last executing test programs: 1m39.303108548s ago: executing program 0 (id=3841): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'erspan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f00000001c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x5c, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdfff, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@offload={0xc, 0x1c, {r4, 0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m39.139670861s ago: executing program 0 (id=3846): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@initdev, 0x0}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x3}, @fwd={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xea73}}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x41, 0x0, 0x5f, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000300)=""/30, 0xb4, 0x1e, 0x1, 0xc67}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x27, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x65e0, 0x0, 0x0, 0x0, 0x1a23b1a9}, @jmp={0x5, 0x0, 0x4, 0x2, 0x5, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ldst={0x0, 0x3, 0x2, 0x4, 0x7, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x6, 0x4, 0xfff7, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x2c, r2, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[r3, 0x1, r4], &(0x7f0000000500)=[{0x4, 0x5, 0xe, 0xc}, {0x2, 0x5, 0x1, 0x9}, {0x5, 0x2, 0x0, 0x8}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0x9eee082}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000600)={[{0x2b, 'hugetlb'}, {0x2d, 'pids'}]}, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'sit0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, r6, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffff8, 0x2e}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9c4ab7aef2b35739260bd87c7e"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "fcf5275665b77af35528bd"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000880)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000900), &(0x7f0000000940)=0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', r1, 0x1, 0x8, 0x8001, 0x80000000, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x65, 0x0, 0x7f, 0x4, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x23, 0x5, [@broadcast, @remote, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @local]}, @generic={0x44, 0xd, "4c1cba95f89ff7bf586726"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1d4, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004}, 0x1) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000d40)=0x200306, 0x4) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x1, &(0x7f0000000e00)=@raw=[@alu={0x4, 0x0, 0x8, 0x4, 0x6, 0x80, 0x1}], &(0x7f0000000e40)='GPL\x00', 0xfffffffc, 0x9a, &(0x7f0000000e80)=""/154, 0x41100, 0x39, '\x00', 0x0, @fallback=0x1e, r0, 0x8, &(0x7f0000000f40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x6, 0xa099, 0x3}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001080)=r11, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000010c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffffffffffff, "071ad970176e1a732afad085d19b0ec5b8e0fe1542b05e7434e554bea651a5a6", 0xd119, 0x2, 0x1, 0x800}, 0x3c) bind$bt_l2cap(r0, &(0x7f0000001100)={0x1f, 0x3, @any, 0x5f, 0x1}, 0xe) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r12, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) write$cgroup_int(r0, &(0x7f0000001280)=0xffff, 0x12) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001300), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r13, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xd0bf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc814}, 0x44000) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xff, 0x4}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x820) 1m39.059675731s ago: executing program 2 (id=3847): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000015c0)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x98}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 1m38.896547728s ago: executing program 2 (id=3850): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000000740)=0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000580)=0x2000, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x5, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000040)={@dev, @local, @broadcast}, &(0x7f0000000300)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {0xffff, 0x2}, {0xa, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff2}, {0x2, 0xfff3}, {0x9, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000540)={@loopback, @multicast1, r5}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x4c, r7, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000005000028014000100000000000000000000000000000000010600020050000000080003000200000008000400010000000800050000000000080006000000000006000e004e21000005000d0009"], 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) socket$kcm(0x29, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000700)={&(0x7f00000005c0)=[{0x5, 0x4, 0xffff, 0x6, 0xcb8}, {0x401, 0x3, 0x100000000, 0x8, 0x6}, {0x50c, 0x1000000000000, 0x13, 0xffffffffffffff43, 0x9}, {0x5, 0x7fffffff, 0xfffffffffffffdb8, 0xdd71, 0x3}, {0x5eea, 0x2, 0x81, 0x9, 0x80000001}, {0x6, 0xfffffffffffff801, 0x5, 0x1}, {0xfffffffffffffffc, 0xffffffffffff5cda, 0x0, 0x3, 0x8}, {0x3, 0xc932, 0x8000000000000000, 0x7, 0x7}], 0x8, 0x28, 0xeb5a, 0x8000000000000000}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1318371559927769d3", 0x9}], 0x1}, 0x40) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'team_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@ipv6_newaddr={0x34, 0x14, 0x4, 0x70bd26, 0x25dfdbfa, {0xa, 0x38, 0xa, 0xfe, r5}, [@IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x44) 1m38.895934678s ago: executing program 0 (id=3851): socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r0], 0x24}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=@ipv4_getnexthop={0x24, 0x6a, 0xa30, 0x70bd29, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x24}, 0x1, 0xba01, 0x0, 0x4000880}, 0x0) 1m38.741122729s ago: executing program 3 (id=3852): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000), 0x4) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4c881}, 0x80) 1m38.596688115s ago: executing program 2 (id=3855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@caif=@rfm={0x25, 0x7, "2710f00238f214bf3688c4f272d02c05"}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="4ba72c4c46e8446b99c6e5ea2c66a5660200d697", 0x14}, {&(0x7f00000009c0)="561d50e1d0235d9b31f6641157db20a223d370e51abe44c4", 0x18}], 0x2, 0x0, 0x0, 0x11000000}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x18}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000a00)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a80)='veth0\x00'}) unshare(0x20000400) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000440)=0x27) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="760a00000000000061112c00000000001800000000000000000000000000000095"], &(0x7f0000000bc0)='GPL\x00'}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000c00)=@generic={0x0, r5}, 0x18) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="f9369254c92970a4", 0x8}], 0x1}}], 0x2, 0x40) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000090d000000000000e1a551b7c2c14ffcd41f44b5d2a8b22b7d1896d100a26e5af1980f9e1fa776a0547777", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000500"/28], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r9, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB='\b\x00'/20, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="04000000030000000300000000000000000020000000000000000000"], 0x50) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m38.513343108s ago: executing program 4 (id=3857): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x8044091) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000810) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb966, 0x7d}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x90) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r8, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "5e72bafb45533c312d6c095cc9c6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x64880}, 0x800) openat$cgroup_devices(r3, &(0x7f0000000940)='devices.allow\x00', 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044800}, 0x8000) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x134, 0x12, 0x300, 0x70bd26, 0x25dfdbfd, {0x10, 0x23, 0x5, 0x2, {0x4e23, 0x4e20, [0xc, 0x1, 0x9, 0x6], [0x7fff, 0x21, 0x346400, 0x58ad], 0x0, [0xffff, 0x1]}, 0x3, 0x435da474}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "6d6a1f4e6f4cd2e6fea874bdf3a5b421fc05563a21946ac97d4f7db002b8302f79f39604b35e2b787e30"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "14ffb6d047a62a45396f4ea15e851492f7ac3a6e73af61a56e79b3d05a122ab297200489becfb0fcb70319dd0504038a65a733383e5ecad0be15ce29218595b4194f3a9007229b3778f41095f5dc4c902587faffb4aa05f5a33e8954eaceafa092b74f0b9ff811bc8f4e938ea5b19b581fa95e755775e9935930441f40625151c21aeec2941ff92e20f2ec128846800b70a3abd53d5ff272f92ad9add3b3b9a8868c8c66f2d518a2c8b693e65a11cb6d7b77"}]}, 0x134}, 0x1, 0x0, 0x0, 0xc041}, 0x8000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x800) ioctl$sock_ifreq(r9, 0x8917, &(0x7f0000000dc0)={'wg2\x00', @ifru_data=&(0x7f0000000d80)="5a3191dfcfe66d83383fee270d55b1f6284fd22ab379d0cf0ae3544a81f7b9f9"}) ioctl$sock_netdev_private(r9, 0x89ff, &(0x7f0000000e00)="3e8051620d719bf5e9536d139efcd1cb1f7936") r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e80), r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r10, 0x75009a94045086db, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) bind(r9, &(0x7f0000000f80)=@in={0x2, 0x4e23, @loopback}, 0x80) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xecba, 0x78}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x7, 0x34, @random="893547"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f7edd946628"}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x48}}, 0x840) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x88, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}}, 0x20000800) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40080c1) 1m38.510383961s ago: executing program 3 (id=3858): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000004c0), 0x12) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000006c0)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x773c1000) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000001c0)={0x0, 0x6}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) syz_emit_ethernet(0x56, &(0x7f0000000780)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x2, 0x6, 0xfffffffd}]}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), &(0x7f0000000500)=@tcp6=r3}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x4c, 0x13, 0x100, 0x70bd2c, 0x25dfdbff, {0x1, 0x70, 0x6, 0x7, {0x4e22, 0x4e24, [0x1ff, 0x3, 0xfff, 0x1], [0x7, 0x121, 0xabaf, 0x80000001], 0x0, [0x2a, 0x3]}, 0x3, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000006c0), 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)='.', 0xc400}], 0x7}}], 0x44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd5030100177400407b3000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m38.252320699s ago: executing program 1 (id=3860): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="54010000100001002cbc700000000000ff02001d000000000000000000000001fc020000000000000000000000000000fffcecdf000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000000000000000000fefffffffffffffffcffffffffffffff040000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000c0000000000000001000000000000000008400000000000030000000000000092020000000000000010000000000000000000000000000000000000020004002c00000000000000580002006362632874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x154}}, 0x44050) 1m38.184970372s ago: executing program 3 (id=3861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x28000025) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)}], 0x1) sendmsg$nl_route(r2, 0x0, 0x40008c0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000480)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r7}, &(0x7f00000004c0)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000500)={r7, 0xb1e}, &(0x7f0000000540)=0x8) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000001540)=0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x301c40, 0x0) write$tun(r8, &(0x7f0000000200)={@void, @void, @llc={@snap={0x0, 0x0, "fb", "b9e3d3", 0x10, "a0a784a084225e7c7ecc17af5acabf6ee934f0227fa8094bc6030aaa30e57304731194aa7cc173cff4084df9737f244a9e9a8befbb9e94fa6b401bd9137a626f80afb2854196885fe938c393717764e1fdb4e1f4ebb14ce52352d207d4e8f34a2c0553f989a9d54eed9c"}}}, 0x72) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000400)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) write(r9, &(0x7f0000000680)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000006c0)=0x7, 0x4) sendto(r9, &(0x7f0000000700)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r9, 0x0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10140, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000140)}, 0x1}], 0x1, 0x10022, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, &(0x7f0000000140)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000310009002abd700000000000040000002c0011802ebe83"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m38.08404941s ago: executing program 2 (id=3862): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "b37454101820bebd", "e42e4c0725eb41fc13e74cc76d7f243f", "2dca58ab", "183a9a8103ed7515"}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) 1m38.010875292s ago: executing program 1 (id=3863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) 1m37.954345216s ago: executing program 4 (id=3864): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) recvfrom$rxrpc(r0, &(0x7f00000006c0)=""/237, 0xed, 0x12000, &(0x7f0000000880)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @local, 0x60000}}, 0x24) 1m37.85485895s ago: executing program 2 (id=3865): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x7, 0x2, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x8, 0xe, 0x4}}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/227, 0x1c}], 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) sendto$packet(r4, &(0x7f0000000940)="5c0cdb7605962ca17850c15f2a39e2d2564645b9e073afd574fc6b951db5b8d8cd3cb10fcfa327d5417796a012c85b149c7a2dc0b97404d37552b00230126ee3beb68d864a2e495e55424f22d781f52b0114bbd170d56af44d2273b074661fc1249e4b14c02fbf59fccb3e99ab7dfb217692ff11238cc564b7208d3ec089209d8577f11f3dc3c55a5babda2f34c72b450ee80dd3bceb3d6174c64db948ba345f586de7ceb19e854646", 0xa9, 0x24004841, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000840)=0xaf) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x140, 0x7, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x64, 0x7efb, 0xaf, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x72, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x5}, {@multicast2, 0x2}, {@remote, 0x200}, {@rand_addr=0x64010102, 0x8}, {@private=0xa010100, 0xc00000}, {@broadcast, 0x7}, {@broadcast}, {@local, 0x5}]}, @rr={0x7, 0x7, 0xf3, [@rand_addr=0x64010102]}, @generic={0x89, 0xa, "c09b46545e81181d"}]}}}}}) r7 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r7, &(0x7f0000000600)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private2, 0x9}}, 0x24) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000003c0)={'veth0\x00', 0x1}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0xb4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xb4}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r8, &(0x7f0000001580)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000001540)={&(0x7f00000011c0)=@bridge_setlink={0x350, 0x13, 0x20, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x41, 0x4}, [@IFLA_VFINFO_LIST={0x314, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0xb2, 0xbc9, 0x9650}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffa, 0xdd}}, @IFLA_VF_TRUST={0xc, 0x9, {0x200, 0x6b71}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2392}}, @IFLA_VF_RATE={0x10, 0x6, {0x8000, 0x2b1, 0xfffffff8}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0xfffffff8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x7f}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x49edd72d, 0x4}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0xf0f, 0xffffffff, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0xee9, 0x7f3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x5810d771}}]}, {0x104, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x3fa, 0x0, 0x88a8}}, {0x14, 0x1, {0x6e8445f2, 0x551, 0x400, 0x8100}}, {0x14, 0x1, {0x8, 0x2d7, 0xcef, 0x88a8}}, {0x14, 0x1, {0x5, 0xd06, 0x1, 0x8100}}, {0x14, 0x1, {0x3, 0xb93, 0x7ff, 0x8100}}, {0x14, 0x1, {0x1, 0x3c8, 0xb2, 0x88a8}}, {0x14, 0x1, {0x0, 0x1d2, 0x1, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xadd, 0xe}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xc889}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x9}}]}, {0x11c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x100, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @link_local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x3}}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xee7, 0x6, 0x8100}}, {0x14, 0x1, {0x4, 0xd98, 0x9e, 0x88a8}}, {0x14, 0x1, {0xfffffff7, 0x713, 0x3, 0x8100}}, {0x14, 0x1, {0x3, 0x190, 0x6, 0x88a8}}, {0x14, 0x1, {0x5, 0x9b8, 0x9, 0x88a8}}, {0x14, 0x1, {0x1, 0xf85, 0x1, 0x8100}}, {0x14, 0x1, {0xfff, 0x5d0, 0x1, 0x88a8}}, {0x14, 0x1, {0x7, 0x281, 0xc, 0x8100}}, {0x14, 0x1, {0x100, 0x2dd, 0x7, 0x8100}}, {0x14, 0x1, {0x6, 0x9fa, 0x343, 0x88a8}}]}]}, {0x4}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x898b}]}, 0x350}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendto$packet(r11, &(0x7f0000000580)="00112233445500aabbccddee080045000028000100004006f9d37f0000017f00000100500050000000000000000050022000b1a70000", 0x36, 0x0, &(0x7f00000005c0)={0x11, 0x300, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f00000039c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003980)={&(0x7f0000003a00)={0x27bc, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_GROUPS={0x29c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x70000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7f8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']\x13@^S\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "ccf3e2dcca51a999a197d82a372c95715d59606ef55d9f23a06e6e95ed53dd19f5f66eadffe3555035618652d26a4efcac9b58f7f35dbcba29ddc62f58dcd4a2b71740cf782151b354980159ab1b11da8fdffab23e6a4166dd4eeedf8b97e992a5d328135dc858ad599a2b7af982612f00ae961e9c7fcb4cb0bf78df927643fc8ee122075e29fa0772fdc257d0b48ac909df11373c7e0cc4bd1971428d356d8d65063ac7142229b5a5433eee0ca81e1cc722f9d2d6432ef146abb5520a39a7b29446a6b2a47524f439149e601462046666c2bf8d032240daf61fdede28"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '{(/#:&!