last executing test programs: 2m30.867384723s ago: executing program 3 (id=2106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd000}, 0x4000000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}, 0x100000}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="28030000400007012bbd7000fedbdf25047c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="79d60000", @ANYRES32, @ANYBLOB="0400b38004009e8014008e00fc0200000000000000000000000000000400048008005000080000000008003800", @ANYRES32, @ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2m30.614783354s ago: executing program 3 (id=2109): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x8e, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) (async) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r7, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x80}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000114010027bd7000fedbdf25080001000000000008000100fdffffff0800010001deffff070001"], 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4004000) (async) sendto$inet6(r3, &(0x7f0000000200)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback, 0x3}, 0x1c) socketpair(0x22, 0x800, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xffffffffffffffaa, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x90}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}}, 0x800) 2m30.338314178s ago: executing program 3 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000012c0)={0x0, 0x7, 0x47a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x0, 0x47a}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES16=r0, @ANYRES64=r4, @ANYRES32=r4], 0x68}}, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000001300)=""/4096, &(0x7f0000000080)=0x1000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x90) 2m29.755914083s ago: executing program 3 (id=2118): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='afs_make_fs_call\x00'}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8=r1], 0x7c}}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8=r1], 0x7c}}, 0x4000000) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f00000002c0), 0x0) (async) writev(r3, &(0x7f00000002c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000008a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40048a4) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406010100000000000000000d0000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000706010100000000000000000a000046050001000600000069efec2f03cbd74302dbe85a7a325c54a88ab3cab36bdfb736ce595d33085ae78162e95886af4f65d9f76ce7fb2c648bde02cb83a0ec325f05d71864fe0262bfbbce12f2ffbe1481387b1906e8a692e9ddc8dc7edddc"], 0x1c}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) recvmmsg(r9, 0x0, 0x0, 0x20, 0x0) (async) recvmmsg(r9, 0x0, 0x0, 0x20, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="b800000010001fff00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff0700000800290007c7020000201f8096ff1c00280002802400018000002000b7000000080014000000000008000b000000010008001500c006000028000280240004001c00dd513200dc6d64664e224e9fb9be71f3ebe552e52df0e16735941b47bd39c9b38ad620f68ade58075a55aaef7c28c0a2a35ea301d33a32c431b823cb35dbbbb47fabfb6076b5a6532fa86889a99a4710014dcc17e82c5a80fb61bf1518d41aefbe9d08df257e82e6335fe22c571caa088a7ebbeb6670e5278a650267a42cf615d9225e18dd7ad1c57fb6bc85ccf5deb87c4cc0ed571dc0fd1ee34b3fd7041c45000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="b800000010001fff00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff0700000800290007c7020000201f8096ff1c00280002802400018000002000b7000000080014000000000008000b000000010008001500c006000028000280240004001c00dd513200dc6d64664e224e9fb9be71f3ebe552e52df0e16735941b47bd39c9b38ad620f68ade58075a55aaef7c28c0a2a35ea301d33a32c431b823cb35dbbbb47fabfb6076b5a6532fa86889a99a4710014dcc17e82c5a80fb61bf1518d41aefbe9d08df257e82e6335fe22c571caa088a7ebbeb6670e5278a650267a42cf615d9225e18dd7ad1c57fb6bc85ccf5deb87c4cc0ed571dc0fd1ee34b3fd7041c45000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2m25.821877698s ago: executing program 3 (id=2147): r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x3fff}, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000001000000050000000480030052feffffff0100000f030000000400000005000000000000007597d50000"], &(0x7f00000014c0)=""/184, 0x4e, 0xb8, 0x1, 0xc71f2d1f}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m25.660265842s ago: executing program 3 (id=2149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x1404, 0x1, 0x70bd28, 0x25dddbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x20000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xa}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c814) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000001000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x3, 0x6) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x20000000) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000142, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r8, 0xe264}], 0x1, 0x0, &(0x7f0000000100)={[0x8000000000000001]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000069107600000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 2m21.364622003s ago: executing program 1 (id=2196): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0x0, 0x40000}, {0x6}]}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff2, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0x3, 0x80801, 0xd1) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x1d, 0xfa}}, 0x14}}, 0x840) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x67, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xa3, 0x0, 0x1}]}}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef"}}, 0x75) (async) getpid() (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000002053174f6c87000fcdbdf250afc130000170004000400000c001680050009eb0000000208001700ffffffff06a6ab1fbbc709dbafe3f6e6140ad068a25b7b220e2b22d24d1232c9ac1a4a9074921614d532f507"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2m21.236201561s ago: executing program 1 (id=2198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [0xffffff7f], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x53}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x2, 0x2, 0x12}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xb6, 0x5, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$sock_ifreq(r4, 0x8921, &(0x7f0000000180)={'geneve0\x00', @ifru_names='wg0\x00'}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000000)={0x1, 0x7fffffffffffffff, 0xf, 0x508a32db, 0x5, 0x0, [{0x9, 0x80000001, 0x7fff, '\x00', 0x100}, {0x4, 0xf53d, 0xf, '\x00', 0x480}, {0x1, 0xff, 0xb4d4, '\x00', 0x807}, {0x3ff, 0xffff, 0xc, '\x00', 0x100}, {0x8001, 0x3ff, 0x8}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 2m21.155702791s ago: executing program 1 (id=2200): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000904}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x400, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000000180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 2m20.997931117s ago: executing program 1 (id=2202): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) 2m20.405957018s ago: executing program 1 (id=2208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r5 = socket(0x2, 0x80805, 0x0) recvfrom$inet(r5, &(0x7f0000000000)=""/39, 0x27, 0x40000020, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000580)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040200000100"/44, @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000aa06342ec30dbbb8bf35f7c1fabdf624a9232b1508536b8e3e897153198cc28225656043e2a09a9479d14b3453766c3ec76df5160dbd8cb0e2a643b02417c53f7260d520e060d6f4e601d6771ad149eb664c121d86b2fe3feae68140d97719bc4d4ba1d1a9f9c6de906736346599d6afd3d5f278b4167ca3523de0d86bae5f9b6c27370108d7feb2a6e65598b3d98d0439295ac5bdd8f09d297f6c40"], 0x50}], 0x1, 0x0) 2m20.240337288s ago: executing program 1 (id=2210): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x70bd29, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x4d2, 0xff}, @in6=@mcast1, {@in=@rand_addr=0x64010101, @in=@local, 0x4e22, 0x0, 0x4e24, 0xe0ec, 0x2, 0x80, 0x0, 0x32}, {{@in=@broadcast, @in=@loopback, 0x4e24, 0x9, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x16}, {0x9, 0x40000006, 0x800, 0x7, 0x5, 0x2, 0x9, 0xf9a9}, {0x27b, 0x2, 0x6, 0x4000000000000}, 0x2, 0x6e6bbd, 0xbb97c3b291819029, 0x0, 0x2}, 0x5, 0x0, 0x7, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x200048c8}, 0x2000) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0xe7, &(0x7f0000000600)=""/231, 0x40f00, 0x7d, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x6, 0x0, 0x2}, 0x10, 0x0, r6, 0x8, 0x0, &(0x7f0000000700)=[{0x3, 0x1, 0x6, 0xa}, {0x2, 0x1, 0xc, 0x2}, {0x3, 0x1, 0x2, 0xc}, {0x3, 0x5, 0x9, 0x1}, {0x5, 0x1, 0x8, 0x8}, {0x2, 0x1, 0xb, 0x8}, {0x0, 0x2, 0xf, 0x2}, {0x4, 0x1, 0x1, 0x3}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000100), &(0x7f0000000840)=r7}, 0x20) 2m15.675105562s ago: executing program 4 (id=2248): sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) bind$ax25(r2, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) bind$ax25(r2, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) connect$ax25(r2, &(0x7f00000004c0)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r3, 0x3, 0xf1bf0d6, 0xcc}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000121ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) (async) writev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000121ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000180)=0x2, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000000840)=""/190, 0xbe}], 0x3) (async) readv(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000000840)=""/190, 0xbe}], 0x3) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000100)={0x9}) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r3, @ANYRESDEC=r3, @ANYRES32=r10, @ANYBLOB="1400040073797a6b616c6c65723000000000000008000500020000000500530001000000"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24044885) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r4, @ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m15.418496436s ago: executing program 4 (id=2251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r2, 0x5, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40188c8}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r0, 0x2f, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000004c0), 0x0, 0x81, 0x0, 0x1}}, 0x40) 2m14.437912035s ago: executing program 4 (id=2263): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', r1, r4, 0x1, 0x4, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r6) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x30, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x1000f1, 0x37, 0xc698, 0x80000001, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x6fda, 0x2, 0x2, 0x0, 0x4, 0x3, 0xa, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x4107a2b1, 0x4, 0x6, 0x2, 0x1, 0x80000005, 0xc0000, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x2, 0x4, 0x5, 0x22, 0x0, 0x1, 0x800, 0x8, 0x3, 0x4, 0x7, 0x4, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x315, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x7, 0x71, 0x0, 0x6, 0x6, 0x3, 0x5, 0x165, 0x6, 0x6, 0x4, 0x9, 0x7, 0x40, 0x9, 0x6, 0x7, 0x0, 0x3, 0x3, 0x2, 0x1, 0xa, 0xffffffff, 0x471, 0x2, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x82, 0xb, 0x8, 0x1, 0x4, 0x4, 0xa, 0x3c, 0x8, 0xfffffffd, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0x5, 0x201fffb, 0xa1, 0x8, 0x9]}}) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x58, r8, 0x422, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m14.293981263s ago: executing program 4 (id=2265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x1001, 0x2}, 0x50) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x95}, 0x0, 0x2}, 0xe) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000180), &(0x7f00000009c0)=""/182}, 0x20) 2m14.290619017s ago: executing program 4 (id=2268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfde}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x788}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x600}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 64) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000002040)) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000043c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c248c962e7dd1ba13703fe5563a09f7f80159de3b74bccaf07b2e46799f97f7befae532661e723074f9dea5c566ed3b607da220ee1cb6a9a9785391a77c5632959dd50821b2d40d2235cc02c3936968a89a68169be314ed7bea0361986531435b82d73e8e5e460eccedc9d24a593d60083a460042666", 0x76}, {&(0x7f0000000080)="d4be70a006143383d4908ac309d8e50f60e6db351e171b49a8fa3e08bf81be68b62752db4cafbf4e645f998ef7db7a", 0x2f}], 0x2, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x20, "7695f7e751db3fc2c0ae50ccb2ecafaa8a1c8e777daecefe41ae88ff6a43b978"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}], 0x1080}, {0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000012c0)}, {&(0x7f0000001300)="399af46c0866f1273a221e0dd78828ab5f46d70b0afde19ac68c042cf4c3fee7a44b091ecaca031d5d5d2538363ccb7b5664045a61c04b1f55230c1f587be28c99ace98aed68ad91389b4e99bfdc2092b6a207f98200cbd854ccfb1f9618d6a88a41274ef5a9e703549c2b67147bc410ef5835f86dba1415a9687b6653528dc284fd1e779e1aefeafa5bc70117f00666a28495a02fce7d8ea1197aee5e7c3195eebf12ff6e61debe038d6e6a11b62ed8416d3f1101d2f966581c", 0xba}, {&(0x7f00000013c0)="4681053d9273bfbbdf0fe11ae9f767c44c0975d7ad60e04465d2f0174ab46ba5a86b24e967e9d1a8b3bc04b5b0ebcd66c065d6d7cb723f4be71b5cc93050ce22e649f0d8468a107f8a73aea5cbcaa7456da1afd52ace8cc954c4d40b675b2e08a3eb1883cff4cef26f38b0eab274fd8dfe3fe3caed9c689f7c86aca585f277e59ac7ddf648ec168142db7f14cfc15fd67bcb129ed8d9a8fe84c3aaf0eb2b7b0ef4b14ad8a5a5ecaedde9059c12181cbbe69e2395995f70eff44008", 0xbb}], 0x3, &(0x7f00000014c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x60, 0x4000000}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001540)="e77f25594af7c0e5d85f43833d44b7fabe99e28a36e454a8ccf8bd1fe97058e67b", 0x21}, {&(0x7f0000001580)="357e485b464392b1abce02f6ca1a903de6f12044adbdd5762fb39ee4a08e3c61de8ac4f96111cd048620745852e710e439d21f2bb24c08acbd4ccba05976211c21dbfeed38e681e6bb0f43cabebb530ee6d79b4d8f9ca566c6ec97d546c95b6e9987c5d2cb7c09577dd9d0f6f3e15d73ea27873a3768a0548c0034b313ae4a554ad279137e5d654ebe4522c454a2424a6d87bbf51868bd981a061d38794b460e3605ac9245e20fefacfecd0ef9020336a01090afb0b0ea9077af91a13f0cdfbacd436f9f", 0xc4}, {&(0x7f0000001680)="f3119d66b7411c18416fbb6b50b92710c6bdbe653fd5f845b25eaff9fee097c77412e224fabba75c46eb0099c8df5b5f0f5c9111b21955b2b933", 0x3a}, {&(0x7f00000016c0)="f7c2a1a5233d0c834e8fedfbd525d67d53b3fda6c754377e5c1d6c1d006bee3ebb4cd8c560290e65e5b87f42c8810f599a90e04a92273aee46b164417a2791322a20ade76bc0da3a0a6b2d50f463483eff3ab87a4c132c4ebc7902d414246a0e0c4a7bb447e0d58e3d0a1564e3703525b20fe2dc4794238462998a", 0x7b}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000001740)="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", 0xff}], 0x6, 0x0, 0x0, 0x44000}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000018c0)="102366d6ae33d178b8ebafc28f02342ddfd14f2ace7292239e9c24a2e2d62bb9a5e6c3e72f81896838908ced36301cdc5363b9ef945571e63432fbcc018a", 0x3e}, {&(0x7f0000003080)="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", 0x1000}], 0x2, &(0x7f0000001940)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x30, 0x117, 0x2, 0x1a, "f18201c6c0d6c08c33e2ac167730c18d5fd7754263b883fd6dda"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x78, 0x4011}, {0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000019c0)="404ac5d78891440aef88c8a31ba001e9242806f1f4ec13ea982a4b0ebfcd3d57efdf68e0592d136beb9dfb1ea83fcb59b65bf214e661f14cfe9a764dd45eb525733998a3582ad8e26be2d8433957a39ef386d66d164ca1e3341607546230edd16f15c28167b905b0dd0e656373c69d2df00f5a5728743d92fe9bdc47f35eaca6a9e3f437f4964aaa9f5653b62067dc0f827dd53046004964f1a51752ffc994b8992f834e", 0xa4}], 0x1, &(0x7f0000001ac0)=[@assoc={0x18}, @op={0x18}], 0x30, 0x200000c4}, {0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000001b00)="f19ef0ac80b84b744b1f941b1573b69842bdc3190265fdee1c15f5a46d66622ec6f25bb7c98347079707f869f858a58352e65d0f4b54241a8203f3c856d401f8def05efb5988b4ae4211a3513c0523c7af9a374f82f652aeb40e3228c67089ddb4ab11896b2748bc46b40969f7f94e3f122ebafbb3344e4227aaea92d9d6db440dfe404ba2c2ecc494d738d2deeddf972894ba9f189a6c94f59e3237087dd0227073dd1583f45891b01fc0551142368282bb22f2a8ff846f5c0b9826ed68ac091c0ec6545f74a4380886a817fd2549f0bfb02af98439512868e5c703dd61774bce846455e379ce874bd4b2", 0xeb}, {&(0x7f0000001c00)="4d6bd9b4291eed21d96b0c07fa09f705c7da55acf00e0060353593dd34c48d656408b5754c267091d1e73f73b6483dd375e36730420e93e8ed41e4c22d2f80078bcf76de254bd47bf9a95b7390cf0a90771b94ace6f23cd6aa8e347385f48e16aac28512d30a12d1b8753ca1e919949fbea6c51d75b083fbf37d32", 0x7b}, {&(0x7f0000001c80)="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", 0xfd}, {&(0x7f0000001d80)="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", 0xff}, {&(0x7f0000001e80)="d1b712ad9c2fe5944584784b19fad2032e9f31a596cb6003c2ced1bf576c31ef0d5a97fc6fe77b4d91fea9ddfc9ff14a894436565cc59bf020d1429e5c2258b21b2f4f31f226170a3e30c2898363d724a25cafdb94e6abceba08550401510a740f8fe6de180566409f930eb5df3af94c1f73b43f2138f03dcdacc678426b0a07075fe7c1eb5e6149a72ec0ce755128fe9aaf7857302d2535a83fdfae5911463094b71504a9a58705ac34a7890116fd2c2917f53688c8519863c8f3", 0xbb}, {&(0x7f0000001f40)="30087f1916e593834e6801ca309ee9a9c9147a400cfbbe15c5c7110032d620c149107528bb6115c243e803895928792457c87ccea73b51fda66aa9331cb4dbbbb336dc8c5ef5f09874b3d0ac581818bcae292024d1799fdbf2762fc27d8531e486417e6c514a2738a7f592c7954068c42692c3703e1c300797d64894b33613b42bf946416cf327592bbdcb522fa5b7b2eb5a4f7ca60e85b484", 0x99}, {&(0x7f0000004080)="017f8810ae0f2505e4e653aa6695dd4c30402d658fee2ee5b3f8de6ced0a75ecc0a216b2a8a9d58edd3d0567ca8d0ce5145aba4ac5b5446447fb083d27556a47989005db4dbf8f0192db070b6afb43f0435602dc3c0dbc3eff7acf4cfee6e8f89a1b5716ac6367ee47bfa47a818994f0d7081b2a3307d6543b6101ff9db6abd4dfa9f80577cc79a48d4ef99a8333593248a4337a57ca4a1a574f477cd71b86b76f28fe7db6faeff99a0796157d4adcede3f6532265ea4e4777b4a0ab9e633df4661275f1a05d9436a1e566cb6add6fb10578", 0xd2}, {&(0x7f0000002000)="5d7e7d0e584622a80bd7f57e5d778c7f4cce4bfd418d8679b33f4b9071bb50339157efeba2b15a8c", 0x28}, {&(0x7f0000004180)="b95195366dbd11612a423e6b48cae1881e1a795a13ddaf56ab7bb1b3ae2863af0c87ac5e549c49c6e223e059ba7f081ecabd4207fc31ed0ce53902a158eb5e4f83707d12fde1e5949639221f4865852dd01bf4dd00ef1b3fdd27c1b2d9240499f444a70c514b9ca21c1780358c9e79f6ae79555162ccd71c2e68f794b84e355b691a74", 0x83}], 0x9, &(0x7f0000004300)=[@assoc={0x18, 0x117, 0x4, 0xd}, @iv={0x80, 0x117, 0x2, 0x6c, "a255fb2004117cf1fcbd7b1ecf2b7239e1a2b57aabec815f1e01f4ce81834f2e41713efcaadf12e42f23cfe7aee113cfaf658f842ae503642d0b37ef149f2e6e9350bc3f051b9ea03260fa2b927cdea1872639b9899d863adf241b890bab95311df882cf54fc1b76864e3e34"}, @op={0x18, 0x117, 0x3, 0x1}], 0xb0, 0x88c4}], 0x6, 0x10) 2m14.097764847s ago: executing program 4 (id=2270): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$unix(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x400c880) (async) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x10, 0x8, 0xc, 0x3e, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1d, 0x18, 0x25, 0x0, 0xdd, "97eacd7b9632de076193a075c8acba6008ec0601024cddfb372b2b178a153ff1279f681e34e15efda021158681769e25758b78b624e83540537f9596c0bc165a6672137427b9a34c0a32acb57d3ecb931e8c4a5426afe7b5305f7cbebaf1a804c46d4425add646d22411dd3d125dfb1a87be860bde0c1effdc0e4b634d4ceee12f8914451369e69ef5deb176741c198f71db7d0518c34e5974daeeb47ab1bd16ea59fc31a5ec66daa7454f9bfec0f06fc0d3a12e4e9bb1f2f1e10daf1adbd35c89921f7572dc2d350eae1d102951d039fa81128308f0cc49c3c87d8d77"}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x6}, @sadb_x_nat_t_type={0x1, 0x14, 0xfa}, @sadb_x_sec_ctx={0x13, 0x18, 0xbe, 0xb1, 0x8b, "50aae5ab98101e2d101fafdc3eac243f8e938c6fe30bbb10cfff14f0c320ade29e0b0e25a0d68ddc71e254bbed88b8906eefbef42faad2015143c1cc981db813d83cd86e1f4e21da7c0cdfc0145464c4be6671956a9243bd9db4ff0812f903e680b63e2bee12d0fa0647afe268182ea4968912d7cdaa2825f2d9df17ca42f1d0015c3c46c47fa336c6f58d"}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x4e22, 0x4ae, @private2, 0x4}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}]}, 0x1f0}}, 0x20020040) (async) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) (async) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000080)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/75, 0x4b}, 0xa}], 0x1, 0x22021, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 