last executing test programs: 1m59.284313284s ago: executing program 4 (id=1851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m59.093755261s ago: executing program 4 (id=1856): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000014000000f6b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES8], 0x4c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000008004500002c00000000001190780000000018907804000000080000000700000000000000a47f60108aaeff273ec83de6ddb6a7386d6be4a26345688b76f8d73ee632d94bbfa5017d3e0ea15384032bd4b920f1021efdffce4fff4bcf7d77f362961f35ca49b713f256799a0bbe50a4b038094f9548530df44e1e8ea942a070bee5728f0ec8bf23eaa14a4027b805a30c33fa6d152320f3432052d777d4553665fd930cf0f2ff2d6c688bf0189a64576f3b9b29900dad7553f029d4def9033475bda34827ca95000000000000000000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0xfffe) 1m58.951469516s ago: executing program 1 (id=1859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) unshare(0x22020600) r10 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r6, 0x1, 0x20, 0x0, 0x4, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x4, [0x9]}, @noop]}}}}}) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) socketpair(0x2b, 0x2, 0x2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x2a8, 0x0, 0x200, 0x70bd2b, 0x9, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x280, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "1e3ffbbb02b15796f01f29a47b1cfe6c88811cbdca67c255b9c438a81f0a38acb53c57f78ac671bfd8282c5e4d1f997a52"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xccb8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$$\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7d1555d0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[![\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '][+}\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':,^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'xts(twofish)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '):\xe6.#\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&,&{\'}://\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'xts(twofish)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+#/-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xde44}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@.-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4000}, 0x44081) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) (async) r12 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 1m58.602695053s ago: executing program 1 (id=1863): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x586, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000a00)={0x0, 0x1, 0x1, [0xfffffffffffffffd, 0x8, 0x6, 0x0, 0x9], [0x2, 0x7fffffff, 0xb, 0x40, 0x3ec, 0x9, 0x698, 0x4, 0x10001, 0x0, 0x7, 0x7fffffff, 0x5, 0x6, 0x5, 0x100000001, 0xffffffff00000001, 0x101, 0x10001, 0x1, 0x2, 0x4, 0x0, 0xfffffffffffffff9, 0x200, 0x1, 0x7bb, 0x6, 0x8, 0xe, 0x2, 0x875, 0x8, 0x7b, 0x2, 0xc8, 0x0, 0x1, 0xffff, 0xffffffffffff428e, 0xc, 0x3d98, 0x8, 0x1, 0x0, 0x3, 0x28a5, 0x1000, 0x8000000000000001, 0x800, 0x40, 0xffffffffffffff00, 0xfffffffffffffffe, 0x7, 0x44f, 0x0, 0x7, 0x6, 0x800, 0x0, 0x1000, 0xff, 0x6, 0x1, 0xa36, 0x80000000, 0x7, 0x0, 0x8000000000000000, 0x7fffffff, 0x3, 0x7fffffffffffffff, 0x5af, 0x600, 0x1, 0x6, 0x1, 0x0, 0x3, 0xc, 0x7, 0x9, 0x8000, 0x7, 0x6, 0xe, 0x0, 0x1, 0x80, 0x56f, 0x1, 0x6, 0xfffffffffffffff9, 0x6, 0x7ff, 0x401, 0x0, 0x0, 0x8, 0x3, 0x9, 0x5, 0xe349, 0x1, 0x5, 0x6, 0x6, 0x5, 0xffffffffffffffff, 0x7f, 0x0, 0x1, 0x1e7, 0x6, 0xb, 0x5, 0xd0b, 0x2, 0xffffffffffffffc0, 0x8000000000000001, 0x1000]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_delroute={0x24, 0x19, 0x2, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x14, 0x1, 0x0, 0x3, 0xfd, 0x4, 0x800}, [@RTA_PRIORITY={0x8, 0x6, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x20000001) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x1}, 0x20) 1m58.110388469s ago: executing program 4 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) (async) r1 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r3 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}, {}], 0x2, 0x1fffc002) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2b2000000000000008001b00000000004000198039000200e200000044007495d44f4cd1430b0f03dec9b8fc1edb50ef71dc9c8caf3b5eef4d73afa9c4b99745a136978d88b5be3679841b27b741a84b6e00506ed3d0002000"], 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x18, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) (async, rerun: 32) poll(0x0, 0x0, 0x2000000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1m57.636387261s ago: executing program 1 (id=1872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r5, 0x6, 0xf41}, 0x8) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 1m57.530796585s ago: executing program 4 (id=1873): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) unshare(0x200) r1 = socket(0x8, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d61746368000000200002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044894) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f00000000c0)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x7f}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x2004}) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) 1m56.66199062s ago: executing program 1 (id=1881): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000c80c3a4407dcc3f1", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="000000000000f1ff7686e933aa4da9c300000000560800000000000000000000000f7f00b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f00000002c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m55.985456595s ago: executing program 0 (id=1887): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6393}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4111, 0x100f}, {&(0x7f0000000c80)=""/229, 0xe5}], 0x4}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4087, 0xff7}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000080)=""/105, 0x69}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40012060, 0x0) (async, rerun: 64) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) (async) recvmmsg$unix(r4, 0x0, 0x0, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async, rerun: 32) r11 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={0x0, @default, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x7, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b0000a6b1723f0000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, 0x0) (async) socket$inet(0xa, 0x801, 0x84) 1m55.876640454s ago: executing program 0 (id=1889): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x54, r2, 0xfe12482fe0801d65, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x400006}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5c}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x36}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@setlink={0x28, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000000000000000000000000000900020073797a32000000000500040000000000050001"], 0x64}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="04000d800800050000000080"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1m55.699941137s ago: executing program 0 (id=1891): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2d000000010001", 0x7) 1m55.466055829s ago: executing program 0 (id=1893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4b1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r8, @ANYRES32=r7, @ANYBLOB, @ANYRES32], 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206050000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00f00000005f54c92011148ed08734843cb12b08000803", 0x4c}, {&(0x7f0000000240)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a2cf8bd9dd8ae89a3816c910a61c68d2fa089f96b9dc8cedf5a832c4f11e448538ffcee0c6b822436a533a11d9ea24361fb5af3ec33c12f3a69d81ef69a33affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf27282158", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01022cbd7000ffdbdf25ff7fffffffffffff70687931f9ff000005002000000000000c0005000202aa68aaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) 1m55.413947973s ago: executing program 2 (id=1894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m55.25725382s ago: executing program 4 (id=1895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a01"], 0xe0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x503, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a01"], 0xe0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x503, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4) (async) 1m54.970324932s ago: executing program 2 (id=1896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 1m54.969373069s ago: executing program 4 (id=1897): unshare(0x400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100000000000000}, 0x18) ppoll(&(0x7f0000000500)=[{r2, 0x1020}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 1m54.948534078s ago: executing program 0 (id=1898): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async, rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x800, 0x7) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) (async, rerun: 64) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 1m54.7832346s ago: executing program 2 (id=1899): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000240)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) close(r0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) 1m54.714085671s ago: executing program 0 (id=1900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="c253d0b5", 0x4}, {&(0x7f00000003c0)="80", 0x1}], 0x2, 0x0, 0x0, 0x40004}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r5, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$sock(r7, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90) 1m54.519245143s ago: executing program 1 (id=1901): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x12, 0x0, @val=@iter={0x0}}, 0x20) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x12, 0x0, @val=@iter={0x0}}, 0x20) (async) socket$unix(0x1, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) 1m54.317534001s ago: executing program 2 (id=1902): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbf9, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x28, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x40}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0xd, 0x1ff, 0x1f, 0x18, 0xb, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8f8}]}}]}, 0x58}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="4e1488e28fbbc53768d8f3edbdb190462a30b3defc9b90053af5983541c8d75225", 0x21}, {&(0x7f00000000c0)="68ccc2676056e571173ceb0e9277bd22f22d87515522dba7238ff6ae07f2a6310a76211074e75b4b82023243bb59499347b76211e406e0c396ddec10f49a0d06e5cc350429481d9117631b769327da1c83a09545aa738dae8d80d5c76f045d46872d9835b40655bf8d4f8ec7a0791580f87e538e1aa379dfa63fe952d112d606d1ac538ee6ea5457732099ef2aebbe3f945dbf7727805e84c7302312f60fe49ac83bb50e38b3b97145a57e", 0xab}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000100000063012d000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$unix(r0, &(0x7f0000000340)="e2cdb6abcd2e3925534d2fffbc3e86dd27d8cd543ccd4912d8ceb3e9f075f3ab8551a5dfac9b041098217307315046df8b1d42e5d720c500563fe1b64133087ae3482b4b7fcad3fb3835df06a189de33a008e30424e38a17ac32438fe574ff4dc72587c2fae8dccf20de07853af954ca5566a7289a83939bb777e8588b9db9459aab5c04b57cc50c053ca095640aadc1f42bdad0975152f2c680918ab7f54bfa8fe495293fb8dba5d86ad84c57ec7f51f19753682cdf4b536b8fb4b9e187", 0xbe, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="58000000190005042bbd7000fcdbdf2580"], 0x58}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2a, 0xf000}, &(0x7f0000000200)=0x8) recvfrom(r0, &(0x7f0000000580)=""/71, 0x47, 0x20, &(0x7f0000000600)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={r2, 0x76, "6961d5ef1a2466928971acc3a01368f0074793c2a5188c44ac4f099a5688dbb165ab3754bd983b153e1c6304e4b99128307beaaf504c41586dadf56e29866e8052409d0253f83013bf2c84db30c6c185bdc417bdb4f80f0e6e3e2821a4a0ee1595d2cc5ed872a6fa2d3719cbcf8c117b7afd60ef7056"}, &(0x7f00000002c0)=0x7e) 1m53.882002024s ago: executing program 1 (id=1903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff0000006bd1115700000000007b8af0ff00000000bfa10000000000000701000ef8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000fff7fc8d26d2d6900feae7a81156b6cfa053a9e05035fcf249ba09ce0599e601e0721a30ab47d113998b4f1ac540ba2366bb1553bf23fac31b572310d5616354daeb1fd0ca080ab56d9e1c7e9049398dafe9e7a86948a5c29f1eea7eb0d476a4e4111ccfcd87487730be27f955c0f3f12486897b1270c764a0cb2e304408a52ea8df41823b0c81a5aaa59172c97078dc80c11c241ffb", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) (async, rerun: 64) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000000040)=0xffffffff, 0x4) (async) recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m53.881135227s ago: executing program 2 (id=1904): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=0x0, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x80) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd31, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x4, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x7, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x24, 0x0, 0x40, 0xfffff00c}, {0x6}]}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x408140, 0x0) 1m40.907445871s ago: executing program 2 (id=1906): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x1e, "43720705000000004786b89e6fb2940acfbe5c3f9725f0f2bf8dbac78c28"}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x5, 0x0, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x5239, 0xfff, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end, @end, @end, @rr={0x7, 0xb, 0xbc, [@dev={0xac, 0x14, 0x14, 0x42}, @empty]}, @timestamp={0x44, 0x10, 0xcd, 0x0, 0x4, [0x7, 0x3, 0x10000]}, @noop, @timestamp={0x44, 0x24, 0x73, 0x0, 0x3, [0x7fffffff, 0x5, 0x3767, 0xa, 0x40, 0x2, 0x2, 0x0]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1c, 0x5, 0x400, 0x2, 0x44040, r2, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m38.797890476s ago: executing program 32 (id=1900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="c253d0b5", 0x4}, {&(0x7f00000003c0)="80", 0x1}], 0x2, 0x0, 0x0, 0x40004}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r5, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$sock(r7, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90) 1m36.069280501s ago: executing program 33 (id=1897): unshare(0x400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100000000000000}, 0x18) ppoll(&(0x7f0000000500)=[{r2, 0x1020}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 1m34.197329144s ago: executing program 34 (id=1903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff0000006bd1115700000000007b8af0ff00000000bfa10000000000000701000ef8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000fff7fc8d26d2d6900feae7a81156b6cfa053a9e05035fcf249ba09ce0599e601e0721a30ab47d113998b4f1ac540ba2366bb1553bf23fac31b572310d5616354daeb1fd0ca080ab56d9e1c7e9049398dafe9e7a86948a5c29f1eea7eb0d476a4e4111ccfcd87487730be27f955c0f3f12486897b1270c764a0cb2e304408a52ea8df41823b0c81a5aaa59172c97078dc80c11c241ffb", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) (async, rerun: 64) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000000040)=0xffffffff, 0x4) (async) recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m22.966461447s ago: executing program 35 (id=1906): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x1e, "43720705000000004786b89e6fb2940acfbe5c3f9725f0f2bf8dbac78c28"}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x5, 0x0, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x5239, 0xfff, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end, @end, @end, @rr={0x7, 0xb, 0xbc, [@dev={0xac, 0x14, 0x14, 0x42}, @empty]}, @timestamp={0x44, 0x10, 0xcd, 0x0, 0x4, [0x7, 0x3, 0x10000]}, @noop, @timestamp={0x44, 0x24, 0x73, 0x0, 0x3, [0x7fffffff, 0x5, 0x3767, 0xa, 0x40, 0x2, 0x2, 0x0]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1c, 0x5, 0x400, 0x2, 0x44040, r2, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m12.080640914s ago: executing program 3 (id=1913): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x202a0}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000440)={0x5e, @broadcast, 0x4e21, 0x2, 'sh\x00', 0x0, 0x1000, 0x7b}, 0x2c) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x2f, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0xfffffffffffffddf, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0x1}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4095, 0x1f}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/214}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/32}], 0x0, &(0x7f00000009c0)=""/126}}], 0x40000000000024a, 0x40002002, 0x0) 1m1.375241008s ago: executing program 3 (id=1914): r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$inet6_sctp(0xa, 0x5, 0x84) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7) 47.975412392s ago: executing program 3 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7ff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000020000000400000003"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2, 0x1}, 0x20) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xffff, 0x7, 0xe, 0x3}, {0x7, 0x0, 0x9, 0x3ff}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 35.983450353s ago: executing program 3 (id=1916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_emit_ethernet(0x82, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) sendto$inet6(r0, &(0x7f0000004080)='a', 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 27.113479901s ago: executing program 3 (id=1917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00e6f604002392749193ee98d4152193ab8180c4b91000040400000000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100"/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0xfff, '\x00', r4, 0xffffffffffffffff, 0x98, 0x1, 0x2}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) 17.795263133s ago: executing program 3 (id=1918): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x80000, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r4, 0x5450b000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000640)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r4, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000640)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r4, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) shutdown(r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) (async) shutdown(r0, 0x2) 0s ago: executing program 36 (id=1918): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x80000, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r4, 0x5450b000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ee27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce65322c3a2b9bda7ea0333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300034a1e610ba9c8bd22b7949806bc38d55fe24826f13636fe94db8d668411cdbf3aa0e7a26667c6351e8a699502ed7cc6a85055f51b504cd2eabb4d582d1123a260924cbf533b02abd9b2d34b80972a9129cd16ca2e560869d92569274949fcc2bb6f1f312d216ac8ffa3cc4edee695d8d2d4543815a9da628653e6b5a541a87722da525584fbf0d3f7cf6d7c0dfb7955bec6e326e30219a6474116e8beed8347c340c5533b7d8e2b9a94ce4e2d35654bbfaf14bce0abee09b911ec37209bc79153bf46070f1ba7445f7943faa377812347adea73d9efda8b4c62136f874011ab6b8605e1e7e3e487aeec242d01c66ae60cd8f11370cc4180cf0b62de"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000640)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r4, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000640)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r4, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) shutdown(r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) (async) shutdown(r0, 0x2) kernel console output (not intermixed with test programs): 03] netlink: 14589 bytes leftover after parsing attributes in process `syz.2.265'. [ 129.517098][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 129.573320][ T7012] Bluetooth: MGMT ver 1.23 [ 129.738926][ T7015] pim6reg1: entered promiscuous mode [ 129.757771][ T7015] pim6reg1: entered allmulticast mode [ 130.593650][ T7008] wg1 speed is unknown, defaulting to 1000 [ 130.605470][ T6913] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.644997][ T6913] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 130.664745][ T6990] wg1 speed is unknown, defaulting to 1000 [ 130.708148][ T7018] xt_TCPMSS: Only works on TCP SYN packets [ 130.734137][ T6913] wg1 speed is unknown, defaulting to 1000 [ 130.766340][ T6913] wg1 speed is unknown, defaulting to 1000 [ 130.903880][ T6913] wg1 speed is unknown, defaulting to 1000 [ 130.935598][ T7020] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.955011][ T6913] wg1 speed is unknown, defaulting to 1000 [ 131.030349][ T6913] wg1 speed is unknown, defaulting to 1000 [ 131.193174][ T7025] netlink: 14448 bytes leftover after parsing attributes in process `syz.1.272'. [ 131.284614][ T7035] netlink: 468 bytes leftover after parsing attributes in process `syz.3.274'. [ 131.871267][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 132.101321][ T7057] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 132.692189][ T7077] dvmrp0: entered allmulticast mode [ 132.711958][ T7079] netlink: 'syz.2.287': attribute type 3 has an invalid length. [ 132.734309][ T7079] netlink: 'syz.2.287': attribute type 3 has an invalid length. [ 132.783431][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.792001][ T7082] bridge0: entered allmulticast mode [ 132.811391][ T7079] tipc: Enabling of bearer rejected, failed to enable media [ 132.827445][ T7082] bridge_slave_0: left allmulticast mode [ 132.835897][ T7082] bridge_slave_0: left promiscuous mode [ 132.846346][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.944671][ T7088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.288'. [ 132.954328][ T7088] netlink: 43 bytes leftover after parsing attributes in process `syz.1.288'. [ 132.963842][ T7088] netlink: 'syz.1.288': attribute type 5 has an invalid length. [ 132.974857][ T7088] netlink: 43 bytes leftover after parsing attributes in process `syz.1.288'. [ 132.986421][ T7088] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.288'. [ 133.240270][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 133.322045][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 133.669938][ T7113] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 133.685769][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 133.704281][ T7113] netlink: 'syz.4.295': attribute type 10 has an invalid length. [ 133.957208][ T7122] xt_l2tp: missing protocol rule (udp|l2tpip) [ 134.715746][ T7130] wg1 speed is unknown, defaulting to 1000 [ 135.367039][ T7166] x_tables: duplicate underflow at hook 4 [ 136.307786][ T7179] __nla_validate_parse: 4 callbacks suppressed [ 136.307805][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 136.572945][ T7171] sctp: [Deprecated]: syz.2.313 (pid 7171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.572945][ T7171] Use struct sctp_sack_info instead [ 136.676417][ T7165] wg1 speed is unknown, defaulting to 1000 [ 137.038095][ T7190] bridge0: port 3(erspan0) entered blocking state [ 137.045177][ T7190] bridge0: port 3(erspan0) entered disabled state [ 137.078142][ T7190] erspan0: entered allmulticast mode [ 137.160299][ T7190] erspan0: entered promiscuous mode [ 137.181877][ T7190] bridge0: port 3(erspan0) entered blocking state [ 137.188545][ T7190] bridge0: port 3(erspan0) entered forwarding state [ 137.317961][ T7196] erspan0: left allmulticast mode [ 137.329220][ T7196] erspan0: left promiscuous mode [ 137.342262][ T7196] bridge0: port 3(erspan0) entered disabled state [ 137.471871][ T7202] bond1: option lacp_active: invalid value (7) [ 137.496377][ T7202] bond1 (unregistering): Released all slaves [ 137.543433][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 137.682689][ T7167] wg1 speed is unknown, defaulting to 1000 [ 138.179112][ T7220] syzkaller1: entered promiscuous mode [ 138.193592][ T7220] syzkaller1: entered allmulticast mode [ 138.246278][ T7225] netlink: 14 bytes leftover after parsing attributes in process `syz.3.327'. [ 138.253846][ T7221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.266073][ T7221] bond0: (slave bond1): Enslaving as an active interface with an up link [ 138.284080][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.290537][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.682063][ T7225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.722468][ T7225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.752050][ T7225] bond0 (unregistering): (slave bond1): Releasing backup interface [ 138.783961][ T7225] bond0 (unregistering): Released all slaves [ 138.992364][ T7237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.329'. [ 139.195500][ T7244] bridge0: entered promiscuous mode [ 139.205787][ T7244] bridge0: port 1(macvlan2) entered blocking state [ 139.218646][ T7244] bridge0: port 1(macvlan2) entered disabled state [ 139.225488][ T7244] macvlan2: entered allmulticast mode [ 139.258821][ T7244] bridge0: entered allmulticast mode [ 139.279316][ T7244] macvlan2: left allmulticast mode [ 139.286947][ T7248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.333'. [ 139.299289][ T7244] bridge0: left allmulticast mode [ 139.305890][ T7244] bridge0: left promiscuous mode [ 139.453905][ T7252] netlink: 128 bytes leftover after parsing attributes in process `syz.4.334'. [ 139.504526][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.529941][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.737063][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.337'. [ 139.787757][ T7260] netlink: 7 bytes leftover after parsing attributes in process `syz.2.337'. [ 140.064176][ T7264] netlink: 136 bytes leftover after parsing attributes in process `syz.4.338'. [ 140.284976][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 140.526192][ T6744] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.550954][ T6744] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.563733][ T6744] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 140.573543][ T6744] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.590491][ T6744] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.610585][ T6744] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 140.629993][ T6744] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.653624][ T6744] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.679298][ T6744] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 140.703299][ T6744] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.748979][ T6744] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.780987][ T6744] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 141.037121][ T7284] sctp: [Deprecated]: syz.2.342 (pid 7284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.037121][ T7284] Use struct sctp_sack_info instead [ 141.059839][ T7285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.107157][ T7289] tipc: Started in network mode [ 141.112616][ T7289] tipc: Node identity 9a39bae12c9f, cluster identity 4711 [ 141.128347][ T7289] tipc: Enabled bearer , priority 0 [ 141.168969][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 141.191655][ T7290] netlink: 'syz.2.342': attribute type 3 has an invalid length. [ 141.299808][ T7293] tipc: Disabling bearer [ 141.399919][ T7297] netlink: 348 bytes leftover after parsing attributes in process `syz.3.346'. [ 141.411177][ T7297] syzkaller1: entered promiscuous mode [ 141.416921][ T7297] syzkaller1: entered allmulticast mode [ 141.811499][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 141.858154][ T7309] openvswitch: netlink: Flow key attr not present in new flow. [ 141.975609][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.005093][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.010823][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 142.028789][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.048224][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.354'. [ 142.058533][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.081857][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.110411][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 142.168460][ T6737] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.177277][ T6737] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.211213][ T6737] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.248531][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.025072][ T7338] wg1 speed is unknown, defaulting to 1000 [ 143.549265][ T7360] wg1 speed is unknown, defaulting to 1000 [ 144.138902][ T7378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.473551][ T7388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.550101][ T7378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.599432][ T7400] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 144.608518][ T7400] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 144.633115][ T7388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.686011][ T7378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.734067][ T7388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.767181][ T7378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.876721][ T7388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.062094][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.128282][ T3439] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.314386][ T3439] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.339402][ T3439] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.392869][ T3439] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.408097][ T7416] netlink: 'syz.1.380': attribute type 3 has an invalid length. [ 145.512095][ T7378] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.537880][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.575636][ T7378] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.606609][ T3439] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.663488][ T7378] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.046647][ T7413] xt_CT: No such helper "netbios-ns" [ 146.073687][ T7410] wg1 speed is unknown, defaulting to 1000 [ 146.315727][ T7444] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 146.540331][ T7452] tipc: Enabled bearer , priority 0 [ 146.573952][ T7452] syzkaller0: entered promiscuous mode [ 146.615947][ T7452] syzkaller0: entered allmulticast mode [ 146.639948][ T7457] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.677187][ T7458] __nla_validate_parse: 146 callbacks suppressed [ 146.677211][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 146.708516][ T7452] tipc: Resetting bearer [ 146.745000][ T7458] syzkaller1: entered promiscuous mode [ 146.752392][ T7458] syzkaller1: entered allmulticast mode [ 147.202614][ T7483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.398'. [ 147.230050][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 147.337940][ T7451] tipc: Resetting bearer [ 147.376573][ T7451] tipc: Disabling bearer [ 148.139395][ T5973] IPVS: starting estimator thread 0... [ 148.214324][ T7500] wg1 speed is unknown, defaulting to 1000 [ 148.237920][ T7515] IPVS: using max 25 ests per chain, 60000 per kthread [ 149.512502][ T7545] wg1 speed is unknown, defaulting to 1000 [ 149.705085][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'. [ 149.716921][ T7569] netlink: 5 bytes leftover after parsing attributes in process `syz.3.422'. [ 149.932585][ T7551] wg1 speed is unknown, defaulting to 1000 [ 150.179746][ T7583] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 150.260516][ T7583] tipc: Enabling of bearer rejected, failed to enable media [ 150.425756][ T7587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.066851][ T7611] tipc: Enabled bearer , priority 0 [ 151.092146][ T7611] syzkaller0: entered promiscuous mode [ 151.104340][ T7611] syzkaller0: entered allmulticast mode [ 151.120573][ T7613] tipc: Started in network mode [ 151.135936][ T7613] tipc: Node identity 4, cluster identity 4711 [ 151.153441][ T7613] tipc: Node number set to 4 [ 151.178889][ T7611] tipc: Resetting bearer [ 151.192546][ T7610] tipc: Resetting bearer [ 151.209930][ T7610] tipc: Disabling bearer [ 151.244118][ T7602] wg1 speed is unknown, defaulting to 1000 [ 151.424679][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 151.458501][ T7616] netlink: 'syz.3.438': attribute type 11 has an invalid length. [ 151.486386][ T7616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.438'. [ 151.606598][ T7604] wg1 speed is unknown, defaulting to 1000 [ 151.766958][ T7627] netlink: 6 bytes leftover after parsing attributes in process `syz.2.443'. [ 151.935114][ T7635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.084595][ T7631] syzkaller1: entered promiscuous mode [ 152.092591][ T7631] syzkaller1: entered allmulticast mode [ 152.137489][ T7642] x_tables: duplicate underflow at hook 3 [ 152.528700][ T7630] wg1 speed is unknown, defaulting to 1000 [ 152.850971][ T7648] wg1 speed is unknown, defaulting to 1000 [ 153.623493][ T7647] wg1 speed is unknown, defaulting to 1000 [ 153.634329][ T7691] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 153.663878][ T7691] netlink: 'syz.0.459': attribute type 4 has an invalid length. [ 153.681104][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 153.698136][ T7691] netlink: 188 bytes leftover after parsing attributes in process `syz.0.459'. [ 153.707167][ T7691] NCSI netlink: No device for ifindex 3321692160 [ 153.987492][ T7702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.461'. [ 