last executing test programs: 3.232123313s ago: executing program 2 (id=10528): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000440fc05af88fbb37c68e72c1b6f75ad65cf36e334e610000000000000000d20a9946899a464e2b6ba7ca9bb875bff4a404d9f3bce42d5cd535d8f986c9e944d6bebf02", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f00}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x7, 0x100a, &(0x7f0000000440)=""/4106, 0x41100, 0xc}, 0x94) 3.091250144s ago: executing program 4 (id=10529): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r5, 0x8de13c6b70ae92d3, 0x41003, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x50}}}}, [@NL80211_ATTR_TID_CONFIG={0x7, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) accept(r3, &(0x7f0000000700)=@hci, &(0x7f0000000780)=0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "f9d0875c"}]}]}]}]}, 0x40}}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x4000009, 0x4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x2f, 0x0, @multicast2, @multicast2}}}}) write$tun(r8, 0x0, 0xfdef) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.025641808s ago: executing program 2 (id=10531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x97, 0x4) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/129, 0x81}, 0x100db30}], 0x1, 0x40002062, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 2.466675278s ago: executing program 3 (id=10537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x200000008}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31a00ffa1000000bfa10000000000000701000007000000b702000008000000b703000000000000850000002200000095"], &(0x7f0000000c00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.46598362s ago: executing program 2 (id=10538): syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004844}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000002408000009000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.336224894s ago: executing program 4 (id=10540): r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x80800) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000340)=0xa, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000380)=0x2, 0x4) (async, rerun: 32) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async, rerun: 32) listen(r2, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000400)=0xc, 0x4) (async, rerun: 64) listen(r3, 0xfffffffd) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80c1, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x12, &(0x7f00000004c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0xbe, &(0x7f0000000880)=""/190, 0x41100, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0x1], &(0x7f0000000440)=[{0x1, 0x4, 0xb}, {0x2, 0x1, 0x0, 0xa}], 0x10, 0xfffffffa}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048820) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000b40)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r6, @ANYBLOB='t'], 0x31) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0xfff5, 0x10}, {0xffff, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x40048c4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000180)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000240)=0x84) 2.217244003s ago: executing program 2 (id=10542): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0xffffe000) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000007c0)=""/4102, &(0x7f0000001800)=0x1006) (async) syz_emit_ethernet(0xed, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbb1bbbbbbffffffffffff86dd60122d9200b73afffe8000000000000000000000000000bbff0200000000000000000000000000019600907800ff0bdb0100000000000000180aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03021f0afe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324"], 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}]}}}]}, 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 2.102893035s ago: executing program 0 (id=10544): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x1}, 0x6e) (async) connect$unix(r4, &(0x7f0000000100)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4b4df7f77b380829, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4b4df7f77b380829, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) close(0x3) (async) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x220001, 0x0) splice(r6, 0x0, r5, 0x0, 0xcf, 0xb) accept4(r3, 0x0, 0x0, 0x80000) (async) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x1c, 0x80800) (async) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x1c, 0x80800) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_128={{0x304}, "023312bac7415b25", "bf14156978d20bfd7a9fc54bcbf234bb", "3a358409", "2c586dfecb786a5c"}, 0x28) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000640), 0x4a) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000680)=0x9, 0x4) sendmmsg$inet(r8, &(0x7f00000006c0)=[{{0x0, 0xfffffffffffffda1, 0x0}, 0xfff5}], 0x40001b6, 0x0) 2.101673394s ago: executing program 3 (id=10545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)="d2a7b3", 0x3}, {&(0x7f0000000200)="e06bd3f745", 0xfcfd}, {&(0x7f0000000240)="86e9a0d8", 0x4}, {&(0x7f0000000280)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) close(0x3) 1.884799098s ago: executing program 1 (id=10546): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0xfff, @local, 0xffffffff}}, 0xffff, 0x99, 0x2c, 0x4, 0x7ecc}, &(0x7f0000000240)=0x98) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000340)=0x20008) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)="00214717a707040000004306000000e6b308f60feb56", 0x16}], 0x1, 0x7c53, 0x4) 1.711997469s ago: executing program 3 (id=10547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{0x4, 0x1}, {0xd}, {0x6, 0x5}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000001, 0x5000}]}]}}, &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0xb, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{0x4, 0x1}, {0xd}, {0x6, 0x5}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000001, 0x5000}]}]}}, &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0xb, 0x1}, 0x28) (async) 1.591767737s ago: executing program 1 (id=10548): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf15e03fa", 0x18) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = accept$alg(r0, 0x0, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x110, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000d80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0x0, 0xc, 0x0, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x42ae, 0x4, 0x8, 0x8, 0x7fff, 0x1, 'vcan0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x0, 0x2a0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="de185a0b2e9a", @multicast2, @multicast2, 0x1, 0x1}}}, {{@arp={@multicast2, @multicast2, 0xff000000, 0x0, 0x9, 0x5, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x5, 0x9, 0x0, 0x7ff, 0x81, 0x5, 'team0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x110}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9}}}, {{@arp={@empty, @remote, 0x0, 0xffffff00, 0x8, 0x1, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x9, 0x401, 0xfffd, 0x3, 0x2, 0x3, 'veth0\x00', 'dvmrp1\x00', {0xff}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3f, 0x5, {0x7fffffffffffffff}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) sendmmsg$alg(r1, &(0x7f0000000dc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}], 0x492492492492561, 0x40080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000"], 0x0, 0x4a}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) (async) bind$packet(r4, &(0x7f0000000200)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r5 = socket(0xa, 0x3, 0x87) sendto(r5, &(0x7f0000000500)="e11188e4769b0190fbb1fb470fa470a0c17dc7f855306acd35fa1d2f80f0c47d1878f723", 0x24, 0x4000014, &(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80) unshare(0xc040480) poll(&(0x7f00000003c0)=[{r5, 0x20}], 0x1, 0x10) (async) r6 = socket$inet6(0xa, 0x800, 0x100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}}) (async) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000300)=0x2, 0x4) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) (async) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000e80), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000ec0)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000f00)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='memory.events\x00', 0x275a, 0x0) 1.460812612s ago: executing program 3 (id=10549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 1.317625509s ago: executing program 2 (id=10550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x40800, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4}]}) (async) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000440)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r4, &(0x7f00000004c0), 0x9) (async) readv(r1, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/250, 0xfa}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/211, 0xd3}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/216, 0xd8}], 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000180)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000500)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000540)=[{{&(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) sendto$inet(r6, &(0x7f00000005c0)="3293", 0xffffffffffffffe2, 0x84, 0x0, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000600)) r7 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r7, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x36, 0x0, &(0x7f0000000400)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000ffff01000001", 0x0, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.243536832s ago: executing program 0 (id=10551): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) (async) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x4000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000600)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004380)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004440)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {0x0}], 0x2}}], 0x2, 0x20004090) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r6, &(0x7f0000004fc0)={0x1f, @any, 0x1}, 0xa) (async) connect$bt_rfcomm(r6, &(0x7f0000004fc0)={0x1f, @any, 0x1}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000004dc0)={0x16, 0x5, &(0x7f0000004e80)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000004ec0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) r7 = accept$nfc_llcp(r0, &(0x7f0000005000)={0x27, 0x0}, &(0x7f0000005080)=0x60) preadv(r7, &(0x7f0000005140)=[{&(0x7f00000050c0)=""/107, 0x6b}], 0x1, 0x101, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x10, 0xe, &(0x7f0000004540)=ANY=[@ANYBLOB="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"], &(0x7f0000004d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000004d40), 0x8}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000004f34070000000000000070bafc68609ee6a2d7648c785e", @ANYRES16=r10, @ANYBLOB="07000000000000000000050000000c0003800400038004000500180001801400020073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005180)={0x1a, 0x6, &(0x7f0000005240)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00008095"], &(0x7f0000005280)='GPL\x00', 0x8, 0x9c, &(0x7f00000052c0)=""/156, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRESDEC=r11, @ANYBLOB="0000000018738000b70500000800000085000000a500000095f237cac90e39d89354d64e943a6661d2a84f7a21da1e3b874748dbcd877be4421b2bacd1ec39b960f7c97fda41826b253b6650b4e18f09d23f4f31ab4bef1a31b926ea39c06a87d185246126a968218bcf03694bd3e472f56b91d8b54d0d2437ffd2d77cfc03a913535bb305b148d9264675715d00d7b8db5caad65f437ee22bb8602cd11dfc40930c56"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r13, &(0x7f0000000640)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r13, &(0x7f0000000640)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r13, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)='Q', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000003d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000003d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 1.214122074s ago: executing program 4 (id=10552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1000}) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x200}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="05000000030000000000000000400000", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x20}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000680)=@xdp={0x2c, 0xa888, r7, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000780)="034086", 0x3}], 0x1}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x88, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48810}, 0x40000) (async, rerun: 32) r10 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000040)=0x1, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x20000000, 0x80000008, 0x308}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000304fcffffff000000e54c000400", @ANYRES32=0x0, @ANYBLOB="1404000010ff05001c00128009000100626f6e64000000000c0002800800120001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) 1.114246602s ago: executing program 3 (id=10553): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x4) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000680)=[{&(0x7f00000006c0)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x810, 0xffffffffffffffff, 0x878be000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000740)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r9, 0x0, &(0x7f00000004c0)) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'ip6tnl0\x00'}) sendmsg$nl_route(r7, 0x0, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000310001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000b78a0000003c0fcdbcc6d3ec0c4a97e1546500c900240004800e0001d469703665721270616e0000ed0f0002800400120006181800177b000008000a001489400b5cc902093e7cfa80475f0d8b77d73b089d471d9f295c631cef4eaa7912e32ad3a11a184eeb93964a54827916add30bf0afd0d7f77f765830d1f1cf0241c5fc29a48615e8eb9c5a198458cf14ac9bda", @ANYRES32=r6, @ANYRES8=r7], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) bind$netlink(r0, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}, 0x4004040) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) 938.888175ms ago: executing program 1 (id=10554): r0 = epoll_create(0x3ff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x24001000) connect$pppoe(r2, &(0x7f0000000740)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000700000008110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000a7063000ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(r4, &(0x7f0000000980)={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x1e) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0xa, 0x9) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000226a07000ffdbdf256600000008000300", @ANYRES32=r5, @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x884) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x5, 0xd, 0x0, &(0x7f0000000e00)="259a53f271a76d2688644c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) unshare(0x10580) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32=r0, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe000000000000001095000400000000002d0a050000000000180100002020782500000000002020207b1a00fe00000000bfa10000b2000000070100f7440182bc8451b70008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41000}, 0x94) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000700)) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0e000000ffff0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80004}, 0x40c0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES16=r3], 0x1c}}, 0x4008054) write$nci(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="400104"], 0x14) 937.996753ms ago: executing program 2 (id=10555): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x8000, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x8, &(0x7f0000000880)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xb7, 0x3, 0x0, 0x0, 0xfffffc00}, @generic={0xbf, 0x4, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x32}, @generic={0xb7, 0x5, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000780)={0x7, 0x8001, 0x2, 0x2, 0x1}, &(0x7f0000000900)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000c00)={r3, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) (async) splice(r0, &(0x7f0000000a00)=0xa9b0, r2, &(0x7f0000000a40), 0x0, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000b80)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000bc0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000100), 0x4) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0xb3975ac4828b266c, 0x100}}], 0x30, 0xc0}, 0x20000001) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200), 0x4) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d40)={0x254, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x241, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}, @generic="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", @nested={0xf6, 0xb7, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @fd=r0}, @generic="4fc431d37bee6045e2299e022377a8c4ded4bc036d67cd30fae3687219f826c6bed323271e88b15c38d60341bf98f0c362f6b082939a6dc8adcbca8d65021d0daf865f621d950b5fd64e2c7f1fadba5b0c23cb14a9e75e9405645a0834dfcdde1774e8f8d999338fbbeac510f5fa36b0a3c552b09508ec22f930981b217b32716875d29c239a81095bfa640328f4c2de66831f9ab25368402f1952a2e02aad523a2027247f0b86b4a90a2d0c1214966819b0a550c7a4e81ed7e7d06fbb16f6d99b756095c94d3e9d83ee8de63407286dab3bc493a598fbb86682eed3174f8e3361a2ae64c7055dbd5178"]}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x79}]}]}, 0x254}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "b7a41f2300", "d200", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0xffffffa0}, {&(0x7f0000000440)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f00000004c0)="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", 0x149}], 0x3) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/5, 0x5}, 0xe}], 0x1, 0x3, 0x0) 656.786979ms ago: executing program 0 (id=10556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150102000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 563.773432ms ago: executing program 3 (id=10557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) (async) sendmsg$nl_generic(r0, 0x0, 0x20000800) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="6ca65b3b61fe5312924ae157e22c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}, 0x1, 0x0, 0x0, 0x41094}, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x161042, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0xa0000004}) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x1}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000004c0)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000ac0)={0x4, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}]}) (async) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000001c0)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000580)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000900)=""/214, 0xd6}, 0x8}, {{0x0, 0x0, 0x0}, 0x32}], 0x2, 0x100, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0x1}) (async) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'syzkaller1\x00', 0x0}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000b80)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r11, 0x1, 0x2, 0x0, 0x48) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000cc0)=@newtfilter={0x18c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x15c, 0x2, [@TCA_FLOW_EMATCHES={0x128, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe91c, 0x3, 0x5}, {0x0, 0x4, 0x80000000, 0x80000000}}}, @TCF_EM_CONTAINER={0x5c, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x8}, "8a04bacbdd6f9a7adfb73e7ce64c88e2dbab94bd334ba6e6ceed5a644fe83d4e562619b8d3c0c35ede386a1933ed84b74a4e5c32a51783e7388ed15e551bf912294bc946498e754a768490d5e99a"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_META={0x74, 0x2, 0x0, 0x0, {{0x611, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x7}, {0xc, 0x9f, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e36c", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="1444d1b2", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="bbb7da298e", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="94a88164192b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x114, 0x3, 0x2}, {0x6e2, 0xeb, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xcf}, {0x7fff, 0x2, 0x3ff, 0x6, 0x9, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0xffe0}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5b7b}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x18c}}, 0x4044004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7b}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000380)={0x40000013}) 474.973149ms ago: executing program 4 (id=10558): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0x7, [@datasec={0x9, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x2, 0xc}, {0x5, 0x3, 0x5}, {0x1, 0x7f, 0x8}], "fc8a"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x5}}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1ca, 0x101}], "758d24"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @const={0x4, 0x0, 0x0, 0xa, 0x5}, @fwd={0x7}]}, {0x0, [0x5f, 0x5f, 0x0, 0x0, 0x61]}}, &(0x7f0000000680)=""/70, 0xf7, 0x46, 0x1, 0x401}, 0x28) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000000b14010027bd7000ecdbdf2507000700"], 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x1004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x25, r0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r2}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000140)=@framed={{}, [@generic={0xbf, 0x2, 0xa}, @call={0x85, 0x0, 0x0, 0x84}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newqdisc={0x3c, 0x24, 0x20, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0xffeb, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000001280), 0x40000000000009f, 