2m10.889570051s ago: executing program 2 (id=2299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x12, 0x84, 0x6}], 0xfe61}}], 0x2, 0xc88c4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x12, 0x84, 0x6}], 0xfe61}}], 0x2, 0xc88c4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) 2m10.697845778s ago: executing program 2 (id=2301): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x3}, {0x8f, 0x0, 0x1}, {0x1c74}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x5}, {0x81}, {0xffeff, 0x0, 0x1}], @ipv6=@icmpv6={0x7, 0x6, "9eebe8", 0x78, 0x3a, 0x0, @remote, @mcast2, {[@hopopts={0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xe0800000}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x8000, 0x1, [{0xca, 0x7, 0x3, @remote, [@dev={0xfe, 0x80, '\x00', 0x26}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x4, 0x2, 0xff, 0xe8, 0x4, 0x1, 0xdb4]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf2508000800"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000013c0)=0xc7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000003010300000000000000000005000003060012400004000088964704"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 2m9.938031866s ago: executing program 32 (id=2149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x1404, 0x1, 0x70bd28, 0x25dddbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x20000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xa}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c814) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000001000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x3, 0x6) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x20000000) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000142, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r8, 0xe264}], 0x1, 0x0, &(0x7f0000000100)={[0x8000000000000001]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000069107600000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 2m9.85202055s ago: executing program 2 (id=2304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0xf8, 0xa, 0x20000, 0x2, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7800, 0x1, 0x2, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000001c0)={'erspan0\x00', r2, 0x40, 0x8000, 0x2, 0xc6, {{0x17, 0x4, 0x1, 0x33, 0x5c, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, {[@lsrr={0x83, 0x23, 0x6a, [@rand_addr=0x64010102, @private=0xa010102, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @rand_addr=0x64010101, @empty]}, @generic={0x89, 0x9, "c8d415b451426c"}, @rr={0x7, 0x1b, 0xdc, [@local, @empty, @rand_addr=0x64010101, @private=0xa010102, @local, @broadcast]}]}}}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x40}}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x3c}}, 0x24000010) 2m9.593120843s ago: executing program 2 (id=2305): unshare(0x2a020480) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="a4b54174a1e675bc815d27017891700194082441a61cf1e19d9d8092997f66a417854dcc48eb521c231a4f4d2fb813d3e64772177a8aa39534a81f7eb4ec68a18355dacca8db3a9b1e3da3d594c0b7c586d8ee10a27ad50f4dbffc1ffc8dd12c9a18edee82209e3dd5c5a3e90c242244eba4f529d8fdb497b33a4632def7e6bb93266dc881c866d199c56d48c922e230001ef593d4e1df20d4bd5caa7c93440bdd2d4eebcb801300a52eaa428fd38e765292b75502104f8e978188aab9609fff487650f4cc", 0xc5}, {&(0x7f0000000140)="8455a657", 0x4}, {&(0x7f0000000180)="f9cafa23263287736bff6eebca3ffff8f9c71f1603887e801a954491f28e6cf108bfea5d21dc2a618cf86e5bcf790221217801e1c6af4f6110a808f0b251b175653ba260e6cd849fa4acf9c3599a98116c8efab7babf1abdb04cd157e9e5c79296dd5b69a87bcaf57b97a316034e7632fa57a48fedb051b97ff61dcd2c797cd876c46b9194d6a9256cdad3bd5774fc66f3866c4ae6f755dd8e1ac85e5845988347bf94b8a0ed6d4d72db7c8b8c8f4bafddae70325d5f99a7d211ec23f802e4c25e1cdbc68f0d1539ce4651d9c60bbf0d60a7050e55e80664e931909ff6215d6cc158a7b80d4b922306bab4647e7a32", 0xef}, {&(0x7f00000005c0)="39935b70b0870e442a47be02358dc9ae9f7b34c280e56ac5260ba9035beae42c4fd7659c3f50566a011ccc15ad29207f9ec0bd8511a8b4ed06a24116a88e2914a32158d62ea8c6e94492d99ad6a8d03927944a456977735dfdc4a81eff9e8eaa5f44afb429727e637af5db40b8f0d4261917823705324bdeb97c6c7fbb35bcaa7c57ea9dc30b2c4d1d82b587dbd608028dbc95fdd539a8c550a0d577cbb2ab", 0x9b}, {&(0x7f0000000340)="7c2b05df337b4c65a7c901d435e9e5fdfbfcaaaef102e9377b2c9a5bf7d8ac3c9bcc0c60018c3f8a708d2bcabb44a21f96252088ace7032fdb7b306ad7e56b8645b3", 0x42}, {&(0x7f00000003c0)="6a48b0580bea276d86c38493399516b1d0be15b1a92daf9c83f38906da46953b2eeacff9cb5e9e71a39c77cb4e91628b5d25b6e8f121f01b67fdfd28527f30326fd5cbe68ceb0221e2ac477c5f2513c7ac996059b8064ece898b3e99124ee397493114a41fe1bccbf8000000000000", 0x6f}, {&(0x7f0000000440)="bd3f4871ef4b3a3ad6f047891c61b8996efcc8035506720ef96889cd867636279572ed4e4534", 0x26}, {&(0x7f0000000480)="b7f4441ca000b820c8906fab0ad871c3f5a7079d3414fe4f049ba9ecfcb8a8fc4e0ae4536ce45ee6e2b1b502f1868ab97e1f8cecacb81bf012a18d5a6ecefb518cf5b3646d0cc099834c848440bf6b4219f636b5dbcb81bb2113a32e1832769d773ab40e39fda18225f8495de454bde14ab1458b7e188fb48a2bc8429b69edb70a00847c0e07ae4c307a0785f534073a499b93e683a87c5caa7557ea2dbc5279263c80eec20500f859276c835f0a78460d", 0xb1}], 0x2, 0x8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 2m9.528100063s ago: executing program 2 (id=2307): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="63202a3a2a2077000a92e19d30aaf67d1754036a0446235397cc1c80119cc5320ba72b73331c3431c10bd35cad1863a23a544c50c59d47129f466f71fe5774131400f0dcd4efbcd029b8b2b03f8007a5646768cc0c2f8f9a75a5664c6f0154f73dcdf076c85f1e1c710b04326191881dde1b4437a54d305a81c5ff7b1b7ea8cec73497f17fca2fb1e372f0f358740cd6c5e49b0e0f560d8487c6d72db364e4ea5c6d47ea96a5cfea"], 0x8) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000940)={0x0, 0x1, 0xb7be, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000d40)={r4, 0x5, 0x7fffffffffffffff}) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x1, @private0}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) (async, rerun: 64) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (async, rerun: 64) r7 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x3, 0x2c}, 0x4044095) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff7b}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockname$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) (async, rerun: 32) setsockopt$llc_int(r10, 0x10c, 0x5, &(0x7f0000000200)=0x7b8d, 0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m8.852720193s ago: executing program 2 (id=2308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r2, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x44) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r6, &(0x7f0000000680)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x1}}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) accept(0xffffffffffffffff, &(0x7f0000000280)=@isdn, &(0x7f00000003c0)=0x80) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r6}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5}, 0x94) 2m3.765798127s ago: executing program 33 (id=2210): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x70bd29, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x4d2, 0xff}, @in6=@mcast1, {@in=@rand_addr=0x64010101, @in=@local, 0x4e22, 0x0, 0x4e24, 0xe0ec, 0x2, 0x80, 0x0, 0x32}, {{@in=@broadcast, @in=@loopback, 0x4e24, 0x9, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x16}, {0x9, 0x40000006, 0x800, 0x7, 0x5, 0x2, 0x9, 0xf9a9}, {0x27b, 0x2, 0x6, 0x4000000000000}, 0x2, 0x6e6bbd, 0xbb97c3b291819029, 0x0, 0x2}, 0x5, 0x0, 0x7, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x200048c8}, 0x2000) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x80000001}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0xe7, &(0x7f0000000600)=""/231, 0x40f00, 0x7d, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x6, 0x0, 0x2}, 0x10, 0x0, r6, 0x8, 0x0, &(0x7f0000000700)=[{0x3, 0x1, 0x6, 0xa}, {0x2, 0x1, 0xc, 0x2}, {0x3, 0x1, 0x2, 0xc}, {0x3, 0x5, 0x9, 0x1}, {0x5, 0x1, 0x8, 0x8}, {0x2, 0x1, 0xb, 0x8}, {0x0, 0x2, 0xf, 0x2}, {0x4, 0x1, 0x1, 0x3}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000100), &(0x7f0000000840)=r7}, 0x20) 1m57.867494884s ago: executing program 34 (id=2270): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$unix(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x400c880) (async) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x10, 0x8, 0xc, 0x3e, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1d, 0x18, 0x25, 0x0, 0xdd, "97eacd7b9632de076193a075c8acba6008ec0601024cddfb372b2b178a153ff1279f681e34e15efda021158681769e25758b78b624e83540537f9596c0bc165a6672137427b9a34c0a32acb57d3ecb931e8c4a5426afe7b5305f7cbebaf1a804c46d4425add646d22411dd3d125dfb1a87be860bde0c1effdc0e4b634d4ceee12f8914451369e69ef5deb176741c198f71db7d0518c34e5974daeeb47ab1bd16ea59fc31a5ec66daa7454f9bfec0f06fc0d3a12e4e9bb1f2f1e10daf1adbd35c89921f7572dc2d350eae1d102951d039fa81128308f0cc49c3c87d8d77"}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x6}, @sadb_x_nat_t_type={0x1, 0x14, 0xfa}, @sadb_x_sec_ctx={0x13, 0x18, 0xbe, 0xb1, 0x8b, "50aae5ab98101e2d101fafdc3eac243f8e938c6fe30bbb10cfff14f0c320ade29e0b0e25a0d68ddc71e254bbed88b8906eefbef42faad2015143c1cc981db813d83cd86e1f4e21da7c0cdfc0145464c4be6671956a9243bd9db4ff0812f903e680b63e2bee12d0fa0647afe268182ea4968912d7cdaa2825f2d9df17ca42f1d0015c3c46c47fa336c6f58d"}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x4e22, 0x4ae, @private2, 0x4}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}]}, 0x1f0}}, 0x20020040) (async) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) (async) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000080)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/75, 0x4b}, 0xa}], 0x1, 0x22021, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 1m52.957460541s ago: executing program 35 (id=2308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r2, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x44) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r6, &(0x7f0000000680)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x1}}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) accept(0xffffffffffffffff, &(0x7f0000000280)=@isdn, &(0x7f00000003c0)=0x80) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r6}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5}, 0x94) 52.844132132s ago: executing program 0 (id=2323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003419399bb6ec3232f830748a2f11"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b001e00000000280dff7610470000c011db6f7943aa64097cf7f55b8b08ebff7f5cf22c0a366e6e006c48b75cbbbc32e56959c4a77555c734ea9615433bece956480194a6db603e2d67dc35000155d43fadd541db517debb28c6949edc149a42ea67d57d554a1550de123e55abebb79aa095efd0df7ca2c531dc741aa38e05e3de6b7"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f080000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000da520000b7030000fcff0000850000008600ff90bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000002500f4fff0ffffffbf91000000000000b7020000004000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 39.007234404s ago: executing program 0 (id=2324): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="636df84edfe352733b6497365081f1fa3c127d4796c4e53babd805319debe9f1d8634c277341e0d9675e96dcd756b71fa0d733c87bd6b7a7d72b2823c11c6c28c4bb918d24566c9bb7b49749958aa7179853994307bbb347438ba9fa7d7dea3267277210d2086ab4f156d3eccef8e078ce38a40e084675524937a268d9a6cb8f28d2a39642082948955b8866cfa7cb64e7c4a771a3f05419b62dd2d91d0bf81c8eea86bb2f7ca280ff492ae6f1c5d09a13a71aa8cfdce6a71a94d5b9eea3ec398d9f4c286030d0721ce078e0458510382a9be5d6bc7621c41b3f", @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004800003400000000020690780a210104ac1414aa440c0601ffffffffffffaa7e00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e7ffffffffffffff"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="24000000960803e1f2ff7bb2789550a6c1f619370800d8f0b8bae96e48c68d97dad39f3a6ec840841077eb6b938059af8011007f10e27d8318dd8b768e54f192b6e6ad37033fa81f77616c82c55b33d20649d70444d2e0d9d702136a7d31a8fb4465ce110823a9753518a807b8c3b62cdbb7155c14b37e0585b8096ea681833efb9b845c5dd821b62ba7c5bd3ed0eeadf3a12d", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf251900000008000300", @ANYRES32=r8, @ANYBLOB="05001d0006000000"], 0x24}, 0x1, 0x0, 0x0, 0x18814}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000840)={0x0, 'batadv_slave_1\x00', {0x10000002}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000000)=0xfffffffc, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_vlan\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xf, 0xee8, 0x7, 0x9, 0x401, 0x1, 0x0, 0xdf, 0x5, 0x6, 0x200, 0x1, 0x3, 0xffff, 0x1ff, 0x2, 0x80, 0x9, 0x9, 0xffffff00, 0x1000, 0x0, 0x5}}) recvmsg(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f0000000500)=""/179, 0xb3}], 0x4}, 0x2142) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)=0x3, 0x4) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x50, &(0x7f0000000140)={0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x48, "43720705000000004786b89e6fb2be5c3f000000a69eded1892b08250700000000000000f7b55527f91fbe2e479388ba020f26a37c315947896c2b572b19fd702b5cd64fd9508582"}}) 28.652493321s ago: executing program 0 (id=2325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000200040000000000060000008500000020000000b7080000000000007b8af8ff00000000b7080000000000877b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec621d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.431813453s ago: executing program 0 (id=2326): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x6044840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001880)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r8 = socket(0x10, 0x803, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r9, 0x11, 0xb, &(0x7f0000000300)=0x6, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) 19.626803224s ago: executing program 0 (id=2327): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000080)='virt_wifi0\x00', 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001600), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000080) 16.347367352s ago: executing program 0 (id=2328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75"], 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0xfffffffffffffd16, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2000fcffffff0000000003000000200001800d0001007564703a73797a32000000000c00028008000400ffffffff0413a35e722bb92f760703ceffca035f8c2cbacba828a915dc9464"], 0x34}}, 0x24040004) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x7, 0x0, &(0x7f0000000500)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="020300090a00000000000000000043b6a15c060000000e0075ca76fa71ec59b4444e04b802008000e0000009000000000000200002020000000004d60000000200000000030005000020000002004e1d7f0000010000000000000000"], 0x50}}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3d, 0x3, "627f7bfb878b93d4e02e71c145f18e7dee49e67845909e3f06fe5fd191d7a807e0da3d2e25854bfef602320db31b3c9f9439d23f0d2116af84"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x17, 0x3, "a1c975a249d90983bb4453c041b8047fadbbea"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa425}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbd19}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "d45563ca0f5cde9b151161e57e72ef6a5adf8e60d22b"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff7a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2a8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4810}, 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r8, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r6, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1d, &(0x7f0000000440)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x597, 0x0, 0x0, 0x0, 0x3825}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x6, 0x6, 0x4, 0xfffffffffffffffe, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @exit, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, @ldst={0x2, 0x0, 0x1, 0x6, 0x4, 0xfffffffffffffffc, 0x10}], &(0x7f0000000900)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) 0s ago: executing program 36 (id=2328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75"], 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0xfffffffffffffd16, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2000fcffffff0000000003000000200001800d0001007564703a73797a32000000000c00028008000400ffffffff0413a35e722bb92f760703ceffca035f8c2cbacba828a915dc9464"], 0x34}}, 0x24040004) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x7, 0x0, &(0x7f0000000500)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="020300090a00000000000000000043b6a15c060000000e0075ca76fa71ec59b4444e04b802008000e0000009000000000000200002020000000004d60000000200000000030005000020000002004e1d7f0000010000000000000000"], 0x50}}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3d, 0x3, "627f7bfb878b93d4e02e71c145f18e7dee49e67845909e3f06fe5fd191d7a807e0da3d2e25854bfef602320db31b3c9f9439d23f0d2116af84"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x17, 0x3, "a1c975a249d90983bb4453c041b8047fadbbea"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa425}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbd19}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "d45563ca0f5cde9b151161e57e72ef6a5adf8e60d22b"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff7a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2a8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4810}, 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r8, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r6, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1d, &(0x7f0000000440)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x597, 0x0, 0x0, 0x0, 0x3825}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x6, 0x6, 0x4, 0xfffffffffffffffe, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @exit, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, @ldst={0x2, 0x0, 0x1, 0x6, 0x4, 0xfffffffffffffffc, 0x10}], &(0x7f0000000900)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) kernel console output (not intermixed with test programs): ng attributes in process `syz.2.603'. [ 175.210031][ T8449] netlink: 'syz.3.605': attribute type 12 has an invalid length. [ 175.257013][ T8447] netlink: 120 bytes leftover after parsing attributes in process `syz.2.603'. [ 175.305537][ T8447] netlink: 120 bytes leftover after parsing attributes in process `syz.2.603'. [ 175.332936][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 175.362782][ T8458] netlink: 60 bytes leftover after parsing attributes in process `syz.1.608'. [ 175.377795][ T8453] sctp: [Deprecated]: syz.4.607 (pid 8453) Use of int in maxseg socket option. [ 175.377795][ T8453] Use struct sctp_assoc_value instead [ 175.423032][ T8447] bond3 (unregistering): Released all slaves [ 175.709466][ T8445] netlink: 144 bytes leftover after parsing attributes in process `syz.2.603'. [ 175.761292][ T8474] syzkaller0: entered promiscuous mode [ 175.766885][ T8474] syzkaller0: entered allmulticast mode [ 175.811745][ T5150] block nbd0: Receive control failed (result -32) [ 175.892924][ T8481] bridge_slave_1: left allmulticast mode [ 175.912208][ T8481] bridge_slave_1: left promiscuous mode [ 175.931680][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.962446][ T8486] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 175.998822][ T8481] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 176.019430][ T8486] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 176.207519][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 176.257045][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 176.281997][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 176.317811][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 176.694940][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.808154][ T8502] team_slave_0: left promiscuous mode [ 176.824100][ T8502] team_slave_1: left promiscuous mode [ 177.179454][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.211088][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.440742][ T8549] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 177.486956][ T8556] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 177.570808][ T8556] team0: Port device netdevsim0 added [ 178.485066][ T8608] netlink: 'syz.4.637': attribute type 7 has an invalid length. [ 178.613796][ T8612] netlink: 'syz.0.640': attribute type 2 has an invalid length. [ 178.633953][ T8612] : entered promiscuous mode [ 178.720445][ T8618] ip6_vti0 speed is unknown, defaulting to 1000 [ 179.184285][ T8618] lo speed is unknown, defaulting