154.040073][ T7702] netlink: 240 bytes leftover after parsing attributes in process `syz.0.461'. [ 154.278977][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.948033][ T7703] wg1 speed is unknown, defaulting to 1000 [ 155.386254][ T7731] netlink: 14 bytes leftover after parsing attributes in process `syz.1.469'. [ 155.659389][ T7731] bond1: (slave macvlan2): Releasing backup interface [ 155.681801][ T7731] bond0 (unregistering): Released all slaves [ 156.051961][ T7756] ieee802154 phy0 wpan0: encryption failed: -90 [ 156.341773][ T7771] tap0: tun_chr_ioctl cmd 1074025677 [ 156.347558][ T7771] tap0: linktype set to 785 [ 156.445283][ T30] audit: type=1800 audit(1760311353.603:2): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.480" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 156.454133][ T7768] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 156.538983][ T7768] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 156.618588][ T7768] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 156.652285][ T7768] syz.4.480 (7768) used greatest stack depth: 17976 bytes left [ 156.940115][ T7791] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 156.949891][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 156.976575][ T7791] macsec1: entered promiscuous mode [ 156.995316][ T7791] macsec1: entered allmulticast mode [ 157.013649][ T7791] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 157.373053][ T7800] netlink: 'syz.3.490': attribute type 83 has an invalid length. [ 157.660848][ T7819] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 157.714057][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 157.733671][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.818841][ T7824] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 157.819504][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.495'. [ 157.836564][ T7824] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 157.876057][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 158.003536][ T7822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.495'. [ 158.072553][ T7832] bridge0: port 1(erspan0) entered blocking state [ 158.094591][ T7832] bridge0: port 1(erspan0) entered disabled state [ 158.125054][ T7832] erspan0: entered allmulticast mode [ 158.141209][ T7832] erspan0: entered promiscuous mode [ 158.167214][ T7832] bridge0: port 1(erspan0) entered blocking state [ 158.173950][ T7832] bridge0: port 1(erspan0) entered listening state [ 158.433994][ T7845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.580544][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 158.585400][ T7845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.610575][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 158.795699][ T7845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.911106][ T7856] batadv_slave_1: entered promiscuous mode [ 159.109837][ T7845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.336989][ T7865] tipc: Enabled bearer , priority 0 [ 159.405766][ T7865] tipc: Disabling bearer [ 159.450543][ T7851] batadv_slave_1: left promiscuous mode [ 159.565300][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.604916][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.650143][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.700806][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.847294][ T7853] wg1 speed is unknown, defaulting to 1000 [ 159.955452][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 159.968201][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 160.383625][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 160.488241][ T7895] vlan2: entered promiscuous mode [ 160.493350][ T7895] bond0: entered promiscuous mode [ 160.647259][ T7898] syzkaller0: entered promiscuous mode [ 160.653388][ T7898] syzkaller0: entered allmulticast mode [ 160.688362][ T7908] tipc: Enabled bearer , priority 0 [ 160.745233][ T7898] tipc: Resetting bearer [ 160.755770][ T7897] tipc: Resetting bearer [ 160.804290][ T7897] tipc: Disabling bearer [ 160.864979][ T7920] xt_connbytes: Forcing CT accounting to be enabled [ 161.156730][ T7935] netlink: 'syz.3.520': attribute type 12 has an invalid length. [ 162.280597][ T7973] syzkaller0: entered promiscuous mode [ 162.286293][ T7973] syzkaller0: entered allmulticast mode [ 162.680078][ T36] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 162.765014][ T7997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 163.104957][ T8013] ip6erspan0: entered allmulticast mode [ 163.405020][ T8024] IPv6: sit1: Disabled Multicast RS [ 163.487293][ T8030] __nla_validate_parse: 2 callbacks suppressed [ 163.487328][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 163.511090][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 163.530605][ T8030] netlink: 'syz.0.552': attribute type 58 has an invalid length. [ 163.535461][ T8008] wg1 speed is unknown, defaulting to 1000 [ 163.561309][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'. [ 163.598792][ T8034] veth1_vlan: default FDB implementation only supports local addresses [ 163.615195][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 163.625300][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.555'. [ 163.735291][ T8041] batadv_slave_1: entered promiscuous mode [ 163.756888][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 164.266217][ T8007] wg1 speed is unknown, defaulting to 1000 [ 164.301521][ T8057] xt_l2tp: v2 doesn't support IP mode [ 164.807602][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.566'. [ 165.462637][ T8110] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 165.599256][ T8114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.642019][ T8112] batadv_slave_0: entered promiscuous mode [ 165.664296][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 165.729809][ T8112] netlink: 428 bytes leftover after parsing attributes in process `syz.1.573'. [ 165.755901][ T8112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.573'. [ 165.797428][ T8093] wg1 speed is unknown, defaulting to 1000 [ 166.319510][ T8107] wg1 speed is unknown, defaulting to 1000 [ 166.437984][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 166.989718][ T8156] netlink: 'syz.0.584': attribute type 5 has an invalid length. [ 167.309097][ T8164] netlink: 'syz.0.587': attribute type 4 has an invalid length. [ 167.383845][ T5878] IPVS: starting estimator thread 0... [ 167.481049][ T8178] IPVS: using max 24 ests per chain, 57600 per kthread [ 167.621214][ T8190] bond2: option broadcast_neighbor: invalid value (5) [ 167.659807][ T8190] bond2 (unregistering): Released all slaves [ 167.707292][ T8202] sock: sock_set_timeout: `syz.3.592' (pid 8202) tries to set negative timeout [ 167.735437][ T8191] hsr0: entered promiscuous mode [ 167.746618][ T8199] hsr_slave_0: left promiscuous mode [ 167.799647][ T8199] hsr_slave_1: left promiscuous mode [ 167.851278][ T8199] hsr0 (unregistering): left promiscuous mode [ 168.082572][ T8208] bridge0: entered promiscuous mode [ 168.090506][ T8208] macsec2: entered promiscuous mode [ 168.105731][ T8208] bridge0: port 3(macsec2) entered blocking state [ 168.120962][ T8208] bridge0: port 3(macsec2) entered disabled state [ 168.130464][ T8208] macsec2: entered allmulticast mode [ 168.135998][ T8208] bridge0: entered allmulticast mode [ 168.149138][ T8208] macsec2: left allmulticast mode [ 168.156391][ T8208] bridge0: left allmulticast mode [ 168.165611][ T8208] bridge0: left promiscuous mode [ 168.303609][ T8195] wg1 speed is unknown, defaulting to 1000 [ 168.779461][ T8239] __nla_validate_parse: 10 callbacks suppressed [ 168.784574][ T8239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.602'. [ 168.993607][ T8249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.605'. [ 169.021520][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 169.191944][ T8257] bridge0: port 3(erspan0) entered blocking state [ 169.255708][ T8257] bridge0: port 3(erspan0) entered disabled state [ 169.280456][ T8257] erspan0: entered allmulticast mode [ 169.289193][ T8257] erspan0: entered promiscuous mode [ 169.295361][ T8257] bridge0: port 3(erspan0) entered blocking state [ 169.302036][ T8257] bridge0: port 3(erspan0) entered forwarding state [ 169.327174][ T8246] syz.4.604 (8246) used greatest stack depth: 17416 bytes left [ 169.808210][ T8280] netlink: 6 bytes leftover after parsing attributes in process `syz.0.611'. [ 169.838298][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.980471][ T8272] wg1 speed is unknown, defaulting to 1000 [ 173.479150][ C0] bridge0: port 1(erspan0) entered learning state [ 174.117957][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 188.837908][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 188.845707][ C0] bridge0: port 1(erspan0) entered forwarding state [ 188.852501][ C0] bridge0: topology change detected, propagating [ 199.721520][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.728136][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.075832][ T8299] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 209.528973][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 209.565109][ T8317] vlan0: entered promiscuous mode [ 209.689760][ T8321] tipc: Enabling of bearer rejected, failed to enable media [ 209.718316][ T8325] netlink: 14 bytes leftover after parsing attributes in process `syz.4.622'. [ 209.766931][ T8325] hsr_slave_0: left promiscuous mode [ 209.814921][ T8325] hsr_slave_1: left promiscuous mode [ 209.983746][ T8330] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 210.042610][ T8330] bond0 (unregistering): Released all slaves [ 210.426511][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.524052][ T6737] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.590278][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.614361][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.656564][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 210.730505][ T8370] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.749628][ T8376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.632'. [ 210.806571][ T8370] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.893001][ T8370] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.985776][ T8370] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.104311][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.144035][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.176588][ T3439] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.206649][ T3439] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.379443][ T8407] sctp: [Deprecated]: syz.0.642 (pid 8407) Use of int in maxseg socket option. [ 211.379443][ T8407] Use struct sctp_assoc_value instead [ 211.425629][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 211.500247][ T8374] wg1 speed is unknown, defaulting to 1000 [ 211.554951][ T8412] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 211.878203][ T8424] sctp: [Deprecated]: syz.0.646 (pid 8424) Use of int in max_burst socket option. [ 211.878203][ T8424] Use struct sctp_assoc_value instead [ 212.386046][ T8432] tipc: Enabled bearer , priority 0 [ 212.408512][ T8432] syzkaller0: entered promiscuous mode [ 212.414049][ T8432] syzkaller0: entered allmulticast mode [ 212.789393][ T8438] bond0: entered promiscuous mode [ 212.794803][ T8438] bond0: entered allmulticast mode [ 212.801017][ T8438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.263880][ T8450] netlink: set zone limit has 8 unknown bytes [ 213.318345][ T8442] tipc: Resetting bearer [ 213.356786][ T8430] tipc: Resetting bearer [ 213.429241][ T8430] tipc: Disabling bearer [ 213.511076][ T8458] netlink: 'syz.3.655': attribute type 13 has an invalid length. [ 213.519979][ T8458] netlink: 'syz.3.655': attribute type 17 has an invalid length. [ 213.530772][ T8458] erspan0: left allmulticast mode [ 213.569818][ T8458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.633156][ T8431] wg1 speed is unknown, defaulting to 1000 [ 213.700284][ T8465] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 213.956958][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 213.995851][ T8482] Bluetooth: MGMT ver 1.23 [ 214.265392][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 214.280117][ T8436] wg1 speed is unknown, defaulting to 1000 [ 214.485139][ T7912] IPVS: starting estimator thread 0... [ 214.503108][ T8500] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 214.539624][ T8500] tipc: Enabled bearer , priority 10 [ 214.580353][ T8501] IPVS: using max 24 ests per chain, 57600 per kthread [ 214.702191][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 214.711858][ T8508] netlink: 'syz.2.667': attribute type 29 has an invalid length. [ 214.724264][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 214.735704][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 214.750867][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 214.884908][ T8460] wg1 speed is unknown, defaulting to 1000 [ 215.073023][ T8526] tipc: Enabling of bearer rejected, failed to enable media [ 215.107122][ T8514] syzkaller1: entered promiscuous mode [ 215.116017][ T8514] syzkaller1: entered allmulticast mode [ 215.145390][ T8514] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 215.560176][ T8529] netlink: 7 bytes leftover after parsing attributes in process `syz.4.673'. [ 215.817503][ T8531] tipc: Enabled bearer , priority 0 [ 215.870013][ T8531] tipc: Disabling bearer [ 215.880144][ T8519] wg1 speed is unknown, defaulting to 1000 [ 216.145901][ T8525] wg1 speed is unknown, defaulting to 1000 [ 216.845600][ T8557] lo: entered promiscuous mode [ 216.857085][ T8557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.900707][ T8553] tipc: Enabled bearer , priority 0 [ 216.944761][ T8553] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 216.970859][ T8553] tipc: Resetting bearer [ 217.002227][ T8552] tipc: Disabling bearer [ 217.127849][ T8569] tipc: Enabled bearer , priority 0 [ 217.145079][ T8568] syzkaller0: entered promiscuous mode [ 217.168232][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 217.168266][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 217.174489][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 217.186960][ T8568] syzkaller0: entered allmulticast mode [ 217.187756][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.215428][ T8573] netlink: 44 bytes leftover after parsing attributes in process `syz.0.687'. [ 217.323942][ T8569] tipc: Resetting bearer [ 217.364837][ T8569] tipc: Disabling bearer [ 217.477424][ T8586] bridge0: port 2(veth0_to_bridge) entered blocking state [ 217.485447][ T8586] bridge0: port 2(veth0_to_bridge) entered disabled state [ 217.508059][ T8586] veth0_to_bridge: entered allmulticast mode [ 217.519857][ T8586] veth0_to_bridge: entered promiscuous mode [ 217.537364][ T8586] bridge0: port 2(veth0_to_bridge) entered blocking state [ 217.544742][ T8586] bridge0: port 2(veth0_to_bridge) entered listening state [ 217.937036][ T8615] syzkaller0: entered promiscuous mode [ 217.961741][ T8615] syzkaller0: entered allmulticast mode [ 218.197556][ T8594] wg1 speed is unknown, defaulting to 1000 [ 218.263098][ T8623] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.702'. [ 218.277851][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 218.483415][ T8608] netlink: 3 bytes leftover after parsing attributes in process `syz.3.696'. [ 218.590289][ T8608] 0ªX¹¦À: renamed from caif0 [ 218.607113][ T8608] 0ªX¹¦À: entered allmulticast mode [ 218.673197][ T8608] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 219.293319][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 219.646257][ T8675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.715'. [ 219.719693][ T8660] wg1 speed is unknown, defaulting to 1000 [ 219.984618][ T8692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 220.062858][ T8689] bridge0: entered allmulticast mode [ 220.260849][ T8700] pim6reg: entered allmulticast mode [ 220.267017][ T8657] wg1 speed is unknown, defaulting to 1000 [ 220.574573][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 220.592514][ T8706] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 220.617250][ T8706] bond2 (unregistering): Released all slaves [ 220.692884][ T8720] netlink: 144 bytes leftover after parsing attributes in process `syz.4.726'. [ 220.710719][ T8722] netlink: 'syz.4.726': attribute type 3 has an invalid length. [ 220.904598][ T8726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.444760][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 221.512841][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.548083][ T8748] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 221.767787][ T8707] wg1 speed is unknown, defaulting to 1000 [ 222.075386][ T8755] netlink: 'syz.4.736': attribute type 39 has an invalid length. [ 222.195108][ T8758] trusted_key: syz.0.737 sent an empty control message without MSG_MORE. [ 222.389910][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807af45800: rx timeout, send abort [ 222.636228][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 222.721187][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'. [ 222.900020][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807af45800: abort rx timeout. Force session deactivation [ 223.556009][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 223.580336][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 223.618599][ T8816] netlink: 'syz.3.756': attribute type 19 has an invalid length. [ 223.631512][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 223.643587][ T8827] bridge4: port 1(veth3) entered blocking state [ 223.656919][ T8827] bridge4: port 1(veth3) entered disabled state [ 223.667535][ T8827] veth3: entered allmulticast mode [ 223.675501][ T8827] veth3: entered promiscuous mode [ 223.686698][ T8829] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 223.695277][ T8829] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.758'. [ 223.717578][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 223.729798][ T8816] netlink: 'syz.3.756': attribute type 19 has an invalid length. [ 223.744797][ T3439] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.760575][ T3439] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.787990][ T3439] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.807032][ T3439] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.831955][ T8834] tipc: Enabled bearer , priority 0 [ 223.842136][ T8834] syzkaller0: entered promiscuous mode [ 223.848685][ T8834] syzkaller0: entered allmulticast mode [ 224.389290][ T8820] tipc: Resetting bearer [ 224.435321][ T8820] tipc: Disabling bearer [ 224.724817][ T8890] sch_tbf: peakrate 7 is lower than or equals to rate 9675163233977606466 ! [ 225.084546][ T8894] syzkaller0: entered promiscuous mode [ 225.106956][ T8894] syzkaller0: entered allmulticast mode [ 225.122012][ T8900] netlink: 'syz.4.778': attribute type 4 has an invalid length. [ 225.263092][ T8905] netlink: 'syz.2.781': attribute type 6 has an invalid length. [ 226.799224][ T8887] wg1 speed is unknown, defaulting to 1000 [ 227.786874][ T8953] wg1 speed is unknown, defaulting to 1000 [ 228.108760][ T8994] bond2: Unable to set up delay as MII monitoring is disabled [ 228.123946][ T8994] bond2 (unregistering): Released all slaves [ 228.191389][ T8988] wg1 speed is unknown, defaulting to 1000 [ 228.302915][ T9003] __nla_validate_parse: 4 callbacks suppressed [ 228.302934][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.801'. [ 229.010769][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 229.414917][ T9042] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 229.576386][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 229.587407][ T9048] tipc: Enabled bearer , priority 0 [ 229.648775][ T9048] syzkaller0: entered promiscuous mode [ 229.654503][ T9048] syzkaller0: entered allmulticast mode [ 229.720295][ T9048] tipc: Resetting bearer [ 229.754126][ T9047] tipc: Resetting bearer [ 229.789239][ T9047] tipc: Disabling bearer [ 230.055816][ T9073] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 230.083966][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 230.268285][ T9077] tipc: Enabled bearer , priority 0 [ 230.311010][ T9077] syzkaller0: entered promiscuous mode [ 230.317465][ T9077] syzkaller0: entered allmulticast mode [ 230.364523][ T9077] tipc: Resetting bearer [ 230.430233][ T9076] tipc: Resetting bearer [ 230.514171][ T9076] tipc: Disabling bearer [ 230.641303][ T9098] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.829'. [ 230.670302][ T9098] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 230.898891][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 230.954877][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.831'. [ 231.123842][ T9118] netlink: 'syz.3.834': attribute type 21 has an invalid length. [ 231.191714][ T9118] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 231.212346][ T9118] netlink: 144 bytes leftover after parsing attributes in process `syz.3.834'. [ 231.373221][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 231.389259][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 231.460112][ T9143] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 232.184711][ T9169] netlink: 'syz.0.850': attribute type 16 has an invalid length. [ 232.203991][ T9169] netlink: 'syz.0.850': attribute type 17 has an invalid length. [ 232.270215][ T9169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.602216][ T9187] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 232.997826][ C0] bridge0: port 2(veth0_to_bridge) entered learning state [ 233.237476][ T9188] wg1 speed is unknown, defaulting to 1000 [ 233.291898][ T9208] tipc: Enabling of bearer rejected, already enabled [ 233.347408][ T9213] Bluetooth: MGMT ver 1.23 [ 233.781135][ T9242] __nla_validate_parse: 4 callbacks suppressed [ 233.781156][ T9242] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.868'. [ 234.459371][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 234.475404][ T9268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.876'. [ 234.505829][ T9268] netlink: 4616 bytes leftover after parsing attributes in process `syz.1.876'. [ 234.537916][ T9268] openvswitch: netlink: Message has 5 unknown bytes. [ 234.567477][ T9273] bridge2: port 1(veth7) entered blocking state [ 234.578135][ T9273] bridge2: port 1(veth7) entered disabled state [ 234.584943][ T9273] veth7: entered allmulticast mode [ 234.593025][ T9273] veth7: entered promiscuous mode [ 234.623626][ T9283] bridge2: port 2(veth0_to_bond) entered blocking state [ 234.642459][ T9283] bridge2: port 2(veth0_to_bond) entered disabled state [ 234.650146][ T9283] veth0_to_bond: entered allmulticast mode [ 234.661151][ T9283] veth0_to_bond: entered promiscuous mode [ 234.695325][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 234.721539][ T9273] vlan2: entered allmulticast mode [ 234.727148][ T9273] veth1: entered allmulticast mode [ 234.732851][ T9273] bridge2: port 3(vlan2) entered blocking state [ 234.743304][ T9273] bridge2: port 3(vlan2) entered disabled state [ 234.754679][ T9273] vlan2: entered promiscuous mode [ 234.763743][ T9273] veth1: entered promiscuous mode [ 234.794483][ T9290] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 234.811131][ T9290] bond2 (unregistering): Released all slaves [ 234.845779][ T9283] macsec2: entered promiscuous mode [ 234.851271][ T9283] ip6gretap0: entered promiscuous mode [ 234.863542][ T9283] ip6gretap0: left promiscuous mode [ 248.357848][ C0] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 248.365282][ C0] bridge0: topology change detected, propagating [ 261.160650][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.170360][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.177149][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.902483][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 270.280627][ T9304] wg1 speed is unknown, defaulting to 1000 [ 270.697320][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.893'. [ 270.713707][ T9315] wg1 speed is unknown, defaulting to 1000 [ 270.719661][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.893'. [ 271.382049][ T9352] netlink: 'syz.2.899': attribute type 13 has an invalid length. [ 271.391059][ T9352] netlink: 'syz.2.899': attribute type 17 has an invalid length. [ 271.527038][ T9352] lo: left promiscuous mode [ 271.717013][ T9352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.733814][ T9352] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.756204][ T9352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.842274][ T9358] geneve2: entered promiscuous mode [ 272.550895][ T9383] syzkaller0: entered promiscuous mode [ 272.560114][ T9383] syzkaller0: entered allmulticast mode [ 272.713203][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.912'. [ 272.915199][ T9405] tipc: Cannot configure node identity twice [ 273.030225][ T9402] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 273.151265][ T9414] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 273.216757][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 273.312227][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 273.331343][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 273.552358][ T9433] ipt_REJECT: TCP_RESET invalid for non-tcp [ 273.590089][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.922'. [ 273.699340][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 274.044528][ T9438] bridge0: port 3(erspan0) entered disabled state [ 274.107991][ T9438] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 274.318546][ T9436] wg1 speed is unknown, defaulting to 1000 [ 274.370711][ T9462] netlink: 'syz.0.929': attribute type 2 has an invalid length. [ 274.396475][ T9462] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 274.414309][ T9462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.929'. [ 274.771761][ T9479] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 274.810754][ T9479] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 275.088794][ T9490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.938'. [ 275.236917][ T9499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.940'. [ 275.324928][ T9505] syzkaller0: entered promiscuous mode [ 275.350043][ T9505] syzkaller0: entered allmulticast mode [ 275.583321][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.945'. [ 275.679015][ T9518] netlink: 'syz.3.947': attribute type 4 has an invalid length. [ 275.852124][ T9509] wg1 speed is unknown, defaulting to 1000 [ 275.934077][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'. [ 276.368978][ T9550] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.469693][ T9550] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.517972][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 276.586949][ T9550] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.654366][ T9550] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.738056][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.762950][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.832693][ T60] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.876384][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.949584][ T9567] netlink: 6 bytes leftover after parsing attributes in process `syz.2.961'. [ 276.998574][ T9567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.232129][ T9573] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 277.252534][ T9572] IPVS: set_ctl: invalid protocol: 28719 99.47.115.121:29487 [ 277.360006][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 277.389129][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 277.570650][ T9583] xt_l2tp: v2 doesn't support IP mode [ 277.866542][ T9588] bond2: option tlb_dynamic_lb: invalid value (71) [ 277.890387][ T9588] bond2 (unregistering): Released all slaves [ 277.980224][ T9601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.973'. [ 278.354199][ T9624] netlink: 'syz.3.980': attribute type 13 has an invalid length. [ 278.376249][ T9624] netlink: 'syz.3.980': attribute type 17 has an invalid length. [ 278.422424][ T9624] 0ªX¹¦À: left allmulticast mode [ 278.427455][ T9624] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 278.483481][ T9621] tipc: Enabled bearer , priority 0 [ 278.526335][ T9620] tipc: Disabling bearer [ 278.573690][ T9612] wg1 speed is unknown, defaulting to 1000 [ 278.735607][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 278.990443][ T30] audit: type=1800 audit(1760311476.143:3): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.986" name="memory.events" dev="tmpfs" ino=948 res=0 errno=0 [ 279.084221][ T9652] macsec1: entered promiscuous mode [ 279.111520][ T9652] batadv0: entered promiscuous mode [ 279.146838][ T9652] batadv0: left promiscuous mode [ 279.787938][ T9697] netlink: 'syz.4.1002': attribute type 2 has an invalid length. [ 280.490247][ T9727] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 281.014047][ T9701] wg1 speed is unknown, defaulting to 1000 [ 281.245638][ T9747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1015'. [ 281.592317][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1018'. [ 281.753156][ T9703] wg1 speed is unknown, defaulting to 1000 [ 281.814767][ T9773] syz_tun: entered allmulticast mode [ 281.896831][ T9777] syz_tun: left allmulticast mode [ 281.904992][ T9777] netlink: 'syz.4.1021': attribute type 10 has an invalid length. [ 281.935523][ T9777] bridge0: port 3(macsec0) entered blocking state [ 281.948424][ T9777] bridge0: port 3(macsec0) entered disabled state [ 281.955294][ T9777] macsec0: entered allmulticast mode [ 281.961028][ T9777] veth1_macvtap: entered allmulticast mode [ 281.970058][ T9777] macsec0: entered promiscuous mode [ 282.106639][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 282.156631][ T9780] team0: entered promiscuous mode [ 282.174664][ T9780] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.255673][ T9708] wg1 speed is unknown, defaulting to 1000 [ 282.705086][ T9804] sctp: [Deprecated]: syz.2.1031 (pid 9804) Use of int in maxseg socket option. [ 282.705086][ T9804] Use struct sctp_assoc_value instead [ 282.751662][ T9804] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1031'. [ 282.863172][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1030'. [ 282.926066][ T9815] veth0_macvtap: left promiscuous mode [ 283.005902][ T9824] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 283.118085][ T9822] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 283.137788][ T9822] netlink: 'syz.2.1034': attribute type 2 has an invalid length. [ 283.145651][ T9822] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1034'. [ 283.319371][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 283.328866][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1037'. [ 283.505134][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'. [ 283.767136][ T9847] netlink: 'syz.1.1041': attribute type 3 has an invalid length. [ 283.792085][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.879848][ T9806] wg1 speed is unknown, defaulting to 1000 [ 284.238574][ T9865] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1046'. [ 284.713181][ T9879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1051'. [ 284.753529][ T9837] wg1 speed is unknown, defaulting to 1000 [ 284.779842][ T9881] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 284.788646][ T9882] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 285.494121][ T9889] wg1 speed is unknown, defaulting to 1000 [ 286.140638][ T9885] wg1 speed is unknown, defaulting to 1000 [ 286.164795][ T9919] siw: device registration error -23 [ 286.284286][ T9931] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 286.313543][ T9931] __nla_validate_parse: 2 callbacks suppressed [ 286.313564][ T9931] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1066'. [ 286.337719][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 286.393459][ T9934] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 286.411196][ T9933] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 286.437030][ T9933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1067'. [ 287.061628][ T9941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1068'. [ 287.124970][ T9924] wg1 speed is unknown, defaulting to 1000 [ 287.460194][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 287.579832][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 287.890154][ T9943] wg1 speed is unknown, defaulting to 1000 [ 288.283018][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 288.333824][ T9962] erspan0: left allmulticast mode [ 288.387844][ T9962] erspan0: left promiscuous mode [ 288.393214][ T9962] bridge0: port 3(erspan0) entered disabled state [ 288.425353][ T9962] bridge_slave_1: left allmulticast mode [ 288.433470][ T9962] bridge_slave_1: left promiscuous mode [ 288.443576][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.473603][ T9962] bridge_slave_0: left allmulticast mode [ 288.479596][ T9962] bridge_slave_0: left promiscuous mode [ 288.485749][ T9962] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.649960][ T9971] dummy0: entered allmulticast mode [ 288.848615][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 288.898517][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 288.907546][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 289.011916][ T9982] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 289.045035][ T9981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'. [ 289.144362][ T6737] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.165732][ T6737] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.187267][ T6737] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.237913][ T6737] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.338511][ T9976] wg1 speed is unknown, defaulting to 1000 [ 289.381833][T10003] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 289.391490][T10003] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 289.500829][T10003] bond1: entered promiscuous mode [ 289.525817][T10003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.639712][T10012] bond3: entered promiscuous mode [ 289.650966][T10012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.693774][T10009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.701143][T10009] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 289.716097][T10009] bond3: (slave vcan1): Error -95 calling set_mac_address [ 289.756119][T10011] batadv2: entered promiscuous mode [ 289.762624][T10011] batadv2: entered allmulticast mode [ 290.139125][T10007] wg1 speed is unknown, defaulting to 1000 [ 290.539120][T10048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.616968][T10048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.793486][T10048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.999121][ T6737] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.031653][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.059407][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.079192][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.600575][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 322.611224][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.618108][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.391784][T10070] __nla_validate_parse: 8 callbacks suppressed [ 329.391804][T10070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1103'. [ 329.593417][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 329.662379][T10089] netlink: 'syz.3.1107': attribute type 2 has an invalid length. [ 329.775322][T10090] netlink: 'syz.0.1108': attribute type 10 has an invalid length. [ 329.797292][T10090] syz_tun: entered promiscuous mode [ 330.573244][T10137] batadv2: entered promiscuous mode [ 330.593483][T10137] batadv2: entered allmulticast mode [ 330.615950][T10137] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 330.820499][T10131] wg1 speed is unknown, defaulting to 1000 [ 331.014571][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 331.051249][T10154] vlan2: entered promiscuous mode [ 331.066413][T10152] netlink: 'syz.2.1122': attribute type 14 has an invalid length. [ 331.747479][T10180] netlink: 'syz.3.1126': attribute type 14 has an invalid length. [ 332.844547][T10186] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 332.864617][T10186] bond2 (unregistering): Released all slaves [ 333.220675][T10216] netlink: 'syz.2.1134': attribute type 1 has an invalid length. [ 335.045870][T10203] wg1 speed is unknown, defaulting to 1000 [ 335.049056][T10216] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 335.067439][T10225] bridge0: port 3(syz_tun) entered blocking state [ 335.085239][T10225] bridge0: port 3(syz_tun) entered disabled state [ 335.104946][T10225] syz_tun: entered allmulticast mode [ 335.115528][T10225] syz_tun: entered promiscuous mode [ 335.121675][T10225] bridge0: port 3(syz_tun) entered blocking state [ 335.128296][T10225] bridge0: port 3(syz_tun) entered listening state [ 335.519911][T10248] syzkaller1: entered promiscuous mode [ 335.560087][T10248] syzkaller1: entered allmulticast mode [ 335.637814][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 336.546640][T10276] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 336.578148][T10276] netlink: 'syz.0.1150': attribute type 2 has an invalid length. [ 336.618703][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 336.651319][T10284] tipc: Enabled bearer , priority 0 [ 336.753023][T10276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.761662][T10284] syzkaller0: entered promiscuous mode [ 336.767193][T10284] syzkaller0: entered allmulticast mode [ 336.809033][T10244] wg1 speed is unknown, defaulting to 1000 [ 336.942019][T10284] tipc: Resetting bearer [ 336.979752][T10282] tipc: Resetting bearer [ 337.164711][T10282] tipc: Disabling bearer [ 337.187165][T10275] wg1 speed is unknown, defaulting to 1000 [ 337.471261][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 337.545548][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 338.085004][T10322] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 338.131714][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 338.156741][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1160'. [ 338.183043][T10328] tipc: Can't bind to reserved service type 1 [ 338.616848][T10334] netlink: 'syz.1.1164': attribute type 29 has an invalid length. [ 338.752178][T10345] veth1_macvtap: left promiscuous mode [ 338.774723][T10345] macsec0: entered allmulticast mode [ 338.834707][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'. [ 338.851030][T10348] veth1_macvtap: entered promiscuous mode [ 338.870741][T10348] veth1_macvtap: entered allmulticast mode [ 338.876744][T10348] macsec0: left allmulticast mode [ 338.929316][T10348] veth1_macvtap: left allmulticast mode [ 339.042332][T10359] bridge0: port 4(macvlan2) entered blocking state [ 339.065797][T10359] bridge0: port 4(macvlan2) entered disabled state [ 339.087254][T10359] macvlan2: entered allmulticast mode [ 339.113124][T10359] bridge0: entered allmulticast mode [ 339.131155][T10359] macvlan2: left allmulticast mode [ 339.136582][T10359] bridge0: left allmulticast mode [ 339.405065][T10355] wg1 speed is unknown, defaulting to 1000 [ 339.436885][T10376] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 339.666333][T10371] wg1 speed is unknown, defaulting to 1000 [ 339.671898][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 339.695596][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 339.723944][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 339.747908][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 339.988076][T10388] veth0_to_batadv: entered allmulticast mode [ 341.135115][T10446] netlink: 'syz.4.1192': attribute type 13 has an invalid length. [ 341.153730][T10446] netlink: 'syz.4.1192': attribute type 17 has an invalid length. [ 341.424155][T10446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.462531][T10446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.682387][T10465] __nla_validate_parse: 3 callbacks suppressed [ 341.682408][T10465] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.1197'. [ 341.718742][T10465] openvswitch: netlink: Message has 16 unknown bytes. [ 341.728581][T10467] xt_l2tp: missing protocol rule (udp|l2tpip) [ 342.106040][T10475] netlink: 'syz.3.1202': attribute type 2 has an invalid length. [ 342.138761][T10475] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 342.154482][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 342.282219][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 342.292647][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'. [ 342.311470][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'. [ 342.384257][T10488] netlink: 'syz.1.1204': attribute type 4 has an invalid length. [ 342.597244][T10497] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 342.606822][T10497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1207'. [ 342.621214][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 342.667853][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 342.692478][T10497] team0: Port device geneve0 added [ 342.699920][T10500] debugfs: 'netdev:nicvf0' already exists in 'phy8' [ 342.757839][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 342.849146][T10504] netlink: 'syz.4.1209': attribute type 12 has an invalid length. [ 342.944754][T10504] netlink: 'syz.4.1209': attribute type 4 has an invalid length. [ 343.111288][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 343.295672][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 343.386004][T10527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.672790][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 343.690469][T10538] pim6reg: entered allmulticast mode [ 343.711259][T10538] pim6reg: left allmulticast mode [ 344.485048][T10549] wg1 speed is unknown, defaulting to 1000 [ 344.530804][T10579] bridge0: entered promiscuous mode [ 344.546155][T10579] macvtap1: entered allmulticast mode [ 344.559132][T10579] bridge0: entered allmulticast mode [ 344.565603][T10579] bridge0: port 4(macvtap1) entered blocking state [ 344.614001][T10579] bridge0: port 4(macvtap1) entered disabled state [ 344.643158][T10579] bridge0: left allmulticast mode [ 344.667725][T10579] bridge0: left promiscuous mode [ 344.943412][T10566] wg1 speed is unknown, defaulting to 1000 [ 345.136811][T10605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.161258][T10603] nbd: couldn't find device at index 0 [ 345.429581][T10614] xt_TCPMSS: Only works on TCP SYN packets [ 345.438217][T10611] bridge4: entered allmulticast mode [ 345.549782][T10619] tipc: Enabled bearer , priority 0 [ 345.588559][T10619] syzkaller0: entered promiscuous mode [ 345.617802][T10619] syzkaller0: entered allmulticast mode [ 345.709003][T10619] tipc: Resetting bearer [ 345.763343][T10618] tipc: Resetting bearer [ 345.840086][T10618] tipc: Disabling bearer [ 345.997928][T10636] tipc: Enabling of bearer rejected, failed to enable media [ 346.019532][T10641] ¾x9ÿ@: renamed from bridge_slave_0 (while UP) [ 346.222317][T10651] bond4: entered promiscuous mode [ 346.233066][T10651] bond4: entered allmulticast mode [ 346.238879][T10651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.391419][T10651] bond4 (unregistering): Released all slaves [ 346.696814][T10671] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 346.738855][T10671] bond4 (unregistering): Released all slaves [ 346.748925][T10639] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 347.084543][T10689] syzkaller0: entered promiscuous mode [ 347.092354][T10689] syzkaller0: entered allmulticast mode [ 347.236369][T10696] netlink: 'syz.4.1262': attribute type 10 has an invalid length. [ 347.265147][T10696] team0: Port device dummy0 added [ 347.274344][T10696] netlink: 'syz.4.1262': attribute type 10 has an invalid length. [ 347.899065][T10709] netlink: 'syz.2.1266': attribute type 58 has an invalid length. [ 347.907078][T10709] __nla_validate_parse: 8 callbacks suppressed [ 347.907099][T10709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1266'. [ 348.799980][T10696] team0: Port device dummy0 removed [ 348.808688][T10696] dummy0: entered promiscuous mode [ 348.815190][T10696] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 348.854954][T10700] bond4: entered promiscuous mode [ 348.867670][T10700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.878058][T10703] netlink: 'syz.1.1264': attribute type 12 has an invalid length. [ 348.910577][T10716] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1267'. [ 348.920057][T10715] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1267'. [ 348.978740][T10719] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 349.075190][T10719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.092025][T10719] erspan0: entered allmulticast mode [ 349.107010][T10719] bond5: (slave erspan0): making interface the new active one [ 349.117017][T10719] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 349.255121][T10741] netlink: 'syz.3.1273': attribute type 9 has an invalid length. [ 349.263446][T10741] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1273'. [ 349.582342][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 349.607995][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 349.782618][T10731] wg1 speed is unknown, defaulting to 1000 [ 350.016261][T10765] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1279'. [ 350.026127][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1279'. [ 350.061889][ T5906] IPVS: starting estimator thread 0... [ 350.150817][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 350.169615][T10771] IPVS: using max 26 ests per chain, 62400 per kthread [ 350.186878][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 350.618672][T10796] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 350.757689][ C1] bridge0: port 3(syz_tun) entered learning state [ 350.985779][T10794] wg1 speed is unknown, defaulting to 1000 [ 351.441318][T10832] netlink: 'syz.0.1294': attribute type 11 has an invalid length. [ 352.325106][T10826] wg1 speed is unknown, defaulting to 1000 [ 352.835492][T10884] syzkaller1: entered promiscuous mode [ 352.841538][T10884] syzkaller1: entered allmulticast mode [ 352.944479][T10883] netlink: 'syz.4.1303': attribute type 10 has an invalid length. [ 353.145753][T10904] __nla_validate_parse: 34 callbacks suppressed [ 353.145778][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 353.186082][T10901] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1308'. [ 353.196682][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 353.206381][T10901] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1308'. [ 353.765819][T10923] bridge_slave_0: default FDB implementation only supports local addresses [ 353.791550][T10924] dvmrp12: entered allmulticast mode [ 353.810865][T10920] dvmrp12: left allmulticast mode [ 354.148049][T10939] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 354.158326][T10939] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1317'. [ 354.167945][T10939] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 354.180848][T10939] netlink: 'syz.4.1317': attribute type 2 has an invalid length. [ 354.192474][T10939] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.237431][T10945] syzkaller0: entered promiscuous mode [ 354.243307][T10945] syzkaller0: entered allmulticast mode [ 354.428441][T10949] netlink: 'syz.3.1321': attribute type 12 has an invalid length. [ 354.535177][T10953] macvlan0: entered promiscuous mode [ 354.550460][T10953] batadv0: entered promiscuous mode [ 354.560329][T10953] hsr1: entered allmulticast mode [ 354.577713][T10953] macvlan0: entered allmulticast mode [ 354.584171][T10953] veth1_vlan: entered allmulticast mode [ 354.607787][T10953] batadv0: entered allmulticast mode [ 354.620901][T10953] macvlan0: left promiscuous mode [ 354.633891][T10953] batadv0: left promiscuous mode [ 354.679075][T10935] wg1 speed is unknown, defaulting to 1000 [ 355.005860][T10979] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1328'. [ 355.037766][T10979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.078820][T10980] Cannot find del_set index 2 as target [ 355.301092][T10997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1334'. [ 355.329580][T10997] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1334'. [ 355.359011][T10997] netlink: 'syz.4.1334': attribute type 5 has an invalid length. [ 355.381786][T10997] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1334'. [ 355.731488][T11023] netlink: 'syz.3.1341': attribute type 5 has an invalid length. [ 356.049869][T11035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.434001][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'. [ 356.487944][T11051] bond0: entered promiscuous mode [ 356.501466][T11051] bond0: left promiscuous mode [ 356.673189][T11055] bond0: entered promiscuous mode [ 356.680392][T11055] bond0: left promiscuous mode [ 357.353780][T11065] netlink: 'syz.4.1351': attribute type 4 has an invalid length. [ 357.537024][T11077] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 357.570142][T11079] openvswitch: netlink: Message has -2 unknown bytes. [ 357.628118][T11080] openvswitch: netlink: Message has -2 unknown bytes. [ 358.000703][T11109] tipc: Enabled bearer , priority 0 [ 358.009781][T11109] syzkaller0: entered promiscuous mode [ 358.015479][T11109] syzkaller0: entered allmulticast mode [ 358.065625][T11109] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 358.179685][T11113] __nla_validate_parse: 5 callbacks suppressed [ 358.179706][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'. [ 358.268262][T11109] tipc: Resetting bearer [ 358.319558][T11109] tipc: Disabling bearer [ 358.349342][T11116] netlink: 'syz.1.1364': attribute type 3 has an invalid length. [ 358.706029][T11119] wg1 speed is unknown, defaulting to 1000 [ 359.015703][T11156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 359.116134][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 359.170871][T11159] 8021q: VLANs not supported on ip_vti0 [ 359.189648][T11159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1375'. [ 359.195348][T11140] wg1 speed is unknown, defaulting to 1000 [ 359.251529][T11163] tipc: Enabling of bearer rejected, failed to enable media [ 359.634851][T11182] netlink: 'syz.4.1380': attribute type 10 has an invalid length. [ 359.646909][T11183] netlink: 'syz.4.1380': attribute type 10 has an invalid length. [ 