last executing test programs: 4m51.123204524s ago: executing program 2 (id=301): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x40800) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={r1, 0x2, 0x0, "0508f943edd7385c891e3d1e773d67c1d394fc7471169aa8857d0ed4ac0ba7685d8f585bfcdc26f94b82bd65eb1265bbe35c75e49bfb29dd9eeca56fe0c52a10fdc876ed3269b172377f565239530ce0bc0418e66f76af43c0e3c812bbd115c0f8e492ea7fa78309bd761bbf207dd4aa5329a021ccb1072e27e0907a6674ec0221bd36ca066a6d522bd6b0d65efadfdb4dc47c16e1fdf238571593c1400d061066bbbc0d4ae859236e403f863bf17426103f45ac5fef542628c455507aa0f343e850909c7f7bf9b7747b410f4b1ef474d0d27927697d7360cc39b55e3acafb9e7ba747"}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'io'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'net_cls'}, {0x2d, 'io'}, {0x2b, 'hugetlb'}, {0x2b, 'net_cls'}]}, 0x49) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000240)={0x67, @remote, 0x4e20, 0x0, 'sh\x00', 0x4, 0x4, 0x72}, 0x2c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/204, 0xcc, 0x0, &(0x7f00000005c0)=""/29, 0x1d}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x12, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0xfc64042444c498f6, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x6, 0x2, 0x4, 0x50, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_fd={0x18, 0x555133d1f8ce858c, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x28, '\x00', r2, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x6, 0x10001, 0x97}, 0x10, r7, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[r8, r9, r10], &(0x7f0000000800)=[{0x1, 0x2, 0x4, 0x6}, {0x0, 0x4, 0x4, 0x8}, {0x3, 0x4, 0x3, 0xb}, {0x2, 0x3, 0x2, 0x9}], 0x10, 0x81}, 0x94) r11 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000900)={0x2, 0x3}, 0x4) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, 0x6, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}}, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r12) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r12, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x80, r13, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r14 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r14, 0x1, 0x53, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000001040)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x220c0411}, 0xc, &(0x7f0000001000)={&(0x7f0000000d00)={0x2ec, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_MASK={0xd8, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0xd4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f00000012c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)={0x1ac, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xd5, 0x8, "0b603280bcc8e45823792835b7f44d40c37b68415b5c712d14c68324d4a5e2ca1adacc30a73d52b48554141e30a6a9b55e7b1fe0492affd89ef58ab4d3a2aef403cd1b58f063dd7123455f64e6801bba94a55c2869bce3313181f85b6b6cef49017dae32ff6757e5426183831b1c1f1a81df86d4692ee4214b1c4121cc17a3f29ebdd046aca7ffaf8f6a3d56359355a6614c67f8657999908fdebde45bba2635af0b1886264efa3268be0fdac2cd30b7236e3ed13737e47df23d2fc446ca9b14726ef65c401d06e7a08ddb015488c742ae"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x98, 0x8, "84e6def72e211c3b475edab517c394be0339ed214b60cb06b7dbaf70f430ac72195266d67f203e862685957e9514df0d7185721ae76775bca385a4c2e9f89aff082b2e15b05e752b39c03396f4ad44098227d9c2a082fffe1cd7cb421f6ce7e3e4dbae08e8d4e3370ea7c8533f8c2285e1371d403106659930399f3b3be0ba590913210cf0b94f6bc6f16dd516a29289b4c01a6d"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r12, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x4c, r15, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4586575e5894ed6c279f40c5c5"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "0efca0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x840) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r12, &(0x7f0000001ac0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001500)={0x570, r15, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ee3, 0x13}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x12c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xdf}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0xa0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x99, 0xb, "e58669cdd206f57db2cec1e1a060b52d90f8b25951e07f16e411084ecbce7e8a6637e5ff61dbfb2133ccd4d596a3115cd4ab7e1f5c4bb2ee545cbe4d8173cb0bd8c3abd54be55aefd4921ca9562e2cc307102555a4ed2cb599376ed6aa5e56048185bd271b0fa000cdfa9d2b3f4404cd03291054e480f79c881edc256ad1feec2c403608fecc71cec7069f2ba4e89d7fc9b02de850"}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f187ca22da7c"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x348, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7173b3b06ccd"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x7c, 0xb, "33345ec60b5adb728c210a6af13634fce4fc8c16634d14dee03db1112caf6c52d418c265ff573b1c88bdac6e931993c5d96669e6786d355825080dabbd0c636c779845a007c07a8b7753cf35bbfcab72046acd07ac8bed14746fd5c71a8af6a58b0004a08decc0f37069d8e2dc78421b432250a797e35f34"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x214, 0xd, 0x0, 0x1, [{0x59, 0x0, "9c7c424fcf9bdaa95da09fd19059374bdeca94149602218e2ec21957cb2f8f6318f408bb5d9504e2e5c6d5f9e25e369a9f837f5cd9945e38007e42e928499c2bdba163ef58999a99ea57c1a8e9f3e92b9c0cbe2812"}, {0xbb, 0x0, "1224d8f6229670b1d13a292dd9864e03d602fa25d5a0783d4433e7f0786e15558546aa6291216466dedd2f1c289de0522f6ea7123e69f00f8d5f04d876b17e341ea9704d79d88926582b0ce34d4a20401c4344ad4457835d8d8e6bc2ce1f6e9da1626d3ee3eecad0298e011aed849fc970e5300028b2857bcec13aff1ab40bf8e20c4bab925d0a0f9f55c4b5f2228f51a1914e8141008ec2cb7b43bf91a0b7236c957844ba5865608bcb45c0ebfe62fdc3bc15bd460caf"}, {0xb7, 0x0, "ade2f7286f1d5bf6901d4a40a68f35c9cff664c5662bb49fda0e83753fbba9b2f2c230663aa105ba22e16feb68da4bad267be256ad6ead305ac2817f8f8fa4f1d1087095b518ac6a78a652b81c5f29e07b8f716cfb16f1db2033ea5431c9d7b24cb5acb8d5d5ef27650ba9770ab501aff71899b93e22c67413bf09b45ba36d8aca2f9c79b3c070330fd0ab0a50000d71cafe7ca10e9b815ecae7c2b420da8a5413e1b195ddc7bd49d73896f5bb0e9008ab6f90"}, {0x3f, 0x0, "23fa4e9dfbf607354f4c4bab244c57bc21321c77b102bd1efca6ca6e46f7eb2ce9446e36be0ba899ceb4888ea8ddaed73fed6f21dc5f411d26fb87"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3e488c111641"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x7e, 0xb, "eaa4b35d31d06565e464cb9c35c1c9d396f2b2271e2408b2f05fee81d6ecd44269c74a99d5f553b06645b276f7882e83dee93edbbc0785f73fc3cf5e2b7f9a2fa90f664571e3b55770e7ccb2624a6faa528bc4c646803f3827f3108f5fdc95317b81b2b73325c1058e29d4e34a60e8f797dba3676c629fee616c"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xd}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x19}]}]}, 0x570}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000001) setsockopt$MRT6_DEL_MFC(r12, 0x29, 0xcd, &(0x7f0000001b00)={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x80000001}, {0xa, 0x4e22, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x0, {[0x1ff, 0x10000, 0x8, 0x5, 0x0, 0x9, 0xfffffffd, 0x45d]}}, 0x5c) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000001b80)={0x7, 0x1, 0x2}) 4m50.939549491s ago: executing program 2 (id=303): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 4m50.356247369s ago: executing program 2 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000070a01010000000000000000010000030900010073797a30000000000900020073797a9e00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x421ec0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xf2a6) 4m50.220335965s ago: executing program 2 (id=310): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0x2, 0x0, 0x7, 0x1}, {0x6, 0x5, 0x1, 0x8}]}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delneigh={0x30, 0x1d, 0x1, 0x70bd28, 0xa5dfdbfa, {0xa, 0x0, 0x0, 0x0, 0x8, 0xc0, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r3}) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000140)=""/63, &(0x7f0000000200)=0x3f) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 4m49.981004482s ago: executing program 2 (id=312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m48.823521467s ago: executing program 2 (id=316): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m33.739825s ago: executing program 32 (id=316): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m55.554884599s ago: executing program 4 (id=1549): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/57, 0x39}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f00000041c0)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000120000000000000001ff02000000000000000000000000000187"], 0xfce) 1m54.914716336s ago: executing program 3 (id=1553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003e8a6938dcf19a47cf29950f9e9149b9d13877476c8ef803280969e39099325b52b179513bbf961dc18d193a535da29fb90c6655caf34c0d5a3cb71ece51269a2afb25cc5814e31436d4ed85c4ce06240d354091fbe9a5a213c2426ee850b61c6315a67a658a2705c39f035c02e1f65539e958f15eeb1781418876b6f352efc2c6798df6cd2b34a407ebacca02ad7eaea9de182f5624b5e66266c239667f22495a13dd93ada2eea14a7d9c55f78c0161a0a162d4778a1bd4f8730d4dacbbf5b7620f"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=0xffffffffffffffff, 0x20, 0x0, 0x66f3, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r4, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0, @void, @void, r6}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r7, r1, 0x11, 0x2011, r3, @value=r8, @void, @void, @void, r6}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003e8a6938dcf19a47cf29950f9e9149b9d13877476c8ef803280969e39099325b52b179513bbf961dc18d193a535da29fb90c6655caf34c0d5a3cb71ece51269a2afb25cc5814e31436d4ed85c4ce06240d354091fbe9a5a213c2426ee850b61c6315a67a658a2705c39f035c02e1f65539e958f15eeb1781418876b6f352efc2c6798df6cd2b34a407ebacca02ad7eaea9de182f5624b5e66266c239667f22495a13dd93ada2eea14a7d9c55f78c0161a0a162d4778a1bd4f8730d4dacbbf5b7620f"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x20, 0x0, 0x66f3, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r4, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0, @void, @void, r6}, 0x20) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) pipe(&(0x7f0000000100)) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r7, r1, 0x11, 0x2011, r3, @value=r8, @void, @void, @void, r6}, 0x20) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) (async) 1m54.628130812s ago: executing program 4 (id=1557): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xb8, &(0x7f0000006680)=[@in6={0xa, 0x4e22, 0x6, @remote, 0x4}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xb}, @in6={0xa, 0x4e21, 0x8, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x3}, @in6={0xa, 0x4e21, 0x1, @remote, 0x7}, @in6={0xa, 0x4e24, 0xa, @mcast1, 0x8}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001d40)={r2, 0x3}, 0x8) r3 = socket$inet(0x2, 0x5, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000006ac0)=[{{&(0x7f0000000040)=@qipcrtr, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/27}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/250}, {&(0x7f0000000280)=""/8}], 0x0, &(0x7f0000000300)=""/192}, 0x6}, {{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000500)=""/135}, {&(0x7f0000000440)}, {&(0x7f00000005c0)=""/4096}, {&(0x7f00000015c0)=""/213}, {&(0x7f00000016c0)=""/148}, {&(0x7f0000001780)=""/202}, {&(0x7f0000001880)=""/132}, {&(0x7f0000001940)=""/140}, {&(0x7f0000000480)=""/10}]}}, {{&(0x7f0000001ac0)=@x25={0x9, @remote}, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b40)=""/255}, {&(0x7f0000001c40)=""/26}]}, 0x6}, {{&(0x7f0000001cc0)=@caif=@util, 0x0, &(0x7f0000003080)=[{&(0x7f0000001d40)}, {&(0x7f0000001d80)=""/4096}, {&(0x7f0000002d80)=""/199}, {&(0x7f0000002e80)=""/73}, {&(0x7f0000002f00)=""/72}, {&(0x7f0000002f80)=""/194}], 0x0, &(0x7f0000003100)=""/4096}, 0x7}, {{&(0x7f0000004100)=@ax25={{0x3, @null}, [@rose, @remote, @bcast, @null, @bcast, @bcast, @null, @bcast]}, 0x0, &(0x7f0000005340)=[{&(0x7f0000004180)=""/59}, {&(0x7f00000041c0)=""/4096}, {&(0x7f00000051c0)=""/2}, {&(0x7f0000005200)=""/59}, {&(0x7f0000005240)=""/228}], 0x0, &(0x7f00000053c0)=""/98}, 0x9f}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005440)=""/1}, {&(0x7f0000005480)=""/49}, {&(0x7f00000054c0)=""/4096}, {&(0x7f00000064c0)=""/64}, {&(0x7f0000006500)=""/79}], 0x0, 0xfffffffffffffffc}}, {{&(0x7f0000006600)=@in={0x2, 0x0, @private}, 0x0, &(0x7f00000067c0), 0x0, &(0x7f0000006800)=""/193}, 0x45}, {{&(0x7f0000006900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, &(0x7f00000069c0)=[{&(0x7f0000006980)}], 0x0, &(0x7f0000006a00)=""/163}, 0x4}], 0x400000000000118, 0x2001, 0x0) 1m54.560826781s ago: executing program 3 (id=1558): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005a0001002abd393ea9d78eecca3b000008000180feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000400)={@any, 0x80}) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf252500dfff0d0001006e65746465762cfb799c8d2d96c6e98b16334dfd6f8024fe8efde8c02602006e", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r7 = socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) (async) r12 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x2, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 1m54.374979478s ago: executing program 3 (id=1560): unshare(0x24060400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000080)=r1, 0x4) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$int_out(r3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000800000081115c00000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) epoll_create1(0x0) 1m52.740304307s ago: executing program 5 (id=1564): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x1003}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0x1ff, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0xfd, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0x9}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x2199, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x7, 0x10000, 0x1, 0x1, 0xf6}, {0x7d5, 0x3, 0x14, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0x6, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8c3e, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x8001, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0x0, 0x1b}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x133, &(0x7f0000000100)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[{0xffff, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1}, {0x8, 0x0, 0x1}], @ipv4=@tipc={{0x39, 0x4, 0x0, 0x8, 0x111, 0x64, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@end, @noop, @end, @rr={0x7, 0x17, 0xfa, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x24, 0xab, 0x0, 0x9, [0x4, 0xe9, 0x4, 0x7, 0x0, 0x0, 0x8, 0x200]}, @timestamp_prespec={0x44, 0x2c, 0x7, 0x3, 0x6, [{@loopback, 0xc}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x6}, {@multicast2, 0x9}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x62, 0x1, [{0x1, 0x11, "2ad6ef56e227af18c473ed2a9f65f7"}, {0x7, 0x6, "975dee20"}, {0x5, 0xb, "85b31abbab0c7855dd"}, {0x7, 0xb, "dd407b12c8f2fbb76f"}, {0x7, 0x7, "22d28b527b"}, {0x7, 0xd, "f9e66a42cd1b2826337abb"}, {0x2, 0xa, "82f5c9152b211b1e"}, {0x0, 0x11, "914e54b818fb12e6903ca9fd022db8"}]}]}}, @payload_named={{{{{0x2d, 0x0, 0x1, 0x0, 0x1, 0xa, 0x1, 0x2, 0x5, 0x0, 0x3, 0xd, 0x4, 0x2, 0x5, 0x9, 0x3, 0x4e24, 0x4e22}, 0x2}, 0x2, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xd1b1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044001}, 0x4000040) 1m52.718603674s ago: executing program 3 (id=1565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000800)) 1m52.714882231s ago: executing program 4 (id=1566): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x1, 0x30, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000013b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000013c00)=""/17, 0x11}, 0x8}], 0x1, 0x113c2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1m52.605586305s ago: executing program 0 (id=1567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000200), &(0x7f0000000580)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x28, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m52.540097515s ago: executing program 5 (id=1568): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x80003, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000841) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m52.514060369s ago: executing program 4 (id=1569): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1m52.42958881s ago: executing program 0 (id=1570): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r0, @ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="4400508011000100b1f5250ac1a981df71e7fe6cdd0000000400050004000600050002000300000011000100589c571fe46f182b78596bb7e6000000050009000000000005000800030000000a0006005050505050500000080035000000000004003400050018012800000008009f00060000000800a100050000000800a1000300000008002600df160000"], 0xa8}, 0x1, 0x0, 0x0, 0x20044890}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000002"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1m52.36421887s ago: executing program 4 (id=1571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) (async) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r2 = socket(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x8c, 0x8000, 0x6, 0x1, 0x65e, 0x7, 0x7, r4}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r4, 0xd2}, &(0x7f0000000400)=0x8) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, 0x0, 0x0, 0x200008c0}], 0x1, 0x44840) (async) recvmsg$can_j1939(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0xfe60}], 0x1}, 0x1) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0x1, 0xff}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000180), &(0x7f0000000580)}, 0x33) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r8, 0x3}, 0x12) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x28}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x23, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4004}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @ldst={0x3, 0x1, 0x6, 0xa, 0x0, 0x4, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xc2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9f}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m52.324707182s ago: executing program 1 (id=1572): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000180)=0xb, 0x1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) (rerun: 64) close(r5) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close(0x3) 1m52.268803999s ago: executing program 5 (id=1573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xbc, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, r10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x98}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x1, 0x3, 0x2, 0x5, 0x3, 0x40, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6d, 0x7d, &(0x7f0000000380)=""/125, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xa, 0xaa, 0xb}, 0x10, r10, 0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[r11], &(0x7f0000000500)=[{0x4, 0x1, 0x6, 0x8}, {0x1, 0x4, 0x10, 0x4}], 0x10, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r12, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0x11, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m52.241908271s ago: executing program 0 (id=1574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r2, 0x3) (async) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000003c0)="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") (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611484000000004025000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f0000000580)=""/196, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) unshare(0x22020600) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xb701, 0xfffffffc, 0x0, 0x7, 0x8afa, 0x8, 0x7ff}, 0x1c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000906010800d5000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8008000000000000000000000000bb060004400e1f00000500070037000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00002000000000000c00020001000000150000000c000c8006001d00d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) 1m52.149287872s ago: executing program 1 (id=1575): r0 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (rerun: 32) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000000c0)=""/49, 0x31}], 0x2, &(0x7f0000000200)=""/237, 0xed}, 0x10141) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m52.093544797s ago: executing program 3 (id=1576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x54ae}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x9, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m52.092566856s ago: executing program 0 (id=1577): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 1m51.95631555s ago: executing program 0 (id=1578): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000001500)=""/15, 0xf}], 0xffffff1f}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r7, 0xff, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1800}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x40}}, 0x4000010) r8 = socket$kcm(0x21, 0x2, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r9) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x110, 0x8000b}], 0x10}, 0x0) 1m51.871044537s ago: executing program 1 (id=1579): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffe0}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15e2c}]}}]}, 0x44}}, 0x20004894) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m51.685329327s ago: executing program 5 (id=1580): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (async) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc98}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYBLOB="5f035dea43175d6330743c16e6c82a19e247aedea19586b28a59ae028e39d14ab2dbc99f2ed8814cbe8a77fd4f5a431c41ecb8e0089c70382bc21f38f1bc95fec5e688c76c55", @ANYRES32=r2, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r2, @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xd2, &(0x7f0000000840)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@deltaction={0x42, 0x31, 0x101, 0x0, 0x20000000, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = socket(0x1e, 0x4, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) connect$tipc(r7, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r9 = accept$alg(r8, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="024068a4e7679ffdbe27d632768df5", 0xf}, {&(0x7f0000000300)="86fe", 0x2}], 0x2, 0x0, 0x0, 0x34044005}, 0x20044151) (async) recvmmsg(r9, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1}, 0x7fb}], 0x1, 0x40000160, 0x0) (async, rerun: 64) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000240)) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000004400), 0x400000000000203, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m51.680084466s ago: executing program 0 (id=1581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x8, 0x7, 0x0, 0x800, 0x5, 0x3}, {0xc, 0x5, 0xf, 0x7ff, 0x2, 0x6}], ['\x00', '\x00', '\x00', '\x00']}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000181200"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 1m51.638032565s ago: executing program 1 (id=1582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2508000000180004801300010062726f61646361d5e6ca337342e4cf"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 1m51.480985365s ago: executing program 1 (id=1583): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x18) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB="4f9e73540000000006000a00a1aa00000c00060003000000000000000c"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001e008d2af6000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x4044) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x4, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040084) 1m51.413495724s ago: executing program 5 (id=1584): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0xd0, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x98, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x88, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @random="a524ef5febd3"}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, {0xa, 0x4, @random="2e8d8c67f2a1"}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa}, {0xa, 0x4, @remote}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x4, @remote}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a0010042cbd7000fddbd72580140002fc02fe0900100000"], 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x40881) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000bc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x90, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xbc}]}, 0x90}}, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x100, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd8, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 1m51.38145407s ago: executing program 4 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @remote}, {0x2, 0x4e25, @loopback}, 0x4, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8, 0x1550b5e4, 0xa}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m51.250003449s ago: executing program 5 (id=1586): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1001, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x4c, 0x0, 0x54, 0x2, 0x3}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r5, 0x8}, &(0x7f0000000180)=0x8) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000240)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x39, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000020603000000000000008a6906ba99bed581e43d00000000000805000100070000000900020073797a31000000001c00078008008290811bbf124000000000050015004100000008000b40000003ff0500050002000000050004000100000011000300686173683a69"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1m51.248217966s ago: executing program 3 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffd99, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x7ff, @loopback={0xe0}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a3000"], 0x80}}, 0x0) 1m51.149518487s ago: executing program 1 (id=1588): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfdff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRESOCT=r1], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000f1ffffffffffff1f010000000000000040000000000000ac1414aa00000000000000000000000000000005000000000a00000300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x800000}, 0x2c) r7 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYRESHEX=r7, @ANYRES32=r3, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed60"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) unshare(0x6a040000) unshare(0x44000000) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) close(r4) r9 = socket$kcm(0x29, 0x7, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000000100)={0x2, 0x0, '\x00', 0x0, &(0x7f00000000c0)}) 1m21.938882613s ago: executing program 33 (id=1581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x8, 0x7, 0x0, 0x800, 0x5, 0x3}, {0xc, 0x5, 0xf, 0x7ff, 0x2, 0x6}], ['\x00', '\x00', '\x00', '\x00']}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000181200"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 0s ago: executing program 34 (id=1588): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfdff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRESOCT=r1], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000f1ffffffffffff1f010000000000000040000000000000ac1414aa00000000000000000000000000000005000000000a00000300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x800000}, 0x2c) r7 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYRESHEX=r7, @ANYRES32=r3, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed60"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) unshare(0x6a040000) unshare(0x44000000) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) close(r4) r9 = socket$kcm(0x29, 0x7, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000000100)={0x2, 0x0, '\x00', 0x0, &(0x7f00000000c0)}) kernel console output (not intermixed with test programs): sing attributes in process `syz.2.28'. [ 98.586478][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 98.920852][ T6072] netlink: 52 bytes leftover after parsing attributes in process `syz.1.32'. [ 98.946272][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.954854][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.978206][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.1.32'. [ 99.178912][ T6079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.33'. [ 99.240644][ T6079] netlink: 35 bytes leftover after parsing attributes in process `syz.3.33'. [ 99.255655][ T6079] netlink: 'syz.3.33': attribute type 6 has an invalid length. [ 99.264849][ T6079] netlink: 'syz.3.33': attribute type 5 has an invalid length. [ 99.321493][ T6084] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 99.342353][ T5986] ip6_vti0 speed is unknown, defaulting to 1000 [ 99.352600][ T6078] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 100.147805][ T6113] netlink: 'syz.4.43': attribute type 13 has an invalid length. [ 100.375055][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.383698][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.524679][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.541105][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.700675][ T5986] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.958068][ T1107] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.969317][ T1107] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.072751][ T1107] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.201341][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.209203][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.475233][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.492767][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.599133][ T6140] __nla_validate_parse: 125 callbacks suppressed [ 101.599156][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.646902][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.712346][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.754064][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.801459][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.838655][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.874317][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.916607][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.953491][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.980109][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 102.093622][ T1107] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.143978][ T6150] pim6reg: entered allmulticast mode [ 102.164002][ T5986] ip6_vti0 speed is unknown, defaulting to 1000 [ 102.170610][ T1107] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.206075][ T1107] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.235961][ T1107] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.289705][ T1107] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.192223][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 103.271685][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 103.323212][ T5986] ip6_vti0 speed is unknown, defaulting to 1000 [ 103.680353][ T6201] Illegal XDP return value 554651874 on prog (id 22) dev syz_tun, expect packet loss! [ 104.018393][ T6197] ip6_vti0 speed is unknown, defaulting to 1000 [ 104.404111][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.420592][ T6205] bond0: (slave rose0): Enslaving as an active interface with an up link [ 105.157699][ T6220] syzkaller0: entered promiscuous mode [ 105.197228][ T6220] syzkaller0: entered allmulticast mode [ 106.075685][ T6247] Zero length message leads to an empty skb [ 107.503900][ T6256] __nla_validate_parse: 15 callbacks suppressed [ 107.503918][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 107.587901][ T6229] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.118914][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 108.185011][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 108.413341][ T6283] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 108.446695][ T6283] bond1 (unregistering): Released all slaves [ 108.491422][ T6286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.76'. [ 108.587159][ T6249] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.793990][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 108.827645][ T6300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.78'. [ 109.843742][ T6321] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.874153][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.88'. [ 110.951506][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 110.999646][ T6359] bridge_slave_1: left allmulticast mode [ 111.009546][ T6359] bridge_slave_1: left promiscuous mode [ 111.015440][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.077069][ T6359] bridge_slave_0: left allmulticast mode [ 111.105735][ T6359] bridge_slave_0: left promiscuous mode [ 111.115813][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.386237][ T6374] tipc: Started in network mode [ 111.420753][ T6374] tipc: Node identity 8e9e23bcb6b, cluster identity 4711 [ 111.430538][ T6374] tipc: Enabled bearer , priority 0 [ 111.445154][ T6378] tipc: Resetting bearer [ 111.454619][ T6369] syzkaller0: entered promiscuous mode [ 111.461149][ T6369] syzkaller0: entered allmulticast mode [ 111.531838][ T6381] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 111.540546][ T6381] netlink: 224 bytes leftover after parsing attributes in process `syz.4.93'. [ 111.559819][ T6368] tipc: Resetting bearer [ 111.614971][ T6368] tipc: Disabling bearer [ 111.629216][ T6384] netlink: 128 bytes leftover after parsing attributes in process `syz.1.92'. [ 112.123567][ T6402] x_tables: duplicate underflow at hook 1 [ 112.363605][ T6413] netlink: 'syz.0.102': attribute type 7 has an invalid length. [ 112.377005][ T6413] netlink: 'syz.0.102': attribute type 8 has an invalid length. [ 112.823892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c283c00: rx timeout, send abort [ 113.067101][ T6437] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 113.324522][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c283000: rx timeout, send abort [ 113.333956][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c283c00: abort rx timeout. Force session deactivation [ 113.614625][ T6462] __nla_validate_parse: 2 callbacks suppressed [ 113.614644][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 113.660986][ T6467] netlink: 'syz.0.116': attribute type 4 has an invalid length. [ 113.725358][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 113.832999][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c283000: abort rx timeout. Force session deactivation [ 113.944636][ T6480] netlink: 'syz.2.117': attribute type 13 has an invalid length. [ 113.980298][ T6480] netlink: 'syz.2.117': attribute type 17 has an invalid length. [ 114.337339][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 114.346273][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.119'. [ 115.032819][ T6511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.122'. [ 116.739976][ T6480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.004443][ T6527] ip6_vti0 speed is unknown, defaulting to 1000 [ 117.082304][ T6529] netlink: 'syz.2.125': attribute type 12 has an invalid length. [ 117.093593][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.125'. [ 117.289545][ T6544] netlink: 'syz.2.129': attribute type 15 has an invalid length. [ 118.485298][ T6572] netlink: 96 bytes leftover after parsing attributes in process `syz.4.135'. [ 118.686875][ T6581] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.771388][ T6578] bond1: option all_slaves_active: invalid value (13) [ 118.787751][ T6578] bond1 (unregistering): Released all slaves [ 118.853122][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.869978][ T6581] batadv_slave_0: entered promiscuous mode [ 118.907710][ T6589] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 119.331000][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.143'. [ 119.586184][ T6620] netlink: 56 bytes leftover after parsing attributes in process `syz.3.149'. [ 119.619715][ T6616] bond1: option arp_validate: invalid value (18446744073491447809) [ 119.633081][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 119.647451][ T6616] bond1 (unregistering): Released all slaves [ 119.661019][ T6623] netlink: 'syz.4.148': attribute type 13 has an invalid length. [ 119.763331][ T6622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.149'. [ 120.251430][ T6639] ip6_vti0 speed is unknown, defaulting to 1000 [ 120.637690][ T30] audit: type=1800 audit(1766719706.358:2): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.153" name="memory.events" dev="tmpfs" ino=210 res=0 errno=0 [ 121.006794][ T6654] netlink: 3 bytes leftover after parsing attributes in process `syz.0.156'. [ 121.045726][ T6654] 0ªX¹¦À: renamed from caif0 [ 121.074077][ T6654] 0ªX¹¦À: entered allmulticast mode [ 121.085986][ T6654] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 121.317264][ T6671] batadv0: entered allmulticast mode [ 121.360797][ T6671] tipc: Enabling of bearer rejected, failed to enable media [ 121.621216][ T6683] netlink: 'syz.2.164': attribute type 2 has an invalid length. [ 121.690818][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 121.729995][ T6683] : entered promiscuous mode [ 121.742361][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 122.020164][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 122.037611][ T6694] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 122.211648][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 122.340611][ T6702] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.661149][ T6720] IPVS: Scheduler module ip_vs_sip not found [ 122.669328][ T6722] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20003 [ 122.995793][ T6739] syzkaller0: entered promiscuous mode [ 123.001626][ T6739] syzkaller0: entered allmulticast mode [ 123.183185][ T6748] xt_hashlimit: size too large, truncated to 1048576 [ 123.199817][ T6750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.752872][ T6759] FAULT_INJECTION: forcing a failure. [ 123.752872][ T6759] name failslab, interval 1, probability 0, space 0, times 1 [ 123.791763][ T6759] CPU: 0 UID: 0 PID: 6759 Comm: syz.1.183 Not tainted syzkaller #0 PREEMPT(full) [ 123.791792][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.791812][ T6759] Call Trace: [ 123.791821][ T6759] [ 123.791830][ T6759] dump_stack_lvl+0x189/0x250 [ 123.791870][ T6759] ? __pfx____ratelimit+0x10/0x10 [ 123.791891][ T6759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.791916][ T6759] ? __pfx__printk+0x10/0x10 [ 123.791950][ T6759] ? __pfx___might_resched+0x10/0x10 [ 123.791973][ T6759] ? fs_reclaim_acquire+0x7d/0x100 [ 123.792002][ T6759] should_fail_ex+0x414/0x560 [ 123.792039][ T6759] should_failslab+0xa8/0x100 [ 123.792073][ T6759] __kvmalloc_node_noprof+0x175/0x920 [ 123.792098][ T6759] ? page_pool_create_percpu+0x2dd/0xb80 [ 123.792128][ T6759] ? page_pool_create_percpu+0xaf/0xb80 [ 123.792165][ T6759] page_pool_create_percpu+0x2dd/0xb80 [ 123.792206][ T6759] bpf_test_run_xdp_live+0x1cf/0x1b20 [ 123.792235][ T6759] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 123.792270][ T6759] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 123.792302][ T6759] ? synchronize_rcu+0x11a/0x310 [ 123.792329][ T6759] ? __pfx_synchronize_rcu+0x10/0x10 [ 123.792360][ T6759] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 123.792390][ T6759] ? bpf_dispatcher_xdp+0x800/0x1000 [ 123.792426][ T6759] ? 0xffffffffa0201a58 [ 123.792439][ T6759] ? 0xffffffffa0203514 [ 123.792477][ T6759] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 123.792509][ T6759] ? _copy_from_user+0x94/0xb0 [ 123.792529][ T6759] ? bpf_test_init+0x113/0x150 [ 123.792548][ T6759] ? xdp_convert_md_to_buff+0x5b/0x330 [ 123.792572][ T6759] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 123.792607][ T6759] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.792634][ T6759] ? __fget_files+0x2a/0x420 [ 123.792660][ T6759] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.792682][ T6759] bpf_prog_test_run+0x2c7/0x340 [ 123.792712][ T6759] __sys_bpf+0x562/0x860 [ 123.792739][ T6759] ? __pfx___sys_bpf+0x10/0x10 [ 123.792776][ T6759] ? ksys_write+0x22a/0x250 [ 123.792795][ T6759] ? __pfx_ksys_write+0x10/0x10 [ 123.792817][ T6759] __x64_sys_bpf+0x7c/0x90 [ 123.792839][ T6759] do_syscall_64+0xfa/0xf80 [ 123.792859][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.792876][ T6759] ? clear_bhb_loop+0x60/0xb0 [ 123.792897][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.792913][ T6759] RIP: 0033:0x7f665198f749 [ 123.792929][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.792943][ T6759] RSP: 002b:00007f6652863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.792968][ T6759] RAX: ffffffffffffffda RBX: 00007f6651be5fa0 RCX: 00007f665198f749 [ 123.792980][ T6759] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 123.792991][ T6759] RBP: 00007f6652863090 R08: 0000000000000000 R09: 0000000000000000 [ 123.793001][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.793011][ T6759] R13: 00007f6651be6038 R14: 00007f6651be5fa0 R15: 00007ffd36512c28 [ 123.793039][ T6759] [ 123.793047][ T6759] page_pool_create_percpu() gave up with errno -12 [ 124.407426][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 124.416320][ T6775] netlink: 'syz.4.184': attribute type 5 has an invalid length. [ 124.426044][ T6775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.184'. [ 124.509802][ T6775] geneve2: entered promiscuous mode [ 124.549240][ T6775] geneve2: entered allmulticast mode [ 124.648884][ T6786] netlink: 'syz.1.187': attribute type 21 has an invalid length. [ 124.704796][ T6060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 124.714679][ T6786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.187'. [ 124.730718][ T6060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 124.794369][ T6793] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.828401][ T6794] netlink: 'syz.2.189': attribute type 21 has an invalid length. [ 124.841970][ T6794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.189'. [ 125.024719][ T6796] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 125.070402][ T6796] xt_hashlimit: max too large, truncated to 1048576 [ 125.081363][ T6796] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 125.164039][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 126.410345][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 126.550378][ T6812] nbd: socks must be embedded in a SOCK_ITEM attr [ 126.568442][ T5883] block nbd64: NBD_DISCONNECT [ 126.573526][ T6816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 126.659494][ T6816] nbd: device at index 64 is going down [ 126.681470][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 126.693185][ T6770] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 126.839584][ T5883] udevd[5883]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 126.910043][ T6770] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 126.978306][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 127.254573][ T1137] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 127.304017][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 127.376403][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 127.468707][ T1148] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 127.550246][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'. [ 127.707917][ T6848] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.046285][ T6867] syzkaller0: entered promiscuous mode [ 128.062746][ T6867] syzkaller0: entered allmulticast mode [ 128.174859][ T6860] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.941488][ T6893] x_tables: duplicate underflow at hook 2 [ 129.064969][ T6879] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 131.004536][ T6942] __nla_validate_parse: 2 callbacks suppressed [ 131.004555][ T6942] netlink: 52 bytes leftover after parsing attributes in process `syz.4.225'. [ 131.188748][ T6945] syzkaller0: entered promiscuous mode [ 131.199684][ T6945] syzkaller0: entered allmulticast mode [ 131.233972][ T6952] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 131.540342][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 131.706620][ T6964] bridge_slave_1: left allmulticast mode [ 131.723683][ T6964] bridge_slave_1: left promiscuous mode [ 131.730138][ T6967] netlink: 'syz.1.231': attribute type 12 has an invalid length. [ 131.738297][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.851660][ T6964] bridge_slave_0: left allmulticast mode [ 131.875567][ T6964] bridge_slave_0: left promiscuous mode [ 131.914415][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.497593][ T6992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.232'. [ 133.022116][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 133.802174][ T6997] bridge2: entered promiscuous mode [ 133.942283][ T7008] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 134.029735][ T7008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.291052][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'. [ 134.494908][ T7026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.528279][ T7026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.744631][ T7026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.776295][ T7026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.813617][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 134.930090][ T7026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.950305][ T7026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.956666][ T30] audit: type=1800 audit(1766719720.678:3): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.246" name="cgroup.controllers" dev="tmpfs" ino=236 res=0 errno=0 [ 135.011107][ T7049] netlink: 23 bytes leftover after parsing attributes in process `syz.2.249'. [ 135.063456][ T7049] batadv_slave_1: entered promiscuous mode [ 135.079832][ T7003] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.091183][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 135.195866][ T7026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.209979][ T7026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.259733][ T7049] bridge_slave_1: left allmulticast mode [ 135.269635][ T7049] bridge_slave_1: left promiscuous mode [ 135.279835][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.295774][ T7049] bridge_slave_0: left allmulticast mode [ 135.304291][ T7049] bridge_slave_0: left promiscuous mode [ 135.311532][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.494165][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.251'. [ 135.530496][ T7048] batadv_slave_1: left promiscuous mode [ 135.559346][ T7054] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 135.599606][ T7054] netlink: 224 bytes leftover after parsing attributes in process `syz.3.251'. [ 135.694188][ T7064] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 135.712291][ T7056] syzkaller0: entered promiscuous mode [ 135.718107][ T7056] syzkaller0: entered allmulticast mode [ 135.742948][ T3501] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.751572][ T3501] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.788998][ T7064] bond1: entered promiscuous mode [ 135.794522][ T7064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.567457][ T7069] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.254'. [ 137.207602][ T7063] bond1: (slave veth3): making interface the new active one [ 137.215277][ T7063] veth3: entered promiscuous mode [ 137.222071][ T7063] bond1: (slave veth3): Enslaving as an active interface with an up link [ 137.384788][ T6059] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.394495][ T6059] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.410579][ T6059] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.419820][ T6059] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.440352][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 137.503638][ T1148] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.519478][ T1148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.036626][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 138.161850][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.178894][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.573246][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 138.679922][ T7111] hsr_slave_1 (unregistering): left promiscuous mode [ 138.694509][ T7120] tap0: tun_chr_ioctl cmd 1074025673 [ 138.700961][ T7118] tap0: tun_chr_ioctl cmd 1074025692 [ 138.920158][ T7115] ip6_vti0 speed is unknown, defaulting to 1000 [ 139.168175][ T7149] netlink: 'syz.4.274': attribute type 7 has an invalid length. [ 139.223712][ T7150] syzkaller0: entered promiscuous mode [ 139.251157][ T7150] syzkaller0: entered allmulticast mode [ 139.529395][ T7168] netlink: 68 bytes leftover after parsing attributes in process `syz.0.279'. [ 139.829239][ T7174] ip6_vti0 speed is unknown, defaulting to 1000 [ 139.988500][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 140.349225][ T7178] ip6_vti0 speed is unknown, defaulting to 1000 [ 140.570600][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 141.051803][ T7212] tipc: Enabled bearer , priority 0 [ 141.059805][ T7212] syzkaller0: entered promiscuous mode [ 141.065768][ T7212] syzkaller0: entered allmulticast mode [ 141.284752][ T7212] tipc: Resetting bearer [ 141.304376][ T7212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.437399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.509844][ T7211] tipc: Resetting bearer [ 141.561655][ T7211] tipc: Disabling bearer [ 142.169210][ T7232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.398416][ T7233] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 142.421121][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'. [ 142.487567][ T7227] wg1: entered promiscuous mode [ 142.492529][ T7227] wg1: entered allmulticast mode [ 142.917588][ T7245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.229574][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'. [ 143.240513][ T7250] ip6_vti0 speed is unknown, defaulting to 1000 [ 143.271261][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'. [ 143.315351][ T7252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.299'. [ 143.400875][ T7258] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20000 [ 143.955119][ T7263] siw: device registration error -23 [ 144.320074][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 144.515378][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 144.663978][ T7298] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 144.687401][ T7299] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 145.408824][ T7295] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 145.450485][ T7292] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 145.461507][ T7291] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 145.582157][ T7299] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 145.848405][ T7286] ip6_vti0 speed is unknown, defaulting to 1000 [ 146.237290][ T7326] tap0: tun_chr_ioctl cmd 1074025677 [ 146.242879][ T7326] tap0: linktype set to 1 [ 146.646720][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 147.054607][ T7354] netlink: 'syz.4.325': attribute type 2 has an invalid length. [ 147.077576][ T7358] syzkaller0: entered promiscuous mode [ 147.083128][ T7358] syzkaller0: entered allmulticast mode [ 147.099332][ T7351] netlink: 'syz.4.325': attribute type 1 has an invalid length. [ 147.150653][ T7351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.544751][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 147.691689][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 148.269481][ T7381] netlink: 'syz.4.332': attribute type 1 has an invalid length. [ 148.478327][ T7387] sctp: [Deprecated]: syz.4.332 (pid 7387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.478327][ T7387] Use struct sctp_sack_info instead [ 148.962954][ T7402] block nbd1: NBD_DISCONNECT [ 149.156667][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.199367][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.238410][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.258173][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.653437][ T7421] netlink: 'syz.4.343': attribute type 1 has an invalid length. [ 150.109319][ T7444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.150608][ T7444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.249108][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 150.338491][ T7454] tipc: Started in network mode [ 150.346714][ T7454] tipc: Node identity de64721482b, cluster identity 4711 [ 150.354958][ T7454] tipc: Enabled bearer , priority 0 [ 150.388606][ T7446] syzkaller0: entered promiscuous mode [ 150.394146][ T7446] syzkaller0: entered allmulticast mode [ 150.438904][ T7459] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 150.486838][ T7459] netlink: 408 bytes leftover after parsing attributes in process `syz.0.348'. [ 150.530426][ T7444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.567244][ T7444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.643746][ T7446] tipc: Resetting bearer [ 150.723198][ T7444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.766295][ T7444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.820089][ T7471] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 150.827656][ T7443] tipc: Resetting bearer [ 150.899112][ T7443] tipc: Disabling bearer [ 150.971807][ T7444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.996897][ T7444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.046821][ T7478] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 151.268637][ T7435] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.304288][ T7435] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.386664][ T7435] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.394925][ T7435] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.458628][ T6059] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.489601][ T6059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.559753][ T6059] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.578365][ T6059] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.737442][ T7505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.359'. [ 151.949417][ T7520] netlink: 76 bytes leftover after parsing attributes in process `syz.0.362'. [ 152.075229][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 152.863179][ T7554] netlink: 'syz.3.371': attribute type 4 has an invalid length. [ 153.046817][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 153.263831][ T7568] netlink: 'syz.0.375': attribute type 11 has an invalid length. [ 153.424771][ T7575] sctp: [Deprecated]: syz.0.377 (pid 7575) Use of int in max_burst socket option deprecated. [ 153.424771][ T7575] Use struct sctp_assoc_value instead [ 153.448109][ T7576] sctp: [Deprecated]: syz.0.377 (pid 7576) Use of int in max_burst socket option deprecated. [ 153.448109][ T7576] Use struct sctp_assoc_value instead [ 154.097533][ T7590] netlink: get zone limit has 8 unknown bytes [ 154.679644][ T30] audit: type=1800 audit(1766719740.388:4): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.385" name="memory.events" dev="tmpfs" ino=428 res=0 errno=0 [ 154.774677][ T7611] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 154.794362][ T7611] netlink: 248 bytes leftover after parsing attributes in process `syz.1.386'. [ 155.565387][ T6172] IPVS: starting estimator thread 0... [ 155.600587][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 155.610892][ T7637] x_tables: duplicate underflow at hook 1 [ 155.676931][ T7635] IPVS: using max 24 ests per chain, 57600 per kthread [ 155.997512][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 156.026627][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.397'. [ 156.049057][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 156.079116][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.397'. [ 156.191361][ T7645] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.369985][ T7661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.768961][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.405'. [ 156.854291][ T7674] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 156.891688][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.407'. [ 156.903237][ T24] hid-generic 0005:0C45:1013.0001: ignoring exceeding usage max [ 156.953518][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x4 [ 156.995618][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x5 [ 157.028450][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 157.067170][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 157.074657][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 157.100222][ T7684] geneve2: entered promiscuous mode [ 157.113721][ T7684] geneve2: entered allmulticast mode [ 157.124373][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 157.147853][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 157.157060][ T147] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.176689][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 157.204603][ T24] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 157.222202][ T147] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.242222][ T24] hid-generic 0005:0C45:1013.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 157.264921][ T147] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.273760][ T7680] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.299972][ T147] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.856616][ T6170] IPVS: starting estimator thread 0... [ 157.963895][ T7699] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.966829][ T7706] IPVS: using max 28 ests per chain, 67200 per kthread [ 158.077194][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 159.271783][ T7725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.414'. [ 159.547876][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.415'. [ 159.562454][ T7727] netlink: 19 bytes leftover after parsing attributes in process `syz.1.415'. [ 159.590380][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'. [ 159.977472][ T7747] ipt_ECN: cannot use operation on non-tcp rule [ 160.147206][ T7755] syzkaller0: entered promiscuous mode [ 160.173137][ T7755] syzkaller0: entered allmulticast mode [ 160.502590][ T7763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.512421][ T7763] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.533229][ T7763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.777107][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'. [ 161.033916][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.043964][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.054568][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.062973][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.071913][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.238571][ T7786] ip6_vti0 speed is unknown, defaulting to 1000 [ 162.438638][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.454533][ T7816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.534825][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 162.549550][ T7786] chnl_net:caif_netlink_parms(): no params data found [ 162.558295][ T7803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.438'. [ 162.658150][ T7800] ip6_vti0 speed is unknown, defaulting to 1000 [ 162.818137][ T7834] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.443'. [ 163.049038][ T7840] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 163.074594][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 163.085163][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.098020][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.114317][ T7786] bridge_slave_0: entered allmulticast mode [ 163.122385][ T5151] Bluetooth: hci5: command tx timeout [ 163.141643][ T7786] bridge_slave_0: entered promiscuous mode [ 163.175953][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.197309][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.236767][ T7786] bridge_slave_1: entered allmulticast mode [ 163.244838][ T7786] bridge_slave_1: entered promiscuous mode [ 163.293160][ T7830] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.539245][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.560811][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.738641][ T7786] team0: Port device team_slave_0 added [ 163.772021][ T7786] team0: Port device team_slave_1 added [ 163.909137][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.926634][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.979634][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.038485][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.045502][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.137677][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.479138][ T7786] hsr_slave_0: entered promiscuous mode [ 164.486336][ T7786] hsr_slave_1: entered promiscuous mode [ 164.493066][ T7786] debugfs: 'hsr0' already exists in 'hsr' [ 164.505721][ T7786] Cannot create hsr debugfs directory [ 164.513516][ T7867] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.199640][ T5151] Bluetooth: hci5: command tx timeout [ 165.643769][ T7786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.672605][ T7786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.724472][ T7883] netlink: 80 bytes leftover after parsing attributes in process `syz.0.457'. [ 165.734031][ T7883] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 165.764388][ T7786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.879923][ T7786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.181452][ T7908] netlink: 'syz.1.462': attribute type 4 has an invalid length. [ 166.189325][ T7908] netlink: 152 bytes leftover after parsing attributes in process `syz.1.462'. [ 166.212879][ T7908] .`: renamed from bond0 (while UP) [ 166.232237][ T7899] netlink: 'syz.3.461': attribute type 3 has an invalid length. [ 166.243276][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 166.372388][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.426213][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.481423][ T7912] netlink: 'syz.1.463': attribute type 2 has an invalid length. [ 166.492418][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.499653][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.565239][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.572516][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.858921][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.467'. [ 166.905461][ T7921] pim6reg1: entered promiscuous mode [ 166.916709][ T7921] pim6reg1: entered allmulticast mode [ 167.147260][ T7920] nbd: socks must be embedded in a SOCK_ITEM attr [ 167.205464][ T6833] block nbd64: NBD_DISCONNECT [ 167.216403][ T7929] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.289883][ T5151] Bluetooth: hci5: command tx timeout [ 167.796378][ T6833] udevd[6833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 167.833620][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 168.205474][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.442848][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.467'. [ 169.247945][ T7972] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.475'. [ 169.366526][ T5151] Bluetooth: hci5: command tx timeout [ 169.478782][ T7975] bond1: option xmit_hash_policy: invalid value (10) [ 169.497259][ T7975] bond1 (unregistering): Released all slaves [ 169.759618][ T7786] veth0_vlan: entered promiscuous mode [ 169.811063][ T7786] veth1_vlan: entered promiscuous mode [ 169.952671][ T7786] veth0_macvtap: entered promiscuous mode [ 169.985634][ T7786] veth1_macvtap: entered promiscuous mode [ 170.064342][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.096769][ T7997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.114921][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.163460][ T7991] ip6_vti0 speed is unknown, defaulting to 1000 [ 170.214300][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.233695][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.253370][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.273453][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.564316][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.584213][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.629518][ T8005] openvswitch: netlink: Flow key attr not present in new flow. [ 170.663837][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.686665][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.960009][ T8036] ip6_vti0 speed is unknown, defaulting to 1000 [ 172.027140][ T8039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.331929][ T8045] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 172.345574][ T8045] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.790524][ T8061] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 172.887240][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.924282][ T8070] netlink: 'syz.5.499': attribute type 10 has an invalid length. [ 172.939870][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.949768][ T8065] bond0: (slave batadv1): making interface the new active one [ 172.959213][ T8065] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 172.981060][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 173.016098][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.024082][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.039448][ T8071] netlink: 44 bytes leftover after parsing attributes in process `syz.1.497'. [ 173.048721][ T8065] netlink: 'syz.1.497': attribute type 21 has an invalid length. [ 173.056678][ T8065] netlink: 'syz.1.497': attribute type 22 has an invalid length. [ 173.064450][ T8065] netlink: 'syz.1.497': attribute type 23 has an invalid length. [ 173.075833][ T8065] netlink: 'syz.1.497': attribute type 25 has an invalid length. [ 173.090082][ T8065] netlink: 'syz.1.497': attribute type 26 has an invalid length. [ 173.104831][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.112150][ T8070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.119820][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.127146][ T8070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.141026][ T8065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 173.156862][ T8070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 173.527448][ T8061] bond0 (unregistering): (slave batadv1): Releasing active interface [ 173.544804][ T8061] bond0 (unregistering): Released all slaves [ 173.879295][ T8086] block nbd0: server does not support multiple connections per device. [ 173.929627][ T8086] block nbd0: shutting down sockets [ 174.532780][ T8109] netlink: 'syz.0.507': attribute type 7 has an invalid length. [ 174.799232][ T8109] netlink: 'syz.0.507': attribute type 7 has an invalid length. [ 174.812801][ T8115] netlink: 76 bytes leftover after parsing attributes in process `syz.1.509'. [ 175.181016][ T8123] tipc: Started in network mode [ 175.201561][ T8123] tipc: Node identity 0e9c7507755c, cluster identity 4711 [ 175.220859][ T8123] tipc: Enabled bearer , priority 0 [ 175.259612][ T8122] syzkaller0: entered promiscuous mode [ 175.284231][ T8122] syzkaller0: entered allmulticast mode [ 175.324740][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 175.394413][ T8130] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.513'. [ 175.413659][ T8122] tipc: Resetting bearer [ 175.437623][ T8121] tipc: Resetting bearer [ 175.498090][ T8121] tipc: Disabling bearer [ 175.586048][ T8135] bond0: (slave gretap1): making interface the new active one [ 175.598664][ T8135] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 175.644463][ T8139] netlink: 44 bytes leftover after parsing attributes in process `syz.3.517'. [ 175.866418][ T8147] tipc: Enabling of bearer rejected, failed to enable media [ 176.302680][ T8155] xt_connbytes: Forcing CT accounting to be enabled [ 176.512554][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 176.584607][ T7436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.811691][ T7436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.968587][ T7436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.166862][ T8177] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.202281][ T8177] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 177.239641][ T8177] Bluetooth: MGMT ver 1.23 [ 177.289908][ T7436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.393044][ T8186] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 177.469599][ T8180] ip6_vti0 speed is unknown, defaulting to 1000 [ 177.640899][ T8204] syz0: rxe_newlink: already configured on ip6_vti0 [ 177.672185][ T8203] syz0: rxe_newlink: already configured on ip6_vti0 [ 178.586043][ T7436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.601667][ T7436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.612258][ T7436] bond0 (unregistering): Released all slaves [ 178.709122][ T7436] bond1 (unregistering): (slave veth3): Releasing backup interface [ 178.717394][ T7436] veth3: left promiscuous mode [ 178.724346][ T7436] bond1 (unregistering): Released all slaves [ 178.746371][ T8216] validate_nla: 1 callbacks suppressed [ 178.746390][ T8216] netlink: 'syz.5.533': attribute type 2 has an invalid length. [ 178.760139][ T8218] tipc: Started in network mode [ 178.765344][ T8218] tipc: Node identity 3e9cf7b8335a, cluster identity 4711 [ 178.773459][ T8218] tipc: Enabled bearer , priority 0 [ 178.781060][ T8220] syzkaller0: entered promiscuous mode [ 178.787108][ T8220] syzkaller0: entered allmulticast mode [ 178.869343][ T8211] tipc: Resetting bearer [ 178.958393][ T8245] netlink: 'syz.5.536': attribute type 5 has an invalid length. [ 178.969679][ T8211] tipc: Disabling bearer [ 179.003007][ T7436] : left promiscuous mode [ 179.042781][ T8245] ip6erspan0: entered promiscuous mode [ 182.170763][ T8326] netlink: 64 bytes leftover after parsing attributes in process `syz.0.551'. [ 182.241512][ T8325] ip6_vti0 speed is unknown, defaulting to 1000 [ 182.309838][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 182.351100][ T7436] hsr_slave_0: left promiscuous mode [ 182.380547][ T7436] hsr_slave_1: left promiscuous mode [ 182.403263][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.453521][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.482949][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.599239][ T7436] veth1_macvtap: left promiscuous mode [ 182.605190][ T7436] veth0_macvtap: left promiscuous mode [ 182.623652][ T7436] veth1_vlan: left promiscuous mode [ 182.653026][ T7436] veth0_vlan: left promiscuous mode [ 183.634747][ T30] audit: type=1800 audit(1766719769.358:5): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.552" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 183.657045][ T8330] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 183.728516][ T8330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 183.738399][ T8330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 183.815023][ T8330] syz.4.552 (8330) used greatest stack depth: 18144 bytes left [ 183.993884][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.560'. [ 184.472211][ T8380] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.514162][ T8388] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 184.789455][ T8388] bond1: entered promiscuous mode [ 184.795646][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 184.825305][ T8388] bond1: entered allmulticast mode [ 184.848259][ T8388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.871676][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 184.923101][ T8394] macvlan2: entered promiscuous mode [ 184.946334][ T8394] macvlan2: entered allmulticast mode [ 184.976765][ T8394] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.198589][ T8420] block nbd0: server does not support multiple connections per device. [ 185.294799][ T8420] block nbd0: shutting down sockets [ 185.417637][ T8415] syzkaller1: entered promiscuous mode [ 185.423218][ T8415] syzkaller1: entered allmulticast mode [ 185.455245][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.570'. [ 185.639891][ T8433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.833057][ T8443] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 186.108156][ T8443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.143494][ T8450] tipc: Enabled bearer , priority 0 [ 186.191546][ T8468] tipc: Resetting bearer [ 186.207839][ T8457] syzkaller0: entered promiscuous mode [ 186.216417][ T8457] syzkaller0: entered allmulticast mode [ 186.242267][ T8471] netlink: 'syz.5.579': attribute type 1 has an invalid length. [ 186.282645][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.579'. [ 186.381678][ T8460] syzkaller0: entered promiscuous mode [ 186.406858][ T8460] syzkaller0: entered allmulticast mode [ 186.430977][ T8450] tipc: Resetting bearer [ 186.478448][ T8450] tipc: Disabling bearer [ 186.765842][ T8489] xt_CONNSECMARK: invalid mode: 66 [ 187.220949][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.586'. [ 187.281502][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.586'. [ 187.658231][ T8536] netlink: 80 bytes leftover after parsing attributes in process `syz.1.594'. [ 187.698204][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 187.773851][ T8538] vlan2: entered promiscuous mode [ 187.820303][ T8538] syz_tun: entered promiscuous mode [ 188.091934][ T8544] ip6_vti0 speed is unknown, defaulting to 1000 [ 188.459068][ T8530] sch_fq: defrate 0 ignored. [ 188.569145][ T8561] tipc: Enabled bearer , priority 0 [ 188.619329][ T8561] syzkaller0: entered promiscuous mode [ 188.624880][ T8561] syzkaller0: entered allmulticast mode [ 188.730890][ T8561] tipc: Resetting bearer [ 188.773002][ T8559] tipc: Resetting bearer [ 188.811195][ T8559] tipc: Disabling bearer [ 188.858871][ T8569] gretap2: entered allmulticast mode [ 189.015196][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.603'. [ 189.374780][ T8592] netlink: 'syz.5.607': attribute type 21 has an invalid length. [ 189.393800][ T8592] netlink: 132 bytes leftover after parsing attributes in process `syz.5.607'. [ 189.634811][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 189.704615][ T8597] syzkaller0: entered promiscuous mode [ 189.751296][ T8597] syzkaller0: entered allmulticast mode [ 190.178732][ T8613] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 190.211512][ T8614] netlink: 'syz.1.612': attribute type 8 has an invalid length. [ 190.436172][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.615'. [ 190.535639][ T8632] netlink: 288 bytes leftover after parsing attributes in process `syz.4.618'. [ 190.671290][ T8637] ip6_vti0 speed is unknown, defaulting to 1000 [ 190.800467][ T8641] netlink: 'syz.1.617': attribute type 11 has an invalid length. [ 190.818935][ T8641] netlink: 'syz.1.617': attribute type 11 has an invalid length. [ 190.836761][ T8641] netlink: 224 bytes leftover after parsing attributes in process `syz.1.617'. [ 190.950854][ T8629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.119504][ T12] wlan0: Trigger new scan to find an IBSS to join [ 191.501358][ T8662] netlink: 'syz.0.625': attribute type 11 has an invalid length. [ 192.127179][ T8671] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 192.148554][ T8671] bond0: entered promiscuous mode [ 192.153658][ T8671] bond_slave_0: entered promiscuous mode [ 192.183408][ T8671] bond_slave_1: entered promiscuous mode [ 192.197883][ T8671] bridge0: port 3(bond0) entered blocking state [ 192.216953][ T8671] bridge0: port 3(bond0) entered disabled state [ 192.236286][ T8671] bond0: entered allmulticast mode [ 192.255307][ T8671] bond_slave_0: entered allmulticast mode [ 192.265417][ T8671] bond_slave_1: entered allmulticast mode [ 192.327348][ T8687] __nla_validate_parse: 2 callbacks suppressed [ 192.327368][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 192.341973][ T8671] bridge0: port 3(bond0) entered blocking state [ 192.349099][ T8671] bridge0: port 3(bond0) entered forwarding state [ 192.504504][ T8693] netlink: 187428 bytes leftover after parsing attributes in process `syz.0.631'. [ 193.230310][ T8745] trusted_key: syz.1.636 sent an empty control message without MSG_MORE. [ 194.207073][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 195.332014][ T8779] syzkaller0: entered promiscuous mode [ 195.337635][ T8779] syzkaller0: entered allmulticast mode [ 195.443961][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.646'. [ 195.494194][ T8793] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 195.618873][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 196.080700][ T1115] wlan0: Trigger new scan to find an IBSS to join [ 196.729747][ T8793] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 196.742253][ T8792] batman_adv: batadv0: Adding interface: macsec1 [ 196.776877][ T8792] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.803622][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.816743][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.837161][ T8792] batman_adv: batadv0: Interface activated: macsec1 [ 196.847964][ T8802] netlink: 68 bytes leftover after parsing attributes in process `syz.0.648'. [ 196.857695][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 196.884833][ T8802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.648'. [ 196.923444][ T8803] ieee802154 phy0 wpan0: encryption failed: -90 [ 196.977882][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.004459][ T8808] tipc: Enabled bearer , priority 0 [ 197.014970][ T8808] syzkaller0: entered promiscuous mode [ 197.021954][ T8808] syzkaller0: entered allmulticast mode [ 197.079862][ T8808] tipc: Resetting bearer [ 197.099780][ T8806] tipc: Resetting bearer [ 197.132207][ T8806] tipc: Disabling bearer [ 197.253894][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.655'. [ 197.299714][ T8815] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.971244][ T8852] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 197.986519][ T8853] openvswitch: netlink: Flow key attr not present in new flow. [ 198.080545][ T8852] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 198.245306][ T8852] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 198.350725][ T8852] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 198.652837][ T8872] netlink: 96 bytes leftover after parsing attributes in process `syz.5.665'. [ 198.686829][ T1115] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 198.727328][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 198.764834][ T8874] netlink: 96 bytes leftover after parsing attributes in process `syz.5.665'. [ 198.965107][ T1115] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 199.041403][ T8880] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 199.077695][ T8888] bond2: entered promiscuous mode [ 199.083020][ T8888] bridge4: entered promiscuous mode [ 199.095035][ T8888] bond2: entered allmulticast mode [ 199.117942][ T8888] bridge4: entered allmulticast mode [ 199.263987][ T62] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 199.352885][ T8901] syzkaller0: entered promiscuous mode [ 199.366983][ T8901] syzkaller0: entered allmulticast mode [ 199.374495][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.669'. [ 199.494502][ T3419] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 199.547070][ T8884] ip6_vti0 speed is unknown, defaulting to 1000 [ 199.601768][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.608304][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.740593][ T8923] tipc: Started in network mode [ 199.745624][ T8923] tipc: Node identity 9e5eb6a76056, cluster identity 4711 [ 199.777180][ T8923] tipc: Enabled bearer , priority 0 [ 199.807918][ T8923] syzkaller0: entered promiscuous mode [ 199.815219][ T8923] syzkaller0: entered allmulticast mode [ 199.907238][ T8928] tipc: Cannot configure node identity twice [ 200.235754][ T8942] syzkaller1: entered promiscuous mode [ 200.266558][ T8942] syzkaller1: entered allmulticast mode [ 200.300986][ T8923] tipc: Resetting bearer [ 200.360200][ T8942] netlink: 48 bytes leftover after parsing attributes in process `syz.5.678'. [ 200.361508][ T8923] tipc: Disabling bearer [ 200.644957][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 200.849147][ T8961] Bluetooth: MGMT ver 1.23 [ 201.490019][ T8986] netlink: 34 bytes leftover after parsing attributes in process `syz.1.687'. [ 201.506629][ T8986] netlink: 34 bytes leftover after parsing attributes in process `syz.1.687'. [ 201.630409][ T8979] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.684'. [ 201.721657][ T8979] netlink: 56 bytes leftover after parsing attributes in process `syz.5.684'. [ 201.886094][ T8999] tipc: Enabled bearer , priority 0 [ 201.898028][ T8999] syzkaller0: entered promiscuous mode [ 201.910567][ T8999] syzkaller0: entered allmulticast mode [ 201.984760][ T8999] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 202.027174][ T9002] ip6_vti0 speed is unknown, defaulting to 1000 [ 202.089399][ T8999] tipc: Resetting bearer [ 202.133819][ T8998] tipc: Resetting bearer [ 202.199806][ T9016] netlink: 'syz.5.692': attribute type 3 has an invalid length. [ 202.200399][ T8998] tipc: Disabling bearer [ 202.629907][ T9034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.746232][ T9039] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 202.912630][ T9006] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.688614][ T9065] __nla_validate_parse: 6 callbacks suppressed [ 203.688633][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.5.701'. [ 205.790850][ T9104] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 205.846965][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 206.018856][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 206.052180][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 206.135458][ T5920] IPVS: starting estimator thread 0... [ 206.197611][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 206.245848][ T9113] IPVS: using max 26 ests per chain, 62400 per kthread [ 206.253796][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.710'. [ 207.305633][ T9146] vlan2: entered promiscuous mode [ 207.330831][ T9146] bond0: entered promiscuous mode [ 207.345733][ T9146] bond_slave_0: entered promiscuous mode [ 207.385733][ T9146] bond_slave_1: entered promiscuous mode [ 207.400925][ T9146] bridge0: entered promiscuous mode [ 207.457045][ T9141] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.479263][ T9165] netlink: 87 bytes leftover after parsing attributes in process `syz.1.719'. [ 207.539359][ T9165] syzkaller0: entered promiscuous mode [ 207.544894][ T9165] syzkaller0: entered allmulticast mode [ 208.230222][ T8805] udevd[8805]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 208.511028][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.728'. [ 208.540039][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 208.614232][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 208.624394][ T9213] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.638518][ T9214] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 208.669269][ T9214] bond1 (unregistering): Released all slaves [ 208.748943][ T9213] netlink: 220 bytes leftover after parsing attributes in process `syz.4.732'. [ 208.884733][ T9220] syzkaller0: entered promiscuous mode [ 208.895245][ T9220] syzkaller0: entered allmulticast mode [ 208.963265][ T9223] ip6gre1: entered promiscuous mode [ 208.995879][ T9223] ip6gre1: entered allmulticast mode [ 209.024794][ T6061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.037852][ T6061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.046910][ T6171] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.246751][ T6171] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.366255][ T9233] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.739'. [ 209.405120][ T9230] ip6_vti0 speed is unknown, defaulting to 1000 [ 209.556958][ T6171] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.680880][ T9241] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 209.706836][ T9244] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 209.736284][ T9241] bridge2: entered allmulticast mode [ 209.871265][ T9247] netlink: 'syz.4.741': attribute type 30 has an invalid length. [ 210.561181][ T9240] ip6_vti0 speed is unknown, defaulting to 1000 [ 210.689830][ T9275] netlink: 'syz.5.743': attribute type 2 has an invalid length. [ 211.058096][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 211.090556][ T9283] netlink: 'syz.3.749': attribute type 11 has an invalid length. [ 211.298140][ T9293] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 211.663758][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.756'. [ 211.705632][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.756'. [ 211.724010][ T9316] netlink: 'syz.5.756': attribute type 13 has an invalid length. [ 211.732437][ T9316] netlink: 'syz.5.756': attribute type 11 has an invalid length. [ 211.795599][ T9324] netlink: 'syz.4.754': attribute type 10 has an invalid length. [ 211.925484][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.925879][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 211.938006][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 212.891446][ T9324] team0: Port device syz_tun added [ 212.967912][ T9326] bond3: option packets_per_slave: invalid value (1048582) [ 212.975284][ T9326] bond3: option packets_per_slave: allowed values 0 - 65535 [ 213.004848][ T9326] bond3 (unregistering): Released all slaves [ 213.322876][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.758'. [ 213.357237][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.409580][ T9337] ip6tnl1: entered allmulticast mode [ 213.751657][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 213.760878][ T9354] IPv6: Can't replace route, no match found [ 214.158202][ T9359] netlink: 48 bytes leftover after parsing attributes in process `syz.4.762'. [ 215.868072][ T9379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.767'. [ 215.887390][ T9379] netlink: 35 bytes leftover after parsing attributes in process `syz.1.767'. [ 216.544536][ T9407] sctp: [Deprecated]: syz.5.775 (pid 9407) Use of int in maxseg socket option. [ 216.544536][ T9407] Use struct sctp_assoc_value instead [ 216.660107][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 217.195731][ T9433] ip6_vti0 speed is unknown, defaulting to 1000 [ 217.735778][ T9454] sctp: [Deprecated]: syz.0.789 (pid 9454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.735778][ T9454] Use struct sctp_sack_info instead [ 217.963918][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.792'. [ 218.021172][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.5.792'. [ 218.163901][ T9458] syzkaller1: entered promiscuous mode [ 218.195010][ T9458] syzkaller1: entered allmulticast mode [ 218.353199][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.794'. [ 218.389561][ T9461] ip6_vti0 speed is unknown, defaulting to 1000 [ 218.398445][ T9478] netlink: 'syz.0.795': attribute type 4 has an invalid length. [ 218.420445][ T9478] netlink: 'syz.0.795': attribute type 4 has an invalid length. [ 218.458312][ T9478] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 218.806021][ T9486] netlink: 52 bytes leftover after parsing attributes in process `syz.3.799'. [ 218.937121][ T9488] xt_policy: output policy not valid in PREROUTING and INPUT [ 219.253190][ T9508] netlink: 32 bytes leftover after parsing attributes in process `syz.5.805'. [ 220.252940][ T9542] netlink: 36 bytes leftover after parsing attributes in process `syz.5.814'. [ 220.569720][ T9521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.602968][ T9521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.187496][ T1112] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.215537][ T1112] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.224528][ T1112] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.233786][ T1112] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.310981][ T1112] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.368303][ T1112] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.384163][ T1112] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.395501][ T1112] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.419145][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.820'. [ 221.436249][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.820'. [ 221.450034][ T9560] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 221.460279][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 221.512966][ T9564] macvtap1: entered promiscuous mode [ 221.519428][ T9564] dummy0: entered promiscuous mode [ 221.525404][ T9564] macvtap1: entered allmulticast mode [ 221.532074][ T9564] dummy0: entered allmulticast mode [ 221.560053][ T9567] macvtap1: left promiscuous mode [ 221.582605][ T9567] dummy0: left promiscuous mode [ 221.589623][ T9567] macvtap1: left allmulticast mode [ 221.594895][ T9567] dummy0: left allmulticast mode [ 221.604978][ T9557] ip6_vti0 speed is unknown, defaulting to 1000 [ 221.996647][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.042654][ T9581] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.098794][ T9588] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 222.128421][ T9586] netlink: 32 bytes leftover after parsing attributes in process `syz.5.828'. [ 222.147644][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.828'. [ 222.256304][ T9592] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20001 [ 222.614729][ T9586] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.692087][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 222.704254][ T9608] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 222.779148][ T9607] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 223.001351][ T9614] macvtap1: entered promiscuous mode [ 223.008126][ T9614] macvtap1: entered allmulticast mode [ 223.257388][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 224.283085][ T9642] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.550236][ T9645] syzkaller0: entered promiscuous mode [ 224.593765][ T9645] syzkaller0: entered allmulticast mode [ 224.872778][ T9657] xt_hashlimit: size too large, truncated to 1048576 [ 225.760862][ T5843] Bluetooth: hci5: command tx timeout [ 226.610240][ T9669] netlink: 9 bytes leftover after parsing attributes in process `syz.5.847'. [ 226.718143][ T9671] netlink: 68 bytes leftover after parsing attributes in process `syz.5.847'. [ 227.226753][ T9678] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.483210][ T9673] netlink: 168 bytes leftover after parsing attributes in process `syz.4.848'. [ 227.590736][ T9669] infiniband syz1: set active [ 227.597143][ T9669] infiniband syz1: added syz_tun [ 227.673536][ T9669] RDS/IB: syz1: added [ 227.688686][ T9669] smc: adding ib device syz1 with port count 1 [ 227.718979][ T9669] smc: ib device syz1 port 1 has no pnetid [ 228.433407][ T9691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'. [ 228.464501][ T9694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.680678][ T9697] tipc: Enabled bearer , priority 0 [ 228.698522][ T9697] syzkaller0: entered promiscuous mode [ 228.704082][ T9697] syzkaller0: entered allmulticast mode [ 228.766404][ T9697] tipc: Resetting bearer [ 228.777132][ T9696] tipc: Resetting bearer [ 228.790843][ T9698] netlink: 3 bytes leftover after parsing attributes in process `syz.1.852'. [ 228.809589][ T9696] tipc: Disabling bearer [ 228.824151][ T9698] 0ªX¹¦À: renamed from caif0 [ 228.833776][ T9698] 0ªX¹¦À: entered allmulticast mode [ 228.852699][ T9698] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 228.987356][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 229.007970][ T9703] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 229.041177][ T1112] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.227987][ T9712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.856'. [ 229.255363][ T9712] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 229.278091][ T9711] nbd2: detected capacity change from 0 to 127 [ 229.309370][ T5843] block nbd2: Receive control failed (result -32) [ 229.319261][ T8805] block nbd2: Dead connection, failed to find a fallback [ 229.343501][ T8805] block nbd2: shutting down sockets [ 229.367267][ T8805] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.416012][ T8805] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.435142][ T8805] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.471290][ T8805] Buffer I/O error on dev nbd2, logical block 1, async page read [ 229.493539][ T8805] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.504792][ T9712] bond3: entered promiscuous mode [ 229.526567][ T8805] Buffer I/O error on dev nbd2, logical block 2, async page read [ 229.547030][ T9712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.564676][ T8805] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.586536][ T8805] Buffer I/O error on dev nbd2, logical block 3, async page read [ 229.610432][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 229.626229][ T8805] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.644769][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 229.656525][ T8805] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.675396][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 229.694931][ T8805] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.711738][ T8805] Buffer I/O error on dev nbd2, logical block 1, async page read [ 229.750380][ T8805] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.820231][ T8805] Buffer I/O error on dev nbd2, logical block 2, async page read [ 229.850598][ T8805] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.863789][ T8805] Buffer I/O error on dev nbd2, logical block 3, async page read [ 229.896874][ T8805] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.926743][ T8805] Buffer I/O error on dev nbd2, logical block 0, async page read [ 229.934620][ T8805] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.966717][ T8805] Buffer I/O error on dev nbd2, logical block 1, async page read [ 229.975318][ T8805] ldm_validate_partition_table(): Disk read failed. [ 230.007166][ T8805] Dev nbd2: unable to read RDB block 0 [ 230.013447][ T8805] nbd2: unable to read partition table [ 230.041378][ T8805] ldm_validate_partition_table(): Disk read failed. [ 230.067042][ T8805] Dev nbd2: unable to read RDB block 0 [ 230.073301][ T8805] nbd2: unable to read partition table [ 230.449990][ T9732] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 230.487418][ T9733] netlink: 'syz.4.863': attribute type 4 has an invalid length. [ 230.540528][ T9735] netlink: 'syz.4.863': attribute type 4 has an invalid length. [ 230.668615][ T9733] bridge0: port 3(bond0) entered disabled state [ 230.779302][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.810283][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.827581][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.898515][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 232.310449][ T9777] geneve4: entered promiscuous mode [ 232.871089][ T9799] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.885082][ T9802] __nla_validate_parse: 5 callbacks suppressed [ 232.885100][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'. [ 232.997923][ T9802] bond0: (slave bond_slave_1): Releasing backup interface [ 233.502608][ T9808] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 233.544414][ T9808] batman_adv: batadv0: Adding interface: gretap1 [ 233.566555][ T9808] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.594243][ T9808] batman_adv: batadv0: Interface activated: gretap1 [ 234.650783][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 234.956587][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 234.963155][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 235.026738][ T9863] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 235.035253][ T9863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.895'. [ 235.035275][ T9860] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 235.072879][ T9861] netlink: 220 bytes leftover after parsing attributes in process `syz.5.893'. [ 235.249950][ T9867] 8021q: VLANs not supported on nr0 [ 235.489260][ T9882] bridge_slave_1: left allmulticast mode [ 235.494986][ T9882] bridge_slave_1: left promiscuous mode [ 235.503899][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 235.513393][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 235.528952][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.582843][ T9882] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 235.656838][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 236.475065][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.494306][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.729790][ T9906] batman_adv: batadv0: Interface deactivated: macsec1 [ 236.750071][ T1112] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.776381][ T1112] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.794594][ T1112] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.837654][ T9907] geneve2: entered promiscuous mode [ 236.848876][ T9920] netlink: 'syz.4.906': attribute type 9 has an invalid length. [ 236.857457][ T1112] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.867322][ T9920] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.906'. [ 236.889169][ T1112] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.899293][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 236.916662][ T1112] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.931449][ T1112] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.998873][ T1112] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.012897][ T1112] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.022794][ T1112] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.037934][ T1112] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.058116][ T1112] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.076645][ T1112] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.085049][ T1112] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.112949][ T1112] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.132749][ T1112] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.159630][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.911'. [ 237.170488][ T9929] netlink: 'syz.3.911': attribute type 3 has an invalid length. [ 237.178885][ T9929] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 237.199279][ T9929] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 237.207724][ T9930] netlink: 'syz.3.911': attribute type 3 has an invalid length. [ 237.257829][ T9930] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 237.276681][ T9930] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 237.744786][ T9967] netlink: 'syz.0.919': attribute type 8 has an invalid length. [ 237.801772][ T9965] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.286397][ T9971] bond4: option arp_interval: invalid value (18446744073709551615) [ 238.295687][ T9971] bond4: option arp_interval: allowed values 0 - 2147483647 [ 238.330998][ T9971] bond4 (unregistering): Released all slaves [ 238.477355][ T5843] Bluetooth: hci5: command 0x0405 tx timeout [ 238.743523][ T9987] syzkaller0: entered promiscuous mode [ 238.752842][ T9987] syzkaller0: entered allmulticast mode [ 239.419905][T10016] __nla_validate_parse: 9 callbacks suppressed [ 239.419927][T10016] netlink: 68 bytes leftover after parsing attributes in process `syz.5.930'. [ 239.492239][T10022] netlink: 136 bytes leftover after parsing attributes in process `syz.1.933'. [ 239.501413][T10022] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 239.529195][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 239.591840][T10020] hsr_slave_0: left promiscuous mode [ 239.598930][T10020] hsr_slave_1: left promiscuous mode [ 239.749497][T10023] gretap3: entered promiscuous mode [ 239.872694][T10025] gretap3: entered promiscuous mode [ 239.994225][T10033] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.376802][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.936'. [ 240.392488][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.936'. [ 240.418510][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.936'. [ 240.446915][T10047] syzkaller1: entered promiscuous mode [ 240.462807][T10047] syzkaller1: entered allmulticast mode [ 240.908118][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 241.446214][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 241.498067][T10099] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.561947][T10104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.951'. [ 241.733730][T10106] netlink: 220 bytes leftover after parsing attributes in process `syz.0.952'. [ 242.299296][T10124] netlink: 'syz.5.957': attribute type 8 has an invalid length. [ 243.661680][T10186] syzkaller1: entered promiscuous mode [ 243.690015][T10186] syzkaller1: entered allmulticast mode [ 243.763507][T10153] ip6_vti0 speed is unknown, defaulting to 1000 [ 244.169542][T10205] netlink: 'syz.0.975': attribute type 3 has an invalid length. [ 244.180214][T10205] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 244.384797][T10210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 244.609508][T10198] ip6_vti0 speed is unknown, defaulting to 1000 [ 244.766221][T10223] veth0_to_batadv: entered promiscuous mode [ 244.785038][T10223] veth0_to_batadv: entered allmulticast mode [ 245.087297][T10233] netlink: 'syz.0.983': attribute type 66 has an invalid length. [ 245.673328][T10251] __nla_validate_parse: 14 callbacks suppressed [ 245.673349][T10251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.985'. [ 245.856031][T10264] netlink: 'syz.4.988': attribute type 21 has an invalid length. [ 245.875316][T10264] netlink: 128 bytes leftover after parsing attributes in process `syz.4.988'. [ 245.901277][T10266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.989'. [ 245.921891][T10264] netlink: 3 bytes leftover after parsing attributes in process `syz.4.988'. [ 246.087659][T10269] IPVS: set_ctl: invalid protocol: 90 0.0.0.0:20000 [ 246.170918][T10270] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 246.194008][T10270] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 246.669471][ T795] IPVS: starting estimator thread 0... [ 246.675684][T10291] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 246.777430][T10292] IPVS: using max 28 ests per chain, 67200 per kthread [ 247.130454][T10304] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 247.250717][T10314] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 247.304806][T10316] netlink: 'syz.1.1001': attribute type 13 has an invalid length. [ 247.330731][T10314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.340503][T10308] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.381882][ T3419] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.390908][T10316] netlink: 'syz.1.1001': attribute type 13 has an invalid length. [ 247.406810][ T3419] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.425073][T10319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 247.445336][ T3419] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.476723][ T3419] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.576363][T10324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 247.689574][T10331] netlink: 'syz.5.1005': attribute type 9 has an invalid length. [ 247.699955][T10330] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 248.849660][T10366] x_tables: duplicate underflow at hook 3 [ 248.985932][T10370] gretap1: entered promiscuous mode [ 249.010276][T10370] batman_adv: batadv0: Adding interface: gretap1 [ 249.036767][T10370] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.066691][T10370] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 249.119227][T10380] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 249.178922][T10380] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1016'. [ 249.418383][T10395] netlink: 'syz.0.1022': attribute type 61 has an invalid length. [ 249.428090][T10395] netlink: 'syz.0.1022': attribute type 61 has an invalid length. [ 249.967313][T10416] tipc: Enabled bearer , priority 0 [ 250.230389][T10416] syzkaller0: entered promiscuous mode [ 250.259806][T10416] syzkaller0: entered allmulticast mode [ 250.276924][T10425] netlink: 'syz.4.1030': attribute type 41 has an invalid length. [ 251.442724][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 251.992645][T10431] tipc: Resetting bearer [ 252.004939][T10415] tipc: Resetting bearer [ 252.021466][T10415] tipc: Disabling bearer [ 252.031330][ T795] tipc: Node number set to 2076210439 [ 252.152998][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'. [ 252.172653][T10458] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 252.204254][T10458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1037'. [ 252.224307][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 252.350053][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 252.403695][T10463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.442885][T10468] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1041'. [ 252.576091][T10475] netlink: 'syz.4.1044': attribute type 11 has an invalid length. [ 252.591321][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 252.595861][T10475] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1044'. [ 252.665258][T10490] netlink: 'syz.1.1046': attribute type 5 has an invalid length. [ 252.681917][T10482] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 252.784628][T10494] netlink: 'syz.1.1046': attribute type 10 has an invalid length. [ 252.810965][T10494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1046'. [ 252.837764][T10494] netlink: 'syz.1.1046': attribute type 5 has an invalid length. [ 252.942223][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 253.001481][ T62] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.030108][ T62] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.085045][ T62] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.113015][ T62] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.629237][T10533] nbd: must specify a size in bytes for the device [ 253.836066][T10540] macsec1: entered promiscuous mode [ 253.856297][T10540] bridge0: entered promiscuous mode [ 254.286844][T10566] netlink: 'syz.1.1066': attribute type 83 has an invalid length. [ 255.113699][T10599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.131446][T10605] bond4: (slave vlan0): Opening slave failed [ 255.168579][T10607] netlink: 'syz.0.1080': attribute type 3 has an invalid length. [ 255.499673][T10599] bond4 (unregistering): Released all slaves [ 255.797284][T10620] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 255.808342][T10626] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 256.025906][T10624] syz.5.1087 (10624) used greatest stack depth: 17384 bytes left [ 256.310741][T10638] ip6_vti0 speed is unknown, defaulting to 1000 [ 256.583169][T10640] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.231439][T10657] __nla_validate_parse: 12 callbacks suppressed [ 257.231460][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 257.291384][T10659] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 257.337147][T10659] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.353014][T10659] .`: (slave team0): Enslaving as an active interface with an up link [ 257.373154][T10662] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1098'. [ 257.438753][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1098'. [ 257.644763][T10673] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 257.673635][T10673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1102'. [ 257.698535][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 258.551708][T10680] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1103'. [ 258.981167][T10697] batadv1: entered allmulticast mode [ 258.988440][T10697] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 259.205111][T10708] netlink: 'syz.1.1110': attribute type 33 has an invalid length. [ 259.246805][T10708] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1110'. [ 259.310859][T10710] veth0: entered promiscuous mode [ 259.326660][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 259.444091][T10710] veth0 (unregistering): left promiscuous mode [ 259.520316][T10702] ip6_vti0 speed is unknown, defaulting to 1000 [ 259.965974][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 260.511106][T10764] netlink: 'syz.5.1125': attribute type 1 has an invalid length. [ 260.767228][T10768] ip6_vti0 speed is unknown, defaulting to 1000 [ 261.044215][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.057188][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.663201][T10783] netlink: 'syz.4.1130': attribute type 21 has an invalid length. [ 261.687263][T10783] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1130'. [ 261.732986][T10783] syzkaller0: entered promiscuous mode [ 261.760530][T10783] syzkaller0: entered allmulticast mode [ 262.063687][T10787] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 2, id = 0 [ 262.096910][T10786] hsr_slave_0: left promiscuous mode [ 262.127458][T10786] hsr_slave_1: left promiscuous mode [ 262.501804][T10791] 8021q: VLANs not supported on ip_vti0 [ 263.642781][T10815] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 263.661137][T10823] __nla_validate_parse: 1 callbacks suppressed [ 263.661161][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 263.731425][T10823] ip6tnl2: entered allmulticast mode [ 263.992877][T10830] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.759622][T10846] netlink: 'syz.4.1147': attribute type 10 has an invalid length. [ 264.809737][T10846] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1147'. [ 264.838499][T10846] batadv_slave_1: entered promiscuous mode [ 264.883453][T10846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.956891][T10846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.995314][T10846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.023728][T10846] bridge0: port 2(batadv_slave_1) entered blocking state [ 265.044557][T10846] bridge0: port 2(batadv_slave_1) entered disabled state [ 265.066019][T10846] batadv_slave_1: entered allmulticast mode [ 265.257358][T10852] sctp: [Deprecated]: syz.3.1151 (pid 10852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.257358][T10852] Use struct sctp_sack_info instead [ 265.281080][T10852] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 265.337002][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'. [ 265.453820][T10852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.574397][T10864] vlan3: entered allmulticast mode [ 265.636615][T10864] veth1: entered allmulticast mode [ 265.643295][T10864] bond3: (slave vlan3): Opening slave failed [ 265.671023][T10867] smc: net device hsr0 applied user defined pnetid SYZ2 [ 265.687362][T10868] smc: net device hsr0 erased user defined pnetid SYZ2 [ 265.704862][T10861] ip6_vti0 speed is unknown, defaulting to 1000 [ 265.893092][T10873] netlink: 'syz.3.1154': attribute type 12 has an invalid length. [ 266.109827][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1156'. [ 266.121151][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1156'. [ 267.336961][T10911] xt_hashlimit: overflow, try lower: 3/0 [ 267.572672][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1164'. [ 268.040019][T10930] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1167'. [ 268.448206][T10941] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1170'. [ 268.486308][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1169'. [ 268.602990][T10941] netlink: 'syz.5.1170': attribute type 9 has an invalid length. [ 268.661080][T10941] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1170'. [ 268.684534][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 268.741160][T10941] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1170'. [ 268.847695][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1172'. [ 268.922285][ T5848] block nbd3: Receive control failed (result -107) [ 269.511268][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1179'. [ 269.528765][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 269.680217][T10994] netlink: 'syz.1.1184': attribute type 3 has an invalid length. [ 269.688727][T10994] netlink: 'syz.1.1184': attribute type 16 has an invalid length. [ 269.698115][T10994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1184'. [ 269.711217][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 269.868236][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 269.957518][T10988] team0 (unregistering): Port device team_slave_0 removed [ 269.975586][T10988] team0 (unregistering): Port device team_slave_1 removed [ 270.028839][T10994] hsr_slave_0: left promiscuous mode [ 270.169864][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 270.202058][T11019] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1191'. [ 270.565134][T11046] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 270.628329][T11056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.790569][T11059] veth1: entered promiscuous mode [ 270.813360][T11063] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 270.842477][T11063] @„;: entered promiscuous mode [ 271.003948][T11076] netlink: 'syz.3.1207': attribute type 11 has an invalid length. [ 271.397866][T11097] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 271.626305][T11109] bond3: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 271.666991][T11109] bond3: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 271.892890][T11123] netlink: 'syz.1.1221': attribute type 3 has an invalid length. [ 271.977935][T11122] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.444942][T11144] netlink: 'syz.4.1227': attribute type 1 has an invalid length. [ 272.474484][T11143] netlink: 'syz.4.1227': attribute type 1 has an invalid length. [ 272.638486][T11144] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 272.639818][T11143] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 272.790025][T11152] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.605628][T11182] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 273.675344][T11163] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.840007][T11186] __nla_validate_parse: 11 callbacks suppressed [ 273.840029][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 273.875929][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 274.832500][T11206] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 274.870672][T11206] team0: Port device syz_tun added [ 275.023610][T11209] tipc: Enabling of bearer rejected, failed to enable media [ 275.710081][T11220] syzkaller0: entered promiscuous mode [ 275.715650][T11220] syzkaller0: entered allmulticast mode [ 275.744446][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1247'. [ 277.208463][T11270] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.255193][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 278.264634][T11303] block nbd4: Unsupported socket: should be TCP or UNIX. [ 278.308565][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 278.489359][T11318] netlink: 'syz.4.1274': attribute type 12 has an invalid length. [ 278.509240][T11318] netlink: 'syz.4.1274': attribute type 29 has an invalid length. [ 278.540082][T11318] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1274'. [ 278.596390][T11318] netlink: 'syz.4.1274': attribute type 2 has an invalid length. [ 278.651476][T11318] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1274'. [ 279.045232][T11334] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 279.083647][T11333] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 279.163330][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.169437][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.181357][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.287975][T11339] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.412836][T11339] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 279.579333][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'. [ 279.606904][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.686331][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'. [ 279.696709][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.704687][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1285'. [ 279.726864][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.770641][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.782556][T11353] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1286'. [ 279.792833][T11351] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 279.801089][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'. [ 279.811240][T11351] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 279.823797][T11339] wg1 speed is unknown, defaulting to 1000 [ 279.972128][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 279.985332][T11366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1288'. [ 280.051373][T11353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.061826][T11353] bond_slave_0: left promiscuous mode [ 280.070144][T11353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.081647][T11353] bond_slave_1: left promiscuous mode [ 280.090962][T11353] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 280.101047][T11353] bridge0: left promiscuous mode [ 280.108234][T11353] bond0 (unregistering): Released all slaves [ 280.370780][T11373] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.432030][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 280.723303][T11398] delete_channel: no stack [ 280.798742][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1296'. [ 280.810094][T11379] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.830487][T11408] netlink: 'syz.5.1297': attribute type 2 has an invalid length. [ 280.840355][T11408] netlink: 'syz.5.1297': attribute type 1 has an invalid length. [ 280.848817][T11408] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1297'. [ 280.955792][T11409] pim6reg1: entered promiscuous mode [ 280.961711][T11409] pim6reg1: entered allmulticast mode [ 281.142012][T11411] ipvlan3: entered promiscuous mode [ 281.172906][T11413] syzkaller1: entered promiscuous mode [ 281.186723][T11413] syzkaller1: entered allmulticast mode [ 281.259336][T11407] delete_channel: no stack [ 281.522097][T11401] ip6_vti0 speed is unknown, defaulting to 1000 [ 281.556045][T11373] wg1 speed is unknown, defaulting to 1000 [ 281.989151][T11448] netlink: 'syz.5.1306': attribute type 11 has an invalid length. [ 282.314721][T11440] netlink: 'syz.3.1301': attribute type 30 has an invalid length. [ 282.373914][T11440] bond0: option arp_missed_max: invalid value (0) [ 282.396625][T11440] bond0: option arp_missed_max: allowed values 1 - 255 [ 282.408985][T11440] bond0 (unregistering): Released all slaves [ 282.695080][T11401] wg1 speed is unknown, defaulting to 1000 [ 282.812311][T11379] wg1 speed is unknown, defaulting to 1000 [ 283.165002][T11481] ip6gre1: entered promiscuous mode [ 283.183217][T11481] ip6gre1: entered allmulticast mode [ 283.221917][T11474] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.279867][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.293278][T11491] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 283.304266][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.312858][ T795] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.366758][ T795] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.868431][T11507] xt_limit: Overflow, try lower: 271964/0 [ 283.956966][ T795] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.307174][T11518] tipc: Enabled bearer , priority 0 [ 284.314901][T11518] syzkaller0: entered promiscuous mode [ 284.321810][T11518] syzkaller0: entered allmulticast mode [ 284.347870][T11517] tipc: Resetting bearer [ 284.417900][T11517] tipc: Disabling bearer [ 284.476211][T11474] wg1 speed is unknown, defaulting to 1000 [ 284.650639][T11526] __nla_validate_parse: 3 callbacks suppressed [ 284.650658][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1328'. [ 284.983967][T11536] vlan1: entered allmulticast mode [ 284.989340][T11536] bridge0: entered allmulticast mode [ 285.068810][T11526] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 285.341058][T11546] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1331'. [ 286.000166][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'. [ 286.218869][T11566] .`: (slave team0): Releasing backup interface [ 286.244165][T11566] team0 (unregistering): Port device team_slave_0 removed [ 286.258960][T11566] team0 (unregistering): Port device team_slave_1 removed [ 286.324313][T11578] ip6_vti0 speed is unknown, defaulting to 1000 [ 286.340065][T11584] syzkaller0: entered promiscuous mode [ 286.345611][T11584] syzkaller0: entered allmulticast mode [ 286.539414][T11591] vlan1: entered promiscuous mode [ 286.557670][T11591] bond0: entered promiscuous mode [ 286.562867][T11591] bond_slave_0: entered promiscuous mode [ 286.623972][T11591] bond_slave_1: entered promiscuous mode [ 286.728532][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 286.749312][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 287.116742][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.205626][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'. [ 287.216008][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'. [ 287.237751][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'. [ 287.258014][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 287.301648][T11578] wg1 speed is unknown, defaulting to 1000 [ 287.450830][T11625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1352'. [ 287.465339][T11626] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 288.077540][T11639] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.447656][T11646] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.596762][T11665] netlink: 'syz.5.1361': attribute type 46 has an invalid length. [ 288.724107][T11661] syzkaller1: entered promiscuous mode [ 288.730216][T11661] syzkaller1: entered allmulticast mode [ 289.280308][T11639] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.687339][T11709] __nla_validate_parse: 5 callbacks suppressed [ 289.687361][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 289.798809][T11648] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.808455][T11646] wg1 speed is unknown, defaulting to 1000 [ 289.980773][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 290.038703][T11712] macvtap2: entered promiscuous mode [ 290.059994][T11712] erspan0: entered promiscuous mode [ 290.082070][T11712] macvtap2: entered allmulticast mode [ 290.099625][T11712] erspan0: entered allmulticast mode [ 290.109413][T11715] macvtap2: left promiscuous mode [ 290.115335][T11715] erspan0: left promiscuous mode [ 290.121176][T11715] macvtap2: left allmulticast mode [ 290.127368][T11715] erspan0: left allmulticast mode [ 290.364171][T11717] tipc: Enabled bearer , priority 0 [ 290.457878][T11716] syzkaller0: entered promiscuous mode [ 290.464343][T11716] syzkaller0: entered allmulticast mode [ 290.523428][T11704] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.711283][T11706] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.873654][T11726] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.875324][T11639] wg1 speed is unknown, defaulting to 1000 [ 290.897251][T11714] tipc: Resetting bearer [ 290.938948][T11714] tipc: Disabling bearer [ 291.141707][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1375'. [ 291.183788][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1375'. [ 292.268175][T11726] wg1 speed is unknown, defaulting to 1000 [ 292.365080][T11706] wg1 speed is unknown, defaulting to 1000 [ 292.388245][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1380'. [ 292.445358][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1380'. [ 292.617672][T11704] wg1 speed is unknown, defaulting to 1000 [ 292.770962][T11648] wg1 speed is unknown, defaulting to 1000 [ 293.733788][T11755] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.842180][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 294.340309][T11767] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1384'. [ 294.748093][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 294.809011][T11776] netlink: 'syz.0.1386': attribute type 30 has an invalid length. [ 294.956660][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.365214][T11755] wg1 speed is unknown, defaulting to 1000 [ 296.476795][T11798] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 296.696896][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1394'. [ 296.739111][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1394'. [ 296.780746][T11805] netlink: 'syz.0.1394': attribute type 3 has an invalid length. [ 296.814514][T11805] netlink: 'syz.0.1394': attribute type 3 has an invalid length. [ 296.994271][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 297.057447][T11815] xt_TCPMSS: Only works on TCP SYN packets [ 297.067793][T11815] xt_TCPMSS: Only works on TCP SYN packets [ 297.328724][T11829] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.378512][T11834] netlink: 'syz.1.1403': attribute type 6 has an invalid length. [ 297.549492][T11839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1404'. [ 297.623042][T11820] syzkaller0: entered promiscuous mode [ 297.635587][T11820] syzkaller0: entered allmulticast mode [ 297.757713][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 297.812626][ T6172] IPVS: starting estimator thread 0... [ 297.921465][T11856] IPVS: using max 28 ests per chain, 67200 per kthread [ 297.965865][T11862] .`: (slave bond_slave_0): Releasing backup interface [ 298.005808][T11862] .`: (slave bond_slave_1): Releasing backup interface [ 298.011938][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1409'. [ 298.028250][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 298.039204][T11862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.060698][T11862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.089303][T11862] bond0: (slave gretap1): Releasing active interface [ 298.116041][T11866] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 298.123568][T11855] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.220566][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 298.361340][T11870] bridge_slave_1: left allmulticast mode [ 298.382722][T11870] bridge_slave_1: left promiscuous mode [ 298.402095][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.457173][T11870] bridge_slave_0: left allmulticast mode [ 298.467092][T11870] bridge_slave_0: left promiscuous mode [ 298.474560][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.785927][T11829] wg1 speed is unknown, defaulting to 1000 [ 299.080769][T11891] syzkaller0: entered promiscuous mode [ 299.086620][T11891] syzkaller0: entered allmulticast mode [ 300.175849][T11904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1419'. [ 300.582481][T11855] wg1 speed is unknown, defaulting to 1000 [ 300.960857][T11923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1423'. [ 301.142374][T11928] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1424'. [ 301.327514][T11932] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1426'. [ 301.504530][T11939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1429'. [ 301.724718][T11946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1430'. [ 301.743381][T11946] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1430'. [ 304.667211][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 304.706859][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 304.784001][T11969] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.953538][T11978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1436'. [ 305.191588][T11974] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.517779][T11995] netlink: 'syz.3.1442': attribute type 1 has an invalid length. [ 305.771136][T12002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1445'. [ 305.956545][T11969] wg1 speed is unknown, defaulting to 1000 [ 306.582317][T12017] netlink: 'syz.3.1448': attribute type 4 has an invalid length. [ 306.870910][T12023] ipvlan4: entered promiscuous mode [ 306.876247][T12023] ipvlan4: entered allmulticast mode [ 306.902128][T12023] geneve1: entered allmulticast mode [ 306.918509][T12026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.943849][T12023] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 306.973296][T11974] wg1 speed is unknown, defaulting to 1000 [ 307.270375][T12034] netlink: 'syz.4.1453': attribute type 12 has an invalid length. [ 307.295082][T12034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1453'. [ 307.653702][T12050] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1459'. [ 307.960703][T12058] tipc: Enabled bearer , priority 0 [ 308.014236][T12060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.112896][T12065] netlink: 'syz.0.1464': attribute type 13 has an invalid length. [ 308.122590][T12064] netlink: 'syz.0.1464': attribute type 13 has an invalid length. [ 308.131111][T12064] netlink: 'syz.0.1464': attribute type 17 has an invalid length. [ 308.140670][T12065] netlink: 'syz.0.1464': attribute type 17 has an invalid length. [ 308.183682][T12064] erspan0: entered promiscuous mode [ 308.323226][T12064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.382380][T12064] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.402244][T12064] dummy0: entered promiscuous mode [ 308.422097][T12064] 0ªX¹¦À: left allmulticast mode [ 308.429240][T12064] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.457286][T12065] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.485622][ T5949] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.492293][ T5949] syz0: Port: 1 Link ACTIVE [ 308.512385][ T5966] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.556686][T12078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1467'. [ 308.570699][T12078] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 308.617805][T12080] veth8: entered allmulticast mode [ 308.671876][ T30] audit: type=1800 audit(1766719894.398:6): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1466" name="memory.events" dev="tmpfs" ino=1440 res=0 errno=0 [ 308.940729][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1471'. [ 308.977781][ T795] tipc: Node number set to 1557426708 [ 309.084285][T12095] netlink: 'syz.1.1472': attribute type 15 has an invalid length. [ 309.209014][T12101] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.229126][T12097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.330368][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1475'. [ 309.963773][T12136] netlink: 'syz.4.1484': attribute type 3 has an invalid length. [ 310.156912][T12136] dvmrp0: entered allmulticast mode [ 310.316772][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.839340][T12172] : entered promiscuous mode [ 310.897621][T12172] netlink: 'syz.1.1488': attribute type 21 has an invalid length. [ 310.905520][T12172] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1488'. [ 310.918226][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1490'. [ 311.074872][T12101] wg1 speed is unknown, defaulting to 1000 [ 311.210661][T12188] netlink: 'syz.5.1494': attribute type 1 has an invalid length. [ 311.293043][T12188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.346109][T12197] veth7: entered promiscuous mode [ 311.435207][T12188] erspan0: entered allmulticast mode [ 311.883391][T12219] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1501'. [ 311.955776][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'. [ 312.044969][T12216] netlink: 'syz.3.1500': attribute type 23 has an invalid length. [ 312.198466][T12224] bridge_slave_0: default FDB implementation only supports local addresses [ 312.294622][T12228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1503'. [ 312.606948][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 312.660473][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 312.925155][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 312.965535][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 312.997438][T12267] netlink: 'syz.0.1513': attribute type 3 has an invalid length. [ 313.170120][T12271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 313.176300][T12271] syzkaller1: linktype set to 825 [ 313.250908][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1516'. [ 313.289155][T12279] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 313.591883][T12293] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 313.627221][T12293] netlink: 'syz.1.1521': attribute type 4 has an invalid length. [ 314.749498][T12317] syzkaller0: entered promiscuous mode [ 314.783565][T12317] syzkaller0: entered allmulticast mode [ 315.127808][T12334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 315.386924][T12344] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.075634][T12373] __nla_validate_parse: 4 callbacks suppressed [ 318.075656][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 318.467873][T12386] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1544'. [ 318.523053][T12386] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1544'. [ 318.591507][T12388] xt_connbytes: Forcing CT accounting to be enabled [ 318.695240][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 318.928345][T12394] bond1: entered promiscuous mode [ 318.978804][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1548'. [ 319.000280][T12394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.361481][T12394] bond1 (unregistering): Released all slaves [ 319.409219][T12412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.489178][T12414] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.548606][T12425] xt_hashlimit: max too large, truncated to 1048576 [ 319.576030][T12425] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1553'. [ 319.643049][T12425] xt_hashlimit: max too large, truncated to 1048576 [ 319.698681][T12414] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.851920][T12414] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.348146][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.355621][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.918899][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.961016][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.593906][ T6166] syz1: Port: 1 Link DOWN [ 321.628211][T12414] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.671284][ T3419] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.717223][ T3419] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.746367][ T3419] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.755847][ T3419] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.824410][ T7429] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.902530][ T6059] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.931397][ T6059] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.977057][ T1112] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.045520][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'. [ 322.199405][T12486] tipc: Enabled bearer , priority 0 [ 322.207210][T12486] syzkaller0: entered promiscuous mode [ 322.212742][T12486] syzkaller0: entered allmulticast mode [ 322.403092][T12505] tipc: Enabled bearer , priority 0 [ 322.421125][T12505] syzkaller0: entered promiscuous mode [ 322.442043][T12505] syzkaller0: entered allmulticast mode [ 322.482275][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.510219][T12483] tipc: Resetting bearer [ 322.572540][T12483] tipc: Disabling bearer [ 322.642146][T12515] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 322.653563][T12515] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 322.661498][T12515] tipc: Resetting bearer [ 322.688238][T12514] tipc: Resetting bearer [ 322.986256][T12502] tipc: Resetting bearer [ 323.014519][T12502] tipc: Disabling bearer [ 323.060420][T12532] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1583'. [ 323.107039][T12535] syzkaller1: entered promiscuous mode [ 323.177658][T12535] syzkaller1: entered allmulticast mode [ 341.786518][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.677482][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.450128][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.016142][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.100933][ T31] INFO: task kworker/u8:9:1115 blocked for more than 155 seconds. [ 486.108992][ T31] Not tainted syzkaller #0 [ 486.114153][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.375781][ T31] task:kworker/u8:9 state:D stack:24344 pid:1115 tgid:1115 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 486.388011][ T31] Workqueue: events_unbound linkwatch_event [ 486.394036][ T31] Call Trace: [ 486.397629][ T31] [ 486.400649][ T31] __schedule+0x14bc/0x5000 [ 486.405231][ T31] ? __pfx___schedule+0x10/0x10 [ 486.410215][ T31] ? schedule+0x91/0x360 [ 486.414773][ T31] schedule+0x165/0x360 [ 486.419028][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.424531][ T31] __mutex_lock+0x7e6/0x1350 [ 487.388149][ T31] ? __mutex_lock+0x5bb/0x1350 [ 487.393222][ T31] ? linkwatch_event+0xe/0x60 [ 488.164689][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 488.169903][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 488.175664][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 488.181709][ T31] linkwatch_event+0xe/0x60 [ 488.186268][ T31] process_scheduled_works+0xad1/0x1770 [ 488.192063][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 488.198228][ T31] worker_thread+0x8a0/0xda0 [ 488.202871][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 488.209341][ T31] ? __kthread_parkme+0x7b/0x200 [ 488.214337][ T31] kthread+0x711/0x8a0 [ 488.218575][ T31] ? __pfx_worker_thread+0x10/0x10 [ 488.223741][ T31] ? __pfx_kthread+0x10/0x10 [ 488.228495][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.233788][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 488.239194][ T31] ? __pfx_kthread+0x10/0x10 [ 488.243850][ T31] ret_from_fork+0x599/0xb30 [ 488.248571][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 488.253753][ T31] ? __switch_to_asm+0x39/0x70 [ 488.259081][ T31] ? __switch_to_asm+0x33/0x70 [ 488.264033][ T31] ? __pfx_kthread+0x10/0x10 [ 488.268803][ T31] ret_from_fork_asm+0x1a/0x30 [ 488.273642][ T31] [ 488.276948][ T31] INFO: task syz.3.1587:12539 blocked for more than 157 seconds. [ 488.284702][ T31] Not tainted syzkaller #0 [ 488.289794][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.298807][ T31] task:syz.3.1587 state:D stack:25920 pid:12539 tgid:12538 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 488.310856][ T31] Call Trace: [ 488.314177][ T31] [ 488.317240][ T31] __schedule+0x14bc/0x5000 [ 488.321818][ T31] ? __pfx___schedule+0x10/0x10 [ 488.326790][ T31] ? schedule+0x91/0x360 [ 488.331074][ T31] schedule+0x165/0x360 [ 488.335279][ T31] schedule_preempt_disabled+0x13/0x30 [ 488.340871][ T31] __mutex_lock+0x7e6/0x1350 [ 488.345520][ T31] ? __mutex_lock+0x5bb/0x1350 [ 488.350385][ T31] ? wg_get_device_dumpit+0xf2/0x1b70 [ 488.355809][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 488.361176][ T31] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 488.367766][ T31] wg_get_device_dumpit+0xf2/0x1b70 [ 488.373041][ T31] ? rcu_is_watching+0x15/0xb0 [ 488.378010][ T31] ? trace_contention_end+0x39/0x100 [ 488.383363][ T31] ? __mutex_lock+0x335/0x1350 [ 488.388355][ T31] ? __pfx_wg_get_device_dumpit+0x10/0x10 [ 488.394133][ T31] ? rcu_is_watching+0x15/0xb0 [ 488.399079][ T31] ? trace_kmalloc+0x1f/0xb0 [ 488.403714][ T31] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 488.410452][ T31] ? genl_dumpit+0xdb/0x1b0 [ 488.415019][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 488.420170][ T31] ? __alloc_skb+0x2f1/0x430 [ 488.424806][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 488.429875][ T31] genl_dumpit+0x10b/0x1b0 [ 488.434336][ T31] netlink_dump+0x6e4/0xe90 [ 488.438931][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 488.444024][ T31] ? dev_get_by_name+0x21/0x200 [ 488.449230][ T31] ? dev_get_by_name+0x21/0x200 [ 488.454152][ T31] ? genl_start+0x581/0x6c0 [ 488.459387][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 488.464735][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 488.470624][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 488.477140][ T31] ? __pfx_genl_start+0x10/0x10 [ 488.482203][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 488.487429][ T31] ? __pfx_genl_done+0x10/0x10 [ 488.492276][ T31] ? bpf_lsm_capable+0x9/0x20 [ 488.497055][ T31] ? security_capable+0x7e/0x2e0 [ 488.502048][ T31] genl_rcv_msg+0x5da/0x790 [ 488.506746][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.511828][ T31] ? __pfx_wg_get_device_start+0x10/0x10 [ 488.517665][ T31] ? __pfx_wg_get_device_dumpit+0x10/0x10 [ 488.523619][ T31] ? __pfx_wg_get_device_done+0x10/0x10 [ 488.530007][ T31] netlink_rcv_skb+0x208/0x470 [ 488.534849][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.540023][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.545389][ T31] ? down_read+0x274/0x2e0 [ 490.076763][ T31] ? genl_rcv+0xd/0x40 [ 490.080982][ T31] genl_rcv+0x28/0x40 [ 490.085041][ T31] netlink_unicast+0x82f/0x9e0 [ 490.089949][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 490.095287][ T31] ? netlink_sendmsg+0x642/0xb30 [ 490.100291][ T31] ? skb_put+0x11b/0x210 [ 490.104583][ T31] netlink_sendmsg+0x805/0xb30 [ 490.109440][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.114776][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.119786][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.125105][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.130465][ T31] __sock_sendmsg+0x21c/0x270 [ 490.135192][ T31] ____sys_sendmsg+0x505/0x820 [ 490.140167][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.145526][ T31] ? import_iovec+0x74/0xa0 [ 490.150157][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 490.154900][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.160186][ T31] ? futex_wake+0x4b2/0x560 [ 490.164780][ T31] ? __fget_files+0x2a/0x420 [ 490.169511][ T31] ? __fget_files+0x3a0/0x420 [ 490.174270][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 490.179357][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.184899][ T31] ? do_syscall_64+0xbe/0xf80 [ 490.194562][ T31] do_syscall_64+0xfa/0xf80 [ 490.209681][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.215839][ T31] ? clear_bhb_loop+0x60/0xb0 [ 490.220630][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.226602][ T31] RIP: 0033:0x7f065fd8f749 [ 490.231063][ T31] RSP: 002b:00007f0660bec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.239749][ T31] RAX: ffffffffffffffda RBX: 00007f065ffe5fa0 RCX: 00007f065fd8f749 [ 490.248017][ T31] RDX: 0000000020008000 RSI: 0000200000000380 RDI: 0000000000000006 [ 490.256088][ T31] RBP: 00007f065fe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 490.264135][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.272177][ T31] R13: 00007f065ffe6038 R14: 00007f065ffe5fa0 R15: 00007ffd8d224168 [ 490.280276][ T31] [ 490.283366][ T31] [ 490.283366][ T31] Showing all locks held in the system: [ 490.291326][ T31] 1 lock held by khungtaskd/31: [ 490.296231][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 490.306399][ T31] 2 locks held by kworker/u8:4/62: [ 490.311536][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 490.321555][ T31] #1: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4c0 [ 492.108446][ T31] 3 locks held by kworker/u8:9/1115: [ 492.113804][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 492.886416][ T31] #1: ffffc9000414fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 492.897596][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 492.906721][ T31] 2 locks held by udevd/5201: [ 492.911432][ T31] 3 locks held by dhcpcd/5495: [ 492.916214][ T31] 2 locks held by getty/5588: [ 492.920978][ T31] #0: ffff88814e8200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.930902][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 493.193692][ T31] 1 lock held by syz-executor/5818: [ 493.199061][ T31] 1 lock held by syz-executor/5828: [ 493.204386][ T31] 3 locks held by kworker/1:7/5949: [ 493.209773][ T31] #0: ffff88813ff16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 493.223279][ T31] #1: ffffc9000477fb80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 493.241650][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf00 [ 493.251475][ T31] 8 locks held by kworker/u8:17/6053: [ 493.256962][ T31] 3 locks held by kworker/u8:18/6056: [ 493.262360][ T31] #0: ffff88814d269148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 493.274150][ T31] #1: ffffc90004dafb80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 493.288298][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 493.297998][ T31] 3 locks held by kworker/0:9/6166: [ 493.303248][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 493.314709][ T31] #1: ffffc9000b39fb80 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 493.829858][ T31] #2: ffffffff8dfc1308 (pack_mutex){+.+.}-{4:4}, at: bpf_prog_pack_free+0x35/0x420 [ 493.839748][ T31] 4 locks held by kworker/0:12/6169: [ 493.845164][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 493.856246][ T31] #1: ffffc9000b3efb80 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 495.632899][ T31] #2: ffffffff8dfc1308 (pack_mutex){+.+.}-{4:4}, at: bpf_prog_pack_free+0x35/0x420 [ 495.642485][ T31] #3: ffffffff8ddeca08 (text_mutex){+.+.}-{4:4}, at: text_poke_set+0xa3/0x180 [ 495.651675][ T31] 2 locks held by syz.0.1581/12518: [ 495.656946][ T31] 2 locks held by syz.4.1585/12534: [ 495.662175][ T31] 1 lock held by syz.4.1585/12540: [ 495.667389][ T31] 4 locks held by syz.3.1587/12539: [ 495.672634][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.681062][ T31] #1: ffff888031b806f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0