to 1000 [ 179.281783][ T8638] 8021q: VLANs not supported on ip6_vti0 [ 179.528240][ T8652] macsec1: entered allmulticast mode [ 179.547275][ T8652] dummy0: entered allmulticast mode [ 179.570282][ T8652] dummy0: left allmulticast mode [ 180.168141][ T8678] __nla_validate_parse: 34 callbacks suppressed [ 180.168161][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 180.228520][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 180.254926][ T8678] netlink: 'syz.0.653': attribute type 19 has an invalid length. [ 180.285689][ T8678] netlink: 'syz.0.653': attribute type 20 has an invalid length. [ 180.338536][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.654'. [ 180.471483][ T8683] syzkaller0: entered promiscuous mode [ 180.486072][ T8683] syzkaller0: entered allmulticast mode [ 180.501841][ T8680] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.806659][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 182.403678][ T8680] lo speed is unknown, defaulting to 1000 [ 182.633896][ T8721] vlan2: entered allmulticast mode [ 182.737309][ T8729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.836056][ T8732] tipc: Enabled bearer , priority 0 [ 182.855132][ T8729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.666'. [ 182.910853][ T8732] syzkaller0: entered promiscuous mode [ 182.927856][ T8732] syzkaller0: entered allmulticast mode [ 182.981993][ T8732] tipc: Resetting bearer [ 183.000047][ T8731] tipc: Resetting bearer [ 183.033569][ T8731] tipc: Disabling bearer [ 183.361060][ T8753] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 183.600419][ T8755] ip6_vti0 speed is unknown, defaulting to 1000 [ 183.763196][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 183.789089][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 183.811805][ T8773] netlink: 'syz.4.672': attribute type 14 has an invalid length. [ 183.831386][ T8773] netlink: 'syz.4.672': attribute type 12 has an invalid length. [ 183.996157][ T8781] Cannot find add_set index 0 as target [ 184.708838][ T8755] lo speed is unknown, defaulting to 1000 [ 184.742263][ T8801] bond5: option arp_validate: invalid value (18446744073709551614) [ 184.760508][ T8801] bond5 (unregistering): Released all slaves [ 185.638205][ T8829] bridge0: port 3(vlan2) entered disabled state [ 185.753761][ T8841] netlink: 'syz.4.685': attribute type 10 has an invalid length. [ 185.796641][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.804751][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.056073][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.075360][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.161397][ T8829] macsec0: left promiscuous mode [ 186.217162][ T8829] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 186.240480][ T8829] veth3: left promiscuous mode [ 186.262327][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 186.272983][ T8829] bond3: left promiscuous mode [ 186.324133][ T8841] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.347741][ T3432] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.415091][ T8849] macsec1: entered promiscuous mode [ 186.450161][ T8849] gretap0: entered promiscuous mode [ 186.479689][ T8849] macsec1: entered allmulticast mode [ 186.494412][ T8849] gretap0: entered allmulticast mode [ 186.524047][ T8849] gretap0: left allmulticast mode [ 186.535462][ T8849] gretap0: left promiscuous mode [ 186.595097][ T3432] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.647695][ T3432] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.705263][ T3432] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.948527][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 186.974179][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 186.999795][ T8869] netlink: 'syz.1.691': attribute type 6 has an invalid length. [ 187.032587][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 187.042878][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 187.053386][ T8869] netlink: 'syz.1.691': attribute type 6 has an invalid length. [ 187.104352][ T8872] tipc: New replicast peer: 255.255.255.255 [ 187.113011][ T8872] tipc: Enabled bearer , priority 10 [ 188.013353][ T8930] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 188.078538][ T8930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.096233][ T8930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.707'. [ 188.114901][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 188.229117][ T5887] tipc: Node number set to 2479418209 [ 188.346739][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 188.377199][ T8948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'. [ 188.395720][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'. [ 188.975619][ T8979] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 188.985368][ T8977] Cannot find set identified by id 3 to match [ 189.020354][ T8970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.343080][ T9000] netlink: 'syz.1.724': attribute type 2 has an invalid length. [ 189.401547][ T9000] : entered promiscuous mode [ 190.007500][ T9015] ip6_vti0 speed is unknown, defaulting to 1000 [ 190.834245][ T9015] lo speed is unknown, defaulting to 1000 [ 190.890378][ T9037] wireguard0: entered promiscuous mode [ 190.895934][ T9037] wireguard0: entered allmulticast mode [ 190.967869][ T9037] team0: Device wireguard0 is of different type [ 191.218539][ T9053] delete_channel: no stack [ 191.223374][ T9053] delete_channel: no stack [ 191.323096][ T9055] tipc: Enabled bearer , priority 1 [ 191.677976][ T9075] netlink: 'syz.3.747': attribute type 6 has an invalid length. [ 191.685976][ T9075] netlink: 'syz.3.747': attribute type 2 has an invalid length. [ 191.695380][ T9075] __nla_validate_parse: 4 callbacks suppressed [ 191.695397][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 191.713680][ T9075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.905132][ T9081] ip6_vti0 speed is unknown, defaulting to 1000 [ 192.357350][ T9081] lo speed is unknown, defaulting to 1000 [ 192.357363][ T9083] ip6_vti0 speed is unknown, defaulting to 1000 [ 192.677713][ T9083] lo speed is unknown, defaulting to 1000 [ 193.006808][ T9127] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 193.155203][ T9131] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 193.260395][ T9120] delete_channel: no stack [ 193.526468][ T9142] bridge0: port 3(vlan2) entered blocking state [ 193.532980][ T9142] bridge0: port 3(vlan2) entered forwarding state [ 193.667265][ T9142] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.726770][ T9142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.923549][ T9163] syzkaller0: entered promiscuous mode [ 193.929379][ T9163] syzkaller0: entered allmulticast mode [ 194.192380][ T9177] netlink: 676 bytes leftover after parsing attributes in process `syz.2.773'. [ 194.208610][ T9174] bridge4: entered promiscuous mode [ 194.216580][ T9177] netlink: 676 bytes leftover after parsing attributes in process `syz.2.773'. [ 194.382109][ T9191] syzkaller0: entered promiscuous mode [ 194.387853][ T9191] syzkaller0: entered allmulticast mode [ 194.513876][ T9195] syzkaller0: entered promiscuous mode [ 194.529093][ T9195] syzkaller0: entered allmulticast mode [ 194.538606][ T9197] netlink: 220 bytes leftover after parsing attributes in process `syz.2.778'. [ 194.558164][ T9197] netlink: 220 bytes leftover after parsing attributes in process `syz.2.778'. [ 194.596460][ T9197] netlink: 56 bytes leftover after parsing attributes in process `syz.2.778'. [ 194.795436][ T9203] syzkaller0: entered promiscuous mode [ 194.801289][ T9203] syzkaller0: entered allmulticast mode [ 194.962708][ T9217] openvswitch: netlink: Key type 198 is out of range max 32 [ 195.134370][ T9224] bond5 (unregistering): Released all slaves [ 195.173451][ T9230] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 195.240605][ T9238] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.789'. [ 195.251317][ T9238] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.789'. [ 195.262465][ T9238] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.789'. [ 195.276754][ T9238] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.789'. [ 195.349983][ T9242] netlink: 'syz.0.790': attribute type 2 has an invalid length. [ 195.522927][ T9247] netlink: 'syz.3.792': attribute type 8 has an invalid length. [ 195.661505][ T9259] xt_hashlimit: size too large, truncated to 1048576 [ 195.676934][ T9259] xt_hashlimit: max too large, truncated to 1048576 [ 195.685038][ T9259] xt_hashlimit: overflow, rate too high: 0 [ 196.020578][ T9271] sctp: [Deprecated]: syz.2.799 (pid 9271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.020578][ T9271] Use struct sctp_sack_info instead [ 196.165917][ T9274] tipc: Enabled bearer , priority 0 [ 196.187923][ T9274] syzkaller0: entered promiscuous mode [ 196.200560][ T9274] syzkaller0: entered allmulticast mode [ 196.277156][ T9274] tipc: Resetting bearer [ 196.320021][ T9273] tipc: Resetting bearer [ 196.380728][ T9273] tipc: Disabling bearer [ 196.410091][ T5150] Bluetooth: hci3: command tx timeout [ 196.709625][ T9298] tipc: Enabled bearer , priority 0 [ 196.717501][ T9298] syzkaller0: entered promiscuous mode [ 196.723364][ T9298] syzkaller0: entered allmulticast mode [ 196.752079][ T9298] tipc: Resetting bearer [ 196.762917][ T9297] tipc: Resetting bearer [ 196.791225][ T9297] tipc: Disabling bearer [ 196.858875][ T9296] netlink: 'syz.1.805': attribute type 10 has an invalid length. [ 196.870483][ T9296] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 196.878347][ T9296] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.095389][ T9317] __nla_validate_parse: 3 callbacks suppressed [ 197.095408][ T9317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.810'. [ 197.151242][ T9316] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 197.323726][ T9323] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.354223][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 197.810880][ T9352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.821'. [ 197.882813][ T9351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.822'. [ 198.245347][ T9332] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.271805][ T9323] lo speed is unknown, defaulting to 1000 [ 198.327755][ T9369] netlink: 64 bytes leftover after parsing attributes in process `syz.4.825'. [ 198.340215][ T9369] netlink: 64 bytes leftover after parsing attributes in process `syz.4.825'. [ 198.790781][ T9343] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.798185][ T9332] lo speed is unknown, defaulting to 1000 [ 199.238876][ T9348] ip6_vti0 speed is unknown, defaulting to 1000 [ 199.248037][ T9394] tipc: Enabled bearer , priority 0 [ 199.256588][ T9394] syzkaller0: entered promiscuous mode [ 199.276241][ T9394] syzkaller0: entered allmulticast mode [ 199.307545][ T9394] tipc: Resetting bearer [ 199.394674][ T9393] tipc: Resetting bearer [ 199.429353][ T9393] tipc: Disabling bearer [ 199.622386][ T9411] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 199.631175][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.637634][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.649694][ T9411] tipc: Enabling of bearer rejected, failed to enable media [ 199.696664][ T9391] ip6_vti0 speed is unknown, defaulting to 1000 [ 199.703039][ T9348] lo speed is unknown, defaulting to 1000 [ 199.717173][ T9343] lo speed is unknown, defaulting to 1000 [ 199.798827][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.834'. [ 199.983880][ T9420] IPv6: addrconf: prefix option has invalid lifetime [ 200.102178][ T9401] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.146991][ T9425] netlink: 'syz.0.837': attribute type 4 has an invalid length. [ 200.155782][ T9425] netlink: 224 bytes leftover after parsing attributes in process `syz.0.837'. [ 200.307212][ T9429] netlink: 56 bytes leftover after parsing attributes in process `syz.0.838'. [ 200.317265][ T9428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.838'. [ 200.334576][ T9401] lo speed is unknown, defaulting to 1000 [ 200.343029][ T9429] netlink: 'syz.0.838': attribute type 33 has an invalid length. [ 200.351723][ T9428] netlink: 'syz.0.838': attribute type 33 has an invalid length. [ 200.360831][ T9429] `: renamed from team0 (while UP) [ 200.524592][ T9391] lo speed is unknown, defaulting to 1000 [ 201.116110][ T9446] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 201.189741][ T9446] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.361998][ T9503] xt_policy: output policy not valid in PREROUTING and INPUT [ 202.388779][ T9499] __nla_validate_parse: 4 callbacks suppressed [ 202.388800][ T9499] netlink: 265 bytes leftover after parsing attributes in process `syz.0.855'. [ 202.435431][ T9502] ip6gre3: entered promiscuous mode [ 202.623434][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 202.639686][ T9512] netlink: 240 bytes leftover after parsing attributes in process `syz.0.858'. [ 202.643570][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 202.660634][ T9512] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 202.693523][ T9512] openvswitch: netlink: Message has 75 unknown bytes. [ 202.697119][ T9509] ip6gretap1: entered allmulticast mode [ 202.885527][ T5951] IPVS: starting estimator thread 0... [ 202.895333][ T9536] syz_tun: entered allmulticast mode [ 202.989086][ T9535] IPVS: using max 25 ests per chain, 60000 per kthread [ 203.021836][ T9529] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.228111][ T9529] lo speed is unknown, defaulting to 1000 [ 203.464333][ T9526] syz_tun: left allmulticast mode [ 203.466131][ T9531] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 203.635975][ T9547] netlink: 'syz.1.867': attribute type 39 has an invalid length. [ 203.708723][ T9550] netlink: 'syz.1.867': attribute type 39 has an invalid length. [ 203.923488][ T9569] netlink: 68 bytes leftover after parsing attributes in process `syz.3.866'. [ 204.072330][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.080215][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.523264][ T9578] netlink: 'syz.4.873': attribute type 3 has an invalid length. [ 204.618658][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.640844][ T9548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.110495][ T9548] team1: left promiscuous mode [ 205.115323][ T9548] team1: left allmulticast mode [ 205.189999][ T9546] syzkaller0: entered promiscuous mode [ 205.195563][ T9546] syzkaller0: entered allmulticast mode [ 205.347518][ T3432] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.388446][ T3432] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.398725][ T3432] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.408484][ T3432] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.614959][ T9591] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 205.620670][ T9587] netlink: 100 bytes leftover after parsing attributes in process `syz.0.875'. [ 205.644278][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 205.670024][ T9572] ip6_vti0 speed is unknown, defaulting to 1000 [ 205.823561][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 205.845075][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.874'. [ 205.905310][ T9601] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 205.921589][ T9604] netlink: 1372 bytes leftover after parsing attributes in process `syz.4.874'. [ 206.008584][ T9606] ip6_vti0 speed is unknown, defaulting to 1000 [ 206.041253][ T9572] lo speed is unknown, defaulting to 1000 [ 206.125399][ T9611] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 206.503725][ T9606] lo speed is unknown, defaulting to 1000 [ 207.173359][ T9655] xt_connbytes: Forcing CT accounting to be enabled [ 207.560918][ T9672] __nla_validate_parse: 3 callbacks suppressed [ 207.560937][ T9672] netlink: 56 bytes leftover after parsing attributes in process `syz.1.893'. [ 207.641714][ T9676] x_tables: duplicate underflow at hook 1 [ 207.746979][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.895'. [ 207.805748][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 207.822703][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 207.929160][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 208.057520][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 208.133565][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.899'. [ 208.452629][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 208.743444][ T9744] netlink: 52 bytes leftover after parsing attributes in process `syz.0.907'. [ 208.803220][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 209.151844][ T9762] ip6_vti0 speed is unknown, defaulting to 1000 [ 209.341107][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'. [ 209.398039][ T9785] xt_l2tp: missing protocol rule (udp|l2tpip) [ 209.571819][ T9785] IPVS: Scheduler module ip_vs_sip not found [ 209.578478][ T9788] IPVS: length: 8 != 2429563664 [ 209.712645][ T9762] lo speed is unknown, defaulting to 1000 [ 211.217555][ T9855] tap0: tun_chr_ioctl cmd 2148553947 [ 211.229274][ T9856] tap0: tun_chr_ioctl cmd 2148553947 [ 211.240497][ T9854] tap0: tun_chr_ioctl cmd 1074025673 [ 211.250975][ T9855] tap0: tun_chr_ioctl cmd 2147767521 [ 211.427941][ T9854] tc_dump_action: action bad kind [ 211.484472][ T9865] xt_hashlimit: invalid interval [ 211.497158][ T9865] xt_hashlimit: invalid interval [ 211.933407][ T9811] Bluetooth: hci2: command 0x0406 tx timeout [ 211.939671][ T9810] Bluetooth: hci1: command 0x0406 tx timeout [ 211.946587][ T9810] Bluetooth: hci3: command 0x0406 tx timeout [ 212.029608][ T9899] tipc: Enabled bearer , priority 0 [ 212.064013][ T9899] syzkaller0: entered promiscuous mode [ 212.073317][ T9899] syzkaller0: entered allmulticast mode [ 212.131312][ T9899] tipc: Resetting bearer [ 212.156079][ T9896] tipc: Resetting bearer [ 212.230485][ T9896] tipc: Disabling bearer [ 212.386728][ T9907] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.462794][ T9913] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 212.576088][ T9920] netlink: 'syz.4.950': attribute type 23 has an invalid length. [ 212.848027][ T9944] __nla_validate_parse: 8 callbacks suppressed [ 212.848049][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 212.864354][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.956'. [ 212.908653][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.958'. [ 212.950174][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 213.002473][ T9951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.958'. [ 213.053389][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 213.150671][ T9953] hsr_slave_1 (unregistering): left promiscuous mode [ 213.308722][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 213.318295][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 213.594808][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 213.871666][ T9993] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.971'. [ 213.899323][ T9997] tipc: Enabled bearer , priority 0 [ 214.027871][ T9997] syzkaller0: entered promiscuous mode [ 214.042446][ T9997] syzkaller0: entered allmulticast mode [ 214.069933][ T9997] tipc: Resetting bearer [ 214.076240][T10001] syzkaller0: entered promiscuous mode [ 214.084828][T10001] syzkaller0: entered allmulticast mode [ 214.096241][T10000] tipc: Enabled bearer , priority 0 [ 214.235184][T10021] netlink: 'syz.1.974': attribute type 13 has an invalid length. [ 214.279869][ T1141] tipc: Resetting bearer [ 214.302899][T10000] tipc: Resetting bearer [ 214.350895][T10000] tipc: Disabling bearer [ 214.540668][ T5989] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 214.575673][T10021] tipc: Resetting bearer [ 214.589336][T10003] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.607621][T10015] tipc: Resetting bearer [ 214.620993][T10015] syzkaller0: left promiscuous mode [ 215.269911][T10057] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 215.609281][ T9581] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.231070][ T9996] tipc: Disabling bearer [ 216.248682][ T5989] tipc: Node number set to 678359417 [ 216.254895][T10047] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 216.266088][T10003] lo speed is unknown, defaulting to 1000 [ 216.284192][T10005] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.340434][T10057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.575818][T10068] veth1_vlan: entered allmulticast mode [ 216.595982][T10068] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 216.623695][T10074] veth0_to_batadv: entered promiscuous mode [ 