359.706691][T11182] bond0: (slave dummy0): Releasing backup interface [ 359.731529][T11182] dummy0: left promiscuous mode [ 359.769381][T11182] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 359.784146][T11182] team0: Failed to send options change via netlink (err -105) [ 359.792107][T11182] team0: Port device dummy0 added [ 359.824899][T11183] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 360.069492][T11203] netlink: 'syz.2.1388': attribute type 13 has an invalid length. [ 360.079294][T11204] netlink: 'syz.1.1385': attribute type 16 has an invalid length. [ 360.087251][T11204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1385'. [ 360.101554][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 360.143144][T11207] IPv6: NLM_F_REPLACE set, but no existing node found! [ 360.169559][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 360.262381][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 360.367871][T11217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1390'. [ 360.381415][T11217] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1390'. [ 360.437049][T11203] team0: left promiscuous mode [ 360.451308][T11211] netlink: 'syz.0.1389': attribute type 4 has an invalid length. [ 360.501747][T11213] netlink: 'syz.0.1389': attribute type 4 has an invalid length. [ 360.559728][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.585144][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.624483][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.639570][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.775584][T11228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.799758][T11230] netlink: 'syz.3.1394': attribute type 13 has an invalid length. [ 361.562327][T11252] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 361.642531][T11230] batman_adv: batadv0: Interface deactivated: dummy0 [ 362.115250][T11230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.172653][T11230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.624791][T11271] sctp: [Deprecated]: syz.0.1402 (pid 11271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.624791][T11271] Use struct sctp_sack_info instead [ 362.735647][ T10] wg1 speed is unknown, defaulting to 1000 [ 362.741437][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.747945][ T10] syz0: Port: 1 Link DOWN [ 362.755806][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.774115][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.782963][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.820315][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.840546][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.900046][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.921697][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.957916][T11280] tipc: Enabling of bearer rejected, failed to enable media [ 363.253861][T11271] wg1 speed is unknown, defaulting to 1000 [ 363.388610][T11301] __nla_validate_parse: 3 callbacks suppressed [ 363.388629][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 363.592169][T11308] bridge7: entered promiscuous mode [ 363.666883][T11308] bridge7: entered allmulticast mode [ 363.722780][T11320] netlink: 'syz.2.1416': attribute type 2 has an invalid length. [ 363.739673][T11320] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 363.762891][T11320] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 363.771535][T11320] netlink: 'syz.2.1416': attribute type 2 has an invalid length. [ 363.800376][T11320] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 363.864260][T11320] netlink: 'syz.2.1416': attribute type 2 has an invalid length. [ 363.897056][T11320] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 364.141279][T11327] syzkaller1: entered promiscuous mode [ 364.148230][T11327] syzkaller1: entered allmulticast mode [ 364.296042][T11334] veth0: entered promiscuous mode [ 364.314839][T11337] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 364.314941][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 364.353153][T11335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1421'. [ 364.384231][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 364.445703][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 364.580789][T11347] netlink: 'syz.0.1425': attribute type 30 has an invalid length. [ 364.626916][T11347] bond4: option arp_missed_max: invalid value (0) [ 364.633966][T11347] bond4: option arp_missed_max: allowed values 1 - 255 [ 364.648711][T11347] bond4 (unregistering): Released all slaves [ 364.756512][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 364.906281][T11372] !: renamed from dummy0 [ 365.053992][T11384] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 365.118447][T11390] tipc: Enabled bearer , priority 0 [ 365.121190][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1436'. [ 365.126304][T11388] tipc: Enabling of bearer rejected, already enabled [ 365.152976][T11390] syzkaller0: entered promiscuous mode [ 365.160227][T11390] syzkaller0: entered allmulticast mode [ 365.184392][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 365.206447][T11390] tipc: Resetting bearer [ 365.222913][T11387] tipc: Resetting bearer [ 365.241648][T11387] tipc: Disabling bearer [ 365.416778][T11400] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 365.429751][T11401] netlink: 'syz.0.1441': attribute type 4 has an invalid length. [ 365.713256][T11413] tipc: Enabling of bearer rejected, failed to enable media [ 365.883275][T11420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1446'. [ 365.909487][T11423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1446'. [ 365.998318][T11433] sctp: [Deprecated]: syz.4.1447 (pid 11433) Use of int in max_burst socket option deprecated. [ 365.998318][T11433] Use struct sctp_assoc_value instead [ 366.098123][T11437] syzkaller1: entered promiscuous mode [ 366.103767][T11437] syzkaller1: entered allmulticast mode [ 366.117855][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 366.124761][ C1] bridge0: topology change detected, propagating [ 366.534501][T11448] geneve2: entered promiscuous mode [ 366.558338][ T60] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.573073][ T60] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.601229][ T60] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.622760][ T60] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.787023][T11479] netlink: 'syz.2.1456': attribute type 11 has an invalid length. [ 367.432970][T11505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 367.450308][T11505] batman_adv: batadv0: Adding interface: gretap1 [ 367.457089][T11505] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.489111][T11505] batman_adv: batadv0: Interface activated: gretap1 [ 368.100695][T11533] batman_adv: batadv0: Removing interface: dummy0 [ 368.143615][T11535] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 368.155554][T11535] team0: Device ipvlan1 is already an upper device of the team interface [ 368.541438][T11548] wg1 speed is unknown, defaulting to 1000 [ 368.792786][T11569] __nla_validate_parse: 7 callbacks suppressed [ 368.792805][T11569] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.1484'. [ 369.121221][T11576] vlan2: entered allmulticast mode [ 369.143897][T11582] x_tables: duplicate underflow at hook 4 [ 369.560044][T11605] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 369.573047][T11605] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1495'. [ 369.586208][T11605] NCSI netlink: No device for ifindex 813332851 [ 369.631589][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 369.829692][T11626] netlink: 'syz.1.1501': attribute type 2 has an invalid length. [ 369.870711][T11626] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1501'. [ 369.960818][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1502'. [ 370.143101][T11639] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 370.256351][T11636] IPVS: Scheduler module ip_vs_sip not found [ 370.302107][T11648] bond2: (slave bridge8): making interface the new active one [ 370.311326][T11648] bond2: (slave bridge8): Enslaving as an active interface with an up link [ 370.431547][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1506'. [ 370.481005][T11615] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1496'. [ 370.872232][T11669] netlink: 'syz.2.1511': attribute type 8 has an invalid length. [ 370.896455][T11669] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1511'. [ 370.959389][T11669] macvlan0: entered promiscuous mode [ 370.966415][T11669] batadv0: entered promiscuous mode [ 370.973826][T11669] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 370.984384][T11669] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 370.997189][T11669] hsr1: entered allmulticast mode [ 371.003657][T11669] macvlan0: entered allmulticast mode [ 371.058637][T11669] batadv0: entered allmulticast mode [ 371.069998][T11669] macvlan0: left promiscuous mode [ 371.099199][T11669] batadv0: left promiscuous mode [ 371.145635][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1510'. [ 371.191368][T11688] tipc: Enabling of bearer rejected, failed to enable media [ 371.405028][T11688] syzkaller0: entered promiscuous mode [ 371.461743][T11688] syzkaller0: entered allmulticast mode [ 371.635435][ T9450] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.177450][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.726440][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.906149][ T9450] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.106347][ T9450] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.763589][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.971748][T11709] veth4: entered promiscuous mode [ 379.987249][T11709] veth4: entered allmulticast mode [ 380.077821][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 380.169299][T11715] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 380.194621][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 380.232766][T11703] netlink: 'syz.2.1518': attribute type 30 has an invalid length. [ 380.270753][ T3439] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.287221][ T3439] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.324845][ T3439] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.352362][ T3439] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.367158][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 380.573893][T11739] syzkaller0: entered promiscuous mode [ 380.590917][T11739] syzkaller0: entered allmulticast mode [ 380.728308][T11746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'. [ 380.743078][T11746] netlink: 'syz.2.1530': attribute type 5 has an invalid length. [ 380.768736][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 381.254484][T11776] tipc: Enabled bearer , priority 0 [ 381.384420][T11783] syzkaller0: entered promiscuous mode [ 381.396978][T11783] syzkaller0: entered allmulticast mode [ 381.492067][T11776] tipc: Resetting bearer [ 381.505481][T11791] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1541'. [ 381.542803][T11774] tipc: Resetting bearer [ 381.701738][T11774] tipc: Disabling bearer [ 381.763667][T11763] wg1 speed is unknown, defaulting to 1000 [ 381.824416][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1543'. [ 381.867811][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1543'. [ 381.891175][T11811] netlink: 'syz.1.1543': attribute type 30 has an invalid length. [ 382.010045][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 382.190581][T11825] pim6reg: entered allmulticast mode [ 382.220138][T11825] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1546'. [ 382.305575][T11828] pim6reg: left allmulticast mode [ 382.481195][T11834] syzkaller0: entered promiscuous mode [ 382.490890][T11834] syzkaller0: entered allmulticast mode [ 383.251726][T11827] wg1 speed is unknown, defaulting to 1000 [ 383.975637][T11866] nbd: must specify an index to disconnect [ 383.982378][T11864] nbd: must specify an index to disconnect [ 384.009901][T11857] wg1 speed is unknown, defaulting to 1000 [ 384.024877][T11841] wg1 speed is unknown, defaulting to 1000 [ 384.045841][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 384.055804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.077815][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.581711][T11888] raw_sendmsg: syz.1.1558 forgot to set AF_INET. Fix it! [ 384.677832][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.694546][T11887] bridge2: entered promiscuous mode [ 385.140163][T11894] wg1 speed is unknown, defaulting to 1000 [ 385.279261][T11904] __nla_validate_parse: 3 callbacks suppressed [ 385.279284][T11904] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1562'. [ 385.396905][T11904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1562'. [ 385.609520][T11906] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.667361][T11906] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.723774][T11906] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.800277][T11906] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.914606][ T3439] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.935735][ T3439] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.958330][ T3439] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.981315][ T6744] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.162842][T11913] wg1 speed is unknown, defaulting to 1000 [ 386.172798][T11897] wg1 speed is unknown, defaulting to 1000 [ 387.096677][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 387.121141][T11954] netlink: 'syz.0.1574': attribute type 13 has an invalid length. [ 387.307686][T11955] tipc: Enabled bearer , priority 0 [ 387.316729][T11955] syzkaller0: entered promiscuous mode [ 387.334160][T11955] syzkaller0: entered allmulticast mode [ 387.353384][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1575'. [ 387.427027][T11953] tipc: Resetting bearer [ 387.452877][T11953] tipc: Disabling bearer [ 387.492631][T11962] netlink: 'syz.4.1578': attribute type 12 has an invalid length. [ 387.519043][T11962] Bluetooth: MGMT ver 1.23 [ 387.575536][T11966] geneve3: entered promiscuous mode [ 387.582755][T11966] geneve3: entered allmulticast mode [ 387.753591][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 388.015874][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 388.281835][T11999] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1585'. [ 388.382131][T12003] bridge0: port 1(erspan0) entered disabled state [ 388.445049][T12003] bridge0: port 3(syz_tun) entered disabled state [ 388.463469][T12003] bridge0: port 2(veth0_to_bridge) entered disabled state [ 388.486046][T12003] !: left allmulticast mode [ 388.541397][T12003] batadv_slave_0: left promiscuous mode [ 388.595102][T12003] veth1_vlan: left allmulticast mode [ 388.663257][T12003] bridge7: left promiscuous mode [ 388.668644][T12003] bridge7: left allmulticast mode [ 388.675516][T12003] geneve2: left promiscuous mode [ 388.683043][T12003] vlan2: left allmulticast mode [ 388.693470][T12000] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1585'. [ 388.713036][ T5828] syz1: Port: 1 Link DOWN [ 388.713925][T11964] wg1 speed is unknown, defaulting to 1000 [ 388.724032][ T6744] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.757714][ T6744] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 388.766352][ T6744] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.801640][ T6744] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 388.811298][ T6744] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.821263][ T6744] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 388.856926][ T6744] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.868751][ T6744] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.226906][T12042] veth1_virt_wifi: entered promiscuous mode [ 389.234362][T12042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1595'. [ 389.243688][T12042] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 389.454920][T12052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1598'. [ 389.618578][T12025] wg1 speed is unknown, defaulting to 1000 [ 389.938692][T12072] bond4: option tlb_dynamic_lb: invalid value (71) [ 389.948680][T12072] bond4 (unregistering): Released all slaves [ 390.071380][T12082] netlink: 'syz.4.1604': attribute type 2 has an invalid length. [ 390.134513][T12084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.243424][T12091] netlink: 'syz.1.1605': attribute type 4 has an invalid length. [ 390.385278][T12094] __nla_validate_parse: 5 callbacks suppressed [ 390.385298][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 390.538956][T12094] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 390.724867][T12108] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.760819][T12109] macsec1: entered promiscuous mode [ 