0x0) (async) unshare(0x22020400) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) (async) connect$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b700000051000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3300202010000004704000001ed00007b1300fe000000001d440200000000007a0a00fe00ffffffc303000010010000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f0000001000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x0, 0x10, &(0x7f0000001080), 0xfffffffffffffd00}, 0x48) 463.807657ms ago: executing program 0 (id=10559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r3, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x7}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r0}, 0xc) 419.976375ms ago: executing program 4 (id=10560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000feffffff02002000fe000009000c0000060015000400000014001680100008800c00018006"], 0x38}}, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="200000001200010a00000000000000008001"], 0x20}}, 0x0) 333.126052ms ago: executing program 4 (id=10561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x8, 0x9d5f}, {0xd, 0x41}, 0xfffe, [0xffffffffffff7fff, 0x6, 0xc, 0xec55, 0x43, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x9ba7, 0x8, 0x7, 0x100004]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, &(0x7f0000000100)) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000040000000000000001100000851000000600000018000000000000000000000000800000650000000000000018000000000000000000fffffffd0000950000000000000064030000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 266.751812ms ago: executing program 1 (id=10562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x6, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000c80)=0x8, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000cc0)=""/3, &(0x7f0000000d00)=0xfec2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000bc0)={@loopback={0x600}, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r5, @ANYBLOB="18001d8014000080050023400000000006000500b7000005"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080002000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="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", 0x266}], 0x1}, 0x80c0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000640), 0x4) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f00000006c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000a40)="020427000300000010000000000000f706e105000000000000001104ee1606d4b8bf4a828bda305775c438241efef948d0a3119fb8e74620180100000000000000c83a18ec683b5b583d8d74ba16a75b1b08c2cc43f2e4788494b20000e65d969dcdf5b3226638ea81c90008a6", 0x6d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r8 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000c00)=0x8, 0x4) sendmsg(r8, &(0x7f0000004800)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)="de3798ba14f4be58acc21011fc5c9506fa1c1f495b8402ad9985bb8a8cc531ac66a6a6b9c05a61d4d57e03634a25b286a56932a9d1a8a776484485d212398873067789f78f339975aeb0250c7e7db8ecac21ab65f875d52e22556106d2f8e242920eb254994472d3c01a528615b84b8543e9ba52a638cfa0ab3ef62754d98445ca876ca9b59773b8ccce14da5ab8dd2af35a5bce35f248928cff8d0d7dfb271382f9a72e23c379468e24aaed511b86793b2ba53d48ef722cfc1bb05ecd99b6f5c8707c2a6a54ad067732ba69f4816883bedc3c85e6513e72d4a6", 0xda}], 0x1, &(0x7f00000033c0)=ANY=[@ANYBLOB="c8000000000000000f0100000600000073182f91fb4ccaafac657eda0340699c6cbdbaa1f771db2246b39046f2c5beb654de7fe909810a22fccf7b2d33beada2217ff9d20bc0522bbd56f2c52128199f77fa6d1dd8f7c113928400417d585e5791a974f4fcf55d318a788372c9ed72450caad55447447d59b2b5a0e6906c2d99342f12a85af32e7c9abea009843266949d8215d426fcb1bf701be1cf47ac25776a6d78ba743cda3c0af63482bdf8c4dd481688356dfa9aebcfe39d6ae4156c4b32f71facda560000b0000000000000000301000008000000d03e8db22ed15eed8fb2dc5b489109b72c27aaf61ef0c1f7a976731a891c211ae69294e21db920553286361b24b762449c264edea37739e19da6adeeaf10345925d84284f66222ef91ccb9ac77a0a5c21f560d23ecd1ba014c41c66779ca27881da116e63e731f6faa294ed802e77b66dd0a0e2b38dcb30fe38f17e5631f2f08eaa19d2deb7f86326884b6856d51941968ee545f7966a2354d0000000000000010100000000000000d010000010000007e4695af6522eea1c8b868ed164fd87fb653705d5838ea4d5bfa852a8546f74024a4b6893476b6dde9640835132d233e9f60eb2d5e2517c29b90a10df94ce871dc059aee61e27328de54659f3a268c9b5a48a7830df2476d94fa18afe1f9e31d2b2a570e77d45ca4eb5dae5105bb26a0938526b3a07f9d6430f48d04dd77467a300bd63b463a9331c6c0c2ebc2c52489bb37f63e6520b9f3e0d0bc2a1b116b3a29385b5563d5f8017b23a259c7e524665001f28935728a74e8cf3a1aeb514400fa740758333c78e604b0693d5385385174b4d82a14371aa67843579581dd10c5781fba4437cdc0cb9dcbb45ea2dc90749fe11f671465be9320d95a070732987f4fac44154e9acb81a684eedcc4e3effff9ef22b8f518b235938e761f42f4cec188385d935a27b418811aa7274c0540c94ce4f6e2468b697bff127ea8ad0d9b40169722febfe326583ff4eff99fa2c1dd6dd163cc78d965e6f2ccc6aaace5fce1e39fc50135c2922dfe0027b1e3100c8b771e58d4a9367466291ec343ef88d1fac69037e624bb616dabdd1a046e4af001ef6de513463d6f16eebe859f34d84e5af7b6d1e20d49bd24d8f63c075c133017147fc383915d5a5c3af7fb3b290672d7942160df18e84fe5bd79d9f24613fb3a1feb36ff02aab0927020d28323e6191b6f2ed52e5c9b6e35ca2fa69c32a72cee68f0599be2dd7aaf7bae000e837a1f156a01030ff9e11f6b0bc17e1d265e40bb6b20664562906133fa71ac77f965f9d53e6d0f91621f668b387b09dcfc4c03fafa65ec6d76e93f997ba149af12eea26db5cc6b284bca41eee950a697119b61faba7d39574c66866add7f4b152efda440230380c8ee677a2e9e5bb9dcfa8464b23454fd1d39200fed27832badf8db51302f2ea78d4b5f145dcb3253d67012c7715bb2bd960c3b7efcfd4deb145157bbcc068a5b47f5b9654d6a545ebfc6c174a8a29e39dfd455b6521ef0a51e013f305b426c8e3b57ed0145b9e94901f750a6065cbbd5005eb54c7fda4a7eb6698d8e2c45f5277d3995db7653320c9548486fd553656c3b4e168f4e058659c1ad9de25527c446bd70dadff6d31d07c7f3a8e16f175d8a39818355073a46db6a6e6a5e3a3073789982db7765e363ae00fc32b76e8a169723c87dc5decf8f108bba0c127c1ab4a9233a37b4dc6430ffeb8ca262414fd4337f8e0a5e62c84358adc9a91bb0a7fe9388f217e82defcc5b10f91dfc9e3045bb76e1a19c0ebd157bfcd1c846edea92e75744ed389007cfab78b238a59d152611ee18b4db136f49da00e40b53de087eb17c793294bdf0ed478ab71234299d6956d4205ba0581930ff0aa5c2a25848679f6fa16782b55246a2892e0dcba87a9b413772cc542a647d2c3889c84b6d9694a2f9bcbf23f85df44eec01598e7d992b086dbaa9acca34d8d2416d97a2668c254879840b3b6745428eb6d4deb5f7d5eb48d71acb3719edce5831cd667f7691773ca321d16912811438217d69a47d2667727a44326de786b6e7d2e6164e269c5f44f4bf36b3900d752b4233e7fb7a6c73508b01b5e62f8b643e8366abb8cd4353e42c61ad75692346607e0c096587d10d44f518544be29e9b435575f2f33b0b3fd61e95482dd48ac7f27749d4c24052d7ff5e408387b431517fbd6655a65a69804f5cb85aa3c46415e1ec9c45060d5b42d6fde2009d723c3c0275875c52582c1e32453b9b893fb4d30df98f0974d7ac4584d990b155aa387ef39a64803efbd722298d9686291f5cb7539d4b503aa71f532aae353abc21464808a044bd269508f572fe2620f7161e92989802e23f4505c6041dce3b5d5958ea6090f6053af86363279fc51b11f00336cf4f82736ddc3266779b596e51435dffcaa2ae0c96ea734de4ac101fa8c11a934b301a56eca28c089a930b4e85b9176736d9e0163c233fb331c166e0abb94c922c322b471bcf2ace8c66b0b6b5afafffb0cfe96a4495fa49a7c7d08fba2e464d9c40872d617d51a3639f9b5b26fc649a52ac845b50dcf5fbfb3a95f560ebe5313c0b60c997f52f9d00dd6616bd6b08bcc3aa96b7f6ad0ceecac915ca2e8d3e984cfb9384fa829de79413e7d8a946542fd0dec2d5f65f69939cc9c7c9415d79e3f6a6d30a1d5321e8104141729a996937b737a89e2f4225d0d0a4e1c9f8ac0e8dd2c0b278e6c4fe5fca9359c77911471e9d3d5ba43a88aca436a68451f0b0a0fa738f9dc1adb493a59b996c1946756d306f5918cde00471d45f345b7c66ae38abecccfb3d892f157cba9f56bce9dd99ecd4b9c7bdbd78c7d5821e9f46b6cafba61d0bb7960d110e878a4b8c9dfa9988a5c4f999abbdac466671ad371ac936c4e7202e398ee86bfd6dc4ebf93e7741e52d1f8356d653fedc969722d64feb347290dd869480d6bd504687fcef7c24eb5023b4a3b71896da4814c9618bdc80e1b2693bcfb4fc3fc7ba50e4e31d60adcd2982edc2ee86bf06c274052a5b14ac340e47a719b38516493768f2dd4c4e7d73aff8a15dfb796486d47145c99ce537feaf4a23547daeac8a84fbcdb3a47f3b35e911035a1c05d013e231a4052ee2062de555172c47d07ce7cd317dc657dafb282f9395d80fdcbd84d7bc32311f9539a22cc1cdbbaa527500589b83946f179dadf6414c308922d29125877ae1c04dd208703285d69b0602c23ecbf25159fca00eb55b361411f18e717536274f679e8efecf57f4466d0788ef12be02ca1b885e26358f8acf3acf785cb8e11ad50ba2ff91d4305d3ada4278e0077729a2715b08039ca869be9cd0a316708107eedd9b35717e7c56e0ead3e8c1a8d47a7a18408b2fe06238253af9923a116217b572d88ff31ac5c375ef500311a92513a186821110ce61f42c7504610c4432a387d2ac3962a5eb040227926e9424d44face05a503fbb73f5ba0b745cb8794fc4e27dd20d7acd360d96df16886efa77458cded8295b5db534d9023e30e57b6afb448f9937740c263a68e22c2fde6de8fe74a4b92fa3d9e4f97559d9949ad0283f655d67c4ac3ac901ffa970e6d1f1ef1ad3a8395e1a260d6fe07bd68eaf67757176a34aad400829ead3d5bea6221610cf9369ad14fc2e3fb10d144e0bf9c471f35d47823696d2225b850cc4ff8ed873817091f580997ea8e924f797bb3fb58995c8e8272604a9b9b42054a9e2b29efacd948bd834be174275ef8ca87f2f281a82b194e2775017009171b423658fa7d64d11f3ea1974213949194c434ee0a84048e9f071b783a0ace788ac4cc1b252cc2f9203f7988a865a8fbb1bbe6db6a8ed36db88603b02a8f743aab64a3c17095d32e2432b9f36fdbbf8fc1c9f1c4ae200a2a0a18a0c38a204cfe75e1987674e6d4747930d0de66dae8335e147b30450b2b19b5adbb8dfedfd397724056319969edbe4e5999dadbd3d241e047a83c90295f549b6af67436f3e3ab6b1f7be5ce1e43bc9519e72dcd49d01faaf92437dde4942ee29a35041bdfcfa5b5f894e649547066274e42f2dd81e53e5a8df562416535441bd64fdf0cb037f852bfa5afa0ba7dbefc58835dc5fdfcec512e31b57e8c54a353319d604160b89e3f7159792ee2ae49e39f208addfa1d0cc402d7f1e70c2ab58b4f37beea47e74235cc4235557d2e3b945f975532c0a6b84584f6231335aba0c2e39691606dd3b798f037f168b22674f1c14901b65e11c7da448844e792112a5bad21fb9fcc031e84c20b1c670f6a12823b29bdb99963144ebc025cb99f1f419f4cc70b2d271b0abc850dcd7d99f5f91f5aa1a7352e3b744eb81bedd695b8059b6f2146be4cad404358de97d414721d321e00bc4f8a3183df4e1dd39c6dc29cb6288137f030e06e426df71b166ddbee6a859462a25b7725434f4241f8dd5ad64ca39906af7da1efc558eb047143127fd7b1c7e24fd3be4fb5cb9aac16f7d1e7e3973c83d054ab3a384b8053168b759b4e347160543c7189d31020f5c04e1872c217089dbcf3b27dd9140bb5891f2323d4d348dfa968da26bba1704d9dfed9bcbe16cfd1e0de02ac02e3a01002c01ef46e562f780587cccc7210e32a7300ed4fc319364a81cf753d0a109d72c25c632068fd44640f345da7d2b9a005a06b9e0929ada363b88801edd90ac737898c884f8118c57f60c622dcb69350785c5107ae7f231adc36a958d6e8f2898c73a9c3dc38555281126dcc6f0a451d8cb7ee3e8c25e2e18aec9c88b76567b482ca60e24bcd86f6f802d8643e72cdae4c164177918c1613834285e2e975a980ebabd68ba92fd67e64ea81bf82277d857b3dd0a7adeade260ee6238f195f21a168ba6aa466f1dac509cdb07446336c836e47baaa683573388d3013e2278278067a5a40a44fc11509d61fa2220cfbce864d1abe633f0a14b2459fe1613cd6615110f80badd615416485cfedba63da34992e9c677362260bc670e8ce25fc3dcb9a020d215ad0dee3a404449edc494fd202748eed01fe6f90bc2ebbe676836414fef582cea73268b0f2e6345f304772cf3dea7d253d5b2327aa35dd347dbbccfe94b93a82d5f96fb824c13a5871332b6147611e84d41f896a40f24d258c41210551849c21f0c0c75f909b145fa0c76377b47e21e9b281989492142f1de320c3808b2bd61c3a96fc2dcd58a17dfa31a18187577153dc2708412d2ca197c202db0605699fbffde9cbeb9a759917a75e677d053dd68cf76a9f8302c53aae1eb6b43a8799cc139914fdc9d5eae8b7492566c4b9ff47b516e0e35a2bb943b181f755e6d2f7902d3e3ae0d206f2294e2116f8710d6818d9f3917d41d544da7b17f2af6a87afaa01f2b196a76c1abd5a47f91c6ec16a4025941ce7d7715107f71ca55d4b979b93a210d6d1a8705597961d3234e4628ce45c8b55493882e3b4370b332b22ef30ba8c299ba152afafbdaa00ffdca02917ca17c2990295f2a680af858b53b8d419bd81b53d1cddce40369acd5f0ad11af1e02a3b2a6e6ac35923264d89d23aaf4e0aaa29439a6e03f2ea41ea99c413f8d77cddbaa9ca070a03f20a54d3342b0dfb013530147c6ad23f9a7df6dc47f882cd47de3c23ccad76871211df1cb61bffcfaeb8d8c4f1868b059daeec917452769ddb43b5153b014d1860db90becef7a065c5c35e46c761cf063b0333b964eb6200d847db191916d0fd25a857804899e9c7c2bd40e56c325ba2f54eb14b5f32c8cf6a547a3824df24ac3e9f71da7122d91baaf4655521f1bd810339f41873d398a259f6e12afb93fe0046f8c2f39386056a98923290a6adbe52c17eaae567c4517b982dfe4f9767d3886de3964ecb76b2363914f8918cb6aa47455ce8d55d563d6306cf7024ddd8fc8a36bd2e2173f9d69dc0875c93db6150f7a8537dc04900251c7338055c6b3493e137680da79868dd235a52d72a51eec8346c734d70448b9c2c8fd554c97ecd6d2f5516cfee91997d1eef489f03836d489ad6b2d932947a9a11a9613a716983aaaa1370dfa0120f8e5cba15eaa142f859fe966b0d3230464f11c9a1fa5697e49e709e0d061ebf7a44f1b0c621a704a38c6a14ccf6cefd4dd7b044ca27d0686ef7865114057575e6cc94e2f36967f20aba0d5377c4e89f2b1210c0b1d558af4dbaf142853159ff46db28df8831d20d0286174e780fbb7490ee1e348c33afe27bf298cdd9615a4fff63fb8d9aef84e6f38280d2b5dcb2bd8cd1025bdd31d078fe17b23e52024610e4f1d10527a651cd4e3e841053ef5315d686cafa4bec95cc5e45153eb396a8e33840dfa89cd3b6af0ae4518b4867ea57b170a742800000000000000020100000e0000009189559ae350271974d1d93ba1275da08ec9b60000000000e0000000000000008400000007000000b7d43b894cbd2a4d4df7d7694fc0e1a93c41ae70b3a64bfa4a84d0c5bf8eb3e416d4e415056f9c676c16a2428ee94d94e0742379ccffce9fe547b3a9e7be3e9bceafd1d86692d8f1966e37495353db589c7fc84a7e8980894693f232ad8e43683d04f80e7e41ef89cba6e53e604864ea6355157a370ba914ae8ddffbbcfa5f848555e58a0db85719fe23e2ef7e77f24c08d18bede4007c314641b9fc12044805dd596988bf6b12253d2368f1afc227a7619a9974bc7e642a1e5cb5e757ce34772d91b311f5d2cdc93438aa0000000000a0000000000000001601000003000000d96ec6b2e829352352197235119e7b9bc33be78906a9bdab5dcc75bf7768bac192e59e04a93d74440e843f9c3df8a5bf495be4e6ecf3e6ecf2ee485cb92603bdcd12f1019736ebdfd09b5b2fca14e415e018f1193708168cf466b82ccf96ad125abc345342e89794fbdccbad7846116e55ef07d5b9d06015155167e37751ec6e7a39ef89d019d981604edd78956493eb080100000000000015010000e242000015a89ee75808148dee1f30a950e108a5308799251a5fe65480478c664f5962d0ead7af355da0ee9c4700bfcf4aaa759ad91c1a96fc51f2e28e348e52d2f78f7b7593ddc09d1a18d37d1a02d7c79bce4d266c409b84fa47bd29ced8c9ebc13b729759b80dcbf1f36236eeff523e8fdd1304183ed2bd36ea103661811e454a0322c3386fe143766a82cda3cb822d830e94780c3cf70272e8917e798303b69d04a9a7497e13b7a9cb3d47d1265d7c7ce0c7208c8a087de2afdc4ea0664e41d647d48996e49eb4f7628d9655acdd794ab62531916382d5a9241c2439bc587c5a772e1aa31586c6eb40208b7259e0083b1f019ea999c787e60000"], 0x1438}, 0x4050) 235.408232ms ago: executing program 0 (id=10563): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000240)={&(0x7f0000000000), 0x14, &(0x7f0000000200)={&(0x7f0000000140)="303333b13e1f953fbabe770a8adcfab15db47e4a1dacbe6bda8e2adb2b638e29211166297f5955eac37aad90c019b384e6b9652a41620f921140360a9d36fd0ce6055e19ae49e6ce2fcbe0e51594a47ca66876626ae63743b721664c39676b61d11a2947d6b3f39eba35ddca354e03ded02e9d3b80d8ea9f367c8333fc1aebfe1a4e", 0x82}, 0x1, 0x0, 0x0, 0x48000}, 0x44) 104.791951ms ago: executing program 1 (id=10564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000006000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00002ec1b6e2f9b0444700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xb, &(0x7f0000000780)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0x7fffffff}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xffe}, 0x10) write(r4, &(0x7f00000001c0)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e00000000000000000028000280240003801000018004000300080001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x4008, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000006000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00002ec1b6e2f9b0444700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xb, &(0x7f0000000780)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0x7fffffff}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xffe}, 0x10) (async) write(r4, &(0x7f00000001c0)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e00000000000000000028000280240003801000018004000300080001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x4008, r0}, 0x18) (async) 43.689998ms ago: executing program 0 (id=10565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0xa}, [@IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x684b}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) (async) r9 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r9, &(0x7f0000001840), 0x3b, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r11, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x14, r8, 0x37}, 0x10) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) (async) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 0s ago: executing program 1 (id=10566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44841}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x3261e) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000240), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0x80) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="500000000001010200000000000000000a0000083c0001802c0041645d69a6b19004c5db38f5018014000300fe80000000000000000000000000c197e774dbfbc58f207d56299608a200aa14000400ff0100000000000000000000000000010c0014ca8431028005000100"], 0x50}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000f000000000000000008000085000000c1000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000b7050000080000f785000000a50000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/161, 0x84}, {&(0x7f0000000a80)=""/4072, 0xfe8}, {&(0x7f0000001a80)=""/87}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/45}, {&(0x7f0000001b80)=""/83}], 0x2}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}], 0x4000000000000ad, 0x40002022, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000000)="c3", 0x1) (async) setsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000000)="c3", 0x1) setsockopt$inet6_int(r8, 0x29, 0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0xe, 0x0, &(0x7f00000006c0)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) kernel console output (not intermixed with test programs): 9012'. [ 1496.700952][T13265] netlink: 'syz.0.9015': attribute type 7 has an invalid length. [ 1496.762086][T13261] netlink: 'syz.1.9014': attribute type 83 has an invalid length. [ 1497.795911][T13313] netlink: 'syz.4.9025': attribute type 1 has an invalid length. [ 1497.795938][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9025'. [ 1497.798107][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9025'. [ 1498.302753][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9029'. [ 1498.674023][T13331] veth1_vlan (unregistering): left allmulticast mode [ 1499.423577][T13359] netlink: 'syz.1.9036': attribute type 10 has an invalid length. [ 1499.508631][T13359] netlink: 'syz.1.9036': attribute type 10 has an invalid length. [ 1499.949163][T13376] netlink: 'syz.4.9040': attribute type 1 has an invalid length. [ 1500.050387][T13362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9035'. [ 1500.121253][T13386] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9042'. [ 1500.417252][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9044'. [ 1500.457955][T13394] sctp: [Deprecated]: syz.4.9044 (pid 13394) Use of int in max_burst socket option. [ 1500.457955][T13394] Use struct sctp_assoc_value instead [ 1500.856679][T13404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1500.950498][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1501.015513][T13408] xt_connbytes: Forcing CT accounting to be enabled [ 1501.015536][T13408] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1501.035499][T13397] bridge0: port 1(veth0) entered disabled state [ 1501.035857][T13397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.307692][T13422] Bluetooth: MGMT ver 1.23 [ 1501.460042][T13397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.522190][T13397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.553565][T13425] netlink: 'syz.2.9048': attribute type 1 has an invalid length. [ 1501.672362][T13397] batman_adv: batadv0: Interface deactivated: gretap2 [ 1501.692438][T13397] batman_adv: batadv0: Interface deactivated: gretap3 [ 1501.744892][T13432] netlink: 'syz.2.9048': attribute type 10 has an invalid length. [ 1501.746971][T13432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1502.008173][T13419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1502.305647][T13432] dummy0: entered promiscuous mode [ 1502.348733][T11781] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1502.348772][T11781] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1502.348800][T11781] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.348825][T11781] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1502.348863][T11781] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1502.348889][T11781] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1502.348915][T11781] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.348942][T11781] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1502.348978][T11781] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1502.349004][T11781] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1502.349031][T11781] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.349054][T11781] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1502.349090][T11781] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1502.349117][T11781] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1502.349144][T11781] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.349170][T11781] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1502.855865][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1502.920287][T13474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1502.969036][T13478] sctp: [Deprecated]: syz.4.9057 (pid 13478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1502.969036][T13478] Use struct sctp_sack_info instead [ 1503.327091][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9058'. [ 1503.364032][T16655] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1503.364325][T28065] Bluetooth: hci2: command 0x0401 tx timeout [ 1503.487795][ T6990] bond0: (slave bond_slave_0): interface is now down [ 1503.487819][ T6990] bond0: (slave bond_slave_1): interface is now down [ 1503.487834][ T6990] bond0: (slave bond10): interface is now down [ 1503.522442][T13493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.562124][T13502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9063'. [ 1503.644317][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9060'. [ 1503.707166][T13505] lo: left promiscuous mode [ 1503.740693][T13505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1503.867637][T13508] netlink: 'syz.4.9062': attribute type 4 has an invalid length. [ 1503.942161][T13514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9062'. [ 