216.641263][T10074] veth0_to_batadv: left promiscuous mode [ 216.790123][T10074] veth0_to_batadv: entered promiscuous mode [ 216.896466][T10081] syzkaller0: entered promiscuous mode [ 216.960690][T10081] syzkaller0: entered allmulticast mode [ 216.973376][T10005] lo speed is unknown, defaulting to 1000 [ 217.431405][T10066] veth0_to_batadv: left promiscuous mode [ 217.848570][T10096] erspan0: left allmulticast mode [ 217.916288][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.937775][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.970919][T10096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.311186][T10124] __nla_validate_parse: 5 callbacks suppressed [ 218.311207][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 218.691072][T10135] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1005'. [ 218.785811][T10140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1007'. [ 218.824049][T10140] netlink: 'syz.0.1007': attribute type 21 has an invalid length. [ 218.832449][T10140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1007'. [ 219.380165][T10174] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1016'. [ 219.424388][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.454971][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.667390][T10188] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 219.720652][T10188] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 220.019941][T10201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.059622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.249332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.333501][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 221.254330][T10281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1034'. [ 221.346446][T10281] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1034'. [ 221.423489][T10281] netlink: 'syz.1.1034': attribute type 6 has an invalid length. [ 221.456052][T10289] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 221.460035][T10281] netlink: 'syz.1.1034': attribute type 5 has an invalid length. [ 221.502504][T10289] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 221.519916][T10293] netlink: 'syz.0.1035': attribute type 2 has an invalid length. [ 221.549356][T10281] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1034'. [ 221.591712][T10293] !: entered promiscuous mode [ 221.605675][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 221.654910][T10293] netlink: 'syz.0.1035': attribute type 2 has an invalid length. [ 221.679086][T10304] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1037'. [ 221.705079][T10293] !: left promiscuous mode [ 221.842209][T10311] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 222.108242][T10325] netlink: 'syz.2.1043': attribute type 30 has an invalid length. [ 222.320110][T10339] xt_l2tp: invalid flags combination: 0 [ 222.762736][T10354] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.935849][T10361] bond0: (slave dummy0): Releasing backup interface [ 222.971589][T10361] bridge_slave_0: left allmulticast mode [ 223.006021][T10361] bridge_slave_0: left promiscuous mode [ 223.023818][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.053700][T10361] bridge_slave_1: left allmulticast mode [ 223.067908][T10361] bridge_slave_1: left promiscuous mode [ 223.083504][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.143498][ T5150] Bluetooth: hci4: link tx timeout [ 223.149254][ T5150] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.158104][T10361] bond0: (slave bond_slave_0): Releasing backup interface [ 223.213932][T10361] bond0: (slave bond_slave_1): Releasing backup interface [ 223.237908][T10361] team0: Port device team_slave_0 removed [ 223.252802][T10361] team0: Port device team_slave_1 removed [ 223.260979][T10361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.268525][T10361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.279430][T10361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.287152][T10361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.301512][T10361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.376942][T10365] team0: Mode changed to "activebackup" [ 223.404413][T10354] lo speed is unknown, defaulting to 1000 [ 223.512998][T10373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.877674][T10390] __nla_validate_parse: 7 callbacks suppressed [ 223.877693][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 223.898544][T10396] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 224.001500][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 224.194109][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 224.291886][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 224.447520][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 224.640408][T10430] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1064'. [ 224.790326][T10438] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 224.852830][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 224.984097][T10433] bond3: entered allmulticast mode [ 225.008658][T10433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.032541][T10455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1069'. [ 225.062159][T10455] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1069'. [ 225.080270][T10460] xt_TCPMSS: Only works on TCP SYN packets [ 225.227966][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 226.015538][T10494] IPVS: set_ctl: invalid protocol: 52 172.20.20.187:20004 [ 226.289860][T10510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1083'. [ 226.387325][T10515] syzkaller0: entered promiscuous mode [ 226.395964][T10515] syzkaller0: entered allmulticast mode [ 226.412648][T10515] netlink: 'syz.3.1086': attribute type 7 has an invalid length. [ 226.640307][T10526] openvswitch: netlink: IP tunnel dst address not specified [ 227.802834][T10585] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 227.844883][T10594] Bluetooth: MGMT ver 1.23 [ 227.915150][ T5150] block nbd1: Wrong magic (0x0) [ 228.065988][T10611] netlink: 'syz.1.1103': attribute type 6 has an invalid length. [ 228.237515][T10608] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.271917][T10624] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.531540][T10636] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 229.233005][T10608] lo speed is unknown, defaulting to 1000 [ 230.190672][T10702] __nla_validate_parse: 10 callbacks suppressed [ 230.190693][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 230.321945][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 230.435676][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 231.633058][T10767] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1134'. [ 231.706031][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 231.858331][T10779] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 231.876736][T10776] syzkaller0: entered promiscuous mode [ 231.890143][T10776] syzkaller0: entered allmulticast mode [ 231.987225][T10784] tipc: Enabled bearer , priority 0 [ 232.070052][T10772] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 232.090411][T10784] syzkaller0: entered promiscuous mode [ 232.095995][T10784] syzkaller0: entered allmulticast mode [ 232.103954][T10784] tipc: Resetting bearer [ 232.137617][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 232.150652][T10780] bond4: entered promiscuous mode [ 232.155957][T10780] bond4: entered allmulticast mode [ 232.162702][T10780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.215706][T10772] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.224561][T10772] bond5: entered promiscuous mode [ 232.230747][T10772] bond5: entered allmulticast mode [ 232.244861][T10780] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.262327][T10772] bond4: (slave bond5): Enslaving as a backup interface with a down link [ 232.345963][T10802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1142'. [ 232.357703][T10770] tipc: Resetting bearer [ 233.734787][T10770] tipc: Disabling bearer [ 233.814016][T10812] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 233.841928][T10811] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 233.867580][T10812] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1145'. [ 233.891487][T10811] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1145'. [ 234.099955][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1149'. [ 234.419640][T10835] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 234.435213][T10835] bond4 (unregistering): Released all slaves [ 234.695171][T10844] ip6_vti0 speed is unknown, defaulting to 1000 [ 234.873249][T10859] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 234.874942][T10857] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 234.934820][T10859] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.953569][T10859] team_slave_0: entered promiscuous mode [ 234.959698][T10859] team_slave_1: entered promiscuous mode [ 234.965452][T10859] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 234.982678][T10859] team0: entered promiscuous mode [ 234.992137][T10859] bond0: (slave team0): Enslaving as an active interface with an up link [ 235.190191][T10869] netlink: 'syz.3.1160': attribute type 4 has an invalid length. [ 235.244434][T10844] lo speed is unknown, defaulting to 1000 [ 236.083721][T10906] tipc: Enabling of bearer rejected, failed to enable media [ 236.391960][T10924] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 236.416697][T10921] ip6_vti0 speed is unknown, defaulting to 1000 [ 236.425797][T10924] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.433083][T10924] bridge0: port 1(bridge_slave_0) entered listening state [ 236.454957][T10924] bridge0: entered promiscuous mode [ 236.470487][T10924] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 236.771269][T10921] lo speed is unknown, defaulting to 1000 [ 237.240082][T10960] syzkaller0: entered promiscuous mode [ 237.255795][T10960] syzkaller0: entered allmulticast mode [ 237.528714][T10964] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.938704][T10991] netlink: 'syz.3.1190': attribute type 11 has an invalid length. [ 237.955183][T10991] netlink: 'syz.3.1190': attribute type 23 has an invalid length. [ 237.963620][T10991] __nla_validate_parse: 5 callbacks suppressed [ 237.963637][T10991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1190'. [ 238.031701][T10964] lo speed is unknown, defaulting to 1000 [ 238.684825][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 238.698689][T11010] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1193'. [ 238.734380][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 239.448036][T11056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1204'. [ 239.495168][T11060] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.115094][T11070] syzkaller0: entered promiscuous mode [ 240.142549][T11070] syzkaller0: entered allmulticast mode [ 240.316566][T11077] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.560857][T11085] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1212'. [ 240.619036][T11085] block nbd0: Unsupported socket: should be TCP or UNIX. [ 240.974804][T11077] lo speed is unknown, defaulting to 1000 [ 240.980817][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 240.980841][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 241.001404][T11098] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 241.039624][T11108] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 241.218751][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 241.379910][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 241.858444][T11138] openvswitch: netlink: Duplicate or invalid key (type 0). [ 241.883701][T11138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.972544][T11147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.095740][T11151] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.259430][T11164] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 242.636047][T11178] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 242.643548][T11178] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 242.700861][T11151] lo speed is unknown, defaulting to 1000 [ 242.861623][T11191] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 243.039042][T11195] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.041257][T11194] __nla_validate_parse: 12 callbacks suppressed [ 243.041307][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 243.074133][T11198] batadv0: mtu less than device minimum [ 243.431873][T11214] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 243.486625][T11195] lo speed is unknown, defaulting to 1000 [ 243.767513][T11220] ip6gretap0: entered promiscuous mode [ 243.789843][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 243.809012][T11224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 243.940913][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 243.950223][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 244.444005][T11256] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1260'. [ 244.447910][T11254] syzkaller0: entered promiscuous mode [ 244.543940][T11254] syzkaller0: entered allmulticast mode [ 244.602942][T11263] bond6 (unregistering): Released all slaves [ 244.664696][T11274] netlink: 'syz.0.1263': attribute type 11 has an invalid length. [ 244.703235][T11276] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 244.711398][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 244.762075][T11263] bond6: entered promiscuous mode [ 244.767674][T11263] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.776539][T11274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1263'. [ 244.816779][T11279] veth1: entered promiscuous mode [ 244.885797][T11276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.942077][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 244.991508][T11281] erspan0: entered allmulticast mode [ 245.024007][T11281] bond2: (slave erspan0): Releasing active interface [ 245.031002][T11281] ip6gretap1: entered promiscuous mode [ 245.047523][T11281] bond5: (slave erspan0): making interface the new active one [ 245.059324][T11281] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 245.077461][T11285] hsr_slave_0: left promiscuous mode [ 245.087874][T11285] hsr_slave_1: left promiscuous mode [ 245.164914][T11290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1267'. [ 245.293194][T11295] nbd: nbd0 already in use [ 245.579499][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.588712][T11306] 8021q: adding VLAN 0 to HW filter on device ` [ 245.599784][T11306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.618473][ T911] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.629667][ T911] syz2: Port: 1 Link ACTIVE [ 245.635565][ T911] ip6_vti0 speed is unknown, defaulting to 1000 [ 246.292288][T11332] syzkaller0: entered promiscuous mode [ 246.313682][T11332] syzkaller0: entered allmulticast mode [ 246.515542][ T5989] IPVS: starting estimator thread 0... [ 246.619529][T11342] IPVS: using max 29 ests per chain, 69600 per kthread [ 248.232849][T11372] netlink: 'syz.1.1291': attribute type 29 has an invalid length. [ 248.242111][T11372] netlink: 'syz.1.1291': attribute type 29 has an invalid length. [ 248.310294][T11375] __nla_validate_parse: 5 callbacks suppressed [ 248.310312][T11375] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1291'. [ 248.660545][T11393] xt_l2tp: invalid flags combination: 0 [ 248.829732][T11406] netlink: 'syz.3.1300': attribute type 9 has an invalid length. [ 249.080291][T11412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.100140][T11416] tipc: Invalid UDP bearer configuration [ 249.100199][T11416] tipc: Enabling of bearer rejected, failed to enable media [ 249.157782][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 249.596277][T11449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'. [ 249.779637][T11458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1313'. [ 249.839219][T11458] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 249.942884][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 250.403569][T11477] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 250.682411][T11486] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.860692][T11496] syzkaller0: entered promiscuous mode [ 250.866326][T11496] syzkaller0: entered allmulticast mode [ 251.251199][T11522] Unsupported ieee802154 address type: 0 [ 251.292913][T11486] lo speed is unknown, defaulting to 1000 [ 251.629546][T11539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1332'. [ 252.434699][T11585] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.450204][T11594] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20002 [ 252.470910][T11594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1344'. [ 252.502551][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1341'. [ 252.703058][T11601] syzkaller0: entered promiscuous mode [ 252.730479][T11601] syzkaller0: entered allmulticast mode [ 252.764191][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 252.906694][T11620] syzkaller1: entered promiscuous mode [ 252.937042][T11620] syzkaller1: entered allmulticast mode [ 253.235965][T11585] lo speed is unknown, defaulting to 1000 [ 253.384527][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 253.413914][T11644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1353'. [ 253.433323][T11646] delete_channel: no stack [ 253.599379][T11659] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.616017][T11657] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 253.822751][T11662] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.326406][T11689] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 254.507275][T11696] gretap1: entered allmulticast mode [ 254.592317][T11696] bond6: (slave gretap1): making interface the new active one [ 254.609465][T11696] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 254.651851][T11702] ip6gre0: entered promiscuous mode [ 254.671116][T11702] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 254.738173][T11662] lo speed is unknown, defaulting to 1000 [ 254.850126][T11716] No such timeout policy "syz0" [ 255.039213][T11724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1374'. [ 255.125151][T11727] netlink: 'syz.4.1376': attribute type 15 has an invalid length. [ 255.144078][T11727] netlink: 'syz.4.1376': attribute type 15 has an invalid length. [ 255.179433][T11727] netlink: 'syz.4.1376': attribute type 15 has an invalid length. [ 255.439172][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 255.487589][T11748] IPv6: sit1: Disabled Multicast RS [ 255.736683][T11761] bond1: option mode: unable to set because the bond device is up [ 255.891480][T11764] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1386'. [ 256.264863][T11771] ip6_vti0 speed is unknown, defaulting to 1000 [ 256.395410][T11781] tipc: Enabled bearer , priority 0 [ 256.415553][T11781] syzkaller0: entered promiscuous mode [ 256.436379][T11781] syzkaller0: entered allmulticast mode [ 256.506426][T11781] tipc: Resetting bearer [ 256.540810][T11780] tipc: Resetting bearer [ 256.604293][T11780] tipc: Disabling bearer [ 256.823346][T11783] ip6_vti0 speed is unknown, defaulting to 1000 [ 256.830107][T11771] lo speed is unknown, defaulting to 1000 [ 257.042673][T11787] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1394'. [ 257.045704][T11789] tipc: Enabled bearer , priority 0 [ 257.064005][T11789] syzkaller0: entered promiscuous mode [ 257.083208][T11789] syzkaller0: entered allmulticast mode [ 257.121178][T11794] can: request_module (can-proto-4) failed. [ 257.211520][T11800] tipc: Resetting bearer [ 257.342508][T11788] tipc: Resetting bearer [ 257.371971][T11788] tipc: Disabling bearer [ 257.434529][T11783] lo speed is unknown, defaulting to 1000 [ 257.443269][T11801] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.784888][T11801] lo speed is unknown, defaulting to 1000 [ 258.677530][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 258.769615][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 258.792012][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 258.816238][T11832] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1405'. [ 259.071471][T11843] tipc: Enabling of bearer rejected, failed to enable media [ 259.226252][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 259.330720][T11858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1410'. [ 259.756228][T11888] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1421'. [ 259.768117][T11884] ip6_vti0 speed is unknown, defaulting to 1000 [ 