390.865897][T12116] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1613'. [ 390.921939][T12122] siw: device registration error -23 [ 391.097064][T12116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.110762][T12116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.122644][T12116] bond0 (unregistering): Released all slaves [ 391.295496][T12135] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1619'. [ 391.327263][T12138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1621'. [ 391.338734][T12133] delete_channel: no stack [ 391.461025][T12122] wg1 speed is unknown, defaulting to 1000 [ 391.609289][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 391.724719][T12147] pim6reg: entered allmulticast mode [ 391.750674][T12147] pim6reg: left allmulticast mode [ 392.093285][T12130] wg1 speed is unknown, defaulting to 1000 [ 392.311385][T12153] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1623'. [ 392.336292][T12171] netlink: 'syz.2.1628': attribute type 4 has an invalid length. [ 392.512462][T12182] syzkaller0: entered promiscuous mode [ 392.531045][T12182] syzkaller0: entered allmulticast mode [ 392.887502][T12190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1633'. [ 393.225964][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 393.338464][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 393.347961][T12200] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1637'. [ 393.414525][T12206] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 393.803015][T12219] netlink: 'syz.0.1643': attribute type 10 has an invalid length. [ 394.277837][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.410536][T12256] IPv6: Can't replace route, no match found [ 394.718268][T12264] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 394.864552][T12264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.894512][T12272] macvlan1: entered allmulticast mode [ 394.948211][T12272] veth1_vlan: entered allmulticast mode [ 394.987462][T12272] bond2: (slave macvlan1): Enslaving as an active interface with a down link [ 395.355682][T12295] syzkaller1: entered promiscuous mode [ 395.373303][T12295] syzkaller1: entered allmulticast mode [ 395.404173][T12295] veth0: entered promiscuous mode [ 395.421539][T12292] veth0: left promiscuous mode [ 395.789496][T12306] netlink: 'syz.0.1667': attribute type 10 has an invalid length. [ 395.814205][T12306] veth1_vlan: entered allmulticast mode [ 395.874196][T12306] team0: Device veth1_vlan failed to register rx_handler [ 396.185887][T12328] tc_dump_action: action bad kind [ 396.213340][T12330] __nla_validate_parse: 4 callbacks suppressed [ 396.213364][T12330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1674'. [ 396.262967][T12330] macsec2: entered promiscuous mode [ 396.284910][T12330] macsec2: entered allmulticast mode [ 396.306343][T12332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1675'. [ 396.446210][T12308] wg1 speed is unknown, defaulting to 1000 [ 396.542986][T12343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'. [ 396.885963][T12359] bridge0: port 4(veth0_to_bridge) entered blocking state [ 396.917917][T12359] bridge0: port 4(veth0_to_bridge) entered disabled state [ 396.925301][T12359] veth0_to_bridge: entered allmulticast mode [ 396.960258][T12359] veth0_to_bridge: entered promiscuous mode [ 397.104376][T12366] nbd: must specify at least one socket [ 397.193392][T12369] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 397.193819][T12370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1683'. [ 397.431408][T12354] wg1 speed is unknown, defaulting to 1000 [ 397.538811][T12334] wg1 speed is unknown, defaulting to 1000 [ 397.899596][T12380] tipc: Enabling of bearer rejected, failed to enable media [ 397.954593][T12380] €Â: renamed from veth1_vlan [ 398.042386][T12374] wg1 speed is unknown, defaulting to 1000 [ 398.069881][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1686'. [ 398.489929][T12391] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 398.736208][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1690'. [ 398.746011][T12397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1690'. [ 399.090566][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 399.100444][T12406] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1692'. [ 399.136566][T12410] team0: Port device team_slave_0 removed [ 399.169057][T12414] netlink: 'syz.0.1693': attribute type 10 has an invalid length. [ 399.170180][T12410] team0: Port device team_slave_1 removed [ 399.186246][T12410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.195147][T12410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.205051][T12410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.213604][T12410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.224504][T12410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.242453][T12412] lo: Caught tx_queue_len zero misconfig [ 399.401137][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1696'. [ 400.206383][T12460] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 400.294913][T12462] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 400.411350][ T3475] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 400.434357][T12460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.466072][T12464] xt_TCPMSS: Only works on TCP SYN packets [ 400.491226][T12462] veth7: entered promiscuous mode [ 400.558380][ T3475] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 400.571902][T12462] bond0: (slave veth7): Enslaving as a backup interface with a down link [ 400.664114][T12460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.880068][T12473] netlink: 'syz.1.1711': attribute type 2 has an invalid length. [ 401.199092][T12493] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 401.230741][T12491] __nla_validate_parse: 7 callbacks suppressed [ 401.230762][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 401.305257][T12493] bond3: entered promiscuous mode [ 401.311246][T12493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.406696][T12493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.421014][T12493] bond3: (slave bond4): making interface the new active one [ 401.429229][T12493] bond4: entered promiscuous mode [ 401.437316][T12493] bond3: (slave bond4): Enslaving as an active interface with an up link [ 401.514646][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 401.529005][T12500] netlink: 'syz.2.1716': attribute type 8 has an invalid length. [ 401.537175][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 401.539854][T12504] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1717'. [ 401.555400][T12504] netem: invalid attributes len -16 [ 401.572808][T12500] geneve4: entered promiscuous mode [ 401.579523][T12500] geneve4: entered allmulticast mode [ 401.587395][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 401.603745][ T3475] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.626382][ T3475] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.655052][ T3475] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.674532][ T3475] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.926328][T12516] netem: change failed [ 402.307178][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 402.562462][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1726'. [ 402.952139][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1736'. [ 403.022175][T12572] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1736'. [ 403.032904][T12572] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 403.040905][T12572] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1736'. [ 403.113846][T12574] veth1_to_batadv: entered promiscuous mode [ 403.682674][T12586] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 404.202298][T12616] tipc: Enabled bearer , priority 0 [ 404.234016][T12616] syzkaller0: entered promiscuous mode [ 404.261116][T12616] syzkaller0: entered allmulticast mode [ 404.297019][T12616] tipc: Resetting bearer [ 404.311351][T12622] tipc: Enabled bearer , priority 0 [ 404.324393][T12614] tipc: Resetting bearer [ 404.366210][T12614] tipc: Disabling bearer [ 404.383217][T12622] syzkaller0: entered promiscuous mode [ 404.390579][T12622] syzkaller0: entered allmulticast mode [ 404.422412][T12622] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 404.504353][T12622] tipc: Resetting bearer [ 404.550737][T12636] tipc: Enabled bearer , priority 0 [ 404.606125][T12633] tipc: Disabling bearer [ 404.978296][T12659] veth1_to_bond: entered allmulticast mode [ 405.046700][T12660] veth1_to_bond: left allmulticast mode [ 405.310769][T12688] netlink: 'syz.4.1766': attribute type 7 has an invalid length. [ 405.348303][ T10] tipc: Node number set to 3064380129 [ 405.564623][T12697] netlink: 'syz.1.1768': attribute type 13 has an invalid length. [ 405.677742][T12703] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 405.757072][T12697] bond5: option fail_over_mac: invalid value (6) [ 405.776566][T12697] bond5 (unregistering): Released all slaves [ 406.317142][T12721] __nla_validate_parse: 10 callbacks suppressed [ 406.317166][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1773'. [ 406.365276][T12721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1773'. [ 406.462423][T12724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.502460][T12724] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 406.598092][T12732] netlink: 'syz.1.1776': attribute type 13 has an invalid length. [ 406.606554][T12732] netlink: 'syz.1.1776': attribute type 17 has an invalid length. [ 406.752570][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 406.783014][T12732] bridge0: port 3(syz_tun) entered blocking state [ 406.789704][T12732] bridge0: port 3(syz_tun) entered listening state [ 406.796674][T12732] bridge0: port 1(erspan0) entered blocking state [ 406.803335][T12732] bridge0: port 1(erspan0) entered listening state [ 406.820558][T12739] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.881248][T12732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.906545][T11264] syz1: Port: 1 Link ACTIVE [ 406.973368][T12744] tipc: Enabled bearer , priority 0 [ 406.995682][T12744] syzkaller0: entered promiscuous mode [ 407.006212][T12744] syzkaller0: entered allmulticast mode [ 407.073821][T12744] tipc: Resetting bearer [ 407.102045][T12743] tipc: Resetting bearer [ 407.133506][T12743] tipc: Disabling bearer [ 407.823338][T12789] netlink: 'syz.2.1793': attribute type 1 has an invalid length. [ 407.974988][T12791] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 408.040864][T12791] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 408.099289][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 408.109191][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 408.364448][T12793] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 408.401738][T12793] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 408.432771][T12772] wg1 speed is unknown, defaulting to 1000 [ 408.568012][T12803] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1796'. [ 408.621342][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1796'. [ 408.667969][T12803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1796'. [ 408.762441][T12813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1799'. [ 409.086890][T12824] rdma_rxe: rxe_newlink: failed to add lo [ 409.094625][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 409.265717][T12824] syz_tun: left promiscuous mode [ 409.321892][T12824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.809878][T12846] xt_TCPMSS: Only works on TCP SYN packets [ 409.970858][T12853] bond5: (slave erspan0): Releasing active interface [ 410.010191][T12853] team0: Port device team_slave_0 removed [ 410.043233][T12853] team0: Port device team_slave_1 removed [ 410.060510][T12853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.090032][T12853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.797839][ C0] bridge0: port 3(syz_tun) entered learning state [ 422.438120][ C0] bridge0: port 1(erspan0) entered learning state [ 437.157750][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 437.164560][ C0] bridge0: topology change detected, propagating [ 437.797774][ C0] bridge0: port 1(erspan0) entered forwarding state [ 437.804704][ C0] bridge0: topology change detected, propagating [ 445.480441][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 445.490508][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.920341][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.929906][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.986538][T12873] __nla_validate_parse: 1 callbacks suppressed [ 516.986560][T12873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1815'. [ 516.987170][T12870] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 517.042604][T12875] dvmrp8: entered allmulticast mode [ 517.076749][T12878] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 517.108154][T12873] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1815'. [ 517.124082][T12873] netlink: 'syz.4.1815': attribute type 13 has an invalid length. [ 517.330675][T12873] veth1_macvtap: left allmulticast mode [ 517.394148][T12870] bond5: (slave gretap1): making interface the new active one [ 517.416909][T12870] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 517.545747][T12877] macvlan3: entered promiscuous mode [ 517.552977][T12877] macvlan3: entered allmulticast mode [ 517.574343][T12877] bond5: entered promiscuous mode [ 517.588917][T12877] gretap1: entered promiscuous mode [ 517.605830][T12877] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 517.627097][T12877] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 517.644669][T12877] bond5: left promiscuous mode [ 517.650210][T12877] gretap1: left promiscuous mode [ 517.693704][ T3475] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.703527][ T3475] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.714758][T12875] wg1 speed is unknown, defaulting to 1000 [ 517.736610][ T3475] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.807239][ T3475] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.833408][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'. [ 517.886167][T12874] dvmrp8: left allmulticast mode [ 518.633776][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 518.653354][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1829'. [ 518.671364][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 518.689065][T12934] netlink: 'syz.3.1829': attribute type 5 has an invalid length. [ 518.859036][T12916] wg1 speed is unknown, defaulting to 1000 [ 519.287171][T12962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1837'. [ 519.302911][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 519.363257][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1837'. [ 519.584059][T12980] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1841'. [ 519.683341][T12983] syzkaller1: entered promiscuous mode [ 519.693210][T12983] syzkaller1: entered allmulticast mode [ 520.021602][T13001] netlink: zone id is out of range [ 520.026805][T13001] netlink: get zone limit has 4 unknown bytes [ 520.041742][T13001] netlink: 'syz.1.1847': attribute type 1 has an invalid length. [ 520.132299][T13009] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 520.605104][T13031] team1: entered promiscuous mode [ 520.611454][T13031] team1: entered allmulticast mode [ 520.617178][T13031] 8021q: adding VLAN 0 to HW filter on device team1 [ 521.196676][T13023] wg1 speed is unknown, defaulting to 1000 [ 521.579496][T13077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.078172][T13104] __nla_validate_parse: 9 callbacks suppressed [ 522.078194][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'. [ 522.568861][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1878'. [ 522.592865][T13117] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1878'. [ 522.663825][T13105] wg1 speed is unknown, defaulting to 1000 [ 523.028630][T13132] ip6tnl0: Caught tx_queue_len zero misconfig [ 523.133759][T13139] netlink: 'syz.2.1883': attribute type 1 has an invalid length. [ 523.143544][T13139] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1883'. [ 523.295455][T13143] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 523.319238][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 523.338004][T13143] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1885'. [ 523.734533][T13165] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1889'. [ 523.749240][T13129] wg1 speed is unknown, defaulting to 1000 [ 523.819207][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1890'. [ 523.849674][T13167] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1890'. [ 523.977735][T13171] netlink: 'syz.2.1892': attribute type 8 has an invalid length. [ 524.234755][T13177] syzkaller0: entered promiscuous mode [ 