,1024B). Runtime 60 seconds [ 632.696096][T19515] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 664.429293][ T5618] Bluetooth: hci4: command tx timeout [ 686.362808][ T1309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 707.863772][ T1979] block nbd2: Possible stuck request ffff888026fa7000: control (read@0,1024B). Runtime 90 seconds [ 707.863830][ T1979] block nbd2: Possible stuck request ffff888026fa71c0: control (read@1024,1024B). Runtime 90 seconds [ 707.863854][ T1979] block nbd2: Possible stuck request ffff888026fa7380: control (read@2048,1024B). Runtime 90 seconds [ 707.863877][ T1979] block nbd2: Possible stuck request ffff888026fa7540: control (read@3072,1024B). Runtime 90 seconds [ 736.088510][T21147] Bluetooth: hci2: command tx timeout [ 739.343960][T21150] Bluetooth: hci3: command tx timeout [ 750.525578][ T1309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.965974][ T1979] block nbd2: Possible stuck request ffff888026fa7000: control (read@0,1024B). Runtime 120 seconds [ 763.966020][ T1979] block nbd2: Possible stuck request ffff888026fa71c0: control (read@1024,1024B). Runtime 120 seconds [ 763.966045][ T1979] block nbd2: Possible stuck request ffff888026fa7380: control (read@2048,1024B). Runtime 120 seconds [ 763.966068][ T1979] block nbd2: Possible stuck request ffff888026fa7540: control (read@3072,1024B). Runtime 120 seconds [ 767.880103][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 767.887076][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21142/1:b..l [ 767.895086][ C1] rcu: (detected by 1, t=10503 jiffies, g=101829, q=1124843 ncpus=2) [ 767.903253][ C1] task:syz.2.3727 state:R running task stack:25608 pid:21142 tgid:21142 ppid:17602 task_flags:0x40044c flags:0x00080002 [ 767.916764][ C1] Call Trace: [ 767.920051][ C1] [ 767.922989][ C1] __schedule+0x17db/0x58f0 [ 767.927539][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 767.932580][ C1] ? __pfx___schedule+0x10/0x10 [ 767.937468][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 767.942863][ C1] preempt_schedule_common+0x7f/0xd0 [ 767.948167][ C1] preempt_schedule_thunk+0x16/0x40 [ 767.953397][ C1] _raw_spin_unlock+0x41/0x50 [ 767.958092][ C1] __zap_vma_range+0x40e1/0x4f80 [ 767.963103][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 767.968413][ C1] ? mas_find+0x6d6/0xcb0 [ 767.972768][ C1] unmap_vmas+0x390/0x550 [ 767.977121][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 767.981980][ C1] ? mas_next_slot+0xc91/0xd70 [ 767.986785][ C1] exit_mmap+0x293/0x9f0 [ 767.991049][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 767.995857][ C1] ? __pfx_exit_aio+0x10/0x10 [ 768.000564][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 768.005780][ C1] __mmput+0x118/0x420 [ 768.009864][ C1] exit_mm+0x221/0x2d0 [ 768.013942][ C1] do_exit+0x6cd/0x2360 [ 768.018111][ C1] ? lock_acquire+0x115/0x350 [ 768.022800][ C1] ? __pfx_do_exit+0x10/0x10 [ 768.027403][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 768.032464][ C1] do_group_exit+0x22d/0x2f0 [ 768.037061][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 768.042271][ C1] get_signal+0x121b/0x12c0 [ 768.046823][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 768.052389][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 768.058581][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 768.063959][ C1] ? rcu_is_watching+0x16/0xb0 [ 768.068740][ C1] do_syscall_64+0x328/0x520 [ 768.073340][ C1] ? trace_irq_disable+0x3b/0x140 [ 768.078373][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.084450][ C1] ? clear_bhb_loop+0x70/0xc0 [ 768.089137][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.095037][ C1] RIP: 0033:0x7f492bd9ef49 [ 768.099467][ C1] RSP: 002b:00007fff9bed6dd8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 768.107889][ C1] RAX: fffffffffffffffc RBX: 00007f492bd5a4e0 RCX: 00007f492bd9ef49 [ 768.115865][ C1] RDX: 00007f492bd5a4e0 RSI: 0000000000000058 RDI: 00007fff9bed6e30 [ 768.123840][ C1] RBP: 00007f492cc9f6c0 R08: 00007f492cc9f6c0 R09: 00007fff9bed6f17 [ 768.131818][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 768.139789][ C1] R13: 000000000000000b R14: 00007fff9bed6e30 R15: 00007fff9bed6f18 [ 768.147786][ C1]