1504.156467][T13523] syzkaller0: left promiscuous mode [ 1504.156522][T13523] syzkaller0: left allmulticast mode [ 1504.212734][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9064'. [ 1504.212769][T13523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9064'. [ 1504.254421][T13526] netlink: 'syz.2.9066': attribute type 1 has an invalid length. [ 1504.308132][T13529] ip_tables: iptables: counters copy to user failed while replacing table [ 1504.527169][T13548] bond0: entered allmulticast mode [ 1504.527195][T13548] bond_slave_0: entered allmulticast mode [ 1504.527213][T13548] bond_slave_1: entered allmulticast mode [ 1504.776926][T13554] syzkaller1: entered promiscuous mode [ 1504.776953][T13554] syzkaller1: entered allmulticast mode [ 1504.818006][T13554] syzkaller1: left promiscuous mode [ 1504.818030][T13554] syzkaller1: left allmulticast mode [ 1504.922605][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1504.922629][T13557] netlink: 'syz.0.9072': attribute type 4 has an invalid length. [ 1504.922841][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1504.922857][T13557] netlink: 'syz.0.9072': attribute type 4 has an invalid length. [ 1504.923053][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1504.991114][T13557] validate_nla: 11 callbacks suppressed [ 1504.991136][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1504.991151][T13557] netlink: 'syz.0.9072': attribute type 4 has an invalid length. [ 1504.991345][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1504.991361][T13557] netlink: 'syz.0.9072': attribute type 4 has an invalid length. [ 1504.997782][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1505.006736][T13557] netlink: 'syz.0.9072': attribute type 4 has an invalid length. [ 1505.051348][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1505.051371][T13557] netlink: 'syz.0.9072': attribute type 4 has an invalid length. [ 1505.051564][T13557] netlink: 'syz.0.9072': attribute type 9 has an invalid length. [ 1505.051580][T13557] netlink: 'syz.0.9072': attribute type 4 has an invalid length. [ 1505.747610][T13596] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1505.862920][T13596] macsec2: entered promiscuous mode [ 1505.863067][T13596] macsec2: entered allmulticast mode [ 1505.987922][T13614] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1506.007091][T13614] bond14: (slave macvlan4): making interface the new active one [ 1506.028908][T13614] bond14: (slave macvlan4): Enslaving as an active interface with an up link [ 1506.029041][ T5438] bond_slave_0: entered promiscuous mode [ 1506.037221][T13604] syzkaller1: entered promiscuous mode [ 1506.037245][T13604] syzkaller1: entered allmulticast mode [ 1506.211034][T13620] sit0: left promiscuous mode [ 1506.395980][T13620] geneve1: left promiscuous mode [ 1506.421602][T13620] syzkaller0: left promiscuous mode [ 1506.423205][T13620] bond1: left promiscuous mode [ 1506.423229][T13620] geneve2: left promiscuous mode [ 1506.490489][T13620] bond2: left promiscuous mode [ 1506.519247][T13620] bond3: left promiscuous mode [ 1506.553849][T13620] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1506.582179][T13620] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1506.613396][T13620] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1506.641045][T13620] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1506.772350][T13620] batadv1: left promiscuous mode [ 1506.814100][T13620] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 1506.929296][ T6127] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1506.929530][ T6127] bond6: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1506.929610][ T6127] bond6: (slave veth5): making interface the new active one [ 1506.978147][ T6127] bond6: active interface up! [ 1507.036289][T13630] syzkaller1: entered promiscuous mode [ 1507.036316][T13630] syzkaller1: entered allmulticast mode [ 1507.108451][T13652] ip6tnl1: entered allmulticast mode [ 1507.273533][T13657] __nla_validate_parse: 9 callbacks suppressed [ 1507.273560][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9093'. [ 1507.969209][T13683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9102'. [ 1508.334669][T13688] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9104'. [ 1509.172621][T13703] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1509.198353][T28065] Bluetooth: hci2: command 0x0401 tx timeout [ 1509.198400][T16655] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1509.284227][T13705] netlink: 324 bytes leftover after parsing attributes in process `syz.2.9109'. [ 1509.463312][T13727] sctp: [Deprecated]: syz.1.9113 (pid 13727) Use of int in max_burst socket option. [ 1509.463312][T13727] Use struct sctp_assoc_value instead [ 1509.757688][T13727] sctp: [Deprecated]: syz.1.9113 (pid 13727) Use of int in maxseg socket option. [ 1509.757688][T13727] Use struct sctp_assoc_value instead [ 1509.806809][T13735] bond1: Removing last arp target with arp_interval on [ 1509.806835][T13735] bond1: Removing last ns target with arp_interval on [ 1510.448940][T13763] validate_nla: 106 callbacks suppressed [ 1510.448967][T13763] netlink: 'syz.2.9118': attribute type 4 has an invalid length. [ 1510.448985][T13763] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.9118'. [ 1510.604373][T28065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1510.621722][T28065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1510.624614][T28065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1510.626590][T28065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1510.627889][T28065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1510.830534][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1511.750559][T13810] netlink: 272 bytes leftover after parsing attributes in process `syz.3.9129'. [ 1511.945445][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9130'. [ 1511.945480][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9130'. [ 1511.945559][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9130'. [ 1512.275268][T13767] lo speed is unknown, defaulting to 1000 [ 1512.745232][T17278] pim6reg99999999: left allmulticast mode [ 1512.764942][T17278] tipc: Resetting bearer [ 1512.798545][T16655] Bluetooth: hci0: command tx timeout [ 1513.312096][T17278] bond7 (unregistering): (slave ip6gre3): Releasing backup interface [ 1513.312127][T17278] ip6gre3 (unregistering): left promiscuous mode [ 1513.491129][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9134'. [ 1513.491155][T13851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9134'. [ 1513.706818][T13870] netlink: 'syz.4.9136': attribute type 18 has an invalid length. [ 1514.099349][T17278] tipc: Disabling bearer [ 1514.154659][T17278] bond0 (unregistering): Released all slaves [ 1514.170131][T17278] bond1 (unregistering): Released all slaves [ 1514.194965][T17278] bond2 (unregistering): Released all slaves [ 1514.223114][T17278] bond3 (unregistering): Released all slaves [ 1514.244418][T17278] bond4 (unregistering): Released all slaves [ 1514.275335][T17278] bond5 (unregistering): Released all slaves [ 1514.296183][T17278] bond6 (unregistering): Released all slaves [ 1514.313266][T17278] bond7 (unregistering): Released all slaves [ 1514.339156][T17278] bond8 (unregistering): Released all slaves [ 1514.356552][T17278] bond9 (unregistering): Released all slaves [ 1514.374772][T17278] bond10 (unregistering): Released all slaves [ 1514.396595][T17278] bond11 (unregistering): Released all slaves [ 1514.420483][T17278] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1514.421972][T17278] bond12 (unregistering): Released all slaves [ 1514.457089][T17278] bond13 (unregistering): Released all slaves [ 1514.477136][T17278] bond14 (unregistering): Released all slaves [ 1514.504887][T17278] bond15 (unregistering): Released all slaves [ 1514.525137][T17278] bond16 (unregistering): Released all slaves [ 1514.542588][T17278] bond17 (unregistering): Released all slaves [ 1514.560730][T17278] bond18 (unregistering): Released all slaves [ 1514.610356][T13867] syzkaller0: left allmulticast mode [ 1514.613350][ T5300] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1514.902918][T16655] Bluetooth: hci0: command tx timeout [ 1514.944099][T13890] netlink: 'syz.3.9143': attribute type 12 has an invalid length. [ 1514.944125][T13890] netlink: 'syz.3.9143': attribute type 5 has an invalid length. [ 1515.075180][T17278] tipc: Disabling bearer [ 1515.075327][T17278] tipc: Disabling bearer [ 1515.075440][T17278] tipc: Left network mode [ 1515.167061][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9144'. [ 1515.167098][T13898] netlink: 'syz.2.9144': attribute type 1 has an invalid length. [ 1515.167114][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9144'. [ 1515.272709][T17278] IPVS: stopping backup sync thread 3581 ... [ 1515.515676][T13907] tipc: Resetting bearer [ 1515.691370][T13915] syzkaller1: entered promiscuous mode [ 1515.691401][T13915] syzkaller1: entered allmulticast mode [ 1515.712053][T17276] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.712104][T17276] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.712398][T17276] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.712502][T17276] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.734126][T13923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1516.543097][ T5300] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1516.634454][T13767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.636837][T13767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.637019][T13767] bridge_slave_0: entered allmulticast mode [ 1516.673854][T13767] bridge_slave_0: entered promiscuous mode [ 1516.729832][T13767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.730036][T13767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.730224][T13767] bridge_slave_1: entered allmulticast mode [ 1516.769662][T13767] bridge_slave_1: entered promiscuous mode [ 1516.908612][T13965] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9156'. [ 1516.960303][T16655] Bluetooth: hci0: command tx timeout [ 1517.216612][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9163'. [ 1517.235529][T13767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.273051][T13767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.274028][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9162'. [ 1517.547192][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9165'. [ 1517.581144][T17278] hsr_slave_0: left promiscuous mode [ 1517.606398][T17278] hsr_slave_1: left promiscuous mode [ 1517.636992][T13977] netlink: 'syz.2.9164': attribute type 1 has an invalid length. [ 1517.637019][T13977] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9164'. [ 1519.038397][T16655] Bluetooth: hci0: command tx timeout [ 1519.696484][T14021] netlink: del zone limit has 4 unknown bytes [ 1519.947076][T11766] smc: removing ib device syz0 [ 1520.006272][T13767] team0: Port device team_slave_0 added [ 1520.019757][T13767] team0: Port device team_slave_1 added [ 1520.039927][T11766] smbdirect: ib_dev[syz0] removed [ 1520.199417][ T5300] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1520.268037][T14022] syzkaller1: entered promiscuous mode [ 1520.268066][T14022] syzkaller1: entered allmulticast mode [ 1520.446260][T14034] IPVS: length: 77 != 24 [ 1520.580480][T14039] netlink: 'syz.4.9174': attribute type 29 has an invalid length. [ 1520.663143][T14038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9173'. [ 1521.119718][T16655] Bluetooth: hci0: command tx timeout [ 1521.146616][T14034] vxcan0: entered promiscuous mode [ 1521.185797][T13767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.185818][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.185847][T13767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.298985][T13767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.299003][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.299028][T13767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.714508][T13767] hsr_slave_0: entered promiscuous mode [ 1521.729306][T13767] hsr_slave_1: entered promiscuous mode [ 1521.730034][T13767] debugfs: 'hsr0' already exists in 'hsr' [ 1521.733255][T13767] Cannot create hsr debugfs directory [ 1522.179512][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1522.551409][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9182'. [ 1523.437030][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9188'. [ 1523.716938][T14111] syzkaller0: entered promiscuous mode [ 1523.716965][T14111] syzkaller0: entered allmulticast mode [ 1523.738498][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.738539][ T31] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.738567][ T31] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.738595][ T31] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.488038][T14131] netlink: 'syz.3.9195': attribute type 46 has an invalid length. [ 1524.622336][T14121] netlink: 'syz.2.9193': attribute type 7 has an invalid length. [ 1524.622357][T14121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9193'. [ 1525.144128][T14130] lo: entered promiscuous mode [ 1525.568769][T13767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1525.608859][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1525.615124][T13767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1525.655091][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1525.671255][T13767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1525.709958][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1525.713626][T13767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1525.746063][T13767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1526.114956][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.173425][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.189325][T17278] IPVS: stop unused estimator thread 0... [ 1526.211391][T14182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9201'. [ 1526.211425][T14182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9201'. [ 1526.292003][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9201'. [ 1526.292041][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9201'. [ 1526.542809][T14197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9205'. [ 1526.548030][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.548147][T11781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.606420][T17278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.606537][T17278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.663440][T14197] bridge0: left allmulticast mode [ 1527.255452][T14221] x_tables: duplicate underflow at hook 2 [ 1527.613264][T14237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9212'. [ 1527.637936][T14237] netlink: 'syz.2.9212': attribute type 10 has an invalid length. [ 1527.676533][T14238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1527.710856][T14213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1528.455630][T14237] team0 (unregistering): Port device team_slave_0 removed [ 1528.475790][T14237] team0 (unregistering): Port device team_slave_1 removed [ 1528.653229][T14260] Bluetooth: MGMT ver 1.23 [ 1528.759010][T14265] netlink: 3576 bytes leftover after parsing attributes in process `syz.4.9217'. [ 1528.936396][T14273] netlink: 'syz.4.9217': attribute type 219 has an invalid length. [ 1529.184429][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9216'. [ 1529.846919][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9222'. [ 1530.557087][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.613719][T14314] ip_tables: iptables: counters copy to user failed while replacing table [ 1530.830919][T13767] veth0_vlan: entered promiscuous mode [ 1530.895746][T13767] veth1_vlan: entered promiscuous mode [ 1531.033946][T13767] veth0_macvtap: entered promiscuous mode [ 1531.058583][T13767] veth1_macvtap: entered promiscuous mode [ 1531.151637][T13767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.206233][T13767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.269788][T17276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.269965][T17276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.270006][T17276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.270043][T17276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.702957][T11781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.702982][T11781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.925977][T11781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.926001][T11781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.053585][T14345] __nla_validate_parse: 1 callbacks suppressed [ 1532.053607][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9230'. [ 1532.415158][T14355] dummy0: Caught tx_queue_len zero misconfig [ 1532.449462][T14359] nbd: socks must be embedded in a SOCK_ITEM attr [ 1532.915274][T14368] netlink: 'syz.1.9117': attribute type 83 has an invalid length. [ 1533.067962][T14377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1533.575026][T14401] tunl0: entered promiscuous mode [ 1533.588399][T14401] gre0: entered promiscuous mode [ 1533.590407][T14401] gretap0: entered promiscuous mode [ 1533.594167][T14401] erspan0: entered promiscuous mode [ 1533.594307][T14401] ip_vti0: entered promiscuous mode [ 1533.611537][T14401] ip6_vti0: entered promiscuous mode [ 1533.612409][T14401] sit0: entered promiscuous mode [ 1533.653444][T28065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1533.655254][T14401] ip6tnl0: entered promiscuous mode [ 1533.676719][T28065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1533.683854][T28065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1533.703288][T28065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1533.716008][T28065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1533.717191][T14401] ip6gre0: entered promiscuous mode [ 1533.718126][T14401] syz_tun: entered promiscuous mode [ 1533.738884][T14401] ip6gretap0: entered promiscuous mode [ 1533.739805][T14401] vcan0: entered promiscuous mode [ 1533.740978][T14401] bond0: entered promiscuous mode [ 1533.740998][T14401] bond_slave_0: entered promiscuous mode [ 1533.741204][T14401] bond_slave_1: entered promiscuous mode [ 1533.742889][T14401] team0: entered promiscuous mode [ 1533.742909][T14401] team_slave_0: entered promiscuous mode [ 1533.743096][T14401] team_slave_1: entered promiscuous mode [ 1533.825276][T14401] dummy0: entered promiscuous mode [ 1533.833643][T14401] nlmon0: entered promiscuous mode [ 1533.834589][T14401] veth0: entered promiscuous mode [ 1533.837042][T14401] veth1: entered promiscuous mode [ 1533.854906][T14401] wg0: entered promiscuous mode [ 1533.855880][T14401] wg1: entered promiscuous mode [ 1533.872158][T14401] wg2: entered promiscuous mode [ 1533.902067][T14401] veth0_to_bridge: entered promiscuous mode [ 1533.903008][T14401] bridge_slave_0: entered promiscuous mode [ 1533.904280][T14401] veth1_to_bridge: entered promiscuous mode [ 1533.905148][T14401] bridge_slave_1: entered promiscuous mode [ 1533.906385][T14401] veth0_to_bond: entered promiscuous mode [ 1533.953390][T14401] veth1_to_bond: entered promiscuous mode [ 1533.981553][T14401] veth0_to_team: entered promiscuous mode [ 1534.086527][T14401] veth1_to_team: entered promiscuous mode [ 1534.132661][T14401] veth0_to_batadv: entered promiscuous mode [ 1534.133653][T14401] batadv_slave_0: entered promiscuous mode [ 1534.135988][T14401] xfrm0: entered promiscuous mode [ 1534.136806][T14401] veth0_to_hsr: entered promiscuous mode [ 1534.163884][T14401] hsr_slave_0: entered promiscuous mode [ 1534.167833][T14401] veth1_to_hsr: entered promiscuous mode [ 1534.183116][T14401] hsr_slave_1: entered promiscuous mode [ 1534.185529][T14401] veth1_virt_wifi: entered promiscuous mode [ 1534.186419][T14401] veth0_virt_wifi: entered promiscuous mode [ 1534.200151][T14401] virt_wifi0: entered promiscuous mode [ 1534.216159][T14401] geneve0: entered promiscuous mode [ 1534.217190][T14401] geneve1: entered promiscuous mode [ 1534.235301][T14401] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 1534.280146][T14401] veth2: entered promiscuous mode [ 1534.281150][T14401] veth3: entered promiscuous mode [ 1534.282114][T14401] vlan3: entered promiscuous mode [ 1534.306844][T14401] tipc: Resetting bearer [ 1534.327314][T14401] tipc: Resetting bearer [ 1534.327536][T14401] bond1: entered promiscuous mode [ 1534.327558][T14401] geneve2: entered promiscuous mode [ 1534.360027][T14401] ip6tnl1: entered promiscuous mode [ 1534.376144][T14401] ip6tnl2: entered promiscuous mode [ 1534.377046][T14401] bridge1: entered promiscuous mode [ 1534.391748][T14401] ip6gretap1: entered promiscuous mode [ 1534.392623][T14401] bridge_slave_0.: entered promiscuous mode [ 1534.414698][T14401] bond2: entered promiscuous mode [ 1534.423912][T14401] vlan0001: entered promiscuous mode [ 1534.424900][T14401] geneve3: entered promiscuous mode [ 1534.441845][T14401] vxcan0: entered promiscuous mode [ 1534.445997][T14401] vxcan1: entered promiscuous mode [ 1534.468471][T14401] bond3: entered promiscuous mode [ 1534.469730][T14401] ip6gre1: entered promiscuous mode [ 1534.497464][T14401] bond4: entered promiscuous mode [ 1534.503623][T14401] ip6gretap2: entered promiscuous mode [ 1534.513024][T14401] netdevsim netdevsim4 eth0: entered promiscuous mode [ 1534.531074][T14401] netdevsim netdevsim4 eth1: entered promiscuous mode [ 1534.547710][T14401] netdevsim netdevsim4 eth2: entered promiscuous mode [ 1534.564865][T14401] netdevsim netdevsim4 eth3: entered promiscuous mode [ 1534.582964][T14401] bond5: entered promiscuous mode [ 1534.582992][T14401] bridge2: entered promiscuous mode [ 1534.585555][T14401] vlan2: entered promiscuous mode [ 1534.587633][T14401] ip6gre2: entered promiscuous mode [ 1534.613616][T14411] netlink: 'syz.0.9243': attribute type 70 has an invalid length. [ 1534.613887][T14413] netlink: 'syz.0.9243': attribute type 