259.810334][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 260.086139][T11908] wlan1: mtu greater than device maximum [ 260.164383][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 260.278734][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1429'. [ 260.871106][T11884] lo speed is unknown, defaulting to 1000 [ 261.055082][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.392045][T11966] netlink: 'syz.4.1438': attribute type 83 has an invalid length. [ 261.961979][T11993] x_tables: duplicate underflow at hook 3 [ 262.012594][T11988] ip6_vti0 speed is unknown, defaulting to 1000 [ 262.111163][T11997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.547576][T11988] lo speed is unknown, defaulting to 1000 [ 263.862996][T12071] ip6erspan1: entered allmulticast mode [ 263.874205][T12073] tipc: New replicast peer: 255.255.255.255 [ 263.908699][T12073] tipc: Enabled bearer , priority 26 [ 263.958834][T12073] xt_bpf: check failed: parse error [ 264.107913][T12083] gretap0: entered promiscuous mode [ 264.115552][T12083] gretap0: entered allmulticast mode [ 264.413073][T12096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.434378][T12096] __nla_validate_parse: 15 callbacks suppressed [ 264.434401][T12096] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1474'. [ 265.112859][T12123] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1480'. [ 265.126093][T12122] tipc: Enabled bearer , priority 0 [ 265.507200][T12121] tipc: Disabling bearer [ 265.662419][T12158] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1489'. [ 265.886475][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1491'. [ 266.040920][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1494'. [ 266.054188][T12169] ip6_vti0 speed is unknown, defaulting to 1000 [ 266.172320][T12180] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 266.385170][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1498'. [ 266.407946][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'. [ 266.413237][T12169] lo speed is unknown, defaulting to 1000 [ 266.421538][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.430541][T12176] ip6_vti0 speed is unknown, defaulting to 1000 [ 266.458171][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.506713][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.552131][T12171] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 266.577086][T12196] netlink: 'syz.3.1500': attribute type 7 has an invalid length. [ 266.605926][T12196] bond0: entered promiscuous mode [ 266.611679][T12196] bond_slave_0: entered promiscuous mode [ 266.617756][T12196] bond_slave_1: entered promiscuous mode [ 266.625391][T12196] bond0: left promiscuous mode [ 266.631256][T12196] bond_slave_0: left promiscuous mode [ 266.637120][T12196] bond_slave_1: left promiscuous mode [ 266.646202][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1500'. [ 266.663718][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1500'. [ 266.684742][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.810792][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 266.857067][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.864204][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 266.893489][T12201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.909542][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.918095][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.936041][T12171] wg1 speed is unknown, defaulting to 1000 [ 266.945719][T12171] wg1 speed is unknown, defaulting to 1000 [ 267.005912][T12201] bond7: Unable to set down delay as MII monitoring is disabled [ 267.061854][T12201] bond7 (unregistering): Released all slaves [ 267.378183][T12232] .70·: renamed from hsr0 (while UP) [ 267.451965][T12232] .70·: entered allmulticast mode [ 267.494310][T12232] hsr_slave_0: entered allmulticast mode [ 267.532128][T12232] hsr_slave_1: entered allmulticast mode [ 267.562997][T12232] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 267.906376][T12242] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.274947][T12242] lo speed is unknown, defaulting to 1000 [ 268.282804][T12242] wg1 speed is unknown, defaulting to 1000 [ 268.432571][T12262] bridge0: port 3(vlan2) entered disabled state [ 268.514758][T12262] ip6gre0: left promiscuous mode [ 268.568839][T12262] veth1_vlan: left allmulticast mode [ 268.578249][T12262] bridge4: left promiscuous mode [ 268.591599][T12262] ip6gretap1: left allmulticast mode [ 268.615284][T12262] bond6: left promiscuous mode [ 268.627911][T12262] ip6erspan1: left allmulticast mode [ 269.040306][T12293] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.060255][T12296] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 269.517225][T12316] __nla_validate_parse: 5 callbacks suppressed [ 269.517245][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 269.581164][T12293] lo speed is unknown, defaulting to 1000 [ 269.590796][T12293] wg1 speed is unknown, defaulting to 1000 [ 269.714574][T12322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.840417][T12330] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1536'. [ 269.852126][T12331] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1536'. [ 269.972322][T12333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.031962][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1535'. [ 270.319346][T12346] ip6_vti0 speed is unknown, defaulting to 1000 [ 270.657164][T12355] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1541'. [ 270.705251][T11492] udevd[11492]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.740244][T12358] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1542'. [ 270.765238][T12357] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1542'. [ 270.768231][T11492] udevd[11492]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.913158][T12360] batadv_slave_1: entered promiscuous mode [ 270.920881][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 271.011036][T12367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1543'. [ 271.031294][T12360] batadv_slave_1 (unregistering): left promiscuous mode [ 271.038401][T12360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.101157][T12346] lo speed is unknown, defaulting to 1000 [ 271.109445][T12346] wg1 speed is unknown, defaulting to 1000 [ 271.116005][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 271.224075][T12375] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 271.581354][T12385] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 271.652775][T12385] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 271.888544][T12402] x_tables: duplicate underflow at hook 3 [ 272.742468][T12447] syzkaller0: entered promiscuous mode [ 272.759148][T12447] syzkaller0: entered allmulticast mode [ 273.071000][T12468] syzkaller0: entered promiscuous mode [ 273.076551][T12468] syzkaller0: entered allmulticast mode [ 273.271262][T12477] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 273.278668][T12477] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 273.332775][T12471] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.552724][T12471] lo speed is unknown, defaulting to 1000 [ 273.560714][T12471] wg1 speed is unknown, defaulting to 1000 [ 274.462232][T12515] syzkaller0: entered promiscuous mode [ 274.478118][T12515] syzkaller0: entered allmulticast mode [ 274.883532][T12549] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 276.071414][T12563] __nla_validate_parse: 13 callbacks suppressed [ 276.071435][T12563] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1594'. [ 276.091188][T12563] openvswitch: netlink: Flow key attr not present in new flow. [ 276.608383][T12558] syzkaller0: entered promiscuous mode [ 276.614306][T12558] syzkaller0: entered allmulticast mode [ 276.621945][T12562] netlink: 'syz.3.1594': attribute type 4 has an invalid length. [ 276.696264][T12549] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.734206][T12566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1595'. [ 276.870822][T12571] x_tables: duplicate underflow at hook 1 [ 278.409755][T12549] lo speed is unknown, defaulting to 1000 [ 278.418029][T12549] wg1 speed is unknown, defaulting to 1000 [ 278.576659][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 278.978751][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'. [ 279.457908][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 279.644638][T12649] siw: device registration error -23 [ 279.833833][T12660] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.128014][T12675] syzkaller0: entered promiscuous mode [ 280.144228][T12675] syzkaller0: entered allmulticast mode [ 280.335100][T12670] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.342820][T12660] lo speed is unknown, defaulting to 1000 [ 280.351226][T12660] wg1 speed is unknown, defaulting to 1000 [ 280.961530][T12694] netlink: 'syz.0.1631': attribute type 30 has an invalid length. [ 280.979191][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1631'. [ 281.026140][T12694] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 281.039183][T12694] bond4 (unregistering): Released all slaves [ 281.069875][T12673] ip6_vti0 speed is unknown, defaulting to 1000 [ 281.529205][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.756992][T12673] lo speed is unknown, defaulting to 1000 [ 281.768933][T12670] lo speed is unknown, defaulting to 1000 [ 281.783191][T12670] wg1 speed is unknown, defaulting to 1000 [ 281.797006][T12673] wg1 speed is unknown, defaulting to 1000 [ 282.417703][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 282.442637][T12714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1635'. [ 282.484861][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1636'. [ 282.778208][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 282.932545][T12729] syz2: rxe_newlink: already configured on ip6_vti0 [ 282.951070][T12730] netlink: 'syz.2.1639': attribute type 1 has an invalid length. [ 283.013977][T12722] gretap0: left promiscuous mode [ 283.031764][T12722] gretap0: left allmulticast mode [ 283.130737][ T5900] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.137185][ T5900] syz2: Port: 1 Link DOWN [ 283.180322][ T5900] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.368120][T12738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 283.392990][T10406] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.402509][T10406] syz2: Port: 1 Link ACTIVE [ 283.430054][ T911] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.521592][T12744] tipc: Enabling of bearer rejected, failed to enable media [ 283.591694][T12751] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1646'. [ 283.757480][T12746] ip6_vti0 speed is unknown, defaulting to 1000 [ 284.665529][T12746] lo speed is unknown, defaulting to 1000 [ 284.693874][T12746] wg1 speed is unknown, defaulting to 1000 [ 284.875911][T12791] tipc: New replicast peer: 255.255.255.255 [ 284.885992][T12791] tipc: Enabled bearer , priority 26 [ 284.896458][T12791] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 284.906153][T12791] netlink: 'syz.4.1652': attribute type 11 has an invalid length. [ 284.914546][T12791] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1652'. [ 284.960057][T12798] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 285.017502][T12798] bond7: entered promiscuous mode [ 285.023286][T12798] bond7: entered allmulticast mode [ 285.034679][T12798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.050740][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 285.111497][T12797] erspan1: entered allmulticast mode [ 285.182874][T12791] bridge4: entered promiscuous mode [ 285.188155][T12791] bridge4: entered allmulticast mode [ 285.322266][T12811] geneve1: entered promiscuous mode [ 285.596404][T12823] ip6_vti0 speed is unknown, defaulting to 1000 [ 285.639936][T12830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 285.720527][T12836] netlink: 'syz.4.1663': attribute type 10 has an invalid length. [ 285.901108][T12844] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1666'. [ 285.915808][T12844] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1666'. [ 285.994115][T12849] netlink: 'syz.0.1667': attribute type 10 has an invalid length. [ 286.052864][T12849] 8021q: adding VLAN 0 to HW filter on device ` [ 286.093106][T12849] bond0: (slave `): Enslaving as an active interface with an up link [ 286.284513][T12823] lo speed is unknown, defaulting to 1000 [ 286.313166][T12823] wg1 speed is unknown, defaulting to 1000 [ 286.467937][T12874] netlink: 'syz.2.1675': attribute type 3 has an invalid length. [ 286.483561][T12874] netlink: 'syz.2.1675': attribute type 3 has an invalid length. [ 286.523055][T12879] block nbd3: not configured, cannot reconfigure [ 286.542966][T12880] ip6t_srh: unknown srh match flags 4000 [ 286.593471][T12880] netlink: 'syz.3.1676': attribute type 2 has an invalid length. [ 286.678462][T12880] : entered promiscuous mode [ 286.914391][T12893] Cannot find del_set index 4 as target [ 287.511437][T12921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.523118][T12921] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 287.744364][T12932] __nla_validate_parse: 3 callbacks suppressed [ 287.744386][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 287.857602][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 288.047010][T12932] team0 (unregistering): Port device team_slave_0 removed [ 288.060116][T12932] team0 (unregistering): Port device team_slave_1 removed [ 288.077869][T12953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1695'. [ 288.180626][T12952] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 288.188420][T12952] netlink: 'syz.2.1695': attribute type 2 has an invalid length. [ 288.384966][T12968] netlink: 'syz.2.1698': attribute type 12 has an invalid length. [ 288.476440][T12969] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.794430][T12984] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 288.857290][T12986] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1703'. [ 288.962940][T12992] tipc: Enabling of bearer rejected, failed to enable media [ 289.251389][T12969] lo speed is unknown, defaulting to 1000 [ 289.261495][T12969] wg1 speed is unknown, defaulting to 1000 [ 289.283606][T12977] rdma_rxe: rxe_newlink: failed to add lo [ 289.327528][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1709'. [ 289.444677][T12966] netlink: 'syz.0.1697': attribute type 6 has an invalid length. [ 289.663988][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 289.673212][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 289.813926][T13031] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1716'. [ 290.541389][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 291.156975][T13089] netlink: 'syz.1.1734': attribute type 9 has an invalid length. [ 291.174453][T13089] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1734'. [ 291.203320][T13087] ip6_vti0 speed is unknown, defaulting to 1000 [ 291.230637][T13091] tipc: Enabled bearer , priority 0 [ 291.271428][T13091] syzkaller0: entered promiscuous mode [ 291.279188][T13094] xt_connbytes: Forcing CT accounting to be enabled [ 291.292276][T13091] syzkaller0: entered allmulticast mode [ 291.307429][T13094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.364666][T13091] tipc: Resetting bearer [ 291.390575][T13091] batadv_slave_0: entered promiscuous mode [ 291.681014][T13090] tipc: Resetting bearer [ 291.750592][T13090] tipc: Disabling bearer [ 291.800306][T13087] lo speed is unknown, defaulting to 1000 [ 291.819619][T13087] wg1 speed is unknown, defaulting to 1000 [ 291.876325][T13090] batadv_slave_0: left promiscuous mode [ 292.654569][T13151] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 292.670189][T13157] ip6_vti0 speed is unknown, defaulting to 1000 [ 292.772342][T13170] netlink: 'syz.2.1751': attribute type 13 has an invalid length. [ 292.808058][T13170] netlink: 'syz.2.1751': attribute type 17 has an invalid length. [ 293.273246][T13157] lo speed is unknown, defaulting to 1000 [ 293.303061][T13157] wg1 speed is unknown, defaulting to 1000 [ 293.650770][T13193] __nla_validate_parse: 2 callbacks suppressed [ 293.650789][T13193] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1756'. [ 293.768190][T13193] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1756'. [ 293.860874][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 293.910801][T13196] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.221325][T13212] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1761'. [ 294.503360][T13196] lo speed is unknown, defaulting to 1000 [ 294.519459][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'. [ 294.523914][T13196] wg1 speed is unknown, defaulting to 1000 [ 294.805129][T13242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1769'. [ 295.226133][T13259] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1773'. [ 295.545276][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 295.695909][T13275] bond7: entered allmulticast mode [ 295.702981][T13275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.767489][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.781731][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.791573][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.801421][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.825897][T13279] 8021q: adding VLAN 0 to HW filter on device bond8 [ 295.831093][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.860701][T13279] bond8: entered allmulticast mode [ 295.866463][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.876530][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.886504][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.892702][T13279] bond7: (slave bond8): Enslaving as an active interface with an up link [ 295.917500][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.017959][T13285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1778'. [ 296.033811][T13285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1778'. [ 296.889250][ C1] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 296.895891][ C1] bridge0: topology change detected, propagating [ 297.327919][T13356] Bluetooth: MGMT ver 1.23 [ 297.384313][ T6168] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.407694][ T6168] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.426953][ T6168] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.436267][ T6168] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.558418][T13368] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20000 [ 298.028762][T13385] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.123271][T13390] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 298.289039][T13375] tipc: Bearer : already 2 bearers with priority 26 [ 298.310581][T13375] tipc: Bearer : trying with adjusted priority [ 298.332447][T13375] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 298.635188][ T911] IPVS: starting estimator thread 0... [ 298.713597][T13385] lo speed is unknown, defaulting to 1000 [ 298.713624][T13387] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.739012][T13406] IPVS: using max 27 ests per chain, 64800 per kthread [ 298.751996][T13385] wg1 speed is unknown, defaulting to 1000 [ 298.993769][T13421] __nla_validate_parse: 8 callbacks suppressed [ 298.993789][T13421] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1812'. [ 299.009872][T13421] netlink: 170 bytes leftover after parsing attributes in process `syz.4.1812'. [ 299.254626][T13432] tipc: Bearer : already 2 bearers with priority 26 [ 299.263067][T13432] tipc: Bearer : trying with adjusted priority [ 299.297258][T13432] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 299.306436][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'. [ 299.369030][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 299.375193][ T53] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 299.420220][T13395] ip6_vti0 speed is unknown, defaulting to 1000 [ 299.617769][T13450] netlink: 'syz.4.1823': attribute type 4 has an invalid length. [ 299.630473][T13450] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1823'. [ 299.641303][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 299.650956][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'. [ 299.777877][T13395] lo speed is unknown, defaulting to 1000 [ 299.792731][T13457] netlink: 'syz.4.1826': attribute type 3 has an invalid length. [ 299.818422][T13387] lo speed is unknown, defaulting to 1000 [ 299.825024][T13455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1825'. [ 299.836783][T13395] wg1 