524.259273][T13177] syzkaller0: entered allmulticast mode [ 524.385412][T13182] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1895'. [ 525.199493][T13198] wg1 speed is unknown, defaulting to 1000 [ 525.249513][T13215] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 535.326894][T13228] __nla_validate_parse: 1 callbacks suppressed [ 535.326916][T13228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1905'. [ 568.375907][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 568.405773][T13246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.587027][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.756352][T13246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.842993][T13246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.307091][T13246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.597372][T13246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 571.066452][T13249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 571.434849][T13249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 571.577217][T13249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 571.926521][T13249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 572.317179][T13249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.775821][ T5831] Bluetooth: hci5: command tx timeout [ 572.886360][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 573.847095][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 573.996134][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 574.567427][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 574.855897][ T5838] Bluetooth: hci5: command tx timeout [ 574.866945][T13254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 575.820490][T13254] Bluetooth: hci6: command tx timeout [ 576.935960][ T5838] Bluetooth: hci5: command tx timeout [ 577.825515][T13254] Bluetooth: hci7: command tx timeout [ 577.896215][T13254] Bluetooth: hci6: command tx timeout [ 578.107364][T13254] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 578.235944][T13254] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 578.566769][T13254] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 579.016092][T13249] Bluetooth: hci5: command tx timeout [ 579.287077][T13249] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 579.627413][T13249] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 579.886774][T13249] Bluetooth: hci7: command tx timeout [ 579.965130][ T5838] Bluetooth: hci6: command tx timeout [ 581.967068][ T5838] Bluetooth: hci7: command tx timeout [ 582.065036][ T5838] Bluetooth: hci6: command tx timeout [ 582.366774][ T5838] Bluetooth: hci8: command tx timeout [ 583.497358][T13221] wg1 speed is unknown, defaulting to 1000 [ 584.045565][ T5838] Bluetooth: hci7: command tx timeout [ 584.446799][ T5838] Bluetooth: hci8: command tx timeout [ 586.525903][ T5838] Bluetooth: hci8: command tx timeout [ 586.635992][T13206] wg1 speed is unknown, defaulting to 1000 [ 588.625371][ T5838] Bluetooth: hci8: command tx timeout [ 595.585396][ T3011] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.826427][ T3011] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.887038][ T3011] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.165310][ T3011] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.904624][T13244] wg1 speed is unknown, defaulting to 1000 [ 611.973961][ T3011] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.276258][ T3011] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.437159][ T3011] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.686042][ T3011] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.836591][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 629.926989][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.176420][T13249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 632.326134][T13249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 632.596749][T13249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.216369][T13249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.474973][T13249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.707064][ T5838] Bluetooth: hci2: command tx timeout [ 638.776175][ T5838] Bluetooth: hci2: command tx timeout [ 639.606943][T13249] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 639.695306][T13249] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 639.956608][T13249] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 640.506473][T13254] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 640.681737][T13254] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 640.856337][T13254] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 640.885728][T13246] Bluetooth: hci2: command tx timeout [ 641.107065][T13246] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 641.373137][T13246] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 641.936820][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 642.157162][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 642.936899][ T5838] Bluetooth: hci2: command tx timeout [ 645.506045][T13249] Bluetooth: hci9: command tx timeout [ 646.956108][T13249] Bluetooth: hci10: command tx timeout [ 647.587396][T13249] Bluetooth: hci9: command tx timeout [ 649.036481][T13249] Bluetooth: hci10: command tx timeout [ 649.654918][T13249] Bluetooth: hci9: command tx timeout [ 651.087015][T13249] Bluetooth: hci10: command tx timeout [ 651.727257][T13249] Bluetooth: hci9: command tx timeout [ 652.726302][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 652.926248][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 653.176909][ T5838] Bluetooth: hci10: command tx timeout [ 653.256426][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 654.194807][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 654.387139][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 657.525268][T13249] Bluetooth: hci11: command tx timeout [ 659.567394][T13249] Bluetooth: hci11: command tx timeout [ 661.655035][T13249] Bluetooth: hci11: command tx timeout [ 663.162972][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.305665][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.626188][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.736204][ T5838] Bluetooth: hci11: command tx timeout [ 664.485735][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 664.556124][ T3011] batman_adv: batadv0: Interface deactivated: gretap1 [ 665.015923][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 667.976397][T13249] Bluetooth: hci4: command tx timeout [ 670.057166][T13249] Bluetooth: hci4: command tx timeout [ 672.135792][T13249] Bluetooth: hci4: command tx timeout [ 674.222967][T13249] Bluetooth: hci4: command tx timeout [ 685.554254][ T3011] batman_adv: batadv0: Removing interface: gretap1 [ 685.915944][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 686.145953][ T5838] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 686.307180][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 687.066826][ T5838] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 687.317224][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 688.217388][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 688.466211][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 688.995646][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 689.506022][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 690.026494][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 690.364887][ T5838] Bluetooth: hci12: command tx timeout [ 691.265893][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 691.355676][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.442930][T13249] Bluetooth: hci12: command tx timeout [ 692.787018][T13249] Bluetooth: hci13: command tx timeout [ 693.414926][T13249] Bluetooth: hci5: command 0x0406 tx timeout [ 694.055605][T13246] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 694.255300][T13246] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 694.416474][ T5838] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 694.535057][ T5838] Bluetooth: hci12: command tx timeout [ 694.715164][ T5838] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 694.846784][ T5838] Bluetooth: hci13: command tx timeout [ 695.226323][ T5838] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 696.604895][T13246] Bluetooth: hci12: command tx timeout [ 696.933073][T13246] Bluetooth: hci13: command tx timeout [ 698.046656][T13246] Bluetooth: hci14: command tx timeout [ 698.447135][T13246] Bluetooth: hci7: command 0x0406 tx timeout [ 698.496171][T13246] Bluetooth: hci6: command 0x0406 tx timeout [ 699.047015][T13246] Bluetooth: hci13: command tx timeout [ 699.582990][T13246] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 699.726529][T13246] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 699.795645][T13246] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 700.076902][T13246] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 700.135925][T13246] Bluetooth: hci14: command tx timeout [ 700.355713][T13246] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 702.206600][T13249] Bluetooth: hci14: command tx timeout [ 703.105252][T13249] Bluetooth: hci15: command tx timeout [ 703.586929][T13249] Bluetooth: hci8: command 0x0406 tx timeout [ 704.305422][T13246] Bluetooth: hci14: command tx timeout [ 705.196002][T13246] Bluetooth: hci15: command tx timeout [ 707.255996][T13246] Bluetooth: hci15: command tx timeout [ 708.676793][T13249] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 708.897141][T13249] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 709.086433][T13249] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 709.345395][ T5838] Bluetooth: hci15: command tx timeout [ 709.707302][T13249] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 709.937249][T13249] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 712.446409][T13249] Bluetooth: hci16: command tx timeout [ 714.526018][T13249] Bluetooth: hci16: command tx timeout [ 716.616334][T13249] Bluetooth: hci16: command tx timeout [ 718.656636][ T3011] bond0 (unregistering): Released all slaves [ 718.696668][T13249] Bluetooth: hci16: command tx timeout [ 725.406928][ T3011] bond1 (unregistering): Released all slaves [ 733.886437][ T3011] bond2 (unregistering): (slave macvlan1): Releasing active interface [ 735.403939][ T3011] veth1_vlan: left allmulticast mode [ 736.026225][ T3011] bond2 (unregistering): Released all slaves [ 737.166511][ T3011] bond3 (unregistering): Released all slaves [ 742.646113][ T3011] tipc: Left network mode [ 748.665679][T13246] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 748.734375][ T3011] IPVS: stopping backup sync thread 12586 ... [ 748.955939][T13246] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 749.237244][T13246] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 749.914734][ T5838] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 750.286196][ T5838] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 752.716340][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 752.785551][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.591763][ T5838] Bluetooth: hci17: command tx timeout [ 755.666245][ T5838] Bluetooth: hci17: command tx timeout [ 757.734576][ T5838] Bluetooth: hci17: command tx timeout [ 758.402824][T13246] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 758.705575][T13246] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 758.766838][T13246] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 759.145416][T13246] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 759.526073][T13246] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 759.815087][T13249] Bluetooth: hci17: command tx timeout [ 759.906629][T13249] Bluetooth: hci2: command 0x0406 tx timeout [ 760.276005][T13254] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 760.387270][ T31] INFO: task syz.1.1903:13221 blocked for more than 143 seconds. [ 760.415690][ T31] Not tainted syzkaller #0 [ 760.436396][T13254] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 760.594423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 760.724556][T13254] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 760.906794][ T31] task:syz.1.1903 state:D stack:23552 pid:13221 tgid:13218 ppid:5824 task_flags:0x400140 flags:0x00080003 [ 761.235707][ T31] Call Trace: [ 761.356007][T13246] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 761.526187][ T31] [ 761.595723][ T31] __schedule+0x1798/0x4cc0 [ 761.695304][ T31] ? __lock_acquire+0xab9/0xd20 [ 761.737250][T13246] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 761.817047][ T31] ? __lock_acquire+0xab9/0xd20 [ 761.865835][ T31] ? __pfx___schedule+0x10/0x10 [ 761.886988][ T31] ? schedule+0x91/0x360 [ 761.955045][ T31] schedule+0x165/0x360 [ 762.115956][ T31] schedule_preempt_disabled+0x13/0x30 [ 762.146164][T13249] Bluetooth: hci18: command tx timeout [ 762.266871][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 762.295714][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 762.436623][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 762.626519][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 762.635672][ T31] ? __lock_acquire+0xab9/0xd20 [ 762.644258][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 762.654018][ T31] down_write+0x1ab/0x1f0 [ 762.661093][ T31] ? __pfx_down_write+0x10/0x10 [ 762.666008][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 762.675149][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 762.714486][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 762.935874][ T31] rdma_dev_exit_net+0x8c/0x340 [ 763.085509][ T31] ? __pfx___might_resched+0x10/0x10 [ 763.196671][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 763.437284][ T31] ? net_generic+0x1e/0x240 [ 763.554706][ T31] ? mutex_is_locked+0x17/0x50 [ 763.786385][ T31] ? rtnl_is_locked+0x15/0x20 [ 763.936257][ T31] ops_undo_list+0x49a/0x990 [ 764.206450][T13246] Bluetooth: hci18: command tx timeout [ 764.293974][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 764.465597][ T31] ? ops_init+0x469/0x5c0 [ 764.806590][ T31] setup_net+0x2d6/0x320 [ 764.976167][ T31] ? __pfx_setup_net+0x10/0x10 [ 765.276108][ T31] ? copy_net_ns+0x337/0x4e0 [ 765.447295][ T31] ? down_read_killable+0x1d1/0x350 [ 765.706400][ T31] ? preinit_net+0x47d/0x740 [ 765.936795][ T31] copy_net_ns+0x34e/0x4e0 [ 766.055401][ T31] create_new_namespaces+0x3f3/0x720 [ 766.243983][ T31] ? security_capable+0x7e/0x2e0 [ 766.285469][T13246] Bluetooth: hci18: command tx timeout [ 766.381550][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 766.392511][ T31] ksys_unshare+0x4c8/0x8c0 [ 766.397176][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 766.405892][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 766.415447][ T31] __x64_sys_unshare+0x38/0x50 [ 766.425671][ T31] do_syscall_64+0xfa/0xfa0 [ 766.433472][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.474475][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.565000][ T31] ? clear_bhb_loop+0x60/0xb0 [ 766.697285][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.826237][ T31] RIP: 0033:0x7f046678eec9 [ 766.956670][ T31] RSP: 002b:00007f046761a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.165341][ T31] RAX: ffffffffffffffda RBX: 00007f04669e6090 RCX: 00007f046678eec9 [ 767.316435][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 767.495588][ T31] RBP: 00007f0466811f91 R08: 0000000000000000 R09: 0000000000000000 [ 767.666871][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.956850][ T31] R13: 00007f04669e6128 R14: 00007f04669e6090 R15: 00007fffb9d8fa78 [ 768.297263][ T31] [ 768.366332][T13322] Bluetooth: hci18: command tx timeout [ 768.594606][ T31] [ 768.594606][ T31] Showing all locks held in the system: [ 768.751328][ T31] 1 lock held by khungtaskd/31: [ 768.756339][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 768.774312][ T31] 7 locks held by kworker/u8:6/3011: [ 768.783761][ T31] 5 locks held by kworker/u8:7/3439: [ 768.794274][ T31] 2 locks held by getty/5585: [ 768.802291][ T31] #0: ffff8880336090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 768.975268][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 769.356921][ T31] 3 locks held by kworker/1:8/7905: [ 769.476317][ T31] 2 locks held by syz.0.1900/13206: [ 769.626224][ T31] #0: ffffffff8f4d2a70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 769.815562][ T31] #1: ffffffff8f24c470 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 [ 769.975790][ T31] 2 locks held by syz.1.1903/13221: [ 770.087157][ T31] #0: ffffffff8f4d2a70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 770.145268][ T5838] Bluetooth: hci10: command 0x0406 tx timeout [ 770.296588][ T5838] Bluetooth: hci9: command 0x0406 tx timeout [ 770.356986][ T31] #1: ffffffff8f24c470 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340