1 has an invalid length. [ 1534.615973][T14401] vxcan2: entered promiscuous mode [ 1534.616904][T14401] vxcan3: entered promiscuous mode [ 1534.625769][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9243'. [ 1534.625842][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9243'. [ 1534.665729][T14401] mac80211_hwsim hwsim78 wlan2: entered promiscuous mode [ 1534.666280][T14401] gre1: entered promiscuous mode [ 1534.668704][T14401] batadv1: entered promiscuous mode [ 1534.687653][T14401] bond6: entered promiscuous mode [ 1534.687678][T14401] veth5: entered promiscuous mode [ 1534.699695][T14401] veth4: entered promiscuous mode [ 1534.701725][T14401] mac80211_hwsim hwsim82 wlan3: entered promiscuous mode [ 1534.702266][T14401] gre2: entered promiscuous mode [ 1534.703018][T14401] bond7: entered promiscuous mode [ 1534.703809][T14401] bond8: entered promiscuous mode [ 1534.704501][T14401] bond9: entered promiscuous mode [ 1534.705196][T14401] pimreg: entered promiscuous mode [ 1534.706074][T14401] mac80211_hwsim hwsim62 dvmrp0: entered promiscuous mode [ 1534.706300][T14401] dummy1: entered promiscuous mode [ 1534.707163][T14401] ip6tnl3: entered promiscuous mode [ 1534.707318][T14401] vsockmon0: entered promiscuous mode [ 1534.760360][T14401] ip6gre3: entered promiscuous mode [ 1534.760571][T14401] ip6gre4: entered promiscuous mode [ 1534.761508][T14401] bond10: entered promiscuous mode [ 1534.791172][T14401] ip6tnl4: entered promiscuous mode [ 1534.792591][T14401] ip6tnl5: entered promiscuous mode [ 1534.792785][T14401] bridge3: entered promiscuous mode [ 1534.793588][T14401] pim6reg99999999: entered promiscuous mode [ 1534.794508][T14401] bridge4: entered promiscuous mode [ 1534.795783][T14401] bond12: entered promiscuous mode [ 1534.796471][T14401] veth6: entered promiscuous mode [ 1534.796638][T14401] veth7: entered promiscuous mode [ 1534.796831][T14401] bridge0: entered promiscuous mode [ 1534.797657][T14401] mac80211_hwsim hwsim88 wlan4: entered promiscuous mode [ 1534.797819][T14401] xfrm1: entered promiscuous mode [ 1534.860254][T14401] mac80211_hwsim hwsim89 wlan5: entered promiscuous mode [ 1534.860439][T14401] ip6tnl6: entered promiscuous mode [ 1534.860569][T14401] bridge5: entered promiscuous mode [ 1534.860712][T14401] syztnl2: entered promiscuous mode [ 1534.860852][T14401] vlan1: entered promiscuous mode [ 1535.027306][T14413] bond15: entered promiscuous mode [ 1535.027777][T14413] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1535.152860][T14415] bond15: (slave bridge13): making interface the new active one [ 1535.152886][T14415] bridge13: entered promiscuous mode [ 1535.172342][T14415] bond15: (slave bridge13): Enslaving as an active interface with an up link [ 1535.783376][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1535.820512][T14451] netlink: 6 bytes leftover after parsing attributes in process `syz.0.9249'. [ 1535.825216][T14452] netlink: 6 bytes leftover after parsing attributes in process `syz.0.9249'. [ 1535.841091][T16655] Bluetooth: hci5: command tx timeout [ 1535.987566][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9251'. [ 1536.152791][T14464] syzkaller0: entered promiscuous mode [ 1536.152818][T14464] syzkaller0: entered allmulticast mode [ 1536.752846][T14473] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20004 [ 1536.760190][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9254'. [ 1536.984957][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9254'. [ 1537.153874][T14489] __nla_validate_parse: 1 callbacks suppressed [ 1537.153897][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9256'. [ 1537.930336][T16655] Bluetooth: hci5: command tx timeout [ 1539.767431][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9259'. [ 1539.998577][T16655] Bluetooth: hci5: command tx timeout [ 1540.253146][T14402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.253414][T14402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.253556][T14402] bridge_slave_0: entered allmulticast mode [ 1540.255428][T14402] bridge_slave_0: entered promiscuous mode [ 1540.266041][T14402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.266356][T14402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.267612][T14402] bridge_slave_1: entered allmulticast mode [ 1540.274913][T14402] bridge_slave_1: entered promiscuous mode [ 1540.358437][T14545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9264'. [ 1540.358468][T14545] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9264'. [ 1540.358496][T14545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9264'. [ 1540.575787][T14402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.078907][T16655] Bluetooth: hci5: command tx timeout [ 1542.583375][T14402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.599868][ T5300] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1542.613168][T11781] veth0: left allmulticast mode [ 1542.613196][T11781] veth0: left promiscuous mode [ 1542.613450][T11781] bridge0: port 1(veth0) entered disabled state [ 1542.646878][T11781] bridge_slave_1: left allmulticast mode [ 1542.646908][T11781] bridge_slave_1: left promiscuous mode [ 1542.647137][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.741175][T11781] pim6reg99999999: left allmulticast mode [ 1542.815314][T14569] netlink: 'syz.1.9269': attribute type 89 has an invalid length. [ 1543.156116][T11781] batman_adv: batadv0: Removing interface: gretap3 [ 1543.197836][T11781] batman_adv: batadv0: Removing interface: gretap2 [ 1543.237443][T11781] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1543.300260][T11781] batman_adv: batadv0: Removing interface: macvtap0 [ 1543.462857][T11781] bond9 (unregistering): (slave geneve6): Releasing active interface [ 1543.621584][T11781] bond0 (unregistering): left promiscuous mode [ 1543.621611][T11781] bond_slave_0: left promiscuous mode [ 1543.621839][T11781] bond_slave_1: left promiscuous mode [ 1543.622021][T11781] bond10 (unregistering): left promiscuous mode [ 1543.624520][T11781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.629611][T11781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.647934][T11781] bond0 (unregistering): (slave bond10): Releasing backup interface [ 1543.684890][T11781] bond0 (unregistering): Released all slaves [ 1543.704345][T11781] team0: Port device bond1 removed [ 1543.704984][T11781] bond1 (unregistering): Released all slaves [ 1543.736603][T11781] bond2 (unregistering): Released all slaves [ 1543.765556][T11781] bond3 (unregistering): Released all slaves [ 1543.786682][T11781] bond5 (unregistering): Released all slaves [ 1543.819418][T11781] bond4 (unregistering): Released all slaves [ 1543.841168][T11781] bond6 (unregistering): Released all slaves [ 1543.872428][T11781] bond7 (unregistering): Released all slaves [ 1543.895002][T11781] bond8 (unregistering): (slave veth7): Releasing active interface [ 1543.895785][T11781] bond8 (unregistering): Released all slaves [ 1543.927733][T11781] bond9 (unregistering): Released all slaves [ 1543.956539][T11781] bond10 (unregistering): Released all slaves [ 1543.984062][T11781] bond11 (unregistering): Released all slaves [ 1543.997807][T14595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9272'. [ 1544.021081][T11781] bond12 (unregistering): Released all slaves [ 1544.036963][T11781] bond13 (unregistering): Released all slaves [ 1544.060022][T11781] bond14 (unregistering): Released all slaves [ 1544.075994][T11781] bond15 (unregistering): (slave wireguard0): Releasing backup interface [ 1544.076015][T11781] wireguard0: left promiscuous mode [ 1544.076641][T11781] bond15 (unregistering): Released all slaves [ 1544.104612][T11781] bond16 (unregistering): (slave wireguard1): Releasing backup interface [ 1544.104635][T11781] wireguard1: left promiscuous mode [ 1544.105212][T11781] bond16 (unregistering): Released all slaves [ 1544.142509][T11781] bond17 (unregistering): Released all slaves [ 1544.157908][T11781] bond18 (unregistering): Released all slaves [ 1544.233830][T14570] v: renamed from vlan1 [ 1544.376268][T14402] team0: Port device team_slave_0 added [ 1544.420954][T14402] team0: Port device team_slave_1 added [ 1544.421756][T14603] x_tables: duplicate underflow at hook 2 [ 1544.488835][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9274'. [ 1544.488863][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9274'. [ 1544.530494][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9274'. [ 1544.576883][T14402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.576903][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.576933][T14402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.636025][T14402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.636046][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.636140][T14402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.911304][T14402] hsr_slave_0: entered promiscuous mode [ 1544.916481][T14402] hsr_slave_1: entered promiscuous mode [ 1544.917160][T14402] debugfs: 'hsr0' already exists in 'hsr' [ 1544.917180][T14402] Cannot create hsr debugfs directory [ 1544.917402][T11781] tipc: Disabling bearer [ 1544.917566][T11781] tipc: Left network mode [ 1545.967762][T14630] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9279'. [ 1545.967790][T14630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9279'. [ 1547.065594][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1547.082300][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9284'. [ 1547.595739][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9285'. [ 1547.875998][T11781] batadv0: left promiscuous mode [ 1547.888884][T11781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.891587][T11781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.199491][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9290'. [ 1548.242044][T14699] ip_tables: iptables: counters copy to user failed while replacing table [ 1548.268095][T14700] ip_tables: iptables: counters copy to user failed while replacing table [ 1548.387399][T11781] team0 (unregistering): Port device team_slave_1 removed [ 1548.410630][T11781] team0 (unregistering): Port device team_slave_0 removed [ 1548.493074][T14707] netlink: 'syz.4.9289': attribute type 4 has an invalid length. [ 1548.635931][T14693] syzkaller0: Caught tx_queue_len zero misconfig [ 1548.636326][T14696] bridge_slave_1: left allmulticast mode [ 1548.636350][T14696] bridge_slave_1: left promiscuous mode [ 1548.636617][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.671000][T14696] bridge_slave_0: left allmulticast mode [ 1548.671030][T14696] bridge_slave_0: left promiscuous mode [ 1548.671282][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.746615][T14707] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1548.903084][T14402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1548.925830][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1548.942610][T14402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1548.954564][T14710] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1549.014636][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1549.018105][T14402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1549.083457][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1549.084395][T14402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1549.146515][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1549.256120][T14725] __nla_validate_parse: 1 callbacks suppressed [ 1549.256143][T14725] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9295'. [ 1549.351985][T14710] netlink: 'syz.2.9293': attribute type 6 has an invalid length. [ 1549.380799][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9294'. [ 1549.580959][T11781] IPVS: stop unused estimator thread 0... [ 1549.805777][T14402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.863592][T14402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.883879][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.883999][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.929853][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.929970][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.194784][T14752] ip6tnl1: entered allmulticast mode [ 1550.533303][T14767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1550.711517][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9303'. [ 1551.034103][T14779] netlink: 'syz.1.9305': attribute type 62 has an invalid length. [ 1551.322326][T14793] netlink: 'syz.1.9307': attribute type 1 has an invalid length. [ 1551.447009][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9307'. [ 1551.723701][T14793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1551.811884][T14799] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1551.861530][T14800] bridge0: entered promiscuous mode [ 1551.875239][T14800] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 1552.191721][T14402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.314349][T14402] veth0_vlan: entered promiscuous mode [ 1552.345908][T14402] veth1_vlan: entered promiscuous mode [ 1552.435364][T14402] veth0_macvtap: entered promiscuous mode [ 1552.470283][T14402] veth1_macvtap: entered promiscuous mode [ 1552.616862][T14402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.647457][T14402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.678596][T17278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.756185][T17278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.760001][T17278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.760098][T17278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.273343][T14840] syzkaller0: entered promiscuous mode [ 1553.273372][T14840] syzkaller0: entered allmulticast mode [ 1553.284528][T14851] netlink: 'syz.2.9314': attribute type 1 has an invalid length. [ 1553.310637][T11767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.310660][T11767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.526170][T14851] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1556.757751][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1556.807373][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9319'. [ 1556.822361][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1556.846980][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1559.182778][T11767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.182803][T11767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.425004][T14917] netlink: 'syz.2.9320': attribute type 1 has an invalid length. [ 1559.496156][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9320'. [ 1559.574290][T14930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9320'. [ 1559.579131][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9320'. [ 1560.029623][T14930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1560.505414][T14971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9330'. [ 1560.691717][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9329'. [ 1560.827699][T28065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1560.839960][T28065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1560.842492][T28065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1560.850134][T28065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1560.852683][T28065] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1561.548781][T15006] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9336'. [ 1562.831145][T15048] __nla_validate_parse: 1 callbacks suppressed [ 1562.831165][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9344'. [ 1562.945445][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.945625][T14982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.946083][T14982] bridge_slave_0: entered allmulticast mode [ 1562.961693][T16655] Bluetooth: hci4: command tx timeout [ 1562.978463][T14982] bridge_slave_0: entered promiscuous mode [ 1562.989590][T14982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.989775][T14982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.990205][T14982] bridge_slave_1: entered allmulticast mode [ 1562.992211][T14982] bridge_slave_1: entered promiscuous mode [ 1563.061991][T14982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.067297][T14982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1563.124864][T14982] team0: Port device team_slave_0 added [ 1563.134416][T14982] team0: Port device team_slave_1 added [ 1563.175788][T14982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.175808][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.175837][T14982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.177686][T15060] netlink: 'syz.3.9347': attribute type 4 has an invalid length. [ 1563.235442][T15063] netlink: 'syz.3.9347': attribute type 4 has an invalid length. [ 1563.236196][T15064] netlink: 'syz.3.9347': attribute type 4 has an invalid length. [ 1563.256223][T14982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.256243][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.256272][T14982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.356450][T14982] hsr_slave_0: entered promiscuous mode [ 1563.357582][T14982] hsr_slave_1: entered promiscuous mode [ 1563.378530][T14982] debugfs: 'hsr0' already exists in 'hsr' [ 1563.378553][T14982] Cannot create hsr debugfs directory [ 1563.676859][T14982] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.676898][T14982] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1563.676928][T14982] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1563.886303][T14982] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.886332][T14982] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1563.886353][T14982] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1563.956788][T15097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1563.957642][T15096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1564.149634][T14982] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.149672][T14982] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1564.149699][T14982] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1564.256296][T14982] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.256325][T14982] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1564.256346][T14982] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1565.038751][T16655] Bluetooth: hci4: command tx timeout [ 1565.303250][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.303510][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.303851][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.304078][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.304302][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.304518][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.305489][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.305760][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.305986][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1565.586821][T15119] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1565.644599][T15119] xt_CT: No such helper "syz0" [ 1566.616411][T15077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1566.657811][T14982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1566.687652][T14982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1566.697882][T14982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1566.735702][T14982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1566.736810][T14982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1566.763198][T14982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1566.767198][T14982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1566.790435][T14982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1566.921946][T14982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.963699][T14982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.004509][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.004589][T11767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.048116][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.048309][T11767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.120539][T16655] Bluetooth: hci4: command tx timeout [ 1567.273935][T15155] sctp: [Deprecated]: syz.3.9367 (pid 15155) Use of int in max_burst socket option. [ 1567.273935][T15155] Use struct sctp_assoc_value instead [ 1568.012796][T15156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.064680][T15179] bridge_slave_0: left allmulticast mode [ 1568.064710][T15179] bridge_slave_0: left promiscuous mode [ 1568.064940][T15179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.110244][T15179] bridge_slave_1: left allmulticast mode [ 1568.110273][T15179] bridge_slave_1: left promiscuous mode [ 1568.113049][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.193222][T15179] bond0: (slave bond_slave_0): Releasing backup interface [ 1568.232985][T15179] bond0: (slave bond_slave_1): Releasing backup interface [ 1568.264292][T15179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.264320][T15179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.288738][T15179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.288767][T15179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.291056][T15179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1568.340100][T15189] xt_hashlimit: size too large, truncated to 1048576 [ 1568.394997][T15180] vlan0: entered promiscuous mode [ 1568.438021][T15179] tipc: Enabling of bearer rejected, failed to enable media [ 1568.521610][T15180] netlink: 'syz.2.9371': attribute type 1 has an invalid length. [ 1568.580263][T15156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.824428][T15156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.067803][T15156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.161432][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161457][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161470][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161483][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161495][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161506][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161518][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161529][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161541][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161553][T15203] tc action pedit 'at' offset 9 out of bounds [ 1569.161596][T15203] TC_ACT_REPEAT abuse ? [ 1569.203242][T16655] Bluetooth: hci4: command tx timeout [ 1569.382409][T15218] ip_tables: iptables: counters copy to user failed while replacing table [ 1569.440111][ T6127] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.493927][T14982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1569.537881][T17280] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.538811][T17280] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.638381][T17280] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.854756][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.854878][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.854988][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.855094][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.887400][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.887571][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.887689][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.887804][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.887918][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1569.888031][T15229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1570.425681][T14982] veth0_vlan: entered promiscuous mode [ 1570.473547][T14982] veth1_vlan: entered promiscuous mode [ 1570.564403][T14982] veth0_macvtap: entered promiscuous mode [ 1570.583685][T14982] veth1_macvtap: entered promiscuous mode [ 1570.615060][T14982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.633883][T14982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.714372][ T6990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.714824][ T6990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.715343][ T6990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.748857][T11781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.775065][T15258] netlink: 'syz.2.9383': attribute type 8 has an invalid length. [ 1570.964865][T15253] bond3: option all_slaves_active: invalid value (238) [ 1570.977402][T15253] bond3 (unregistering): Released all slaves [ 1571.024426][ T6990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.024459][ T6990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.165448][ T6127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.165473][ T6127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.315860][T15277] netlink: 'syz.1.9388': attribute type 1 has an invalid length. [ 1571.404207][T15282] __nla_validate_parse: 57 callbacks suppressed [ 1571.404229][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9388'. [ 1571.446421][T15277] bond2: entered promiscuous mode [ 1571.446935][T15277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1571.447703][T15280] bridge0: port 1(dummy0) entered blocking state [ 1571.447997][T15280] bridge0: port 1(dummy0) entered disabled state [ 1571.448154][T15280] dummy0: entered allmulticast mode [ 1571.487734][T15280] bridge0: port 1(dummy0) entered blocking state [ 1571.488056][T15280] bridge0: port 1(dummy0) entered forwarding state [ 1571.499665][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9388'. [ 1572.053245][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9400'. [ 1572.167062][T28065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1572.183632][T28065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1572.192521][T28065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1572.193678][T28065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1572.194344][T28065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1572.367499][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9403'. [ 1572.367528][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9403'. [ 1572.994012][T15351] netlink: 216 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1573.017932][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1573.154798][T15367] sctp: [Deprecated]: syz.4.9408 (pid 15367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1573.154798][T15367] Use struct sctp_sack_info instead [ 1573.181770][T15367] sctp: [Deprecated]: syz.4.9408 (pid 15367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1573.181770][T15367] Use struct sctp_sack_info instead [ 1573.657812][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9414'. [ 1573.668099][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9414'. [ 1574.096149][T15402] tipc: Started in network mode [ 1574.096184][T15402] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 1574.096542][T15402] tipc: Enabled bearer , priority 7 [ 1574.316780][T15412] netlink: 'syz.3.9419': attribute type 4 has an invalid length. [ 1574.318827][T16655] Bluetooth: hci3: command tx timeout [ 1574.361192][T15412] netlink: 'syz.3.9419': attribute type 2 has an invalid length. [ 1574.361222][T15412] netlink: 'syz.3.9419': attribute type 2 has an invalid length. [ 1574.435588][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9420'. [ 1574.693511][T15422] tap0: tun_chr_ioctl cmd 1074025677 [ 1574.693637][T15422] tap0: linktype set to 769 [ 1576.398991][T16655] Bluetooth: hci3: command tx timeout [ 1577.823665][T12345] tipc: Node number set to 9480874 [ 1577.841637][T15456] Cannot find del_set index 0 as target [ 1577.845197][T15458] Cannot find del_set index 0 as target [ 1577.922683][T15320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.922806][T15320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.922947][T15320] bridge_slave_0: entered allmulticast mode [ 1577.926297][T15320] bridge_slave_0: entered promiscuous mode [ 1577.958559][T15320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.958743][T15320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.958894][T15320] bridge_slave_1: entered allmulticast mode [ 1577.960716][T15320] bridge_slave_1: entered promiscuous mode [ 1578.025561][T15320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.039655][T15320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.090535][T15320] team0: Port device team_slave_0 added [ 1578.093663][T15320] team0: Port device team_slave_1 added [ 1578.149107][T15320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.149127][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.149156][T15320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.151309][T15320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.151324][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.151353][T15320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.289491][T15320] hsr_slave_0: entered promiscuous mode [ 1578.290540][T15320] hsr_slave_1: entered promiscuous mode [ 1578.291292][T15320] debugfs: 'hsr0' already exists in 'hsr' [ 1578.291310][T15320] Cannot create hsr debugfs directory [ 1578.397139][T15470] __nla_validate_parse: 1 callbacks suppressed [ 1578.397162][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9427'. [ 1578.449254][T15472] netlink: 'syz.3.9430': attribute type 1 has an invalid length. [ 1578.452048][T15472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9430'. [ 1578.478722][T16655] Bluetooth: hci3: command tx timeout [ 1578.481514][T15472] netlink: 'syz.3.9430': attribute type 1 has an invalid length. [ 1578.593554][T15462] bridge_slave_0: left allmulticast mode [ 1578.593586][T15462] bridge_slave_0: left promiscuous mode [ 1578.593767][T15462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.697807][T15480] veth3: entered allmulticast mode [ 1578.860452][T15320] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.860492][T15320] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1579.026090][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9437'. [ 1579.040380][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.120975][T15497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.182663][T15320] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.182703][T15320] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1579.214692][T15497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.247349][T15501] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 1579.345245][T15501] ip6gretap1: entered allmulticast mode [ 1579.360959][T15501] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1579.360979][T15501] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.361013][T15501] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1579.550155][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.825813][T15513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9441'. [ 1579.846086][T15490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.893638][T15490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.230278][T15320] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.241573][T15320] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1580.318919][ T6990] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.319976][T17278] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.320018][T17278] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.320056][T17278] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.373553][T15320] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.373593][T15320] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1580.516476][T15517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1580.554203][T15517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1580.560093][T16655] Bluetooth: hci3: command tx timeout [ 1580.602580][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1580.659768][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1580.681248][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1580.711198][T15524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1580.792116][T15519] bond1: Invalid ad_actor_system MAC address. [ 1580.792142][T15519] bond1: option ad_actor_system: invalid value (7) [ 1580.796397][T15519] bond1 (unregistering): Released all slaves [ 1581.072938][T15537] block nbd1: server does not support multiple connections per device. [ 1581.073256][T15537] block nbd1: shutting down sockets [ 1581.187905][T15320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1581.202901][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1581.204401][T15320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1581.233880][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1581.234889][T15320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1581.258853][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1581.259808][T15320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1581.267985][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1581.624337][T15556] vlan0: left promiscuous mode [ 1581.687759][T15556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1581.841955][T11767] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.920592][ T6127] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.920652][ T6127] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.920691][ T6127] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.010757][T15320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.098014][T15320] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.131894][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.132013][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.160551][T17278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.160666][T17278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.325279][T15575] batman_adv: batadv0: Adding interface: veth0 [ 1582.325299][T15575] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.325510][T15575] batman_adv: batadv0: Interface activated: veth0 [ 1582.326225][T15575] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1582.655943][T15582] syzkaller0: entered promiscuous mode [ 1582.655980][T15582] syzkaller0: entered allmulticast mode [ 1583.077366][T15595] Cannot find set identified by id 1 to match [ 1583.168271][T15600] netlink: 'syz.2.9463': attribute type 1 has an invalid length. [ 1583.452948][T15320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.529271][T15612] __nla_validate_parse: 11 callbacks suppressed [ 1583.529295][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1583.534500][T15615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.534940][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1583.611777][T15320] veth0_vlan: entered promiscuous mode [ 1583.627992][T15320] veth1_vlan: entered promiscuous mode [ 1583.673658][T15320] veth0_macvtap: entered promiscuous mode [ 1583.687281][T15320] veth1_macvtap: entered promiscuous mode [ 1583.719750][T15320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.741247][T15320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.859078][ T1180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.859228][T11767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.859269][T11767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.859304][T11767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.947155][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.947180][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.001873][T15602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1584.002523][ T6990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.002544][ T6990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.299976][T15625] ipvlan2: entered promiscuous mode [ 1584.602712][T15560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1584.759831][T15636] netlink: 'syz.4.9473': attribute type 1 has an invalid length. [ 1584.759855][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9473'. [ 1586.156453][T15677] macsec1: entered promiscuous mode [ 1586.412143][ T6125] IPVS: starting estimator thread 0... [ 1586.426903][T15698] netlink: 'syz.1.9487': attribute type 1 has an invalid length. [ 1586.500638][T15699] IPVS: using max 24 ests per chain, 57600 per kthread [ 1586.539240][T15698] netlink: 'syz.1.9487': attribute type 1 has an invalid length. [ 1586.545084][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1586.585997][T15701] bond3: (slave geneve2): making interface the new active one [ 1586.600483][T15701] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1586.636372][T15698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1586.979773][T11767] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1586.979835][T11767] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1586.979874][T11767] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1586.988808][ T6127] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1587.106209][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1587.144231][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1587.266698][T15715] netlink: 'syz.1.9493': attribute type 4 has an invalid length. [ 1587.677395][T15738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1587.712048][T15742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1587.776844][T15745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9500'. [ 1588.133942][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9502'. [ 1588.133975][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9502'. [ 1588.218734][T15723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1588.347817][T15758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9503'. [ 1588.966705][T15777] Cannot find del_set index 4 as target [ 1588.973414][T15780] IPVS: set_ctl: invalid protocol: 63512 224.0.0.2:20003 [ 1588.997255][T15781] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20004 [ 1589.024065][T15783] netlink: 'syz.3.9509': attribute type 8 has an invalid length. [ 1589.040581][T15785] x_tables: duplicate underflow at hook 1 [ 1589.219279][ T6127] IPVS: starting estimator thread 0... [ 1589.316211][T15799] veth1_macvtap: left promiscuous mode [ 1589.322722][T15801] IPVS: using max 23 ests per chain, 55200 per kthread [ 1589.762917][T15819] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9520'. [ 1589.763191][T15819] IPVS: Error connecting to the multicast addr [ 1589.937899][T15826] xt_l2tp: v2 doesn't support IP mode [ 1590.102802][T15826] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1590.102833][T15826] bond1: option arp_ip_target: invalid value (0) [ 1590.125569][T15826] bond1 (unregistering): Released all slaves [ 1590.571924][T15861] netlink: 'syz.3.9528': attribute type 1 has an invalid length. [ 1590.626575][T15861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1590.662384][T15861] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1590.974721][T15877] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 7, id = 0 [ 1591.316928][ T5300] veth1_macvtap: entered promiscuous mode [ 1591.766302][T15891] Bluetooth: ISO socket layer initialized [ 1593.113969][T15858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1593.115021][T15874] netlink: 'syz.1.9531': attribute type 1 has an invalid length. [ 1593.115050][T15874] nbd: illegal input index 393236 [ 1593.223019][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9536'. [ 1593.382069][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9539'. [ 1593.382513][T15908] vlan0: entered promiscuous mode [ 1593.610150][T15914] netlink: 'syz.4.9540': attribute type 16 has an invalid length. [ 1593.610172][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9540'. [ 1593.698135][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9541'. [ 1594.192333][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1594.274938][T15964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9548'. [ 1594.333228][T15968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9548'. [ 1594.462989][T15966] IPv6: sit1: Disabled Multicast RS [ 1594.475734][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9548'. [ 1594.492464][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9552'. [ 1594.503742][T15974] tap0: tun_chr_ioctl cmd 1074025677 [ 1594.503881][T15974] tap0: linktype set to 805 [ 1594.795815][T15989] lo: entered promiscuous mode [ 1594.806857][T15993] batadv_slave_0: entered promiscuous mode [ 1594.824084][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1594.842219][T15988] batadv_slave_0: left promiscuous mode [ 1594.842462][T15988] lo: left promiscuous mode [ 1595.120942][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9557'. [ 1595.255455][ T30] audit: type=1800 audit(1794226279.314:34): pid=16010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9558" name="blkio.bfq.time_recursive" dev="tmpfs" ino=119 res=0 errno=-22 [ 1595.315217][T16010] netlink: 'syz.0.9558': attribute type 2 has an invalid length. [ 1595.375487][T16010] !;: entered promiscuous mode [ 1595.625970][T16024] netlink: 'syz.1.9563': attribute type 2 has an invalid length. [ 1595.649766][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9563'. [ 1595.739672][T16025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9561'. [ 1595.794787][T16025] netlink: 'syz.2.9561': attribute type 61 has an invalid length. [ 1595.794816][T16025] netlink: 'syz.2.9561': attribute type 268 has an invalid length. [ 1596.867464][T16075] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 1596.936934][T17278] IPVS: starting estimator thread 0... [ 1597.019524][T16083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1597.020490][T16083] bridge0: port 2(bond4) entered blocking state [ 1597.020679][T16083] bridge0: port 2(bond4) entered disabled state [ 1597.020812][T16083] bond4: entered allmulticast mode [ 1597.023568][T16083] bond4: entered promiscuous mode [ 1597.024406][T16083] bridge0: port 2(bond4) entered blocking state [ 1597.024528][T16083] bridge0: port 2(bond4) entered forwarding state [ 1597.025819][T16080] IPVS: using max 26 ests per chain, 62400 per kthread [ 1597.683054][ T6127] bridge0: port 2(bond4) entered disabled state [ 1598.882539][T16031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1599.039606][T16087] netlink: 'syz.1.9578': attribute type 3 has an invalid length. [ 1599.176225][T16096] netlink: 'syz.2.9577': attribute type 21 has an invalid length. [ 1599.176252][T16096] IPv6: NLM_F_CREATE should be specified when creating new route [ 1599.207186][T16100] tipc: Enabling of bearer rejected, failed to enable media [ 1599.364135][T16655] Bluetooth: hci2: command 0x0401 tx timeout [ 1599.399556][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9577'. [ 1599.614088][T16120] Unsupported ieee802154 address type: 0 [ 1599.642503][T16121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1599.664865][T16123] Unsupported ieee802154 address type: 0 [ 1599.889364][T16137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9588'. [ 1600.003223][T16141] bridge3: entered allmulticast mode [ 1600.045326][T16141] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1600.075299][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9588'. [ 1600.220754][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1600.405712][T16150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1600.437019][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1601.092019][T16182] netlink: 'syz.1.9601': attribute type 21 has an invalid length. [ 1601.092019][T16183] netlink: 'syz.1.9601': attribute type 21 has an invalid length. [ 1601.092102][T16183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9601'. [ 1601.092132][T16183] netlink: 'syz.1.9601': attribute type 1 has an invalid length. [ 1601.092208][T16182] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9601'. [ 1601.092241][T16182] netlink: 'syz.1.9601': attribute type 1 has an invalid length. [ 1601.682373][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9599'. [ 1601.713596][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9599'. [ 1601.971993][T16218] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9607'. [ 1601.972121][T16218] xt_IDLETIMER: label is empty or not