speed is unknown, defaulting to 1000 [ 299.861774][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1824'. [ 299.886824][T13457] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1826'. [ 299.926982][T13387] wg1 speed is unknown, defaulting to 1000 [ 300.223198][T13464] x_tables: duplicate underflow at hook 2 [ 301.451705][T13500] bridge: RTM_NEWNEIGH with invalid ether address [ 301.591166][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 301.844409][T13519] dummy0: entered promiscuous mode [ 301.850081][T13519] macsec1: entered allmulticast mode [ 301.855424][T13519] dummy0: entered allmulticast mode [ 301.953288][T13520] syzkaller0: entered promiscuous mode [ 301.964075][T13520] syzkaller0: entered allmulticast mode [ 302.455717][T13550] netlink: 'syz.4.1844': attribute type 96 has an invalid length. [ 305.980934][T13537] kthread_run failed with err -4 [ 305.986991][T13550] __nla_validate_parse: 2 callbacks suppressed [ 305.987011][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1844'. [ 306.267214][T13563] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 306.297125][T13565] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 306.419230][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'. [ 306.453784][T13572] syzkaller0: entered promiscuous mode [ 306.460456][T13572] syzkaller0: entered allmulticast mode [ 306.532541][T13578] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 306.549311][T13578] bond8 (unregistering): Released all slaves [ 306.864594][T13599] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.931075][T13601] syzkaller0: entered promiscuous mode [ 306.941127][T13601] syzkaller0: entered allmulticast mode [ 307.792742][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1864'. [ 307.812036][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1857'. [ 307.913138][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1867'. [ 308.140749][T13640] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 308.147408][T13640] syzkaller0: linktype set to 780 [ 308.278786][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 308.924275][T13682] net_ratelimit: 1 callbacks suppressed [ 308.924295][T13682] openvswitch: netlink: IP tunnel dst address not specified [ 308.953484][T13685] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.056296][T13690] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1887'. [ 309.065421][T13690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.095808][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 309.575220][T13685] lo speed is unknown, defaulting to 1000 [ 309.583150][T13713] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1893'. [ 309.597270][T13685] wg1 speed is unknown, defaulting to 1000 [ 309.643736][T13719] xt_hashlimit: size too large, truncated to 1048576 [ 309.661339][T13718] xt_hashlimit: size too large, truncated to 1048576 [ 309.739363][T13718] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 309.761228][T13719] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 309.930540][T13722] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.063481][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1898'. [ 310.184853][T13722] lo speed is unknown, defaulting to 1000 [ 310.197711][T13722] wg1 speed is unknown, defaulting to 1000 [ 310.329312][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 310.386763][T13742] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 310.891464][T13747] delete_channel: no stack [ 311.589833][T13760] delete_channel: no stack [ 311.974295][T13795] syzkaller0: entered promiscuous mode [ 312.005304][T13795] syzkaller0: entered allmulticast mode [ 312.600007][T13817] __nla_validate_parse: 4 callbacks suppressed [ 312.600028][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'. [ 312.704978][T13817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1920'. [ 322.493275][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.610959][T13829] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1925'. [ 371.630571][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 371.672473][T13830] tipc: Enabled bearer , priority 0 [ 371.696367][T13830] syzkaller0: entered promiscuous mode [ 371.729018][T13830] syzkaller0: entered allmulticast mode [ 371.750882][T13834] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 371.815117][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'. [ 371.837322][T13834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.928090][T13850] tipc: Resetting bearer [ 371.984275][T13845] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1926'. [ 372.039705][T13834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 372.056936][T13834] bond4: entered promiscuous mode [ 372.091635][T13834] bond4: (slave dummy0): making interface the new active one [ 372.126643][T13834] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 372.139965][T13853] netlink: 'syz.4.1930': attribute type 14 has an invalid length. [ 372.449689][T13830] tipc: Resetting bearer [ 372.629790][T13830] tipc: Disabling bearer [ 372.813438][T13870] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.022457][T13882] netlink: 'syz.3.1937': attribute type 12 has an invalid length. [ 373.085320][T13884] netlink: 'syz.2.1936': attribute type 1 has an invalid length. [ 373.215609][T13884] bond9: entered promiscuous mode [ 373.224616][T13884] bond9: entered allmulticast mode [ 373.231879][T13884] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.452481][T13870] lo speed is unknown, defaulting to 1000 [ 373.521371][T13870] wg1 speed is unknown, defaulting to 1000 [ 374.865038][T13949] tun0: tun_chr_ioctl cmd 1074025677 [ 374.879380][T13949] tun0: linktype set to 804 [ 374.885110][T13944] tun0: tun_chr_ioctl cmd 1074025675 [ 374.904964][T13950] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1954'. [ 374.909437][T13944] tun0: persist enabled [ 374.929822][T13944] tun0: tun_chr_ioctl cmd 1074025675 [ 374.939037][T13944] tun0: persist disabled [ 374.944339][T13947] siw: device registration error -23 [ 375.036408][T13947] ip6gretap0: left promiscuous mode [ 375.070647][T13947] bridge0: port 3(vlan2) entered blocking state [ 375.077120][T13947] bridge0: port 3(vlan2) entered forwarding state [ 375.134197][T13947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.510477][T13963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.590978][T13968] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.736913][T13974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1960'. [ 375.768346][T13977] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 375.844785][T13977] 8021q: adding VLAN 0 to HW filter on device bond10 [ 375.902905][T13980] bond10: (slave veth3): Enslaving as an active interface with a down link [ 375.932176][T13977] bond10: (slave dummy0): making interface the new active one [ 376.000848][T13977] dummy0: entered promiscuous mode [ 376.025310][T13977] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 376.193738][T13990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1963'. [ 376.660100][T13980] bond10 (unregistering): (slave veth3): Releasing active interface [ 376.686688][T13980] bond10 (unregistering): (slave dummy0): Releasing active interface [ 376.713024][T13980] bond10 (unregistering): Released all slaves [ 376.746309][T13968] lo speed is unknown, defaulting to 1000 [ 376.758791][T13968] wg1 speed is unknown, defaulting to 1000 [ 376.936633][T14010] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 377.060631][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1967'. [ 377.069827][T14015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1967'. [ 377.099037][T14015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1967'. [ 377.108232][T14015] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1967'. [ 377.146164][T14018] SET target dimension over the limit! [ 377.153864][T14008] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.282676][T14028] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1972'. [ 377.820835][T14008] lo speed is unknown, defaulting to 1000 [ 377.833136][T14028] netlink: 'syz.3.1972': attribute type 29 has an invalid length. [ 377.842500][T14028] netlink: 'syz.3.1972': attribute type 29 has an invalid length. [ 377.851957][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1972'. [ 377.863675][T14008] wg1 speed is unknown, defaulting to 1000 [ 377.871062][T14022] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.213795][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1980'. [ 378.390971][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1981'. [ 378.436287][T14062] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 378.476839][T14062] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 378.499949][T14062] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 378.724687][T14022] lo speed is unknown, defaulting to 1000 [ 378.735173][T14022] wg1 speed is unknown, defaulting to 1000 [ 380.100460][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 380.596387][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 381.067911][T14159] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.178203][T14173] netlink: 'syz.4.2008': attribute type 10 has an invalid length. [ 381.293773][T14179] syzkaller0: entered promiscuous mode [ 381.306957][T14179] syzkaller0: entered allmulticast mode [ 381.563172][T14195] netlink: 'syz.3.2014': attribute type 4 has an invalid length. [ 381.600070][T14159] lo speed is unknown, defaulting to 1000 [ 381.643323][T14195] macvlan3: entered promiscuous mode [ 381.651129][T14195] bond0: entered promiscuous mode [ 381.665305][T14195] bond_slave_0: entered promiscuous mode [ 381.685003][T14200] netlink: 'syz.3.2014': attribute type 4 has an invalid length. [ 381.706159][T14195] bond_slave_1: entered promiscuous mode [ 381.736133][T13873] udevd[13873]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 381.742592][T14159] wg1 speed is unknown, defaulting to 1000 [ 381.775671][T14197] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 381.795825][T14197] bond10 (unregistering): Released all slaves [ 382.268370][T14223] IPVS: length: 42 != 8 [ 382.500143][T14228] __nla_validate_parse: 3 callbacks suppressed [ 382.500166][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'. [ 382.674294][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 382.967810][T14243] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.029325][T14262] syzkaller1: entered promiscuous mode [ 383.062789][T14262] syzkaller1: entered allmulticast mode [ 383.208150][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 383.270973][T14243] lo speed is unknown, defaulting to 1000 [ 383.278719][T14243] wg1 speed is unknown, defaulting to 1000 [ 383.307064][T14271] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 383.630691][T14297] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 383.774392][T14297] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 383.863893][T14299] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 383.947056][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.118273][T14308] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.127382][T14322] netlink: 'syz.1.2044': attribute type 3 has an invalid length. [ 384.176222][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 384.204049][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 384.223676][T14330] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2045'. [ 384.292136][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 384.325581][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2043'. [ 384.349483][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 384.699763][T14315] xt_policy: output policy not valid in PREROUTING and INPUT [ 384.708880][T14308] lo speed is unknown, defaulting to 1000 [ 384.758920][T14308] wg1 speed is unknown, defaulting to 1000 [ 384.832235][T14354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2047'. [ 384.996924][T14349] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.492837][T14349] lo speed is unknown, defaulting to 1000 [ 385.501463][T14349] wg1 speed is unknown, defaulting to 1000 [ 385.743623][T14387] siw: device registration error -23 [ 385.952136][T14390] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 385.971419][T14387] bridge0: port 1(macvtap1) entered blocking state [ 385.980364][T14387] bridge0: port 1(macvtap1) entered disabled state [ 385.993116][T14387] macvtap1: entered allmulticast mode [ 386.009597][T14387] bridge0: entered allmulticast mode [ 386.023402][T14387] macvtap1: left allmulticast mode [ 386.028603][T14387] bridge0: left allmulticast mode [ 386.108172][T14401] netlink: zone id is out of range [ 386.128558][T14401] netlink: zone id is out of range [ 386.171636][T14401] netlink: zone id is out of range [ 386.237072][T14390] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.252643][T14401] netlink: set zone limit has 8 unknown bytes [ 386.285215][T14392] vlan3: entered allmulticast mode [ 386.290559][T14392] bond8: entered allmulticast mode [ 386.354112][T14400] bond8: (slave gretap2): making interface the new active one [ 386.372116][T14400] gretap2: entered allmulticast mode [ 386.470074][T14400] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 386.746644][T14396] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.811523][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 386.831651][T14413] syzkaller0: entered promiscuous mode [ 386.858410][T14413] syzkaller0: entered allmulticast mode [ 386.866099][T14412] tipc: Enabled bearer , priority 0 [ 386.935723][T14414] tipc: Resetting bearer [ 386.983814][T14414] tipc: Disabling bearer [ 387.144393][T14425] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20005 [ 387.250033][T14396] lo speed is unknown, defaulting to 1000 [ 387.257223][T14432] block nbd0: reconnected socket [ 387.275153][ T53] block nbd0: Receive control failed (result -32) [ 387.286242][T14396] wg1 speed is unknown, defaulting to 1000 [ 387.355132][T14434] netlink: 'syz.3.2067': attribute type 33 has an invalid length. [ 387.384266][T14436] netlink: 'syz.3.2067': attribute type 33 has an invalid length. [ 388.139994][T14471] sctp: [Deprecated]: syz.2.2076 (pid 14471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.139994][T14471] Use struct sctp_sack_info instead [ 388.211600][T14474] batman_adv: batadv0: Adding interface: ip6gretap3 [ 388.218277][T14474] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.288306][T14477] __nla_validate_parse: 5 callbacks suppressed [ 388.288326][T14477] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2077'. [ 388.288986][T14474] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active [ 388.467277][T14485] pimreg: entered allmulticast mode [ 388.547056][T14487] dvmrp8: entered allmulticast mode [ 388.593582][T14501] openvswitch: netlink: Message has 4 unknown bytes. [ 388.600544][T14501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.722135][T14490] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 388.776819][T14490] bridge7: entered allmulticast mode [ 388.784054][T14487] pimreg: left allmulticast mode [ 388.897994][T14502] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.652820][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 391.000735][T14502] lo speed is unknown, defaulting to 1000 [ 391.006595][T14524] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.018747][T14543] syzkaller1: entered promiscuous mode [ 391.029572][T14543] syzkaller1: entered allmulticast mode [ 391.037999][T14502] wg1 speed is unknown, defaulting to 1000 [ 391.371318][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 391.401100][T14562] netlink: 'syz.1.2099': attribute type 1 has an invalid length. [ 391.455458][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 391.539242][T14562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 391.609405][T14575] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2101'. [ 391.730406][T14566] bond8 (unregistering): Released all slaves [ 391.777839][T14524] lo speed is unknown, defaulting to 1000 [ 391.804327][T14524] wg1 speed is unknown, defaulting to 1000 [ 391.981789][T14586] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2103'. [ 392.421944][T14600] syzkaller0: entered promiscuous mode [ 392.427667][T14600] syzkaller0: entered allmulticast mode [ 392.652940][T14620] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 392.683384][T14623] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2113'. [ 392.720830][T14625] netlink: 'syz.2.2112': attribute type 8 has an invalid length. [ 392.728634][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 392.741665][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 392.764228][T14619] ip6erspan0: entered allmulticast mode [ 392.950327][T10263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.987315][T14628] bond0: (slave bond_slave_1): Releasing backup interface [ 393.033445][T14628] bond_slave_1 (unregistering): left promiscuous mode [ 393.211167][T14638] syzkaller1: entered promiscuous mode [ 393.216733][T14638] syzkaller1: entered allmulticast mode [ 393.353175][T14644] bond10 (unregistering): Released all slaves [ 393.448305][T14652] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2118'. [ 393.498065][T14642] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 393.536121][T14647] ip6_vti0 speed is unknown, defaulting to 1000 [ 393.812273][T14673] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2123'. [ 393.824720][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2123'. [ 394.695308][T14685] bridge0: port 1(1¾x9ÿ) entered disabled state [ 394.848793][T14685] batman_adv: batadv0: Interface deactivated: dummy0 [ 394.883650][T14702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.890985][T14702] IPv6: NLM_F_CREATE should be set when creating new route [ 394.898239][T14702] IPv6: NLM_F_CREATE should be set when creating new route [ 394.910897][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 395.248127][T14685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.298088][T14685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.908060][T14685] dummy0: left allmulticast mode [ 396.051573][T14647] lo speed is unknown, defaulting to 1000 [ 396.081531][T14647] wg1 speed is unknown, defaulting to 1000 [ 396.087565][ T5951] wg1 speed is unknown, defaulting to 1000 [ 396.094221][T14341] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.129750][ T5951] syz0: Port: 1 Link DOWN [ 396.139345][T14341] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.174586][T14341] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.192589][T14341] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.242506][T14341] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.252504][T14341] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.272437][T14341] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.297981][T14341] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.331365][T14712] tipc: Enabled bearer , priority 0 [ 396.351733][T14722] syzkaller0: entered promiscuous mode [ 396.357280][T14722] syzkaller0: entered allmulticast mode [ 396.445142][T14712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2136'. [ 396.460975][T14712] tipc: Resetting bearer [ 396.504587][T14731] netlink: 'syz.1.2140': attribute type 9 has an invalid length. [ 396.513132][T14731] netlink: 'syz.1.2140': attribute type 7 has an invalid length. [ 396.527612][T14731] netlink: 'syz.1.2140': attribute type 8 has an invalid length. [ 396.565600][T14728] tipc: Resetting bearer [ 396.653118][T14728] tipc: Disabling bearer [ 396.722798][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 396.806103][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'. [ 396.846850][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'. [ 396.918232][T14740] erspan0: entered promiscuous mode [ 396.925488][T14740] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 396.936158][T14740] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 397.225517][T14754] netlink: 'syz.1.2146': attribute type 30 has an invalid length. [ 397.324931][T14761] smc: removing ib device syz2 [ 397.389771][T14763] netlink: 'syz.3.2149': attribute type 10 has an invalid length. [ 397.433308][T14763] bridge0: port 4(macsec0) entered blocking state [ 397.469918][T14763] bridge0: port 4(macsec0) entered disabled state [ 397.476766][T14763] macsec0: entered allmulticast mode [ 397.480049][T14765] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2150'. [ 397.507660][T14763] veth1_macvtap: entered allmulticast mode [ 397.526221][T14763] macsec0: entered promiscuous mode [ 