last executing test programs: 36.699675771s ago: executing program 0 (id=3370): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) close(0x4) 36.402972551s ago: executing program 0 (id=3371): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 36.176357313s ago: executing program 0 (id=3373): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 35.848890055s ago: executing program 0 (id=3374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "b7b9e4a31d720687"}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408c1}, 0x40d1) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) close(r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r5, 0xb97534d5fe9704ef, 0x70bd29, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 35.26349097s ago: executing program 0 (id=3377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000061115c0000000000060000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 34.973486965s ago: executing program 0 (id=3380): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000000)) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PBURST={0x8, 0x7, 0xadc}]}}]}, 0x60}}, 0x44080) (async, rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x18, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) (rerun: 64) 32.622282476s ago: executing program 1 (id=3394): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r0, 0x11b, 0x0, 0x0, 0x0) (async) setsockopt(r0, 0x11b, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x400000008000f28, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@delchain={0x54, 0x64, 0xf31, 0xfffdfff9, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xb, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@delchain={0x54, 0x64, 0xf31, 0xfffdfff9, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xb, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x14, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8520ec0a9300", @ANYRESHEX=r2, @ANYRESHEX=r8, @ANYRESDEC=r3], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8dff795998a4203e}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8520ec0a9300", @ANYRESHEX=r2, @ANYRESHEX=r8, @ANYRESDEC=r3], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8dff795998a4203e}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x6c, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r11], 0x68}}, 0x18001) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}}, 0x0) 24.795746462s ago: executing program 1 (id=3399): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)="c5", 0x1, 0x0, &(0x7f0000000b40)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000b80)) bind$unix(r0, &(0x7f0000000400)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x15, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000030000000000000000000000050003000000000018420000030000000000000000000800850000000c0000000500fcff0000000095"], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2}, 0x94) bind$unix(r0, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x9, 0xc46c, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x4, 0x7}}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)=@delqdisc={0x134, 0x25, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8}, {0xb, 0x10}, {0x10, 0xffff}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x240}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff7}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf254400000008000300d1fb064de7d22e27ab9c0fdc20d37007c7a1fa59119b508a4db23a1cc51613856193e323", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtaction={0x54, 0x30, 0x53b, 0x0, 0x0, {}, [{0x40, 0x1, [@m_simple={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendto$inet6(r7, &(0x7f00000006c0)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ppoll(&(0x7f00000002c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180c70a94d9ac702b66f0769e11a7e530000000000000000000000000000007a0af8ff00000000bfa300000000000007030000f8ffffff18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7040000000000008500000035000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 23.414621581s ago: executing program 4 (id=3400): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000000100)='GPL\x00', 0xe, 0xfd90, &(0x7f0000000140)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0xfdb7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000240)=0x401, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000340)="2fbfd693506e3f2872ee06dd974503ed3d8b6c99c40b231467bde030e0c43c1a7b57e373d2", 0x25}, {&(0x7f0000000380)="2a4c23f78faea1ed837c3fe14f68222269fa896a845a9b6490f0ff3cced61456c2b055af5f92d45a69788a5b5a46a0869d4a7cb70c8aa4c39b0eddd375810ea19e53e3a022b87422b614bf52c115edab2c68539ffc9e6bbe90277207d2dcc7ad182174e15a8efb3957c1ee83010cd50d6f647579dc330df5ea43cbeca06349fb14a24a1f432b13222c82e424f8c8817c9d7b9747b3ebd4c67e884f84eb4b60dcd21405b8406d48db642eb5831b501bc5d93857febd3b97fe2bab1762e5d2ac893c3f172fabcccdb487b83153cd8bdad40bd10e59100a5b601bc7", 0xda}, {&(0x7f0000000480)="2bed999d66a5d248e2237cc5857cdad04a1af869ee16034c707bb7ee8d9e40133bd13228906eee4dbd17eb615ebcf044b0befb27edcfdde7cda9b674c83ab8f9f38c01cd8b14a434e4", 0x49}, {&(0x7f0000000500)="637ca4d9d780a05d3fc5a2557e6633850c8655c4700b672425234a7c47345337c177de1c55beb4b47e710f004505dc1fed70c119f63305f5531b0f3bda69f258be96604d44", 0x45}, {&(0x7f0000000580)="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", 0xfb}, {&(0x7f0000000680)="9dff7fbd9f69d63ffae357fa6536619a2ed2511546d5bae0", 0x18}], 0x6) 21.107601394s ago: executing program 3 (id=3402): r0 = socket$kcm(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0xb97534d5fe9704ef, 0x70bd29, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0xb97534d5fe9704ef, 0x70bd29, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}}, 0x0) 20.150567492s ago: executing program 4 (id=3403): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0x2, 0x4) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x1) 18.790433049s ago: executing program 1 (id=3404): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000280)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[], 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000280)={0x37, 0x800000, 0x8, 0x9, 0x8000}) (async) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[], 0x6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, r3, 0x2f, 0x0, @void}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) (async) 18.758638053s ago: executing program 2 (id=3405): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000004c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000040000000000000000004000000bb7f1a00be00feff000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000600)=""/147, 0xffffffb0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 15.958279345s ago: executing program 3 (id=3406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x46, 0x85, &(0x7f0000000480)="25b02aa44a9a138601bd61312c49e9409d3172cc25b9616c36ded45e5b9bb97b26bb09b481c2ba4028675bbc9f0c20883a427acf83069a17589b41f0d1b64dcd0a7009f6b197", &(0x7f0000000500)=""/133, 0xa, 0x0, 0x91, 0x4b, &(0x7f00000005c0)="4f481e63b06bfdd091cc67fd43dcb0072dbbc0ac6d1d035a348850022060c7c77ab697f2aa67d297ecc841f55358bb8c6d9e98c07887ca6137c07766af5d0320e81584d3e803212a4a3f315e2d54e78507e73e2fe844099943f2abc49ed90302cebebac8ba3e7eb2b763fc016d27414bad66c074ed35be399aadaa3453b1b725f6d6ac87d0ae9fe1a2dccf7cde5395cd90", &(0x7f0000000680)="cce115bc6566970f8763aa80cf1854f481a23ba168fdd3221d2774b4af442f23ec3b443c0d688bd0c1550d72115ab5a2da1d9425932304b172a3d6a24fddbb69045ce418143c7afc5830bc", 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r0, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000001ac0), 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002bc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002c80)=""/28, 0x1c}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002cc0)=""/97, 0x61}, {&(0x7f0000002d40)=""/124, 0x7c}, {&(0x7f0000002dc0)=""/45, 0x2d}, {&(0x7f0000002e00)=""/118, 0x76}, {&(0x7f0000002e80)=""/173, 0xad}, {&(0x7f0000002f40)=""/93, 0x5d}, {&(0x7f0000002fc0)=""/203, 0xcb}], 0x7, &(0x7f0000003140)=""/121, 0x79}, 0x3}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000031c0)=""/219, 0xdb}, {&(0x7f00000032c0)=""/128, 0x80}, {&(0x7f0000003340)=""/180, 0xb4}], 0x3, &(0x7f0000003440)=""/119, 0x77}, 0x2}, {{&(0x7f00000034c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003540)=""/179, 0xb3}, {&(0x7f0000003600)=""/220, 0xdc}, {&(0x7f0000003700)=""/26, 0x1a}], 0x3, &(0x7f0000003780)=""/253, 0xfd}, 0x6}, {{&(0x7f0000003880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003900)=""/139, 0x8b}, {&(0x7f00000039c0)=""/93, 0x5d}, {&(0x7f0000003a40)=""/108, 0x6c}, {&(0x7f0000003ac0)=""/216, 0xd8}, {&(0x7f0000003bc0)=""/8, 0x8}, {&(0x7f0000003c00)=""/207, 0xcf}, {&(0x7f0000003d00)=""/196, 0xc4}], 0x7}, 0x3}, {{&(0x7f0000003e80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004500)=[{&(0x7f0000003f00)=""/209, 0xd1}, {&(0x7f0000004000)=""/143, 0x8f}, {&(0x7f00000040c0)=""/166, 0xa6}, {&(0x7f0000004180)=""/184, 0xb8}, {&(0x7f0000004240)=""/26, 0x1a}, {&(0x7f0000004280)=""/119, 0x77}, {&(0x7f0000004300)=""/255, 0xff}, {&(0x7f0000004400)=""/207, 0xcf}], 0x8, &(0x7f0000004580)=""/92, 0x5c}, 0x1}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000004600)=""/57, 0x39}, {&(0x7f0000004640)=""/246, 0xf6}, {&(0x7f0000004740)=""/131, 0x83}, {&(0x7f0000004800)=""/82, 0x52}, {&(0x7f0000004880)=""/34, 0x22}], 0x5}}], 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f00000000c0)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000001a00)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002000a", 0x3f, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001b40)=@ll={0x11, 0x3, 0x0, 0x1, 0xe4, 0x6, @broadcast}, 0x80, 0x0}, 0x40000) sendmmsg(r2, &(0x7f0000001bc0), 0x400000000000235, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000018c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)={0x5c, r3, 0x201, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @initial, {0x9, 0x1}}, 0x4, 0x3c, @random=0x2, @val, @val={0x2d, 0x1a, {0x80, 0x2, 0x0, 0x0, {0x8000000000000000, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0xffff, 0x7}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000805}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000001780)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f0000000780)={{r6}, "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"}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004b40)={0x11, 0x3, &(0x7f0000004c00)=ANY=[@ANYBLOB="180000"], 0x0, 0x3}, 0x94) r8 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000004c40)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000440)={'hsr0\x00', &(0x7f0000000380)=@ethtool_regs={0x4, 0x81, 0xae, "1837bf775a9e274413f3a17c83d6d9a1bfcbc9f2113b3cc845914da11ad6173176b0cbb86bd41c70c05336ab741503cc4f08a2547b039225829314a4acfe63ffce45598f581e32fd248c47ed401491be175048ce29dc369cd1a8736b2926ab8a4c7c4342f032a287138795dd319141063fc94204e8f750b1e0d3a6d236de5bb746ef1bfd189dba21bd20742e14830563a58a254929246464da852368555c59ff1fdcd605a050910799b86b2767db"}}) 13.727813515s ago: executing program 2 (id=3407): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x2000}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000002c0)={r2, &(0x7f0000000180)='\x00', 0x803, &(0x7f00000001c0)={@_ha_fsid={[0x8, 0xd9]}, {0x5, 0x2, 0xb, 0x8}}, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffb}) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newneigh={0x34, 0x1c, 0x2, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x0, 0x0, r3, 0x0, 0x0, 0xb}, [@NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000180000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 10.189382404s ago: executing program 4 (id=3408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000072369cefda0c00"/28], 0x50) r1 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0xfffffffffffffffe, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000000c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x16, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000ffff2cbd7000fbdbdf250000000005439a766638874911d5ab153852ff7aaf5f1355df753417a341178ecb606062f1a8b75f7c9f217b784d612f57", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c0001006d6163766c616e00040002800500110002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c50904000410ffd0c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.785894849s ago: executing program 1 (id=3409): r0 = socket$kcm(0xa, 0x1, 0x106) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0xcfc}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0xc, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x8, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0xf0}, {0x10002, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x2}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x9}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x205, 0xffffff7f, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0x7fffffff, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x10001, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xfffffffb, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000001700)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="340000001600080029bd7000fddbdf250a2080fe", @ANYRES32=r4, @ANYBLOB="08000900f9ffffff1400010000ce0a000000000000000c00000100"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40004) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000040)='./cgroup/cgroup.procs/../file0\x00', 0x0, 0x8}, 0x18) (async) sendmsg$kcm(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x20000011) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000002b80)={&(0x7f0000002bc0)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x3, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0x0, 0xa}, {0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000006a0000002abd7000fddbdf250a0000000000000008000a000200000004000b0008000500", @ANYRES32=r11, @ANYBLOB="e7000a6bac96803821303f209adba11e9148b06d743683001d030200000004000b0000000a00ffffff8e08000a0000001d3b869e86afad8ecea16e1adc68854deda5ed0432c51f0f403926d0f38b8dde5d1e50"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r6, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25e97c00000c0001800800020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4008090) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) (async) r13 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r13, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x100, 0x70bd26, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000808}, 0x20000800) 9.074080615s ago: executing program 3 (id=3410): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x17}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @random}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 9.038361372s ago: executing program 2 (id=3411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000000000000001000000000000000000000000000b473dc77fdf55479a1669959780f212c82f8f68f4ce63f505a5ff0da2598a07f911e56a84ac28a419fb2fe39af8e06bcc55d52d066e2e753837ef3ce3b13e8b43f05174064d2fa082047ba2d541797a5e722a6e"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r0}, 0x38) 7.334655098s ago: executing program 2 (id=3412): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r2, 0x201, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000600)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbff00", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x4]}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2a}}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="054b24298a00000000006b00000008000300", @ANYRES32=r6], 0x28}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4002002}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1dc, r5, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_KEK={0x2e, 0xf2, "ad798d608f496d8a95569b73aff99aa593be7fbafcba5081bd45864a335e6cba338914a3cb84c29faabc"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x3, 0x0, {0xe78, 0x1, 0x0, 0x2, 0x0, 0x1}, 0x1, 0x3, 0x7}}, @NL80211_ATTR_IE={0x15e, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x33, @val="cddbe073d2c4cf4687494d6ad677517e"}}, @random={0x5, 0x2e, "6b1fdd4e5327f63be2998fda98c146a15fba8843a27481af55bd0affe963ba4a1d69a82458e498c969863f708b85"}, @perr={0x84, 0x9c, {0x1, 0xa, [{{0x0, 0x1}, @device_a, 0x1000, @value, 0x21}, {{}, @broadcast, 0x4, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x22}, {{}, @device_b, 0x1, @void, 0x38}, {{}, @device_b, 0x80000000, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x4}, {{}, @device_a, 0x6, @void, 0x42}, {{}, @broadcast, 0x10000, @void, 0x28}, {{}, @broadcast, 0x8, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x38}]}}, @mesh_chsw={0x76, 0x6, {0x7, 0x1, 0x6, 0x3}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @tim={0x5, 