%}a!)\xf2,#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8d13}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x180000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xdf}\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "f91e965e831ba5647f704553ce0a3a1df4897e8638231f5adda0baecd00abe67a7d463ade0555cf9c5dd1d916ca0ee270d55f54856fd0840bb66064bb55662cab3ee05"}]}, @ETHTOOL_A_STATS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STATS_GROUPS={0x2410, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xff, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x419}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3113878a}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'Q\'\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5def}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "a9c7a8fdbeaa58f3623f00cfcedc7014e9d096d6e23b594eff5b1fe84129b402ad849bdafbca857aaa43ba36764c72e51dc3da1073de23588f1b266fed7bf76653352409eb1166fd33304b59f56d4055f8bb20708bd1b33eaa7051d104c25dfca37a9ca6800cc636cf03fce829f72fa9313369"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "d3af241d225845ccc144a79d123fb51a1ef4b3bbccab45f3ee07541454b9c139bbca94aff92bfb5fb84557393c55753007ebe5e90a7739c9688ec87789f07b6cf7236727ff26d3f437a4631460eef8fea7eb9e40fb1e9956ff9ee25c89fdd31355dddd60c408ac4428a81998891b4865dd6bfa4f3bb69f985c835b0235314318009217c2c94a1cf7d90d68c0b87abb683ee9c6073effd7aa03"}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "c8be2e9c7cde2bab45fb5d10db1e922cc8908cbd92104d590e0c65c9b5480b7309d08610a72938183aa8952468e1ce44518b2f7b2a5bf1e50f15cbc6242620d9a8952de57d29613413688c0c1ac6a26e4f5251d5c7f8123f8f25ce525732ac988e35c10414914a040360a8281935b041dbce191d481fb0d093a16d705b1a59f8a4459a1c12636f530572ee009af468bac0309b259ccb5927c0d793687424e838856ce684c1959473fb948aba4b37478c8efb0d749c63ee6e3fa65afc416709957946dcaf4d7426b37fd962fa3b7677d0"}]}, @ETHTOOL_A_STATS_GROUPS={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "badc0e380c4c767a98dca90190512c592a47196f4ee6f7f3a492e36bfb34f2de8b5cab2402d9e81ee2bea2d9d43740b63a2603"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_STATS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x27bc}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) 1m37.791704703s ago: executing program 1 (id=3866): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) getsockname$packet(r4, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0xa) sendmsg$nl_route(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14) sendmsg$nl_route(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r9, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001006f626a726566000014000280080003400000000b080004"], 0x7c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xffffffff], [0xffffffff], 'bridge_slave_1\x00', 'dvmrp1\x00', {0xff}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0xf7, 0x3}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x1, {0x8000000000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7, 0xfffffffd}}}}, 0x2f0) sendto$packet(r1, &(0x7f0000000b80)="01154e0001000011221e445588fbca0100011606", 0x1c, 0x4044015, &(0x7f0000000180)={0x11, 0x0, r2, 0x0, 0x0, 0x0}, 0xfffffffffffffff2) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/105, 0xdd, 0x69, 0x0, 0x3ff}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x5, '\x00', r2, r11, 0x0, 0x4}, 0x50) r12 = socket(0x0, 0xa, 0x3) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x80, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x59}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x92}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2147}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8086}, 0x40004) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040002}, 0xc, &(0x7f0000000d00)={&(0x7f00000001c0)={0xd4, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2000000}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x2000000, 0xffffffff, 0x1]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}]}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000844}, 0x24000040) 1m37.718291596s ago: executing program 4 (id=3867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207a1bf0ff00000000bfa100000000001007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) 1m37.603594185s ago: executing program 0 (id=3868): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000102000000000000000018110090", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff000000008d09000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.597517381s ago: executing program 0 (id=3869): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000000)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={r5, 0x200}, 0x8) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000080)=0xccb, 0x4) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x38}}, 0x4048854) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10) 1m37.540775386s ago: executing program 1 (id=3870): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000006408001f00000000006c000a80140007"], 0x134}}, 0x0) 1m37.540372697s ago: executing program 4 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) 1m37.48215475s ago: executing program 4 (id=3872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x1, 0x1070bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000740), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1d, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d8a4, r4, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) 1m37.471450667s ago: executing program 0 (id=3873): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f00000003c0)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x27}, {&(0x7f0000000440)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073811ee5463236d9c025e46bbe64fa"}, {&(0x7f0000000640)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5"}, {&(0x7f0000000680)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea"}, {&(0x7f0000000700)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc31979dba"}, {&(0x7f00000007c0)="6d7bbc790240b441bba9be"}, {&(0x7f0000000800)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605"}], 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0, 0x845}], 0x1, 0x40800) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000001ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/60, 0x3c}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}]}, 0x50}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000340)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r2, &(0x7f0000000840)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000001b00), 0x20000328) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5001", @ANYRES8=r6], 0x8) 1m37.408905448s ago: executing program 1 (id=3874): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000015c0)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x406}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 1m37.408454462s ago: executing program 2 (id=3875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000480)=0x1, 0x4) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f0000000700)=@ethtool_drvinfo={0x3, "2ea101ab090c0a75e57de560ecd9e9980fa794b73644cc05cd4d079809556e06", "777f7aef52eb9fa85d4b788af65280a2d857f95d446f1ee8049e26b9751e9b78", "4db01cdef103294f3acb7a7dfed1411e139c0e05d8c80fa87a21705be3111664", "2bd1f1e94cf5344e6dc0d0b93043a7096d44905b996ba7c55518eac44aaa3163", "e0f569720c553c0a577f8f99e81dd584822ed1f66d1024ba5d75fdc1591cab2d", "68fc0fe43b73999d43efb405", 0x2, 0xe, 0x4, 0x200, 0x7}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r7, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000009c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000a00)=[0x0], 0x0, 0x0, 0x1, 0x0, r11}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a40)={0x0, 0x0}, 0x8) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a80)=r12, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r13, 0x0, 0x0}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 1m37.354722541s ago: executing program 1 (id=3876): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000280), 0x4924b68, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) 1m37.31800306s ago: executing program 4 (id=3877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002c000f0171bd7000fbdbdf250201"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40051}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x19, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0x6, 0x2, 0x0, 0x40, 0x1}], &(0x7f00000004c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0xa, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x9, 0x1000, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x80}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a80)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001ac0)={@cgroup=r9, r9, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r10}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b00)={r7, r5, 0x25, 0x1, @val=@netkit={@void, @value, @void, @void, r10}}, 0x1c) 1m37.116491525s ago: executing program 3 (id=3878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) 1m37.116121257s ago: executing program 3 (id=3879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000080000000010ff02000000000000000000000000000189"], 0x340a) 1m37.01008998s ago: executing program 3 (id=3880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300a31414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000240)="bb4babca9f8d266796101a3b9336e479fc2d346ccb00369eeb4cba485f6f1a62cba9a0bf59ecfb616d76b73b06e87efe5166fd4583e37afbce6a3766865a93ede34e5dc9cca2e8b1d61869ce3487fecfc8fa98cf1a1575e31d437d45a1f1ba95d0794f13f26f306a214b91f308df30ef8b7a9f859f330022d5d3dfe44770a7cc63bdbbc63022c5777a91cae8a2e387f3e1c252dc47e82c5af78f53f0237934c8dbe3cd259d164a5d1ca07abe5dfee68e", 0xb0}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x24, 0xa9, 0x0, 0xd, [0x200, 0xffff, 0x1, 0xf1, 0x100, 0x7, 0xb, 0x399]}, @timestamp_prespec={0x44, 0x1c, 0xdb, 0x3, 0xf, [{@empty}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x60}}, {{&(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x2}]}}}], 0x30}}], 0x3, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000740)='bbr', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000780)=0xdf8, 0x4) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000800)="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", 0x73d}], 0x1) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000580)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r4, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 0s ago: executing program 32 (id=3873): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f00000003c0)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x27}, {&(0x7f0000000440)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073811ee5463236d9c025e46bbe64fa"}, {&(0x7f0000000640)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5"}, {&(0x7f0000000680)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea"}, {&(0x7f0000000700)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc31979dba"}, {&(0x7f00000007c0)="6d7bbc790240b441bba9be"}, {&(0x7f0000000800)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605"}], 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0, 0x845}], 0x1, 0x40800) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000001ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/60, 0x3c}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}]}, 0x50}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000340)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r2, &(0x7f0000000840)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000001b00), 0x20000328) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5001", @ANYRES8=r6], 0x8) kernel console output (not intermixed with test programs): ci1: Malformed HCI Event [ 205.974022][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 205.974218][T11738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.008132][T11740] netlink: 'syz.2.1794': attribute type 32 has an invalid length. [ 206.008152][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 206.042298][T11738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.100263][T11740] bond4: Setting coupled_control to off (0) [ 206.195530][T11748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1796'. [ 206.265319][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 206.265543][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.294191][T11754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.332110][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 206.332145][T11756] netlink: 'syz.2.1798': attribute type 10 has an invalid length. [ 206.332161][T11756] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1798'. [ 206.379767][T11756] geneve2: entered promiscuous mode [ 206.379789][T11756] geneve2: entered allmulticast mode [ 206.526587][ T5637] Bluetooth: hci1: Malformed HCI Event [ 206.561722][T11768] __nla_validate_parse: 1 callbacks suppressed [ 206.561743][T11768] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1804'. [ 207.477702][T11826] netlink: 'syz.3.1823': attribute type 3 has an invalid length. [ 207.800922][T11850] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1831'. [ 207.803095][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1831'. [ 207.803223][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1831'. [ 207.809368][T11854] C: renamed from lo (while UP) [ 207.814778][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1831'. [ 207.815020][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1831'. [ 207.816311][T11854] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.159869][T11867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1836'. [ 208.159917][T11867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1836'. [ 208.159933][T11867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1836'. [ 208.382880][T11890] macvlan0: entered promiscuous mode [ 208.423247][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 208.425362][T11896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.451131][T11896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.623435][T11909] netlink: 'syz.4.1848': attribute type 13 has an invalid length. [ 208.886689][T11924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.975088][T11930] netlink: 'syz.3.1857': attribute type 20 has an invalid length. [ 208.975114][T11930] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.554434][ T5637] Bluetooth: hci4: Malformed HCI Event [ 209.827795][T11966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.265882][T11993] netlink: 'syz.4.1878': attribute type 49 has an invalid length. [ 210.324027][ T5637] Bluetooth: hci0: Malformed HCI Event [ 210.820238][T12029] bond5: entered allmulticast mode [ 210.820613][T12029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.874996][T12032] x_tables: unsorted underflow at hook 2 [ 211.058553][ T5637] Bluetooth: hci2: Malformed HCI Event [ 211.556602][ T5637] Bluetooth: hci0: Malformed HCI Event [ 211.633350][T12089] __nla_validate_parse: 18 callbacks suppressed [ 211.633371][T12089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1910'. [ 211.646644][T12090] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1902'. [ 212.278815][T12126] syzkaller0: entered promiscuous mode [ 212.278840][T12126] syzkaller0: entered allmulticast mode [ 212.704052][ T5637] Bluetooth: hci3: Malformed HCI Event [ 213.157066][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1924'. [ 213.157088][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1924'. [ 213.294244][T12166] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1927'. [ 213.502675][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 213.532074][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 213.674244][T12180] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 213.674383][T12180] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 213.866098][ T5637] Bluetooth: hci3: Malformed HCI Event [ 214.095981][T12213] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1938'. [ 214.120788][T12213] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1938'. [ 214.375956][T12224] veth0: entered promiscuous mode [ 214.385720][T12222] veth0: left promiscuous mode [ 214.839547][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1952'. [ 215.185859][T12270] netlink: 'syz.3.1956': attribute type 2 has an invalid length. [ 216.239307][T12317] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 216.428369][T12321] netlink: 'syz.1.1974': attribute type 2 has an invalid length. [ 216.551984][ T5637] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 216.709949][T12337] __nla_validate_parse: 1 callbacks suppressed [ 216.709969][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 216.786205][T12340] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1982'. [ 216.798570][T12340] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1982'. [ 216.849299][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 216.908286][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.929854][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.009303][T12356] syzkaller0: entered promiscuous mode [ 217.009326][T12356] syzkaller0: entered allmulticast mode [ 217.420971][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1995'. [ 217.421008][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1995'. [ 217.465522][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 217.499024][T12388] erspan0: entered promiscuous mode [ 217.500366][T12388] erspan0: left promiscuous mode [ 217.675312][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 218.153248][T12422] smc: net device lo erased user defined pnetid SYZ0 [ 218.247920][ T5637] Bluetooth: hci4: Malformed HCI Event [ 218.430545][T12438] openvswitch: netlink: Missing key (keys=40, expected=100) [ 218.459066][ T5637] Bluetooth: hci4: Malformed HCI Event [ 218.610465][T12444] ip_vti0: entered promiscuous mode [ 218.634370][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 218.656939][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 219.208834][T12466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.235964][T12466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.250165][T12470] tipc: Enabling of bearer rejected, already enabled [ 219.530224][ T5637] Bluetooth: hci2: Malformed HCI Event [ 220.113089][T12505] hsr_slave_1 (unregistering): left promiscuous mode [ 220.317317][T12525] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 220.318424][T12503] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 220.663865][ T5637] Bluetooth: hci3: Malformed HCI Event [ 220.750653][T12547] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20001 [ 221.023609][T12564] netlink: 'syz.3.2040': attribute type 9 has an invalid length. [ 221.121105][T12568] ip_tables: iptables: counters copy to user failed while replacing table [ 221.314582][T12577] ip_tables: iptables: counters copy to user failed while replacing table [ 221.602923][ T5637] Bluetooth: hci0: Malformed HCI Event [ 221.825067][T12611] netlink: 'syz.0.2051': attribute type 9 has an invalid length. [ 221.841154][T12612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.844277][T12612] __nla_validate_parse: 132 callbacks suppressed [ 221.844294][T12612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2048'. [ 222.355520][T12646] x_tables: duplicate underflow at hook 1 [ 222.453323][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2056'. [ 222.505358][ T5637] Bluetooth: hci4: Malformed HCI Event [ 223.271794][T12704] tipc: Failed to remove unknown binding: 66,0,0/512909796:2198947648/2198947649 [ 223.275609][T12703] tipc: Failed to remove unknown binding: 66,0,0/512909796:2198947648/2198947649 [ 223.429516][T12713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2072'. [ 223.743263][T12727] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2081'. [ 223.743545][T12727] unsupported nlmsg_type 40 [ 223.956316][T12736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2083'. [ 224.174617][T12739] syzkaller0: left promiscuous mode [ 224.174639][T12739] syzkaller0: left allmulticast mode [ 226.626082][T12813] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 226.626105][T12813] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2107'. [ 227.058251][T12830] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2114'. [ 227.375239][T12836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 227.645053][T12841] netlink: 'syz.1.2119': attribute type 1 has an invalid length. [ 227.645073][T12841] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2119'. [ 228.161434][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2123'. [ 228.214574][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2123'. [ 229.271721][T12882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2132'. [ 229.272593][T12882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2132'. [ 229.977645][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 230.091376][ T5637] Bluetooth: hci4: Malformed HCI Event [ 230.310461][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2142'. [ 230.436324][T12912] openvswitch: netlink: Missing key (keys=40, expected=100) [ 230.462841][ T5637] Bluetooth: hci3: Malformed HCI Event [ 230.751618][T12919] netlink: 'syz.1.2147': attribute type 9 has an invalid length. [ 231.133444][T12934] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2152'. [ 231.780739][T12950] ip_tables: iptables: counters copy to user failed while replacing table [ 232.381757][T12978] __nla_validate_parse: 3 callbacks suppressed [ 232.381778][T12978] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2162'. [ 233.338042][T13002] xt_hashlimit: size too large, truncated to 1048576 [ 233.538389][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2172'. [ 233.867919][T13008] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2173'. [ 233.911832][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2173'. [ 233.947972][T13011] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2174'. [ 234.074741][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 234.790507][T13049] openvswitch: netlink: Missing key (keys=40, expected=100) [ 234.806307][T13051] syzkaller0: entered promiscuous mode [ 234.806329][T13051] syzkaller0: entered allmulticast mode [ 234.866096][ T5637] Bluetooth: hci2: Malformed HCI Event [ 235.791825][T13084] syzkaller0: left promiscuous mode [ 235.791842][T13084] syzkaller0: left allmulticast mode [ 237.434063][T13031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.849045][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 237.893628][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 237.936654][T13120] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 237.978461][ C1] TC_ACT_REPEAT abuse ? [ 238.037774][T13125] netlink: 'syz.2.2205': attribute type 12 has an invalid length. [ 238.037798][T13125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2205'. [ 238.108779][T13128] netlink: 'syz.4.2206': attribute type 1 has an invalid length. [ 238.151395][T13128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.172551][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'. [ 238.234029][T13128] bond2: (slave bridge3): making interface the new active one [ 238.235561][T13128] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 238.235902][T13133] tipc: Enabling of bearer rejected, already enabled [ 238.271716][T13135] tipc: Enabled bearer , priority 0 [ 238.510299][T13152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2214'. [ 238.579606][T13157] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2215'. [ 238.902709][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2219'. [ 239.028772][ C1] TC_ACT_REPEAT abuse ? [ 239.066570][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 239.477921][T13215] x_tables: duplicate underflow at hook 2 [ 239.649205][T13229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2238'. [ 239.928430][T13243] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 240.057265][ C1] TC_ACT_REPEAT abuse ? [ 240.271408][T13267] xt_hashlimit: size too large, truncated to 1048576 [ 240.416388][T13269] bridge_slave_0 (unregistering): left allmulticast mode [ 240.416416][T13269] bridge_slave_0 (unregistering): left promiscuous mode [ 240.416532][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.635887][T13278] netlink: 'syz.3.2250': attribute type 9 has an invalid length. [ 241.002143][T13288] xt_hashlimit: size too large, truncated to 1048576 [ 241.029587][T13299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 241.097413][ C1] TC_ACT_REPEAT abuse ? [ 241.112498][T13291] netlink: 'syz.2.2255': attribute type 1 has an invalid length. [ 241.203206][T13304] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 241.284126][T13321] netlink: 'syz.1.2262': attribute type 9 has an invalid length. [ 241.417772][T13304] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 241.442619][T13311] bond5: (slave gretap2): making interface the new active one [ 241.443151][T13311] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 241.479763][T13304] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 241.479977][T13304] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 241.480207][T13304] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 241.515102][T13310] gretap0: entered promiscuous mode [ 241.778510][ T7868] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 241.778557][ T7868] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 241.778593][ T7868] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 242.147187][ C1] TC_ACT_REPEAT abuse ? [ 243.177319][ C1] TC_ACT_REPEAT abuse ? [ 244.218068][ C1] TC_ACT_REPEAT abuse ? [ 245.257413][ C1] TC_ACT_REPEAT abuse ? [ 246.307275][ C1] TC_ACT_REPEAT abuse ? [ 247.347249][ C1] TC_ACT_REPEAT abuse ? [ 248.387140][ C1] TC_ACT_REPEAT abuse ? [ 249.417291][ C1] TC_ACT_REPEAT abuse ? [ 250.457219][ C1] TC_ACT_REPEAT abuse ? [ 251.497305][ C1] TC_ACT_REPEAT abuse ? [ 252.537199][ C1] TC_ACT_REPEAT abuse ? [ 253.587287][ C1] TC_ACT_REPEAT abuse ? [ 254.617105][ C1] TC_ACT_REPEAT abuse ? [ 255.657363][ C1] TC_ACT_REPEAT abuse ? [ 256.697180][ C1] TC_ACT_REPEAT abuse ? [ 257.737318][ C1] TC_ACT_REPEAT abuse ? [ 258.777048][ C1] TC_ACT_REPEAT abuse ? [ 259.817313][ C1] TC_ACT_REPEAT abuse ? [ 260.858329][ C1] TC_ACT_REPEAT abuse ? [ 261.897312][ C1] TC_ACT_REPEAT abuse ? [ 262.147336][ C1] TC_ACT_REPEAT abuse ? [ 262.947222][ C1] TC_ACT_REPEAT abuse ? [ 263.977468][ C1] TC_ACT_REPEAT abuse ? [ 265.027178][ C1] TC_ACT_REPEAT abuse ? [ 266.057495][ C1] TC_ACT_REPEAT abuse ? [ 267.097030][ C1] TC_ACT_REPEAT abuse ? [ 268.137224][ C1] TC_ACT_REPEAT abuse ? [ 269.177901][ C1] TC_ACT_REPEAT abuse ? [ 270.227475][ C1] TC_ACT_REPEAT abuse ? [ 271.267459][ C1] TC_ACT_REPEAT abuse ? [ 272.297345][ C1] TC_ACT_REPEAT abuse ? [ 273.347229][ C1] TC_ACT_REPEAT abuse ? [ 274.377414][ C1] TC_ACT_REPEAT abuse ? [ 275.427173][ C1] TC_ACT_REPEAT abuse ? [ 276.467236][ C1] TC_ACT_REPEAT abuse ? [ 277.507136][ C1] TC_ACT_REPEAT abuse ? [ 278.547370][ C1] TC_ACT_REPEAT abuse ? [ 279.587155][ C1] TC_ACT_REPEAT abuse ? [ 280.627387][ C1] TC_ACT_REPEAT abuse ? [ 281.667208][ C1] TC_ACT_REPEAT abuse ? [ 282.707241][ C1] TC_ACT_REPEAT abuse ? [ 283.737159][ C1] TC_ACT_REPEAT abuse ? [ 284.777341][ C1] TC_ACT_REPEAT abuse ? [ 285.817108][ C1] TC_ACT_REPEAT abuse ? [ 286.857703][ C1] TC_ACT_REPEAT abuse ? [ 287.897116][ C1] TC_ACT_REPEAT abuse ? [ 288.937348][ C1] TC_ACT_REPEAT abuse ? [ 289.977080][ C1] TC_ACT_REPEAT abuse ? [ 291.017312][ C1] TC_ACT_REPEAT abuse ? [ 292.057118][ C1] TC_ACT_REPEAT abuse ? [ 293.097311][ C1] TC_ACT_REPEAT abuse ? [ 294.137227][ C1] TC_ACT_REPEAT abuse ? [ 295.187322][ C1] TC_ACT_REPEAT abuse ? [ 296.217233][ C1] TC_ACT_REPEAT abuse ? [ 297.257355][ C1] TC_ACT_REPEAT abuse ? [ 298.307228][ C1] TC_ACT_REPEAT abuse ? [ 299.347474][ C1] TC_ACT_REPEAT abuse ? [ 300.377228][ C1] TC_ACT_REPEAT abuse ? [ 301.427424][ C1] TC_ACT_REPEAT abuse ? [ 302.467160][ C1] TC_ACT_REPEAT abuse ? [ 303.507240][ C1] TC_ACT_REPEAT abuse ? [ 304.547162][ C1] TC_ACT_REPEAT abuse ? [ 305.587146][ C1] TC_ACT_REPEAT abuse ? [ 306.617070][ C1] TC_ACT_REPEAT abuse ? [ 307.667243][ C1] TC_ACT_REPEAT abuse ? [ 308.707019][ C1] TC_ACT_REPEAT abuse ? [ 309.747195][ C1] TC_ACT_REPEAT abuse ? [ 310.777109][ C1] TC_ACT_REPEAT abuse ? [ 311.827255][ C1] TC_ACT_REPEAT abuse ? [ 311.851949][T13371] validate_nla: 62 callbacks suppressed [ 311.851967][T13371] netlink: 'syz.2.2276': attribute type 1 has an invalid length. [ 311.894767][T13371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.953074][T13371] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 312.251563][T13398] netlink: 'syz.0.2287': attribute type 9 has an invalid length. [ 312.318907][T13401] tipc: Enabled bearer , priority 10 [ 312.323232][T13401] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 312.553052][T13416] tipc: Enabling of bearer rejected, already enabled [ 312.725732][T13421] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 312.834378][T13421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.857244][ C1] TC_ACT_REPEAT abuse ? [ 312.901658][T13429] __nla_validate_parse: 6 callbacks suppressed [ 312.901685][T13429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2296'. [ 313.018667][T13438] netlink: 'syz.0.2300': attribute type 9 has an invalid length. [ 313.169959][T13444] ip_tables: iptables: counters copy to user failed while replacing table [ 313.331040][ T7752] tipc: Node number set to 3658720508 [ 313.528098][T13462] bridge4: entered promiscuous mode [ 313.528169][T13462] bridge4: entered allmulticast mode [ 313.870907][T13487] netlink: 'syz.2.2316': attribute type 9 has an invalid length. [ 313.897231][ C1] TC_ACT_REPEAT abuse ? [ 314.018008][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2317'. [ 314.068849][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 314.234041][T13504] tipc: Enabled bearer , priority 0 [ 314.245503][T13502] tipc: Resetting bearer [ 314.284791][T13502] tipc: Disabling bearer [ 314.314332][T13512] SET target dimension over the limit! [ 314.335946][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'. [ 314.336628][T13512] veth0_vlan: left promiscuous mode [ 314.642063][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 314.937222][ C1] TC_ACT_REPEAT abuse ? [ 314.985454][T13556] bond1: entered allmulticast mode [ 314.985479][T13556] ip6gre1: entered allmulticast mode [ 315.184444][T13550] bond1: left allmulticast mode [ 315.184467][T13550] ip6gre1: left allmulticast mode [ 315.256002][T13569] SET target dimension over the limit! [ 315.380600][T13578] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 315.491339][T13584] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2350'. [ 315.511794][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2350'. [ 315.511820][T13586] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2350'. [ 315.560226][T13578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.617682][T13592] netlink: 'syz.1.2352': attribute type 2 has an invalid length. [ 315.617704][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2352'. [ 315.665989][T13594] netlink: 'syz.3.2355': attribute type 9 has an invalid length. [ 315.674988][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2350'. [ 316.025367][ C1] TC_ACT_REPEAT abuse ? [ 316.261664][T13625] netlink: 'syz.1.2367': attribute type 9 has an invalid length. [ 316.361581][T13630] syzkaller0: left promiscuous mode [ 316.361604][T13630] syzkaller0: left allmulticast mode [ 316.374542][T13630] tipc: Enabling of bearer rejected, already enabled [ 316.829445][T13608] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 316.881661][T13659] netlink: 'syz.3.2379': attribute type 9 has an invalid length. [ 316.993530][T13662] tipc: Enabling of bearer rejected, already enabled [ 317.759598][ T5637] Bluetooth: hci2: Malformed HCI Event [ 317.837593][T13700] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 317.841404][T13700] bond3 (unregistering): Released all slaves [ 317.954542][T13710] __nla_validate_parse: 17 callbacks suppressed [ 317.954563][T13710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2398'. [ 317.984592][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2398'. [ 318.010980][T13710] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 318.057478][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 318.086518][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 318.178896][T13722] netlink: 'syz.3.2403': attribute type 1 has an invalid length. [ 318.602264][ T5637] Bluetooth: hci1: Malformed HCI Event [ 318.934448][T13760] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2414'. [ 318.934479][T13760] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2414'. [ 319.003914][T13756] lo: entered promiscuous mode [ 319.020510][T13756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.120671][ T5637] Bluetooth: hci4: Malformed HCI Event [ 319.352623][T13787] netlink: 'syz.4.2428': attribute type 9 has an invalid length. [ 319.399046][T13790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2426'. [ 319.399072][T13790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2426'. [ 319.399088][T13790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2426'. [ 319.620581][ T5637] Bluetooth: hci4: Malformed HCI Event [ 319.870075][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 319.950734][T13826] netlink: 'syz.2.2440': attribute type 9 has an invalid length. [ 319.989920][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 320.239579][ T5637] Bluetooth: hci0: Malformed HCI Event [ 320.393827][T13848] ip_tables: iptables: counters copy to user failed while replacing table [ 320.394375][T13848] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 320.423048][T13848] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 320.423567][T13855] ip_tables: iptables: counters copy to user failed while replacing table [ 320.492970][T13860] netlink: 'syz.0.2454': attribute type 9 has an invalid length. [ 320.566738][T13857] erspan0: entered promiscuous mode [ 320.570545][T13857] erspan0: left promiscuous mode [ 320.649574][T13868] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 320.940001][ T5637] Bluetooth: hci3: Malformed HCI Event [ 321.100649][T13892] syz_tun: entered allmulticast mode [ 321.104814][T13892] syzkaller0: entered promiscuous mode [ 321.104832][T13892] syzkaller0: entered allmulticast mode [ 321.127258][ C1] TC_ACT_REPEAT abuse ? [ 321.185585][T13890] syz_tun: left allmulticast mode [ 321.344130][T13906] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 321.408796][ T5637] Bluetooth: hci1: Malformed HCI Event [ 321.893868][ T5637] Bluetooth: hci1: Malformed HCI Event [ 322.133520][T13969] netlink: 'syz.1.2495': attribute type 17 has an invalid length. [ 322.259994][T13977] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 322.451753][ T5637] Bluetooth: hci1: Malformed HCI Event [ 322.753612][T14004] tipc: Enabling of bearer rejected, already enabled [ 322.779382][T14006] netlink: 'syz.0.2513': attribute type 9 has an invalid length. [ 323.002278][T14017] __nla_validate_parse: 22 callbacks suppressed [ 323.002298][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 323.002478][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 323.201749][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 323.253796][T14021] tipc: Enabling of bearer rejected, no device for the media [ 323.362756][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2523'. [ 323.434702][T14038] netlink: 'syz.0.2527': attribute type 9 has an invalid length. [ 323.582724][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2529'. [ 323.619971][T14057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2532'. [ 323.656477][T14044] bond_slave_0: entered promiscuous mode [ 323.656498][T14044] bond_slave_0: entered allmulticast mode [ 323.802729][ T5637] Bluetooth: hci2: Malformed HCI Event [ 323.915363][T14074] Bluetooth: hci0: unsupported parameter 5135 [ 323.915385][T14074] Bluetooth: hci0: unsupported parameter 8192 [ 323.915398][T14074] Bluetooth: hci0: unsupported parameter 5135 [ 323.915409][T14074] Bluetooth: hci0: unsupported parameter 8192 [ 324.360337][T14088] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 324.696212][T14109] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 324.756629][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 324.806393][T14109] syzkaller0: MTU not usable for tipc bearer [ 324.806432][T14109] tipc: Enabling of bearer rejected, failed to enable media [ 325.002823][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2556'. [ 325.122163][T14129] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2555'. [ 325.463250][T14154] netlink: 'syz.3.2563': attribute type 9 has an invalid length. [ 325.675280][T14171] netlink: 'syz.2.2569': attribute type 1 has an invalid length. [ 325.727277][T14171] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.800211][T14171] bond6: (slave syz_tun): Removing an active aggregator [ 325.813440][T14171] bond6: (slave syz_tun): Releasing backup interface [ 325.839139][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'. [ 325.860724][T14171] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 325.973227][T14186] syzkaller0: entered promiscuous mode [ 325.973251][T14186] syzkaller0: entered allmulticast mode [ 326.241183][T14199] Bluetooth: hci0: unsupported parameter 5135 [ 326.241212][T14199] Bluetooth: hci0: unsupported parameter 8192 [ 326.241227][T14199] Bluetooth: hci0: unsupported parameter 5135 [ 326.241240][T14199] Bluetooth: hci0: unsupported parameter 8192 [ 326.533578][T14210] netlink: 'syz.1.2580': attribute type 9 has an invalid length. [ 326.688774][T14214] netlink: 'syz.0.2583': attribute type 3 has an invalid length. [ 327.043654][T14233] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 327.214204][T14233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.430405][T14239] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 327.823640][T14252] netlink: ct family unspecified [ 328.482844][T14263] netlink: 'syz.4.2599': attribute type 1 has an invalid length. [ 328.560429][T14269] __nla_validate_parse: 7 callbacks suppressed [ 328.560448][T14269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2599'. [ 328.660422][T14274] netlink: 4408 bytes leftover after parsing attributes in process `syz.3.2601'. [ 328.713001][T14274] netlink: 4408 bytes leftover after parsing attributes in process `syz.3.2601'. [ 328.733888][T14263] bond3: option mode: invalid value (7) [ 328.752921][T14263] bond3 (unregistering): Released all slaves [ 328.830699][T14279] netlink: 'syz.4.2599': attribute type 10 has an invalid length. [ 328.830720][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2599'. [ 329.032003][T14279] dummy0: entered promiscuous mode [ 329.043059][T14287] syzkaller0: left promiscuous mode [ 329.043080][T14287] syzkaller0: left allmulticast mode [ 329.224639][T14288] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2602'. [ 329.224671][T14288] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2602'. [ 329.239391][T14282] syzkaller1: entered promiscuous mode [ 329.239575][T14282] syzkaller1: entered allmulticast mode [ 330.184292][T14324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2615'. [ 330.319078][T14329] xt_hashlimit: max too large, truncated to 1048576 [ 330.319819][T14329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.628800][T14359] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2626'. [ 331.628820][T14359] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2626'. [ 332.673493][T14309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.055994][T14380] lo: entered allmulticast mode [ 333.193142][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2636'. [ 333.468188][T14396] tipc: Enabling of bearer rejected, already enabled [ 333.805121][T14371] lo: left allmulticast mode [ 333.934458][T14411] netlink: 'syz.3.2648': attribute type 9 has an invalid length. [ 334.167988][T14416] __nla_validate_parse: 2 callbacks suppressed [ 334.168009][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2650'. [ 334.234976][T14418] netlink: 'syz.2.2651': attribute type 1 has an invalid length. [ 334.401408][T14418] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.470671][T14426] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2653'. [ 335.656666][T14423] bond7: (slave syz_tun): Releasing backup interface [ 335.704572][T14423] bond8: (slave syz_tun): Enslaving as a backup interface with an up link [ 335.774667][T14435] tipc: Enabling of bearer rejected, already enabled [ 336.053283][T14449] netlink: 'syz.3.2662': attribute type 9 has an invalid length. [ 336.065507][T14447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2661'. [ 336.249338][T14455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.312788][T14460] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2665'. [ 336.355116][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2666'. [ 336.355143][T14462] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2666'. [ 336.455164][T14462] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2666'. [ 336.475724][T14465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2666'. [ 336.475748][T14465] nbd: device at index 64 is going down [ 336.571130][T14476] bridge0: port 1(syz_tun) entered blocking state [ 336.572147][T14476] bridge0: port 1(syz_tun) entered disabled state [ 336.572305][T14476] syz_tun: entered allmulticast mode [ 336.581562][T14474] netlink: 'syz.1.2670': attribute type 1 has an invalid length. [ 336.610231][T14476] syz_tun: entered promiscuous mode [ 336.726073][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 336.726107][T14484] netlink: 'syz.4.2668': attribute type 10 has an invalid length. [ 336.726121][T14484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2668'. [ 336.800352][T14474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.889708][T14477] udevd[14477]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 336.924401][T14477] udevd[14477]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 336.928400][T14496] netlink: 'syz.4.2668': attribute type 10 has an invalid length. [ 336.960650][T14481] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 337.213911][T14502] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 337.360165][ T5637] Bluetooth: hci4: link tx timeout [ 337.360184][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 337.380418][ T53] Bluetooth: hci4: link tx timeout [ 337.380436][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 337.804982][ T53] Bluetooth: hci4: Malformed HCI Event [ 337.961295][T14536] netlink: 'syz.2.2682': attribute type 14 has an invalid length. [ 337.990710][T14536] netlink: 'syz.2.2682': attribute type 9 has an invalid length. [ 338.532544][T14555] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 338.574522][T14555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.873430][T14572] netlink: 'syz.0.2692': attribute type 9 has an invalid length. [ 339.271865][T14591] netlink: 'syz.0.2698': attribute type 1 has an invalid length. [ 339.311908][T14591] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.417519][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 340.325728][T14508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.428484][T14611] __nla_validate_parse: 7 callbacks suppressed [ 340.428567][T14611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2703'. [ 340.523619][T14611] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2703'. [ 340.607738][T14614] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2705'. [ 340.607767][T14614] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2705'. [ 340.717460][T14617] netlink: 'syz.1.2707': attribute type 9 has an invalid length. [ 340.996885][T14628] netlink: 'syz.3.2710': attribute type 1 has an invalid length. [ 341.160014][T14628] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.388760][T14644] xt_hashlimit: size too large, truncated to 1048576 [ 341.506207][ T5637] Bluetooth: hci3: Malformed HCI Event [ 341.530977][ T5637] Bluetooth: hci1: Malformed HCI Event [ 341.536331][T14654] xt_hashlimit: size too large, truncated to 1048576 [ 341.686119][T14664] sctp: [Deprecated]: syz.2.2717 (pid 14664) Use of int in max_burst socket option deprecated. [ 341.686119][T14664] Use struct sctp_assoc_value instead [ 341.686815][T14664] sctp: [Deprecated]: syz.2.2717 (pid 14664) Use of int in max_burst socket option. [ 341.686815][T14664] Use struct sctp_assoc_value instead [ 341.975589][T14670] netlink: 'syz.0.2719': attribute type 9 has an invalid length. [ 342.091943][T14673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2722'. [ 342.378388][T14678] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2725'. [ 342.378419][T14678] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2725'. [ 342.923217][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.926140][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.929988][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.933318][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.933985][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.669625][T14718] dummy0: left promiscuous mode [ 343.865428][T14720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 344.070473][T14724] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2737'. [ 344.070502][T14724] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2737'. [ 344.583807][T14696] rxe_eth0 speed is unknown, defaulting to 1000 [ 344.689720][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2743'. [ 345.019208][ T5637] Bluetooth: hci5: command tx timeout [ 345.264972][T14696] virt_wifi0 speed is unknown, defaulting to 1000 [ 345.784168][T14787] __nla_validate_parse: 2 callbacks suppressed [ 345.784187][T14787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2758'. [ 345.935161][T14793] netlink: 'syz.4.2758': attribute type 2 has an invalid length. [ 346.145767][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.145958][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.146091][T14696] bridge_slave_0: entered allmulticast mode [ 346.184859][T14696] bridge_slave_0: entered promiscuous mode [ 346.202261][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.205094][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.205243][T14696] bridge_slave_1: entered allmulticast mode [ 346.242593][T14696] bridge_slave_1: entered promiscuous mode [ 346.304386][T14804] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 346.317164][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.321973][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.322065][T14804] syzkaller0: MTU not usable for tipc bearer [ 346.322101][T14804] tipc: Enabling of bearer rejected, failed to enable media [ 346.538487][T14696] team0: Port device team_slave_0 added [ 346.581834][T14696] team0: Port device team_slave_1 added [ 346.745391][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2765'. [ 346.750725][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.750741][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.750767][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.833122][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.833140][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.833166][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.944659][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2762'. [ 346.974561][T14821] pim6reg: entered allmulticast mode [ 347.107115][ T5637] Bluetooth: hci5: command tx timeout [ 347.511496][T14696] hsr_slave_0: entered promiscuous mode [ 347.529860][T14696] hsr_slave_1: entered promiscuous mode [ 348.292049][T14696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.292095][T14696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.582824][T14696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.582861][T14696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.813737][T14696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.813772][T14696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.947846][T14887] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 348.952128][T14696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.952162][T14696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.076243][T14893] bond6: (slave bridge6): making interface the new active one [ 349.085197][T14893] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 349.179541][ T5637] Bluetooth: hci5: command tx timeout [ 350.159193][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 350.159798][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2798'. [ 351.257469][ T5637] Bluetooth: hci5: command tx timeout [ 351.944988][T14889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.971344][T14696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.997266][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.020211][T14696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.131873][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.133073][T14924] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2803'. [ 352.133099][T14924] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2803'. [ 352.139164][T14696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.202311][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.215181][T14696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.251296][T14927] netlink: 'syz.0.2802': attribute type 39 has an invalid length. [ 352.296495][T14696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.358358][T14932] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2805'. [ 352.706158][T14945] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2807'. [ 352.865745][T14945] xt_hashlimit: size too large, truncated to 1048576 [ 352.979518][T14949] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 352.979794][T14949] syzkaller1: linktype set to 823 [ 353.030344][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.212721][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.247823][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.247946][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.281846][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.281973][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.466420][T14962] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 353.595593][T14962] syzkaller0: MTU not usable for tipc bearer [ 353.595631][T14962] tipc: Enabling of bearer rejected, failed to enable media [ 353.749523][T14967] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2816'. [ 353.768555][T14969] netlink: 'syz.0.2817': attribute type 2 has an invalid length. [ 354.046765][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 354.046816][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 354.251067][T14983] netlink: 'syz.4.2819': attribute type 4 has an invalid length. [ 354.617761][T15012] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 354.660078][T15012] bond3: entered promiscuous mode [ 354.660472][T15012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.770399][T15017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2827'. [ 354.806123][ T5738] hid-generic 0005:0B57:0B90.0001: item fetching failed at offset 0/1 [ 354.811246][ T5738] hid-generic 0005:0B57:0B90.0001: probe with driver hid-generic failed with error -22 [ 355.199733][T15031] syzkaller0: entered promiscuous mode [ 355.199757][T15031] syzkaller0: entered allmulticast mode [ 355.201796][T15031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2833'. [ 355.201819][T15031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2833'. [ 355.278850][T15031] bond4: entered allmulticast mode [ 355.279312][T15031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.310523][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.789662][T14696] veth0_vlan: entered promiscuous mode [ 355.823538][T14696] veth1_vlan: entered promiscuous mode [ 355.894245][T15047] IPv6: sit2: Disabled Multicast RS [ 355.967294][T14696] veth0_macvtap: entered promiscuous mode [ 356.007523][T14696] veth1_macvtap: entered promiscuous mode [ 356.048400][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.084548][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.108585][ T7868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.110367][ T7868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.171226][ T7862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.223948][ T7652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.527456][ T5637] Bluetooth: hci4: ACL packet for unknown connection handle 3484 [ 356.623523][T15067] syz_tun: entered allmulticast mode [ 356.662174][T15063] syz_tun: left allmulticast mode [ 356.689418][T15073] veth0: entered promiscuous mode [ 356.738371][ T7868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.738393][ T7868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.741096][T15066] veth0: left promiscuous mode [ 356.936496][ T7864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.936519][ T7864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.169542][T15085] netlink: 'syz.2.2850': attribute type 32 has an invalid length. [ 357.824692][T15116] netlink: 'syz.2.2855': attribute type 9 has an invalid length. [ 358.049780][T15122] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2857'. [ 358.051788][ T5637] Bluetooth: hci5: Malformed HCI Event [ 358.752349][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 358.860634][T15155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.902959][T15153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2865'. [ 359.040659][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2867'. [ 359.698894][T15182] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2873'. [ 359.705077][ T5637] Bluetooth: hci5: Malformed HCI Event [ 360.063434][T15201] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2877'. [ 360.063467][T15201] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2877'. [ 360.209461][T15204] netlink: 'syz.2.2879': attribute type 10 has an invalid length. [ 360.209496][T15204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.578223][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2884'. [ 360.600831][T15221] tipc: Enabling of bearer rejected, already enabled [ 361.095066][ T5637] Bluetooth: hci4: Malformed HCI Event [ 361.405540][T15243] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2891'. [ 361.405572][T15243] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2891'. [ 361.623929][T15247] netlink: 'syz.4.2892': attribute type 1 has an invalid length. [ 361.729591][T15247] bond5: entered promiscuous mode [ 361.730095][T15247] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.764596][T15252] bond5: (slave bridge5): making interface the new active one [ 361.764620][T15252] bridge5: entered promiscuous mode [ 361.768423][T15252] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 361.880203][T15261] tipc: Enabling of bearer rejected, already enabled [ 361.966111][T15247] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.966137][T15247] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 362.325631][ T5637] Bluetooth: hci3: Malformed HCI Event [ 362.362382][T15280] netlink: 'syz.4.2901': attribute type 9 has an invalid length. [ 362.972933][T15308] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 362.990785][T15308] ip_tables: iptables: counters copy to user failed while replacing table [ 363.286345][T15321] geneve0: entered allmulticast mode [ 363.292529][T15324] ip_tables: iptables: counters copy to user failed while replacing table [ 363.378732][T15328] __nla_validate_parse: 2 callbacks suppressed [ 363.378754][T15328] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2912'. [ 363.860708][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.863584][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.867626][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.895145][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.898266][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.069508][T15340] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 364.245789][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.246081][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.246328][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.246580][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.247173][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.264466][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.264725][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.264982][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.265213][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.265451][T15352] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 364.591985][T15345] syzkaller0: entered promiscuous mode [ 364.592012][T15345] syzkaller0: entered allmulticast mode [ 364.750359][ T5641] syz_tun (unregistering): left allmulticast mode [ 364.750385][ T5641] syz_tun (unregistering): left promiscuous mode [ 364.750497][ T5641] bridge0: port 1(syz_tun) entered disabled state [ 364.867854][T15368] openvswitch: netlink: IP tunnel TTL not specified. [ 365.982451][ T5637] Bluetooth: hci0: command tx timeout [ 366.982846][T15356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.987142][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2928'. [ 368.058678][ T5637] Bluetooth: hci0: command tx timeout [ 368.160287][ T7865] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.340626][T15337] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.394918][T15426] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2929'. [ 368.441251][T15428] x_tables: ip_tables: owner match: used from hooks INPUT, but only valid from OUTPUT/POSTROUTING [ 368.469921][ T7865] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.605479][T15424] tipc: Started in network mode [ 368.605511][T15424] tipc: Node identity ac1414aa, cluster identity 4711 [ 368.605843][T15424] tipc: New replicast peer: 172.20.20.187 [ 368.614441][T15424] tipc: Enabled bearer , priority 10 [ 368.746013][ T7865] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.195569][ T7865] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.300207][T15337] virt_wifi0 speed is unknown, defaulting to 1000 [ 369.554685][T15454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2937'. [ 369.554720][T15454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2937'. [ 369.579943][T15460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2939'. [ 369.579970][T15460] validate_nla: 55 callbacks suppressed [ 369.579982][T15460] netlink: 'syz.3.2939': attribute type 6 has an invalid length. [ 369.606148][T15457] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2937'. [ 369.606172][T15457] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2937'. [ 369.606186][T15457] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2937'. [ 369.754361][ T7752] tipc: Node number set to 2886997162 [ 369.863533][T15466] netlink: 'syz.1.2941': attribute type 9 has an invalid length. [ 370.137344][ T5637] Bluetooth: hci0: command tx timeout [ 370.352311][ T7865] pimreg: left allmulticast mode [ 370.655737][ T7865] bond1 (unregistering): (slave ip6gretap0): Releasing active interface [ 371.455808][ T7865] bond2 (unregistering): (slave bridge3): Releasing active interface [ 371.482399][ T7865] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 371.482422][ T7865] bridge5 (unregistering): left promiscuous mode [ 371.513902][ T7865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.527029][ T7865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.529885][ T7865] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 371.556777][ T7865] bond0 (unregistering): Released all slaves [ 371.571116][ T7865] bond1 (unregistering): Released all slaves [ 371.604797][ T7865] bond2 (unregistering): Released all slaves [ 371.641437][ T7865] bond3 (unregistering): Released all slaves [ 371.664237][ T7865] bond4 (unregistering): Released all slaves [ 371.686515][ T7865] bond5 (unregistering): Released all slaves [ 371.732288][T15490] syzkaller0: entered promiscuous mode [ 371.732312][T15490] syzkaller0: entered allmulticast mode [ 371.979421][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 372.025507][ T7865] tipc: Disabling bearer [ 372.025771][ T7865] tipc: Left network mode [ 372.217490][ T5637] Bluetooth: hci0: command tx timeout [ 372.778389][T15337] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.778503][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.778656][T15337] bridge_slave_0: entered allmulticast mode [ 372.780413][T15337] bridge_slave_0: entered promiscuous mode [ 373.044330][T15337] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.044442][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.044601][T15337] bridge_slave_1: entered allmulticast mode [ 373.072295][T15337] bridge_slave_1: entered promiscuous mode [ 373.380033][T15551] netlink: 'syz.2.2954': attribute type 9 has an invalid length. [ 373.442985][T15337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.766061][T15337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.768209][T15564] netlink: 'syz.0.2958': attribute type 3 has an invalid length. [ 373.845576][T15561] syzkaller0: entered promiscuous mode [ 373.845600][T15561] syzkaller0: entered allmulticast mode [ 373.902465][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2960'. [ 374.116620][T15337] team0: Port device team_slave_0 added [ 374.421577][T15337] team0: Port device team_slave_1 added [ 374.632933][T15576] bond5: (slave syz_tun): Removing an active aggregator [ 374.633700][T15576] bond5: (slave syz_tun): Releasing backup interface [ 374.663546][T15576] bridge0: port 1(syz_tun) entered blocking state [ 374.663658][T15576] bridge0: port 1(syz_tun) entered disabled state [ 374.663795][T15576] syz_tun: entered allmulticast mode [ 374.699057][T15576] syz_tun: entered promiscuous mode [ 374.760813][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 374.865374][T15337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.865392][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.865418][T15337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.994880][T15602] netlink: 'syz.3.2966': attribute type 9 has an invalid length. [ 375.027893][T15337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.027912][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.027939][T15337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.277288][T15606] tipc: New replicast peer: 172.20.20.187 [ 375.278138][T15606] tipc: Enabled bearer , priority 10 [ 375.393091][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 375.486624][T15337] hsr_slave_0: entered promiscuous mode [ 375.495965][T15337] hsr_slave_1: entered promiscuous mode [ 375.496699][T15337] debugfs: 'hsr0' already exists in 'hsr' [ 375.496716][T15337] Cannot create hsr debugfs directory [ 375.633179][T15622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 375.926733][T15629] netlink: 'syz.1.2973': attribute type 11 has an invalid length. [ 375.926757][T15629] netlink: 'syz.1.2973': attribute type 4 has an invalid length. [ 375.926771][T15629] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2973'. [ 375.963505][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2973'. [ 375.964121][T15627] syzkaller0: entered promiscuous mode [ 375.964139][T15627] syzkaller0: entered allmulticast mode [ 376.650592][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2979'. [ 376.650627][T15646] netlink: 'syz.0.2979': attribute type 7 has an invalid length. [ 376.650640][T15646] netlink: 'syz.0.2979': attribute type 8 has an invalid length. [ 376.650652][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2979'. [ 376.914569][T15656] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2980'. [ 377.038295][ T7865] veth1_vlan: left promiscuous mode [ 377.038407][ T7865] veth0_vlan: left promiscuous mode [ 377.277895][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'. [ 377.860831][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2988'. [ 377.946737][ T7866] smbdirect: ib_dev[ÿ] removed [ 378.094388][ T7865] team0 (unregistering): Port device team_slave_1 removed [ 378.135240][ T7865] team0 (unregistering): Port device team_slave_0 removed [ 378.349587][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 378.792647][ T5637] Bluetooth: hci3: Malformed HCI Event [ 379.253362][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 379.346261][ T7865] IPVS: stop unused estimator thread 0... [ 379.801890][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'. [ 380.076411][T15726] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 380.179904][T15726] bond8 (unregistering): Released all slaves [ 380.444421][T15337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.472626][T15337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.473540][T15337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 380.493817][T15337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.506155][T15337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 380.521753][T15337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.524303][T15337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.553552][T15337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.789552][ T5637] Bluetooth: hci5: Malformed HCI Event [ 380.853283][T15766] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 380.853513][T15766] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 380.939421][T15337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.995687][T15337] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.027583][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.027692][ T7866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.058075][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.058172][ T7866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.086171][T15772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3009'. [ 381.130684][T15774] ip_tables: iptables: counters copy to user failed while replacing table [ 381.468700][T15785] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 381.520475][T15788] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3013'. [ 381.630099][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'. [ 381.748619][T15800] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 382.141812][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 382.171433][T15812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3018'. [ 382.369191][ T5637] Bluetooth: hci3: Malformed HCI Event [ 382.432406][T15823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 382.925607][T15829] ip_tables: iptables: counters copy to user failed while replacing table [ 383.272961][T15847] syzkaller0: entered promiscuous mode [ 383.273010][T15847] syzkaller0: entered allmulticast mode [ 383.520580][T15337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.126588][T15875] tipc: Enabled bearer , priority 11 [ 384.151896][ T5637] Bluetooth: hci1: Malformed HCI Event [ 384.301538][T15882] ip_tables: iptables: counters copy to user failed while replacing table [ 384.722791][T15337] veth0_vlan: entered promiscuous mode [ 385.000489][T15337] veth1_vlan: entered promiscuous mode [ 385.023605][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3040'. [ 385.235920][T15909] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 385.511163][T15922] netlink: 'syz.0.3042': attribute type 10 has an invalid length. [ 385.511184][T15922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'. [ 385.539507][T15909] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.540836][T15337] veth0_macvtap: entered promiscuous mode [ 385.601997][T15914] bond7: (slave veth3): Enslaving as an active interface with a down link [ 385.653081][T15917] bond7: (slave dummy0): making interface the new active one [ 385.655998][T15917] dummy0: entered promiscuous mode [ 385.656417][T15917] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 385.707987][T15922] bond7: (slave dummy0): Releasing active interface [ 385.930937][ T5637] Bluetooth: hci3: Malformed HCI Event [ 385.934471][T15337] veth1_macvtap: entered promiscuous mode [ 385.953041][T15927] tun0: tun_chr_ioctl cmd 1074025675 [ 385.953065][T15927] tun0: persist enabled [ 386.030328][T15337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.090804][T15337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.207462][ T7865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.280853][ T7865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.339760][ T7863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.352388][ T7863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.479678][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'. [ 386.479701][T15951] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 386.479714][T15951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3050'. [ 386.800555][T15944] syzkaller0: entered promiscuous mode [ 386.800739][T15944] syzkaller0: entered allmulticast mode [ 386.824201][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'. [ 386.824220][T15958] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 386.824232][T15958] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3050'. [ 387.474068][ T7863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.474090][ T7863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.551718][ T7866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.551740][ T7866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.997213][ T5637] Bluetooth: hci2: Malformed HCI Event [ 388.449139][ T5637] Bluetooth: hci0: Malformed HCI Event [ 388.915470][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.942892][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.954530][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.963963][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.965255][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.745247][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3071'. [ 390.011510][ T5638] bond8: (slave syz_tun): Removing an active aggregator [ 390.012032][ T5638] bond8: (slave syz_tun): Releasing backup interface [ 391.028074][ T5637] Bluetooth: hci4: command tx timeout [ 391.341513][ T5637] Bluetooth: hci5: Malformed HCI Event [ 391.445058][T16034] rxe_eth0 speed is unknown, defaulting to 1000 [ 391.649599][T16096] sctp: [Deprecated]: syz.1.3078 (pid 16096) Use of int in max_burst socket option. [ 391.649599][T16096] Use struct sctp_assoc_value instead [ 391.975166][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3080'. [ 392.298025][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3083'. [ 392.473381][T16121] syzkaller0: entered promiscuous mode [ 392.473405][T16121] syzkaller0: entered allmulticast mode [ 392.687329][ T5637] Bluetooth: hci3: Malformed HCI Event [ 393.097681][ T5637] Bluetooth: hci4: command tx timeout [ 393.520504][T16168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3097'. [ 393.520889][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3097'. [ 393.609293][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 393.620169][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 394.047098][ T5637] Bluetooth: hci5: Malformed HCI Event [ 394.082531][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'. [ 394.084795][T16034] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.084990][T16034] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.085148][T16034] bridge_slave_0: entered allmulticast mode [ 394.128751][T16034] bridge_slave_0: entered promiscuous mode [ 394.144472][T16034] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.144790][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.144952][T16034] bridge_slave_1: entered allmulticast mode [ 394.160208][T16034] bridge_slave_1: entered promiscuous mode [ 394.335956][T16196] ip_tables: iptables: counters copy to user failed while replacing table [ 394.402957][T16194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.483645][T16034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.515952][T16034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.779920][T16034] team0: Port device team_slave_0 added [ 394.797988][T16034] team0: Port device team_slave_1 added [ 394.882412][T16034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.882431][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.882456][T16034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.884632][T16034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.884646][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.884672][T16034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.027972][T16217] sctp: [Deprecated]: syz.0.3107 (pid 16217) Use of int in max_burst socket option deprecated. [ 395.027972][T16217] Use struct sctp_assoc_value instead [ 395.176990][ T5637] Bluetooth: hci4: command tx timeout [ 395.222355][T16224] ip_tables: iptables: counters copy to user failed while replacing table [ 395.307813][ T5637] Bluetooth: hci1: Malformed HCI Event [ 395.412993][T16034] hsr_slave_0: entered promiscuous mode [ 395.421087][T16034] hsr_slave_1: entered promiscuous mode [ 395.425718][T16034] debugfs: 'hsr0' already exists in 'hsr' [ 395.425737][T16034] Cannot create hsr debugfs directory [ 395.767228][T16249] netlink: 'syz.0.3114': attribute type 9 has an invalid length. [ 396.032997][T16258] syzkaller0: left promiscuous mode [ 396.033019][T16258] syzkaller0: left allmulticast mode [ 396.451433][ T7863] IPVS: starting estimator thread 0... [ 396.463927][T16034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 396.463963][T16034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 396.463990][T16034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.464015][T16034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 396.557630][T16270] IPVS: using max 30 ests per chain, 72000 per kthread [ 396.692314][T16034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 396.692350][T16034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 396.692376][T16034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.692402][T16034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 396.836701][ T5637] Bluetooth: hci3: Malformed HCI Event [ 396.953491][T16285] syzkaller0: entered promiscuous mode [ 396.953515][T16285] syzkaller0: entered allmulticast mode [ 397.234755][T16034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 397.234791][T16034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 397.234818][T16034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.234843][T16034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 397.263598][ T5637] Bluetooth: hci4: command tx timeout [ 397.604650][T16304] netlink: 'syz.0.3126': attribute type 9 has an invalid length. [ 398.122111][T16325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3130'. [ 398.244587][T16034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.296600][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.306740][T16034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.336410][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.354074][T16034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.381796][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.384344][T16034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.445082][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.863392][T16354] nbd: must specify a size in bytes for the device [ 398.980242][ T5637] Bluetooth: hci3: Malformed HCI Event [ 399.323937][T16369] syzkaller0: entered promiscuous mode [ 399.323961][T16369] syzkaller0: entered allmulticast mode [ 399.353678][T16371] syzkaller0: left promiscuous mode [ 399.353858][T16371] syzkaller0: left allmulticast mode [ 399.399451][T16372] ip_tables: iptables: counters copy to user failed while replacing table [ 399.550950][T16371] tipc: Enabling of bearer rejected, already enabled [ 399.590906][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.645400][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.695254][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.695372][ T7862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.724430][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.724543][ T7862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.816528][T16381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.829075][T16381] netlink: 'syz.4.3141': attribute type 21 has an invalid length. [ 399.829097][T16381] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3141'. [ 399.981851][T16388] syzkaller0: entered promiscuous mode [ 399.982040][T16388] syzkaller0: entered allmulticast mode [ 400.454061][T16402] netlink: 'syz.4.3144': attribute type 18 has an invalid length. [ 400.527541][T16411] netlink: 'syz.3.3148': attribute type 1 has an invalid length. [ 400.588045][ T7862] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.588640][ T7862] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.588675][ T7862] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.588707][ T7862] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.689331][T16418] Bluetooth: MGMT ver 1.23 [ 400.689785][T16411] netlink: 'syz.3.3148': attribute type 10 has an invalid length. [ 400.689804][T16411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3148'. [ 400.738394][ T5637] Bluetooth: hci1: Malformed HCI Event [ 400.762651][T16411] dummy0: entered promiscuous mode [ 401.127386][T16430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'. [ 401.266171][T16439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'. [ 401.410860][T16447] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 401.575779][T16447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.602316][T16456] syzkaller0: left promiscuous mode [ 401.602337][T16456] syzkaller0: left allmulticast mode [ 402.680556][T16034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.823740][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'. [ 402.823765][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'. [ 402.823780][T16491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3159'. [ 402.825656][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'. [ 402.825677][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'. [ 402.925636][T16034] veth0_vlan: entered promiscuous mode [ 402.972089][T16034] veth1_vlan: entered promiscuous mode [ 403.066708][ T5637] Bluetooth: hci1: Malformed HCI Event [ 403.122680][T16034] veth0_macvtap: entered promiscuous mode [ 403.152271][T16034] veth1_macvtap: entered promiscuous mode [ 403.275595][T16034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.325228][T16034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.408494][ T7652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.408967][ T7652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.409004][ T7652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.409038][ T7652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.540508][T16510] netlink: 'syz.4.3166': attribute type 1 has an invalid length. [ 403.684406][T16510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.772918][T16512] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 404.108371][T16531] __nla_validate_parse: 2 callbacks suppressed [ 404.108394][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3169'. [ 404.141463][T16531] netlink: 'syz.4.3169': attribute type 20 has an invalid length. [ 404.141491][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3169'. [ 404.322998][T16531] netlink: 'syz.4.3169': attribute type 20 has an invalid length. [ 404.329176][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3169'. [ 404.509760][ T7858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.509784][ T7858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.736516][ T7858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.736538][ T7858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.785227][ T5637] Bluetooth: hci5: Malformed HCI Event [ 405.085441][T16559] netlink: 'syz.3.3176': attribute type 9 has an invalid length. [ 405.209532][T16563] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 405.389764][T16563] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.042767][T16588] x_tables: duplicate underflow at hook 3 [ 406.250268][T16595] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3185'. [ 406.256219][ T5637] Bluetooth: hci4: Malformed HCI Event [ 406.474041][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.488657][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.491523][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.494287][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.495278][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.548941][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3186'. [ 406.879093][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3187'. [ 406.951325][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 406.951348][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 408.593658][T16658] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3196'. [ 408.597006][ T5637] Bluetooth: hci3: Malformed HCI Event [ 408.617161][ T5637] Bluetooth: hci2: command tx timeout [ 410.429696][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 410.691287][ T7858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.691322][ T7858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.698109][ T5637] Bluetooth: hci2: command tx timeout [ 410.727688][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 411.006645][T16597] rxe_eth0 speed is unknown, defaulting to 1000 [ 411.247424][ T7858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.247466][ T7858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.580983][T16727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3207'. [ 411.674410][ T7858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.674447][ T7858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.956571][ T7858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.956608][ T7858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.398183][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 412.424963][T16752] openvswitch: netlink: Missing valid actions attribute. [ 412.425015][T16752] openvswitch: netlink: Actions may not be safe on all matching packets [ 412.523783][T16754] netlink: 'syz.1.3218': attribute type 9 has an invalid length. [ 412.564405][T16756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3217'. [ 412.777485][ T5637] Bluetooth: hci2: command tx timeout [ 412.800698][T16762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3217'. [ 412.858250][T16762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'. [ 412.868578][T16762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3217'. [ 413.135208][T16768] xt_NETMAP: bad rangesize 37. [ 413.329618][T16767] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 413.414530][T16767] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 413.414553][T16767] netlink: 'syz.3.3221': attribute type 2 has an invalid length. [ 413.414565][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3221'. [ 413.508942][ T7858] bridge_slave_1: left allmulticast mode [ 413.508969][ T7858] bridge_slave_1: left promiscuous mode [ 413.509791][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.556650][ T7858] bridge_slave_0: left allmulticast mode [ 413.556675][ T7858] bridge_slave_0: left promiscuous mode [ 413.563593][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.700202][ T7858] tipc: Resetting bearer [ 414.260638][ T7858] bond2 (unregistering): (slave gretap1): Releasing active interface [ 414.341826][ T7858] tipc: Disabling bearer [ 414.497402][ T7858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.497986][ T7858] bond_slave_0: left promiscuous mode [ 414.499606][ T7858] bond0 (unregistering): Released all slaves [ 414.509168][ T7858] bond1 (unregistering): Released all slaves [ 414.522986][ T7858] bond2 (unregistering): Released all slaves [ 414.539347][ T7858] bond3 (unregistering): Released all slaves [ 414.576700][ T7858] bond4 (unregistering): Released all slaves [ 414.591418][ T7858] bond5 (unregistering): Released all slaves [ 414.606204][ T7858] bond6 (unregistering): Released all slaves [ 414.640001][ T7858] bond7 (unregistering): (slave veth3): Releasing active interface [ 414.641919][ T7858] bond7 (unregistering): Released all slaves [ 414.659549][ T7858] bond8 (unregistering): Released all slaves [ 414.864409][ T5637] Bluetooth: hci2: command tx timeout [ 415.081807][ T7858] tipc: Disabling bearer [ 415.081964][ T7858] tipc: Left network mode [ 415.082816][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3226'. [ 415.389795][T16597] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.389903][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.390041][T16597] bridge_slave_0: entered allmulticast mode [ 415.431677][T16597] bridge_slave_0: entered promiscuous mode [ 415.455979][T16806] netlink: 'syz.3.3229': attribute type 9 has an invalid length. [ 415.600021][T16597] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.600467][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.600798][T16597] bridge_slave_1: entered allmulticast mode [ 415.608393][T16597] bridge_slave_1: entered promiscuous mode [ 416.003687][T16597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.122886][T16597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.456052][T16597] team0: Port device team_slave_0 added [ 416.475221][T16597] team0: Port device team_slave_1 added [ 416.598949][T16597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.598967][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.598994][T16597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.646495][T16597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.646510][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.646535][T16597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.000944][T16850] netlink: 'syz.4.3241': attribute type 4 has an invalid length. [ 417.061032][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 417.252542][T16597] hsr_slave_0: entered promiscuous mode [ 417.275799][T16597] hsr_slave_1: entered promiscuous mode [ 417.290188][T16597] debugfs: 'hsr0' already exists in 'hsr' [ 417.290211][T16597] Cannot create hsr debugfs directory [ 417.635124][T16864] sctp: [Deprecated]: syz.3.3243 (pid 16864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.635124][T16864] Use struct sctp_sack_info instead [ 417.935078][T16871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 418.054616][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3248'. [ 418.361441][T16886] netlink: 'syz.4.3249': attribute type 9 has an invalid length. [ 419.063320][T16917] ip_tables: iptables: counters copy to user failed while replacing table [ 419.177334][ T5637] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 419.186705][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 419.333844][T16917] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3257'. [ 419.494639][T16927] sctp: [Deprecated]: syz.1.3259 (pid 16927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.494639][T16927] Use struct sctp_sack_info instead [ 419.534295][T16929] ip_tables: iptables: counters copy to user failed while replacing table [ 419.779111][T16931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3261'. [ 419.865809][T16936] netlink: 'syz.1.3263': attribute type 9 has an invalid length. [ 419.931073][T16941] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3264'. [ 420.204619][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.204670][ T7858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.293388][ T7858] veth1_macvtap: left promiscuous mode [ 420.293429][ T7858] veth0_macvtap: left promiscuous mode [ 420.293537][ T7858] veth1_vlan: left promiscuous mode [ 420.980785][ T7858] team0 (unregistering): Port device team_slave_1 removed [ 421.007695][ T7858] team0 (unregistering): Port device team_slave_0 removed [ 422.223963][T16597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.316625][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.319598][T16597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.396261][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.432457][ T7858] IPVS: stop unused estimator thread 0... [ 422.436735][T16597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.622525][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.625348][T16597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.704589][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.385625][T16597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.539485][T16597] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.602761][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.602890][ T7862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.637202][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.637317][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.754153][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'. [ 423.860038][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'. [ 424.203809][T17031] hsr_slave_1 (unregistering): left promiscuous mode [ 424.260710][T17060] FAULT_INJECTION: forcing a failure. [ 424.260710][T17060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.260741][T17060] CPU: 0 UID: 0 PID: 17060 Comm: syz.3.3287 Not tainted syzkaller #0 PREEMPT(full) [ 424.260763][T17060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.260780][T17060] Call Trace: [ 424.260787][T17060] [ 424.260796][T17060] dump_stack_lvl+0xe8/0x150 [ 424.260832][T17060] should_fail_ex+0x3eb/0x540 [ 424.260862][T17060] _copy_to_user+0x31/0xb0 [ 424.260888][T17060] simple_read_from_buffer+0xe1/0x170 [ 424.260916][T17060] proc_fail_nth_read+0x1bb/0x230 [ 424.260951][T17060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.260985][T17060] ? rw_verify_area+0x24a/0x4c0 [ 424.261019][T17060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.261047][T17060] vfs_read+0x213/0xa80 [ 424.261078][T17060] ? __pfx___mutex_lock+0x10/0x10 [ 424.261103][T17060] ? __pfx_vfs_read+0x10/0x10 [ 424.261127][T17060] ? __fget_files+0x2a/0x420 [ 424.261148][T17060] ? __fget_files+0x3a2/0x420 [ 424.261168][T17060] ? __fget_files+0x2a/0x420 [ 424.261194][T17060] ? fdget+0x1ac/0x250 [ 424.261228][T17060] ksys_read+0x150/0x270 [ 424.261257][T17060] ? __pfx_ksys_read+0x10/0x10 [ 424.261294][T17060] do_syscall_64+0x166/0x520 [ 424.261316][T17060] ? trace_irq_disable+0x3b/0x140 [ 424.261342][T17060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.261364][T17060] ? clear_bhb_loop+0x70/0xc0 [ 424.261389][T17060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.261410][T17060] RIP: 0033:0x7f05e215fd8e [ 424.261429][T17060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 424.261446][T17060] RSP: 002b:00007f05e307ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.261468][T17060] RAX: ffffffffffffffda RBX: 00007f05e30806c0 RCX: 00007f05e215fd8e [ 424.261483][T17060] RDX: 000000000000000f RSI: 00007f05e30800a0 RDI: 0000000000000007 [ 424.261496][T17060] RBP: 00007f05e3080090 R08: 0000000000000000 R09: 0000000000000000 [ 424.261508][T17060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.261520][T17060] R13: 00007f05e24264e8 R14: 00007f05e2426450 R15: 00007ffe2ba92fb8 [ 424.261555][T17060] [ 424.392817][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'. [ 424.509665][T17044] sctp: [Deprecated]: syz.4.3290 (pid 17044) Use of int in max_burst socket option deprecated. [ 424.509665][T17044] Use struct sctp_assoc_value instead [ 424.624561][T17047] syzkaller0: entered promiscuous mode [ 424.624742][T17047] syzkaller0: entered allmulticast mode [ 425.091250][T17078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3293'. [ 425.169056][T17044] syzkaller0: entered promiscuous mode [ 425.169091][T17044] syzkaller0: entered allmulticast mode [ 425.268205][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3293'. [ 428.321540][T17112] netlink: 'syz.4.3295': attribute type 1 has an invalid length. [ 428.433437][T17112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.491783][T17114] bond1: (slave syz_tun): Removing an active aggregator [ 428.494551][T17114] bond1: (slave syz_tun): Releasing backup interface [ 428.602096][T17114] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 429.757952][T17164] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3307'. [ 429.929902][T17171] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 429.996402][T17171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.164803][T17171] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 430.371420][T16597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.455774][T16597] veth0_vlan: entered promiscuous mode [ 430.474677][T16597] veth1_vlan: entered promiscuous mode [ 430.504665][T16597] veth0_macvtap: entered promiscuous mode [ 430.632302][T16597] veth1_macvtap: entered promiscuous mode [ 430.739345][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 430.845944][T16597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.874822][T16597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.910997][T17197] ip_tables: iptables: counters copy to user failed while replacing table [ 431.087325][ T7868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.088361][ T7868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.088403][ T7868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.088439][ T7868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.543549][T17214] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 431.570252][ T7858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.570273][ T7858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.675579][T17214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.734932][T17216] bond2: (slave syz_tun): Removing an active aggregator [ 431.735609][T17216] bond2: (slave syz_tun): Releasing backup interface [ 431.782748][T17216] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 431.830776][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807598ac00: rx timeout, send abort [ 431.831152][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807598ac00: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 431.973516][ T7862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.973538][ T7862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.116067][T17231] syzkaller0: entered promiscuous mode [ 432.116090][T17231] syzkaller0: entered allmulticast mode [ 432.148776][T17229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.148973][T17229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.153833][T17229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.154006][T17229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.024559][T17242] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3329'. [ 433.140675][T17242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3329'. [ 433.262624][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.267709][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.276200][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.295541][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.309987][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.457920][T17254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3331'. [ 433.594000][ T5642] syz_tun (unregistering): left allmulticast mode [ 433.594027][ T5642] syz_tun (unregistering): left promiscuous mode [ 433.594113][ T5642] bridge0: port 1(syz_tun) entered disabled state [ 433.961129][T17263] ipt_ECN: cannot use operation on non-tcp rule [ 433.993896][T17267] netlink: 'syz.3.3335': attribute type 1 has an invalid length. [ 434.098622][ T7868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.104555][ T7868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.393667][T17267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.450877][T17270] bond3: (slave syz_tun): Removing an active aggregator [ 434.451559][T17270] bond3: (slave syz_tun): Releasing backup interface [ 434.490544][T17270] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 434.562504][ T7868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.562542][ T7868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.791280][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 434.815312][ T7868] .`: (slave netdevsim1): Releasing backup interface [ 434.856104][ T7868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.856138][ T7868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.113502][ T7868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.113540][ T7868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.175344][T17249] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.290903][T17299] tipc: Started in network mode [ 435.290949][T17299] tipc: Node identity 12717e31260a, cluster identity 4711 [ 435.291275][T17299] tipc: Enabled bearer , priority 0 [ 435.390668][T17304] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3346'. [ 435.417164][ T53] Bluetooth: hci1: command tx timeout [ 435.535563][T17298] tipc: Disabling bearer [ 436.053632][ T7868] bridge_slave_1: left promiscuous mode [ 436.058024][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.123912][T17332] xt_hashlimit: size too large, truncated to 1048576 [ 436.123931][T17332] xt_hashlimit: max too large, truncated to 1048576 [ 436.124171][T17332] xt_hashlimit: overflow, rate too high: 0 [ 436.205252][ T7868] pim6reg: left allmulticast mode [ 436.213082][ T7868] dvmrp1: left allmulticast mode [ 436.229798][ T7868] tipc: Resetting bearer [ 437.500250][ T53] Bluetooth: hci1: command tx timeout [ 437.925421][ T7868] bond3 (unregistering): (slave geneve2): Releasing active interface [ 438.016407][ T7868] tipc: Disabling bearer [ 438.220739][ T7868] bond1 (unregistering): (slave bridge2): Releasing active interface [ 438.252075][ T7868] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 438.252104][ T7868] bridge3 (unregistering): left promiscuous mode [ 438.424990][ T7868] bond6 (unregistering): (slave bridge6): Releasing active interface [ 438.442723][ T7868] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.449243][ T7868] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.471811][ T7868] .` (unregistering): Released all slaves [ 438.514732][ T7868] bond1 (unregistering): Released all slaves [ 438.537408][ T7868] bond2 (unregistering): Released all slaves [ 438.575395][ T7868] bond0 (unregistering): Released all slaves [ 438.609983][ T7868] bond3 (unregistering): Released all slaves [ 438.636752][ T7868] bond4 (unregistering): Released all slaves [ 438.660446][ T7868] bond5 (unregistering): Released all slaves [ 438.684615][ T7868] bond6 (unregistering): Released all slaves [ 438.717529][ T7868] bond7 (unregistering): Released all slaves [ 438.732508][ T7868] bond8 (unregistering): Released all slaves [ 438.896396][T17383] netlink: 'syz.4.3357': attribute type 3 has an invalid length. [ 438.935751][ T7868] tipc: Disabling bearer [ 438.935897][ T7868] tipc: Left network mode [ 439.206304][T17425] netlink: 'syz.2.3362': attribute type 9 has an invalid length. [ 439.220437][T17427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.220454][T17427] IPv6: NLM_F_CREATE should be set when creating new route [ 439.592365][ T53] Bluetooth: hci1: command tx timeout [ 439.868732][T17441] gtp0: entered promiscuous mode [ 439.868756][T17441] gtp0: entered allmulticast mode [ 439.931944][T17447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 439.995597][T17442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.165123][T17249] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.165305][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.165448][T17249] bridge_slave_0: entered allmulticast mode [ 440.172559][T17249] bridge_slave_0: entered promiscuous mode [ 440.186205][T17249] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.186307][T17249] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.186441][T17249] bridge_slave_1: entered allmulticast mode [ 440.191043][T17249] bridge_slave_1: entered promiscuous mode [ 440.211755][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 440.334150][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.344040][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.558995][T17249] team0: Port device team_slave_0 added [ 440.611463][T17249] team0: Port device team_slave_1 added [ 440.686229][T17414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.800449][T17463] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3370'. [ 440.855976][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.855994][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.856021][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.952700][T17463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.975883][T17468] netlink: 'syz.2.3371': attribute type 11 has an invalid length. [ 440.975905][T17468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3371'. [ 440.996299][T17463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.016386][T17463] bond0 (unregistering): Released all slaves [ 441.113194][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.113213][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.113241][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.346985][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3372'. [ 441.657775][ T53] Bluetooth: hci1: command tx timeout [ 441.680443][T17249] hsr_slave_0: entered promiscuous mode [ 441.684432][T17249] hsr_slave_1: entered promiscuous mode [ 441.692240][T17249] debugfs: 'hsr0' already exists in 'hsr' [ 441.692263][T17249] Cannot create hsr debugfs directory [ 441.730279][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'. [ 441.730315][T17488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3375'. [ 441.748588][T17481] vlan2: entered promiscuous mode [ 441.748608][T17481] bridge0: entered promiscuous mode [ 441.748777][T17481] vlan2: entered allmulticast mode [ 441.748790][T17481] bridge0: entered allmulticast mode [ 441.866406][T17488] geneve2: entered promiscuous mode [ 441.866428][T17488] geneve2: entered allmulticast mode [ 442.357795][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3381'. [ 442.653345][T17518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3382'. [ 442.833276][T17520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3382'. [ 442.860195][T17522] xt_hashlimit: size too large, truncated to 1048576 [ 443.227616][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 443.274905][T17531] bridge_slave_1: left allmulticast mode [ 443.274933][T17531] bridge_slave_1: left promiscuous mode [ 443.275248][T17531] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.365573][T17531] bridge_slave_0: left allmulticast mode [ 443.365607][T17531] bridge_slave_0: left promiscuous mode [ 443.365826][T17531] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.690474][T17547] Cannot find del_set index 0 as target [ 443.737704][ T53] Bluetooth: hci1: command tx timeout [ 443.757657][T17533] Cannot find add_set index 0 as target [ 443.783336][T17547] veth0: entered promiscuous mode [ 443.783396][T17547] veth0: left promiscuous mode [ 443.865143][ T7868] hsr_slave_0: left promiscuous mode [ 443.953247][ T7868] veth1_macvtap: left promiscuous mode [ 443.954457][ T7868] veth0_macvtap: left promiscuous mode [ 443.954720][ T7868] veth1_vlan: left promiscuous mode [ 443.954789][ T7868] veth0_vlan: left promiscuous mode [ 444.202669][T17561] sctp: [Deprecated]: syz.4.3390 (pid 17561) Use of int in maxseg socket option. [ 444.202669][T17561] Use struct sctp_assoc_value instead [ 444.536633][ T7868] team0 (unregistering): Port device team_slave_1 removed [ 444.565757][ T7868] team0 (unregistering): Port device team_slave_0 removed [ 445.093039][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3393'. [ 445.334994][T17575] syzkaller0: entered promiscuous mode [ 445.335019][T17575] syzkaller0: entered allmulticast mode [ 445.512994][ T7868] IPVS: stop unused estimator thread 0... [ 446.334582][T17249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.344896][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.345827][T17249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.383195][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.384707][T17249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.422292][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.429397][T17249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.448358][T17249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.544983][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.545311][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.545624][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.545985][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.558888][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.559243][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.559552][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.560085][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.560388][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.579048][T17616] ip_tables: iptables: counters copy to user failed while replacing table [ 446.686220][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3406'. [ 446.686277][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 446.755569][T17631] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 446.795052][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 446.816426][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 446.879359][T17631] bond1: option fail_over_mac: invalid value (16) [ 446.883365][T17631] bond1 (unregistering): Released all slaves [ 446.949087][T17249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.000393][T17249] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.012903][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.013011][ T7862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.044007][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.044113][ T7868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.487297][T17667] netlink: 'syz.0.3413': attribute type 2 has an invalid length. [ 447.488666][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3413'. [ 447.488691][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3413'. [ 447.562363][T17669] syzkaller0: entered promiscuous mode [ 447.562389][T17669] syzkaller0: entered allmulticast mode [ 447.752981][T17674] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3415'. [ 447.755646][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'. [ 447.916254][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 447.935112][T17684] syzkaller0: entered promiscuous mode [ 447.935134][T17684] syzkaller0: entered allmulticast mode [ 447.952830][T17684] netlink: 'syz.4.3417': attribute type 2 has an invalid length. [ 448.686542][T17249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.921940][T17249] veth0_vlan: entered promiscuous mode [ 448.959801][T17249] veth1_vlan: entered promiscuous mode [ 449.006112][T17249] veth0_macvtap: entered promiscuous mode [ 449.017473][T17249] veth1_macvtap: entered promiscuous mode [ 449.041265][T17249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.045937][T17249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.150236][ T7864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.154214][ T7862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.154585][ T7862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.155019][ T7862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.215684][T17717] erspan0: entered promiscuous mode [ 449.234569][T17717] vlan2: entered promiscuous mode [ 449.627760][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3426'. [ 449.711648][ T7864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.711670][ T7864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.860774][ T7868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.860796][ T7868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.865247][T17742] syzkaller1: entered promiscuous mode [ 449.865269][T17742] syzkaller1: entered allmulticast mode [ 449.901595][T17742] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 450.225046][T17731] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 450.480414][T17758] Bluetooth: MGMT ver 1.23 [ 450.495428][T17758] xt_hashlimit: size too large, truncated to 1048576 [ 451.318106][T17793] syzkaller1: entered promiscuous mode [ 451.318129][T17793] syzkaller1: entered allmulticast mode [ 451.783498][T17804] __nla_validate_parse: 7 callbacks suppressed [ 451.783518][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 451.803482][T17806] net_ratelimit: 57 callbacks suppressed [ 451.803503][T17806] ip_tables: iptables: counters copy to user failed while replacing table [ 452.022950][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3440'. [ 452.102477][T17828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3444'. [ 453.068289][T17876] ip_tables: iptables: counters copy to user failed while replacing table [ 453.136349][T17881] netlink: 'syz.2.3456': attribute type 1 has an invalid length. [ 453.175948][T17881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.287151][T17890] netlink: 'syz.2.3456': attribute type 2 has an invalid length. [ 453.413778][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3459'. [ 453.450161][T17896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3459'. [ 453.715224][T17909] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3462'. [ 453.845730][T17909] syzkaller1: entered promiscuous mode [ 453.845755][T17909] syzkaller1: entered allmulticast mode [ 453.910041][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3465'. [ 454.043758][T17930] ip_tables: iptables: counters copy to user failed while replacing table [ 454.089056][T17931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3466'. [ 454.329587][T17946] netlink: 'syz.1.3469': attribute type 9 has an invalid length. [ 454.333152][ T7860] IPVS: starting estimator thread 0... [ 454.476707][T17958] tipc: Enabling of bearer rejected, failed to enable media [ 454.504562][T17947] IPVS: Scheduler module ip_vs_mh not found [ 454.504634][T17949] IPVS: using max 30 ests per chain, 72000 per kthread [ 454.509976][T17956] syzkaller0: entered promiscuous mode [ 454.509997][T17956] syzkaller0: entered allmulticast mode [ 454.535984][T17960] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3475'. [ 454.966314][T17978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3479'. [ 455.080679][T17980] syzkaller1: entered promiscuous mode [ 455.080702][T17980] syzkaller1: entered allmulticast mode [ 456.090996][T18033] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 456.115440][T18033] bond1 (unregistering): Released all slaves [ 456.575616][T18062] bond0: ARP target 8.4.0.0 is already present [ 456.575649][T18062] bond0: option arp_ip_target: invalid value (1032) [ 457.156208][T18092] Cannot find add_set index 0 as target [ 457.231299][T18096] __nla_validate_parse: 7 callbacks suppressed [ 457.231320][T18096] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3515'. [ 457.231344][T18096] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 457.412574][T18100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 457.412611][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 458.161988][T18130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3527'. [ 463.199385][T18340] netlink: 'syz.4.3618': attribute type 9 has an invalid length. [ 463.618781][T18367] ip_tables: iptables: counters copy to user failed while replacing table [ 463.645054][T18368] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 463.701801][T18371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3635'. [ 463.701837][T18371] bond0: ARP target 8.4.0.0 is already present [ 463.701856][T18371] bond0: option arp_ip_target: invalid value (1032) [ 463.750284][T18374] syzkaller0: entered promiscuous mode [ 463.750307][T18374] syzkaller0: entered allmulticast mode [ 464.121393][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3644'. [ 464.121419][T18393] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3644'. [ 464.321944][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3646'. [ 464.321977][T18401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3646'. [ 464.431121][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3646'. [ 464.431156][T18401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3646'. [ 464.437661][ T7868] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.437708][ T7868] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.437744][ T7868] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.437778][ T7868] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.495554][T18414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3650'. [ 464.569070][T18416] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3651'. [ 464.638424][T18413] syzkaller1: entered promiscuous mode [ 464.638449][T18413] syzkaller1: entered allmulticast mode [ 465.049627][T18451] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 465.112214][T18449] vlan2: entered promiscuous mode [ 465.112237][T18449] bridge0: entered promiscuous mode [ 465.112403][T18449] vlan2: entered allmulticast mode [ 465.112419][T18449] bridge0: entered allmulticast mode [ 465.311604][T18465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3669'. [ 465.617891][ T53] Bluetooth: hci5: ACL packet for unknown connection handle 3484 [ 465.642666][T18483] tipc: MTU too low for tipc bearer [ 465.642901][T18483] tipc: MTU too low for tipc bearer [ 465.643176][T18483] tipc: MTU too low for tipc bearer [ 465.643380][T18483] tipc: MTU too low for tipc bearer [ 465.643585][T18483] tipc: MTU too low for tipc bearer [ 465.643786][T18483] tipc: MTU too low for tipc bearer [ 465.644008][T18483] tipc: MTU too low for tipc bearer [ 465.644278][T18483] tipc: MTU too low for tipc bearer [ 465.644483][T18483] tipc: MTU too low for tipc bearer [ 465.644684][T18483] tipc: MTU too low for tipc bearer [ 465.644914][T18483] tipc: MTU too low for tipc bearer [ 465.645114][T18483] tipc: MTU too low for tipc bearer [ 465.645387][T18483] tipc: MTU too low for tipc bearer [ 465.645615][T18483] tipc: MTU too low for tipc bearer [ 465.645811][T18483] tipc: MTU too low for tipc bearer [ 465.646035][T18483] tipc: MTU too low for tipc bearer [ 465.646240][T18483] tipc: MTU too low for tipc bearer [ 465.646528][T18483] tipc: MTU too low for tipc bearer [ 465.646726][T18483] tipc: MTU too low for tipc bearer [ 465.728004][T18483] tipc: MTU too low for tipc bearer [ 465.728227][T18483] tipc: MTU too low for tipc bearer [ 465.728425][T18483] tipc: MTU too low for tipc bearer [ 465.728614][T18483] tipc: MTU too low for tipc bearer [ 465.728809][T18483] tipc: MTU too low for tipc bearer [ 465.732799][T18483] tipc: MTU too low for tipc bearer [ 465.733177][T18483] tipc: MTU too low for tipc bearer [ 465.733377][T18483] tipc: MTU too low for tipc bearer [ 465.734534][T18483] tipc: MTU too low for tipc bearer [ 465.734888][T18483] tipc: MTU too low for tipc bearer [ 465.735094][T18483] tipc: MTU too low for tipc bearer [ 465.735335][T18483] tipc: MTU too low for tipc bearer [ 465.735548][T18483] tipc: MTU too low for tipc bearer [ 465.737910][T18483] tipc: MTU too low for tipc bearer [ 466.046430][T18495] vlan2: entered promiscuous mode [ 466.046452][T18495] bridge0: entered promiscuous mode [ 466.046631][T18495] vlan2: entered allmulticast mode [ 466.046645][T18495] bridge0: entered allmulticast mode [ 466.129896][T18497] bond0: ARP target 8.4.0.0 is already present [ 466.129930][T18497] bond0: option arp_ip_target: invalid value (1032) [ 466.350610][T18499] tipc: Started in network mode [ 466.350640][T18499] tipc: Node identity aefafefd68a2, cluster identity 4711 [ 466.350823][T18499] tipc: Enabled bearer , priority 10 [ 466.356282][T18498] tipc: Resetting bearer [ 466.499434][T18498] tipc: Disabling bearer [ 467.112950][T18549] netlink: 'syz.3.3697': attribute type 9 has an invalid length. [ 467.765327][T18585] netlink: 'syz.2.3709': attribute type 9 has an invalid length. [ 468.202038][T18600] syzkaller1: entered promiscuous mode [ 468.202062][T18600] syzkaller1: entered allmulticast mode [ 468.472105][T18615] netlink: 'syz.1.3722': attribute type 9 has an invalid length. [ 468.535324][T18622] ip6t_hbh: Not strict - not implemented [ 468.551034][T18624] netlink: 'syz.0.3725': attribute type 1 has an invalid length. [ 469.050667][T18651] __nla_validate_parse: 6 callbacks suppressed [ 469.050687][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 469.195327][T18659] netlink: 'syz.2.3737': attribute type 9 has an invalid length. [ 469.448195][T18672] netlink: 'syz.4.3739': attribute type 1 has an invalid length. [ 469.646030][T18683] xt_ecn: cannot match TCP bits for non-tcp packets [ 469.776000][T18693] netlink: 556 bytes leftover after parsing attributes in process `syz.1.3748'. [ 469.791139][T18693] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 469.791175][T18693] nbd: nbd296 already in use [ 469.946651][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3750'. [ 470.805885][T18736] netlink: 'syz.3.3762': attribute type 9 has an invalid length. [ 470.948070][T18740] netlink: 'syz.4.3764': attribute type 21 has an invalid length. [ 470.948093][T18740] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3764'. [ 471.149754][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 471.193583][T18755] netlink: 'syz.2.3768': attribute type 3 has an invalid length. [ 471.193606][T18755] netlink: 'syz.2.3768': attribute type 2 has an invalid length. [ 471.213677][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 471.556089][T18777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3773'. [ 471.601020][T18779] netlink: 'syz.0.3775': attribute type 9 has an invalid length. [ 471.845695][T18792] block nbd2: not configured, cannot reconfigure [ 471.890919][T18792] block nbd2: not configured, cannot reconfigure [ 472.031707][T18802] ip_tables: iptables: counters copy to user failed while replacing table [ 472.093458][T18804] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 472.121989][T18806] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 472.266346][T18815] SET target dimension over the limit! [ 472.321826][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3788'. [ 472.321930][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3788'. [ 472.837583][T18845] ip_tables: iptables: counters copy to user failed while replacing table [ 473.068978][T18852] bond1: entered allmulticast mode [ 473.069431][T18852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.150499][T18861] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3796'. [ 473.196764][T18861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.244644][T18861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.263160][T18861] bond0 (unregistering): Released all slaves [ 473.392252][T18875] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 473.404146][T18875] netlink: get zone limit has 8 unknown bytes [ 473.606627][T18889] ip_tables: iptables: counters copy to user failed while replacing table [ 474.464635][T18943] __nla_validate_parse: 5 callbacks suppressed [ 474.464654][T18943] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3824'. [ 474.749990][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 474.754348][T18963] ip_tables: iptables: counters copy to user failed while replacing table [ 475.925503][T18974] No such timeout policy "syz0" [ 476.089324][T18995] validate_nla: 2 callbacks suppressed [ 476.089344][T18995] netlink: 'syz.0.3841': attribute type 13 has an invalid length. [ 476.090116][T18996] netlink: 'syz.0.3841': attribute type 13 has an invalid length. [ 476.213669][T19000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3844'. [ 476.341683][T19008] ip_tables: iptables: counters copy to user failed while replacing table [ 476.558782][ T7858] IPVS: starting estimator thread 0... [ 476.647020][T19017] IPVS: using max 31 ests per chain, 74400 per kthread [ 476.905688][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3855'. [ 476.952871][T19028] bond4: entered promiscuous mode [ 476.953372][T19028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.956482][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3858'. [ 477.084359][T19028] bridge1: entered promiscuous mode [ 477.091771][T19028] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 477.161030][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3860'. [ 477.583108][T19058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3866'. [ 477.603478][T19058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3866'. [ 477.956045][T19083] ip_tables: iptables: counters copy to user failed while replacing table [ 478.074327][T19091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3877'. [ 478.154067][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3877'. [ 479.898815][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 482.636233][T19074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.423034][ C1] sched: DL replenish lagged too much [ 483.752539][ T53] Bluetooth: hci5: command 0x0405 tx timeout [ 488.550156][ T4952] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.462649][ T4952] Bluetooth: hci4: command 0x0406 tx timeout [ 530.324492][ T4952] Bluetooth: hci2: command 0x0406 tx timeout [ 613.616840][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 613.623840][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19074/1:b..l.. [ 613.633124][ C1] rcu: (detected by 1, t=10503 jiffies, g=89821, q=613282 ncpus=2) [ 613.641123][ C1] task:syz.0.3873 state:R running task stack:25600 pid:19074 tgid:19073 ppid:16597 task_flags:0x400140 flags:0x00080003 [ 613.654646][ C1] Call Trace: [ 613.657930][ C1] [ 613.660876][ C1] __schedule+0x17dd/0x5830 [ 613.665433][ C1] ? __pfx___schedule+0x10/0x10 [ 613.670306][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 613.675703][ C1] preempt_schedule_common+0x7f/0xd0 [ 613.681001][ C1] ? cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 613.687421][ C1] preempt_schedule_thunk+0x16/0x40 [ 613.692605][ C1] __local_bh_enable_ip+0xe9/0x140 [ 613.697703][ C1] cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 613.703838][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 613.709103][ C1] nl80211_netlink_notify+0x35d/0x860 [ 613.714452][ C1] ? nl80211_netlink_notify+0x75/0x860 [ 613.719894][ C1] notifier_call_chain+0x1a5/0x3d0 [ 613.724986][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 613.730681][ C1] netlink_release+0x1211/0x1a90 [ 613.735666][ C1] ? netlink_release+0x106/0x1a90 [ 613.740670][ C1] ? __pfx_netlink_release+0x10/0x10 [ 613.745931][ C1] ? down_write+0x166/0x200 [ 613.750453][ C1] ? __pfx_down_write+0x10/0x10 [ 613.755286][ C1] __sock_release+0xa0/0x1f0 [ 613.759907][ C1] ? __pfx_sock_close+0x10/0x10 [ 613.764733][ C1] sock_close+0x1c/0x30 [ 613.768863][ C1] __fput+0x408/0xa40 [ 613.772826][ C1] task_work_run+0x1d9/0x260 [ 613.777422][ C1] ? __pfx_task_work_run+0x10/0x10 [ 613.782516][ C1] ? kick_process+0xeb/0x160 [ 613.787103][ C1] get_signal+0x117c/0x12c0 [ 613.791615][ C1] ? __fput_deferred+0x222/0x390 [ 613.796553][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 613.802093][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 613.808227][ C1] ? __x64_sys_sendmsg+0x25d/0x290 [ 613.813336][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 613.818706][ C1] ? rcu_is_watching+0x16/0xb0 [ 613.823472][ C1] do_syscall_64+0x328/0x520 [ 613.828079][ C1] ? trace_irq_disable+0x3b/0x140 [ 613.833090][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.839138][ C1] ? clear_bhb_loop+0x70/0xc0 [ 613.843792][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.849674][ C1] RIP: 0033:0x7f378039f559 [ 613.854066][ C1] RSP: 002b:00007f37811af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.862453][ C1] RAX: 000000000000001c RBX: 00007f3780625fa0 RCX: 00007f378039f559 [ 613.870399][ C1] RDX: 0000000004008054 RSI: 0000200000000280 RDI: 0000000000000009 [ 613.878347][ C1] RBP: 00007f3780436b50 R08: 0000000000000000 R09: 0000000000000000 [ 613.886293][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.894237][ C1] R13: 00007f3780626038 R14: 00007f3780625fa0 R15: 00007ffec9d89e08 [ 613.902197][ C1]