397.543151][T14763] veth1_macvtap: entered promiscuous mode [ 397.634591][T14776] netlink: 'syz.1.2153': attribute type 3 has an invalid length. [ 397.650609][T14776] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2153'. [ 398.422611][T14816] lo speed is unknown, defaulting to 1000 [ 398.435278][T14816] wg1 speed is unknown, defaulting to 1000 [ 398.769658][T14827] pim6reg1: entered promiscuous mode [ 398.775027][T14827] pim6reg1: entered allmulticast mode [ 398.863804][T14831] bond0: Master is either lo or non-ether device [ 399.689154][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 399.895865][T14881] __nla_validate_parse: 2 callbacks suppressed [ 399.895881][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 400.564810][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2185'. [ 400.581289][T14918] xt_hashlimit: max too large, truncated to 1048576 [ 400.694252][T14926] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 400.738151][T14926] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 400.872029][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 400.935893][T14935] delete_channel: no stack [ 401.290420][T14950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2195'. [ 401.354665][T14952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2195'. [ 401.394984][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 401.625491][T14961] tipc: Enabled bearer , priority 0 [ 401.639718][T14960] syzkaller0: entered promiscuous mode [ 401.646675][T14960] syzkaller0: entered allmulticast mode [ 401.666049][T14962] tipc: Resetting bearer [ 401.684329][T14957] tipc: Resetting bearer [ 401.701109][T14964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.739804][T14957] tipc: Disabling bearer [ 401.882619][T14966] lo speed is unknown, defaulting to 1000 [ 401.894412][T14966] wg1 speed is unknown, defaulting to 1000 [ 402.129952][T14978] lo speed is unknown, defaulting to 1000 [ 402.186630][T14984] xt_TCPMSS: Only works on TCP SYN packets [ 402.196169][T14978] wg1 speed is unknown, defaulting to 1000 [ 402.207644][T14981] netlink: 'syz.0.2203': attribute type 9 has an invalid length. [ 402.217085][T14981] netlink: 'syz.0.2203': attribute type 11 has an invalid length. [ 402.242991][T14981] netlink: 'syz.0.2203': attribute type 12 has an invalid length. [ 402.268503][T14981] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2203'. [ 402.293662][T14981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 402.724356][T15006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2209'. [ 402.794019][T15012] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2211'. [ 402.834066][T15009] lo speed is unknown, defaulting to 1000 [ 402.861354][T15009] wg1 speed is unknown, defaulting to 1000 [ 403.513325][T15029] syzkaller0: entered promiscuous mode [ 403.519670][T15029] syzkaller0: entered allmulticast mode [ 403.570811][T15034] openvswitch: netlink: Missing key (keys=40, expected=80) [ 403.868045][T15054] syzkaller1: entered promiscuous mode [ 403.889264][T15054] syzkaller1: entered allmulticast mode [ 404.016138][T15060] tc_dump_action: action bad kind [ 404.400043][T15078] syzkaller0: entered promiscuous mode [ 404.405626][T15078] syzkaller0: entered allmulticast mode [ 405.997782][T15080] ip6tnl0: entered promiscuous mode [ 406.291379][T15111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.373070][T15116] __nla_validate_parse: 10 callbacks suppressed [ 406.373093][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'. [ 406.424719][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 406.480744][T15127] bridge0: entered promiscuous mode [ 406.487923][T15127] bridge0: port 1(macvtap1) entered blocking state [ 406.495030][T15127] bridge0: port 1(macvtap1) entered disabled state [ 406.502425][T15127] macvtap1: entered allmulticast mode [ 406.507986][T15127] bridge0: entered allmulticast mode [ 406.516466][T15127] macvtap1: left allmulticast mode [ 406.521945][T15127] bridge0: left allmulticast mode [ 406.589301][T15127] bridge0: left promiscuous mode [ 406.992863][ T53] block nbd3: Receive control failed (result -32) [ 407.012829][T15142] netlink: 'syz.0.2242': attribute type 2 has an invalid length. [ 407.030834][T15141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2242'. [ 407.229214][T15158] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 407.502553][T15174] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2250'. [ 407.517919][T15173] atomic_op ffff88807ad38998 conn xmit_atomic 0000000000000000 [ 407.528014][T15173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.535338][T15173] IPv6: NLM_F_CREATE should be set when creating new route [ 407.543033][T15173] IPv6: NLM_F_CREATE should be set when creating new route [ 407.617522][T15176] lo speed is unknown, defaulting to 1000 [ 407.627473][T15176] wg1 speed is unknown, defaulting to 1000 [ 408.344697][T15211] lo speed is unknown, defaulting to 1000 [ 408.353268][T15211] wg1 speed is unknown, defaulting to 1000 [ 408.401098][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'. [ 408.917311][T15243] lo speed is unknown, defaulting to 1000 [ 408.956534][T15243] wg1 speed is unknown, defaulting to 1000 [ 409.345850][T15259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2274'. [ 409.361127][T15259] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2274'. [ 409.409906][T15261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2275'. [ 409.419750][T15261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2275'. [ 409.430946][T15261] netlink: 'syz.2.2275': attribute type 13 has an invalid length. [ 409.440415][T15262] netlink: 'syz.2.2275': attribute type 13 has an invalid length. [ 409.450359][T15262] gretap0: refused to change device tx_queue_len [ 409.456755][T15262] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 409.473569][T15261] gretap0: refused to change device tx_queue_len [ 409.480159][T15261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 409.625741][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 409.836578][T15281] netlink: 'syz.2.2280': attribute type 2 has an invalid length. [ 409.845947][T15281] netlink: 'syz.2.2280': attribute type 2 has an invalid length. [ 410.295098][T15307] lo speed is unknown, defaulting to 1000 [ 410.302426][T15307] wg1 speed is unknown, defaulting to 1000 [ 412.226825][T15355] netlink: 'syz.2.2301': attribute type 8 has an invalid length. [ 412.291603][T15356] __nla_validate_parse: 6 callbacks suppressed [ 412.291619][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 413.187952][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.198609][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.207794][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.221639][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.231692][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.286398][T15366] lo speed is unknown, defaulting to 1000 [ 413.294338][T15366] wg1 speed is unknown, defaulting to 1000 [ 413.634238][T15366] chnl_net:caif_netlink_parms(): no params data found [ 413.956944][T15366] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.965609][T15366] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.973452][T15366] bridge_slave_0: entered allmulticast mode [ 413.981743][T15366] bridge_slave_0: entered promiscuous mode [ 413.993627][T15366] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.001508][T15366] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.023862][T15366] bridge_slave_1: entered allmulticast mode [ 414.049847][T15366] bridge_slave_1: entered promiscuous mode [ 414.105530][T15366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.121174][T15366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.297874][ T53] Bluetooth: hci5: command tx timeout [ 416.526651][T15374] workqueue: Failed to create a rescuer kthread for wq "nfc24_nci_rx_wq": -EINTR [ 416.628414][T15366] team0: Port device team_slave_0 added [ 416.707432][T15366] team0: Port device team_slave_1 added [ 417.374973][ T53] Bluetooth: hci5: command tx timeout [ 418.837805][T15448] lo speed is unknown, defaulting to 1000 [ 418.864446][T15366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.978099][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.344182][T15366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.454988][ T53] Bluetooth: hci5: command tx timeout [ 419.516056][T15366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.678371][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.996671][T15366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.396752][T15448] wg1 speed is unknown, defaulting to 1000 [ 421.542809][ T53] Bluetooth: hci5: command tx timeout [ 423.187280][ T5150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 423.296201][ T5150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 423.418522][ T5150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 423.675302][ T5150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 423.727964][ T5150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.016466][ T53] Bluetooth: hci6: command tx timeout [ 426.287959][T15366] hsr_slave_0: entered promiscuous mode [ 426.365285][T15366] hsr_slave_1: entered promiscuous mode [ 426.476466][T15366] debugfs: 'hsr0' already exists in 'hsr' [ 426.564867][T15366] Cannot create hsr debugfs directory [ 428.095646][ T53] Bluetooth: hci6: command tx timeout [ 428.535819][ T5150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 428.585544][ T5150] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 428.706139][ T5150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 428.886246][T15458] lo speed is unknown, defaulting to 1000 [ 428.901583][T15458] wg1 speed is unknown, defaulting to 1000 [ 428.958276][ T5150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 429.078249][ T5150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 430.184354][ T5150] Bluetooth: hci6: command tx timeout [ 431.536513][ T5150] Bluetooth: hci7: command tx timeout [ 432.255034][ T5836] Bluetooth: hci6: command tx timeout [ 432.255816][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 432.324502][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 432.414309][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 432.664219][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 432.837355][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 433.618242][ T5150] Bluetooth: hci7: command tx timeout [ 435.294754][ T5150] Bluetooth: hci8: command tx timeout [ 435.706888][ T5150] Bluetooth: hci7: command tx timeout [ 436.787598][T15461] lo speed is unknown, defaulting to 1000 [ 436.998218][T15474] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 437.376854][ T5150] Bluetooth: hci8: command tx timeout [ 437.617232][T15469] lo speed is unknown, defaulting to 1000 [ 437.648207][T15461] wg1 speed is unknown, defaulting to 1000 [ 437.773896][ T5150] Bluetooth: hci7: command tx timeout [ 438.966820][T15469] wg1 speed is unknown, defaulting to 1000 [ 439.474460][ T5150] Bluetooth: hci8: command tx timeout [ 441.538231][ T5150] Bluetooth: hci8: command tx timeout [ 441.973760][T15458] chnl_net:caif_netlink_parms(): no params data found [ 443.415534][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2315'. [ 445.081408][T15366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 445.395045][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.587174][T15366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 447.145237][T15458] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.223916][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.298570][T15458] bridge_slave_0: entered allmulticast mode [ 447.377028][T15458] bridge_slave_0: entered promiscuous mode [ 447.448003][T15366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 447.697363][T15366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 448.384502][T15493] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 448.787570][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.975386][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.027374][T15458] bridge_slave_1: entered allmulticast mode [ 449.096871][T15458] bridge_slave_1: entered promiscuous mode [ 449.944480][T15492] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 453.067735][T15458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.424186][T15458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.674535][T15461] chnl_net:caif_netlink_parms(): no params data found [ 455.737783][T15458] team0: Port device team_slave_0 added [ 456.865649][T15469] chnl_net:caif_netlink_parms(): no params data found [ 457.197214][T15458] team0: Port device team_slave_1 added [ 461.536531][T15458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.647087][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.826456][T15458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.266499][T15458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.358068][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.457992][T15458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.504912][T15461] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.594653][T15461] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.648420][T15461] bridge_slave_0: entered allmulticast mode [ 463.707658][T15461] bridge_slave_0: entered promiscuous mode [ 463.807220][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.944035][T15461] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.047824][T15461] bridge_slave_1: entered allmulticast mode [ 464.187939][T15461] bridge_slave_1: entered promiscuous mode [ 467.215133][T15461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.326580][T15469] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.465171][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.557927][T15469] bridge_slave_0: entered allmulticast mode [ 467.627116][T15469] bridge_slave_0: entered promiscuous mode [ 467.735755][T15469] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.824753][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.886986][T15469] bridge_slave_1: entered allmulticast mode [ 467.977321][T15469] bridge_slave_1: entered promiscuous mode [ 468.688618][T15461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.165571][T15469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.128643][T15461] team0: Port device team_slave_0 added [ 473.517019][T15469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.385197][T15461] team0: Port device team_slave_1 added [ 474.787109][T15524] syzkaller0: entered promiscuous mode [ 474.894571][T15524] syzkaller0: entered allmulticast mode [ 475.407021][T15458] hsr_slave_0: entered promiscuous mode [ 475.516416][T15458] hsr_slave_1: entered promiscuous mode [ 475.594632][T15458] debugfs: 'hsr0' already exists in 'hsr' [ 475.675026][T15458] Cannot create hsr debugfs directory [ 476.677365][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 476.714726][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 476.805614][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 477.005153][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 477.074851][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 477.856713][T15469] team0: Port device team_slave_0 added [ 477.977497][T15469] team0: Port device team_slave_1 added [ 479.205820][T15461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.278731][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.375444][ T53] Bluetooth: hci9: command tx timeout [ 479.418729][T15461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.467424][T15461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.488672][T15461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.536812][T15461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.454896][ T53] Bluetooth: hci9: command tx timeout [ 483.167282][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.247060][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.386669][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.534435][ T5150] Bluetooth: hci9: command tx timeout [ 483.637829][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.797243][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.406140][T15469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.474824][T15469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.616418][ T53] Bluetooth: hci9: command tx timeout [ 485.775369][T15469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.888690][T15469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.034808][T15469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.117660][ T53] Bluetooth: hci5: command tx timeout [ 486.153503][T15469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.797220][T15532] lo speed is unknown, defaulting to 1000 [ 486.928244][T15532] wg1 speed is unknown, defaulting to 1000 [ 488.177194][ T53] Bluetooth: hci5: command tx timeout [ 490.176313][T15469] hsr_slave_0: entered promiscuous mode [ 490.257054][ T5150] Bluetooth: hci5: command tx timeout [ 490.406391][ T5150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 490.446643][ T5150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 490.462686][T15469] hsr_slave_1: entered promiscuous mode [ 490.596602][T15469] debugfs: 'hsr0' already exists in 'hsr' [ 490.638425][ T5150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 490.778071][T15469] Cannot create hsr debugfs directory [ 490.898162][ T5150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 491.066807][ T5150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 492.334924][ T53] Bluetooth: hci5: command tx timeout [ 493.406136][T15542] lo speed is unknown, defaulting to 1000 [ 493.558425][ T53] Bluetooth: hci6: command tx timeout [ 494.718013][ T5150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 494.837504][ T5150] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 494.907356][ T5150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 495.066930][ T5150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 495.215641][ T5150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 495.538447][T15542] wg1 speed is unknown, defaulting to 1000 [ 495.616258][ T53] Bluetooth: hci6: command tx timeout [ 496.447511][T15550] lo speed is unknown, defaulting to 1000 [ 496.457538][T15550] wg1 speed is unknown, defaulting to 1000 [ 497.617381][ T5150] Bluetooth: hci7: command tx timeout [ 497.695047][ T5150] Bluetooth: hci6: command tx timeout [ 499.704828][ T5150] Bluetooth: hci7: command tx timeout [ 499.784350][ T5150] Bluetooth: hci6: command tx timeout [ 500.787886][T15557] lo speed is unknown, defaulting to 1000 [ 501.788069][ T5150] Bluetooth: hci7: command tx timeout [ 501.954795][T15557] wg1 speed is unknown, defaulting to 1000 [ 503.653808][T15532] chnl_net:caif_netlink_parms(): no params data found [ 503.858739][ T5150] Bluetooth: hci7: command tx timeout [ 506.827334][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.768330][T15532] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.828296][T15532] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.898195][T15532] bridge_slave_0: entered allmulticast mode [ 513.937366][T15532] bridge_slave_0: entered promiscuous mode [ 514.067207][T15532] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.124221][T15532] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.206993][T15532] bridge_slave_1: entered allmulticast mode [ 514.237071][T15532] bridge_slave_1: entered promiscuous mode [ 514.846962][T15550] chnl_net:caif_netlink_parms(): no params data found [ 516.437701][T15532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.228095][T15532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.837961][T15542] chnl_net:caif_netlink_parms(): no params data found [ 521.084872][T15532] team0: Port device team_slave_0 added [ 522.198340][T15557] chnl_net:caif_netlink_parms(): no params data found [ 522.557624][T15532] team0: Port device team_slave_1 added [ 525.424022][T15550] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.525131][T15550] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.577595][T15550] bridge_slave_0: entered allmulticast mode [ 525.668428][T15550] bridge_slave_0: entered promiscuous mode [ 525.767639][T15550] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.828637][T15550] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.864553][T15550] bridge_slave_1: entered allmulticast mode [ 525.935418][T15550] bridge_slave_1: entered promiscuous mode [ 