nul-terminated [ 1602.699953][T16254] syzkaller1: entered promiscuous mode [ 1602.699980][T16254] syzkaller1: entered allmulticast mode [ 1602.770734][T16256] netlink: 'syz.2.9615': attribute type 4 has an invalid length. [ 1603.143833][T16265] syzkaller0: entered promiscuous mode [ 1603.143871][T16265] syzkaller0: entered allmulticast mode [ 1603.998141][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058330400: rx timeout, send abort [ 1604.504175][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058330400: abort rx timeout. Force session deactivation [ 1605.043046][T16225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1605.421509][T16286] __nla_validate_parse: 4 callbacks suppressed [ 1605.421531][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1605.654657][T16295] block nbd1: server does not support multiple connections per device. [ 1605.655024][T16295] block nbd1: shutting down sockets [ 1606.503794][T16313] tipc: Started in network mode [ 1606.503832][T16313] tipc: Node identity ac14140f, cluster identity 4711 [ 1606.504141][T16313] tipc: New replicast peer: 255.255.255.255 [ 1606.504999][T16313] tipc: Enabled bearer , priority 10 [ 1606.754000][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9630'. [ 1606.754028][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9630'. [ 1606.803333][T16321] netlink: 'syz.1.9632': attribute type 8 has an invalid length. [ 1606.805984][T16321] vlan1: entered promiscuous mode [ 1606.806180][T16321] vlan1: entered allmulticast mode [ 1606.806196][T16321] veth0_vlan: entered allmulticast mode [ 1607.247612][T16346] ksmbd: Unknown IPC event: 14, ignore. [ 1607.553962][T16366] syzkaller0: entered promiscuous mode [ 1607.553988][T16366] syzkaller0: entered allmulticast mode [ 1607.638419][ T5447] tipc: Node number set to 2886997007 [ 1607.746852][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9647'. [ 1607.776080][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9647'. [ 1607.787278][T16366] bond1: Unable to set down delay as MII monitoring is disabled [ 1607.802904][T16366] bond1 (unregistering): Released all slaves [ 1608.017131][T16365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1608.500389][T16404] netlink: 'syz.1.9651': attribute type 1 has an invalid length. [ 1608.677002][T16404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1608.699605][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9652'. [ 1609.726851][T16470] x_tables: duplicate underflow at hook 3 [ 1609.737623][T16470] ip_tables: iptables: counters copy to user failed while replacing table [ 1609.902520][T16473] TC_ACT_REPEAT abuse ? [ 1609.963249][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9675'. [ 1610.055402][T16488] bridge_slave_0: left allmulticast mode [ 1610.055424][T16488] bridge_slave_0: left promiscuous mode [ 1610.055585][T16488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.097047][T16488] bridge_slave_1: left allmulticast mode [ 1610.097068][T16488] bridge_slave_1: left promiscuous mode [ 1610.097234][T16488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.133686][T16488] bond0: (slave bond_slave_0): Releasing backup interface [ 1610.157929][T16488] bond0: (slave bond_slave_1): Releasing backup interface [ 1610.229619][T16488] team0: Port device team_slave_0 removed [ 1610.278028][T16488] team0: Port device team_slave_1 removed [ 1610.287092][T16488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.287118][T16488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.297373][T16488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.300640][T16488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.333314][T16488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1610.365315][T16493] team0: Mode changed to "broadcast" [ 1610.424888][T16488] tipc: Started in network mode [ 1610.424923][T16488] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1610.425116][T16488] tipc: Enabled bearer , priority 0 [ 1610.443063][T28065] Bluetooth: hci3: connection err: -111 [ 1610.860337][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9678'. [ 1611.568878][T12327] tipc: Node number set to 11578026 [ 1611.889428][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1612.392832][T16547] smc: adding net device macvtap0 with user defined pnetid SYZ0 [ 1613.065498][T16572] netlink: 'syz.1.9687': attribute type 2 has an invalid length. [ 1613.226154][T16581] sctp: [Deprecated]: syz.2.9689 (pid 16581) Use of int in max_burst socket option. [ 1613.226154][T16581] Use struct sctp_assoc_value instead [ 1613.304602][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9690'. [ 1614.606833][T17278] bond1: left allmulticast mode [ 1614.607028][T17278] bond1: left promiscuous mode [ 1614.607329][T17278] bridge0: port 3(bond1) entered disabled state [ 1614.631308][T17278] bridge_slave_1: left allmulticast mode [ 1614.631336][T17278] bridge_slave_1: left promiscuous mode [ 1614.631561][T17278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.698891][T16603] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1614.734041][T17278] batman_adv: batadv0: Interface deactivated: ip6gretap0 [ 1614.776537][T17278] bond_slave_0: left promiscuous mode [ 1614.803792][T16605] netlink: 'syz.4.9693': attribute type 10 has an invalid length. [ 1614.926607][T17278] batman_adv: batadv0: Removing interface: ip6gretap0 [ 1615.192389][T16615] x_tables: duplicate entry at hook 4 [ 1615.246439][T17278] bond12 (unregistering): (slave geneve4): Releasing active interface [ 1615.284256][T17278] bridge0 (unregistering): left allmulticast mode [ 1615.452472][T17278] bond11 (unregistering): (slave bridge10): Releasing backup interface [ 1615.452504][T17278] bridge10 (unregistering): left promiscuous mode [ 1615.474401][T17278] bond13 (unregistering): (slave bridge11): Releasing backup interface [ 1615.474430][T17278] bridge11 (unregistering): left promiscuous mode [ 1615.502678][T17278] bond15 (unregistering): (slave bridge13): Releasing backup interface [ 1615.502699][T17278] bridge13 (unregistering): left promiscuous mode [ 1615.547243][T17278] bond14 (unregistering): (slave macvlan4): Releasing active interface [ 1615.568803][T17278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.569236][T17278] bond_slave_0: left allmulticast mode [ 1615.570240][T17278] bond0 (unregistering): Released all slaves [ 1615.575940][T17278] bond1 (unregistering): Released all slaves [ 1615.616420][T17278] bond2 (unregistering): (slave veth3): Releasing active interface [ 1615.617727][T17278] bond2 (unregistering): Released all slaves [ 1615.643770][T17278] bond3 (unregistering): Released all slaves [ 1615.662490][T17278] bond4 (unregistering): Released all slaves [ 1615.678106][T17278] bond5 (unregistering): Released all slaves [ 1615.705677][T17278] bond6 (unregistering): Released all slaves [ 1615.723514][T17278] bond7 (unregistering): Released all slaves [ 1615.751874][T17278] bond8 (unregistering): Released all slaves [ 1615.770748][T17278] bond9 (unregistering): Released all slaves [ 1615.787258][T17278] bond10 (unregistering): Released all slaves [ 1615.826782][T17278] bond11 (unregistering): Released all slaves [ 1615.855722][T17278] bond12 (unregistering): Released all slaves [ 1615.872565][T17278] bond13 (unregistering): Released all slaves [ 1615.895764][T17278] bond14 (unregistering): Released all slaves [ 1615.920808][T17278] bond15 (unregistering): Released all slaves [ 1615.941995][T17278] bond16 (unregistering): Released all slaves [ 1616.203411][T16605] team0 (unregistering): Port device team_slave_0 removed [ 1616.204278][T16618] netlink: 'syz.0.9696': attribute type 1 has an invalid length. [ 1616.216413][T16605] team0 (unregistering): Port device team_slave_1 removed [ 1616.304473][T16624] netlink: 'syz.2.9697': attribute type 1 has an invalid length. [ 1616.425749][T16618] bond1: option mode: invalid value (170) [ 1616.455994][T16618] bond1 (unregistering): Released all slaves [ 1616.663847][T16618] netlink: 'syz.0.9696': attribute type 1 has an invalid length. [ 1616.841746][T16618] bond1: option mode: invalid value (170) [ 1616.843613][T16618] bond1 (unregistering): Released all slaves [ 1617.227693][ T30] audit: type=1800 audit(1794226301.284:35): pid=16662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9703" name="blkio.bfq.time_recursive" dev="tmpfs" ino=430 res=0 errno=-22 [ 1617.799556][T16690] netlink: 'syz.0.9706': attribute type 10 has an invalid length. [ 1617.867587][T16693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9706'. [ 1617.867998][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1618.018481][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1618.026505][T16690] syz_tun: entered promiscuous mode [ 1618.061723][T16690] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1618.061977][T16687] netlink: 1140 bytes leftover after parsing attributes in process `syz.4.9707'. [ 1618.150399][T17278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1618.150428][T17278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.153231][T17278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1618.156416][T17278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.177523][T17278] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 1618.177585][T17278] batman_adv: batadv0: Removing interface: ipvlan0 [ 1618.231335][T16712] netlink: 'syz.2.9710': attribute type 1 has an invalid length. [ 1618.311029][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9710'. [ 1618.784938][T17278] team_slave_0 (unregistering): left promiscuous mode [ 1618.784979][T17278] team_slave_0 (unregistering): left allmulticast mode [ 1618.787558][T17278] team0 (unregistering): Port device team_slave_0 removed [ 1619.011033][T16693] bond0: entered promiscuous mode [ 1619.011237][T16693] bond0: entered allmulticast mode [ 1619.011255][T16693] syz_tun: entered allmulticast mode [ 1619.034587][T16692] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1619.036192][T16703] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1619.522285][T17278] IPVS: stop unused estimator thread 0... [ 1619.697219][T16760] netlink: 'syz.2.9717': attribute type 2 has an invalid length. [ 1619.784362][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9719'. [ 1619.805577][T16771] netlink: 'syz.1.9718': attribute type 8 has an invalid length. [ 1619.827898][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9718'. [ 1619.857529][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9719'. [ 1619.914661][T16770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1620.040433][T16771] veth5: entered allmulticast mode [ 1620.107250][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9723'. [ 1620.139372][T16770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9719'. [ 1620.183064][T16770] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1620.383631][T16797] syzkaller0: entered promiscuous mode [ 1620.383657][T16797] syzkaller0: entered allmulticast mode [ 1620.410125][T16796] netlink: 'syz.2.9724': attribute type 10 has an invalid length. [ 1620.510412][T16796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1620.513793][T16796] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1620.827589][T16817] netlink: 'syz.4.9729': attribute type 1 has an invalid length. [ 1621.117352][T16817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1681.278970][T28065] Bluetooth: hci5: command 0x0406 tx timeout [ 1686.401525][T16655] Bluetooth: hci4: command 0x0406 tx timeout [ 1720.653436][T17001] __nla_validate_parse: 1 callbacks suppressed [ 1720.653461][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9734'. [ 1720.653487][T17001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9734'. [ 1720.653505][T17001] netlink: 'syz.3.9734': attribute type 1 has an invalid length. [ 1721.096563][T17031] netlink: 'syz.1.9740': attribute type 1 has an invalid length. [ 1721.116234][T17039] netlink: 'syz.4.9742': attribute type 8 has an invalid length. [ 1722.213704][T17095] syzkaller0: entered promiscuous mode [ 1722.213731][T17095] syzkaller0: entered allmulticast mode [ 1722.250866][T28065] Bluetooth: hci3: command 0x0405 tx timeout [ 1722.393274][T17095] tipc: Enabled bearer , priority 0 [ 1722.795142][T17093] tipc: Resetting bearer [ 1722.830766][T17112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9758'. [ 1722.989696][T17093] tipc: Disabling bearer [ 1723.153914][T17120] syzkaller1: entered promiscuous mode [ 1723.153940][T17120] syzkaller1: entered allmulticast mode [ 1723.454389][T17132] pimreg0: tun_chr_ioctl cmd 1074025677 [ 1723.454502][T17132] pimreg0: linktype set to 768 [ 1807.057676][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9768'. [ 1807.267530][T17169] netlink: 252 bytes leftover after parsing attributes in process `syz.1.9771'. [ 1807.313901][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9766'. [ 1807.334388][T17181] macvlan1: entered promiscuous mode [ 1807.334600][T17181] macvlan1: entered allmulticast mode [ 1807.334617][T17181] veth1_vlan: entered allmulticast mode [ 1807.411377][T17184] mac80211_hwsim hwsim95 syzkaller0: entered promiscuous mode [ 1807.411411][T17184] mac80211_hwsim hwsim95 syzkaller0: entered allmulticast mode [ 1807.434254][T17184] tipc: Started in network mode [ 1807.434287][T17184] tipc: Node identity 080211000001, cluster identity 4711 [ 1807.436006][T17184] tipc: Enabled bearer , priority 0 [ 1807.627386][T17188] netlink: 'syz.1.9774': attribute type 1 has an invalid length. [ 1807.697521][T17194] sctp: [Deprecated]: syz.1.9774 (pid 17194) Use of int in max_burst socket option. [ 1807.697521][T17194] Use struct sctp_assoc_value instead [ 1807.720103][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9774'. [ 1807.927177][T17201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9775'. [ 1808.006949][T17189] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1808.044582][T17204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1808.653683][T17225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1808.656140][T17225] netlink: 'syz.3.9778': attribute type 61 has an invalid length. [ 1808.884540][ T5424] tipc: Node number set to 134418688 [ 1808.901914][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9781'. [ 1809.223163][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1809.240263][T17242] tipc: Started in network mode [ 1809.240297][T17242] tipc: Node identity 167a7bb7ecd3, cluster identity 4711 [ 1809.240595][T17242] tipc: Enabled bearer , priority 10 [ 1809.243152][T17242] tipc: Resetting bearer [ 1809.306504][T17242] tipc: Disabling bearer [ 1809.410563][T17253] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9788'. [ 1809.445837][T17253] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9788'. [ 1809.489996][T17261] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9789'. [ 1809.490033][T17261] netlink: 'syz.4.9789': attribute type 8 has an invalid length. [ 1809.517159][T17261] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1809.517183][T17261] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1810.042166][T17292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1810.210088][T17304] lo: entered allmulticast mode [ 1810.262234][T17301] bond7: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1810.278835][T17301] bond7 (unregistering): Released all slaves [ 1810.287995][T17308] nft_compat: unsupported protocol 0 [ 1810.454235][T17314] netlink: 'syz.2.9800': attribute type 4 has an invalid length. [ 1810.631311][T17326] ip_tables: iptables: counters copy to user failed while replacing table [ 1810.756927][T17329] netlink: 'syz.4.9806': attribute type 1 has an invalid length. [ 1810.822751][T17329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1810.881922][T17293] lo: left allmulticast mode [ 1811.051160][T17338] syzkaller0: entered promiscuous mode [ 1811.051188][T17338] syzkaller0: entered allmulticast mode [ 1811.052132][T17337] tipc: Enabled bearer , priority 0 [ 1811.376795][T17351] dummy0: entered promiscuous mode [ 1811.377779][T17351] macvlan3: entered promiscuous mode [ 1811.396660][T17351] dummy0: left promiscuous mode [ 1811.671317][T17360] netlink: 'syz.3.9814': attribute type 1 has an invalid length. [ 1811.753652][T17364] xt_hashlimit: size too large, truncated to 1048576 [ 1811.842506][T17365] bond1: invalid NS target :: specified for addition [ 1811.842540][T17365] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 1811.847820][T17365] bond1 (unregistering): Released all slaves [ 1811.924770][T17335] tipc: Resetting bearer [ 1812.573484][T17391] __nla_validate_parse: 11 callbacks suppressed [ 1812.573507][T17391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9822'. [ 1812.702285][T17396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9822'. [ 1814.992259][T17335] tipc: Disabling bearer [ 1814.996678][T14836] tipc: Node number set to 4205411255 [ 1815.104493][T17396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1815.124772][T17396] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1815.138697][T17396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1815.361420][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1815.460373][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9828'. [ 1815.540565][T17413] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.9827'. [ 1816.050510][T17433] netlink: 'syz.3.9834': attribute type 1 has an invalid length. [ 1816.050538][T17433] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9834'. [ 1816.175002][T17435] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 1816.235925][T17437] netlink: 'syz.4.9836': attribute type 11 has an invalid length. [ 1816.383095][T17440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.656865][T17440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.782405][T17440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.865154][T17440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.989763][T17449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1816.989921][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1817.097498][T17451] tc_dump_action: action bad kind [ 1817.099560][T11761] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.119141][T11761] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.177203][T11761] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.218381][T11767] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.276970][T17456] nftables ruleset with unbound set [ 1817.327390][T17463] netlink: 'syz.0.9844': attribute type 5 has an invalid length. [ 1817.327415][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9844'. [ 1817.349468][T17464] netlink: 'syz.0.9844': attribute type 5 has an invalid length. [ 1817.349490][T17464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9844'. [ 1817.631741][T17453] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1817.676140][T17453] bond4 (unregistering): Released all slaves [ 1818.010269][T17486] xt_hashlimit: size too large, truncated to 1048576 [ 1818.141191][T17501] netlink: 'syz.1.9849': attribute type 10 has an invalid length. [ 1818.226880][T17501] netlink: 'syz.1.9849': attribute type 10 has an invalid length. [ 1818.253330][T17508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1818.602060][T17523] __nla_validate_parse: 1 callbacks suppressed [ 1818.602083][T17523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9855'. [ 1818.672202][T17486] xt_hashlimit: size too large, truncated to 1048576 [ 1819.241631][T17545] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1819.846850][T17588] IPVS: length: 15 != 8 [ 1819.847110][T17588] netlink: 632 bytes leftover after parsing attributes in process `syz.4.9868'. [ 1820.254357][T17513] NFSD: Failed to start, no listeners configured. [ 1820.516763][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9873'. [ 1820.535710][T17614] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9874'. [ 1820.573270][T17619] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9874'. [ 1820.573298][T17619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9874'. [ 1820.576372][T17617] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 1820.797369][T17627] bond1: entered allmulticast mode [ 1821.371383][T17653] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9882'. [ 1821.371408][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9882'. [ 1821.414544][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9882'. [ 1821.701699][T17665] batman_adv: batadv0: Adding interface: veth0 [ 1821.701720][T17665] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1821.701755][T17665] batman_adv: batadv0: Interface activated: veth0 [ 1821.731871][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9884'. [ 1822.525590][T17715] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1822.972004][T17723] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1822.973348][T17723] bond2 (unregistering): Released all slaves [ 1823.067034][T17727] x_tables: duplicate underflow at hook 2 [ 1823.067341][T17727] x_tables: duplicate underflow at hook 2 [ 1824.812951][T17745] __nla_validate_parse: 3 callbacks suppressed [ 1824.812974][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9902'. [ 1824.845884][T17669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1825.144452][T17752] netlink: 'syz.3.9904': attribute type 29 has an invalid length. [ 1825.253840][T17763] netlink: 'syz.0.9903': attribute type 30 has an invalid length. [ 1825.550816][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9910'. [ 1825.683509][T17784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1825.926378][T17796] netlink: 'syz.3.9912': attribute type 19 has an invalid length. [ 1826.346646][T17813] syzkaller0: entered promiscuous mode [ 1826.346672][T17813] syzkaller0: entered allmulticast mode [ 1827.763178][T17854] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9926'. [ 1827.782520][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9925'. [ 1827.816091][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9925'. [ 1827.816120][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9925'. [ 1827.859753][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9927'. [ 1827.883448][T17856] netlink: 'syz.1.9927': attribute type 2 has an invalid length. [ 1827.898039][T17280] IPVS: starting estimator thread 0... [ 1827.992219][T17860] IPVS: using max 24 ests per chain, 57600 per kthread [ 1828.028351][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9927'. [ 1828.099612][T17866] netlink: 'syz.4.9931': attribute type 1 has an invalid length. [ 1828.186621][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9929'. [ 1828.215470][T17866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1828.454310][T17881] netlink: 'syz.4.9933': attribute type 16 has an invalid length. [ 1828.454337][T17881] netlink: 'syz.4.9933': attribute type 17 has an invalid length. [ 1828.541346][T17881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.562153][T17881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.651641][T17881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.657046][T17881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.707089][T17881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1828.707120][T17881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1828.724032][T17881] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1828.753045][T17881] veth1_macvtap: left promiscuous mode [ 1828.756348][T17881] veth1_macvtap: entered promiscuous mode [ 1828.776377][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1828.777917][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1828.797214][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1828.810532][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1828.838613][T11766] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.838683][T11766] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.838723][T11766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.838761][T11766] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.840737][T17882] syzkaller1: entered promiscuous mode [ 1828.840759][T17882] syzkaller1: entered allmulticast mode [ 1829.032425][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.032544][ T6989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.532713][T11766] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1829.532912][T11766] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1829.559332][T12345] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1829.571605][ T6989] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1829.571841][ T6989] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1829.599912][T14836] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1829.600104][T14836] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1829.642486][T12345] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1829.751422][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9942'. [ 1829.827629][T17926] __nla_validate_parse: 1 callbacks suppressed [ 1829.827653][T17926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9944'. [ 1829.886107][T17929] netlink: 'syz.3.9943': attribute type 11 has an invalid length. [ 1829.937630][T17926] bond7: entered promiscuous mode [ 1829.939785][T17926] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1829.985168][T17932] batadv_slave_1: entered promiscuous mode [ 1830.019671][T12345] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1830.062649][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9943'. [ 1830.063335][T17926] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1830.063814][T17926] bond7: (slave sit2): The slave device specified does not support setting the MAC address [ 1830.072545][T17926] bond7: (slave sit2): Error -95 calling set_mac_address [ 1830.166976][T14836] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1830.266305][T17929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.297562][T17929] batadv_slave_1 (unregistering): left promiscuous mode [ 1830.297655][T17929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.449686][T17948] syzkaller0: entered promiscuous mode [ 1830.449712][T17948] syzkaller0: entered allmulticast mode [ 1830.634767][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9951'. [ 1830.755799][T17954] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1830.767309][T17954] bond6 (unregistering): Released all slaves [ 1830.799507][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9954'. [ 1830.908440][T17974] netlink: 64587 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1830.927204][T17971] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9953'. [ 1830.943999][T17971] netlink: 'syz.4.9953': attribute type 2 has an invalid length. [ 1831.107714][T17971] !: entered promiscuous mode [ 1831.665478][T17997] tipc: Enabling of bearer rejected, failed to enable media [ 1831.955842][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9965'. [ 1832.156960][T18023] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20003 [ 1832.169395][T18023] ip_tables: iptables: counters copy to user failed while replacing table [ 1832.170797][T18023] netlink: 'syz.4.9967': attribute type 1 has an invalid length. [ 1832.180515][T18020] netlink: 'syz.1.9966': attribute type 1 has an invalid length. [ 1832.216278][T18023] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1832.245372][T18020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1832.258821][T18025] netlink: 'syz.2.9968': attribute type 1 has an invalid length. [ 1832.267160][T18023] bond5: (slave gretap2): making interface the new active one [ 1832.276128][T18023] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1832.364176][T18031] SET target dimension over the limit! [ 1832.416258][T18028] veth7: entered allmulticast mode [ 1832.420941][T18028] bond8: (slave veth7): Enslaving as an active interface with a down link [ 1832.442681][T18028] ecn_mt_check4: 55 callbacks suppressed [ 1832.442704][T18028] xt_ecn: cannot match TCP bits for non-tcp packets [ 1832.542112][T18025] bond8: (slave veth0_to_bond): making interface the new active one [ 1832.556998][T18025] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1832.654353][T18036] macvlan2: entered promiscuous mode [ 1832.654383][T18036] macvlan2: entered allmulticast mode [ 1832.667571][T18036] bond8: entered promiscuous mode [ 1832.667597][T18036] veth0_to_bond: entered promiscuous mode [ 1832.681283][T18036] bond8: entered allmulticast mode [ 1832.681309][T18036] veth0_to_bond: entered allmulticast mode [ 1832.682666][T18036] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1832.696010][T18036] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1832.697229][T18036] bond8: left allmulticast mode [ 1832.697276][T18036] veth0_to_bond: left allmulticast mode [ 1832.698692][T18036] bond8: left promiscuous mode [ 1832.698734][T18036] veth0_to_bond: left promiscuous mode [ 1832.867355][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9970'. [ 1833.394153][T18062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.394890][T18062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.395074][T18062] bridge_slave_0: entered allmulticast mode [ 1833.427233][T18062] bridge_slave_0: entered promiscuous mode [ 1833.434023][T18062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.434157][T18062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.488396][T18062] bridge_slave_0: left allmulticast mode [ 1833.488426][T18062] bridge_slave_0: left promiscuous mode [ 1833.488672][T18062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.047366][T18086] netlink: 'syz.4.9983': attribute type 1 has an invalid length. [ 1834.172260][T18086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1834.249790][T18090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9984'. [ 1834.249857][T18090] netlink: 'syz.3.9984': attribute type 1 has an invalid length. [ 1834.249875][T18090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9984'. [ 1834.329708][T18067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1834.329739][T18067] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1834.363613][T18093] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 1834.413445][T18086] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 1834.428730][T18086] bond6 (unregistering): Released all slaves [ 1834.487796][T18103] tipc: Invalid UDP bearer configuration [ 1834.487850][T18103] tipc: Enabling of bearer rejected, failed to enable media [ 1834.633978][T18067] tipc: Resetting bearer [ 1834.677257][T18067] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1834.677286][T18067] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1834.786124][T18067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1834.786150][T18067] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1834.913235][T18120] __nla_validate_parse: 3 callbacks suppressed [ 1834.913257][T18120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9988'. [ 1835.694635][T18067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1835.694661][T18067] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1835.814600][T18123] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1835.828328][T18130] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1835.951463][T18160] Unsupported ieee802154 address type: 0 [ 1835.997716][T18160] syzkaller1: entered promiscuous mode [ 1835.997741][T18160] syzkaller1: entered allmulticast mode [ 1836.016899][T18160] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9994'. [ 1836.016924][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9994'. [ 1836.229705][T18169] netlink: 'syz.1.9996': attribute type 1 has an invalid length. [ 1836.859911][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10002'. [ 1836.861328][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10002'. [ 1837.000064][T18203] bond6: option ad_actor_sys_prio: invalid value (0) [ 1837.000091][T18203] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1837.017118][T18203] bond6 (unregistering): Released all slaves [ 1837.223558][T18202] bond6: option ad_actor_sys_prio: invalid value (0) [ 1837.223585][T18202] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1837.227560][T18202] bond6 (unregistering): Released all slaves [ 1837.632993][T18221] veth0_to_bridge: entered promiscuous mode [ 1837.635281][T18221] macvtap1: entered allmulticast mode [ 1837.635303][T18221] veth0_to_bridge: entered allmulticast mode [ 1837.681940][T18221] veth0_to_bridge: left allmulticast mode [ 1837.681972][T18221] veth0_to_bridge: left promiscuous mode [ 1838.070204][T18247] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1838.229413][ T5428] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1838.229442][ T5428] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1838.230907][ T5428] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1838.887621][T18295] netlink: 964 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1838.933167][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1838.966589][ T5424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1838.988993][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1839.026487][T18302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10025'. [ 1839.026513][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10025'. [ 1839.118634][ T5424] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1839.176520][T18316] Cannot find add_set index 0 as target [ 1839.313563][T18315] bond6: (slave bond_slave_0): Device is not our slave [ 1839.313588][T18315] bond6: option active_slave: invalid value (bond_slave_0) [ 1839.319736][T18315] bond6 (unregistering): Released all slaves [ 1839.591815][T18339] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1839.643446][T18341] Cannot find del_set index 4 as target [ 1839.739568][T18339] macvtap0: entered promiscuous mode [ 1839.827629][T18346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1839.981322][T18359] __nla_validate_parse: 5 callbacks suppressed [ 1839.981346][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10039'. [ 1840.017783][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10038'. [ 1840.124911][T18364] bond1: (slave dummy0): Releasing backup interface [ 1840.180112][T18364] bridge_slave_1: left allmulticast mode [ 1840.180140][T18364] bridge_slave_1: left promiscuous mode [ 1840.180375][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.227594][T18364] bond0: (slave bond_slave_0): Releasing backup interface [ 1840.251429][T18364] bond0: (slave bond_slave_1): Releasing backup interface [ 1840.284154][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.284178][T18364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1840.305517][T18364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.306027][T18364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1840.331558][T18364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1840.384395][T18373] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1840.617372][T18373] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10041'. [ 1840.922553][T18387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10044'. [ 1841.097085][T18398] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10047'. [ 1841.302587][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10049'. [ 1841.302618][T18406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10049'. [ 1841.460744][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10051'. [ 1841.535104][T18416] mac80211_hwsim hwsim95 syzkaller0: left promiscuous mode [ 1841.535136][T18416] mac80211_hwsim hwsim95 syzkaller0: left allmulticast mode [ 1841.707759][T18428] netlink: 'syz.4.10054': attribute type 10 has an invalid length. [ 1841.727651][T18430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1841.758807][T18428] TC_ACT_REPEAT abuse ? [ 1841.804371][T18432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10056'. [ 1841.896716][T18438] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1842.101822][T18455] netlink: 'syz.2.10061': attribute type 13 has an invalid length. [ 1842.119394][T18454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.120746][T18454] tipc: Resetting bearer [ 1842.121351][T18454] tipc: Resetting bearer [ 1842.168896][T18454] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1842.399131][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1842.399409][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1843.049483][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.266290][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.266578][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.266841][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.267073][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.267301][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.267517][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.267736][T18504] netlink: 'syz.4.10066': attribute type 1 has an invalid length. [ 1843.332866][T18499] syzkaller1: entered promiscuous mode [ 1843.332891][T18499] syzkaller1: entered allmulticast mode [ 1843.625989][T18527] tc_dump_action: action bad kind [ 1844.363324][T18548] ip_tables: iptables: counters copy to user failed while replacing table [ 1845.150698][T18579] __nla_validate_parse: 11 callbacks suppressed [ 1845.150721][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1845.662237][T18597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10097'. [ 1845.878335][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10098'. [ 1846.251519][T18624] tipc: Enabling of bearer rejected, already enabled [ 1846.287372][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10101'. [ 1846.287414][T18627] openvswitch: netlink: Invalid VLAN frame [ 1846.325206][T18624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10100'. [ 1846.408970][T18630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1846.731586][T18653] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10105'. [ 1847.515450][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10114'. [ 1847.517640][T18673] validate_nla: 29 callbacks suppressed [ 1847.517659][T18673] netlink: 'syz.3.10113': attribute type 3 has an invalid length. [ 1847.568568][T18677] netlink: 'syz.3.10113': attribute type 3 has an invalid length. [ 1847.604889][T18682] xt_REDIRECT: bad rangesize 26624. [ 1848.113758][T18709] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.593346][T18709] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.785446][T18709] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.983346][T18732] netlink: 'syz.0.10129': attribute type 1 has an invalid length. [ 1849.009001][T18709] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.260557][ T6989] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.272853][ T6989] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.424809][T11769] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.440530][T11761] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.563758][T18755] 8021q: VLANs not supported on ip6_vti0 [ 1849.902021][T18769] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1850.036417][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10139'. [ 1852.597649][T18778] veth1_macvtap: left promiscuous mode [ 1852.834504][T18792] netlink: 'syz.3.10141': attribute type 2 has an invalid length. [ 1852.943666][T18797] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1852.943776][T18797] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1853.007189][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10144'. [ 1853.044975][T18798] ip6gre1: entered promiscuous mode [ 1853.045001][T18798] ip6gre1: entered allmulticast mode [ 1853.070594][T18803] tipc: Enabled bearer , priority 10 [ 1853.077608][T18802] tipc: Resetting bearer [ 1853.141804][T18802] tipc: Disabling bearer [ 1853.265436][T18810] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 1853.290284][T18807] smc: adding net device syzkaller0 with user defined pnetid SYZ0 [ 1853.294653][T18807] syzkaller0: entered promiscuous mode [ 1853.294693][T18807] syzkaller0: entered allmulticast mode [ 1853.352307][T18807] tipc: Enabled bearer , priority 0 [ 1853.366217][T18806] tipc: Resetting bearer [ 1853.414140][T18806] tipc: Disabling bearer [ 1853.428932][T18806] smc: removing net device syzkaller0 with user defined pnetid SYZ0 [ 1853.545128][T18822] netlink: 'syz.3.10150': attribute type 6 has an invalid length. [ 1853.573678][T18819] syzkaller0: entered promiscuous mode [ 1853.573703][T18819] syzkaller0: entered allmulticast mode [ 1853.738170][T18824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1853.820643][T18833] netlink: 'syz.2.10153': attribute type 30 has an invalid length. [ 1854.027900][T18842] bridge_slave_0: left allmulticast mode [ 1854.027930][T18842] bridge_slave_0: left promiscuous mode [ 1854.041636][T18842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.061603][T18843] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 1854.080573][T18845] netlink: 'syz.0.10158': attribute type 2 has an invalid length. [ 1854.087843][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10158'. [ 1854.116312][T18843] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.10156'. [ 1854.117947][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10158'. [ 1854.202347][T18847] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1854.307043][T18853] syzkaller0: entered promiscuous mode [ 1854.307071][T18853] syzkaller0: entered allmulticast mode [ 1854.353148][T18853] tipc: Enabled bearer , priority 0 [ 1854.381852][T18852] tipc: Resetting bearer [ 1854.476251][T18852] tipc: Disabling bearer [ 1854.502610][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805831d000: rx timeout, send abort [ 1854.556216][T18860] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 1854.682789][T18865] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10164'. [ 1854.774001][T18867] netlink: 'syz.0.10165': attribute type 21 has an invalid length. [ 1854.774096][T18867] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10165'. [ 1855.002690][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805831d000: abort rx timeout. Force session deactivation [ 1855.088517][T18879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10168'. [ 1855.090170][T18879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10168'. [ 1855.315072][T18890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10169'. [ 1855.896274][T18906] syzkaller0: entered promiscuous mode [ 1855.896301][T18906] syzkaller0: entered allmulticast mode [ 1855.947492][T18906] tipc: Enabled bearer , priority 0 [ 1855.958947][T18904] tipc: Resetting bearer [ 1856.039263][T18904] tipc: Disabling bearer [ 1856.183839][T18920] batman_adv: batadv0: Interface deactivated: veth0 [ 1856.183867][T18920] batman_adv: batadv0: Removing interface: veth0 [ 1856.185052][T18920] bridge0: port 3(veth0) entered blocking state [ 1856.185258][T18920] bridge0: port 3(veth0) entered disabled state [ 1856.186406][T18920] veth0: entered allmulticast mode [ 1856.221144][T18920] veth0: entered promiscuous mode [ 1856.222096][T18920] bridge0: port 3(veth0) entered blocking state [ 1856.222229][T18920] bridge0: port 3(veth0) entered forwarding state [ 1856.256924][T18922] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20004 [ 1856.375977][T18920] bridge0: port 3(veth0) entered disabled state [ 1856.376193][T18920] bridge0: port 1(dummy0) entered disabled state [ 1856.631876][T18920] tipc: Resetting bearer [ 1856.983011][T11766] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1856.983050][T11766] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.983092][T11766] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1856.983120][T11766] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.983158][T11766] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1856.983185][T11766] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.983221][T11766] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1856.983250][T11766] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.535331][T18987] syzkaller0: entered promiscuous mode [ 1857.535359][T18987] syzkaller0: entered allmulticast mode [ 1858.084210][T19011] mac80211_hwsim hwsim95 syzkaller0: entered promiscuous mode [ 1858.084242][T19011] mac80211_hwsim hwsim95 syzkaller0: entered allmulticast mode [ 1858.191430][T19011] tipc: Enabling of bearer rejected, already enabled [ 1858.347061][T19020] netlink: 'syz.2.10192': attribute type 2 has an invalid length. [ 1858.453158][T19024] __nla_validate_parse: 1 callbacks suppressed [ 1858.453182][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1858.453261][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1858.499874][T19024] Bluetooth: MGMT ver 1.23 [ 1859.036749][T19057] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1859.215366][ T30] audit: type=1804 audit(1794226543.274:36): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10201" name="/newroot/145/cgroup.controllers" dev="tmpfs" ino=765 res=1 errno=0 [ 1859.215525][ T30] audit: type=1800 audit(1794226543.274:37): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10201" name="cgroup.controllers" dev="tmpfs" ino=765 res=0 errno=-22 [ 1859.341219][T19076] netlink: 'syz.0.10205': attribute type 1 has an invalid length. [ 1859.341788][T19071] syzkaller0: entered promiscuous mode [ 1859.341813][T19071] syzkaller0: entered allmulticast mode [ 1859.345225][T19074] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 1859.477711][T19071] tipc: Enabled bearer , priority 0 [ 1859.504834][T19069] tipc: Resetting bearer [ 1859.639424][T19085] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1859.645628][T19069] tipc: Disabling bearer [ 1859.679357][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1859.679603][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1859.763143][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1859.814424][T19095] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 1860.040059][T19100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10211'. [ 1860.134672][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10211'. [ 1860.196398][T19105] netlink: 'syz.4.10210': attribute type 1 has an invalid length. [ 1860.292552][T19105] bond6: option mode: invalid value (9) [ 1860.885822][T19105] bond6 (unregistering): Released all slaves [ 1861.250020][T19151] netlink: 279 bytes leftover after parsing attributes in process `syz.0.10217'. [ 1861.250046][T19151] veth0_to_bond: default FDB implementation only supports local addresses [ 1861.250522][T19145] netlink: 279 bytes leftover after parsing attributes in process `syz.0.10217'. [ 1861.250540][T19145] veth0_to_bond: default FDB implementation only supports local addresses [ 1861.616492][T19176] syzkaller0: entered promiscuous mode [ 1861.616520][T19176] syzkaller0: entered allmulticast mode [ 1862.107584][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10221'. [ 1862.149691][T11761] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1862.150436][ T6125] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1862.150481][ T6125] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1862.150519][ T6125] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1864.100687][T19138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1864.366922][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10224'. [ 1864.472654][T19245] netlink: 'syz.2.10227': attribute type 1 has an invalid length. [ 1864.533378][T19245] bond9: entered promiscuous mode [ 1864.533913][T19245] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1864.727812][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10231'. [ 1864.727851][T19264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10231'. [ 1864.810369][T19264] bridge8: entered promiscuous mode [ 1864.810395][T19264] bridge8: entered allmulticast mode [ 1864.856783][T19264] netlink: 'syz.2.10231': attribute type 1 has an invalid length. [ 1864.856810][T19264] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10231'. [ 1864.884821][T19267] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1865.248803][T19272] smc: adding net device syzkaller0 with user defined pnetid SYZ0 [ 1865.291565][T19272] tipc: Enabled bearer , priority 0 [ 1865.450492][T19277] syzkaller0: entered promiscuous mode [ 1865.450520][T19277] syzkaller0: entered allmulticast mode [ 1865.474133][T19270] tipc: Resetting bearer [ 1865.584853][T19292] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10238'. [ 1865.584904][T19292] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1865.628601][T19270] tipc: Disabling bearer [ 1865.642742][T19270] smc: removing net device syzkaller0 with user defined pnetid SYZ0 [ 1865.682323][T19295] netlink: 'syz.4.10239': attribute type 11 has an invalid length. [ 1865.964352][T19307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10243'. [ 1865.977777][T19308] netlink: 'syz.4.10243': attribute type 1 has an invalid length. [ 1866.043737][T19314] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10242'. [ 1866.043764][T19314] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10242'. [ 1866.115926][T19308] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1866.170247][T19322] smc: adding net device syzkaller0 with user defined pnetid SYZ0 [ 1866.173709][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10246'. [ 1866.280169][T19319] smc: removing net device syzkaller0 with user defined pnetid SYZ0 [ 1866.311769][T19330] netlink: 'syz.1.10248': attribute type 1 has an invalid length. [ 1866.316875][T19331] netlink: 'syz.1.10248': attribute type 1 has an invalid length. [ 1866.399674][T19330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1866.400607][T19335] tipc: Enabling of bearer rejected, no device for the media [ 1866.557021][T19336] bond8: (slave gretap1): making interface the new active one [ 1866.574898][T19336] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1866.691259][T19344] ip_tables: iptables: counters copy to user failed while replacing table [ 1866.818823][T19349] syzkaller0: entered promiscuous mode [ 1866.818851][T19349] syzkaller0: entered allmulticast mode [ 1866.842825][T19349] tipc: Enabled bearer , priority 0 [ 1866.855545][T19346] tipc: Resetting bearer [ 1866.923809][T19346] tipc: Disabling bearer [ 1867.269469][T19371] smc: adding net device syzkaller0 with user defined pnetid SYZ0 [ 1867.302919][T19371] syzkaller0: entered promiscuous mode [ 1867.302943][T19371] syzkaller0: entered allmulticast mode [ 1868.219087][T19370] smc: removing net device syzkaller0 with user defined pnetid SYZ0 [ 1870.394695][T19382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1870.767297][T19446] sctp: [Deprecated]: syz.2.10274 (pid 19446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1870.767297][T19446] Use struct sctp_sack_info instead [ 1871.100467][T19470] __nla_validate_parse: 3 callbacks suppressed [ 1871.100490][T19470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10277'. [ 1871.293460][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10283'. [ 1871.509355][T19494] netlink: 'syz.1.10286': attribute type 1 has an invalid length. [ 1871.509414][T19494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1871.509429][T19494] IPv6: NLM_F_CREATE should be set when creating new route [ 1871.786779][T19508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10282'. [ 1871.980337][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10289'. [ 1872.212190][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10291'. [ 1872.419962][T19526] syzkaller1: entered promiscuous mode [ 1872.419988][T19526] syzkaller1: entered allmulticast mode [ 1873.241023][T19564] tc_dump_action: action bad kind [ 1873.315273][T19565] syzkaller1: entered promiscuous mode [ 1873.315301][T19565] syzkaller1: entered allmulticast mode [ 1873.854294][T19572] netlink: 'syz.2.10304': attribute type 1 has an invalid length. [ 1873.854320][T19572] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1873.916688][T19573] Bluetooth: hci0: unsupported parameter 5135 [ 1873.916714][T19573] Bluetooth: hci0: unsupported parameter 8192 [ 1873.916747][T19573] Bluetooth: hci0: unsupported parameter 5135 [ 1873.916763][T19573] Bluetooth: hci0: unsupported parameter 8192 [ 1874.545722][T19586] geneve1: entered promiscuous mode [ 1874.635326][T19586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10309'. [ 1874.635354][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10309'. [ 1875.521345][T19626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1875.521903][T19623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1875.704513][T19628] ip_tables: iptables: counters copy to user failed while replacing table [ 1878.416049][T19650] dummy0: Caught tx_queue_len zero misconfig [ 1878.599649][T19663] sctp: [Deprecated]: syz.1.10330 (pid 19663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1878.599649][T19663] Use struct sctp_sack_info instead [ 1878.700810][T19670] bond7: entered allmulticast mode [ 1878.855315][T19655] syzkaller1: entered promiscuous mode [ 1878.855349][T19655] syzkaller1: entered allmulticast mode [ 1879.291092][T19691] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1879.430153][T19694] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10341'. [ 1879.857936][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1879.857963][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1879.857979][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1880.236183][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10354'. [ 1880.279813][T17276] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1880.281359][T17276] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1880.281405][T17276] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1880.281444][T17276] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1880.712494][T19756] sctp: [Deprecated]: syz.3.10362 (pid 19756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1880.712494][T19756] Use struct sctp_sack_info instead [ 1880.939713][T19774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10365'. [ 1880.943353][T19765] netlink: 'syz.0.10363': attribute type 11 has an invalid length. [ 1880.990787][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10363'. [ 1881.098442][T19784] netlink: 'syz.3.10368': attribute type 8 has an invalid length. [ 1881.180861][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1881.244160][T19788] syz_tun: entered allmulticast mode [ 1881.326739][T19788] syz_tun: left allmulticast mode [ 1881.399135][T19793] netlink: 'syz.4.10372': attribute type 10 has an invalid length. [ 1881.649263][T19805] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10375'. [ 1881.649295][T19805] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1881.720651][T19814] x_tables: duplicate underflow at hook 1 [ 1883.260335][T19832] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1885.297104][T19832] macsec0: entered allmulticast mode [ 1885.297130][T19832] bridge0: entered allmulticast mode [ 1885.548560][T19852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10382'. [ 1885.596244][T19852] smc: adding net device syzkaller0 with user defined pnetid SYZ0 [ 1885.717112][T19856] tipc: Failed to remove unknown binding: 66,1,1/9480874:487540322/487540324 [ 1885.717147][T19856] tipc: Failed to remove unknown binding: 66,1,1/9480874:487540322/487540324 [ 1885.802449][T19852] smc: removing net device syzkaller0 with user defined pnetid SYZ0 [ 1885.831090][T19854] sctp: [Deprecated]: syz.1.10383 (pid 19854) Use of int in max_burst socket option deprecated. [ 1885.831090][T19854] Use struct sctp_assoc_value instead [ 1886.513399][T19885] batadv_slave_1: entered promiscuous mode [ 1886.535689][T19884] batadv_slave_1: left promiscuous mode [ 1886.689640][T19888] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1886.788970][T19888] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1886.795806][T19888] tipc: Resetting bearer [ 1887.646989][T19903] TC_ACT_REPEAT abuse ? [ 1887.689087][T19903] TC_ACT_REPEAT abuse ? [ 1887.997514][T19926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10399'. [ 1889.199247][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10405'. [ 1889.326362][T19952] bond9: entered promiscuous mode [ 1889.326804][T19952] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1889.697555][T19976] tipc: Enabling of bearer rejected, failed to enable media [ 1889.740368][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10411'. [ 1889.805599][T19982] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1890.134638][T20008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1890.137359][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10417'. [ 1890.373049][T19996] tipc: Enabling of bearer rejected, failed to enable media [ 1890.634964][T20025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10421'. [ 1891.362764][T20062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10432'. [ 1892.015947][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1892.015991][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1892.016010][T20067] netlink: 'syz.1.10436': attribute type 6 has an invalid length. [ 1892.061350][T20071] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000 [ 1892.076734][T20071] netlink: 'syz.4.10433': attribute type 1 has an invalid length. [ 1892.076758][T20071] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10433'. [ 1892.076789][T20071] nbd: couldn't find device at index 767 [ 1892.780058][T20094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10443'. [ 1892.812390][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10443'. [ 1892.813718][T20094] hsr_slave_0: left promiscuous mode [ 1892.815323][T20094] hsr_slave_1: left promiscuous mode [ 1893.230268][T20118] netlink: 'syz.3.10451': attribute type 1 has an invalid length. [ 1893.264851][T20100] macvtap1: entered promiscuous mode [ 1893.441471][T20118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1893.442739][T20126] netlink: 'syz.3.10451': attribute type 49 has an invalid length. [ 1893.501429][T20126] bond0: (slave bond_slave_0): Releasing backup interface [ 1893.564954][T20126] bond_slave_0: entered promiscuous mode [ 1893.564980][T20126] bond_slave_0: entered allmulticast mode [ 1893.633177][T20119] batman_adv: batadv0: Adding interface: syzkaller0 [ 1893.633198][T20119] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1232) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1893.633418][T20119] batman_adv: batadv0: Interface activated: syzkaller0 [ 1893.728805][T20120] bond2: (slave geneve0): making interface the new active one [ 1893.730564][T20120] bond2: (slave geneve0): Enslaving as an active interface with an up link [ 1895.354578][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10461'. [ 1895.374163][T20167] netlink: 'syz.3.10461': attribute type 2 has an invalid length. [ 1895.374188][T20167] netlink: 116 bytes leftover after parsing attributes in process `syz.3.10461'. [ 1895.485335][T20167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10461'. [ 1895.521590][T20167] netlink: 'syz.3.10461': attribute type 10 has an invalid length. [ 1895.573691][T20167] team0: Port device dummy0 added [ 1895.647998][T20177] netlink: 'syz.2.10464': attribute type 15 has an invalid length. [ 1895.815954][T20189] netlink: 'syz.2.10464': attribute type 15 has an invalid length. [ 1896.242508][T20213] bridge6: entered promiscuous mode [ 1896.244324][T20213] bridge6: entered allmulticast mode [ 1896.267744][T20213] team0: Port device bridge6 added [ 1896.267998][T20195] syzkaller1: entered promiscuous mode [ 1896.268017][T20195] syzkaller1: entered allmulticast mode [ 1896.385446][T20213] bridge0: port 1(team0) entered blocking state [ 1896.385541][T20213] bridge0: port 1(team0) entered disabled state [ 1896.385995][T20213] team0: entered allmulticast mode [ 1896.386014][T20213] team_slave_0: entered allmulticast mode [ 1896.386066][T20213] team_slave_1: entered allmulticast mode [ 1896.439970][T20213] team0: entered promiscuous mode [ 1896.439999][T20213] team_slave_0: entered promiscuous mode [ 1896.440241][T20213] team_slave_1: entered promiscuous mode [ 1896.449950][T20213] bridge0: port 1(team0) entered blocking state [ 1896.450303][T20213] bridge0: port 1(team0) entered forwarding state [ 1896.851431][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1897.311080][T20244] bond3: option fail_over_mac: invalid value (127) [ 1897.344758][T20244] bond3 (unregistering): Released all slaves [ 1897.515773][T20250] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10477'. [ 1897.602765][T20229] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 1897.617963][T20229] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1898.013329][T20268] tipc: Enabling of bearer rejected, already enabled [ 1898.081332][T20274] netlink: 'syz.0.10482': attribute type 6 has an invalid length. [ 1898.104237][T20277] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002 [ 1898.263707][T20281] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1898.284955][T20281] bond4 (unregistering): Released all slaves [ 1898.599955][T20282] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1898.601895][T20282] bond4 (unregistering): Released all slaves [ 1898.647558][T20284] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10484'. [ 1898.647963][T20287] tipc: Enabled bearer , priority 10 [ 1898.790252][T20289] tipc: Enabling of bearer rejected, already enabled [ 1899.356485][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10496'. [ 1899.392099][T20324] ipvlan2: entered allmulticast mode [ 1899.392123][T20324] virt_wifi0: entered allmulticast mode [ 1899.396984][T20324] batman_adv: batadv0: Adding interface: ipvlan2 [ 1899.397003][T20324] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.397354][T20324] batman_adv: batadv0: Interface activated: ipvlan2 [ 1899.600795][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10496'. [ 1899.715602][T20329] ipvlan3: entered allmulticast mode [ 1899.729559][T20329] batman_adv: batadv0: Adding interface: ipvlan3 [ 1899.729579][T20329] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.729608][T20329] batman_adv: The newly added mac address (aa:42:3f:30:db:ad) already exists on: ipvlan2 [ 1899.729625][T20329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.729640][T20329] batman_adv: batadv0: Interface activated: ipvlan3 [ 1899.872919][T20347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10499'. [ 1899.939406][T20352] tipc: Enabled bearer , priority 0 [ 1899.943897][T20355] syzkaller0: entered promiscuous mode [ 1899.943918][T20355] syzkaller0: entered allmulticast mode [ 1899.993797][T20351] tipc: Resetting bearer [ 1900.011730][T20309] netlink: 268 bytes leftover after parsing attributes in process `syz.3.10492'. [ 1900.011789][T20309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10492'. [ 1900.164964][T20351] tipc: Disabling bearer [ 1901.744651][T20430] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1901.745298][T11767] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1902.026067][T20443] tc_dump_action: action bad kind [ 1902.040524][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10516'. [ 1902.367873][T20453] bond12: entered promiscuous mode [ 1902.367924][T20453] bond12: entered allmulticast mode [ 1902.369541][T20453] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1902.519799][T20459] syzkaller0: entered promiscuous mode [ 1902.519827][T20459] syzkaller0: entered allmulticast mode [ 1902.755777][T20463] syzkaller1: entered promiscuous mode [ 1902.755802][T20463] syzkaller1: entered allmulticast mode [ 1903.288211][T20472] netlink: 'syz.0.10521': attribute type 12 has an invalid length. [ 1903.549741][T20489] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10525'. [ 1903.551473][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10525'. [ 1903.917380][T20504] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1903.931163][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10531'. [ 1904.275234][T20504] veth9: entered allmulticast mode [ 1904.300806][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1904.380225][T20513] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10534'. [ 1904.476123][T20527] smc: adding net device syzkaller0 with user defined pnetid SYZ0 [ 1904.545600][T20521] smc: removing net device syzkaller0 with user defined pnetid SYZ0 [ 1904.771230][T20549] netlink: 'syz.0.10544': attribute type 1 has an invalid length. [ 1904.771832][T20548] netlink: 'syz.0.10544': attribute type 1 has an invalid length. [ 1904.815853][T20549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1904.817467][T20542] tipc: Enabling of bearer rejected, already enabled [ 1905.274929][T20553] ip6erspan0: entered allmulticast mode [ 1905.337882][T20564] x_tables: duplicate underflow at hook 1 [ 1905.758485][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1905.928763][T20592] netlink: 'syz.3.10553': attribute type 1 has an invalid length. [ 1906.021314][T20592] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1906.360106][T20619] netlink: 'syz.4.10558': attribute type 7 has an invalid length. [ 1906.662296][T20636] netlink: 'syz.1.10562': attribute type 29 has an invalid length. [ 1907.079115][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10568'. [ 1907.172667][T20668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10568'. [ 1907.262762][T20652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1907.981681][T20691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10570'. [ 1908.271781][T20697] syzkaller1: entered promiscuous mode [ 1908.271817][T20697] syzkaller1: entered allmulticast mode [ 1914.078410][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1931.358570][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1965.920449][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2032.478248][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2165.598291][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!