0x59, {0x2, 0x9e, 0x5, "ad1b9bc5945609986e6e188df904ced357d756c8b679f8c22b935490f6ea51ea58ae26a56ce83f2631934e4b0502876909c0dfb49dd6f53371265a418cfc5814324a9e95ffc711b81a4eb80b325649ebd938e20cd69e"}}, @challenge={0x10, 0x1, 0xe4}, @channel_switch={0x25, 0x3, {0x0, 0x70, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x4ad, 0x6}}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000b14432e28bd7000fedbdf25080001ef929de2839957afaad0a959861fd9558120757d18403906a700000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) 6.81257479s ago: executing program 4 (id=3413): r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000127bd6000fcdbdf253f000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000180000000000000000000000fc0100009500c300ffff010000009500000000000000000000d2000000000000000000000000000000000000508e048cb1eebd33b2157c0a63d40c69836ab06f6a0d093737f73d0dca06e54d4420ecda4ac5daf571233294134798d9948ab1decfe6c0a62b888bd8eaaeb08ad5b208a288957c4913256d602337b3251949bbb5428a512a020ff9930bb49d22dc1c110fb5dde97b20e1df3ba92efd43eb8c72b3d20b8307ea059ec1"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) 6.087078686s ago: executing program 1 (id=3414): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000}, 0xfffffdb0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) read(r1, &(0x7f0000000040)=""/41, 0x29) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r4], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) accept4$x25(r3, 0x0, &(0x7f0000000280), 0x80800) 5.011850387s ago: executing program 3 (id=3415): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1ec, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x11}, 0x4) 3.587261615s ago: executing program 2 (id=3416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810) (async) syz_emit_ethernet(0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbb870c0c86e94806f0e0b18a75bbaaaaaaaaaaaa180c030000c0"], 0x0) 3.365799488s ago: executing program 4 (id=3417): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_macvtap\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffc}, {0x24caf689, 0x80003}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="fe5eddce00000000300012800b00010062726964676500002000028005000700080000000c002e000400000003"], 0x50}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x2004) 2.282118699s ago: executing program 3 (id=3418): syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x4d) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000080000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000007400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}}, 0x40) 1.425860655s ago: executing program 2 (id=3419): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0xa, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000400)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000004c0)="3b40709a30d0c55466b00aefab2c6083ca0d344bfb81b75ce45b3e9c42076a6f8c5c7d374cdb35ebf0bf45de", 0x2c}], 0x2}, 0x10) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000480}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x8001) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r8, &(0x7f0000000740), 0x10106, 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000780)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f00000007c0)={0xa0000001}) ppoll(&(0x7f0000000800)=[{r10, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r10, &(0x7f0000000840)=[{}], 0x1, 0xffffffff) write(r1, &(0x7f00000000c0)="effd00001000ff00fd4344c007110000a41025c2c7bad6428908121b693fba40412301228d6fe08ae42e1d9360209738c1ef148e824b34456fae107f068849a1df6870fe5bd2665826109c5cb089b03b1d0c9465a93b082308932680cf010000004bdecb982f1c5fa7b70fc04f563a4da12e4156404a5cf61104a984cd19bd869c75cd233876b008caa7b40f991533216d3c7f4297aaf8bc575d1189ea653c35ac5051ab8c531ffc86cfdc20925d15552fd7", 0xb2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@gettaction={0x38, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) 1.131945762s ago: executing program 1 (id=3420): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRESOCT=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x4040000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 902.512913ms ago: executing program 4 (id=3421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}, 0x3a) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x25, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657608696d3000000000000008000a400000000260000000060a010400000000000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c000280080001400000000010000280070002"], 0x104}}, 0x0) 0s ago: executing program 3 (id=3422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@newsa={0x158, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd29, 0x70bd2d, 0x70bd2b, 0x4, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000b00)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000b40)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000800)={0x3, 0x4}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x44) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x9901, 0x49a45}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r3, &(0x7f0000000500)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f0000000540)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000400"/28], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000780)={{r4, &(0x7f0000000580)='GPL\x00', 0x280, &(0x7f00000005c0)={@align=0xf3d, {0xfeff, 0x8, 0x9, 0x54}}, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x9}, {[0x9, 0xcc2, 0x9, 0x7]}, 0x7, 0xe6, &(0x7f0000000680)=""/230}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0xfffffffffffffdfa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000bb000000000000000c00000018110001f922d5d7e547573c1e54ec9c7fc6cf81e0113a5d50e6a7b4fe1252f2d658d057d5343984ebab73b0330f1ec7895bde574de45f95e0b78ae068c001da4b30c885148beea49caf5bf3a4326658fff2473589b1d0cfc499ace8e723ad2a8b510ba424d57723dc979f099b9d452b6a0723198ce5797c274ae6564132a742cfbb86e0d7255c5adab727fe21a6fa053f640687f81ee6e0", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x2) kernel console output (not intermixed with test programs): 1 callbacks suppressed [ 321.807011][T12780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1747'. [ 321.836225][T12780] hsr_slave_0: left promiscuous mode [ 321.837207][T12780] hsr_slave_1: left promiscuous mode [ 321.847272][T12780] hsr0 (unregistering): left promiscuous mode [ 321.863910][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'. [ 322.168132][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 322.568965][T12826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 322.788556][T12835] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.848731][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 322.848755][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1763'. [ 323.158050][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 323.159427][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 323.159733][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 323.160266][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 323.160693][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 325.443281][T12929] xt_hashlimit: overflow, try lower: 3/0 [ 325.450865][T12922] bond6: Unable to set up delay as MII monitoring is disabled [ 325.470821][T12922] bond6 (unregistering): Released all slaves [ 326.176014][T12980] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 326.202449][T12980] 8021q: adding VLAN 0 to HW filter on device bond14 [ 326.225328][T12980] bond14: (slave gretap4): making interface the new active one [ 326.226420][T12980] bond14: (slave gretap4): Enslaving as an active interface with an up link [ 326.497605][T12997] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 326.502117][T12997] bond6 (unregistering): Released all slaves [ 326.831671][T13020] netlink: 'syz.1.1809': attribute type 1 has an invalid length. [ 327.141184][T13039] sctp: [Deprecated]: syz.0.1816 (pid 13039) Use of int in maxseg socket option. [ 327.141184][T13039] Use struct sctp_assoc_value instead [ 327.631187][T13067] net_ratelimit: 11 callbacks suppressed [ 327.631206][T13067] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 327.658841][T13067] __nla_validate_parse: 14 callbacks suppressed [ 327.658860][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 327.880308][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 327.891126][T13071] ip_tables: iptables: counters copy to user failed while replacing table [ 328.208263][T13093] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1829'. [ 328.208300][T13093] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1829'. [ 328.208315][T13093] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1829'. [ 328.258347][T13093] macvlan2: entered promiscuous mode [ 328.258371][T13093] macvlan2: entered allmulticast mode [ 328.346554][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 328.679154][T13115] syzkaller1: entered promiscuous mode [ 328.679169][T13115] syzkaller1: entered allmulticast mode [ 329.139223][T13141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1843'. [ 329.548550][T13173] openvswitch: netlink: IP tunnel dst address not specified [ 329.672915][T13178] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 329.751219][T13178] 8021q: adding VLAN 0 to HW filter on device bond15 [ 329.768625][T13188] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.769251][T13188] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.841073][T13188] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.841206][T13188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.841504][T13188] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.841664][T13188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.880479][T13188] bridge0: entered promiscuous mode [ 329.880583][T13188] bridge0: entered allmulticast mode [ 330.182231][T13226] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 330.185246][T13226] syzkaller0: entered promiscuous mode [ 330.185266][T13226] syzkaller0: entered allmulticast mode [ 330.207546][T13225] gretap1: entered promiscuous mode [ 330.209407][T13225] batman_adv: batadv0: Adding interface: gretap1 [ 330.209422][T13225] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 330.209445][T13225] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 330.228849][T13220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 330.570654][T13245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1871'. [ 330.573672][T13246] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1871'. [ 330.586945][T13245] ip_tables: iptables: counters copy to user failed while replacing table [ 330.740794][T13248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.755078][T13242] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1870'. [ 330.830688][T13248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.859965][T13248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.121748][T13272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.121765][T13272] IPv6: NLM_F_CREATE should be set when creating new route [ 331.121803][T13272] IPv6: NLM_F_CREATE should be set when creating new route [ 331.121826][T13272] IPv6: NLM_F_CREATE should be set when creating new route [ 331.273359][T13287] ªªªªª»: renamed from dummy0 (while UP) [ 332.051551][T13325] ip_tables: iptables: counters copy to user failed while replacing table [ 332.225106][T13345] ipt_ECN: cannot use operation on non-tcp rule [ 332.448441][T13356] netlink: 'syz.0.1899': attribute type 2 has an invalid length. [ 332.647488][T13371] ip_tables: iptables: counters copy to user failed while replacing table [ 332.820377][T13389] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 332.857310][T13389] syzkaller0: entered promiscuous mode [ 332.857333][T13389] syzkaller0: entered allmulticast mode [ 332.863861][T13389] syzkaller0: MTU not usable for tipc bearer [ 332.863897][T13389] tipc: Enabling of bearer rejected, failed to enable media [ 332.935511][T13396] __nla_validate_parse: 4 callbacks suppressed [ 332.935532][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1907'. [ 332.935788][T13396] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 333.174957][T13408] ip_tables: iptables: counters copy to user failed while replacing table [ 333.186280][T13411] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 333.186352][T13411] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 333.340709][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1915'. [ 333.416617][T13421] netlink: 'syz.3.1915': attribute type 4 has an invalid length. [ 333.450840][T13428] netlink: Conntrack attr has 8 unknown bytes [ 334.046741][T13455] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 334.050218][T13455] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 334.107381][T13455] bond9: entered promiscuous mode [ 334.107806][T13455] 8021q: adding VLAN 0 to HW filter on device bond9 [ 334.134351][T13462] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 334.193021][T13455] bond9: (slave bridge0): making interface the new active one [ 334.193047][T13455] bridge0: entered promiscuous mode [ 334.225881][T13455] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 334.241472][T13455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1922'. [ 334.525836][T13483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.570613][T13479] IPVS: Scheduler module ip_vs_sip not found [ 334.679379][T13489] xt_hashlimit: size too large, truncated to 1048576 [ 334.768698][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 334.951987][T13505] smc: removing ib device syz2 [ 335.011735][T13509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1938'. [ 335.072766][T13505] smbdirect: ib_dev[syz2] removed [ 335.133139][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1937'. [ 335.188648][T13513] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 335.210237][T13513] ip_tables: iptables: counters copy to user failed while replacing table [ 335.267039][T13517] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1940'. [ 335.267069][T13517] openvswitch: netlink: IP tunnel dst address not specified [ 335.552366][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 335.556619][T13527] netlink: 'syz.3.1943': attribute type 37 has an invalid length. [ 335.583410][T13530] openvswitch: netlink: Duplicate key (type 16). [ 335.601563][T13530] IPVS: length: 1152 != 8 [ 335.679163][T13533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1946'. [ 335.910949][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1946'. [ 337.174028][ T5635] block nbd2: Receive control failed (result -32) [ 337.828932][ T5635] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 338.283706][ T5635] Bluetooth: hci4: link tx timeout [ 338.283726][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.288036][ T5635] Bluetooth: hci4: link tx timeout [ 338.288052][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.290975][ T5635] Bluetooth: hci4: link tx timeout [ 338.290989][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.292638][ T5635] Bluetooth: hci4: link tx timeout [ 338.292649][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.292750][ T5635] Bluetooth: hci4: link tx timeout [ 338.292761][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.292881][ T5635] Bluetooth: hci4: link tx timeout [ 338.292891][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293021][ T5635] Bluetooth: hci4: link tx timeout [ 338.293031][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293128][ T5635] Bluetooth: hci4: link tx timeout [ 338.293138][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293230][ T5635] Bluetooth: hci4: link tx timeout [ 338.293240][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293331][ T5635] Bluetooth: hci4: link tx timeout [ 338.293341][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293439][ T5635] Bluetooth: hci4: link tx timeout [ 338.293449][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293547][ T5635] Bluetooth: hci4: link tx timeout [ 338.293557][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293673][ T5635] Bluetooth: hci4: link tx timeout [ 338.293684][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293775][ T5635] Bluetooth: hci4: link tx timeout [ 338.293784][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293875][ T5635] Bluetooth: hci4: link tx timeout [ 338.293885][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.293975][ T5635] Bluetooth: hci4: link tx timeout [ 338.293984][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294115][ T5635] Bluetooth: hci4: link tx timeout [ 338.294125][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294217][ T5635] Bluetooth: hci4: link tx timeout [ 338.294227][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294318][ T5635] Bluetooth: hci4: link tx timeout [ 338.294328][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294456][ T5635] Bluetooth: hci4: link tx timeout [ 338.294466][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294564][ T5635] Bluetooth: hci4: link tx timeout [ 338.294574][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294665][ T5635] Bluetooth: hci4: link tx timeout [ 338.294675][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294779][ T5635] Bluetooth: hci4: link tx timeout [ 338.294789][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294880][ T5635] Bluetooth: hci4: link tx timeout [ 338.294889][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.294980][ T5635] Bluetooth: hci4: link tx timeout [ 338.294990][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.296648][ T5635] Bluetooth: hci4: link tx timeout [ 338.296660][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.296789][ T5635] Bluetooth: hci4: link tx timeout [ 338.296798][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.296893][ T5635] Bluetooth: hci4: link tx timeout [ 338.296903][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.298583][ T5635] Bluetooth: hci4: link tx timeout [ 338.298597][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.300261][ T5635] Bluetooth: hci4: link tx timeout [ 338.300274][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.300399][ T5635] Bluetooth: hci4: link tx timeout [ 338.300409][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.300566][ T5635] Bluetooth: hci4: link tx timeout [ 338.300577][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.300675][ T5635] Bluetooth: hci4: link tx timeout [ 338.300685][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.300781][ T5635] Bluetooth: hci4: link tx timeout [ 338.300791][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.300886][ T5635] Bluetooth: hci4: link tx timeout [ 338.300896][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.300991][ T5635] Bluetooth: hci4: link tx timeout [ 338.301001][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.301097][ T5635] Bluetooth: hci4: link tx timeout [ 338.301107][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.301203][ T5635] Bluetooth: hci4: link tx timeout [ 338.301213][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.301315][ T5635] Bluetooth: hci4: link tx timeout [ 338.301325][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.301420][ T5635] Bluetooth: hci4: link tx timeout [ 338.301431][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303113][ T5635] Bluetooth: hci4: link tx timeout [ 338.303126][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303227][ T5635] Bluetooth: hci4: link tx timeout [ 338.303238][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303333][ T5635] Bluetooth: hci4: link tx timeout [ 338.303343][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303437][ T5635] Bluetooth: hci4: link tx timeout [ 338.303447][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303547][ T5635] Bluetooth: hci4: link tx timeout [ 338.303557][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303652][ T5635] Bluetooth: hci4: link tx timeout [ 338.303662][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303770][ T5635] Bluetooth: hci4: link tx timeout [ 338.303780][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.303914][ T5635] Bluetooth: hci4: link tx timeout [ 338.303924][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.304171][ T5635] Bluetooth: hci4: link tx timeout [ 338.304182][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.304554][ T5635] Bluetooth: hci4: link tx timeout [ 338.304565][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.304705][ T5635] Bluetooth: hci4: link tx timeout [ 338.304715][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.304808][ T5635] Bluetooth: hci4: link tx timeout [ 338.304818][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.304910][ T5635] Bluetooth: hci4: link tx timeout [ 338.304919][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305009][ T5635] Bluetooth: hci4: link tx timeout [ 338.305019][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305143][ T5635] Bluetooth: hci4: link tx timeout [ 338.305153][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305245][ T5635] Bluetooth: hci4: link tx timeout [ 338.305255][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305346][ T5635] Bluetooth: hci4: link tx timeout [ 338.305380][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305566][ T5635] Bluetooth: hci4: link tx timeout [ 338.305576][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305673][ T5635] Bluetooth: hci4: link tx timeout [ 338.305683][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305774][ T5635] Bluetooth: hci4: link tx timeout [ 338.305783][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305874][ T5635] Bluetooth: hci4: link tx timeout [ 338.305883][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.305973][ T5635] Bluetooth: hci4: link tx timeout [ 338.305983][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.306073][ T5635] Bluetooth: hci4: link tx timeout [ 338.306083][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.306747][ T5635] Bluetooth: hci4: link tx timeout [ 338.306758][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.306856][ T5635] Bluetooth: hci4: link tx timeout [ 338.306866][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.306961][ T5635] Bluetooth: hci4: link tx timeout [ 338.306970][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.307070][ T5635] Bluetooth: hci4: link tx timeout [ 338.307080][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.307174][ T5635] Bluetooth: hci4: link tx timeout [ 338.307184][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.307278][ T5635] Bluetooth: hci4: link tx timeout [ 338.307287][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.307383][ T5635] Bluetooth: hci4: link tx timeout [ 338.307392][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.307498][ T5635] Bluetooth: hci4: link tx timeout [ 338.307508][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.307868][ T5635] Bluetooth: hci4: link tx timeout [ 338.307879][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.307980][ T5635] Bluetooth: hci4: link tx timeout [ 338.307991][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.308103][ T5635] Bluetooth: hci4: link tx timeout [ 338.308113][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309013][ T5635] Bluetooth: hci4: link tx timeout [ 338.309025][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309122][ T5635] Bluetooth: hci4: link tx timeout [ 338.309132][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309224][ T5635] Bluetooth: hci4: link tx timeout [ 338.309234][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309325][ T5635] Bluetooth: hci4: link tx timeout [ 338.309335][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309426][ T5635] Bluetooth: hci4: link tx timeout [ 338.309436][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309533][ T5635] Bluetooth: hci4: link tx timeout [ 338.309543][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309635][ T5635] Bluetooth: hci4: link tx timeout [ 338.309645][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309736][ T5635] Bluetooth: hci4: link tx timeout [ 338.309745][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.309836][ T5635] Bluetooth: hci4: link tx timeout [ 338.309846][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.310034][ T5635] Bluetooth: hci4: link tx timeout [ 338.310045][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.310141][ T5635] Bluetooth: hci4: link tx timeout [ 338.310150][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.310329][ T5635] Bluetooth: hci4: link tx timeout [ 338.310339][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311191][ T5635] Bluetooth: hci4: link tx timeout [ 338.311203][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311299][ T5635] Bluetooth: hci4: link tx timeout [ 338.311309][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311403][ T5635] Bluetooth: hci4: link tx timeout [ 338.311413][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311507][ T5635] Bluetooth: hci4: link tx timeout [ 338.311517][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311619][ T5635] Bluetooth: hci4: link tx timeout [ 338.311628][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311723][ T5635] Bluetooth: hci4: link tx timeout [ 338.311733][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311824][ T5635] Bluetooth: hci4: link tx timeout [ 338.311833][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.311937][ T5635] Bluetooth: hci4: link tx timeout [ 338.311947][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.312060][ T5635] Bluetooth: hci4: link tx timeout [ 338.312070][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.312320][ T5635] Bluetooth: hci4: link tx timeout [ 338.312331][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.314250][ T5635] Bluetooth: hci4: link tx timeout [ 338.314263][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.314632][ T5635] Bluetooth: hci4: link tx timeout [ 338.314643][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.315259][ T5635] Bluetooth: hci4: link tx timeout [ 338.315270][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.315365][ T5635] Bluetooth: hci4: link tx timeout [ 338.315374][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.315572][ T5635] Bluetooth: hci4: link tx timeout [ 338.315582][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.315678][ T5635] Bluetooth: hci4: link tx timeout [ 338.315688][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.315782][ T5635] Bluetooth: hci4: link tx timeout [ 338.315792][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.315885][ T5635] Bluetooth: hci4: link tx timeout [ 338.315895][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.316005][ T5635] Bluetooth: hci4: link tx timeout [ 338.316016][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.316810][ T5635] Bluetooth: hci4: link tx timeout [ 338.316823][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.316900][ T5635] Bluetooth: hci4: link tx timeout [ 338.316911][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317002][ T5635] Bluetooth: hci4: link tx timeout [ 338.317012][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317103][ T5635] Bluetooth: hci4: link tx timeout [ 338.317113][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317205][ T5635] Bluetooth: hci4: link tx timeout [ 338.317215][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317307][ T5635] Bluetooth: hci4: link tx timeout [ 338.317317][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317407][ T5635] Bluetooth: hci4: link tx timeout [ 338.317417][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317507][ T5635] Bluetooth: hci4: link tx timeout [ 338.317517][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317813][ T5635] Bluetooth: hci4: link tx timeout [ 338.317824][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.317916][ T5635] Bluetooth: hci4: link tx timeout [ 338.317927][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.318295][ T5635] Bluetooth: hci4: link tx timeout [ 338.318305][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.318398][ T5635] Bluetooth: hci4: link tx timeout [ 338.318408][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.318523][ T5635] Bluetooth: hci4: link tx timeout [ 338.318541][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.318635][ T5635] Bluetooth: hci4: link tx timeout [ 338.318645][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.318736][ T5635] Bluetooth: hci4: link tx timeout [ 338.318746][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.325587][ T5635] Bluetooth: hci4: link tx timeout [ 338.325601][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.331635][ T5635] Bluetooth: hci4: link tx timeout [ 338.331649][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 338.771519][T13662] __nla_validate_parse: 2 callbacks suppressed [ 338.771538][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.808204][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.808391][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.808578][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.808748][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.808918][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.809088][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.829363][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.829549][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 338.829717][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1975'. [ 339.455149][T13685] syzkaller0: left promiscuous mode [ 339.455171][T13685] syzkaller0: left allmulticast mode [ 340.049826][T13706] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.330885][T13728] IPv6: sit2: Disabled Multicast RS [ 340.337570][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 340.440793][T13736] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 340.540392][T13744] netlink: 'syz.4.1994': attribute type 15 has an invalid length. [ 340.560171][T13739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.700962][T13750] batman_adv: batadv0: Removing interface: gretap1 [ 341.179167][T13773] bond16: option xmit_hash_policy: invalid value (64) [ 341.197575][T13773] bond16 (unregistering): Released all slaves [ 342.063502][T13839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.085952][T13839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.343919][T13848] netlink: 'syz.1.2026': attribute type 8 has an invalid length. [ 342.344229][T13848] sch_fq: defrate 0 ignored. [ 342.482690][T13868] x_tables: unsorted entry at hook 1 [ 342.515968][T13868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.826932][T13891] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 342.826958][T13891] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 342.844604][T13891] syzkaller0: left promiscuous mode [ 342.844626][T13891] syzkaller0: left allmulticast mode [ 343.630003][T13949] block nbd3: server does not support multiple connections per device. [ 343.630359][T13949] block nbd3: shutting down sockets [ 343.809061][T13955] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 343.911911][T13961] netlink: 'syz.4.2052': attribute type 1 has an invalid length. [ 343.911932][T13961] __nla_validate_parse: 39 callbacks suppressed [ 343.911959][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 343.911971][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 343.965644][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.059682][T13973] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 344.072559][T13973] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð< [ 344.105994][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.106231][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.106415][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.106597][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.106799][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.106993][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.107397][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 344.293469][T13982] ip_tables: iptables: counters copy to user failed while replacing table [ 344.459019][T13994] openvswitch: netlink: IP tunnel dst address not specified [ 344.489769][T13995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 344.502736][T13995] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 344.648011][T14004] erspan1: entered promiscuous mode [ 346.370492][T14091] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 346.435210][T14096] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 346.593410][T14110] x_tables: duplicate underflow at hook 2 [ 346.596824][ T5647] Bluetooth: hci4: unexpected event for opcode 0x00ea [ 346.662411][T14112] syzkaller0: entered promiscuous mode [ 346.662437][T14112] syzkaller0: entered allmulticast mode [ 346.667057][T14114] x_tables: duplicate underflow at hook 2 [ 346.685677][ T5647] Bluetooth: hci4: unexpected event for opcode 0x00ea [ 347.176345][T14148] netlink: 'syz.1.2106': attribute type 8 has an invalid length. [ 347.189275][T14148] ip6gre1: entered allmulticast mode [ 347.359889][T14156] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.360486][T14156] bridge0: port 1(bond9) entered blocking state [ 347.360673][T14156] bridge0: port 1(bond9) entered disabled state [ 347.360855][T14156] bond9: entered allmulticast mode [ 347.362571][T14156] bond9: entered promiscuous mode [ 347.363679][T14156] bridge0: port 1(bond9) entered blocking state [ 347.363792][T14156] bridge0: port 1(bond9) entered forwarding state [ 347.383365][T14150] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 347.383432][T14150] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 347.458498][T14152] syz.4.2108 (14152) used greatest stack depth: 17992 bytes left [ 347.765058][T12435] bridge0: port 1(bond9) entered disabled state [ 347.851937][T14180] Bluetooth: hci0: unsupported parameter 5135 [ 347.851961][T14180] Bluetooth: hci0: unsupported parameter 8192 [ 347.851992][T14180] Bluetooth: hci0: unsupported parameter 5135 [ 347.852004][T14180] Bluetooth: hci0: unsupported parameter 8192 [ 347.999727][T14189] bridge_slave_1: left allmulticast mode [ 347.999755][T14189] bridge_slave_1: left promiscuous mode [ 347.999974][T14189] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.013319][T14189] bridge_slave_0: left allmulticast mode [ 348.013345][T14189] bridge_slave_0: left promiscuous mode [ 348.013554][T14189] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.438863][T14211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.446444][T14211] bond0: (slave bond6): Enslaving as an active interface with a down link [ 348.635986][T14231] tc_dump_action: action bad kind [ 348.872490][T14237] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 349.019563][T14244] block nbd3: not configured, cannot reconfigure [ 349.020366][T14244] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 349.079178][T14244] bond16: (slave bridge6): making interface the new active one [ 349.079787][T14244] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 349.222212][T14260] __nla_validate_parse: 80 callbacks suppressed [ 349.222233][T14260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2139'. [ 349.520428][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2144'. [ 349.520684][T14282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2144'. [ 349.544323][T14280] netlink: 'syz.4.2146': attribute type 6 has an invalid length. [ 349.549081][T14281] tipc: New replicast peer: 255.255.255.255 [ 349.550365][T14281] tipc: Enabled bearer , priority 10 [ 349.550448][T14282] tipc: Enabling of bearer rejected, already enabled [ 349.551253][T14281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2144'. [ 349.551282][T14281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2144'. [ 349.639957][T14283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.679203][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 349.795743][T14295] syzkaller0: entered promiscuous mode [ 349.795769][T14295] syzkaller0: entered allmulticast mode [ 349.909671][T14301] x_tables: duplicate underflow at hook 1 [ 349.943850][T14302] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 350.027567][T14301] pimreg: entered allmulticast mode [ 350.191578][T14313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2154'. [ 350.203842][T14313] netlink: 'syz.2.2154': attribute type 3 has an invalid length. [ 350.203864][T14313] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2154'. [ 350.297522][T14317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2156'. [ 350.300557][T14320] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2157'. [ 350.666338][ T5647] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 350.670884][ T5647] Bluetooth: hci4: Injecting HCI hardware error event [ 350.672335][ T5635] Bluetooth: hci4: hardware error 0x00 [ 351.315307][T14369] xt_TCPMSS: Only works on TCP SYN packets [ 351.880373][ T147] bond0: (slave bond_slave_0): interface is now down [ 351.880551][T14404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.881249][ T147] bond0: (slave bond_slave_1): interface is now down [ 351.895824][ T147] bond0: (slave bond6): interface is now up [ 352.017238][T14409] netlink: 'syz.1.2181': attribute type 1 has an invalid length. [ 352.546075][T14430] netlink: 'syz.4.2184': attribute type 10 has an invalid length. [ 352.569066][T14433] netlink: 'syz.4.2184': attribute type 10 has an invalid length. [ 353.296437][ T5635] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 353.420207][T14465] syzkaller1: entered promiscuous mode [ 353.420763][T14465] syzkaller1: entered allmulticast mode [ 354.024800][T14488] 8021q: adding VLAN 0 to HW filter on device bond10 [ 354.111331][T14492] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 354.151844][T14492] .`: renamed from bond0 [ 354.250020][T14492] .`: (slave bond_slave_0): Releasing backup interface [ 354.298318][T14492] .`: (slave bond_slave_1): Releasing backup interface [ 354.369076][T14492] team0: Port device team_slave_0 removed [ 354.393692][T14492] team0: Port device team_slave_1 removed [ 354.402246][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.402269][T14492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.416884][ T62] bond0: (slave bond_slave_0): interface is now up [ 354.429460][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.429485][T14492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.454811][T14492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.634983][T14519] team0: Port device xfrm0 added [ 354.747534][T14537] netlink: 'syz.3.2202': attribute type 14 has an invalid length. [ 355.103669][T14549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.106984][T14549] __nla_validate_parse: 12 callbacks suppressed [ 355.107001][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'. [ 355.302245][T14555] dvmrp1: entered allmulticast mode [ 355.492813][T14559] syzkaller0: entered promiscuous mode [ 355.492838][T14559] syzkaller0: entered allmulticast mode [ 355.497683][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 355.497706][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 355.736881][T14563] netlink: 'syz.3.2208': attribute type 1 has an invalid length. [ 355.736896][T14563] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2208'. [ 355.737710][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2208'. [ 355.738708][T14563] netdevsim netdevsim3 : renamed from netdevsim0 [ 356.741114][T14476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.742758][T14502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.977435][ T147] bond0: (slave bond6): interface is now down [ 356.987711][ T147] bond0: now running without any active interface! [ 357.179953][T14592] xt_l2tp: v2 doesn't support IP mode [ 357.243683][T14594] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 357.280993][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 357.500855][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 357.806443][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 357.856471][T14600] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 357.856507][T14600] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 357.856543][T14600] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 358.237132][T14642] netlink: 'syz.4.2228': attribute type 2 has an invalid length. [ 358.355950][T14644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2230'. [ 358.497043][T14653] netlink: 'syz.2.2232': attribute type 11 has an invalid length. [ 358.497065][T14653] netlink: 'syz.2.2232': attribute type 4 has an invalid length. [ 358.497079][T14653] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2232'. [ 358.717451][T14659] ªªªªª»: renamed from dummy0 [ 358.820900][T14666] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 358.983679][T14670] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 358.983708][T14670] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 359.167925][T14673] veth9: entered allmulticast mode [ 359.276419][T14674] netlink: 'syz.4.2239': attribute type 2 has an invalid length. [ 359.652702][T14701] netlink: 'syz.0.2244': attribute type 2 has an invalid length. [ 359.989457][T14701] !: entered promiscuous mode [ 360.007979][T14704] !: left promiscuous mode [ 360.296061][T14726] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.520178][T14744] __nla_validate_parse: 6 callbacks suppressed [ 360.520197][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 360.522823][ T5635] Bluetooth: hci2: unexpected event for opcode 0x203d [ 360.600045][T14750] ip_tables: iptables: counters copy to user failed while replacing table [ 360.632539][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 360.662325][T14752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.888816][T14756] syzkaller1: entered promiscuous mode [ 360.888840][T14756] syzkaller1: entered allmulticast mode [ 361.177297][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2262'. [ 361.616639][T14800] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 361.777999][T14814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2276'. [ 361.780859][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2276'. [ 361.869195][T14814] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 361.869225][T14814] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 361.923234][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 362.181361][T14845] netlink: zone id is out of range [ 362.181395][T14845] netlink: zone id is out of range [ 362.181403][T14845] netlink: zone id is out of range [ 362.181410][T14845] netlink: zone id is out of range [ 362.181417][T14845] netlink: zone id is out of range [ 362.190058][T14844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2285'. [ 362.295950][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2287'. [ 362.295990][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2287'. [ 362.448068][ T30] audit: type=1107 audit(1793549292.724:3): pid=14860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?‹Â.Oy(\e*' [ 362.759344][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 364.560239][T14998] veth0: entered promiscuous mode [ 364.560428][T14998] veth0: left promiscuous mode [ 364.791388][T15014] ip_tables: iptables: counters copy to user failed while replacing table [ 364.807563][T15014] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 364.816274][T15017] ip_tables: iptables: counters copy to user failed while replacing table [ 364.822873][T15019] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 365.016287][T15029] netlink: 'syz.1.2330': attribute type 46 has an invalid length. [ 365.021781][T15028] netlink: 'syz.4.2332': attribute type 21 has an invalid length. [ 365.139376][T15037] xt_policy: neither incoming nor outgoing policy selected [ 365.241264][T15046] ipt_ah: unknown flags FF [ 365.511039][T15062] Cannot find set identified by id 4 to match [ 365.812277][T15075] 8021q: VLANs not supported on ip6tnl0 [ 365.853404][T15077] netlink: 'syz.2.2344': attribute type 9 has an invalid length. [ 366.033517][T15084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.036299][T15085] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.326207][T15101] __nla_validate_parse: 13 callbacks suppressed [ 366.326226][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 366.326418][T15097] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 366.562621][T15117] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2356'. [ 366.656303][T15124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'. [ 366.656341][T15124] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2359'. [ 366.679258][T15124] veth1_to_bond: entered allmulticast mode [ 366.890353][T15123] veth1_to_bond: left allmulticast mode [ 367.591561][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 367.640276][T15176] macvtap1: entered promiscuous mode [ 367.640299][T15176] vlan0: entered promiscuous mode [ 367.640784][T15176] macvtap1: entered allmulticast mode [ 367.640800][T15176] vlan0: entered allmulticast mode [ 367.640810][T15176] veth0_vlan: entered allmulticast mode [ 367.711838][T15183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2372'. [ 367.712609][T15183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2372'. [ 367.814007][T15190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2374'. [ 367.817631][T15191] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 367.859069][T15190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2374'. [ 367.859109][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 368.547572][T15219] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 370.998468][T15204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.733944][T15285] sctp: [Deprecated]: syz.0.2393 (pid 15285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.733944][T15285] Use struct sctp_sack_info instead [ 371.752018][T15268] syzkaller0: entered promiscuous mode [ 371.752040][T15268] syzkaller0: entered allmulticast mode [ 372.403157][T15303] ipt_REJECT: TCP_RESET invalid for non-tcp [ 373.812247][T15325] __nla_validate_parse: 4 callbacks suppressed [ 373.812266][T15325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 373.819377][T15325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 374.036486][T15335] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 374.036508][T15335] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2400'. [ 374.036547][T15335] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 374.036559][T15335] netlink: 'syz.1.2400': attribute type 2 has an invalid length. [ 374.301028][T15352] xt_socket: unknown flags 0xc [ 374.449066][T15360] bridge0: left allmulticast mode [ 374.557297][T15364] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2410'. [ 374.638492][T15366] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 374.822061][T15373] geneve4: entered promiscuous mode [ 374.836129][T12437] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 35932 - 0 [ 374.836820][T12437] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 35932 - 0 [ 374.836858][T12437] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 35932 - 0 [ 374.836890][T12437] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 35932 - 0 [ 374.904769][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'. [ 374.964083][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 374.971331][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'. [ 374.982663][T15381] bond0: Removing last arp target with arp_interval on [ 376.194709][T15424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2422'. [ 376.208860][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 376.208919][T15429] netlink: 'syz.3.2424': attribute type 6 has an invalid length. [ 376.208933][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 378.661441][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.377579][T15524] syzkaller0: entered promiscuous mode [ 379.377602][T15524] syzkaller0: entered allmulticast mode [ 379.471663][T15532] netlink: 'syz.2.2458': attribute type 1 has an invalid length. [ 379.742745][T15540] netlink: 'syz.2.2458': attribute type 1 has an invalid length. [ 379.841580][T15556] netlink: 'syz.3.2463': attribute type 4 has an invalid length. [ 380.738262][T15603] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 380.738285][T15603] __nla_validate_parse: 2 callbacks suppressed [ 380.738296][T15603] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2479'. [ 380.847623][T15606] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2481'. [ 380.881308][T15609] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2481'. [ 380.996864][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2480'. [ 381.025114][T15619] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 381.025136][T15619] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2482'. [ 381.594818][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'. [ 381.597162][ T5635] Bluetooth: hci3: connection err: -111 [ 381.628990][T15644] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2492'. [ 381.669881][T15642] xt_l2tp: invalid flags combination: 0 [ 382.073340][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 382.669706][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 382.689711][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 383.179301][T15703] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 383.999848][T15729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.252147][T15714] syzkaller0: entered promiscuous mode [ 384.252171][T15714] syzkaller0: entered allmulticast mode [ 385.066128][T15768] veth11: entered allmulticast mode [ 385.108500][T15771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.113481][T15768] netlink: 'syz.4.2529': attribute type 1 has an invalid length. [ 385.143431][T15773] tunl0: entered promiscuous mode [ 385.153809][T15773] netlink: 'syz.2.2532': attribute type 4 has an invalid length. [ 385.259024][T15767] ovs-dp0: entered promiscuous mode [ 385.508752][T15784] tipc: Enabling of bearer rejected, failed to enable media [ 385.730294][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 385.730642][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 385.730961][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 