526.797894][T15532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.864984][T15532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.074702][T15532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.207980][T15532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.325469][T15532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.536300][T15532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.338407][T15550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.995058][T15542] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.134832][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.234039][T15542] bridge_slave_0: entered allmulticast mode [ 531.367010][T15542] bridge_slave_0: entered promiscuous mode [ 532.526542][T15550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.542065][T15542] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.597881][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.657981][T15542] bridge_slave_1: entered allmulticast mode [ 533.756107][T15542] bridge_slave_1: entered promiscuous mode [ 535.587409][T15557] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.684678][T15557] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.758472][T15557] bridge_slave_0: entered allmulticast mode [ 535.816947][T15557] bridge_slave_0: entered promiscuous mode [ 537.165313][T15550] team0: Port device team_slave_0 added [ 537.396697][T15550] team0: Port device team_slave_1 added [ 537.675534][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 537.697652][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 537.746192][T15542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.806181][T15542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.848441][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 538.137855][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 538.288596][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 538.734069][T15557] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.886312][T15557] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.016244][T15557] bridge_slave_1: entered allmulticast mode [ 539.138656][T15557] bridge_slave_1: entered promiscuous mode [ 540.816715][ T53] Bluetooth: hci8: command tx timeout [ 542.914114][ T53] Bluetooth: hci8: command tx timeout [ 544.198545][ T5150] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 544.355114][ T5150] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 544.424012][ T5150] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 544.547579][ T5150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 544.827547][ T5150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 544.986297][ T5150] Bluetooth: hci8: command tx timeout [ 545.298002][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 545.396807][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 545.526730][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 545.634881][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 545.706077][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 546.517759][T15550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.654212][T15550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.914548][T15550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.065432][T15550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.077905][ T5150] Bluetooth: hci8: command tx timeout [ 547.137545][T15550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.218503][T15550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.296356][ T5150] Bluetooth: hci9: command tx timeout [ 548.024804][ T5150] Bluetooth: hci10: command tx timeout [ 548.486722][T15557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.376670][ T5150] Bluetooth: hci9: command tx timeout [ 549.765376][T15610] lo speed is unknown, defaulting to 1000 [ 549.927431][T15557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.096332][ T5150] Bluetooth: hci10: command tx timeout [ 551.426333][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 551.455025][T15617] Bluetooth: hci9: command tx timeout [ 551.475101][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 551.604680][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 551.748639][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 551.845366][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.174938][ T5150] Bluetooth: hci10: command tx timeout [ 553.542517][ T5836] Bluetooth: hci9: command tx timeout [ 553.718617][T15610] wg1 speed is unknown, defaulting to 1000 [ 554.136624][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.207443][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.276945][T15617] Bluetooth: hci3: command tx timeout [ 554.294535][T15617] Bluetooth: hci10: command tx timeout [ 554.315696][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.584691][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.736553][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.825940][ T31] INFO: task kworker/u8:31:14340 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 554.997359][ T31] Not tainted syzkaller #0 [ 555.106734][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.304800][ T31] task:kworker/u8:31 state:D stack:25704 pid:14340 tgid:14340 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 555.546913][ T31] Workqueue: netns cleanup_net [ 555.614758][ T31] Call Trace: [ 555.618145][ T31] [ 555.707251][ T31] __schedule+0x14bc/0x5000 [ 555.756912][ T31] ? __pfx___schedule+0x10/0x10 [ 555.786069][ T31] ? schedule+0x91/0x360 [ 555.803866][ T31] schedule+0x165/0x360 [ 555.808110][ T31] schedule_preempt_disabled+0x13/0x30 [ 555.853559][ T31] __mutex_lock+0x7e6/0x1350 [ 555.858246][ T31] ? __mutex_lock+0x5bb/0x1350 [ 555.906604][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 555.934114][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 555.994321][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 556.036523][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 556.065447][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 556.134287][ T31] ? _raw_spin_unlock+0x28/0x50 [ 556.154372][ T31] rdma_dev_change_netns+0x39/0x300 [ 556.188541][ T31] rdma_dev_exit_net+0x203/0x340 [ 556.206813][ T31] ? __pfx___might_resched+0x10/0x10 [ 556.254976][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 556.295292][ T31] ? net_generic+0x1e/0x240 [ 556.316524][ T31] ? mutex_is_locked+0x17/0x50 [ 556.345297][ T53] Bluetooth: hci3: command tx timeout [ 556.417519][ T31] ? rtnl_is_locked+0x15/0x20 [ 556.456689][ T31] ops_undo_list+0x49a/0x990 [ 556.477711][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 556.496808][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 556.535562][ T31] cleanup_net+0x4d8/0x7a0 [ 556.547811][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 556.574007][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.615812][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 556.664825][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 556.688495][ T31] process_scheduled_works+0xad1/0x1770 [ 556.696763][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.743868][ T31] worker_thread+0x8a0/0xda0 [ 556.748577][ T31] kthread+0x711/0x8a0 [ 556.806092][ T31] ? __pfx_worker_thread+0x10/0x10 [ 556.855744][ T31] ? __pfx_kthread+0x10/0x10 [ 556.884262][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.907862][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 556.921075][ T31] ? __pfx_kthread+0x10/0x10 [ 556.925741][ T31] ret_from_fork+0x599/0xb30 [ 556.946645][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 557.006795][ T31] ? __switch_to_asm+0x39/0x70 [ 557.064300][ T31] ? __switch_to_asm+0x33/0x70 [ 557.094739][ T31] ? __pfx_kthread+0x10/0x10 [ 557.126497][ T31] ret_from_fork_asm+0x1a/0x30 [ 557.147756][ T31] [ 557.164372][ T31] INFO: task syz.3.2149:14761 blocked for more than 145 seconds. [ 557.215264][ T31] Not tainted syzkaller #0 [ 557.268404][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.358377][ T31] task:syz.3.2149 state:D stack:23424 pid:14761 tgid:14760 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 557.387268][ T31] Call Trace: [ 557.393648][ T31] [ 557.396625][ T31] __schedule+0x14bc/0x5000 [ 557.403655][ T31] ? lockdep_unlock+0x89/0x120 [ 557.408472][ T31] ? __pfx___schedule+0x10/0x10 [ 557.423978][ T31] ? schedule+0x91/0x360 [ 557.428280][ T31] schedule+0x165/0x360 [ 557.443557][ T31] schedule_timeout+0x9a/0x270 [ 557.448491][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 557.456077][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.474745][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 557.482605][ T31] ? wait_for_completion+0x267/0x5d0 [ 557.488024][ T31] wait_for_completion+0x2bf/0x5d0 [ 557.496468][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 557.517405][ T31] ? disable_device+0x137/0x320 [ 557.528021][ T31] ? remove_client_context+0xc0/0x1e0 [ 557.567629][ T31] disable_device+0x1c6/0x320 [ 557.606729][ T31] ? __pfx_disable_device+0x10/0x10 [ 557.647125][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 557.716990][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 557.744308][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 557.837270][ T31] nldev_dellink+0x2d1/0x320 [ 557.886269][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 557.918051][ T31] ? apparmor_capable+0x137/0x1a0 [ 557.984944][ T31] ? bpf_lsm_capable+0x9/0x20 [ 558.016156][ T31] ? security_capable+0x7e/0x2e0 [ 558.038123][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 558.068461][ T31] rdma_nl_rcv+0x6ae/0x980 [ 558.108455][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 558.134924][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.148276][ T31] netlink_unicast+0x82f/0x9e0 [ 558.174846][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 558.188155][ T31] ? netlink_sendmsg+0x642/0xb30 [ 558.204655][ T31] ? skb_put+0x11b/0x210 [ 558.224964][ T31] netlink_sendmsg+0x805/0xb30 [ 558.237783][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.284230][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 558.318010][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.368286][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.415462][ T5836] Bluetooth: hci3: command tx timeout [ 558.437435][ T31] __sock_sendmsg+0x21c/0x270 [ 558.455313][ T31] ____sys_sendmsg+0x505/0x820 [ 558.485003][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.496064][ T31] ? import_iovec+0x74/0xa0 [ 558.508629][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 558.521420][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.526710][ T31] ? futex_wait+0x285/0x360 [ 558.534340][ T31] ? __fget_files+0x2a/0x420 [ 558.541449][ T31] ? __fget_files+0x3a0/0x420 [ 558.546193][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 558.564978][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.572421][ T31] ? do_syscall_64+0xbe/0xf80 [ 558.577148][ T31] do_syscall_64+0xfa/0xf80 [ 558.607565][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.638084][ T31] ? clear_bhb_loop+0x60/0xb0 [ 558.664392][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.716876][ T31] RIP: 0033:0x7fdc72d8f749 [ 558.744718][ T31] RSP: 002b:00007fdc70ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.778183][ T31] RAX: ffffffffffffffda RBX: 00007fdc72fe5fa0 RCX: 00007fdc72d8f749 [ 558.816273][ T31] RDX: 000000000004c814 RSI: 0000200000000200 RDI: 0000000000000005 [ 558.863867][ T31] RBP: 00007fdc72e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.874972][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.915149][ T31] R13: 00007fdc72fe6038 R14: 00007fdc72fe5fa0 R15: 00007ffc0e438588 [ 558.953010][ T31] [ 559.008610][ T31] INFO: task syz.1.2210:15009 blocked for more than 147 seconds. [ 559.117669][ T31] Not tainted syzkaller #0 [ 559.207692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.315091][ T31] task:syz.1.2210 state:D stack:24920 pid:15009 tgid:15008 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 559.388340][ T5836] Bluetooth: hci5: command tx timeout [ 559.433930][ T31] Call Trace: [ 559.437312][ T31] [ 559.504939][ T31] __schedule+0x14bc/0x5000 [ 559.566663][ T31] ? __pfx___schedule+0x10/0x10 [ 559.607516][ T31] ? schedule+0x91/0x360 [ 559.668147][ T31] schedule+0x165/0x360 [ 559.697203][ T31] schedule_preempt_disabled+0x13/0x30 [ 559.748287][ T31] __mutex_lock+0x7e6/0x1350 [ 559.785671][ T31] ? __mutex_lock+0x5bb/0x1350 [ 559.807167][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 559.847565][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 559.894457][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 559.908618][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 559.917766][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 559.985819][ T31] ? _raw_spin_unlock+0x28/0x50 [ 560.016733][ T31] rdma_dev_change_netns+0x39/0x300 [ 560.065404][ T31] rdma_dev_exit_net+0x203/0x340 [ 560.104079][ T31] ? __pfx___might_resched+0x10/0x10 [ 560.138482][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 560.177381][ T31] ? net_generic+0x1e/0x240 [ 560.234319][ T31] ? mutex_is_locked+0x17/0x50 [ 560.298404][ T31] ? rtnl_is_locked+0x15/0x20 [ 560.316917][ T31] ops_undo_list+0x49a/0x990 [ 560.327140][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 560.348436][ T31] ? ops_init+0x469/0x5c0 [ 560.376542][ T31] setup_net+0x2e8/0x330 [ 560.448279][ T31] ? __pfx_setup_net+0x10/0x10 [ 560.474967][ T31] ? preinit_net+0x47d/0x780 [ 560.495506][ T31] copy_net_ns+0x3e3/0x570 [ 560.506105][ T5836] Bluetooth: hci3: command tx timeout [ 560.546232][ T31] create_new_namespaces+0x3e7/0x6a0 [ 560.584115][ T31] ? security_capable+0x7e/0x2e0 [ 560.597052][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 560.607654][ T31] ksys_unshare+0x4c8/0x8c0 [ 560.628661][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 560.638551][ T31] __x64_sys_unshare+0x38/0x50 [ 560.646704][ T31] do_syscall_64+0xfa/0xf80 [ 560.674992][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.717115][ T31] ? clear_bhb_loop+0x60/0xb0 [ 560.777449][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.836820][ T31] RIP: 0033:0x7f1c4ed8f749 [ 560.862663][ T31] RSP: 002b:00007f1c4cfee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 560.874434][ T31] RAX: ffffffffffffffda RBX: 00007f1c4efe5fa0 RCX: 00007f1c4ed8f749 [ 560.927157][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 560.993944][ T31] RBP: 00007f1c4ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 561.048679][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.116456][ T31] R13: 00007f1c4efe6038 R14: 00007f1c4efe5fa0 R15: 00007ffea19c1d68 [ 561.194260][ T31] [ 561.197474][ T31] INFO: task syz.4.2270:15243 blocked for more than 149 seconds. [ 561.254899][ T31] Not tainted syzkaller #0 [ 561.286205][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.367520][ T31] task:syz.4.2270 state:D stack:25688 pid:15243 tgid:15241 ppid:5840 task_flags:0x400140 flags:0x00080002 [ 561.456467][ T5836] Bluetooth: hci5: command tx timeout [ 561.496666][ T31] Call Trace: [ 561.508013][ T31] [ 561.534008][ T31] __schedule+0x14bc/0x5000 [ 561.538628][ T31] ? __pfx___schedule+0x10/0x10 [ 561.557786][ T31] ? schedule+0x91/0x360 [ 561.572601][ T31] schedule+0x165/0x360 [ 561.576819][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.605902][ T31] __mutex_lock+0x7e6/0x1350 [ 561.646940][ T31] ? __mutex_lock+0x5bb/0x1350 [ 561.685602][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 561.717304][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 561.766654][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 561.785496][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 561.848019][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 561.888338][ T31] ? _raw_spin_unlock+0x28/0x50 [ 561.906405][ T31] rdma_dev_change_netns+0x39/0x300 [ 561.946495][ T31] rdma_dev_exit_net+0x203/0x340 [ 561.975579][ T31] ? __pfx___might_resched+0x10/0x10 [ 562.007513][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 562.018701][ T31] ? net_generic+0x1e/0x240 [ 562.036354][ T31] ? mutex_is_locked+0x17/0x50 [ 562.066778][ T31] ? rtnl_is_locked+0x15/0x20 [ 562.085604][ T31] ops_undo_list+0x49a/0x990 [ 562.103778][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 562.146653][ T31] ? ops_init+0x469/0x5c0 [ 562.164481][ T31] setup_net+0x2e8/0x330 [ 562.185039][ T31] ? __pfx_setup_net+0x10/0x10 [ 562.214260][ T31] ? preinit_net+0x47d/0x780 [ 562.237547][ T31] copy_net_ns+0x3e3/0x570 [ 562.295529][ T31] create_new_namespaces+0x3e7/0x6a0 [ 562.366720][ T31] ? security_capable+0x7e/0x2e0 [ 562.394573][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 562.426882][ T31] ksys_unshare+0x4c8/0x8c0 [ 562.464661][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 562.477898][ T31] __x64_sys_unshare+0x38/0x50 [ 562.496721][ T31] do_syscall_64+0xfa/0xf80 [ 562.534343][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.586854][ T31] ? clear_bhb_loop+0x60/0xb0 [ 562.626568][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.653010][ T31] RIP: 0033:0x7f790c58f749 [ 562.666072][ T31] RSP: 002b:00007f790d405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 562.704309][ T31] RAX: ffffffffffffffda RBX: 00007f790c7e6090 RCX: 00007f790c58f749 [ 562.774485][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 562.806850][ T31] RBP: 00007f790c613f91 R08: 0000000000000000 R09: 0000000000000000 [ 562.827998][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.865802][ T31] R13: 00007f790c7e6128 R14: 00007f790c7e6090 R15: 00007ffcad5ba468 [ 562.927087][ T31] [ 562.955733][ T31] [ 562.955733][ T31] Showing all locks held in the system: [ 563.017433][ T31] 1 lock held by pool_workqueue_/3: [ 563.065239][ T31] #0: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 563.194814][ T31] 1 lock held by khungtaskd/31: [ 563.205247][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 563.225870][ T31] 3 locks held by kworker/u8:12/3432: [ 563.242509][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 563.264698][ T31] #1: ffffc9000bbc7b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 563.344468][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 563.396094][ T31] 2 locks held by getty/5589: [ 563.436046][ T31] #0: ffff88814ce9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 563.464779][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 563.514760][ T31] 2 locks held by syz-executor/5838: [ 563.545068][ T5836] Bluetooth: hci5: command tx timeout [ 563.584026][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 563.601019][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 563.626481][ T31] 1 lock held by kworker/1:3/5900: [ 563.642279][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 563.655539][ T31] 1 lock held by ipvs-e:5:0/7303: [ 563.662601][ T31] 3 locks held by kworker/u8:22/10270: [ 563.668091][ T31] 3 locks held by kworker/u8:29/14338: [ 563.676428][ T31] #0: ffff88814c841148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 563.736519][ T31] #1: ffffc9000b307b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 563.793949][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 563.837630][ T31] 4 locks held by kworker/u8:31/14340: [ 563.875235][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 563.914232][ T31] #1: ffffc9000b327b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 563.967006][ T31] #2: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 564.017872][ T31] #3: ffff88805812c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 564.037510][ T31] 2 locks held by syz.3.2149/14761: [ 564.056738][ T31] #0: ffffffff99c6ce18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 564.115351][ T31] #1: ffff88805812c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 564.157572][ T31] 2 locks held by syz.1.2210/15009: [ 564.165906][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 564.194249][ T31] #1: ffff88805812c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 564.246294][ T31] 2 locks held by syz.4.2270/15243: [ 564.268031][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 564.295622][ T31] #1: ffff88805812c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 564.376001][ T31] 2 locks held by syz.2.2308/15448: [ 564.438158][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 564.463658][ T31] #1: ffff88805812c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 564.517809][ T31] 1 lock held by syz-executor/15550: [ 564.544773][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 564.618260][ T31] 2 locks held by syz-executor/15557: [ 564.656232][ T31] #0: ffffffff8ea958a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 564.708711][ T31] #1: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 564.765573][ T31] 2 locks held by syz-executor/15610: