last executing test programs: 2m28.444827112s ago: executing program 0 (id=3195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2m28.23680028s ago: executing program 0 (id=3199): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90510000", @ANYRES16=r6, @ANYBLOB="01000300000000000000330000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r10, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x12c, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe77, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=':\b', 0x2}], 0x1}, 0x3) 2m28.07461889s ago: executing program 0 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r3, &(0x7f0000000000)={0x23, 0x8, 0x3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2m27.364377151s ago: executing program 0 (id=3210): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) unshare(0x22020600) (async) unshare(0x2a020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r6, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/251, 0xfb, 0x0, &(0x7f00000001c0)=""/4, 0x4}, &(0x7f0000000280)=0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000005080167f8bc32d14f30feca7903ea2c2c7cd7a2fe10adfdad26694a7136a47940065ef9a70558261a5649b74b8bd038d49e6e43accc6a83757ebeff25613def1cc373dd0b534e4622c7037aa51c28fd0db37cd5e129f847a9f06f9307c78f830da9b80073ddb6706fab193176cf2ff79e75628a413bb4925670842d4f03114ba26ab9916f0cd7a86b557ecd2eab8c2953ad7877847eb5b469832b753ac4608b0c3a2de3e8b773546bbc1ddd9acc122e27f9811b7bf577caa", @ANYRESOCT=0x0, @ANYBLOB="010200000000000000000700260007000400ac35000114000600626f6e643000000000000000000000001400070000000000000000000000ffffac1e000105000500ac1403aa"], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x404c004}, 0x20) 2m27.071616414s ago: executing program 0 (id=3212): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "b197a0f37b3f5d1c739810980d25fbda"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x36, 0x0, &(0x7f0000000580)="ac0000000000ec67838717bd86ddbd6e902562ac5675da63a84744c677777570e8bd8e1450c4e68db8b8f5853e524b918ea6e4db95eb", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x21) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000005c0)={{r3}, "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"}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010000304000000000000000000000400788f4b469573ee20c12fc444bf7a541a64ebeac4757acc15fd9699456f40c1025c5f0d6f054b3d6d8be9ea4809a107cf5cd9fe08a467115b3eb72f1aad1f60f19d74f27f8cd6d52b27def89aeb540f333b4c67c8861200a625b5234041c37d7da6a8f2bd1d80353db0cb810e7f76816fe37624672f8768fb2ada87615a8ea1cd381c1ddd327a7c5deaf55e62ff5dba1d96700bf1cbf471e40b8a96cf551d806ae1566a26252967284308514887c3472d0adb10e7b81cd6cddfe97afe4c802aed321038f6e7429fdac720e5e42bed234ae0caaf2ad685de8c44df50d836d8", @ANYRES32=0x0, @ANYBLOB="00030000028000004400128009000100766c616e00000000340002800600010002000000280003800c00010000000000050000000c00010000000000800000000c000100030000000101000008000500", @ANYRES32=r4, @ANYBLOB], 0x6c}}, 0x0) 2m26.91980807s ago: executing program 0 (id=3214): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010026bd700000000000e000000200"/36, @ANYBLOB="0000000000000000000000000200000000000000000000000000000000000000000200000000000000000000000000000007"], 0xb8}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffb, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$isdn(0x22, 0x2, 0x26) close(r4) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\r\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090009000010"], 0x30}}, 0x0) 1.479462485s ago: executing program 1 (id=5222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x2, @broadcast, 0x4e23, 0x4, 'fo\x00', 0x4, 0x0, 0x6d}, {@broadcast, 0x4e21, 0x0, 0x7, 0x3, 0x2}}, 0x44) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) getsockopt(r1, 0x8, 0xe, &(0x7f0000000380)=""/239, &(0x7f0000000080)=0xef) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.38869782s ago: executing program 3 (id=5223): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300004802d0001800a00010071756f74610000001c0002800c000440ffffffffffffffff0c00014000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001940), 0x0, 0x4044805) syz_emit_ethernet(0xe6, &(0x7f0000001a80)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0600ac3a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000026050835900000000fe8000000000000000000000000000aafe8000000000001e00000000000000aa3a0100000000000007080000000000008000000000000000f16e1396f51017297005c5bcdb3bf6a73c8bc0350329b77757b85a396ff3f4e72fb9450998e361aef1888ee65b5178e83aac9c23905ab981e0f4e5e1e68b7a174319ddb91ae81c3eba13a0be9fcb3831def1386504d00779c19a706051ba200ad389a39c"], 0x0) r6 = socket$inet6(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="f26fdd9c96ae4e99609161d62b1e5a41be0d855c71faf608171e491372ffc13b8ec0b95ecfff630a94af84cd90d9fa99c150b7f493c1f43c909303d02a1c626fda796e5e64c5a6252f5161aa560e10966ab69a18f6c5ae28748a733ca7338a9a4b093dd81507616bce8eb454b867077f8978a532ed0fc62ac52c0f0bc14bc9d49d84c308c4dec6189a9c16f0f84fa2255c08e43937ae79de477989e9a6bde9e431162ba19e462fc34235e3c1108e76841e77bd87a4e1284c4229", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r7, 0x82, &(0x7f0000000180)}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x11d, 0x76, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x8000000000025a5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="45eba70f707978007bb3e7d9a23282734aafcdaa4008b22bdeb53e1be2b8ac870330ec62d832867b978c6d33b4e9c7f14550f6d8f9833998b021a990731ab9ac477748d1b2b24883b1c42e4e8bc93cf81b85f3bd7e63b1f12e1d2c733c34a13cb7485c77f8b3f4d641c18e36417d09bc5f0c3840f0ef5179af080ef989ce8209642d8498bc290264b2dad0fcc3fe1fd665b09c66b9c82a4f50f1fa6a659ef9cfe54036a971b20ceaef6d941c7ba6385672cdd9f2c26688fe6c3bd42d90a21e590a07d38fcd5408eb9a15de92e471e90317e85b", 0xd3}, {&(0x7f0000000100)="c84b7533a6a36e011ef0b245f700242ea585ea4e510f2f3e7a82c4564bec29a376a1c488c09e1676fd98bf9a85", 0x2d}, {&(0x7f0000000540)="40bd5fbd4b40b23e6b523651b931b7228cb120f2d9edcdb886431e058b183814dfce7c6886a449563d5d9527941d44dab7d5d94fa099c275580c964e29d3c438d042edc80ce7a86953951c048ecc8e6e6e0214a593ff83795c79de8d3cd144ae5d8dd86d5da7a098fb838f0648bccb5f663a1dd3df538b99f95e455d12faf3309c1d5b53fde829351be267a5b35afac37e8183a0188e9d30c19874ce30dba41d411fa9fcbcdabc5c01c61de96ec5864fe28608c27827840022da0c8d5e23d7241567b0", 0xc3}, {&(0x7f0000000640)="f237d0e8bebf52f68dfc835a20edd6cc5452514253389a72cb74c09212c924d1e2fc2d55968f94339f6a9eb6d6fc05fde54bfdcd9f2bf7e7630d0d45c7249392d399202e4df0bbe5d0dcbd76cda5450f0bc4762571a4f4151651ce64835d23a4a2e907231da6ff18388e32ea279903bdd71374877c868a0692bb1e4c4976d43b7e4a8c8b4d063c1758ff792229654b3b11d63c9881c313fe46076fe9b6fb7f363105eca6", 0xa4}, {&(0x7f0000000180)="7ddaf7d93c4316883f604d1fffb47c6920ee52dafec78a07933c528a3eaf3b350b7d2cc84d3f04e47102e2e1625ab077660d42462f45b1", 0x37}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0100000000000c0000000000000000", @ANYRES32=r10, @ANYBLOB="0000000020000000000000002900000004000000730000000000000004010201000000004010000000000000290000003700000022040000000000000502ffff010700000000000000000100c91000000000000000000000ffffe00000020500d8d88281cc6cee519a371e05bbb40cb4169a253c3e1e06d7f22799aac4ce53f77355b6a2454945768bc4b5e60bbb3121c8021e542374e77b42b5ac764c67c805096f6b7a3d14ba24d1c3c44eebbf6b3e88ded15ec20cb92b388985ebdf68b14c04ed59c7930b8d2d08166c96550e6db5d7cd9fd41afd8748a4c20eda022cecede8a4dd9756ad4109fc41af14328a16948708f05c58bba466f7664d9d7f2ddfdd68f673f32aeaeee161bc22aba22f01ec125c496297016f71dda83f9d3e9899d0ccd15243c3ceed173b143828723cd328d5557c368c44825ee922962daa8102e441d32f0708a370d09a64a419e15f946d0fe3e184377ce3f461915eac3eb2d4905becda7d81fcfc42ad23fe5ea6db20c8e4b86c4b6abc422d1359bf3c48ee7d29db98964bddd5f27e687bdf64ef6dae426abbe50fa405b5f18e3653254bb11d16a59a22130fde6bc5e14b63ee4e63d65d2e72ad004f9a75bb047db405fdb204ac77674fff913aa6cd8ded45b9e5dab243f8758ff38a23dc0a6e1eb228fd4780105dc568f3a206cec5e8c1a68f2acc61ac9c25bbccb4271b706bcc022971a4292ea1022ad128e6507b9e9cb7cf7e696c981998d9c44592da47efbd05d34d6b1fad9a58307220aa7daea02a96361c981dfd3c81887de76aa9266564f26db0814aa49b1c1d1a394b20485c7b8e50c08191dc51d55a15119931bf8a102e7e66092f66116b7a30643d2aaddb122eef97fe6d326a9be7cfa1984dee420e9c2ce9809ec1db233ab89c5ec6d6864f13956be0db8f006c9bf5bae88baf716a5dd8317b417b2991dd3662a4a62d6131f0d4df606e6fb1c2dc90a114415445456c06e68409ae36b1f3796c3eeb10f3238270ba0a661b469da38e1d981299f42797098838d12599ae18d43ccf9967cf2304bee42f6849137b1a8b688981117b9437f3f6f2d26a1c08a0f9e06f4bec332f1bede8dce3b20c7261ecdde11288042387973730b67085725f6ccfd2bfe25d5c535ae2bb20f67a3a2d4b70a8f22171ae049862088505a21a18de2a2973a668147824f8c715d2ac8c7975d5deb117afaa190e7da05ffad2c4c98500ff7a927bacbbd1ad68f641c35bce1231d3ae08551baf6d8831cf3904bddeab9d8eb089037b360f69bda973165759c6fc1fbdb0f91d7dbe176ec41c623074a3992bb9251415833e37c6e8515e0a1615b3459908bec0de2f87b3f1ca5b8b3f5e8d9e56ef7844a312e1074ded67a2fc5e35af6bff6ab260cb5e373341b3dde9816310167b14d38c8677367b3be17ebebcdaf1c0279e22494f6f01450ee4358f296ad34f625cde838657cd5001dcc908ef93562b5069e835189fed885b1a5c72f32784aea07549dc6d71e973aee51465e98fabdd2d00108551a162cb7ebce22ecf513e6edbe2183d2f65c4b5222b5de6cd054699df736a3de9c921f5b6d4d65da15c255a50b466799778e9387892ab880f17da476a508180093ccc15919af4ceefbdae824f32ec52cc05a52e0cbb8c3ac61547b515edf5e8e690b3614590337293121c67192b886d3e3fa84a15f2bc46863dcbea44364393ea48672cfabcd93a7a53def2741aedaf762df4e65b65435be1f7da8c99fd14708d9380c92810a15a99bdfb85f14f7d48cbab3ac634ae4ed2a36aefc088e572acbe02b9b2a4cdbfb42060801f22598ef728b0dd70f7d0c0c6313dac2895a7c8e5690a607b86b2d042752d7f661e74ec59ef230608cff8bdeb8f8b391da2c70d5365a6420f0c5dfee9a2b92813ac5105cf69800aacdefad66e9659d24fe96f1a0b3421372ed12bcc56c73c5132cd0e8e5726c5acd4022936c33b836eae5e743cfeb0c72e5abeebf11758e1d6bda5c7a3db62c45dc38fccc73f3e97b0cff4fd3784b5d58babd026d46b64f089ed1d2a6519e1aea5860ed109a94771c43417c44496ebde9ea21cdabc424686b85d66f1f21440523ea9f0558bec6c4e02e6488fca5a37a7fd2eea1844eef870a76390143324d94a3df3df80696856b87aac7f0ecc3b5f397057296423f26cce2414d49d69b1e484ea0a10afe3d56766fa89dde237bd7edca1a7cc82101e53cf949ba0d94bdbc770584de228ae2e7724997ed0d0d4b7b8275648bbace13f4fa0a1b432765494ca9b217ef18a1bbac3947a50b1cf9a543e6ac618901489ffd96aa834acc8f3a0630171390b9a34bbea1d67a19cb644a7f7134e07ee5f9b29eac0320f24a851a9709a3bdd40d350dba704bf04beb64cf47dc58fdb7f72fa97907c068bb20c3b66ea798baed62e0da171ab89686188684fe203a35c5be42eab066dcc14e87d3ddc0ed5171735c863cb5921cd23aee771fb510d68cf43e4237aa91ad1511934e19660ddd609e977520b044026bc5185fd1ab48dac828413f2fd7a732094d7077c0b7b08848649e5aaa92f37b9684b173054f94cb1e4c7eae95d2845596ea3ca92aeeb72c3fd0d10ddf2152e5b2d99b549d86f4739805e848347ec73aa8ace4e19a063f2ee8bf60a7f85a93e602a9aa4231296834ec64bb03f3c1b44b39ca940c6c3051cdbbde950daba3d86933ddc75ad5cabc37df8ebdbddaae969848615890f33cafe1b1d00ac4a2bb424ddd4d731fbb64fb3a9483a3ebdf295cf186c55c385b57588716ed556e190f062cceffbcc17708822a75dd9a285d4dec2dd5777efe08e158fd7a68691a86a2f751c2a88247ceea43c2fd50227dfbbad30de72ea51c3d3bfaed1f79b0b24621259eac54e50b9976cec88a72fbde2b7fb8d2d44e7b69fdec95a13ba538ebd3a6e3ea837581c9d67e91aaba1600528f12fe895205a3d2c71a638f5a13a52d655ac2a2ca1fe6d25c955e8a0ae1652ffd662bd91eb41cdd92323ac3b1901c8ecda00661f29999b8a79dad44917ef1afceb54cd5235c704550796808d5f752f85a7a315cd907fe1fe45a0a6c4a840fa6f2d89d1223317275074cd031160219a0a55ce82e85456e941c85a2146d7cae2eb99cb56d80f4b2bc5c55271319ad356f980871020ca3cf017c3203ba001825e55bbfb999778b7ee6d7a72fa5bb2f80e5e6ff246637a0dbb97d8a16397c60522ba922a618440d3d9ceec89df196fa9530387c06d349c28364640984f8a506a96a2b4df18e49cd18ab7a410f79a5ed53d5f536385f68fcc4f0682e16cb66f9f8239c3a83a5390b596f8ab3c0031e069c4d18112fc0b4307cb387d7f0e0739865ecd7f707d7b45d6e00486a62cf28a26695e0316897ae3713ee88eb0cf2ebf2df4c5674e21fbf73115a605815e5a93fd9ac42c220d369d4df7584e53476555495f8daeedfc84715b1190eab764a4d2b81eec855ce5ffbbe960ffc0bb06846fe5a4e2f6c8790db6a3708aa4ba48ac3de2496794d72c8073b46f3d5b49a0387d4b139314c53aadca0a03b31cdffcf98a525d1993418ed773ed654b183ef0f2478ed5b848d976cc79031dee61d6bd8197724f4d6eb608365b71ce8f1e9f322854ae66469857d8d98a5fadecbbc80abd5fa64c279317ab08df69e8fa40c6b75474015b123e1640dc6d7eacdd1b11b9133d0047ed6938c465dcb532859ce86cd63407497f7eb1f06ff595ca9ff82b5006a345aac0e0d85b42ca96907771722fd321480821599144cd6199101cb1e8c489824dea2f34a6f6595413ce7d8f202dffbb99258bf414b82d90da7969ff8649e99fa720b539d8199d83de81dbe5d35812bb24b7f54f43eed14089c384226cf7208537d27fe35de8a3a6512de96479045f9c58df35bb622a6147770976d3dcd7ffaeacd0ba362a92cb2cac094854c3a4a43984c28ba26563c1ee9a3ed9181b4f5013e1982a87cac1cb236345e549821c954b795de919c58f1782873794e18fd1cdfbaaa7e7cda877a2167a77700df7690b40befc07222cae24bfced6636d3a216a4d8360ca048479bbea2915847f7fa87f185fbbda17cabd0439b6831e0e7c02dc7f870bd03febe68c972cdc0b3847b5a0713ae75f9ff8bdf813554e3487690d8da95fa75c84df87d399b1a092fe1e9e33290587aed76ff9870fea0c7aba90510e687f6aa69df120fb355c13f6e80d8e836ffe759f26b6545e7463e3078211c5e3392482bb0bd9bdd1427f715134f29ab64d7afd39cd0458e0d4bcf7336bc3d4975c371c0b58c998c7ae3fcf58ca1b422c480e397fa732af03263d3cf300b868765c587147e787641fab4f99fe951ea0bf36b8c38ef300d7776e93ede9a0922f5a7795e1f1c0464503cbf1c593de82c84e190e3dbcac075542ad192e945009f1f35e9dd79048b00322122519efa25d2c68f8223ba8a37b51f2bf0717775b3d0040f168ad2a911f0018760745a1be41a4568ae6cea32718c570ec441998d342051547bd617b764b009d61fc508efa3fbe828f0471e572c5bcf552468fbba4b731dc3470f2f0e69bd4d63c4170a96326678615b2ffe8588e60159100fb0c22381432c819be557881f81ff504db5579b1e5e62b4145dc4c50a61f6b539c2339f97b1d0438a931e0c35dacf3a339875398c28f3082c3102010f728a227a8cedf1404e1d469c37257c0d032e2a71922c659cb239b144dc18ad559a5a86fd3bc6a8d3f25f70837a6ecdba37ec99c7d5163a4f2ccb256ca9d54eaa78c7ad5679870b58177faeac973e73ed282eeb6618258f5ae2a7820287af5ac72f1bc50ff310af1ae404a914cc2726447745504ed61fa78d24cba4f51c7ef213782a0ae9c27318f0fa00132cd9b4c9fbadbeb64b5268f3c4d46d444c583a72570c06b3860bdc81caa0b05efce756aec80a61e68cb0f3a4d364a3bef4b09bba3a00d8cc05f7e266503e70e20823fd43e1bf7426d0b3353d7d9866cb0795e4e36790b74433963be863f8e45d39dcabcd42440d00be69a41d82ca5228ce681a0d94b6c97001df318a5a62b0f9a286101400c2d84b61e91dc6e9773e04a09ea28ac1f4496c6af9b348b3c04481ecf599b48a69c251ac007ae05438ca0f44205ab44bc773ac0cfe815373c4f03cf612267ecb256cc4a2d32b4b2e2ca85346970a69642f9c02baa623bc16b0b83ea680f025acb1d40564f9550aab1e4f90d2040c24adcb60843ee8df329d249e29c41120d3424037365427ba9fadd28af3eee79a2a2e167f419f906308030ace4abd40d33ab4882e68427021af585a32d409872f1bbdf40ae36e0264c3b8d28b2e919dc28bcbc1715d2611dc0cbbc8ecddcc4aa5799ae083c5c05de7559ed2143cd2befaa4ed3db08c4d134a27c09ce92b7b8108f78c9778760c68b5272b56016157ccd1d74b087ae07aa811a7f2bbcde0f8380ef62569d2d80c240caf1a0608d9e9f816b21cb1449711b284c197267468dfb1ba9416711f0c13dfa002a2348c44a2522c808f1b01a73482381d7c76dd1c6df82335e15557e75190d47b894b73349a7c03176c825a1d94d71bb06e4061fd0acf3e55b00738c1413ba228fd0a8ec31b40c1c66c9a65285955132e5f684a0ac3995fcb5c19fd8dbfeb2302b71d81278b2d5b87524cf1e569c51fbdfaba8cc0c25cab9a59d05d3e5b632f4c836cf347a020bd7382f35459c97da9e1f88487704b009fd603f5cc5b2fa93adcf6bbdc09a7711491275996cf283951bc39fc1650951d3151a0f3e1368819a514d870ebe602c23fc101fe8df536f01d888bdf050611e3870bd823c480d86d0e71d663add604e58bf0b59990a38b31618a4780d1006fdedb7e52d3f5782d4daaf8ba7b83ae358b7f0ce82381cd65c7ed32dcf46d4abcbc5fc147588b0386760c82803d607f928e1c33f8c9a0b9c06f67bde2c74013c00000000580000000000000029000000040000003a07000000000000082c25ee29473b8bf7258d4d1bc2c0661c719d2e365f51d8dd0367226eaa886e34fa5301cfa181af0b8dea060eb2c204000072a9050201000103000000000000880000000000000029000000390000001d0e01030000000000000000000000000000000000000001fe800000000000000000000000000010ff020000000000000000000000000001fe8000000000000000000000000000bbff02000000000000000000000000000120010000000000000000000000000001fe8000000000000000000000000000aa2000000000000000290000003600000011000000000000000101000000000000300000000000000029000000360000003302000000000000c910fc020000000000000000000000000000000100000000140000000000000029000000080000000400000000000000"], 0x11d0}, 0x40000c0) r11 = socket$rds(0x15, 0x5, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r12, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, &(0x7f0000000300), 0x4) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r13, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 1.344755184s ago: executing program 1 (id=5226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = epoll_create1(0x0) sendfile(r4, r2, &(0x7f0000000140)=0x6, 0x276f) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bind$can_raw(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0a00ff000000007110b9000000000095000000000000001d262a1912d00abbde9e8903a2a8e2592a8bc3130c9358c3c8503953568602e5dca843fffa41c7ae4a3f5f8e2fb77645b45bde0938e7f1a812190dcbf078ddc66f32c54fa5af3964"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) 1.220775038s ago: executing program 1 (id=5227): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r4 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)='%pB \x00'}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf99c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x73}, @generic={0x6, 0x7, 0x3, 0x2, 0x80000000}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x61, &(0x7f00000000c0)=""/97, 0x41100, 0x41, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x9, 0x6, 0x3}, 0x10, 0x0, 0x0, 0xfffffffffffffff0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0x1, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) 1.190426456s ago: executing program 1 (id=5230): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = socket(0x2, 0x2, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x15f, &(0x7f0000000800)={@multicast, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x33, 0x151, 0x66, 0x0, 0x6, 0x6, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0xb, 0x7a, [@broadcast, @dev={0xac, 0x14, 0x14, 0x19}]}]}}, {{0x4e20, 0x4e24, r4, r5, 0x0, 0x0, 0x11, 0x4, 0xfff8, 0x0, 0x40, {[@mss={0x2, 0x4, 0x6}, @timestamp={0x8, 0xa, 0x6da8, 0x200}, @sack={0x5, 0xe, [0x1ff, 0xfffffeff, 0x4]}, @generic={0xfe, 0x12, "8af99e0c874c616b4422f71642a97bb3"}]}}, {"1036f1d77725dded82769dffb3c3c47ca2af19831bf59e993d6cb97cec3818d7cf9af202ada55b0059cb49c716790d2449991064eee456a01a9038109f37eec32061ded36e98bca26bd19e211063143fa38ba8f5e797bf77f775d5f82be2c9cb081f257dea4368ff2c45764ad436dfdd72fdefabe4636a9a07fdd87ebe60939d4d02a66ab19e5f28c7de95adca73f7a232d1c9b733f35b04799bf3f5a7a5c07a3262c774628409a92ee7ec49631ad4227a58e74b8bd6606d1aecc950ca55be5f68def79e93eb5bfe850ec0764347b876d9d1f696a33cb1942d98f841ccf1a9137d4a1502bc850afca1484a457e"}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff0097}, {0x6, 0x11, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) pread64(r3, &(0x7f0000000100)=""/55, 0x37, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2800001, 0x50012, r1, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r10, &(0x7f0000000140)='^', 0x1, 0x22000080, &(0x7f0000004ff0)={0x2, 0x0, @loopback}, 0x10) 877.573593ms ago: executing program 4 (id=5234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x13, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 666.532374ms ago: executing program 2 (id=5236): sendmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f0000000480)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000640)="0199ef9c421bc12305af42029d3b404e8fbac414440529e63e13cc21b2e5fb769f9158cedcd31285165230aaba0ca3333715f75085000b1d5b247f7152097ad5a1776efab8de0f2432c70c290e27107ff083a4511f875f7d27f8d927d93ae9c86540a2604738329af30deb6337e5fa7f9fb85b0045eb257712b9d085b11ecd03e9b662f7730afcc08d5a", 0x8a}], 0x1}}], 0x1, 0x80) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x89}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @bcast, 0xee01}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (rerun: 64) 655.980184ms ago: executing program 4 (id=5237): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000000500210000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1404000000000000000000"], 0x64}}, 0x4810) 540.954612ms ago: executing program 4 (id=5238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x11}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async, rerun: 64) accept4(r0, 0x0, 0x0, 0x80000) (async, rerun: 64) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 540.383083ms ago: executing program 2 (id=5239): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000018c0)={r2}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000001900)={0x6f, "2b5fad"}, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x80000001, 0x6, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x0, 0x7, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x0, 0x8, 0x7, 0x44d0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001640)={'tunl0\x00', &(0x7f0000001600)={'sit0\x00', 0x0, 0x80, 0x10, 0xc, 0xffffffff, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0xa1, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@noop]}}}}}) sendmsg$inet(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="b891c949a6407fd9ad6c66ee447cd108351c190efefedd2c7171aa20c96e2c97e2a21f1bdaa49ca3d1851fa605161970a910ed55015e550d7ab296da103b90edca860065c8bd341baeb34816cb68f75bef9b76abed00995496905e54b81237d010aeadcfd22248f1a104ed47773296726c36eab43b5b1d5a9f7a1c7aaed6a55102acb9edb0d73500f8a5fdd661535fd5e12c5113daf1ee0e88f359bb6f641f8aabc63f97ec9920a866a963a0945828901f1dde956b10ec819018f2d32e631789eaf4d4e2a4dd28dad25d0323aba2d3b2af5f9f89fc11846024f144e527b02d9d6fcbeca6e3ffbb0d1a603c89302270e634b4e6865d8b3f", 0xf7}, {&(0x7f0000000080)="5b0bb43fdcc549cfe47caf1f", 0xc}, {&(0x7f0000000600)="9fa705d364165347c2c44e76cf6c2175d8472f8c5c842a82d6c8d6137fa7364cf078cb77ac574dd4c8ddb368f49785192285def0d2e86e15ed77392439f676122e3e8208bf5180d1974a3f100f0d7adc7d75d4d734c885e1cd9f0cd94e3027ec39507b473e3e87b1cadce4a49b758c0f0e2d042f236c21f7ee47059a2e7c49699082d225e22d5b98e30d3ed84c01c1e2ac6c530752aba5e9238868d41861dbf810ba321c7365dade8eaff1ffb55d31a6a4f2857f3514937b07e000151c4870000b42fc95b0557a8b5c7a6a3da8e97e9662829d001851b49066a5f8e95898b5f67c1e7e629a0ff412fd47a72d2aa4710b9ab97ebee3b5037d9b3c137083d3f887ec8c3820dce917694e244a5a1860c687def78301572ea7d2a95babb8832b59fe3d85661011c0eae5509b772efad306b716e2f4f7fb25a613c65ac14a3e014b59a9032ae36c8b4aabb55bfbc517b14b911dea7876fab609129ae0f08090e8bae6436cb950a83dfea1fbdb9d0ab67ba298975a1aea74d5202ad0e6b689403e46112eb4331b49941532e5434864f03bf7fbff6a920eb5d0f7e29848d6fc0d67b0752ac237bbffae9b4160ce75686e6cf76c56657344544375888c5e811447a7fe3694eb69b716a881ca66bc1b5b3377e7eb1c86f1d23a025827444a2b4272a9e1249338e4f05fed32e1e17a80ead76621a950388ee28124babb519433414ed30b1a6e3a4ed7e774d4205b30a7245c05631179bfba9c3765d30c3e31c92783f332248b02a325d40ade06713257bc3ce3504a4322ac163daf30b5d1f77f76ea08ee67f39f131667e2595af94cb74c89d0a158b5b5b769bf31d41a8f310a1b2f52ebeb3922bddc8c4dfecbd6e957c0edb15d932d73f816d5d3bfd46ad1ef1db1edc7921163d1c741c2aae907834faa21c65868970da50504b8a903aa1f67825a664d253a8173515f36a18f2cd759e50988442debfe9a6b84858f68e06ca8c499955831bdd1acb183dcf53f6571021d89d3b60d64991b8d2338a06f116b5649d87ce0786defabd3ff959a3b3583227743348b8d90e640379c05d755694a4e984bb35f3163825401475c03486a4394e99e7f7aaf0cf3ba83ec7af0db005c46c36ccd056f5375546af1b2f03086a96e7110028995a72802bb76889a44ac6a1cb055f2d9cd69c184472532c22dfc7924aa1b5b138820725ef7cb6b5ff4970cbd3b1f82578ee4edd59452d79b233eda8c237bf5dacae2bc23150b331fa72681a2daec46b09b1893830ad7c0b80f70e100eaf0b8a4dd75055acdece7d57043c8ce8dac6d1f026bc1f011914e635f5ea5e47e33a6f86b0fb2f86d0769483c701d58e9cdc46e879aa54f43a882278a437e765f3f3c2df08cd7bb2187a306c6261bfb425bd0e5e5c197b56421396b86b35acf4685d078e0e3fffe61a3f77732840b7f30dff4aab550c8a240e537473724dfb3bc04431fb596d7c7a845bde58fa6ec57dc909db50e9b76abd12c6d4556971bb8793b54b922f644488f6d49d9357ab1ebe11bf2261ccd8b1962a8a9697cbf2c54f317769b2905f7a4066be0ed13c230ba727d267582c36e49456c9f8bbb253f3119408393d14d9f890dfa26e3d95407011016ae1965cd86e1f81fe93a91da7e3edfbe3c91f3bec4aac1ba08758a06ef58eaf2df1f977d891bc2af4542cfbdfb15575d4dc5d4b8232bb0426669f29069c013d01f91318ecd8e84ba05341f25c7dd459b2b579cfa92bc25166857915c339b274c07ce3e535d9ffde3328d0e4a75c61c09b4387df2669cb91dcb3c15a51add2aadd3f5b26256505e984586a40addf189b8232295b4ea3327c575a027a3cca44c515d75dd8743884a843afd4a01a909e1b047aa19a8b704cf09cddd57c1ee6590f61bcc2612a218472507850fb89d292f16a680b7030dc2b5677ffed2c60dc59fa776a8ffac5af8ec636e295757561959f2f7d682767ef235c05c7a8c176c039de746f2e646a20a7bbfea566a83c27912129f43c08ecf415880b92ee7fbf62f93d1980afab4430ccff47c3671032b99744606674009dc80e62d0e3ad9dc7a3735dab4dbaac28db87e87dd89a8cc1d8c3c08aaea74edb1e29ab8daad5ba1c8a2ca8b4bc66f307e9d93e5ce78c7735c1d8ce0f0e54443ae2a8be5b9a3d1d71802728929b6a43ee3772e08802a9bba899811d0a63e05655ac357c7e181f6c162c6be4d26abbc3a032ddcaaecffe3a5192be4887f4d01b5426510ee8b002366fcec64b1952c6cb15d1c2608745390b29135eb606ffbaf251103bc3f9c3a091b38cd0924c05cd07fa64da8edaeb723b27acac9e3c72b3ed673023da948fed044af32aaf7a80672f9214f1fa306b211a8cfe63ef1a069e82b8f3277c59820d11c6ea4940539bc114ca831e902ea36ee144fea46096cc20ff2584977b0e190f8a2be9e179abc882aae5322ed85b9c960180d9477b86d8629494c9bb2a46bb7deafce2da2eb2210b7facfaa0184f26b87dadfa760061d3e8434da40579c5a597fb7cb47106bff8863cd5e70d9d1278960ccec6f5fc04ffd6ec86993ba947173bb047b9d693062d8ccd2f3de7e5dfc00a7be9fa761e9a5c3a54ef6284345017e5c17414177eb57bda05f544049427b994b982c19f519ea131fd34d1639f1458af8aa8fbbe2be56225d05766f9c01c54144e70cc2852c465510bab3cd131d8dd65aef56c61c2758a4b2825fbd8778a69200794d90e2f2a2c2ae29fef158ec805d74000d60dc59bec77c8a43d6577e4aa8d96e459eba3b85f1bf1f0e5e996900bdfcfbd9ef91bcb16b6e69eb44ade6d939e74fbc18900f713fffa8a188e349ff45e1cc1baa7cbeaa54cccc53c85a9dfbd53ba129e140422fe29e873b282abbb3da667e097278f81017f3c740aa34d4d2cc5caa503f8d16d23f923f4e449ee80b0165db03214a149cf9c0fc81e71a981e1940d991b7a5141bd6c67eb58e97580a58a16f606933adb014f324ec8a0e12bdc9f1b934cd2168d09c014e8ae02502e54c71639a9fa31ecf8f51024b7b1fba1ce0448243a08c89fd5c87b8c9ce377d83bc02a7adca10acd8029014e88f78001d717c741b3a4f9b745a59f5e76fab1279caf9fd65b241781e0e730c4524f9cd3f110f0635f8c14c556ded8d8e0016f4b854c3113b4ec27a975570656db74b4820246f76c5a2d258e8f041e16c29eef5e4a97d9682660f3915e33820f8c12ce9fc11eeb0b25a9c1d2893805cfecb8df3beccf1aa45bee67afe402e47b8252a15f1a1eeb6684f7ce5ba200a4b11b75a1664cb6f1b4968da499ffdeee5613bca57b26c1a72707bdab89ac5430c97338c8550fcc90f0733a3c724d2d19528b6128ac491328017c17051eb3448cd644326696b3c80bd00443821f0336960bf64b14d8b45195ed3fa60f31c3e57bb950510902dd8e4c01fadd1ee61ca2f7b97472b337d2b7ba14f0fb4b56f7e51873d2cd47a7e7988bdb59325a75915b9ae3530b127acc46226165acb2b8b3ee2c1237f163f5738bc9fc218b7176eb37363fd2b01dc35fd3bcfd4c17b08d0a810233380d4d81f7b14c53de1c92bfc9b73a09ff4a19588e422ca276559b1fbc40c371250adac467111fb108fb35ae4a41ec432564ad89b973b3748fff96c6bbe603da5528e2bd2ee9cc7a5fa0c2d50288af590be9d334f4c1a2b33d9774b889ea6906e4585ca9d9338361dec3a850d679197d4f2d1885b8b9df2f04776d2aac3590dbe5371c5642b0f3bf38fba8068defc89779918f835c8e7d1fc8e5b0b618273b8a55e4cbd4ef1211d7f1d0ffcecdc3bd9a3b09e2eaa6eb17578c5c1ecc52748e4092ea0358b1f9adc0a83bc64c962a23d114b3e92436f32bc8bd7fcf6435b64438e5b3396741d27fdc6ba799bbadd402d3d4239331f9cba003f4ea1b474f56b3c3234a8859937a4e999e46d530b61bcf8b3ab80f14a9cef30008d7d3e8556915b104b071b5f81e1877c68de77c06ed0525c0b1eedbd567747f4d1db09c7d132adc4494a032c5ea976860b7a91c1db24cdf5f09baf504265626a7852f51e920af61e7eb482dccce39d9242138c2ec1bf9e519a2e82dc8b43ea90b90962188dc3906262e58f554d35e2b1d7c27513d90a1232e968626652e2788b6f7574a1732a0d41d1af7dc3a5e33039d7d8fa095067d5f46fb5fe29696391995ad5aac22fe9d30c2f36ee2a737db8a91b8de6be97bd719a1bb865c7bd9fb19d7ad4a8991230078138b4aacfc42c3301c3f9ec29adbb24a73fa8bfdc8d7cfbf826ad95d91298d6334dd2670b045cdaad103d027ea37003845d6826b014d9f4f84e99ddd25ce8f9258825ff6bd259a4c32534d6543e04c78bc172b3e0c2a8f8e248946ab5a230f3d1724b75257af5395face949bd3b342fd8c6258000682d7d3802144a39d2ff584ec9c9ba2a6407a24434a44f919133aaebc0133c67fe970a02ebf40e513bf9d1effe4775f3ee8754794413ed063651f6e6ac3a802690857ee2ab442d337317af65c1153b50031a8872989cc59d2b68bacbdf05ffc9ded0170ab0226199b0e0d61a79395392619f817ed3dfe31254c7bec5deb79179c8666e0020ed38a918a47bc50ce11c90d7f9934157fb3d87959ba7a19a31ea72b69529c25ccf5b6e9d656082f4fcf7b0feaafc1808239a7215eb3b86d17c7cd5bc7ad59f6efd032ac78779312593f3454bf0e477b5b36340749afa44641a696e9e8fe47cbf1b7731b9829322bf58e6d108bf6eb35ce34f47f6cf6d360ba56a12e07a358800605d3f28786764804bbeb7a551c762a6561facf6cbb303cfbb135619940730c17229a622ec44f5f2dc72be49861473e063b47d228e55dd0dec04cb6a357c26554ddbbf39e4163f31af67dfd0060b895c3c060958400ca00071657db5668400c58dbb58a82287398061e1ccad7c62591d3d5123584e317048fc15dfd64c303a8735f770d5e42920aa6d0ddeafab1745c2950111b42ad6652e6e486f72508502b6cc9cb0b2a2dc795017f58f56e6ce009a57d9abd67259cf38f32560148f4356eeb2e5ca5be8f86bbcbfa6f0527423f02d54bb9ae7392295ea8a5bb1e5fd8e5f4b5e4c75707c1b32f90ee92d9bd191a876ac4524eddd2ad2cb7e35744d03b89460f1bd62e0cc03bb0872b06e6fba2746c603df01af2cfdc4cca6fcd291994a16fc83287c94eff03b29ce27e6b0be582d6498c768abe9780567a6bc346742695c074a1956ad1560c82883117fc1a494280f9e0a17f468bcdd65b1b0d00d4d3f0e9da776d809b08fd669bb9bc98558aab8a5141f4c8c520d484dbdc8e063b77e4e4d2b8e8d1c2a3e30b7bdef03672ac6744e753c2ec2cccbd65b2b949d642d8dc38af0c974286390987a69bf4c89fbc21e9f7c69c8186d6ebc7e4fe1d35f6df17f23fcf1898cac8cd3098b868700950d1635d1c4399119add7234e396f56c07444de65fed43e63fe2e77071b32ab783ee55b88e6e211181db663e381a0c3c594ed78d11be28a4d5f1fcfc22e331e491cc0b8fb64d24e1c53d43785476de8445a9643c92da688295d2258c0ec47c3761100c95fc49d168f345456923cc575953b1849dbca80eb3e0c375e4e77c4f4d5f5c54057920f261b4b6b6e9295f1f9f62c94896dde338f5bcc3c2924695621d5afe564bd536da3bcb45e917d12b55e8d886c2bceba4139d047ff24c07b1167782a5fb101a9b01b72074c1cbc895a38e3511bc22a347512d90cfd86c30a64a46fb6ea0090fa21b534039009e0e775b20efb87ab5ad512eaa0a7ee1d601b8e4fc2c70ebc742049d7be", 0x1000}, {&(0x7f00000002c0)="1e6b5cd430d0954c2d429a1ebb3a5845302de81a6e0637d9df76b2ff15c82d9dbf768e82307bf5b2f8389884ee926dcd5872d88691c52f45517cf155e31d9812f52342c3629f0b739dc5bfbb47880f93dd759ae10c3487ebff6414e0abbf47acb371d14451d55c5e16d5341932c22d633fc0d897063eb1c48f00b75e1511d7b693c2c5c7ad6a56b7fdba73dc29d654dd1f0105ac203df397686e8d608c2099e325f7fbf06cebac688d3ae85c94f8de2cb863c274b6bbec05f237652bb1d6afa5e0f5e353d1d532aaca5857c67b3b30", 0xcf}, {&(0x7f0000000100)="4affcc0c60bacd4129decfb671ae379317b2e37d5491766803d2440a6d4ba4aa6dcd5dc6a09ccba76264f8e8f4abe6417f46ce10153a4b013c7416", 0x3b}, {&(0x7f00000003c0)="bf22d2869aa51e0a895b0566ea919583d9cd9115a7319028a2539f158fad43975c0b0089454e1a721cc05106f3aa10bdae2cd2467711e82b36da089ee1b72623987d24d8d079d5dd37d756d9691eab5ecd4ccc5a565012ede9d3a378dfd9364ec8e61c4a833731e544f8e74d36e82610e4df839d2bf4b783df728a05be34e09ae5c7e10fe46d22511bd0088f2ffe0dda258c", 0x92}, {&(0x7f0000000140)="b680bcc40ff7", 0x6}], 0x7, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x8, "6615635b3a08"}, @cipso={0x86, 0x54, 0x3, [{0x2, 0x12, "efe0c017db8c4f173f91eb4fbf6ef67e"}, {0x1, 0xb, "76055b2ccaa1b10c47"}, {0x1, 0x7, "3abe4c8d31"}, {0x2, 0x6, "c988d138"}, {0x7, 0x11, "4f1344b0b6a94867c4c8c46bcc557e"}, {0x5, 0xb, "a444ef048c137e21d8"}, {0x6, 0x8, "b864cf554d20"}]}, @timestamp_prespec={0x44, 0x1c, 0x79, 0x3, 0x4, [{@loopback, 0x1}, {@remote, 0x4}, {@rand_addr=0x64010101, 0x8}]}, @end]}}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x32, 0x3, 0x5, [{@rand_addr=0x64010101, 0xa}]}, @end, @cipso={0x86, 0x5a, 0x3, [{0x2, 0xd, "a18eaeb258834ba622c019"}, {0x0, 0x7, "9048476761"}, {0x7, 0xc, "2438e0a3a9453da91ccb"}, {0x0, 0xf, "b1616684a3d302c5e0af9cdfeb"}, {0x1, 0xd, "6165ab5603de264b8771e3"}, {0x6, 0x3, 'S'}, {0x7, 0xe, "976db5f56ec39d5e371c1ac5"}, {0x7, 0x7, "ce7cad5424"}]}, @cipso={0x86, 0x1e, 0x2, [{0x6, 0xb, "60ce316db4df41d44d"}, {0x0, 0xd, "96aa8590a2f2510445f16a"}]}, @generic={0x94, 0x7, "55afb4d30c"}, @ssrr={0x89, 0xb, 0x3c, [@private=0xa010100, @empty]}, @rr={0x7, 0x7, 0x7e, [@dev={0xac, 0x14, 0x14, 0x17}]}, @timestamp={0x44, 0x8, 0xaa, 0x0, 0x7, [0x2]}, @timestamp={0x44, 0x18, 0x59, 0x0, 0x0, [0x1, 0x10001, 0x2000, 0x8, 0xfad4]}]}}}], 0x200}, 0x880) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000001940)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x31, r7}) shutdown(r10, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001a40)={'sit0\x00', &(0x7f0000001980)={@rand_addr=0x64010101, 0x0, 0x0, 0x80, 0x0, [{@private}, {@local}, {@remote}, {@private}, {@local}, {@remote}, {@remote}, {@multicast1}]}}) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r12 = socket$netlink(0x10, 0x3, 0x4) r13 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) sendmmsg$inet_sctp(r14, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x4040) write(r12, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 475.226652ms ago: executing program 3 (id=5240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x4004743c, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) 474.763277ms ago: executing program 4 (id=5241): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB, @ANYBLOB="080003"], 0x78}}, 0x0) r2 = socket(0x6, 0x1, 0x8001) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x99e, 0x2d}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x0, 0x4, 0x0, {0x6, 0x8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3}, 0x8, 0xff, 0x10}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x0, 0x2, 0x0, {0x200, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3, 0xf}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r2, 0xffffffffffffff80, 0x7fff, 0x1}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 466.915286ms ago: executing program 2 (id=5242): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="b44f02c72d30bc23c57f903b589f0618289000fc3722566c498333b78e3dd8945bec4bb23afa657195b62152ea5fe40c38f17a8a3fc924ec56bfdb20a6dc2f720a9d9f4e5ff7d820bbcbb33a601254b6bccbbad537a94497a7653e0b581a02dadb286798561fe29f642d978f5cdc59d53fbe4fef87e3a449309e9144fcb7", 0x7e}, {&(0x7f00000002c0)="f3d4a4b51bb6544ef1f0497d522b081ae6bbad44ed83b1630fa3bd79c068efaf33341516bdde83c39d61165bac5ac3f93f154453af65ea353ddb40c7087346889547579a7e0f2d070b856e8eb5f8053b69431464c83f", 0x56}, {&(0x7f0000000340)="aab6a6780b7a37a2d0ce336bd6eb32a2ba913f04bdf7dca23bae51e078b5813ca4438e1349ab88321afbf576561f48ffe0999fe661afe4543dc71747acd32acba37401a079ecac40b94f36c4771103d6e0dc8a1081ae1edfb743cf39ecc7d35c914095286df5c55952d594f92c3c3f56fbe6cecd30", 0x75}, {&(0x7f0000000400)="0b5fc6e0acbadfc9f1601b622c8a542b614bac44591941ed8074238c437f100194781b2382b94a952eb664497d11913d7170b5642196325e48094cd9462e3c04ee3fe3277a0067de48f43aa9d5a39c66eb69b3312be770239a435e1d934cd4287ec9c59b5e2afe5f52a91b19a432752cc3cdc69b41703465941b8a9647bba8634fb2f5b1fbc8a54abf1fb13a72be7463c4e04a9b9225b1d0dddea709d316a6bffb6f4c23a0f2e1d7ff2e90854bca5ae24b286e27a0ca7082da292b7d1abfadd3d118968a394d8301550ca6b6ad43b1272b83e9c7b5db8c53c7180619f9f44c", 0xdf}, {&(0x7f0000000500)="5f06bde0e602e39ca05fbdb81cd6ac04577b8a01f97add3eab450eaafb1b50524b9322290d7b640f169f4ce51420a7398f8303713970044aff217b541b5528996e02b0a39c75a40fb2fc219e6b5cb4ce728194176f6ce718164856b5020bc8b03ad95077550d7fefe57c4b50cbdb534d36bb4835cc1b19a9078e5f926e563c2213f8c8d24cae2ff25d61f86e753bc0d5e8a73ac35895eeaf8674eee4f0c41b4ab06ae5720ec6aa91d337", 0xaa}, {&(0x7f00000005c0)="7c0804ceab064ab995933d71dc438da4301008cecd4cf535548e579e0ff98349dad5112c2ba6639043ee5bdaea49450a6f279ed7d412d5074cc2a2319ec4a255f42a6b97a6b741590970e4c19fbbe8acf53c8f4b29cca650370a6e90119331961d41291536f2ef83a09422a15d579a5b5884fee4d0300c3d9dbd6c51f5f096dc161746c9a2b36b29ee1503f5784f303a52e8be803b572e3ddde406ea780e2794d4a45e5de513b4797d522f1f33ab3f", 0xaf}], 0x6, &(0x7f0000000700)=[{0x58, 0x109, 0x9, "833d1c0f54e05ca9661690cd51f34ebd16416930d73a192ee37527ffbd7b340b3319b3bdd0a2e8676d110abfcd22537fa1e0097009b4dcf86b608559864c53f804"}], 0x58}, 0x884) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r3, 0x2f, 0x2034, r3}, 0x20) 336.671476ms ago: executing program 3 (id=5243): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe15) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000280), 0x2, 0x0) read(r2, &(0x7f00000014c0)=""/4125, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x70bd26, 0x400000, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x88, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040004}, 0x4040004) 327.442554ms ago: executing program 4 (id=5244): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) shutdown(r0, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r8 = accept4(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000280)=0x80, 0x80000) sendto$packet(r8, &(0x7f0000000440)="3ec0eb856fade8d02b17e184607f973569eb4673b11439f4c102d09524b4aab7506bedff69f89320c208c905b94d937e0e362c1fb624b21deda00bb800347e56bedd25e9209cd28af4f7a424fbb2481534569455596d1e8ffee00e8eacb8cb194925eec59b0431206592e42d4110e28c17d17636ad8a58119bd51649125efdd8d672790f9cb2aef121960f693ff5e5951e44ae8eb14cec1ac8964be7fb7b572dc7888424c68399e6e885acd04da3c86d3e401170ff43e74a2ca24965", 0xbc, 0x40001, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@RTM_GETNSID={0x1c, 0x5a, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NETNSA_FD={0x8}]}, 0x1c}}, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) socket$netlink(0x10, 0x3, 0x0) 302.69345ms ago: executing program 2 (id=5245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000", @ANYRES32], 0xc0}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) close(r0) 221.584839ms ago: executing program 1 (id=5246): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fff8, 0x8, 0x0, 0x1}, 0x48) socket(0x2d, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r9, 0x89e7, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2420a967de58edaa41ca0010", @ANYRES16=r7, @ANYBLOB="110000000000ffffffff0f00000008000300", @ANYRES32=r6, @ANYBLOB="0500370001000000"], 0x24}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f65, 0xfffffffd, 0xc5, 0xe23, 0x5, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r15, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}}, 0x200048d0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r13, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)='\'', 0x1}], 0x1}, 0x40084) 219.626377ms ago: executing program 3 (id=5247): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 151.31177ms ago: executing program 2 (id=5248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r1 = socket(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x100, 0x70bd2a, 0x2, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) 110.839589ms ago: executing program 3 (id=5249): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}, 0x1, 0x2000000000000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="9471710456ca23418eb37703a99f2de654da2cb5114f7c7d43ad73ea6c1c54600b269e8b0f8da988bb974af9ce0cb0e82f8e0c9c9899b9217408ed3dd26de623bdb1fe80b9f2d32eb248fd181c3b183d2551b1daca04bd91db7be90b391c4945f198b5a32d356ea65a70a270888ca9e6b5f5046dcdcaadb0605ef06ef9c5ac393ad46c59fbedcafd73dfba2f3bcb7c1595e475779c174d24", 0x98}, {&(0x7f00000002c0)="a31091ff2595241cc22c64a123314820c46f4827fa02fc3e8c3984e961607276c943505f020b6c271ade6dd5e1c589e3e9a3aacd573c92a4411fa9a6e1c09894489d6c011b459d2a0d43a769ec6ecfa4cc4063ee9c202f85843a938ad89d493c18686019ffea08689a9b24a5da5216389361b6a34077769e7b7a7575abe24e9006a1e3d5a73b021841bf9202db9f2afc2447471119c19034ebc33ea189dc39af0dc761c9249f5f7762607b9bcc4ac2527b4a8f0f2a8afe6d892ecb885d25989fe7590b069ee93ded3418f987be17d723a6453da68d1cee15f199b9a1b61fff06b28fec4c08e8c606174231855a673ee3580bbf4f39d00e27", 0xf8}, {&(0x7f0000000000)="42f5d8a6af7fcf", 0x7}], 0x3, &(0x7f00000003c0)=[{0x1010, 0x1, 0x9, "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"}, {0x60, 0x119, 0x7, "5185c5610b7e32fc924e7a3ff94e884e15e12172697310c9b93b91c5728beb13b5cf756bfce00088bbba2be23a656b941e0eb16a49bb8337336fb6769f510ecfed92a3f9ccf2afa661e1"}], 0x1070}, 0x4000000) 24.811981ms ago: executing program 2 (id=5250): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000200)=0x5, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delchain={0x24, 0x66, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {0x9, 0xffff}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23.81249ms ago: executing program 3 (id=5251): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0xd13, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x48}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c841}, 0x20000800) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xffffffff}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x40) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000001700001c001a80180005801400048008000200c7000000080001"], 0x3c}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xfffffffc}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0) 11.641059ms ago: executing program 1 (id=5252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='<;\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a80180001801400030024000700080001000800b40405000f00"], 0x38}}, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x800) sendmsg(r3, &(0x7f0000000480)={&(0x7f0000000140)=@ax25={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="7f04294d39540a9c3fac3577a294e198f73fc51b5205dc0b19a673df8123678eb77bab103f373fb42365f643eefda1ba2fbccbc04b2d1afd8741215845ea4b77ce1e2a1974dfd3a036725f1e3b4ecb0c85620d2fb396906cdd7ab6ce8eb74677c9717359d1805c0ed864a7e4d60a8945", 0x70}, {&(0x7f0000000240)="f7cf3b9436e302ee99132c1e6fe6b9fa5e57b07c7015fa90a471621a6f3640a6cac310f9b71c1d8930f8", 0x2a}, {&(0x7f0000000280)="b04ad63997ed94f3f329dfe53e9dcf017ff77cfcdc70dd84f1cd4027f978a96136ed89130a1f7b431f2338d700d49089d475e9c6502e99b25c9565c70603176ea8bef73886c71d2e5bf453f34061740671cb09fd0888cc299f2eead92f42477a8a991ddaaa6ce97f95055a3e52cbaec2e96a386e3953dc2c50b8654c29e449a2cacecdf7ef6ae0dc9f969e5c001c167e312ae7f8fe33e619e6c8fa5e7f94bd37f9072635af16a1288ba7984923e661", 0xaf}, {&(0x7f0000000340)="9e28bba4df516b83f87217b2999c76cf7d87954a523fe5f3846ada7a6dc91fedb7491cbf78ec5775d7ed861d7420cd2e75d26e3dd1bcdb6891d36866c70cc5b4d180bcd801a65315c4f634c5f793747df149ce3f723843ec891a74dd3c4dc169390cc45077ff7c73696b18fdb546b87c1935c84a929545026b19b1c7075e52a3ecb124c4c44395385024871a11e057e07db18e30915f200930b1385b6c4d62aa820e425c2a797fb1ed3ba3bc7f36c790a1df3290fac74e99f95a19db0c8bcb5d3421d9f3", 0xc4}], 0x4}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000004c0)={'veth1_to_bond\x00', @ifru_ivalue=0x1}) 0s ago: executing program 4 (id=5253): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e20, 0x1, @remote, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c3580"], 0xf0}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close(r0) kernel console output (not intermixed with test programs): Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.864760][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.872351][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.904591][T16976] netlink: 'syz.1.2994': attribute type 32 has an invalid length. [ 439.924484][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 440.620255][T16937] tipc: Enabled bearer , priority 0 [ 440.627499][T16939] syzkaller0: entered promiscuous mode [ 440.634206][T16939] syzkaller0: entered allmulticast mode [ 440.648564][T16951] tipc: Resetting bearer [ 440.687345][T16976] bond1: option coupled_control: invalid value (24) [ 440.696747][T16976] bond1 (unregistering): Released all slaves [ 440.748485][T16951] tipc: Resetting bearer [ 440.776272][T16951] tipc: Disabling bearer [ 440.819734][T16973] lo speed is unknown, defaulting to 1000 [ 440.891001][T16981] netlink: 'syz.1.2995': attribute type 33 has an invalid length. [ 441.006473][T16981] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 441.044968][T16993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2998'. [ 441.060209][T16981] bond1 (unregistering): Released all slaves [ 441.271369][T17001] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2999'. [ 441.382275][T17009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3002'. [ 441.522030][T17009] netlink: 'syz.3.3002': attribute type 12 has an invalid length. [ 441.533762][T17009] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3002'. [ 441.586130][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 441.613569][T17017] netlink: 'syz.1.3003': attribute type 30 has an invalid length. [ 441.652853][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.667636][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.701104][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.730645][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.893303][T17031] syzkaller0: entered promiscuous mode [ 441.899190][T17031] syzkaller0: entered allmulticast mode [ 441.934575][T17037] tipc: Started in network mode [ 441.943687][ T52] Bluetooth: hci3: command tx timeout [ 441.952748][T17037] tipc: Node identity 06cb43176cb, cluster identity 4711 [ 441.961705][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 441.962602][T17037] tipc: Enabled bearer , priority 0 [ 442.019031][T17039] set match dimension is over the limit! [ 442.072376][T17037] tipc: Resetting bearer [ 442.109865][T17037] tipc: Disabling bearer [ 442.127419][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3010'. [ 442.159243][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3011'. [ 442.169543][T17046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3011'. [ 442.393228][T16973] chnl_net:caif_netlink_parms(): no params data found [ 442.423387][T17058] geneve2: entered promiscuous mode [ 442.442938][T17058] geneve2: entered allmulticast mode [ 442.448798][T17061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 442.766097][T17084] netlink: zone id is out of range [ 442.771399][T17084] netlink: zone id is out of range [ 442.778656][T17084] netlink: zone id is out of range [ 442.784129][T17084] netlink: zone id is out of range [ 442.789572][T17084] netlink: zone id is out of range [ 442.796573][T17084] netlink: zone id is out of range [ 442.801949][T17084] netlink: zone id is out of range [ 442.807613][T17084] netlink: zone id is out of range [ 442.813091][T17084] netlink: zone id is out of range [ 442.818547][T17084] netlink: zone id is out of range [ 442.866445][T16973] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.875621][T16973] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.885882][T16973] bridge_slave_0: entered allmulticast mode [ 442.895958][T16973] bridge_slave_0: entered promiscuous mode [ 442.905634][T16973] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.912851][T16973] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.920562][T16973] bridge_slave_1: entered allmulticast mode [ 442.929126][T16973] bridge_slave_1: entered promiscuous mode [ 443.046436][T16973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.059862][T16973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.119272][T16973] team0: Port device team_slave_0 added [ 443.142632][T16973] team0: Port device team_slave_1 added [ 443.168981][T17099] netlink: 'syz.0.3026': attribute type 10 has an invalid length. [ 443.220399][T17099] bridge0: port 1(dummy0) entered blocking state [ 443.236227][T17099] bridge0: port 1(dummy0) entered disabled state [ 443.244129][T17099] dummy0: entered allmulticast mode [ 443.259777][T17099] dummy0: left allmulticast mode [ 443.346943][T17108] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 443.407702][T17108] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 443.408978][T16973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.442770][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.513879][T16973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.534502][T16973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.541711][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.603427][T16973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.786378][T16973] hsr_slave_0: entered promiscuous mode [ 443.793117][T16973] hsr_slave_1: entered promiscuous mode [ 443.808344][T16973] debugfs: 'hsr0' already exists in 'hsr' [ 443.823453][T16973] Cannot create hsr debugfs directory [ 444.104323][ T52] Bluetooth: hci3: command tx timeout [ 444.230668][T16973] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.241104][T16973] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.327184][T16973] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.347717][T16973] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.469262][T16973] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.481930][T16973] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.497582][T17170] xt_hashlimit: size too large, truncated to 1048576 [ 444.567829][T16973] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.590033][T16973] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.800464][T17176] syzkaller0: entered promiscuous mode [ 444.807446][T17176] syzkaller0: entered allmulticast mode [ 445.182552][T17199] netlink: 'syz.1.3046': attribute type 21 has an invalid length. [ 445.315179][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 446.183863][ T52] Bluetooth: hci3: command tx timeout [ 446.294539][T17199] __nla_validate_parse: 9 callbacks suppressed [ 446.294557][T17199] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3046'. [ 446.458781][T16973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.495819][T16973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.549748][T16973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.576160][T16973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.649548][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'. [ 446.832001][T16973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.868180][T17245] netlink: 'syz.0.3057': attribute type 58 has an invalid length. [ 446.882459][T16973] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.910688][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.917905][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.955375][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3057'. [ 446.966307][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.973494][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.212992][T17268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3062'. [ 447.428356][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 447.675841][T16973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.160203][ T9] IPVS: starting estimator thread 0... [ 448.208536][T17324] tipc: Enabling of bearer rejected, failed to enable media [ 448.264722][ T52] Bluetooth: hci3: command tx timeout [ 448.283818][T17321] IPVS: using max 29 ests per chain, 69600 per kthread [ 448.315985][T16973] veth0_vlan: entered promiscuous mode [ 448.354544][T17333] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 448.367514][T16973] veth1_vlan: entered promiscuous mode [ 448.387221][T17333] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3078'. [ 448.434807][T17337] sctp: [Deprecated]: syz.1.3079 (pid 17337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.434807][T17337] Use struct sctp_sack_info instead [ 448.466286][T17339] sctp: [Deprecated]: syz.1.3079 (pid 17339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.466286][T17339] Use struct sctp_sack_info instead [ 448.467534][T16973] veth0_macvtap: entered promiscuous mode [ 448.523190][T17337] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3079'. [ 448.538368][T16973] veth1_macvtap: entered promiscuous mode [ 448.559063][T17337] 8021q: VLANs not supported on ip6_vti0 [ 448.584314][T17337] bond0: Error: Cannot enslave bond to itself. [ 448.621556][T16973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.658233][T16973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.680113][T17351] netlink: 'syz.2.3083': attribute type 2 has an invalid length. [ 448.707686][ T3428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.725463][T17351] netlink: 'syz.2.3083': attribute type 8 has an invalid length. [ 448.727535][ T3428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.735069][T17351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3083'. [ 448.770565][ T3428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.780438][ T3428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.962468][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.988649][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.060812][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.088079][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.194588][T17372] netlink: 'syz.2.3090': attribute type 21 has an invalid length. [ 449.205427][T17379] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3088'. [ 449.239265][T17372] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.265927][T17372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.273216][T17372] IPv6: NLM_F_CREATE should be set when creating new route [ 449.280516][T17372] IPv6: NLM_F_CREATE should be set when creating new route [ 449.287833][T17372] IPv6: NLM_F_CREATE should be set when creating new route [ 449.296692][T17379] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3088'. [ 449.884287][T17415] syzkaller1: entered promiscuous mode [ 449.889870][T17415] syzkaller1: entered allmulticast mode [ 449.905791][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 449.917868][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 449.926941][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 449.936211][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 449.948444][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 450.095867][T17416] lo speed is unknown, defaulting to 1000 [ 450.289216][T17442] netlink: 'syz.2.3103': attribute type 1 has an invalid length. [ 450.436674][T17449] bridge0: port 3(batadv1) entered blocking state [ 450.443618][T17449] bridge0: port 3(batadv1) entered disabled state [ 450.450273][T17449] batadv1: entered allmulticast mode [ 450.459104][T17449] batadv1: entered promiscuous mode [ 450.528588][T17457] IPVS: set_ctl: invalid protocol: 133 0.0.0.0:20003 [ 450.923581][ T1332] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 450.932972][ T1332] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 451.063799][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 451.071870][ C0] lec:lec_tx_timeout: lec0 [ 451.392392][T17488] Bluetooth: MGMT ver 1.23 [ 451.438524][T17473] vlan5: entered allmulticast mode [ 451.443856][T17473] hsr0: entered allmulticast mode [ 451.448913][T17473] hsr_slave_0: entered allmulticast mode [ 451.465591][T17473] hsr_slave_1: entered allmulticast mode [ 451.650149][T17496] netlink: 'syz.4.3117': attribute type 9 has an invalid length. [ 451.745780][T17505] __nla_validate_parse: 5 callbacks suppressed [ 451.745800][T17505] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3120'. [ 451.784627][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3120'. [ 451.795167][T17505] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3120'. [ 451.804788][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3120'. [ 451.824527][T17505] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3120'. [ 451.843807][T17505] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3120'. [ 452.024631][ T5848] Bluetooth: hci4: command tx timeout [ 452.112516][T17519] netlink: 'syz.0.3126': attribute type 7 has an invalid length. [ 452.163723][T17519] netlink: 'syz.0.3126': attribute type 8 has an invalid length. [ 452.381548][T17540] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3129'. [ 452.422827][T17538] syzkaller0: entered promiscuous mode [ 452.430172][T17538] syzkaller0: entered allmulticast mode [ 452.538118][T17544] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 452.548924][T17544] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 452.558634][T17544] gretap5: entered promiscuous mode [ 452.565730][T17544] gretap5: entered allmulticast mode [ 452.593958][T17545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3132'. [ 452.626309][T17548] pim6reg: entered allmulticast mode [ 452.639505][T17416] chnl_net:caif_netlink_parms(): no params data found [ 452.654157][T17546] pim6reg: left allmulticast mode [ 452.783317][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 452.795995][T17552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.806912][T17552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.823526][T17552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.831197][T17552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.008770][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.027994][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.035610][T17416] bridge_slave_0: entered allmulticast mode [ 453.043271][T17416] bridge_slave_0: entered promiscuous mode [ 453.052663][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.060085][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.069373][T17416] bridge_slave_1: entered allmulticast mode [ 453.077536][T17416] bridge_slave_1: entered promiscuous mode [ 453.210849][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.275507][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.410702][T17416] team0: Port device team_slave_0 added [ 453.428258][T17416] team0: Port device team_slave_1 added [ 453.428882][T17589] netlink: 'syz.4.3143': attribute type 1 has an invalid length. [ 453.442150][T17589] netlink: 'syz.4.3143': attribute type 3 has an invalid length. [ 453.452502][T17589] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3143'. [ 453.470284][T17589] NCSI netlink: No device for ifindex 813332851 [ 453.516938][T17416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.534180][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.605589][T17416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.659006][T17603] xfrm1: entered promiscuous mode [ 453.664969][T17603] xfrm1: entered allmulticast mode [ 453.671082][T17416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.682849][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.712267][T17416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.799184][T17609] bridge_slave_0: default FDB implementation only supports local addresses [ 453.927151][T17416] hsr_slave_0: entered promiscuous mode [ 453.946019][T17416] hsr_slave_1: entered promiscuous mode [ 453.955977][T17416] debugfs: 'hsr0' already exists in 'hsr' [ 453.961758][T17416] Cannot create hsr debugfs directory [ 453.983826][T17615] syzkaller0: entered promiscuous mode [ 454.022336][T17615] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 454.052762][T17615] syzkaller0: left promiscuous mode [ 454.105105][ T5848] Bluetooth: hci4: command tx timeout [ 454.211813][T17628] nbd: nbd64 already in use [ 454.322974][T17642] xt_policy: neither incoming nor outgoing policy selected [ 454.394115][T17645] netlink: 'syz.2.3156': attribute type 1 has an invalid length. [ 454.416311][T17645] netlink: 'syz.2.3156': attribute type 2 has an invalid length. [ 454.530405][T16903] udevd[16903]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 456.185910][ T5848] Bluetooth: hci4: command tx timeout [ 456.361634][T17416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.372992][T17416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.385424][T17416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.535586][T17704] xt_addrtype: ipv6 does not support BROADCAST matching [ 456.546546][T17416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.576679][T17416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.588869][T17416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.695987][T17416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.707785][T17416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.719788][T17416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.790704][T17416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.801441][T17416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.815808][T17416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 457.000432][T17721] __nla_validate_parse: 12 callbacks suppressed [ 457.000451][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 457.079408][T17416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.101197][T17416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.140024][T17416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.162549][T17730] netlink: 'syz.1.3184': attribute type 2 has an invalid length. [ 457.176035][T17416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 457.215967][T17730] netlink: 'syz.1.3184': attribute type 39 has an invalid length. [ 457.284369][T17742] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 457.376849][T17746] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3186'. [ 457.501954][T17416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.552941][T17416] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.659301][T17766] Cannot find add_set index 0 as target [ 457.719186][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.726404][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.753361][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.760582][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.773168][T17770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3192'. [ 458.156716][T17788] ip6tnl0: Caught tx_queue_len zero misconfig [ 458.265213][ T52] Bluetooth: hci4: command tx timeout [ 458.278150][T17796] net_ratelimit: 46 callbacks suppressed [ 458.278165][T17796] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 458.316189][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 458.325748][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 458.372986][T17416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.487470][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'. [ 458.542394][T17804] bond9: entered promiscuous mode [ 458.548424][T17804] bond9: entered allmulticast mode [ 458.554439][T17804] 8021q: adding VLAN 0 to HW filter on device bond9 [ 458.606135][T17807] bond3 (unregistering): Released all slaves [ 458.651148][T17804] macvlan0: entered promiscuous mode [ 458.657609][T17804] macvlan0: entered allmulticast mode [ 458.676327][T17804] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 458.757359][T17416] veth0_vlan: entered promiscuous mode [ 458.833235][T17416] veth1_vlan: entered promiscuous mode [ 458.981437][T17416] veth0_macvtap: entered promiscuous mode [ 459.018968][T17416] veth1_macvtap: entered promiscuous mode [ 459.077574][T17416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.093199][T17416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.105479][T17838] netlink: 'syz.4.3208': attribute type 1 has an invalid length. [ 459.116828][T17843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3209'. [ 459.127353][T17844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3209'. [ 459.166475][ T1332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.187171][ T1332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.207252][ T1332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.345952][ T1332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.497589][T17858] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3212'. [ 459.560383][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.594261][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.635326][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.643188][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.691596][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'. [ 459.711008][T17864] delete_channel: no stack [ 459.877928][T17870] 8021q: VLANs not supported on ipvlan1 [ 459.959946][T17876] openvswitch: netlink: Flow actions attr not present in new flow. [ 460.072393][T17877] lo speed is unknown, defaulting to 1000 [ 460.264534][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.274685][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.282328][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.291549][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.299283][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.347196][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 460.361124][T17895] ip6t_srh: unknown srh match flags 5F28 [ 460.480553][T17900] openvswitch: netlink: Missing key (keys=40, expected=80) [ 460.868242][T17889] lo speed is unknown, defaulting to 1000 [ 461.025368][T17925] syzkaller1: entered promiscuous mode [ 461.031041][T17925] syzkaller1: entered allmulticast mode [ 461.440796][T17945] IPv6: NLM_F_CREATE should be specified when creating new route [ 461.545853][T17940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.566544][T17952] sctp: [Deprecated]: syz.4.3235 (pid 17952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.566544][T17952] Use struct sctp_sack_info instead [ 461.628041][T17954] xt_ecn: cannot match TCP bits for non-tcp packets [ 462.055625][T17962] lo speed is unknown, defaulting to 1000 [ 462.123208][T17973] netlink: 'syz.1.3241': attribute type 39 has an invalid length. [ 462.343658][ T52] Bluetooth: hci2: command tx timeout [ 462.484469][T17981] __nla_validate_parse: 8 callbacks suppressed [ 462.484486][T17981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3244'. [ 462.504798][T17982] netlink: 'syz.1.3243': attribute type 2 has an invalid length. [ 462.596272][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 462.631011][T17988] netlink: 'syz.1.3246': attribute type 1 has an invalid length. [ 462.656894][T17989] netlink: 'syz.2.3245': attribute type 21 has an invalid length. [ 462.791642][T17988] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 462.805745][T17988] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 462.932273][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3239'. [ 463.046964][T17889] chnl_net:caif_netlink_parms(): no params data found [ 463.288320][T17889] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.307790][T17889] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.321708][T17889] bridge_slave_0: entered allmulticast mode [ 463.345519][T17889] bridge_slave_0: entered promiscuous mode [ 463.354964][T17889] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.372835][T17889] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.393863][T17889] bridge_slave_1: entered allmulticast mode [ 463.404307][T17889] bridge_slave_1: entered promiscuous mode [ 463.644303][T17889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.675884][T17889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.798237][T17889] team0: Port device team_slave_0 added [ 463.808894][T17889] team0: Port device team_slave_1 added [ 463.871355][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 463.938216][T17889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.955015][T17889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.007506][T17889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.036395][T17889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.044145][T17889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.140293][T17889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.174393][T18028] veth0: entered promiscuous mode [ 464.277231][T18027] veth0: left promiscuous mode [ 464.335221][T17889] hsr_slave_0: entered promiscuous mode [ 464.342080][T17889] hsr_slave_1: entered promiscuous mode [ 464.363360][T17889] debugfs: 'hsr0' already exists in 'hsr' [ 464.369858][T17889] Cannot create hsr debugfs directory [ 464.424731][ T52] Bluetooth: hci2: command tx timeout [ 464.676828][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'. [ 464.702919][T18043] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 465.047437][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'. [ 465.088259][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'. [ 465.213489][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'. [ 465.276778][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3263'. [ 465.344918][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'. [ 465.471231][T18059] ipt_ECN: cannot use operation on non-tcp rule [ 465.607097][T17889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.625148][T17889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.806351][T17889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.839754][T17889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.045305][ T30] audit: type=1800 audit(1768835893.469:11): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3271" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3570 res=0 errno=0 [ 466.055175][T17889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.126516][T17889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.333487][T17889] netdevsim netdevsim0 netdevsim0 (unregistering): tearing down IPsec offload with 1 SAs left [ 466.350977][T18103] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 466.398587][T18110] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 466.503025][T18115] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 466.514165][ T52] Bluetooth: hci2: command tx timeout [ 466.544700][T18112] lo speed is unknown, defaulting to 1000 [ 466.549572][T18118] syzkaller0: entered promiscuous mode [ 466.558782][T18118] syzkaller0: entered allmulticast mode [ 466.806965][T18126] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 466.883979][T18127] IPVS: nq: FWM 3 0x00000003 - no destination available [ 467.691712][T18165] __nla_validate_parse: 13 callbacks suppressed [ 467.691733][T18165] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3292'. [ 467.765376][T18165] vlan1: entered allmulticast mode [ 467.770538][T18165] gretap0: entered allmulticast mode [ 468.057080][T18182] netlink: 'syz.4.3296': attribute type 21 has an invalid length. [ 468.068543][T18182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3296'. [ 468.259900][T18187] veth0: entered promiscuous mode [ 468.265676][T18189] 8021q: VLANs not supported on syzkaller1 [ 468.272031][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3298'. [ 468.420614][T18189] 8021q: VLANs not supported on syzkaller1 [ 468.584628][ T52] Bluetooth: hci2: command tx timeout [ 468.650978][T18211] netlink: 'syz.4.3309': attribute type 3 has an invalid length. [ 468.658988][T18211] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 468.669163][T18211] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3309'. [ 468.737871][T18217] openvswitch: netlink: Flow actions attr not present in new flow. [ 468.879887][T18228] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 468.932099][T18231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3313'. [ 469.046609][T18238] netlink: 'syz.3.3317': attribute type 21 has an invalid length. [ 469.054657][T18238] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3317'. [ 469.067032][T18238] netlink: 'syz.3.3317': attribute type 5 has an invalid length. [ 469.122801][T18238] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3317'. [ 469.201338][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3313'. [ 469.232031][T18231] geneve2: entered promiscuous mode [ 469.420783][T18260] team_slave_0: entered promiscuous mode [ 469.426776][T18260] team_slave_1: entered promiscuous mode [ 469.446882][T18260] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.470329][T18258] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 469.519640][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3321'. [ 469.779697][T18287] netlink: 'syz.4.3329': attribute type 1 has an invalid length. [ 469.827553][T18287] bond1: (slave gretap1): making interface the new active one [ 469.836097][T18287] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 469.901902][T18291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.918231][T18293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3330'. [ 469.992179][T18299] netlink: 'syz.1.3333': attribute type 1 has an invalid length. [ 470.198319][T18315] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 470.288699][T18305] team0 (unregistering): Port device team_slave_0 removed [ 470.322324][T18305] team0 (unregistering): Port device team_slave_1 removed [ 470.392322][T18318] bond11: (slave geneve3): making interface the new active one [ 470.400602][T18318] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 470.411777][T17774] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.420369][T17774] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.454037][T17774] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.462433][T17774] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.599116][T18330] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 470.606624][T18330] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 470.736302][T18333] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 471.005408][T18339] openvswitch: netlink: Key 6 has unexpected len 74 expected 2 [ 471.107613][T18345] delete_channel: no stack [ 471.311112][T18359] delete_channel: no stack [ 471.525298][T18383] syzkaller0: entered promiscuous mode [ 471.530937][T18383] syzkaller0: entered allmulticast mode [ 471.572773][T18385] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 471.852598][T18401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.096345][T18422] netlink: 'syz.4.3369': attribute type 10 has an invalid length. [ 472.122960][T18422] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 472.148754][T18424] bridge_slave_0: left allmulticast mode [ 472.156858][T18424] bridge_slave_0: left promiscuous mode [ 472.162753][T18424] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.179213][T18424] bridge_slave_1: left allmulticast mode [ 472.191462][T18424] bridge_slave_1: left promiscuous mode [ 472.197543][T18424] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.213995][T18424] bond0: (slave bond_slave_0): Releasing backup interface [ 472.227163][T18424] bond0: (slave bond_slave_1): Releasing backup interface [ 472.240545][T18424] team_slave_0: left promiscuous mode [ 472.250907][T18424] team0: Port device team_slave_0 removed [ 472.261007][T18424] team_slave_1: left promiscuous mode [ 472.274131][T18424] team0: Port device team_slave_1 removed [ 472.281530][T18424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.289780][T18424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.298835][T18424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.306918][T18424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.316585][T18424] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.618228][T18445] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 472.731103][T18453] __nla_validate_parse: 7 callbacks suppressed [ 472.731124][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 472.817589][T18457] openvswitch: netlink: EtherType 0 is less than min 600 [ 472.939857][T18465] sctp: [Deprecated]: syz.4.3382 (pid 18465) Use of int in max_burst socket option deprecated. [ 472.939857][T18465] Use struct sctp_assoc_value instead [ 472.962403][T18467] ip6t_srh: unknown srh invflags 4000 [ 473.052341][T18469] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3384'. [ 473.093758][ T24] IPVS: starting estimator thread 0... [ 473.196941][T18472] IPVS: using max 33 ests per chain, 79200 per kthread [ 473.223211][T18480] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 474.588416][T18480] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 474.635119][T18494] netlink: 'syz.1.3392': attribute type 2 has an invalid length. [ 474.821229][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3399'. [ 474.988330][T18527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3402'. [ 475.102952][T18537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3405'. [ 475.419260][T18554] tipc: Enabling of bearer rejected, already enabled [ 475.612851][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'. [ 475.798784][T18577] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3417'. [ 475.868751][T18582] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 475.878971][T18582] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3418'. [ 476.048541][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3419'. [ 476.224246][T18597] netlink: 'syz.3.3422': attribute type 11 has an invalid length. [ 476.238292][T18597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3422'. [ 476.322839][T18600] IPVS: persistence engine module ip_vs_pe_ not found [ 476.792342][T18627] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 476.856356][ T5903] IPVS: starting estimator thread 0... [ 476.954212][T18630] IPVS: using max 33 ests per chain, 79200 per kthread [ 477.669275][T18668] netlink: 'syz.3.3442': attribute type 2 has an invalid length. [ 477.882721][T18669] infiniband sy: set active [ 477.887501][T18669] infiniband sy: added bond_slave_0 [ 477.925843][T18669] RDS/IB: sy: added [ 477.933910][T18669] smc: adding ib device sy with port count 1 [ 477.942750][T18669] smc: ib device sy port 1 has no pnetid [ 478.393777][T18695] __nla_validate_parse: 4 callbacks suppressed [ 478.393795][T18695] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3450'. [ 478.547725][T18709] netlink: 'syz.3.3454': attribute type 2 has an invalid length. [ 478.564398][T18709] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3454'. [ 478.825368][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 478.850481][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 478.860272][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 478.911591][T18724] team1: entered promiscuous mode [ 478.963472][T18724] team1: entered allmulticast mode [ 478.982019][T18732] set match dimension is over the limit! [ 479.095226][T18737] netlink: 'syz.1.3461': attribute type 1 has an invalid length. [ 479.115564][T18737] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3461'. [ 479.145940][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 479.334396][T18745] netlink: 'syz.1.3464': attribute type 33 has an invalid length. [ 479.529956][T18750] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 479.545726][T18750] bond4 (unregistering): Released all slaves [ 479.884971][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3470'. [ 479.942401][T18762] bond12: entered promiscuous mode [ 479.949092][T18762] bond12: entered allmulticast mode [ 479.955377][T18762] 8021q: adding VLAN 0 to HW filter on device bond12 [ 479.970272][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 479.984575][T18768] macvlan0: entered promiscuous mode [ 479.989903][T18768] macvlan0: entered allmulticast mode [ 479.998016][T18768] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 480.115804][T18772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3473'. [ 480.152348][T18772] openvswitch: netlink: Flow key attr not present in new flow. [ 480.235933][T18769] dvmrp0: entered allmulticast mode [ 480.448800][T18783] sctp: [Deprecated]: syz.1.3477 (pid 18783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.448800][T18783] Use struct sctp_sack_info instead [ 482.016625][T18801] netlink: 'syz.2.3484': attribute type 6 has an invalid length. [ 482.035943][T18801] block nbd0: not configured, cannot reconfigure [ 482.054653][T18803] netlink: 'syz.1.3485': attribute type 1 has an invalid length. [ 482.155712][T18804] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.195841][T18804] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 482.253216][T18811] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.270997][T18811] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 482.325421][T18803] gretap1: entered promiscuous mode [ 482.337516][T18803] bond5: (slave gretap1): making interface the new active one [ 482.350671][T18803] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 482.607117][T18824] bond1: (slave ip_vti0): Device is not bonding slave [ 482.618265][T18824] bond1: option active_slave: invalid value (ip_vti0) [ 482.630212][T18824] bond1 (unregistering): Released all slaves [ 482.684812][T18830] tipc: Started in network mode [ 482.689727][T18830] tipc: Node identity e0000002, cluster identity 4711 [ 482.726546][T18830] tipc: Enabling of bearer rejected, failed to enable media [ 482.781200][T18827] bond13: option min_links: invalid value (18446744073709551614) [ 482.789968][T18827] bond13: option min_links: allowed values 0 - 2147483647 [ 482.819301][T18827] bond13 (unregistering): Released all slaves [ 482.970010][T18847] 8021q: VLANs not supported on sit0 [ 483.219150][T18862] xt_ecn: cannot match TCP bits for non-tcp packets [ 483.522754][T18877] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 483.551002][T18877] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 483.582487][T18877] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 483.943284][T18902] __nla_validate_parse: 13 callbacks suppressed [ 483.943304][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3512'. [ 484.002160][T18902] bond1: entered promiscuous mode [ 484.017834][T18902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.030565][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3512'. [ 484.042969][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3512'. [ 484.060968][T18902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 484.071085][T18902] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3512'. [ 484.222033][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3515'. [ 484.342201][T18929] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3517'. [ 484.446888][T18936] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3521'. [ 484.600292][T18950] netlink: 'syz.3.3525': attribute type 29 has an invalid length. [ 484.613286][T18952] netlink: 'syz.3.3525': attribute type 29 has an invalid length. [ 484.634406][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 484.875318][T18972] openvswitch: netlink: Flow actions attr not present in new flow. [ 485.057449][T18983] netlink: 'syz.1.3533': attribute type 10 has an invalid length. [ 485.077957][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 485.502175][T19007] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 485.512972][T19007] tipc: Enabled bearer , priority 10 [ 485.875882][T19023] netlink: 'syz.4.3545': attribute type 1 has an invalid length. [ 485.982898][T19026] netlink: 'syz.3.3546': attribute type 16 has an invalid length. [ 486.470164][T19057] vlan0: Caught tx_queue_len zero misconfig [ 486.625017][ T5962] tipc: Node number set to 1786462999 [ 487.123040][T19100] netlink: 'syz.4.3569': attribute type 12 has an invalid length. [ 487.146051][T19102] netlink: 'syz.1.3571': attribute type 11 has an invalid length. [ 487.572082][T19133] syzkaller0: entered promiscuous mode [ 487.594334][T19133] syzkaller0: entered allmulticast mode [ 489.316932][T19170] __nla_validate_parse: 11 callbacks suppressed [ 489.316950][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3588'. [ 489.404055][T19174] xt_bpf: check failed: parse error [ 489.478701][T19177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3590'. [ 489.631546][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'. [ 489.660210][T19185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3592'. [ 490.069727][T19211] No such timeout policy "syz0" [ 490.299695][T19230] netlink: 'syz.4.3602': attribute type 13 has an invalid length. [ 490.331639][T19230] veth0_macvtap: left promiscuous mode [ 490.383081][T19230] macvtap0: entered allmulticast mode [ 490.434445][T19230] macvtap0: refused to change device tx_queue_len [ 490.552111][T19246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3605'. [ 490.658294][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3607'. [ 490.699942][T19255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3607'. [ 490.907625][T19264] tipc: Started in network mode [ 490.985516][T19264] tipc: Node identity e0000002, cluster identity 4711 [ 491.016477][T19264] tipc: Enabling of bearer rejected, failed to enable media [ 491.047385][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3611'. [ 491.486713][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3617'. [ 491.609164][T19308] xt_hashlimit: overflow, rate too high: 0 [ 491.648241][T19310] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 491.893995][T19285] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 491.903986][T19285] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 491.936920][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3623'. [ 492.052203][T19285] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 492.083127][T19285] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 492.281459][T19285] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.315932][T19285] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 492.384203][T19364] team0: mtu less than device minimum [ 492.514444][T19285] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 492.532989][T19285] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 492.771257][T19386] xt_limit: Overflow, try lower: 604147548/4200216962 [ 492.979376][T19394] macvtap1: entered allmulticast mode [ 492.993043][T19394] veth0_macvtap: entered allmulticast mode [ 493.018915][T19400] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 493.051397][T19404] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 494.015107][ T30] audit: type=1107 audit(1768835921.429:12): pid=19448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 494.331317][ T6546] lec:lec_start_xmit: lec0:No lecd attached [ 495.504022][T19431] __nla_validate_parse: 5 callbacks suppressed [ 495.504044][T19431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3648'. [ 495.536809][T19447] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 495.698813][T19461] veth0_macvtap (unregistering): left allmulticast mode [ 495.793301][T19485] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3656'. [ 496.243451][T19522] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 496.330779][T19526] syzkaller1: entered promiscuous mode [ 496.339398][T19526] syzkaller1: entered allmulticast mode [ 496.416708][T19533] netlink: 'syz.1.3669': attribute type 13 has an invalid length. [ 496.633531][T19549] tun0: tun_chr_ioctl cmd 1074025675 [ 496.638969][T19549] tun0: persist disabled [ 496.654811][T19555] Cannot find add_set index 2 as target [ 496.991054][T19577] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3678'. [ 497.463305][T19597] netlink: 'syz.3.3679': attribute type 1 has an invalid length. [ 497.791056][T19613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3682'. [ 497.944959][T19622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 497.962113][T19622] netlink: 'syz.1.3685': attribute type 2 has an invalid length. [ 497.980763][T19622] netlink: 'syz.1.3685': attribute type 3 has an invalid length. [ 498.000443][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'. [ 498.107857][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 498.194895][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 498.204322][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3687'. [ 498.213212][T19634] netlink: 'syz.3.3687': attribute type 15 has an invalid length. [ 498.242197][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 498.252308][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 498.275149][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 498.285385][T19638] x_tables: duplicate underflow at hook 3 [ 498.301015][T19634] netlink: 'syz.3.3687': attribute type 15 has an invalid length. [ 498.323622][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 498.342887][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 498.382327][T19644] nbd: must specify a size in bytes for the device [ 498.557245][T19657] gretap0: entered promiscuous mode [ 498.586396][T19657] gretap0: left promiscuous mode [ 498.666212][T19664] tap0: tun_chr_ioctl cmd 1074025677 [ 498.671801][T19664] tap0: linktype set to 42 [ 498.684137][T19664] tap0: tun_chr_ioctl cmd 1074025672 [ 498.694723][T19664] tap0: ignored: set checksum disabled [ 498.905263][T19671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.939215][T19675] netlink: 'syz.3.3697': attribute type 1 has an invalid length. [ 499.543498][T19696] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 500.024504][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 500.032559][ C0] lec:lec_tx_timeout: lec0 [ 500.114434][T19723] syzkaller0: entered promiscuous mode [ 500.119948][T19723] syzkaller0: entered allmulticast mode [ 500.575303][T19756] syzkaller0: entered promiscuous mode [ 500.599376][T19756] syzkaller0: entered allmulticast mode [ 500.702543][T19767] __nla_validate_parse: 5 callbacks suppressed [ 500.702561][T19767] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3719'. [ 500.750101][T19767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3719'. [ 500.783145][T19770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3721'. [ 500.790308][T19767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3719'. [ 500.802765][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'. [ 500.821135][T19770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3721'. [ 500.833011][T19770] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3721'. [ 500.864884][T19770] netlink: 'syz.2.3721': attribute type 1 has an invalid length. [ 500.915311][T19779] netlink: 'syz.4.3722': attribute type 1 has an invalid length. [ 501.059358][T19792] netlink: 'syz.3.3724': attribute type 11 has an invalid length. [ 501.210620][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3725'. [ 501.267538][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3725'. [ 502.644542][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3738'. [ 503.516455][T19889] syzkaller0: entered promiscuous mode [ 503.521980][T19889] syzkaller0: entered allmulticast mode [ 503.558438][T19887] tipc: Enabled bearer , priority 0 [ 503.604564][T19887] tipc: Enabling of bearer rejected, already enabled [ 503.806981][T19900] tipc: Resetting bearer [ 503.831817][T19900] tipc: Disabling bearer [ 504.135801][T19920] netlink: 'syz.2.3753': attribute type 3 has an invalid length. [ 504.341600][T19937] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 504.967203][T19983] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 504.992937][T19986] netlink: 'syz.3.3772': attribute type 11 has an invalid length. [ 505.011222][T19988] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 505.015182][T19988] openvswitch: netlink: Missing key (keys=40, expected=100) [ 505.199616][T19997] sit1: entered promiscuous mode [ 505.206456][T20001] netlink: 'syz.4.3778': attribute type 16 has an invalid length. [ 505.209274][T19997] sit1: entered allmulticast mode [ 505.216690][T20001] netlink: 'syz.4.3778': attribute type 17 has an invalid length. [ 505.353229][T20001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.392988][T20010] netlink: 'syz.2.3780': attribute type 1 has an invalid length. [ 505.429027][T20010] netlink: 'syz.2.3780': attribute type 2 has an invalid length. [ 505.439148][T20009] netlink: Unknown conntrack attr (type=8706, max=9) [ 505.447042][T20010] netlink: 'syz.2.3780': attribute type 1 has an invalid length. [ 505.455957][T20010] netlink: 'syz.2.3780': attribute type 3 has an invalid length. [ 505.746959][T20034] __nla_validate_parse: 13 callbacks suppressed [ 505.746981][T20034] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3787'. [ 505.765082][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3787'. [ 505.776015][T20034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3787'. [ 505.928115][T20052] openvswitch: netlink: IP tunnel dst address not specified [ 505.991487][T20057] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3794'. [ 506.070899][T20062] bond0: (slave gre0): Error: Device type is different from other slaves [ 506.102344][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 506.146216][T20069] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 506.372197][T20084] syzkaller0: entered promiscuous mode [ 506.380772][T20084] syzkaller0: entered allmulticast mode [ 506.390282][T20084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3802'. [ 506.454102][T20087] syzkaller0: entered promiscuous mode [ 506.459733][T20087] syzkaller0: entered allmulticast mode [ 506.470323][T20087] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3803'. [ 506.480933][T20087] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3803'. [ 506.602918][T20095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3806'. [ 506.615895][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3805'. [ 506.659312][ T52] block nbd0: Receive control failed (result -1) [ 506.754620][ T52] block nbd1: Receive control failed (result -1) [ 506.765084][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 506.855735][T20104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.914436][T20107] netlink: 'syz.2.3809': attribute type 11 has an invalid length. [ 507.370127][T20146] netlink: 'syz.1.3815': attribute type 1 has an invalid length. [ 507.395675][T20143] bond6 (unregistering): Released all slaves [ 507.482382][T20150] openvswitch: netlink: Flow key attr not present in new flow. [ 507.637386][T20154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.652204][T20158] netlink: 'syz.2.3820': attribute type 7 has an invalid length. [ 507.680372][T20159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.691185][T20159] bond2: (slave bond0): Enslaving as an active interface with an up link [ 508.495714][T20213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.502254][T20213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 508.550015][T20216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.921238][T20288] validate_nla: 1 callbacks suppressed [ 509.921258][T20288] netlink: 'syz.4.3863': attribute type 10 has an invalid length. [ 509.940733][T20288] bond0: (slave wlan1): Opening slave failed [ 510.687763][T20338] netlink: 'syz.2.3879': attribute type 1 has an invalid length. [ 510.841230][T20350] __nla_validate_parse: 24 callbacks suppressed [ 510.841249][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3884'. [ 510.869989][T20351] netlink: 'syz.1.3882': attribute type 1 has an invalid length. [ 510.885770][T20351] netlink: 'syz.1.3882': attribute type 7 has an invalid length. [ 510.894548][T20351] netlink: 'syz.1.3882': attribute type 8 has an invalid length. [ 510.902374][T20351] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3882'. [ 510.916113][T20351] NCSI netlink: No device for ifindex 65584 [ 510.946292][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'. [ 510.995840][T20360] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3884'. [ 511.034843][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3886'. [ 511.048477][T20359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3886'. [ 511.159810][T20366] x_tables: duplicate underflow at hook 1 [ 511.171724][T20368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3889'. [ 511.182003][T20370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3889'. [ 511.197000][T20366] x_tables: duplicate underflow at hook 3 [ 511.387085][T20377] netlink: 'syz.2.3891': attribute type 1 has an invalid length. [ 511.550066][T20386] netlink: 'syz.2.3892': attribute type 10 has an invalid length. [ 511.558186][T20386] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3892'. [ 511.568129][T20386] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 511.807422][T20397] netlink: 'syz.4.3895': attribute type 1 has an invalid length. [ 512.023415][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 512.031480][ C0] lec:lec_tx_timeout: lec0 [ 512.191826][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 512.695619][T20462] syz.3.3914 uses old SIOCAX25GETINFO [ 513.155983][T20491] netlink: 'syz.1.3924': attribute type 10 has an invalid length. [ 513.185983][T20491] dummy0: entered promiscuous mode [ 513.192248][T20491] bridge0: port 1(dummy0) entered blocking state [ 513.227192][T20491] bridge0: port 1(dummy0) entered disabled state [ 513.235243][T20491] dummy0: entered allmulticast mode [ 513.243291][T20491] bridge0: port 1(dummy0) entered blocking state [ 513.249830][T20491] bridge0: port 1(dummy0) entered forwarding state [ 513.262485][T20499] netlink: 'syz.1.3924': attribute type 1 has an invalid length. [ 513.453131][T20505] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 513.478407][T20505] batadv2: entered promiscuous mode [ 513.486644][T20505] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 513.496025][T20505] team0: Failed to send options change via netlink (err -105) [ 513.505981][T20505] team0: Port device batadv2 added [ 513.742906][T20522] vlan2: left promiscuous mode [ 513.749574][T20522] team1: left promiscuous mode [ 513.798267][T20522] veth11: left promiscuous mode [ 513.805573][T20522] veth13: left promiscuous mode [ 513.820458][T20522] gretap5: left promiscuous mode [ 513.852397][T20522] xfrm1: left promiscuous mode [ 513.870855][T20522] bond9: left promiscuous mode [ 513.903107][T20522] bond12: left promiscuous mode [ 513.915896][ T1164] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.925773][ T1164] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 513.936880][ T1164] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.947689][ T1164] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 513.959043][ T1164] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.968611][ T1164] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 513.980944][ T1164] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.992140][ T1164] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 514.050791][T20538] syzkaller0: entered promiscuous mode [ 514.061253][T20538] syzkaller0: entered allmulticast mode [ 514.510110][T20565] block nbd0: Unsupported socket: should be TCP or UNIX. [ 514.806117][T20583] tipc: New replicast peer: 255.255.255.255 [ 514.822227][T20583] tipc: Enabled bearer , priority 10 [ 515.132251][T20608] validate_nla: 10 callbacks suppressed [ 515.132270][T20608] netlink: 'syz.3.3958': attribute type 1 has an invalid length. [ 515.242547][T20608] bond3: entered promiscuous mode [ 515.249721][T20608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.939317][ T981] tipc: Node number set to 3758096386 [ 516.055579][T20670] __nla_validate_parse: 20 callbacks suppressed [ 516.055598][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3972'. [ 516.080089][T20670] netlink: 'syz.3.3972': attribute type 7 has an invalid length. [ 516.090461][T20670] netlink: 'syz.3.3972': attribute type 8 has an invalid length. [ 516.099191][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3972'. [ 516.139792][T20674] nbd: must specify a size in bytes for the device [ 516.155125][T20674] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 516.242210][T20683] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3976'. [ 516.263289][T20685] netlink: 'syz.4.3977': attribute type 33 has an invalid length. [ 516.316366][T20685] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 516.316513][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3979'. [ 516.340524][T20685] bond4 (unregistering): Released all slaves [ 516.568614][T20701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.715763][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3986'. [ 516.745591][T20708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3986'. [ 516.808272][T20708] xt_hashlimit: overflow, try lower: 3/0 [ 517.019109][T20726] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3993'. [ 517.036320][T20730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3994'. [ 517.050707][T20730] netlink: 'syz.4.3994': attribute type 33 has an invalid length. [ 517.100503][T20730] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 517.115668][T20730] bond4 (unregistering): Released all slaves [ 517.341350][T20739] netlink: 'syz.4.3997': attribute type 5 has an invalid length. [ 517.595055][T20752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.712091][T20748] team0 (unregistering): Port device team_slave_0 removed [ 517.735484][T20748] team0 (unregistering): Port device team_slave_1 removed [ 517.753278][T20743] vxcan1: entered allmulticast mode [ 517.883265][T20758] netlink: 'syz.2.4003': attribute type 1 has an invalid length. [ 517.905209][T20758] netlink: 'syz.2.4003': attribute type 2 has an invalid length. [ 517.953842][T20765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4006'. [ 517.977258][T20767] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4007'. [ 517.986345][T20765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.343312][T20794] bridge: RTM_NEWNEIGH with invalid ether address [ 518.351293][T20795] syzkaller1: entered promiscuous mode [ 518.357824][T20795] syzkaller1: entered allmulticast mode [ 518.569258][T20801] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 518.587799][T20801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.871386][T20824] netlink: 'syz.3.4023': attribute type 12 has an invalid length. [ 518.900902][T20824] netlink: 'syz.3.4023': attribute type 29 has an invalid length. [ 519.457086][T20833] sctp: [Deprecated]: syz.3.4025 (pid 20833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.457086][T20833] Use struct sctp_sack_info instead [ 519.483688][T20853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.490167][T20853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.855773][T20876] netlink: 'syz.1.4038': attribute type 11 has an invalid length. [ 520.257252][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.268968][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.277557][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.305911][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.318392][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.352362][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.364172][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.372462][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.381143][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.388750][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.483066][T20900] lo speed is unknown, defaulting to 1000 [ 520.786544][T20889] validate_nla: 13 callbacks suppressed [ 520.786562][T20889] netlink: 'syz.3.4041': attribute type 1 has an invalid length. [ 520.834630][T20889] netlink: 'syz.3.4041': attribute type 2 has an invalid length. [ 520.842555][T20889] netlink: 'syz.3.4041': attribute type 1 has an invalid length. [ 521.497860][T20941] __nla_validate_parse: 10 callbacks suppressed [ 521.498289][T20941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4055'. [ 521.709189][T20949] syzkaller0: entered promiscuous mode [ 521.720908][T20949] syzkaller0: entered allmulticast mode [ 522.081057][T20968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4063'. [ 522.147852][T20973] vlan2: entered promiscuous mode [ 522.153021][T20973] geneve1: entered promiscuous mode [ 522.164709][T20973] vlan2: entered allmulticast mode [ 522.169995][T20973] geneve1: entered allmulticast mode [ 522.226481][T20979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4067'. [ 522.431986][ T52] Bluetooth: hci1: command tx timeout [ 522.468964][T20994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.540023][T20900] chnl_net:caif_netlink_parms(): no params data found [ 522.610210][T20999] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.617804][T20999] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.692662][T21007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4075'. [ 522.704050][T21011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4072'. [ 522.729850][T21010] netlink: 'syz.1.4076': attribute type 1 has an invalid length. [ 522.958612][T21021] bond4: Removing last arp target with arp_interval on [ 523.108219][T20900] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.128126][T20900] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.160020][T20900] bridge_slave_0: entered allmulticast mode [ 523.171152][T21040] can: request_module (can-proto-0) failed. [ 523.199629][T20900] bridge_slave_0: entered promiscuous mode [ 523.240273][T20900] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.254788][T20900] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.282871][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4085'. [ 523.292545][T20900] bridge_slave_1: entered allmulticast mode [ 523.305523][T20900] bridge_slave_1: entered promiscuous mode [ 523.365712][T21054] xt_l2tp: v2 doesn't support IP mode [ 523.432299][T20900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.459927][T20900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.484067][T21059] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4087'. [ 523.560074][T20900] team0: Port device team_slave_0 added [ 523.579546][T20900] team0: Port device team_slave_1 added [ 523.677921][T20900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.685466][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.712889][T20900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.728495][T20900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.736634][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.762930][T20900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.854996][T20900] hsr_slave_0: entered promiscuous mode [ 523.862849][T20900] hsr_slave_1: entered promiscuous mode [ 523.871663][T20900] debugfs: 'hsr0' already exists in 'hsr' [ 523.877650][T20900] Cannot create hsr debugfs directory [ 524.503543][ T52] Bluetooth: hci1: command tx timeout [ 524.557830][T21090] syzkaller0: entered promiscuous mode [ 524.564172][T21090] syzkaller0: entered allmulticast mode [ 525.918994][T21093] syzkaller0: entered promiscuous mode [ 525.924784][T21093] syzkaller0: entered allmulticast mode [ 525.933099][T21095] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 526.043108][T21109] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 526.157036][T21112] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 526.192068][T21112] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 526.414646][ T1164] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 526.454031][ T1164] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 526.476567][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4103'. [ 526.527626][ T1164] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 526.585117][ T52] Bluetooth: hci1: command tx timeout [ 526.625845][ T7504] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 527.219027][T21163] netlink: 'syz.4.4114': attribute type 2 has an invalid length. [ 527.236637][T21163] Bluetooth: MGMT ver 1.23 [ 527.242694][T21163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4114'. [ 527.361083][T21172] tipc: Enabled bearer , priority 0 [ 527.369807][T21172] syzkaller0: entered promiscuous mode [ 527.376968][T21172] syzkaller0: entered allmulticast mode [ 527.417790][T21172] tipc: Resetting bearer [ 527.430801][T21170] tipc: Resetting bearer [ 527.459813][T21170] tipc: Disabling bearer [ 527.713728][T21181] syz.2.4121 (21181) used greatest stack depth: 17688 bytes left [ 527.758670][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 527.769619][T21194] openvswitch: netlink: Missing key (keys=40, expected=80) [ 528.076524][T21213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4132'. [ 528.116305][T21207] syzkaller1: entered promiscuous mode [ 528.121937][T21207] syzkaller1: entered allmulticast mode [ 528.460556][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4138'. [ 528.471414][T21239] hsr_slave_0: left promiscuous mode [ 528.477498][T21239] hsr_slave_1: left promiscuous mode [ 528.532945][T21236] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 528.542297][T21236] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 528.612720][T21243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4139'. [ 528.628493][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4139'. [ 528.674212][ T52] Bluetooth: hci1: command tx timeout [ 528.765872][T21251] syzkaller1: entered promiscuous mode [ 528.771383][T21251] syzkaller1: entered allmulticast mode [ 528.942360][T21264] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4146'. [ 528.990059][T21268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4145'. [ 529.129854][T21280] SET target dimension over the limit! [ 529.167053][T21285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4151'. [ 529.262606][T21289] netlink: 'syz.4.4153': attribute type 10 has an invalid length. [ 529.320156][T21292] syzkaller1: entered promiscuous mode [ 529.326733][T21292] syzkaller1: entered allmulticast mode [ 529.410760][T21298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.506276][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4157'. [ 529.639647][T21313] netlink: 'syz.1.4162': attribute type 2 has an invalid length. [ 529.865726][T21327] netlink: 'syz.3.4166': attribute type 5 has an invalid length. [ 530.675639][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.725891][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.188586][T21326] bond1: left promiscuous mode [ 531.250367][T21326] bond3: left promiscuous mode [ 531.289452][T21327] geneve2: entered promiscuous mode [ 531.295938][T21327] geneve2: entered allmulticast mode [ 531.339163][T21337] vlan2: entered promiscuous mode [ 531.352717][T21337] vlan2: entered allmulticast mode [ 531.361687][T21337] hsr_slave_1: entered allmulticast mode [ 531.386099][ T3428] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 531.415792][ T3428] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 531.437153][ T3428] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.464685][ T3428] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 531.498006][ T3428] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 531.534372][ T3428] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.564272][ T3428] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 531.592671][ T3428] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 531.622946][ T3428] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.683414][ T3428] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 531.725150][ T3428] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 531.745019][ T3428] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.813231][ T3428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 531.826629][ T3428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 531.847955][ T3428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 531.872148][ T3428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 531.906036][T21397] netlink: 'syz.2.4180': attribute type 1 has an invalid length. [ 531.942123][T21397] 8021q: adding VLAN 0 to HW filter on device bond15 [ 531.962109][T21397] vlan0: entered allmulticast mode [ 531.969281][T21397] bond15: (slave vlan0): Opening slave failed [ 532.032052][T21400] syzkaller0: entered promiscuous mode [ 532.038632][T21400] syzkaller0: entered allmulticast mode [ 532.048087][T21400] bridge_slave_1: left allmulticast mode [ 532.055728][T21400] bridge_slave_1: left promiscuous mode [ 532.085981][T21400] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.107579][T21400] bridge_slave_0: left allmulticast mode [ 532.123786][T21404] netlink: 'syz.3.4181': attribute type 3 has an invalid length. [ 532.137085][T21400] bridge_slave_0: left promiscuous mode [ 532.148838][T21400] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.172705][T21409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.369902][T21419] __nla_validate_parse: 7 callbacks suppressed [ 532.369920][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4185'. [ 532.490820][T21423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.545171][T21425] IPVS: set_ctl: invalid protocol: 32 0.0.0.0:20001 [ 532.577669][T21425] IPVS: set_ctl: invalid protocol: 12 6.0.0.0:0 [ 532.585229][T21425] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 532.642585][T21434] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4192'. [ 532.669789][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 532.680239][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 532.789590][T21438] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4193'. [ 532.799344][T21438] nbd: socks must be embedded in a SOCK_ITEM attr [ 532.812122][T21438] netlink: 'syz.3.4193': attribute type 29 has an invalid length. [ 532.820840][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 533.097739][T21364] hid-generic 0005:0B57:0401.0001: item fetching failed at offset 0/1 [ 533.109523][T21364] hid-generic 0005:0B57:0401.0001: probe with driver hid-generic failed with error -22 [ 533.148034][T21456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4199'. [ 533.581495][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4205'. [ 533.794635][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 534.820607][T21482] netem: incorrect gi model size [ 534.843437][T21482] netem: change failed [ 535.102285][T21506] x_tables: duplicate underflow at hook 1 [ 535.207077][T21511] netlink: 'syz.3.4214': attribute type 10 has an invalid length. [ 535.227423][T21511] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 535.381257][T21528] netlink: 'syz.4.4220': attribute type 1 has an invalid length. [ 535.420862][T21531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4215'. [ 535.436630][T21528] bond5: entered promiscuous mode [ 535.442339][T21528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.464339][T21532] bond5: (slave bridge1): making interface the new active one [ 535.472711][T21532] bridge1: entered promiscuous mode [ 535.479526][T21532] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 535.575800][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4215'. [ 535.839983][T21550] netlink: 'syz.2.4224': attribute type 12 has an invalid length. [ 535.872295][T21552] block nbd2: Unsupported socket: should be TCP or UNIX. [ 536.398152][T21590] lo speed is unknown, defaulting to 1000 [ 536.702906][T21612] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 536.871620][T21616] SET target dimension over the limit! [ 537.044744][T21627] netlink: 'syz.2.4246': attribute type 1 has an invalid length. [ 537.109415][T21627] 8021q: adding VLAN 0 to HW filter on device bond16 [ 537.186836][T21632] syzkaller0: entered allmulticast mode [ 537.230652][T21627] veth17: entered promiscuous mode [ 537.283867][T21632] netlink: 'syz.1.4247': attribute type 3 has an invalid length. [ 537.717128][T21655] __nla_validate_parse: 7 callbacks suppressed [ 537.717146][T21655] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4255'. [ 537.778383][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'. [ 537.789639][T21655] netlink: 'syz.1.4255': attribute type 4 has an invalid length. [ 537.802963][T21655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4255'. [ 537.806913][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4256'. [ 537.839209][T21660] bridge_slave_1: left allmulticast mode [ 537.846757][T21660] bridge_slave_1: left promiscuous mode [ 537.852452][T21660] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.865234][T21660] bridge_slave_0: left allmulticast mode [ 537.871447][T21660] bridge_slave_0: left promiscuous mode [ 537.878075][T21660] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.197651][T21674] tipc: Enabling of bearer rejected, failed to enable media [ 538.454264][T21674] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 538.482496][T21674] bond9 (unregistering): Released all slaves [ 538.645704][T21690] tipc: Enabled bearer , priority 0 [ 539.091927][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4273'. [ 539.106980][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4271'. [ 539.118026][T21715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4273'. [ 539.134150][T21715] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4273'. [ 539.170641][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4273'. [ 539.185820][T21720] netlink: 'syz.1.4272': attribute type 1 has an invalid length. [ 539.569783][T21745] bond6: option miimon: invalid value (18446744073709551585) [ 539.578584][T21745] bond6: option miimon: allowed values 0 - 2147483647 [ 539.616096][T21745] bond6 (unregistering): Released all slaves [ 539.695921][T21762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4285'. [ 540.108242][T21793] bond17: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 540.126573][T21793] bond17 (unregistering): Released all slaves [ 540.269744][T21799] lo speed is unknown, defaulting to 1000 [ 540.605353][T21824] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 540.998793][T21840] syzkaller1: entered promiscuous mode [ 541.052315][T21848] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 541.071483][T21840] syzkaller1: entered allmulticast mode [ 541.687871][T21840] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 541.744773][T21873] gtp1: entered promiscuous mode [ 542.072999][T21893] netlink: 'syz.2.4314': attribute type 8 has an invalid length. [ 542.090835][T21884] netlink: 'syz.2.4314': attribute type 8 has an invalid length. [ 542.102544][T21896] bridge0: entered allmulticast mode [ 542.854637][T21928] __nla_validate_parse: 24 callbacks suppressed [ 542.854655][T21928] netlink: 54 bytes leftover after parsing attributes in process `syz.1.4328'. [ 542.873719][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4328'. [ 543.326809][T21956] netlink: 'syz.3.4336': attribute type 1 has an invalid length. [ 543.369957][T21957] block nbd4: not configured, cannot reconfigure [ 543.654945][T21972] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.678053][T21977] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4342'. [ 544.960618][T21973] syzkaller1: entered promiscuous mode [ 544.967073][T21973] syzkaller1: entered allmulticast mode [ 545.152022][T21994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4345'. [ 545.195489][T21998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4346'. [ 545.457707][T22002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4347'. [ 545.471301][T22002] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4347'. [ 545.713044][T22028] SET target dimension over the limit! [ 545.753572][T22028] SET target dimension over the limit! [ 545.758828][T22032] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 545.959804][T22044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4357'. [ 545.994950][T22043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4356'. [ 546.062530][T22045] netlink: 'syz.4.4357': attribute type 1 has an invalid length. [ 546.070387][T22045] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4357'. [ 546.684378][T22080] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 546.812145][T22098] netlink: 'syz.2.4367': attribute type 1 has an invalid length. [ 547.694311][T22178] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 547.877168][T22190] __nla_validate_parse: 48 callbacks suppressed [ 547.877181][T22190] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.4395'. [ 548.106998][T22201] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4400'. [ 548.124444][T22201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4400'. [ 548.361020][T22221] netlink: 'syz.4.4407': attribute type 8 has an invalid length. [ 548.391647][T22221] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4407'. [ 548.654537][T22229] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.719575][T22239] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4413'. [ 548.830848][T22246] netlink: 'syz.3.4416': attribute type 10 has an invalid length. [ 548.841374][T22246] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4416'. [ 548.854406][T22246] netlink: 'syz.3.4416': attribute type 21 has an invalid length. [ 548.862419][T22246] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.875262][T22246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.882519][T22246] IPv6: NLM_F_CREATE should be set when creating new route [ 548.889835][T22246] IPv6: NLM_F_CREATE should be set when creating new route [ 548.897091][T22246] IPv6: NLM_F_CREATE should be set when creating new route [ 549.207124][T22264] veth17: entered allmulticast mode [ 549.217684][T22267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4423'. [ 549.247338][T22268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4423'. [ 549.248409][T22264] lo speed is unknown, defaulting to 1000 [ 549.527029][T22278] syzkaller0: entered promiscuous mode [ 549.532827][T22278] syzkaller0: entered allmulticast mode [ 549.588529][T22282] lo speed is unknown, defaulting to 1000 [ 549.672128][T22286] xt_l2tp: missing protocol rule (udp|l2tpip) [ 549.839018][T22288] netlink: 'syz.1.4428': attribute type 30 has an invalid length. [ 550.056927][T22294] bridge0: port 1(dummy0) entered disabled state [ 550.103736][T22293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4431'. [ 550.186259][T22295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4431'. [ 550.384091][ T2121] batman_adv: batadv1: IGMP Querier appeared [ 550.390132][ T2121] batman_adv: batadv1: MLD Querier appeared [ 550.747433][T22312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.136895][T22327] netlink: 'syz.1.4441': attribute type 15 has an invalid length. [ 551.189750][T22327] netlink: 'syz.1.4441': attribute type 15 has an invalid length. [ 551.286908][ T3556] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 551.310105][ T3556] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 551.340278][ T3556] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 551.486705][ T3556] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 551.819601][ T30] audit: type=1107 audit(1768835979.239:13): pid=22338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='w, [ 551.819601][ T30] iQc5@̻V| K TjT|N̐R1ɖv2bTZ ѿĄˋiGC`^iލi)!\9(ܲnͩ#Dׯ\ }r' [ 552.152154][T22344] netlink: 'syz.4.4446': attribute type 1 has an invalid length. [ 552.265053][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 552.348718][T22349] lo speed is unknown, defaulting to 1000 [ 552.379317][T22352] bond7: (slave geneve2): making interface the new active one [ 552.388439][T22352] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 552.419896][ T2121] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.441169][ T2121] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.452556][ T2121] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.478850][ T2121] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.894295][T22359] netlink: 'syz.2.4449': attribute type 1 has an invalid length. [ 552.902075][T22359] __nla_validate_parse: 4 callbacks suppressed [ 552.902091][T22359] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4449'. [ 553.366073][T22378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4453'. [ 554.040418][T22410] netlink: 'syz.1.4464': attribute type 29 has an invalid length. [ 554.054585][T22410] netlink: 'syz.1.4464': attribute type 29 has an invalid length. [ 554.074484][T22410] netlink: 'syz.1.4464': attribute type 29 has an invalid length. [ 554.082796][T22410] netlink: 'syz.1.4464': attribute type 29 has an invalid length. [ 554.102643][T22410] netlink: 'syz.1.4464': attribute type 29 has an invalid length. [ 554.114213][T22410] netlink: 'syz.1.4464': attribute type 29 has an invalid length. [ 554.122546][T22413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4463'. [ 554.141762][T22410] netlink: 'syz.1.4464': attribute type 29 has an invalid length. [ 554.151536][T22413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4463'. [ 554.289750][T22416] sctp: [Deprecated]: syz.3.4465 (pid 22416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.289750][T22416] Use struct sctp_sack_info instead [ 554.858071][T22427] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4470'. [ 554.901572][T22427] bond17 (unregistering): Released all slaves [ 555.266930][T22449] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4479'. [ 555.367521][T22453] netlink: 'syz.1.4481': attribute type 1 has an invalid length. [ 555.432794][T22453] bond9: entered promiscuous mode [ 555.445476][T22453] bond9: entered allmulticast mode [ 555.451152][T22453] 8021q: adding VLAN 0 to HW filter on device bond9 [ 555.517544][T22463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.529338][T22463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.641553][T22475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4487'. [ 555.800474][T22490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4487'. [ 555.886847][T22493] netlink: 'syz.3.4490': attribute type 1 has an invalid length. [ 555.938106][T22494] netlink: 'syz.1.4489': attribute type 15 has an invalid length. [ 555.951990][T22493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 556.237908][T22509] xt_bpf: check failed: parse error [ 556.248591][T22517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.316670][T22523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4498'. [ 556.454933][T22531] TCP: TCP_TX_DELAY enabled [ 556.486921][T22534] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4505'. [ 556.520103][T22534] syzkaller1: entered promiscuous mode [ 556.527732][T22534] syzkaller1: entered allmulticast mode [ 556.605713][T22537] bond17: option all_slaves_active: invalid value (222) [ 556.616779][T22537] bond17 (unregistering): Released all slaves [ 556.707784][T22544] syzkaller0: entered promiscuous mode [ 556.713511][T22544] syzkaller0: entered allmulticast mode [ 557.239063][T22573] bond0: Error: Cannot enslave bond to itself. [ 557.468407][T22593] tipc: Enabling of bearer rejected, failed to enable media [ 557.867364][T22623] sctp: [Deprecated]: syz.1.4530 (pid 22623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.867364][T22623] Use struct sctp_sack_info instead [ 558.021636][T22635] __nla_validate_parse: 6 callbacks suppressed [ 558.021657][T22635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4533'. [ 558.049063][T22635] SET target dimension over the limit! [ 558.126231][T22641] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 558.222311][T22648] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4537'. [ 558.516334][T22675] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4541'. [ 558.764731][T22697] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4548'. [ 558.881790][ T6546] lec:lec_start_xmit: lec0:No lecd attached [ 559.020045][T22711] syzkaller0: entered promiscuous mode [ 559.026451][T22711] syzkaller0: entered allmulticast mode [ 559.638892][T22735] syzkaller0: entered promiscuous mode [ 559.663645][T22735] syzkaller0: entered allmulticast mode [ 559.964430][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4563'. [ 560.086654][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 560.098094][T22759] validate_nla: 6 callbacks suppressed [ 560.098109][T22759] netlink: 'syz.3.4564': attribute type 7 has an invalid length. [ 560.157338][ T1015] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.169604][T22759] netlink: 'syz.3.4564': attribute type 7 has an invalid length. [ 560.199671][ T1015] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.208664][T22759] netlink: 'syz.3.4564': attribute type 28 has an invalid length. [ 560.217313][ T1015] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.227387][ T1015] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.535604][T22789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4572'. [ 562.199421][T22817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4577'. [ 562.247992][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 562.380776][T22830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4583'. [ 562.784270][T22853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.957159][T22856] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 562.992997][T22856] bond8 (unregistering): Released all slaves [ 563.019480][T22864] udevd[22864]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 563.043478][T22882] __nla_validate_parse: 3 callbacks suppressed [ 563.043498][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4591'. [ 563.102372][T22863] udevd[22863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 563.195479][T22870] syzkaller0: entered promiscuous mode [ 563.201099][T22870] syzkaller0: entered allmulticast mode [ 563.271381][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4596'. [ 563.319446][T22890] dvmrp6: entered allmulticast mode [ 563.331444][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4595'. [ 563.459007][T22896] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 563.659408][T22909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4605'. [ 563.829664][T22917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.023458][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms [ 564.031564][ C0] lec:lec_tx_timeout: lec0 [ 564.125253][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4611'. [ 564.176637][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4611'. [ 564.190327][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4611'. [ 564.200743][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4611'. [ 564.211153][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4611'. [ 564.224601][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4611'. [ 564.261055][T22950] netlink: 'syz.3.4615': attribute type 2 has an invalid length. [ 564.280274][T22950] 9: entered promiscuous mode [ 564.402547][T22959] syzkaller0: entered promiscuous mode [ 564.424213][T22959] syzkaller0: entered allmulticast mode [ 564.739123][T22983] openvswitch: netlink: IP tunnel TTL not specified. [ 564.924860][T22992] netlink: 'syz.3.4629': attribute type 1 has an invalid length. [ 564.953026][T22998] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 565.447585][T23034] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 565.491500][T23034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 565.523185][T23037] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 565.587640][T23038] syzkaller1: entered promiscuous mode [ 565.593210][T23038] syzkaller1: entered allmulticast mode [ 566.068888][T23060] netlink: 'syz.2.4647': attribute type 10 has an invalid length. [ 566.103095][T23060] dummy0: entered promiscuous mode [ 566.115029][T23060] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.152347][T23064] syzkaller0: entered promiscuous mode [ 566.169109][T23064] syzkaller0: entered allmulticast mode [ 566.502993][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e174c00: rx timeout, send abort [ 567.004269][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e175400: rx timeout, send abort [ 567.013177][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e174c00: abort rx timeout. Force session deactivation [ 567.512570][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e175400: abort rx timeout. Force session deactivation [ 568.377704][T23141] __nla_validate_parse: 37 callbacks suppressed [ 568.377723][T23141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4667'. [ 568.455914][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 568.577662][T23147] netlink: 'syz.4.4671': attribute type 10 has an invalid length. [ 568.987767][T23160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4673'. [ 569.106715][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 569.478441][T23181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4679'. [ 569.830138][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4688'. [ 569.863232][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f44e800: rx timeout, send abort [ 569.905863][T23213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4688'. [ 569.998258][T23218] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.4689'. [ 570.102680][T23222] syzkaller0: entered promiscuous mode [ 570.109240][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 570.131573][T23222] syzkaller0: entered allmulticast mode [ 570.204232][T23229] netlink: 'syz.4.4694': attribute type 8 has an invalid length. [ 570.371536][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f44e800: abort rx timeout. Force session deactivation [ 570.417776][T23237] : renamed from hsr0 [ 570.509247][T23245] netlink: 'syz.1.4698': attribute type 1 has an invalid length. [ 570.550127][T23248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4699'. [ 570.572681][T23245] bond10: (slave ip6gretap1): making interface the new active one [ 570.581926][T23245] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 570.763250][T23261] netlink: 'syz.3.4702': attribute type 1 has an invalid length. [ 570.782821][T23261] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4702'. [ 570.822100][T23263] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 570.835992][T23264] netlink: 'syz.1.4704': attribute type 2 has an invalid length. [ 571.015124][T23279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4707'. [ 571.044306][T23279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4707'. [ 571.721342][T23326] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 571.730843][T23326] netlink: 'syz.2.4720': attribute type 2 has an invalid length. [ 571.747240][T23326] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 571.755174][T23326] netlink: 'syz.2.4720': attribute type 2 has an invalid length. [ 572.407624][T23365] erspan0: entered promiscuous mode [ 572.721437][T23395] tipc: Enabling of bearer rejected, failed to enable media [ 573.015433][T23409] netlink: 'syz.4.4740': attribute type 21 has an invalid length. [ 573.025078][T23409] IPv6: NLM_F_CREATE should be specified when creating new route [ 573.032993][T23409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.040290][T23409] IPv6: NLM_F_CREATE should be set when creating new route [ 573.047575][T23409] IPv6: NLM_F_CREATE should be set when creating new route [ 573.054850][T23409] IPv6: NLM_F_CREATE should be set when creating new route [ 573.550883][T23436] netlink: 'syz.4.4746': attribute type 2 has an invalid length. [ 573.561101][T23436] __nla_validate_parse: 16 callbacks suppressed [ 573.561122][T23436] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4746'. [ 573.604279][T23438] netlink: 'syz.4.4746': attribute type 2 has an invalid length. [ 573.612154][T23438] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4746'. [ 573.728281][T23443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4748'. [ 573.747100][T23443] dummy0: left allmulticast mode [ 573.753082][T23443] bridge0: port 1(dummy0) entered disabled state [ 573.764246][T23443] batadv1: left allmulticast mode [ 573.769435][T23443] batadv1: left promiscuous mode [ 573.777219][T23443] bridge0: port 3(batadv1) entered disabled state [ 573.832813][T23443] bridge0 (unregistering): left allmulticast mode [ 573.987848][T23463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4753'. [ 574.024795][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 574.032852][ C0] lec:lec_tx_timeout: lec0 [ 574.071779][T23468] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4755'. [ 574.408774][T23489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4763'. [ 574.502476][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4765'. [ 575.142459][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 575.425486][T23564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.947713][T23598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4793'. [ 576.244350][T23622] netlink: 'syz.3.4795': attribute type 12 has an invalid length. [ 576.613146][T23632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4797'. [ 576.960398][T23655] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 577.026622][T23661] netlink: 'syz.4.4802': attribute type 33 has an invalid length. [ 577.221832][T23566] block nbd64: NBD_DISCONNECT [ 577.542039][T23573] udevd[23573]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 577.612314][T23699] netlink: 'syz.2.4814': attribute type 12 has an invalid length. [ 577.878268][T23715] siw: device registration error -23 [ 578.105726][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 578.670922][T23793] netlink: 'syz.4.4837': attribute type 1 has an invalid length. [ 578.704604][T23794] __nla_validate_parse: 6 callbacks suppressed [ 578.704734][T23794] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4837'. [ 578.857058][T23793] 8021q: adding VLAN 0 to HW filter on device bond8 [ 578.888670][T23805] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4840'. [ 579.070112][T23808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4841'. [ 579.079228][T23808] block nbd2: Unsupported socket: should be TCP or UNIX. [ 579.139337][T23812] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4842'. [ 579.323131][T23825] tipc: Enabling of bearer rejected, already enabled [ 579.432190][T23812] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 579.551126][T23836] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4847'. [ 579.784629][T23860] netlink: 'syz.4.4854': attribute type 1 has an invalid length. [ 579.815446][T23860] 8021q: adding VLAN 0 to HW filter on device bond9 [ 579.872080][T23860] veth7: entered promiscuous mode [ 579.882766][T23860] bond9: (slave veth7): Enslaving as an active interface with a down link [ 579.909582][T23860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4854'. [ 580.085640][T23876] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 580.232008][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 580.238123][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.249680][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4857'. [ 580.252968][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.267778][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.275744][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.283277][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 580.326989][T23882] lo speed is unknown, defaulting to 1000 [ 580.460613][T23861] netlink: 'syz.2.4852': attribute type 1 has an invalid length. [ 580.646918][T23887] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 580.676356][T23893] netlink: 'syz.4.4860': attribute type 21 has an invalid length. [ 580.685838][T23893] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4860'. [ 580.697013][T23887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4858'. [ 581.097314][T23915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.132914][T23906] syzkaller0: entered promiscuous mode [ 581.140097][T23906] syzkaller0: entered allmulticast mode [ 581.201707][T23922] Cannot find del_set index 4 as target [ 582.346975][ T52] Bluetooth: hci6: command tx timeout [ 582.629747][T23920] syzkaller1: entered promiscuous mode [ 582.635986][T23920] syzkaller1: entered allmulticast mode [ 582.930646][T23939] syzkaller0: entered promiscuous mode [ 582.954341][T23939] syzkaller0: entered allmulticast mode [ 583.482972][T23972] tunl0: Caught tx_queue_len zero misconfig [ 583.502583][T23882] chnl_net:caif_netlink_parms(): no params data found [ 583.643800][T23980] netlink: 'syz.2.4891': attribute type 2 has an invalid length. [ 583.740707][T23987] IPVS: set_ctl: invalid protocol: 108 172.30.1.3:20002 [ 583.750180][T23882] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.775958][T23882] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.786591][T23882] bridge_slave_0: entered allmulticast mode [ 583.795349][T23882] bridge_slave_0: entered promiscuous mode [ 583.805100][T23882] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.812409][T23882] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.820743][T23882] bridge_slave_1: entered allmulticast mode [ 583.829659][T23882] bridge_slave_1: entered promiscuous mode [ 583.929773][T23882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.960458][T23882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.056762][T23882] team0: Port device team_slave_0 added [ 584.065702][T24002] __nla_validate_parse: 2 callbacks suppressed [ 584.065719][T24002] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4900'. [ 584.092999][T23882] team0: Port device team_slave_1 added [ 584.187781][T23882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.212016][T23882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.291094][T23882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.316078][T23882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.323227][T23882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.354032][T23882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.365996][T24015] netlink: 'syz.4.4902': attribute type 10 has an invalid length. [ 584.419270][T24019] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4905'. [ 584.433833][ T52] Bluetooth: hci6: command tx timeout [ 584.441333][T24019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'. [ 584.455338][T24015] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 584.631503][T23882] hsr_slave_0: entered promiscuous mode [ 584.650443][T23882] hsr_slave_1: entered promiscuous mode [ 584.661795][T23882] debugfs: 'hsr0' already exists in 'hsr' [ 584.669233][T23882] Cannot create hsr debugfs directory [ 584.685239][T24035] syzkaller0: entered promiscuous mode [ 584.714524][T24035] syzkaller0: entered allmulticast mode [ 584.776526][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4911'. [ 584.807255][T24039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4911'. [ 584.845310][T24037] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4911'. [ 585.081511][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4917'. [ 585.101813][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4917'. [ 585.228511][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4919'. [ 585.500042][T24093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4925'. [ 585.820044][T24113] netlink: 'syz.1.4931': attribute type 21 has an invalid length. [ 585.833062][T24113] netlink: 'syz.1.4931': attribute type 6 has an invalid length. [ 586.040658][T24116] macvtap0: entered promiscuous mode [ 586.050117][T24116] vlan0: entered promiscuous mode [ 586.058447][T24116] macvtap0: entered allmulticast mode [ 586.065795][T24116] vlan0: entered allmulticast mode [ 586.071039][T24116] veth0_vlan: entered allmulticast mode [ 586.289208][T24088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 586.296327][T24088] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 586.370377][T24088] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 586.379926][T24088] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 586.792760][T24157] xt_hashlimit: size too large, truncated to 1048576 [ 586.902056][T24165] bridge4: entered promiscuous mode [ 586.910077][T24171] x_tables: duplicate underflow at hook 1 [ 586.926647][T24165] bridge4: entered allmulticast mode [ 587.428227][T24208] netlink: 'syz.2.4956': attribute type 11 has an invalid length. [ 587.531923][T24214] syzkaller0: entered allmulticast mode [ 587.590200][T24218] syzkaller1: entered promiscuous mode [ 587.596602][T24218] syzkaller1: entered allmulticast mode [ 587.845747][T24235] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 588.258837][T24270] netlink: 'syz.2.4976': attribute type 33 has an invalid length. [ 588.527653][T24287] xt_hashlimit: size too large, truncated to 1048576 [ 589.022861][T24318] netlink: 'syz.2.4991': attribute type 6 has an invalid length. [ 589.471525][ T5846] block nbd2: Receive control failed (result -32) [ 589.836340][T24376] syzkaller0: entered promiscuous mode [ 589.842474][T24376] syzkaller0: entered allmulticast mode [ 589.909131][T24371] __nla_validate_parse: 17 callbacks suppressed [ 589.909145][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 589.927870][T24380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5007'. [ 589.995279][T24380] geneve3: entered promiscuous mode [ 590.000603][T24380] geneve3: entered allmulticast mode [ 590.341800][T24394] openvswitch: netlink: Message has 1 unknown bytes. [ 590.350504][T24394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.361065][T24394] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 590.468329][T24396] 8021q: VLANs not supported on ip_vti0 [ 591.078644][T24437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5020'. [ 591.135638][T24440] netlink: 'syz.4.5021': attribute type 4 has an invalid length. [ 591.167609][T24440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5021'. [ 591.328028][T24441] vlan4: entered promiscuous mode [ 591.333091][T24441] bridge0: entered promiscuous mode [ 591.489889][T24464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5027'. [ 591.504581][T24464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5027'. [ 591.569882][T24471] sit0: Caught tx_queue_len zero misconfig [ 591.664761][T24475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5030'. [ 591.889577][T24486] syzkaller0: entered promiscuous mode [ 591.901669][T24490] netlink: 'syz.2.5037': attribute type 4 has an invalid length. [ 591.909217][T24486] syzkaller0: entered allmulticast mode [ 591.924028][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5037'. [ 593.521897][T24499] nlmon0: Caught tx_queue_len zero misconfig [ 593.670475][T24526] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5047'. [ 593.758318][T24536] xt_TCPMSS: Only works on TCP SYN packets [ 593.834944][T24530] 8021q: adding VLAN 0 to HW filter on device bond11 [ 594.050608][T24551] bond17: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 594.064821][T24551] bond17 (unregistering): Released all slaves [ 594.311969][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5055'. [ 594.856454][T24610] x_tables: duplicate underflow at hook 4 [ 594.911789][T24614] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 595.026601][T24624] __nla_validate_parse: 9 callbacks suppressed [ 595.026620][T24624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5071'. [ 595.083069][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5073'. [ 595.095910][T24626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5073'. [ 595.139925][T24626] geneve4: entered promiscuous mode [ 595.151620][T24626] geneve4: entered allmulticast mode [ 595.170364][ T7504] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.179495][ T7504] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.188323][ T7504] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.197851][ T7504] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.197979][T24639] netlink: 'syz.4.5075': attribute type 16 has an invalid length. [ 595.567733][T24662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 595.610491][T24662] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.665461][T24672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5088'. [ 595.720290][T24673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5088'. [ 595.846301][T24686] tipc: Enabled bearer , priority 0 [ 595.854873][T24686] syzkaller0: entered promiscuous mode [ 595.860459][T24686] syzkaller0: entered allmulticast mode [ 595.924183][T24686] tipc: Resetting bearer [ 595.933855][T24684] tipc: Resetting bearer [ 596.024993][T24684] tipc: Disabling bearer [ 596.387335][T24699] netlink: 'syz.1.5097': attribute type 6 has an invalid length. [ 596.864033][T24717] netlink: 'syz.1.5102': attribute type 11 has an invalid length. [ 596.872218][T24717] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5102'. [ 597.015220][T24731] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 597.755859][T24760] netlink: 'syz.2.5112': attribute type 29 has an invalid length. [ 597.764712][T24760] netlink: 'syz.2.5112': attribute type 29 has an invalid length. [ 598.011958][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5120'. [ 598.022305][T24780] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 598.081873][T24782] vlan1: entered promiscuous mode [ 598.089381][T24782] gretap0: entered promiscuous mode [ 598.127988][T24784] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5122'. [ 598.152666][T24782] tipc: New replicast peer: 255.255.255.255 [ 598.159722][T24782] tipc: Enabled bearer , priority 10 [ 598.180217][T24782] tipc: Bearer : already 2 bearers with priority 10 [ 598.189561][T24782] tipc: Bearer : trying with adjusted priority [ 598.200361][T24782] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 598.370490][T24800] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 598.755457][T24815] netlink: 'syz.3.5129': attribute type 1 has an invalid length. [ 598.774449][T24815] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5129'. [ 598.786613][T24816] netlink: 'syz.3.5129': attribute type 1 has an invalid length. [ 598.795598][T24816] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5129'. [ 599.959602][T24891] xt_ecn: cannot match TCP bits for non-tcp packets [ 600.632328][T24926] __nla_validate_parse: 8 callbacks suppressed [ 600.632346][T24926] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5161'. [ 601.909290][T24930] netlink: 380 bytes leftover after parsing attributes in process `syz.3.5163'. [ 601.932619][T24928] syzkaller0: entered promiscuous mode [ 601.948331][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5164'. [ 601.957951][T24928] syzkaller0: entered allmulticast mode [ 601.964540][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5164'. [ 602.262053][T24958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5171'. [ 602.289210][T24958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5171'. [ 602.314216][T24964] : renamed from veth1_vlan (while UP) [ 602.651930][T24977] block nbd3: Unsupported socket: should be TCP or UNIX. [ 602.720772][T24981] syzkaller1: entered promiscuous mode [ 602.733072][T24981] syzkaller1: entered allmulticast mode [ 602.743811][T24980] tipc: Enabling of bearer rejected, failed to enable media [ 602.911270][T24994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5181'. [ 602.946888][T24998] netlink: 'syz.4.5182': attribute type 1 has an invalid length. [ 602.958600][T24998] netlink: 'syz.4.5182': attribute type 1 has an invalid length. [ 603.034152][T25003] netlink: 'syz.2.5183': attribute type 2 has an invalid length. [ 603.045623][T25003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5183'. [ 603.248699][T25012] syzkaller1: entered promiscuous mode [ 603.255508][T25012] syzkaller1: entered allmulticast mode [ 603.817703][T25057] tipc: Enabled bearer , priority 0 [ 603.840730][T25057] syzkaller0: entered promiscuous mode [ 603.851244][T25057] syzkaller0: entered allmulticast mode [ 603.866175][T25057] tipc: Resetting bearer [ 603.922506][T25056] tipc: Resetting bearer [ 603.954064][T25056] tipc: Disabling bearer [ 603.962529][T25068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5204'. [ 604.043080][T25074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5204'. [ 604.453212][T25104] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 604.461716][T25104] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 604.470272][T25104] netlink: 'syz.3.5212': attribute type 2 has an invalid length. [ 604.478675][T25104] netlink: 'syz.3.5212': attribute type 2 has an invalid length. [ 604.487563][T25104] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 604.958587][T25131] netlink: 'syz.1.5219': attribute type 2 has an invalid length. [ 605.021607][T25133] netlink: 'syz.2.5221': attribute type 6 has an invalid length. [ 605.087268][T25137] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 605.489127][T25173] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 605.732919][T25192] ip6t_srh: unknown srh match flags 4000 [ 605.747433][T25194] __nla_validate_parse: 3 callbacks suppressed [ 605.747455][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5235'. [ 605.879196][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5237'. [ 605.980859][T25207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5239'. [ 606.084312][T25213] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5241'. [ 606.328687][T25225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.526156][T25236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5250'. [ 606.586048][T17889] unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 [ 606.603879][T17889] ref_tracker: netdev@ffff88807fea8618 has 1/1 users at [ 606.603879][T17889] xfrm_dev_state_add+0x6ec/0xc00 [ 606.603879][T17889] xfrm_add_sa+0x34ae/0x4220 [ 606.603879][T17889] xfrm_user_rcv_msg+0x7a3/0xab0 [ 606.603879][T17889] netlink_rcv_skb+0x208/0x470 [ 606.603879][T17889] xfrm_netlink_rcv+0x79/0x90 [ 606.603879][T17889] netlink_unicast+0x82f/0x9e0 [ 606.603879][T17889] netlink_sendmsg+0x805/0xb30 [ 606.603879][T17889] __sock_sendmsg+0x21c/0x270 [ 606.603879][T17889] ____sys_sendmsg+0x505/0x820 [ 606.603879][T17889] ___sys_sendmsg+0x21f/0x2a0 [ 606.603879][T17889] __x64_sys_sendmsg+0x19b/0x260 [ 606.603879][T17889] do_syscall_64+0xec/0xf80 [ 606.603879][T17889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.603879][T17889] [ 606.721445][T25243] lo speed is unknown, defaulting to 1000