385.731295][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 385.739142][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 385.739511][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 385.739824][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 385.740121][T15797] ip_tables: iptables: counters copy to user failed while replacing table [ 386.539445][T15836] __nla_validate_parse: 8 callbacks suppressed [ 386.539464][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.539478][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.539771][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.539787][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.540028][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.540041][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.540237][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.540250][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.540445][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.540459][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2546'. [ 386.623295][T15839] tun0: tun_chr_ioctl cmd 1074025675 [ 386.623316][T15839] tun0: persist disabled [ 388.434813][T15906] netlink: 'syz.0.2565': attribute type 8 has an invalid length. [ 388.755543][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.755564][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.803155][T15917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.085422][T15953] netlink: 'syz.2.2577': attribute type 1 has an invalid length. [ 390.543269][T15965] syzkaller1: entered allmulticast mode [ 390.950546][T15993] netlink: 'syz.4.2589': attribute type 1 has an invalid length. [ 390.952790][T15987] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 391.063837][T15993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.067796][T15997] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 391.081300][T15997] bond0: entered allmulticast mode [ 391.258245][T15997] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 391.838549][T16020] __nla_validate_parse: 131 callbacks suppressed [ 391.838568][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 393.855100][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 394.071512][T15999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.611250][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 394.611275][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 395.268964][T16080] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 395.269393][T16080] gretap5: entered promiscuous mode [ 395.269411][T16080] gretap5: entered allmulticast mode [ 395.555952][T16093] x_tables: duplicate underflow at hook 1 [ 395.687225][T16092] net_ratelimit: 59 callbacks suppressed [ 395.687247][T16092] ip_tables: iptables: counters copy to user failed while replacing table [ 395.728377][T16095] syzkaller0: MTU not usable for tipc bearer [ 395.728415][T16095] tipc: Enabling of bearer rejected, failed to enable media [ 395.756874][T16092] ip_tables: iptables: counters copy to user failed while replacing table [ 395.849212][T16101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.027988][T16105] netlink: 'syz.3.2616': attribute type 1 has an invalid length. [ 396.241491][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.241539][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.271888][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.271943][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.284231][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.284273][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.308495][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.846102][T16123] __nla_validate_parse: 57 callbacks suppressed [ 396.846124][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 396.846161][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 397.055558][T16125] workqueue: Failed to create a rescuer kthread for wq "nfc11_nci_cmd_wq": -EINTR [ 397.602938][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 397.640187][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2628'. [ 397.691224][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2628'. [ 397.692096][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2628'. [ 398.012071][T16230] netlink: 'syz.2.2633': attribute type 142 has an invalid length. [ 398.405024][T16245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2637'. [ 398.405398][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2637'. [ 398.686104][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'. [ 398.686130][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2638'. [ 398.734377][T16252] netlink: 'syz.3.2640': attribute type 1 has an invalid length. [ 401.642227][T16250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.892896][T16296] netlink: 'syz.0.2647': attribute type 11 has an invalid length. [ 402.121700][T16303] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 402.162868][T16317] __nla_validate_parse: 1 callbacks suppressed [ 402.162887][T16317] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2648'. [ 402.419283][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'. [ 402.419306][T16327] netlink: 'syz.3.2653': attribute type 5 has an invalid length. [ 403.304778][T16358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2661'. [ 403.498531][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 403.593007][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 403.857959][T16376] IPVS: set_ctl: invalid protocol: 135 172.20.20.65:20000 [ 403.959257][T16385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.008488][T16385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2670'. [ 404.008514][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'. [ 404.160505][T16398] netlink: 'syz.4.2672': attribute type 1 has an invalid length. [ 404.471089][T16411] 8021q: VLANs not supported on ip6tnl0 [ 404.748557][T16421] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 405.102636][T16447] veth1_vlan: Device is already in use. [ 405.106371][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2682'. [ 405.376292][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 405.434445][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2684'. [ 407.828167][T16423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.163358][T16482] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 408.178530][T16485] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 408.502196][T16501] 8021q: VLANs not supported on ip6tnl0 [ 408.707537][T16508] bond11: entered promiscuous mode [ 408.707877][T16510] tipc: Enabling of bearer rejected, failed to enable media [ 408.893130][T16521] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 408.893215][T16521] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 409.079271][T16525] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2702'. [ 409.302028][T16514] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2700'. [ 409.688660][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 409.965229][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2705'. [ 410.023601][T16549] xt_CONNSECMARK: invalid mode: 0 [ 410.026906][T16551] xt_CONNSECMARK: invalid mode: 0 [ 410.286237][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 410.286460][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 410.286667][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 410.286865][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 410.287104][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 410.287309][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 410.579036][T16571] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 410.710345][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710367][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710379][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710567][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710580][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710592][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710796][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710809][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.710822][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 410.711008][T16578] netlink: 'syz.4.2714': attribute type 2 has an invalid length. [ 411.091675][T16592] ebt_among: dst integrity fail: 200 [ 411.624750][T16603] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 411.719889][T16603] bond12 (unregistering): Released all slaves [ 412.024348][T16615] IPVS: set_ctl: invalid protocol: 41 172.20.20.18:20004 [ 412.158707][T16622] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.251679][T16634] ip6t_hbh: unknown flags 38 [ 412.340392][T16618] veth0_to_bond: entered allmulticast mode [ 412.868566][T16665] bridge0: port 1(vlan2) entered blocking state [ 412.868679][T16665] bridge0: port 1(vlan2) entered disabled state [ 412.868816][T16665] vlan2: entered allmulticast mode [ 412.869550][T16665] bridge_slave_0: entered allmulticast mode [ 412.872816][T16665] vlan2: entered promiscuous mode [ 412.872834][T16665] bridge_slave_0: entered promiscuous mode [ 413.851441][T16712] team0: Device gtp0 is up. Set it down before adding it as a team port [ 413.860588][ T5647] Bluetooth: hci2: unexpected event for opcode 0x203d [ 414.850293][T16751] __nla_validate_parse: 70 callbacks suppressed [ 414.850314][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2756'. [ 415.458460][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 415.461259][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 415.462140][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 415.787444][T16809] SET target dimension over the limit! [ 415.797509][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 415.797529][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'. [ 416.221434][T16829] xt_hashlimit: size too large, truncated to 1048576 [ 416.320505][T16820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.977139][T16857] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2783'. [ 417.006658][T16857] team0: Port device xfrm0 removed [ 417.805419][T16886] validate_nla: 192 callbacks suppressed [ 417.805440][T16886] netlink: 'syz.3.2789': attribute type 12 has an invalid length. [ 417.848254][T16888] syzkaller0: MTU not usable for tipc bearer [ 417.848294][T16888] tipc: Enabling of bearer rejected, failed to enable media [ 418.000162][T16886] bond17: option primary_reselect: invalid value (255) [ 418.041038][T16886] bond17 (unregistering): Released all slaves [ 418.460199][T16911] syz_tun: entered allmulticast mode [ 418.534962][T16914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.556702][T16916] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2797'. [ 418.658246][T16915] bond6 (unregistering): Released all slaves [ 418.672014][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2800'. [ 418.853338][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 418.892852][T16910] syz_tun: left allmulticast mode [ 419.106554][T16939] sctp: [Deprecated]: syz.4.2804 (pid 16939) Use of int in maxseg socket option. [ 419.106554][T16939] Use struct sctp_assoc_value instead [ 419.368068][T16954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.587456][T16964] x_tables: duplicate underflow at hook 1 [ 419.641488][T16964] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 419.991183][T16979] netlink: 'syz.2.2816': attribute type 1 has an invalid length. [ 420.064980][T16979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.103456][T16980] __nla_validate_parse: 3 callbacks suppressed [ 420.103476][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.105824][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.106455][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.115471][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.116104][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.125640][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.133274][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.136069][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.142330][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 420.157507][T16980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2816'. [ 421.475131][T17020] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 421.679609][T17028] 0ªX¹¦Dö»: entered promiscuous mode [ 421.696955][T17028] 0ªX¹¦Dö»: left allmulticast mode [ 421.787819][T17028] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» [ 421.794467][T17028] 0ªî{X¹¦: left promiscuous mode [ 421.794489][T17028] 0ªî{X¹¦: entered allmulticast mode [ 421.818675][T17028] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 422.161607][T12439] tipc: Subscription rejected, illegal request [ 422.305482][T17054] Bluetooth: hci0: unsupported parameter 5161 [ 422.305507][T17054] Bluetooth: hci0: unsupported parameter 8192 [ 422.305521][T17054] Bluetooth: hci0: unsupported parameter 5161 [ 422.305534][T17054] Bluetooth: hci0: unsupported parameter 8192 [ 425.226249][T17074] syzkaller1: entered promiscuous mode [ 425.226273][T17074] syzkaller1: entered allmulticast mode [ 425.451526][T17100] __nla_validate_parse: 64 callbacks suppressed [ 425.451547][T17100] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2852'. [ 425.815216][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2857'. [ 425.893404][T17118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 426.343816][T17142] xfrm1: entered allmulticast mode [ 426.829853][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 426.829880][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 426.933007][T17173] netlink: 'syz.0.2871': attribute type 2 has an invalid length. [ 426.933029][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 426.955315][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 426.959930][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 426.959953][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 427.126585][T17184] openvswitch: netlink: IP tunnel dst address not specified [ 427.235828][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2873'. [ 427.593786][T17177] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 427.771727][T17196] netlink: 'syz.0.2876': attribute type 8 has an invalid length. [ 428.354979][T17215] openvswitch: netlink: Invalid VLAN frame [ 428.749886][T17236] openvswitch: netlink: IP tunnel dst address not specified [ 428.986415][ T5647] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 429.090325][T17243] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.657152][T17264] Bluetooth: ISO socket layer initialized [ 429.661540][ T5647] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 429.807676][T17266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.762227][T17294] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 431.082847][T17302] netlink: 'syz.4.2902': attribute type 1 has an invalid length. [ 431.167627][T17302] 8021q: adding VLAN 0 to HW filter on device bond12 [ 431.210819][T17310] ip_tables: iptables: counters copy to user failed while replacing table [ 431.220380][T17312] ebt_limit: overflow, try lower: 4278190080/255 [ 431.224715][T17311] ebt_limit: overflow, try lower: 4278190080/255 [ 431.439272][T17306] bond12: (slave geneve5): making interface the new active one [ 431.472041][T17306] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 432.502495][T17350] Bluetooth: hci0: unsupported parameter 5135 [ 432.502518][T17350] Bluetooth: hci0: unsupported parameter 8192 [ 432.502530][T17350] Bluetooth: hci0: unsupported parameter 5135 [ 432.502542][T17350] Bluetooth: hci0: unsupported parameter 8192 [ 432.943689][T17374] netlink: 'syz.1.2915': attribute type 1 has an invalid length. [ 432.964538][T17374] netlink: 'syz.1.2915': attribute type 1 has an invalid length. [ 433.392183][T17387] __nla_validate_parse: 14 callbacks suppressed [ 433.392206][T17387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2917'. [ 433.403091][T17387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2917'. [ 433.519419][T17390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2919'. [ 433.951800][T17404] vlan0: entered promiscuous mode [ 434.199672][T17415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2926'. [ 434.373637][T17424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2926'. [ 435.427083][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.430315][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.442390][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.459591][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.461403][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.563098][T17472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 435.612513][T17473] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2937'. [ 435.674765][T17472] netlink: 'syz.0.2936': attribute type 1 has an invalid length. [ 435.732728][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 435.807631][T17472] 8021q: adding VLAN 0 to HW filter on device bond10 [ 436.053843][ T456] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 436.076245][T17494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2940'. [ 436.233054][T17500] netlink: 'syz.0.2943': attribute type 9 has an invalid length. [ 436.233077][T17500] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.2943'. [ 436.841248][T17515] xt_LOG: level 8 >= 8 [ 436.855396][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 436.889185][T17515] vlan2: entered promiscuous mode [ 436.889208][T17515] bond0: entered promiscuous mode [ 436.889222][T17515] bond_slave_0: entered promiscuous mode [ 436.890156][T17515] bond_slave_1: entered promiscuous mode [ 437.039614][T17466] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.120633][T17530] netlink: 'syz.3.2950': attribute type 1 has an invalid length. [ 437.368069][T17539] xt_hashlimit: size too large, truncated to 1048576 [ 437.534168][ T5647] Bluetooth: hci5: command tx timeout [ 438.022521][T17549] x_tables: ip_tables: osf match: only valid for protocol 6 [ 438.186852][T17557] PKCS7: Unknown OID: [4] (bad) [ 438.186871][T17557] PKCS7: Only support pkcs7_signedData type [ 438.341128][T17561] ip6gre0: entered promiscuous mode [ 438.420557][T17561] __nla_validate_parse: 4 callbacks suppressed [ 438.420579][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 438.420831][T17562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2959'. [ 439.039719][T17590] ipt_ah: unknown flags FF [ 439.066807][T17466] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.066917][T17466] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.069211][T17466] bridge_slave_0: entered allmulticast mode [ 439.099407][T17466] bridge_slave_0: entered promiscuous mode [ 439.129813][T17466] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.129920][T17466] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.130080][T17466] bridge_slave_1: entered allmulticast mode [ 439.165485][T17466] bridge_slave_1: entered promiscuous mode [ 439.359099][T17466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.398377][T17466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.522687][T17466] team0: Port device team_slave_0 added [ 439.531953][T17466] team0: Port device team_slave_1 added [ 439.568583][T17466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.568600][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.568626][T17466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.570652][T17466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.570666][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.570693][T17466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.614260][ T5647] Bluetooth: hci5: command tx timeout [ 439.839518][T17608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 439.878021][T17466] hsr_slave_0: entered promiscuous mode [ 439.881685][T17466] hsr_slave_1: entered promiscuous mode [ 439.883876][T17466] debugfs: 'hsr0' already exists in 'hsr' [ 439.883899][T17466] Cannot create hsr debugfs directory [ 439.919810][T17608] netlink: 'syz.0.2970': attribute type 15 has an invalid length. [ 440.217990][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2971'. [ 440.797286][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 440.827416][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.878857][T17635] netlink: 'syz.4.2977': attribute type 2 has an invalid length. [ 440.878878][T17635] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2977'. [ 440.987742][T17466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.987777][T17466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.176158][T17649] bond11: option lp_interval: invalid value (0) [ 441.176181][T17649] bond11: option lp_interval: allowed values 1 - 2147483647 [ 441.205948][T17649] bond11 (unregistering): Released all slaves [ 441.453009][T17466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.453045][T17466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.536928][T17678] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 441.537138][T17678] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 441.633918][T17675] x_tables: duplicate underflow at hook 1 [ 441.695991][ T5647] Bluetooth: hci5: command tx timeout [ 441.790408][T17466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.790445][T17466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.059253][T17466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.059291][T17466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.701577][T17715] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2991'. [ 442.767076][T17713] erspan0: entered promiscuous mode [ 442.861350][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 443.013789][T17466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 443.032004][T17466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.045386][T17466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 443.065003][T17466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.070553][T17466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 443.099201][T17466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.100317][T17466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 443.122541][T17466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.216139][T17722] syzkaller0: entered promiscuous mode [ 443.216163][T17722] syzkaller0: entered allmulticast mode [ 443.218106][T17727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2996'. [ 443.300465][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2997'. [ 443.482905][T17745] ip_tables: iptables: counters copy to user failed while replacing table [ 443.660152][T17466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.710685][T17466] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.729436][T12439] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.729552][T12439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.774126][ T5647] Bluetooth: hci5: command tx timeout [ 443.777386][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.777445][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.456270][T17466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.544830][T17466] veth0_vlan: entered promiscuous mode [ 444.553640][T17466] veth1_vlan: entered promiscuous mode [ 444.598625][T17466] veth0_macvtap: entered promiscuous mode [ 444.611797][T17466] veth1_macvtap: entered promiscuous mode [ 444.636096][T17466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.640351][T17466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.864998][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.865908][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.865944][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.865978][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.008512][T17773] veth0_to_bridge: entered promiscuous mode [ 445.263168][T17771] veth0_to_bridge: left promiscuous mode [ 445.347019][T17775] __nla_validate_parse: 1 callbacks suppressed [ 445.347040][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 445.347060][T17775] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3004'. [ 445.505333][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3005'. [ 445.507468][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3005'. [ 445.671280][T17785] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 446.012583][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3011'. [ 446.013294][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3011'. [ 446.294574][T17737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.423126][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'. [ 446.471207][T12439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.471228][T12439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.610178][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'. [ 446.696162][T12439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.696184][T12439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.822448][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3016'. [ 446.878211][T17829] IPVS: stopping master sync thread 8413 ... [ 446.941857][T17826] xt_connbytes: Forcing CT accounting to be enabled [ 446.942127][T17826] set match dimension is over the limit! [ 446.985493][T17826] ip_tables: iptables: counters copy to user failed while replacing table [ 447.164732][T17820] IPVS: Scheduler module ip_vs_sip not found [ 447.289270][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 447.814856][T17861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 448.079664][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 448.083856][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 448.098118][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 448.115251][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 448.119340][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 448.797507][T17885] netlink: 'syz.0.3035': attribute type 2 has an invalid length. [ 449.037119][T17894] netlink: 'syz.2.3036': attribute type 11 has an invalid length. [ 449.078737][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.078774][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.078800][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35932 - 0 [ 449.349612][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.349651][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.349689][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35932 - 0 [ 449.622397][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.622435][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.622462][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35932 - 0 [ 449.831040][T17895] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 450.048604][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.048642][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.048677][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35932 - 0 [ 450.174847][ T5647] Bluetooth: hci2: command tx timeout [ 450.198776][T17867] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.205963][T17929] netlink: 'syz.2.3045': attribute type 21 has an invalid length. [ 450.206040][T17929] netlink: 'syz.2.3045': attribute type 5 has an invalid length. [ 450.614683][T17936] bridge0: port 3(gretap0) entered blocking state [ 450.615091][T17936] bridge0: port 3(gretap0) entered disabled state [ 450.615392][T17936] gretap0: entered allmulticast mode [ 450.622257][T17936] gretap0: entered promiscuous mode [ 450.658939][T17935] xt_policy: too many policy elements [ 450.905153][T17941] __nla_validate_parse: 10 callbacks suppressed [ 450.905174][T17941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3050'. [ 450.999014][ T13] bond9: left allmulticast mode [ 451.032350][ T13] bond9: left promiscuous mode [ 451.033289][ T13] bridge0: port 1(bond9) entered disabled state [ 451.174693][T17961] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3052'. [ 451.318992][ T13] dvmrp0: left allmulticast mode [ 451.319120][ T13] dvmrp3: left allmulticast mode [ 451.961441][ T13] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 452.192195][ T13] bond12 (unregistering): (slave geneve5): Releasing active interface [ 452.254687][ T5635] Bluetooth: hci2: command tx timeout [ 454.183751][ T13] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 454.219044][ T13] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 454.219071][ T13] bridge6 (unregistering): left promiscuous mode [ 454.243912][ T13] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 454.243940][ T13] bridge7 (unregistering): left promiscuous mode [ 454.311959][ T13] .` (unregistering): Released all slaves [ 454.326426][ T13] bond1 (unregistering): Released all slaves [ 454.347022][ T13] bond2 (unregistering): Released all slaves [ 454.354100][ T5647] Bluetooth: hci2: command tx timeout [ 454.375985][ T13] bond3 (unregistering): Released all slaves [ 454.398944][ T13] bond4 (unregistering): Released all slaves [ 454.423528][ T13] bond5 (unregistering): Released all slaves [ 454.455690][ T13] bond6 (unregistering): Released all slaves [ 454.497017][ T13] bond7 (unregistering): Released all slaves [ 454.521178][ T13] bond8 (unregistering): Released all slaves [ 454.547604][ T13] bond9 (unregistering): Released all slaves [ 454.571510][ T13] bond10 (unregistering): Released all slaves [ 454.598943][ T13] bond0 (unregistering): Released all slaves [ 454.634108][ T13] bond11 (unregistering): Released all slaves [ 454.662521][ T13] bond12 (unregistering): Released all slaves [ 454.692392][ T13] bond13 (unregistering): Released all slaves [ 455.078611][ T13] tipc: Left network mode [ 455.158580][T17995] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 455.187737][T17995] netlink: 'syz.0.3056': attribute type 21 has an invalid length. [ 455.207273][T17995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3056'. [ 455.263172][T17998] x_tables: duplicate underflow at hook 1 [ 455.902388][T18031] netlink: 'syz.1.3060': attribute type 21 has an invalid length. [ 456.274608][T18015] syzkaller0: entered promiscuous mode [ 456.274633][T18015] syzkaller0: entered allmulticast mode [ 456.283689][T18031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3060'. [ 456.414188][ T5647] Bluetooth: hci2: command tx timeout [ 456.518147][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 457.304972][T18065] set match dimension is over the limit! [ 457.754085][T18085] netlink: 'syz.3.3070': attribute type 1 has an invalid length. [ 457.754106][T18085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3070'. [ 457.817113][T18090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3069'. [ 457.924633][T18092] openvswitch: netlink: Actions may not be safe on all matching packets [ 460.762400][T18073] 8021q: VLANs not supported on ip6gre0 [ 460.885720][T18097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3071'. [ 460.990462][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 461.225654][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 461.225677][T18122] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3072'. [ 461.510541][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 461.614293][ T13] hsr_slave_0: left promiscuous mode [ 461.615434][ T13] hsr_slave_1: left promiscuous mode [ 461.648545][ T13] vlan0: left allmulticast mode [ 461.648568][ T13] veth0_vlan: left allmulticast mode [ 461.648677][ T13] vlan0: left promiscuous mode [ 461.649218][ T13] veth0_macvtap: left promiscuous mode [ 461.649323][ T13] veth1_vlan: left promiscuous mode [ 461.649481][ T13] veth0_vlan: left promiscuous mode [ 462.766804][T17867] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.766970][T17867] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.767129][T17867] bridge_slave_0: entered allmulticast mode [ 462.795908][T18147] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 462.797806][T17867] bridge_slave_0: entered promiscuous mode [ 462.825142][T17867] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.825288][T17867] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.825435][T17867] bridge_slave_1: entered allmulticast mode [ 462.828636][T17867] bridge_slave_1: entered promiscuous mode [ 462.962659][T17867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.076516][T18151] netlink: 'syz.3.3077': attribute type 8 has an invalid length. [ 463.076539][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'. [ 463.179271][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 463.182117][T17867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.281973][T18162] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3082'. [ 463.297434][T18162] netlink: 'syz.1.3082': attribute type 1 has an invalid length. [ 463.297453][T18162] netlink: 'syz.1.3082': attribute type 2 has an invalid length. [ 463.297467][T18162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3082'. [ 463.507851][T17867] team0: Port device team_slave_0 added [ 463.542221][T17867] team0: Port device team_slave_1 added [ 463.741203][T17867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.741221][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.741246][T17867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.751549][T17867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.751565][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.751591][T17867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.919075][T17867] hsr_slave_0: entered promiscuous mode [ 463.920168][T17867] hsr_slave_1: entered promiscuous mode [ 463.920952][T17867] debugfs: 'hsr0' already exists in 'hsr' [ 463.920970][T17867] Cannot create hsr debugfs directory [ 464.194617][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3085'. [ 464.221233][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3085'. [ 464.415922][ T13] IPVS: stop unused estimator thread 0... [ 464.748475][T18200] netlink: 'syz.1.3091': attribute type 4 has an invalid length. [ 464.748497][T18200] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3091'. [ 464.873424][T18200] .`: renamed from bond0 (while UP) [ 465.243339][T18223] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3095'. [ 466.353363][T18268] ip_tables: iptables: counters copy to user failed while replacing table [ 468.469205][T18230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.540453][T17867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 468.642231][T17867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.713543][T17867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 468.792534][T17867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.813012][T17867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 468.858875][T17867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.861187][T17867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 468.881259][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 468.881281][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3110'. [ 468.938359][T17867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.006709][T18347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3108'. [ 469.189568][T18358] bond0 (unregistering): Released all slaves [ 469.339439][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3113'. [ 469.528557][T18381] xt_HMARK: spi-set and port-set can't be combined [ 469.584676][T18382] netlink: zone id is out of range [ 469.584692][T18382] netlink: set zone limit has 4 unknown bytes [ 470.425687][T18405] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3120'. [ 470.458255][T17867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.495548][T18412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'. [ 470.537537][T17867] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.583977][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.584125][T16543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.641705][T16543] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.641807][T16543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.002881][T18430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3125'. [ 471.002906][T18430] netlink: 54 bytes leftover after parsing attributes in process `syz.3.3125'. [ 471.002923][T18430] netlink: 54 bytes leftover after parsing attributes in process `syz.3.3125'. [ 471.444518][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 471.669633][T18456] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.448744][T18476] nbd: socks must be embedded in a SOCK_ITEM attr [ 472.906183][T18496] netlink: 'syz.1.3136': attribute type 49 has an invalid length. [ 473.143605][T18505] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 473.449412][T18514] netlink: 'syz.3.3139': attribute type 1 has an invalid length. [ 473.678701][T17867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.677571][T18574] netlink: 'syz.2.3151': attribute type 1 has an invalid length. [ 474.693191][T18573] __nla_validate_parse: 4 callbacks suppressed [ 474.693212][T18573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3152'. [ 474.822202][T18574] 8021q: adding VLAN 0 to HW filter on device bond13 [ 474.884706][T18576] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 475.178446][T17867] veth0_vlan: entered promiscuous mode [ 475.266234][T17867] veth1_vlan: entered promiscuous mode [ 475.426283][T17867] veth0_macvtap: entered promiscuous mode [ 475.454639][T17867] veth1_macvtap: entered promiscuous mode [ 475.587187][T17867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.673605][T17867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.729127][T18602] x_tables: duplicate underflow at hook 2 [ 475.818391][T12434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.854375][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.854426][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.854462][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.255944][T18616] netlink: 'syz.1.3163': attribute type 29 has an invalid length. [ 476.284465][T18612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3163'. [ 476.287870][T16547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.287890][T16547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.469904][T16543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.469926][T16543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.610609][T18627] bond0: entered allmulticast mode [ 476.610632][T18627] team0: entered allmulticast mode [ 476.610645][T18627] team_slave_0: entered allmulticast mode [ 476.610994][T18627] team_slave_1: entered allmulticast mode [ 477.353000][T18656] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3028'. [ 477.372361][T18654] netlink: 'syz.3.3171': attribute type 12 has an invalid length. [ 477.372386][T18654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3171'. [ 477.408322][T18654] netlink: 'syz.3.3171': attribute type 1 has an invalid length. [ 477.648724][ T5647] block nbd296: Receive control failed (result -32) [ 477.689539][T18660] bond1: Removing last arp target with arp_interval on [ 477.821111][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.838869][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.841866][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.886882][ T4954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.888429][ T4954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.258357][T18687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3177'. [ 478.626357][T18694] syzkaller1: entered promiscuous mode [ 478.626380][T18694] syzkaller1: entered allmulticast mode [ 479.439792][T18711] bond11: entered allmulticast mode [ 479.444822][T18711] 8021q: adding VLAN 0 to HW filter on device bond11 [ 479.679481][T18667] rxe_eth0 speed is unknown, defaulting to 1000 [ 480.014293][ T5647] Bluetooth: hci0: command tx timeout [ 480.363922][T18750] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20002 [ 480.440150][T18752] tipc: Enabling of bearer rejected, already enabled [ 480.443416][T18752] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 481.897423][T18808] tipc: Enabled bearer , priority 11 [ 481.967466][T18798] syzkaller1: entered promiscuous mode [ 481.967490][T18798] syzkaller1: entered allmulticast mode [ 482.059267][T18819] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 482.060452][T18820] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 482.060470][T18820] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3209'. [ 482.060680][T18819] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 482.060694][T18819] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3209'. [ 482.094556][ T5647] Bluetooth: hci0: command tx timeout [ 482.340745][T18825] netlink: 'syz.3.3211': attribute type 10 has an invalid length. [ 482.660580][T18836] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 482.660603][T18836] netlink: 'syz.4.3212': attribute type 2 has an invalid length. [ 483.049828][T18667] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.052872][T18667] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.053023][T18667] bridge_slave_0: entered allmulticast mode [ 483.089151][T18667] bridge_slave_0: entered promiscuous mode [ 483.104883][T18667] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.107826][T18667] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.107986][T18667] bridge_slave_1: entered allmulticast mode [ 483.109749][T18667] bridge_slave_1: entered promiscuous mode [ 483.184500][T12439] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.188029][T18667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.193290][T18667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.242699][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 483.274248][T18667] team0: Port device team_slave_0 added [ 483.279725][T18667] team0: Port device team_slave_1 added [ 483.325687][T18667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.325705][T18667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.325731][T18667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.327111][T16543] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.328187][T18667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.328201][T18667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.328226][T18667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.539844][T18857] syzkaller0: entered promiscuous mode [ 483.539869][T18857] syzkaller0: entered allmulticast mode [ 483.576393][T18667] hsr_slave_0: entered promiscuous mode [ 483.581445][T18667] hsr_slave_1: entered promiscuous mode [ 483.582143][T18667] debugfs: 'hsr0' already exists in 'hsr' [ 483.582163][T18667] Cannot create hsr debugfs directory [ 483.619051][T16543] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.705729][T16546] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.174209][ T5647] Bluetooth: hci0: command tx timeout [ 484.467235][T18667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.467274][T18667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.557368][T18884] syzkaller0: left promiscuous mode [ 484.557393][T18884] syzkaller0: left allmulticast mode [ 484.715138][T18897] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 484.723677][T18900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3228'. [ 484.978779][T18667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.978816][T18667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.119562][T18667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.119598][T18667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.189548][T18914] netlink: 'syz.1.3232': attribute type 39 has an invalid length. [ 485.225522][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3231'. [ 485.390138][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 485.439454][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'. [ 485.440295][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3232'. [ 485.440370][T18914] bridge_slave_1: left allmulticast mode [ 485.440391][T18914] bridge_slave_1: left promiscuous mode [ 485.440611][T18914] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.490718][T18914] bridge_slave_0: left allmulticast mode [ 485.491076][T18914] bridge_slave_0: left promiscuous mode [ 485.492108][T18914] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.085310][T18934] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 486.136665][T18935] dvmrp1: entered allmulticast mode [ 486.207162][T18667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.292800][ T5647] Bluetooth: hci0: command tx timeout [ 486.319610][T18667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.323193][T18667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.326320][T18940] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.3237'. [ 486.482295][T18667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.493832][T18667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.529978][T18667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.660181][T18667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.677684][T18667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.039852][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 487.181463][T18968] bond2: entered promiscuous mode [ 487.182442][T18968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.286887][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 487.318482][T18973] bridge0: entered promiscuous mode [ 487.329271][T18973] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 487.434295][T18667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.469670][T18667] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.529131][T16546] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.529243][T16546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.588266][T16546] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.588391][T16546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.650502][T18988] netlink: 'syz.0.3246': attribute type 2 has an invalid length. [ 488.334296][ T5647] Bluetooth: hci0: command tx timeout [ 488.411744][T19021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3251'. [ 488.605400][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3250'. [ 491.365568][T19030] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 491.726494][T19045] netlink: 'syz.4.3255': attribute type 1 has an invalid length. [ 491.828258][T19055] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3258'. [ 491.922110][T19045] bond1: (slave gretap1): making interface the new active one [ 491.935623][T19045] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 491.943669][T19054] veth0: entered promiscuous mode [ 492.057748][T18667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.108669][T16543] IPVS: starting estimator thread 0... [ 492.204117][T19065] IPVS: using max 27 ests per chain, 64800 per kthread [ 492.253303][T19071] syzkaller0: MTU not usable for tipc bearer [ 492.253341][T19071] tipc: Enabling of bearer rejected, failed to enable media [ 492.271888][T18667] veth0_vlan: entered promiscuous mode [ 492.272675][T19071] syzkaller0: entered promiscuous mode [ 492.272694][T19071] syzkaller0: entered allmulticast mode [ 492.299719][T18667] veth1_vlan: entered promiscuous mode [ 492.322931][T19071] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 492.393855][T19044] veth0: left promiscuous mode [ 492.424146][T19071] syzkaller0: mtu less than device minimum [ 492.493650][T18667] veth0_macvtap: entered promiscuous mode [ 492.647497][T18667] veth1_macvtap: entered promiscuous mode [ 492.690464][T18667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.787201][T18667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.904711][T12439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.904993][T16546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.905029][T16546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.917491][T16546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.987099][T19094] netlink: zone id is out of range [ 492.987114][T19094] netlink: zone id is out of range [ 492.987121][T19094] netlink: zone id is out of range [ 492.987128][T19094] netlink: zone id is out of range [ 492.987135][T19094] netlink: zone id is out of range [ 492.987142][T19094] netlink: zone id is out of range [ 492.987149][T19094] netlink: zone id is out of range [ 492.987156][T19094] netlink: zone id is out of range [ 492.987164][T19094] netlink: zone id is out of range [ 493.418910][T19106] netlink: 'syz.3.3273': attribute type 4 has an invalid length. [ 493.464460][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.464478][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.565581][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.565604][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.707055][T19118] gretap3: entered promiscuous mode [ 494.523523][T19148] geneve2: entered promiscuous mode [ 494.532256][T19148] geneve2: entered allmulticast mode [ 494.575816][T16546] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 494.580435][T16546] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 494.629377][T16546] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 494.644905][T12437] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 495.060944][ T4954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.063201][ T4954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.072554][ T4954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.093932][ T4954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.103731][ T4954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.132934][T19163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3288'. [ 495.160960][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3288'. [ 495.160982][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3288'. [ 495.413425][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 495.438084][T19171] veth5: entered allmulticast mode [ 495.439295][T19172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.439655][T19172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.452143][T19172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.452343][T19172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.454913][T19176] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3293'. [ 495.564768][T19179] sctp: [Deprecated]: syz.1.3294 (pid 19179) Use of int in max_burst socket option. [ 495.564768][T19179] Use struct sctp_assoc_value instead [ 495.597618][T19171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3291'. [ 495.598005][T19171] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3291'. [ 496.712181][T19166] rxe_eth0 speed is unknown, defaulting to 1000 [ 496.754526][T16547] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.754936][T16547] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.754975][T16547] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.755010][T16547] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.774816][T19217] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3302'. [ 496.877295][T16546] IPVS: starting estimator thread 0... [ 496.974780][T19221] IPVS: using max 25 ests per chain, 60000 per kthread [ 497.182253][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3305'. [ 497.182346][T19227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.182356][T19227] IPv6: NLM_F_CREATE should be set when creating new route [ 497.182383][T19227] IPv6: NLM_F_CREATE should be set when creating new route [ 497.214122][ T5647] Bluetooth: hci1: command tx timeout [ 497.301324][T19230] syzkaller0: entered promiscuous mode [ 497.301345][T19230] syzkaller0: entered allmulticast mode [ 497.540107][T19245] net_ratelimit: 108 callbacks suppressed [ 497.540128][T19245] openvswitch: netlink: Actions may not be safe on all matching packets [ 497.707455][T19249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 497.800250][T19255] netlink: 'syz.4.3312': attribute type 4 has an invalid length. [ 497.800275][T19255] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3312'. [ 498.188494][T19166] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.188677][T19166] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.220548][T19166] bridge_slave_0: entered allmulticast mode [ 498.233973][T19166] bridge_slave_0: entered promiscuous mode [ 498.328486][T19274] pim6reg: entered allmulticast mode [ 498.332404][T19166] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.332846][T19166] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.333168][T19166] bridge_slave_1: entered allmulticast mode [ 498.342277][T19166] bridge_slave_1: entered promiscuous mode [ 498.510104][T19278] pim6reg: left allmulticast mode [ 498.668382][T19294] pim6reg: entered allmulticast mode [ 498.669773][T19295] pim6reg: left allmulticast mode [ 498.729103][T19166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.856807][T19166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.148260][T19166] team0: Port device team_slave_0 added [ 499.152791][T19306] netlink: 'syz.2.3320': attribute type 7 has an invalid length. [ 499.164086][T19166] team0: Port device team_slave_1 added [ 499.294107][ T5647] Bluetooth: hci1: command tx timeout [ 499.336652][ T5647] Bluetooth: hci5: unexpected event 0x13 length: 321 > 255 [ 499.343511][T19166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.343527][T19166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.343553][T19166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.351867][T19166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.351882][T19166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.351908][T19166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.510372][T19329] atomic_op ffff88804c2101e0 conn xmit_atomic 0000000000000000 [ 499.588853][T19166] hsr_slave_0: entered promiscuous mode [ 499.590452][T19166] hsr_slave_1: entered promiscuous mode [ 499.591176][T19166] debugfs: 'hsr0' already exists in 'hsr' [ 499.591196][T19166] Cannot create hsr debugfs directory [ 499.608703][T19329] netlink: 'syz.0.3328': attribute type 2 has an invalid length. [ 499.857895][T19334] netlink: 'syz.1.3331': attribute type 1 has an invalid length. [ 500.189782][T19344] __nla_validate_parse: 14 callbacks suppressed [ 500.189803][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 500.264601][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 500.413254][T19366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 500.443125][T19166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.443168][T19166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.817269][T19166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.817305][T19166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.117098][T19384] ip_tables: iptables: counters copy to user failed while replacing table [ 501.149825][T19166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.149862][T19166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.374214][ T5647] Bluetooth: hci1: command tx timeout [ 501.770252][T19166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 501.790659][T19166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.791963][T19166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.822897][T19166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.841795][T19166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.863173][T19166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.879330][T19166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.919080][T19166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.002985][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 502.003020][T19410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3349'. [ 502.381426][T19421] Bluetooth: MGMT ver 1.23 [ 502.381462][T19421] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 502.478250][T19166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.543832][T19166] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.572075][T12439] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.572186][T12439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.601681][T12439] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.601790][T12439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.768308][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 503.293470][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 503.319830][T19451] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3360'. [ 503.459593][ T5647] Bluetooth: hci1: command tx timeout [ 503.651567][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3361'. [ 503.781805][T19472] netlink: 4337 bytes leftover after parsing attributes in process `syz.0.3364'. [ 503.781847][T19472] openvswitch: netlink: Actions may not be safe on all matching packets [ 503.836347][T19469] netlink: 'syz.4.3361': attribute type 4 has an invalid length. [ 503.836370][T19469] netlink: 'syz.4.3361': attribute type 2 has an invalid length. [ 503.932742][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3363'. [ 504.076830][T19481] netlink: 'syz.1.3363': attribute type 10 has an invalid length. [ 504.873938][T19509] xt_nat: multiple ranges no longer supported [ 504.932860][T19166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.050226][T19166] veth0_vlan: entered promiscuous mode [ 505.070412][T19166] veth1_vlan: entered promiscuous mode [ 505.121488][T19166] veth0_macvtap: entered promiscuous mode [ 505.210246][T19166] veth1_macvtap: entered promiscuous mode [ 505.250497][T19166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.329973][T19166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.434934][T19521] __nla_validate_parse: 35 callbacks suppressed [ 505.434956][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3374'. [ 505.536341][ T456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.536748][ T456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.537421][ T456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.539102][T16546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.822711][T16547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.822734][T16547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.955542][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.955564][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.136406][T19536] netlink: 'syz.2.3376': attribute type 21 has an invalid length. [ 506.136432][T19536] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.136992][T19535] netlink: 'syz.2.3376': attribute type 21 has an invalid length. [ 506.623467][T19541] bridge0: port 3(vlan2) entered blocking state [ 506.623581][T19541] bridge0: port 3(vlan2) entered disabled state [ 506.623805][T19541] vlan2: entered allmulticast mode [ 506.672653][T19541] vlan2: entered promiscuous mode [ 506.794759][T19542] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.835924][T19542] bridge_slave_1: left allmulticast mode [ 506.835953][T19542] bridge_slave_1: left promiscuous mode [ 506.836305][T19542] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.871053][T19542] bond0: (slave bond_slave_0): Releasing backup interface [ 506.876883][T19560] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 506.935748][T19542] bond0: (slave bond_slave_1): Releasing backup interface [ 506.965822][T19542] team0: Port device team_slave_0 removed [ 506.991491][T19542] team0: Port device team_slave_1 removed [ 507.000882][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'. [ 507.013492][T19542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.013515][T19542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.056965][T19542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.057159][T19542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.083896][T19542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 507.259100][T19576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3387'. [ 507.259169][T19576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3387'. [ 507.308695][T19542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 507.322458][T19573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.327707][T19569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.490649][ T4954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 510.496502][ T4954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 510.500932][ T4954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 510.556644][ T4954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.722813][T19607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3394'. [ 510.756973][ T4954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.556047][ C0] sched: DL replenish lagged too much [ 511.605996][T19616] ip6t_srh: unknown srh match flags 4000 [ 512.830699][ T5647] Bluetooth: hci3: command tx timeout [ 514.894271][ T5647] Bluetooth: hci3: command tx timeout [ 516.220238][T19620] syzkaller1: entered promiscuous mode [ 516.220446][T19620] syzkaller1: entered allmulticast mode [ 516.974279][ T5647] Bluetooth: hci3: command tx timeout [ 518.556422][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'. [ 519.065675][ T5647] Bluetooth: hci3: command tx timeout [ 520.279756][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'. [ 521.712609][T19645] bridge0: entered promiscuous mode [ 521.744424][T19643] bridge0: left promiscuous mode [ 522.452471][T19654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3403'. [ 524.855100][T19654] bond_slave_0: entered promiscuous mode [ 524.855475][T19654] bond_slave_0: entered allmulticast mode [ 527.938613][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 527.966572][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 527.966596][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 527.966622][T19682] netlink: 'syz.3.3406': attribute type 15 has an invalid length. [ 530.613484][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 530.613617][T12435] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 530.613665][T12435] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 530.613701][T12435] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 530.613878][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 530.613906][T19682] netlink: 'syz.3.3406': attribute type 15 has an invalid length. [ 530.666114][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 532.156731][T19605] rxe_eth0 speed is unknown, defaulting to 1000 [ 533.319487][T19694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3408'. [ 534.293351][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3410'. [ 537.677809][T19721] netlink: 'syz.3.3415': attribute type 18 has an invalid length. [ 538.411519][ T51] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 538.432054][ T51] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 538.448518][T16543] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 538.452236][ T456] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 538.944729][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3417'. [ 539.497513][T19736] bridge1: entered allmulticast mode [ 570.619144][ T4954] Bluetooth: hci5: command 0x0406 tx timeout [ 660.423941][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 660.430933][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19752/1:b..l.. [ 660.440304][ C0] rcu: (detected by 0, t=10503 jiffies, g=90737, q=1355 ncpus=2) [ 660.448128][ C0] task:syz.2.3419 state:R running task stack:28040 pid:19752 tgid:19745 ppid:18667 task_flags:0x40044c flags:0x00080002 [ 660.461656][ C0] Call Trace: [ 660.464925][ C0] [ 660.467839][ C0] __schedule+0x17dd/0x5830 [ 660.472381][ C0] ? __lock_acquire+0x747/0x2de0 [ 660.477311][ C0] ? __pfx___schedule+0x10/0x10 [ 660.482147][ C0] preempt_schedule_irq+0x4b/0x90 [ 660.487150][ C0] irqentry_exit+0x14f/0x9b0 [ 660.491719][ C0] ? trace_irq_disable+0x3b/0x140 [ 660.496729][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.502695][ C0] RIP: 0010:deref_stack_reg+0x1/0x220 [ 660.508049][ C0] Code: ff 48 89 4c 24 18 e8 1e 52 c7 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 10 48 89 d3 49 89 f0 49 89 ff [ 660.527629][ C0] RSP: 0018:ffffc90004df73b0 EFLAGS: 00000283 [ 660.533674][ C0] RAX: fffffffffffffff0 RBX: ffffffff923714c6 RCX: 0000000000000000 [ 660.541637][ C0] RDX: ffffc90004df74a8 RSI: ffffc90004df7bb0 RDI: ffffc90004df7468 [ 660.549585][ C0] RBP: 1ffffffff246e299 R08: ffffc90004df7bb0 R09: 0000000000000000 [ 660.557534][ C0] R10: ffffc90004df74b8 R11: fffff520009bee99 R12: dffffc0000000000 [ 660.565481][ C0] R13: ffffffff923714c7 R14: ffffc90004df7468 R15: ffffc90004df74b0 [ 660.573444][ C0] unwind_next_frame+0x19bd/0x2550 [ 660.578541][ C0] ? do_exit+0x688/0x2360 [ 660.582847][ C0] ? unwind_next_frame+0x8f/0x2550 [ 660.587944][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 660.594074][ C0] arch_stack_walk+0x11b/0x150 [ 660.598821][ C0] ? do_group_exit+0x22d/0x2f0 [ 660.603561][ C0] stack_trace_save+0xa9/0x100 [ 660.608304][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 660.613654][ C0] ? __lock_acquire+0x747/0x2de0 [ 660.618575][ C0] save_stack+0x122/0x230 [ 660.622889][ C0] ? __pfx_save_stack+0x10/0x10 [ 660.627717][ C0] ? lock_acquire+0x115/0x350 [ 660.632374][ C0] ? __free_frozen_pages+0xc97/0xd90 [ 660.637635][ C0] ? __slab_free+0x269/0x2c0 [ 660.642205][ C0] ? qlist_free_all+0x99/0x100 [ 660.646948][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 660.652556][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 660.657558][ C0] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 660.663181][ C0] ? taskstats_exit+0x19e/0xe10 [ 660.668010][ C0] ? do_exit+0x688/0x2360 [ 660.672337][ C0] __reset_page_owner+0x73/0x2a0 [ 660.677258][ C0] __free_frozen_pages+0xc97/0xd90 [ 660.682353][ C0] __slab_free+0x269/0x2c0 [ 660.686768][ C0] ? qlist_free_all+0x8e/0x100 [ 660.691533][ C0] qlist_free_all+0x99/0x100 [ 660.696114][ C0] ? taskstats_exit+0x19e/0xe10 [ 660.700945][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 660.706564][ C0] kasan_quarantine_reduce+0x148/0x160 [ 660.712003][ C0] __kasan_slab_alloc+0x22/0x80 [ 660.716836][ C0] kmem_cache_alloc_noprof+0x2b4/0x600 [ 660.722273][ C0] ? taskstats_exit+0x19e/0xe10 [ 660.727113][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 660.732720][ C0] ? taskstats_exit+0x19e/0xe10 [ 660.737556][ C0] taskstats_exit+0x19e/0xe10 [ 660.742221][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.747568][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 660.752761][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.757937][ C0] do_exit+0x688/0x2360 [ 660.762071][ C0] ? lock_acquire+0x115/0x350 [ 660.766725][ C0] ? __pfx_do_exit+0x10/0x10 [ 660.771303][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 660.776307][ C0] do_group_exit+0x22d/0x2f0 [ 660.780873][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 660.786063][ C0] get_signal+0x1216/0x12c0 [ 660.790557][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 660.796077][ C0] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 660.802219][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 660.808364][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 660.813372][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 660.818726][ C0] ? rcu_is_watching+0x16/0xb0 [ 660.823476][ C0] ret_from_fork+0x593/0xb70 [ 660.828045][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 660.833134][ C0] ? __switch_to+0xc78/0x1410 [ 660.837810][ C0] ret_from_fork_asm+0x1a/0x30 [ 660.842565][ C0]