last executing test programs: 9m14.314890368s ago: executing program 1 (id=5901): r0 = socket(0xc, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d0007012b037000fedbdf25067c00000c000180f607b41a7f0000010c000380080001"], 0x2c}}, 0x4008030) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0x90b}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) recvmmsg$unix(r3, &(0x7f0000002f00)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/31, 0x1f}, {&(0x7f0000001380)=""/145, 0x91}], 0x5, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000017c0)=""/89, 0x59}, {&(0x7f0000001840)=""/63, 0x3f}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/119, 0x77}], 0x6}}, {{&(0x7f0000002a80), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/95, 0x5f}, {&(0x7f0000002b80)=""/48, 0x30}], 0x2, &(0x7f0000002c00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/46, 0x2e}, {&(0x7f0000002d00)=""/139, 0x8b}], 0x2, &(0x7f0000002e00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}], 0x4, 0x40, &(0x7f0000003000)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 9m13.786691281s ago: executing program 1 (id=5902): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600803500000c0003000800170004"]}, 0x58}}, 0x0) 9m13.495820139s ago: executing program 1 (id=5904): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000001e00110227bd7000ffdbdf2507000071"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='bic\x00', 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x2, 0xfffffffffffffd14) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvfrom$x25(r2, &(0x7f0000000700)=""/30, 0x1e, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000002030100000000000000000002000000080001000100ac264bc652a28ad3b3125029aa0002090002000000ffff020000000800034000000000080004"], 0x40}}, 0x11) sendmsg$kcm(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x4c, r8, 0x1, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}]}]}, 0x4c}}, 0x0) bind$rxrpc(r6, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYBLOB="acedc26ef808af5b7a57c06f807d79fb136f0f6df26f948c7919a8207d18ccf304c6f210f2d21fadb1457112e313a6e80c1aadec1d53a286ceaaf1be670dfdce43987cc74a8dd97b6b2451c99cf81e7a6138935f8623e2808d63b099cd72304eb4436817563980b6b7f6558e5c905ea65692582438814afbb4a4c433391a84b7e070d3de3af114ddb673f36efe18c26cd7ea49338ba28b0dfc3cecb00c2ee312874e778317a2d1d3800a5b9306e8340d2977e466b67d69ce1b0b5c78024a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000260001012dbd70da7febd6eb5ab94e000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 9m12.296768179s ago: executing program 1 (id=5914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdffb, {0x0, 0x0, 0x0, 0x0, 0x3b89, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfeffff7f, 0x3ff}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x95}, 0x48890) 9m11.543684263s ago: executing program 1 (id=5918): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) 9m11.331925307s ago: executing program 1 (id=5920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000180)='syzkaller0\x00', 0x10001, &(0x7f00000001c0)={@_ha_fsid={[0xffff8128, 0x3ff]}, {0x7f, 0x91, 0x3, 0xf7c1}}, 0x562, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}, {[0x10, 0x4, 0x98c7, 0x6]}, 0x4, 0x55, &(0x7f0000000280)=""/85}) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032dbd7000fedbdf2509000000080006000104000008001000000028000180080008000100000014000300ff02000000000000000000000000000106000200320000000900018008000800090000000800050069530000080006002b0500000000"], 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x20000800) (async) listen(r6, 0x5) (async) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a00001c"], 0x4a) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (rerun: 64) 8m56.30219392s ago: executing program 32 (id=5920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000180)='syzkaller0\x00', 0x10001, &(0x7f00000001c0)={@_ha_fsid={[0xffff8128, 0x3ff]}, {0x7f, 0x91, 0x3, 0xf7c1}}, 0x562, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}, {[0x10, 0x4, 0x98c7, 0x6]}, 0x4, 0x55, &(0x7f0000000280)=""/85}) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032dbd7000fedbdf2509000000080006000104000008001000000028000180080008000100000014000300ff02000000000000000000000000000106000200320000000900018008000800090000000800050069530000080006002b0500000000"], 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x20000800) (async) listen(r6, 0x5) (async) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a00001c"], 0x4a) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (rerun: 64) 29.968488776s ago: executing program 0 (id=7649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r0, 0xf, 0x0, 0xd, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20008805}, 0x24004089) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)={0x50, r4, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0xe, [@link_id={0x65, 0x12, {@random="000000000004", @broadcast}}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x9}}]}]}, 0x50}}, 0x4014080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) vmsplice(r6, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)='\x00', 0x1}, {&(0x7f0000001100)='\x00', 0x1}, {&(0x7f0000000740)="0f9f3f48", 0x4}], 0x4, 0xc) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "c556df85b6f920ed9b92d649463d48c6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6b5dcc5b9cd9d1ec4863a9a2efc318ea"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050002000000000000000a00000008000300", @ANYRES32=r12, @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00110225bd7000ffdbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 28.985378864s ago: executing program 0 (id=7650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x37, 0x3, '\\^]!${{%@:\x00\x1ac\xf9_\xcf\x9f<\n\x9b\xb8\xa4\x1c%\xdcA\xaf\x95\xabb\xf4\xdf\x9c\xe2\xc3\xec\x14\x91\xdd\x99\xd7c&\x9aTgc\xa5\xd7/\xb0'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x80}}, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000200)=""/254, 0xffffbffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000020900010073797a310000000040000000030a01020000000000000000010040000900030073797a300000000014000480080002400000000008000140000000010900010073797a310000000014000000110001"], 0x90}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) r5 = socket$inet(0xa, 0x801, 0x84) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x94, 0x24, 0x605, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x8, 0xe51, 0x0, 0x2, 0x7, 0x2}}, {0x8, 0x2, [0x0, 0x4]}}, {{0x1c, 0x1, {0x7, 0x4e, 0xa67e, 0x4, 0x1, 0x4, 0x10000, 0x2}}, {0x8, 0x2, [0x8cd3, 0x0]}}, {{0x1c, 0x1, {0xd, 0x8, 0x5, 0x7, 0x3, 0xa36, 0x0, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x94}}, 0x0) (async) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) (async) close(r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x57) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000000c0)={0x7, 0xfff, 0x1, 0x0, 0x21b, 0x3, 0x0, &(0x7f0000000040)=[{0x0, 0xfe, 0xaf}, {0xb, 0x101, 0x8}, {0x14, 0x101, 0x5}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000100)={0x2b, 0x3}) poll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x4000}, {r8, 0x1000}, {r1, 0x400}, {0xffffffffffffffff, 0x1561}], 0x5, 0xff000000) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0) 27.11859164s ago: executing program 3 (id=7652): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x10, 0x10}, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000000c0)) (async) r1 = socket(0x3, 0x2, 0xd4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'pimreg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newtfilter={0x2c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xb9580000}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 26.697273359s ago: executing program 3 (id=7653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x0, 0x2, 0x20000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x28) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xffffffff, 0xa9, 0x3, 0x10018, r5, 0x95, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x5, @void, @value, @value=r9}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="81012dbdd48633ff03ee924707b971eeadca4bffffffe4ffbfff9a860b", @ANYRES32=r2, @ANYBLOB="0c009900050000006d0000001c005a801800018014000300080000023e1506000300091006000500"], 0x44}}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x20000084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r13, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r14, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) 26.390794304s ago: executing program 3 (id=7654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000001040100000000000000000002000000050001000100000032c19deab076fef59cc491203ab5d63acba39785153154d10754"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="147806eeed0b02ddc81f000049e6e8c40f4b2bdf520fac00100001000000000000001c000200000a20000000000a010400000000000000000200000a00000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140044800800014000000003080002400000000048000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000001c00048018000180080001006c6f67000c0002800600014000000000140000001100010000"], 0xd0}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) listen(0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000200)=@req={0x8, 0x7, 0xbcd, 0x2f4}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r9, 0x18}, 0x38) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x80d0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000fe3c000000ac1414bb00000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000010000000000000043050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe2eb0000000001000700000000000000000000002cbd7000000000000a00040158000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 26.007310588s ago: executing program 0 (id=7655): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000140081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000001940)={0x46, "3c77723720a6984a7e6b28409386f3d6e1f5582832b6ae9ae669472f6fcc868d5951eb05b1ff2324b3b2864dc7fb6a0a20014818c21fe5534b0379e302ca842509e49c1af2221a2e4eee1eaa107388755f9f399fb5943b27025f0556553b1f5d0249b42f3b3124ad3e7dace55eb56eebbeaedddcb24e1c2761c9d13712c109d3"}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001e00110227bd7000ffdbdf25070000", @ANYRES8=r2, @ANYBLOB='\x00\x00\x00\x00@\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 25.547726441s ago: executing program 0 (id=7657): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x1000001, 0x5020}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0xb, 0x1}, 0x28) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@polexpire={0xc0, 0x1b, 0x31d, 0x70bd28, 0x25dfdbfd, {{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x4e20, 0x1, 0x4e24, 0x404, 0x2, 0x0, 0x0, 0x87}, {0x8, 0x10001, 0xfffffffffffffff4, 0x4, 0x2, 0x41ba, 0x9, 0x80000000}, {0x7fffffff, 0x3, 0x4, 0x8}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, 0x4}}, 0xc0}}, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="228b0a365203", 0x6}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fad535a4000000", 0x60}, {&(0x7f0000000300)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0f79d03bf481fd2bf7c4c084227a9b3951d6e23156c58e8ff86f5a6196efc585d57b8fa2abcd7f2952f7dcf21546acf8e7aafc9162ea1db56c850af0a225d919b0120fd83206ccb82f13d5165ffd3fdc07d89b14be9048e81ebb95bce1fb033", 0xac}], 0x3) (async) write(r0, &(0x7f0000001e00)="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", 0x441) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="280100001700000224bd700000000000ff010000000000000000000000000001000000000000000000000000000000000000ffffe0000002ac1414bb000000000000000000000000ff0200000000000000000000000000014e210000000000000200a06400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000fc02000000000000000000103d97be5e4f9f6c2dd9e00009000000000000000a0080202e00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000100000004000000000000000000000000000000000000000000000000004000000000000000000000000000000000200000200000000f9ffffff3800000000040000fcffffff"], 0x128}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) 24.746239892s ago: executing program 3 (id=7658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) 24.648053953s ago: executing program 2 (id=7659): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000440)="bad386ddc7180869ab2b83b48ae15386fe9a0326ce4d7e34be3a8737ac20e06f5152a01bada58d8a64e81254", 0x2c, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) r4 = socket(0x2b, 0x80801, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000100)) bind$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r4, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x2a6, [0x200000000280, 0x0, 0x0, 0x2000000002b0, 0x2000000002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000900000008000000000c626174616476300000000000000000006e657464657673696d300000000000006970766c616e31000000000000e48600000076657468315f746f5f626f6e64000000aaaaaaaaaabbffff0000ffffffffffffffff7f00010000ffce010000ce010000160200007265616c6d00000000000000000000000000000000000000000000000000000010000000000000000f0000000a0000000000000000000000636f6d6d656e74000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000005a06000000000000060000000000"]}, 0x31e) 24.264230516s ago: executing program 3 (id=7660): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0xffe0}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x3e, 0x2, 0x7, 0x81, 0x6, 0x1}, {0x4, 0x0, 0x48da, 0x1ff, 0x19, 0x8000}, 0x9, 0x0, 0x4, 0x7, 0x1}}]}}]}, 0x60}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 24.062655593s ago: executing program 0 (id=7661): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002021, 0x0, 0xfffffe84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0xbe}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 23.676350778s ago: executing program 2 (id=7662): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000058c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8040) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc3101422ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b3ff070000f2000000cfb77cc869a53447e49f", "ffff0000428dae4ebd4e96f981ffd39d1c000000000000000000c000", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b310d0a21007c3cb8fe4f81000946b000000fba1e81f91b4c1f000", "4e002d9f02000090ac00", 0x1b4, 0x2ace, 0x8000, 0x87d42, 0x80009e}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x8000) 22.806138429s ago: executing program 2 (id=7663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0000000400539ca675731591e2bd1009047e00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x16, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe3d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x8, 0x3, 0x3, 0x3, 0x2}, @ldst={0x1, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffc0, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x40, &(0x7f00000002c0)=""/64, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000300)=[r0], &(0x7f0000000700)=[{0x2, 0x3, 0xa, 0x8}, {0x2, 0x4, 0x9, 0x7}, {0x2, 0x5, 0xf, 0x3}, {0x4, 0x5, 0xa, 0xc}, {0x5, 0x5, 0x8, 0x9}, {0x3, 0x4, 0xb, 0x1}, {0x3, 0x4, 0x4, 0x5}, {0x0, 0x4, 0xf, 0xb}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x3, 0x8, 0x7}], 0x10, 0x2}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async, rerun: 32) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x68, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040002}, 0x40004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x8, &(0x7f00000004c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4, 0x0, 0xffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r9, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}]}, 0x3c}}, 0x40800) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x8, '\x00', 0x0, r6, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r4, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000d40)=[{}], 0x8, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) (async, rerun: 32) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000fc0)=@o_path={&(0x7f0000000f80)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000001000)={0xffffffffffffffff}) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xc, 0x26, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xd, 0x8, 0x2, 0x6, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x3, 0x6, 0x2, 0x37455703010af3f0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0x21, 0x4e, &(0x7f0000000b80)=""/78, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0xd, 0x12c, 0xc6}, 0x10, r11, r12, 0x1, &(0x7f0000001080)=[r0, r13, r0, r1, r14, r1], &(0x7f00000010c0)=[{0x3, 0x2, 0xf, 0x1}], 0x10, 0xb}, 0x94) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060080350000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r16 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r16, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 21.716209932s ago: executing program 0 (id=7664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x500}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) bind$tipc(r6, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0a02, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000f80)={0x281, 0x1}) close(r6) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac141402", 0x18) 21.101764996s ago: executing program 2 (id=7665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x4005094}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) write(r3, &(0x7f0000000000)="2100000000ffffffffaaaaaa00030000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c67705cafdf27e6648b3db78adf0f03b98e9471b8fec37fb45506f21d5036f8818a59bc4142740de947ba12611e9ad971e177a88dd25f2618fec16915e473270993f3866d213df98c2e2dbde", 0x98) 20.338861579s ago: executing program 3 (id=7666): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r4, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xc) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r4, 0x5}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r5}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) (async) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) (async) 19.982628255s ago: executing program 2 (id=7667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2c, 0x3, 0x0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r3, 0x401, 0x70bd2d, 0x25dfdbfa, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000006b030000000000001d400500000000004704000001ed00007203020000ffffffbf44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0x8}, 0x1c) 19.789066437s ago: executing program 2 (id=7668): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x4008010) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0xf}, {0x0, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x20000000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000440), 0x4) getsockopt$bt_hci(r4, 0x84, 0x20, &(0x7f0000002140)=""/4105, &(0x7f0000001080)=0x1009) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r12, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x6) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024080003400000004408000f400bdf0002140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000040000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a4cf3ffff050a010400000000000000000a0000020900010073797a3100000000200004801c0001800a00010072616e67650000000c00028008000140000000010900027e32baf4aedc6c2a107d8522821100010000000400000000000000000aa247593d0810ba9fb6bc57f725504c18d076335c91277f1eed3533674325ae10944adde21ddd37497bcaec96c153d0b45a9d"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040040) socket$nl_netfilter(0x10, 0x3, 0xc) 5.834554864s ago: executing program 33 (id=7664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x500}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) bind$tipc(r6, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0a02, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000f80)={0x281, 0x1}) close(r6) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac141402", 0x18) 3.364305608s ago: executing program 34 (id=7666): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r4, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xc) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r4, 0x5}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r5}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) (async) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) (async) 0s ago: executing program 35 (id=7668): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x4008010) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0xf}, {0x0, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x20000000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000440), 0x4) getsockopt$bt_hci(r4, 0x84, 0x20, &(0x7f0000002140)=""/4105, &(0x7f0000001080)=0x1009) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r12, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x6) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024080003400000004408000f400bdf0002140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000040000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a4cf3ffff050a010400000000000000000a0000020900010073797a3100000000200004801c0001800a00010072616e67650000000c00028008000140000000010900027e32baf4aedc6c2a107d8522821100010000000400000000000000000aa247593d0810ba9fb6bc57f725504c18d076335c91277f1eed3533674325ae10944adde21ddd37497bcaec96c153d0b45a9d"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040040) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): sctp_assoc_value in delayed_ack socket option. [ 846.094549][T24578] Use struct sctp_sack_info instead [ 846.605920][T24594] tipc: Resetting bearer [ 848.604540][T24621] ip_tables: iptables: counters copy to user failed while replacing table [ 849.763237][T24636] netlink: 'syz.1.5647': attribute type 1 has an invalid length. [ 849.942084][T24636] 8021q: adding VLAN 0 to HW filter on device bond29 [ 850.081531][T24639] bond29: (slave geneve4): making interface the new active one [ 850.146376][T24639] bond29: (slave geneve4): Enslaving as an active interface with an up link [ 850.266188][T19085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.279653][ T5643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.280117][ T5643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.972448][T24646] syzkaller1: entered promiscuous mode [ 850.972924][T24646] syzkaller1: entered allmulticast mode [ 852.420945][T24648] policy can only be matched on NF_INET_PRE_ROUTING [ 852.421112][T24648] unable to load match [ 853.449470][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5653'. [ 853.469949][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5653'. [ 854.945825][T24672] ip_tables: iptables: counters copy to user failed while replacing table [ 857.607914][T24701] nft_compat: unsupported protocol 0 [ 858.919754][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5674'. [ 861.593076][T24727] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 861.682382][T24729] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 862.045659][T24745] SET target dimension over the limit! [ 862.689729][T24748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5679'. [ 862.748947][T24750] openvswitch: netlink: IP tunnel dst address not specified [ 863.964141][T24765] netlink: 'syz.0.5686': attribute type 1 has an invalid length. [ 867.868047][T24797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5695'. [ 868.005466][T24799] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 868.654048][T24808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5699'. [ 868.879629][T24806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5699'. [ 869.234754][T24817] syzkaller0: left promiscuous mode [ 869.234836][T24817] syzkaller0: left allmulticast mode [ 869.259296][T24817] tipc: Resetting bearer [ 869.650481][ T6236] IPVS: starting estimator thread 0... [ 869.670527][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 869.735067][T24832] IPVS: using max 81 ests per chain, 194400 per kthread [ 870.111409][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.295653][T24855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5716'. [ 871.347526][T24855] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5716'. [ 871.548896][T24861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5717'. [ 873.289970][T24870] bond1: invalid ARP target 0.0.0.0 specified for addition [ 873.289984][T24870] bond1: option arp_ip_target: invalid value (0) [ 873.327339][T24870] bond1 (unregistering): Released all slaves [ 873.401166][T24877] netlink: 'syz.1.5721': attribute type 4 has an invalid length. [ 873.477478][T24879] syzkaller1: entered promiscuous mode [ 873.478013][T24879] syzkaller1: entered allmulticast mode [ 873.734218][T24884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5722'. [ 874.983486][T24898] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5725'. [ 875.306481][T24911] nbd: must specify a size in bytes for the device [ 875.307439][T24911] ipt_REJECT: TCP_RESET invalid for non-tcp [ 877.137749][T24941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5734'. [ 877.997142][T24956] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 878.219784][T24959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 879.516681][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5743'. [ 879.519288][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5743'. [ 881.172526][T25002] Failure starting scanning (-16) [ 881.436443][T25013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5756'. [ 882.019505][T25022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5761'. [ 884.531651][T25042] netlink: 'syz.1.5769': attribute type 2 has an invalid length. [ 886.293698][T25053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5773'. [ 887.515685][T25065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5777'. [ 887.717320][T25068] syzkaller0: entered promiscuous mode [ 887.717877][T25068] syzkaller0: entered allmulticast mode [ 887.761299][T25072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5779'. [ 888.281465][T25076] IPVS: Unknown mcast interface: lo [ 889.208425][T25085] ip6t_srh: unknown srh invflags 4000 [ 892.531167][T25114] netlink: 3568 bytes leftover after parsing attributes in process `syz.1.5794'. [ 892.832667][T25119] netlink: 'syz.1.5796': attribute type 1 has an invalid length. [ 893.353609][T25126] syzkaller1: entered promiscuous mode [ 893.353623][T25126] syzkaller1: entered allmulticast mode [ 893.424914][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5800'. [ 894.152556][T25134] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5801'. [ 894.245094][T25135] syzkaller1: entered promiscuous mode [ 894.245189][T25135] syzkaller1: entered allmulticast mode [ 894.282701][T25134] syzkaller0: entered promiscuous mode [ 894.282809][T25134] syzkaller0: entered allmulticast mode [ 894.283659][T25134] tipc: Resetting bearer [ 894.960084][T25145] Bluetooth: hci0: unsupported parameter 5135 [ 894.960147][T25145] Bluetooth: hci0: unsupported parameter 8192 [ 894.960153][T25145] Bluetooth: hci0: unsupported parameter 5135 [ 894.960158][T25145] Bluetooth: hci0: unsupported parameter 8192 [ 895.429725][T25147] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5805'. [ 895.600228][T25147] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5805'. [ 896.394145][T25161] netlink: 'syz.1.5809': attribute type 1 has an invalid length. [ 896.598523][T25161] bond30: entered promiscuous mode [ 896.607437][T25161] 8021q: adding VLAN 0 to HW filter on device bond30 [ 898.050596][T25183] smbdirect: ib_dev[syz2] removed [ 898.217716][T25185] syzkaller1: entered promiscuous mode [ 898.217975][T25185] syzkaller1: entered allmulticast mode [ 898.404060][T25197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 898.727233][T25203] mac80211_hwsim hwsim20 : renamed from wlan1 [ 899.012478][T25207] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5824'. [ 899.397003][T25223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5827'. [ 900.284371][T25242] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 900.355400][T25246] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 901.318741][ T54] Bluetooth: hci1: link tx timeout [ 901.319958][ T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.087101][ T54] Bluetooth: hci1: link tx timeout [ 902.087148][ T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.115425][ T54] Bluetooth: hci1: link tx timeout [ 902.115486][ T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.619742][ T54] Bluetooth: hci1: link tx timeout [ 902.619805][ T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.702159][ T54] Bluetooth: hci1: link tx timeout [ 902.702222][ T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 903.383419][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 903.639881][ T54] Bluetooth: hci1: link tx timeout [ 904.684151][T25315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5848'. [ 904.814159][T25309] tipc: Enabling of bearer rejected, already enabled [ 904.843411][T25309] syzkaller0: mtu less than device minimum [ 905.429417][T25334] netlink: 'syz.1.5851': attribute type 1 has an invalid length. [ 905.436473][T25335] netlink: 'syz.1.5851': attribute type 1 has an invalid length. [ 905.619549][T25334] 8021q: adding VLAN 0 to HW filter on device bond31 [ 905.700693][T25335] openvswitch: netlink: Missing key (keys=50, expected=80) [ 905.704304][T25334] openvswitch: netlink: Missing key (keys=50, expected=80) [ 905.768484][T25343] veth1: entered promiscuous mode [ 905.768546][T25343] veth1: entered allmulticast mode [ 906.056165][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5856'. [ 906.056451][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5856'. [ 906.622407][T25352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.631281][T25352] sctp: [Deprecated]: syz.0.5857 (pid 25352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.631281][T25352] Use struct sctp_sack_info instead [ 906.633804][T25352] sctp: [Deprecated]: syz.0.5857 (pid 25352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.633804][T25352] Use struct sctp_sack_info instead [ 906.908870][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5858'. [ 906.908896][T25356] netlink: 'syz.2.5858': attribute type 30 has an invalid length. [ 906.935467][T25356] vxlan2: entered promiscuous mode [ 906.935954][T25356] vxlan2: entered allmulticast mode [ 906.961913][T19085] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.961939][T19085] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.961951][T19085] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.961963][T19085] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.963511][T25356] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5858'. [ 907.453454][T25363] netlink: 'syz.1.5861': attribute type 1 has an invalid length. [ 907.769529][T25363] 8021q: adding VLAN 0 to HW filter on device bond32 [ 907.950444][T25370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5863'. [ 908.036084][T25370] syzkaller1: entered promiscuous mode [ 908.036609][T25370] syzkaller1: entered allmulticast mode [ 908.418471][T25387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5867'. [ 908.418489][T25387] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 908.515468][T25388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.687255][T25390] Failure starting scanning (-16) [ 908.821651][T25396] netlink: 'syz.0.5869': attribute type 1 has an invalid length. [ 908.935251][T25396] bond1: entered promiscuous mode [ 908.936558][T25396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 909.169085][T25399] veth3: entered allmulticast mode [ 909.205255][T25399] bond1: (slave veth3): making interface the new active one [ 909.205464][T25399] veth3: entered promiscuous mode [ 909.225149][T25399] bond1: (slave veth3): Enslaving as an active interface with an up link [ 909.770731][T25403] bridge_slave_1: left promiscuous mode [ 910.464610][T25412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5873'. [ 911.448876][T25416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5875'. [ 912.906202][T25438] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5884'. [ 912.996986][T25443] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5882'. [ 912.997085][T25443] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5882'. [ 914.212786][T25458] ip_tables: iptables: counters copy to user failed while replacing table [ 914.256962][T25460] ip_tables: iptables: counters copy to user failed while replacing table [ 915.052229][T25468] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5888'. [ 917.369105][T25499] netlink: 'syz.2.5894': attribute type 1 has an invalid length. [ 917.609494][T25501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5894'. [ 920.551322][T25499] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 920.672383][T25521] ip_tables: iptables: counters copy to user failed while replacing table [ 920.686695][T25521] x_tables: ip_tables: osf match: only valid for protocol 6 [ 921.341618][T25535] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 921.417942][T25538] netlink: 'syz.1.5901': attribute type 1 has an invalid length. [ 921.417960][T25538] netlink: 'syz.1.5901': attribute type 1 has an invalid length. [ 921.943227][T25542] openvswitch: netlink: Duplicate or invalid key (type 0). [ 922.083883][T25544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5904'. [ 922.227566][T25549] openvswitch: netlink: Message has 4 unknown bytes. [ 922.329409][T25555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5906'. [ 923.213889][T25570] syzkaller1: entered promiscuous mode [ 923.214545][T25570] syzkaller1: entered allmulticast mode [ 923.645869][T25573] gretap0: entered allmulticast mode [ 923.896433][T25579] netlink: 'syz.0.5917': attribute type 2 has an invalid length. [ 923.896444][T25579] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5917'. [ 924.314942][T25591] syzkaller0: left promiscuous mode [ 924.315313][T25591] syzkaller0: left allmulticast mode [ 924.319399][T25591] tipc: Resetting bearer [ 927.122211][T25633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5931'. [ 927.122223][T25633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5931'. [ 927.122236][T25633] netlink: 'syz.2.5931': attribute type 11 has an invalid length. [ 927.123553][T25633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5931'. [ 927.123561][T25633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5931'. [ 927.123570][T25633] netlink: 'syz.2.5931': attribute type 11 has an invalid length. [ 927.610496][T25640] syzkaller1: entered promiscuous mode [ 927.610558][T25640] syzkaller1: entered allmulticast mode [ 931.552733][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.829071][T25679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5945'. [ 931.829246][T25679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5945'. [ 931.869441][T25679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5945'. [ 931.869581][T25679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5945'. [ 932.154608][T25682] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 933.044789][T25695] Cannot find set identified by id 0 to match [ 933.110495][T25695] x_tables: duplicate underflow at hook 1 [ 933.248234][T25697] syzkaller0: left promiscuous mode [ 933.248295][T25697] syzkaller0: left allmulticast mode [ 933.258520][T25697] 8021q: VLANs not supported on syzkaller0 [ 935.265741][T25711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5955'. [ 935.790547][T25714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5956'. [ 937.944276][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5961'. [ 938.781378][T25753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5964'. [ 939.830418][T25767] syzkaller0: entered promiscuous mode [ 939.830911][T25767] syzkaller0: entered allmulticast mode [ 939.859903][T23545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 939.884591][T23545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 939.896051][T23545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 939.951340][T23545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 939.963887][T23545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 941.676191][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5972'. [ 942.021056][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5972'. [ 942.074171][T25788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5972'. [ 942.103530][T23545] Bluetooth: hci3: command tx timeout [ 942.847135][T25785] gretap0: entered allmulticast mode [ 944.184632][T23545] Bluetooth: hci3: command tx timeout [ 944.788031][T25814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5977'. [ 945.396032][T25816] macvlan2: entered promiscuous mode [ 945.396094][T25816] macvlan2: entered allmulticast mode [ 945.398907][T25816] bond3: entered promiscuous mode [ 945.409800][T25816] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 945.419491][T25816] bond3: left promiscuous mode [ 945.937047][T25768] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.952039][T25768] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.952596][T25768] bridge_slave_0: entered allmulticast mode [ 945.958989][T25768] bridge_slave_0: entered promiscuous mode [ 945.988078][T25768] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.999175][T25768] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.999845][T25768] bridge_slave_1: entered allmulticast mode [ 946.008115][T25768] bridge_slave_1: entered promiscuous mode [ 946.262407][T23545] Bluetooth: hci3: command tx timeout [ 946.329347][T25768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.354677][T25768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.399839][T25829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'. [ 946.471495][T25768] team0: Port device team_slave_0 added [ 946.487057][T25768] team0: Port device team_slave_1 added [ 946.573352][T25768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.573365][T25768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.573382][T25768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.579287][T25768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.579295][T25768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.579305][T25768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.637420][T25831] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 946.775712][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5982'. [ 946.942053][T25768] hsr_slave_0: entered promiscuous mode [ 946.947405][T25768] hsr_slave_1: entered promiscuous mode [ 946.950872][T25768] debugfs: 'hsr0' already exists in 'hsr' [ 946.950887][T25768] Cannot create hsr debugfs directory [ 948.344033][T23545] Bluetooth: hci3: command tx timeout [ 949.109019][T25768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 949.396730][T25768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.452191][T25768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 949.457210][T25851] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3040 [ 949.480743][T25768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.498023][T25768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 949.532125][T25768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.536082][T25768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 949.575882][T25768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 949.577921][T25851] : renamed from dummy0 (while UP) [ 950.085556][T25863] dvmrp8: entered allmulticast mode [ 951.010609][T25768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.263282][T25768] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.351067][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.352845][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.458264][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.460325][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.368503][T25875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 952.385866][T25875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 952.404497][T25875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 952.410588][T25875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 952.411867][T25875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 952.617620][T25878] netlink: 'syz.2.5994': attribute type 21 has an invalid length. [ 952.617633][T25878] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5994'. [ 952.617659][T25878] netlink: 'syz.2.5994': attribute type 4 has an invalid length. [ 952.617664][T25878] netlink: 'syz.2.5994': attribute type 3 has an invalid length. [ 952.617669][T25878] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5994'. [ 952.793005][T25878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5994'. [ 953.593665][T25892] syzkaller0: left promiscuous mode [ 953.594148][T25892] syzkaller0: left allmulticast mode [ 954.206636][T25904] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6000'. [ 954.260527][T25905] syzkaller1: entered promiscuous mode [ 954.261145][T25905] syzkaller1: entered allmulticast mode [ 954.674599][T25768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.929402][T25910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6001'. [ 955.207589][T25768] veth0_vlan: entered promiscuous mode [ 955.257203][T25768] veth1_vlan: entered promiscuous mode [ 955.575244][T25768] veth0_macvtap: entered promiscuous mode [ 955.731901][T25768] veth1_macvtap: entered promiscuous mode [ 955.966334][T25768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.021013][T25768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.134014][ T5623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.134598][ T5623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.134759][ T5623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.134826][ T5623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.227928][T25925] sctp: [Deprecated]: syz.0.6005 (pid 25925) Use of int in max_burst socket option deprecated. [ 956.227928][T25925] Use struct sctp_assoc_value instead [ 956.819702][ T6240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.819763][ T6240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.249657][ T7810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.249682][ T7810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.940614][T25943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5966'. [ 957.978231][T25946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5966'. [ 958.187976][T25948] ip6t_hbh: unknown flags AD [ 958.642773][T25951] ip_tables: iptables: counters copy to user failed while replacing table [ 958.778727][T25957] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6013'. [ 959.973000][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6015'. [ 960.059313][T25968] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 960.856077][T25983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6018'. [ 961.475604][T25996] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6021'. [ 962.706964][T26014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6024'. [ 964.712011][T26035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.855123][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6028'. [ 964.855271][T26036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6028'. [ 964.884127][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6028'. [ 964.884144][T26037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6028'. [ 966.194580][T26042] SET target dimension over the limit! [ 966.420723][T26042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6030'. [ 966.637190][T23545] Bluetooth: hci1: link tx timeout [ 966.637486][T23545] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 967.245814][T26056] netlink: 'syz.2.6034': attribute type 10 has an invalid length. [ 968.678414][T23545] Bluetooth: hci1: command 0x0406 tx timeout [ 969.287090][T26067] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 969.287160][T26067] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 969.287226][T26067] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 969.414457][T26068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6037'. [ 969.614643][T26067] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 970.064607][T26086] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6038'. [ 970.136652][T26086] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 970.208981][T26086] 0ªî{X¹¦: entered allmulticast mode [ 970.209445][T26086] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 971.071959][T26066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.501031][T26098] netlink: 'syz.3.6040': attribute type 4 has an invalid length. [ 971.578127][T26101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6040'. [ 972.830519][T26129] openvswitch: netlink: Flow actions attr not present in new flow. [ 975.736365][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.736484][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.736594][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.736707][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.736815][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.736927][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.737032][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.737209][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.737325][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 975.737436][T26158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 977.205562][T26175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6058'. [ 977.408723][T26180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6059'. [ 978.024525][T26195] xt_nat: multiple ranges no longer supported [ 978.397924][T26206] netlink: 'syz.3.6060': attribute type 8 has an invalid length. [ 978.880713][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6066'. [ 978.881040][T26214] syzkaller0: Caught tx_queue_len zero misconfig [ 980.604003][T26183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 981.737273][T26245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6073'. [ 983.683593][T26272] syzkaller0: entered promiscuous mode [ 983.683659][T26272] syzkaller0: entered allmulticast mode [ 984.096552][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6084'. [ 984.177096][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6082'. [ 985.195758][T26297] net_ratelimit: 44 callbacks suppressed [ 985.195820][T26297] netlink: Setting conntrack mark requires 'commit' flag. [ 985.195916][T26297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.345869][T26300] netlink: 424 bytes leftover after parsing attributes in process `syz.0.6089'. [ 985.345886][T26300] netlink: 424 bytes leftover after parsing attributes in process `syz.0.6089'. [ 985.907963][T26312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6093'. [ 986.097884][T26316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6096'. [ 986.116493][T26313] gretap1: entered promiscuous mode [ 986.140782][T26317] syzkaller1: entered promiscuous mode [ 986.141300][T26317] syzkaller1: entered allmulticast mode [ 986.638567][T26325] pimreg: entered allmulticast mode [ 986.684645][T26324] dvmrp8: entered allmulticast mode [ 986.696272][T26320] pimreg: left allmulticast mode [ 989.757028][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'. [ 990.131130][T26350] netlink: 'syz.3.6105': attribute type 1 has an invalid length. [ 990.131191][T26350] netlink: 'syz.3.6105': attribute type 2 has an invalid length. [ 990.999792][T26371] syzkaller0: entered promiscuous mode [ 990.999804][T26371] syzkaller0: entered allmulticast mode [ 991.937463][T26382] netlink: 'syz.3.6110': attribute type 1 has an invalid length. [ 991.937481][T26382] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.6110'. [ 993.000273][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.348265][T26405] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 994.442020][T26410] netlink: 'syz.3.6117': attribute type 1 has an invalid length. [ 994.593936][T26413] ip_tables: iptables: counters copy to user failed while replacing table [ 995.216414][T26422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6122'. [ 996.855330][T26443] netlink: 'syz.2.6129': attribute type 5 has an invalid length. [ 996.855393][T26443] netlink: 'syz.2.6129': attribute type 4 has an invalid length. [ 996.937635][T26445] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 996.939724][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 997.884407][T26460] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6134'. [ 999.351644][T26479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6140'. [ 999.552766][T26485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6142'. [ 999.696502][T26488] tipc: Started in network mode [ 999.696725][T26488] tipc: Node identity 76323d99ce67, cluster identity 4711 [ 999.722252][T26488] tipc: Enabled bearer , priority 20 [ 1000.045293][T26499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1000.045510][T26499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1000.046535][T26499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1000.046669][T26499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1000.057782][T26498] syzkaller1: entered promiscuous mode [ 1000.058266][T26498] syzkaller1: entered allmulticast mode [ 1000.110035][T26499] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1000.145910][T26498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1000.171215][T26498] netlink: NAT attribute has 4 unknown bytes [ 1000.171232][T26498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1000.977860][T21461] tipc: Node number set to 3092594073 [ 1001.640723][T26508] Cannot find set identified by id 0 to match [ 1001.744492][T26508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.788234][T26508] batadv_slave_0: entered promiscuous mode [ 1002.168292][T26514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1003.595378][T26544] pimreg1: entered promiscuous mode [ 1004.202029][T26550] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6163'. [ 1005.136768][T26562] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6166'. [ 1006.640959][T26595] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6172'. [ 1006.673068][T26596] syzkaller1: entered promiscuous mode [ 1006.673557][T26596] syzkaller1: entered allmulticast mode [ 1006.702630][T26597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1006.722430][T26597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6173'. [ 1006.722492][T26597] openvswitch: netlink: Flow actions attr not present in new flow. [ 1007.678498][T26608] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6177'. [ 1007.989212][T26613] netlink: 'syz.3.6179': attribute type 3 has an invalid length. [ 1008.662057][T23545] Bluetooth: hci3: command 0x0405 tx timeout [ 1009.999986][T26632] netlink: 'syz.2.6186': attribute type 1 has an invalid length. [ 1010.624887][T26632] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1010.648650][T26634] bond26: entered promiscuous mode [ 1010.648737][T26634] bond26: entered allmulticast mode [ 1010.769138][T26639] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1010.896126][T26641] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1010.946774][T26638] syzkaller0: Caught tx_queue_len zero misconfig [ 1011.735925][T26646] geneve0: entered allmulticast mode [ 1013.023936][T26652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1014.103105][T26671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6198'. [ 1014.787994][T26677] bridge0: entered allmulticast mode [ 1014.894030][T26677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1014.919470][T26678] netlink: NAT attribute has 8 unknown bytes [ 1014.919800][T26678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.955205][T26706] netlink: 'syz.2.6206': attribute type 21 has an invalid length. [ 1016.955270][T26706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6206'. [ 1018.113459][T26724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1018.113518][T26724] IPv6: NLM_F_CREATE should be set when creating new route [ 1018.976035][T26744] IPVS: set_ctl: invalid protocol: 130 0.0.0.0:21 [ 1019.806763][T26759] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6221'. [ 1019.806894][T26759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6221'. [ 1021.060323][T26777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6229'. [ 1024.120937][T26784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1025.384826][T26829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6241'. [ 1026.217404][T26857] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1026.804264][T26861] ip6tnl6: entered allmulticast mode [ 1026.947644][T26861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6250'. [ 1027.096037][T26861] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6250'. [ 1027.106350][T26402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1027.285400][T26402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1027.382796][T19085] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1027.675715][ T34] audit: type=1800 audit(1790425507.351:16): pid=26874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6253" name="memory.events" dev="tmpfs" ino=1212 res=0 errno=0 [ 1028.445081][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1028.456280][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1029.247668][T15721] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1030.628992][T26920] syzkaller1: entered promiscuous mode [ 1030.629247][T26920] syzkaller1: entered allmulticast mode [ 1031.263881][T26924] xt_connbytes: Forcing CT accounting to be enabled [ 1031.264013][T26924] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1031.546099][T26943] sctp: [Deprecated]: syz.2.6273 (pid 26943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1031.546099][T26943] Use struct sctp_sack_info instead [ 1031.786714][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.787037][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.787215][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.788054][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.788356][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.788918][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.789147][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.789497][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.789893][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1031.790717][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1032.431718][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1032.525716][T26959] Cannot find del_set index 17 as target [ 1038.882620][T27035] veth7: entered allmulticast mode [ 1039.066158][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1040.991737][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1041.160679][T27067] __nla_validate_parse: 57 callbacks suppressed [ 1041.160695][T27067] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6305'. [ 1041.260081][T27067] syzkaller1: entered promiscuous mode [ 1041.260166][T27067] syzkaller1: entered allmulticast mode [ 1043.295908][T27087] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6310'. [ 1043.557899][T27092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6312'. [ 1044.275119][T27106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6316'. [ 1044.470842][T27108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 1044.598484][T27103] syzkaller0: entered promiscuous mode [ 1044.613195][T27103] syzkaller0: entered allmulticast mode [ 1048.029649][T27111] smc: net device lo applied user defined pnetid SYZ0 [ 1048.610360][T27121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.700789][T27121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1048.701000][T27121] macvlan0: entered promiscuous mode [ 1048.747486][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1049.191330][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1050.453103][T27130] tipc: Failed to remove unknown binding: 66,1,1/0:1381721904/1381721906 [ 1050.964405][T27141] syzkaller1: entered promiscuous mode [ 1050.964889][T27141] syzkaller1: entered allmulticast mode [ 1051.525354][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.527810][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.528541][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.529316][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.529814][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.530541][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.531153][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.532013][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1051.532688][T27151] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1053.006546][T27173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6338'. [ 1054.252093][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6346'. [ 1054.252117][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6346'. [ 1054.442383][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.313184][T27208] netlink: 'syz.3.6349': attribute type 1 has an invalid length. [ 1055.684907][T27208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1056.234873][T27220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6352'. [ 1056.502451][T27218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1056.981785][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1059.287974][T27255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6363'. [ 1059.805066][T27263] net_ratelimit: 46 callbacks suppressed [ 1059.805129][T27263] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1060.489898][T27274] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1060.490029][T27274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1061.878392][T27293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6376'. [ 1062.001593][T27296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6375'. [ 1062.288061][T27296] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6375'. [ 1062.911043][T27312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1063.506643][T27322] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6382'. [ 1063.518243][T27322] syzkaller1: entered promiscuous mode [ 1063.518721][T27322] syzkaller1: entered allmulticast mode [ 1064.004017][T27330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1065.119212][T27349] erspan0: entered promiscuous mode [ 1066.132568][T27348] erspan0: left promiscuous mode [ 1066.571500][T27365] netlink: 'syz.3.6396': attribute type 12 has an invalid length. [ 1066.587510][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6396'. [ 1068.448252][T27386] netlink: 'syz.2.6400': attribute type 3 has an invalid length. [ 1069.744653][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1070.251066][T27396] netlink: 'syz.0.6403': attribute type 21 has an invalid length. [ 1070.251078][T27396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1070.251111][T27396] netlink: 'syz.0.6403': attribute type 4 has an invalid length. [ 1070.251116][T27396] netlink: 'syz.0.6403': attribute type 5 has an invalid length. [ 1070.251121][T27396] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1070.318006][T27398] x_tables: duplicate underflow at hook 2 [ 1070.993702][T27403] netlink: 'syz.3.6408': attribute type 1 has an invalid length. [ 1071.320440][T27406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1071.323727][T27406] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1071.370216][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1072.039885][T27418] ip_tables: iptables: counters copy to user failed while replacing table [ 1072.921471][T27433] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1073.412529][T27440] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1073.434405][T27440] gre0: entered allmulticast mode [ 1073.506865][T27442] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6420'. [ 1074.260104][T27451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1075.503158][T27474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6428'. [ 1075.767252][T27479] syzkaller0: left promiscuous mode [ 1075.767793][T27479] syzkaller0: left allmulticast mode [ 1076.450410][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1076.451502][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1076.452250][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1076.453255][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1076.468118][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1076.469127][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1076.470122][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1076.471123][T27491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1079.348887][T27532] __nla_validate_parse: 25 callbacks suppressed [ 1079.349013][T27532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6443'. [ 1079.798015][T27541] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 1080.369050][T27546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1080.387891][T27550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1080.498058][T27555] ip_tables: iptables: counters copy to user failed while replacing table [ 1081.573210][T27564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6451'. [ 1081.573345][T27564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6451'. [ 1085.379693][T27596] syzkaller0: entered promiscuous mode [ 1085.379836][T27596] syzkaller0: entered allmulticast mode [ 1085.417908][T27596] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1085.469934][T27596] syzkaller0: mtu less than device minimum [ 1086.207435][T27614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6465'. [ 1089.621736][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1089.831299][T27632] netlink: 'syz.2.6469': attribute type 2 has an invalid length. [ 1089.832125][T27632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6469'. [ 1090.292033][T27630] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1092.733380][T27665] syzkaller0: entered promiscuous mode [ 1092.740400][T27665] syzkaller0: entered allmulticast mode [ 1094.443863][T27675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6481'. [ 1094.448651][ C0] vxcan1: j1939_session_tx_dat: 0xffff88801d1f4400: queue data error: -100 [ 1097.235611][T27714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6493'. [ 1097.558007][T27680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1097.961142][T27718] netlink: 'syz.3.6495': attribute type 5 has an invalid length. [ 1100.551548][ T9503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.552611][ T9503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.668816][T27732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.865504][T27749] netlink: ct family unspecified [ 1101.865519][T27749] openvswitch: netlink: Actions may not be safe on all matching packets [ 1101.948494][T27747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6504'. [ 1102.029858][T27751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1102.135969][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 1102.158350][T27753] netlink: 5000 bytes leftover after parsing attributes in process `syz.3.6505'. [ 1102.158437][T27753] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1102.167055][T27749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.197401][T27754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6504'. [ 1102.212875][T27753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6505'. [ 1102.326673][T27747] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6504'. [ 1102.399610][T27747] netlink: 'syz.2.6504': attribute type 16 has an invalid length. [ 1102.399629][T27747] netlink: 'syz.2.6504': attribute type 17 has an invalid length. [ 1102.416730][T27747] 0ªî{X¹¦: left allmulticast mode [ 1102.599884][T27747] veth1: left promiscuous mode [ 1102.600367][T27747] veth1: left allmulticast mode [ 1103.047663][T27747] tipc: Resetting bearer [ 1103.078758][T27747] syzkaller0: left promiscuous mode [ 1103.078853][T27747] syzkaller0: left allmulticast mode [ 1103.187975][T27747] vxlan2: left promiscuous mode [ 1103.188170][T27747] vxlan2: left allmulticast mode [ 1103.745672][T27747] bond26: left promiscuous mode [ 1103.745934][T27747] bond26: left allmulticast mode [ 1103.746688][T27747] ip6tnl6: left allmulticast mode [ 1104.076217][T19085] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.076569][T19085] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.076645][T19085] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.106219][ T5623] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.796428][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6512'. [ 1105.804500][T27771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6512'. [ 1105.835707][T27771] netlink: 'syz.0.6512': attribute type 16 has an invalid length. [ 1105.835719][T27771] netlink: 'syz.0.6512': attribute type 17 has an invalid length. [ 1106.578653][T27771] gretap0: left allmulticast mode [ 1107.533258][T27771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.533600][T27771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.217649][T27771] batadv_slave_0: left promiscuous mode [ 1110.370354][T27771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.977060][T27771] tipc: Resetting bearer [ 1110.981458][T27771] tipc: Resetting bearer [ 1111.712241][T27771] macvlan0: left promiscuous mode [ 1112.729092][T27771] geneve0: left allmulticast mode [ 1113.660748][T27771] bond1: left promiscuous mode [ 1113.660880][T27771] veth3: left promiscuous mode [ 1113.771518][T27771] veth3: left allmulticast mode [ 1113.996243][T27771] gretap1: left promiscuous mode [ 1114.078027][T27771] pimreg1: left promiscuous mode [ 1114.514810][T22475] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.515331][T22475] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.515472][T22475] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.515659][T22475] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.376892][T27797] syzkaller0: entered promiscuous mode [ 1115.377166][T27797] syzkaller0: entered allmulticast mode [ 1115.869421][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.959033][T27829] ip_tables: iptables: counters copy to user failed while replacing table [ 1120.503951][T27858] netlink: 'syz.3.6531': attribute type 1 has an invalid length. [ 1120.503964][T27858] netlink: 'syz.3.6531': attribute type 2 has an invalid length. [ 1120.503971][T27858] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6531'. [ 1120.612675][T27859] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6530'. [ 1122.128823][T27876] Unknown options in mask 6 [ 1122.287939][T27879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6535'. [ 1123.134565][T27892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6538'. [ 1123.155471][T27891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6538'. [ 1123.345327][T27897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6539'. [ 1123.466584][T27541] IPVS: ip_vs_send_async error -101 [ 1123.675844][T27905] netlink: 'syz.2.6542': attribute type 1 has an invalid length. [ 1123.893840][T27908] netlink: 'syz.3.6543': attribute type 1 has an invalid length. [ 1124.406140][T27901] bond6: entered promiscuous mode [ 1124.407876][T27901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1124.736705][T27915] gretap1: entered allmulticast mode [ 1124.818550][T27915] bond2: (slave gretap1): making interface the new active one [ 1124.830317][T27915] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1125.831390][T27934] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6545'. [ 1126.104024][T27942] netlink: 'syz.2.6549': attribute type 12 has an invalid length. [ 1126.107507][T27942] netlink: 'syz.2.6549': attribute type 4 has an invalid length. [ 1126.941766][ T54] Bluetooth: hci3: link tx timeout [ 1126.942257][ T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1128.029200][T23545] Bluetooth: hci3: link tx timeout [ 1128.029398][T23545] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1128.057127][T23545] Bluetooth: hci3: link tx timeout [ 1128.057318][T23545] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1128.286959][T27959] bridge3: entered promiscuous mode [ 1128.459564][T23545] Bluetooth: hci3: link tx timeout [ 1128.459754][T23545] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1128.684874][T27959] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 1128.707563][T27959] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 1128.923206][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1128.937372][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1129.078275][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1129.142634][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 1129.183142][T27969] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1129.183168][T27969] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1129.183190][T27969] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1129.409241][T27969] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1129.698848][ T5623] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x20 [ 1129.708294][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1129.715097][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1129.722427][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1129.728838][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1129.736165][T27969] macsec0 speed is unknown, defaulting to 1000 [ 1131.468502][T28009] netlink: 3784 bytes leftover after parsing attributes in process `syz.3.6561'. [ 1135.842873][T28045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1136.354005][T28055] No such timeout policy "syz1" [ 1136.747335][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6575'. [ 1138.261717][T28088] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1138.650001][T28092] netlink: 'syz.0.6581': attribute type 3 has an invalid length. [ 1138.796054][T28094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6582'. [ 1140.378766][T28108] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6587'. [ 1140.440172][T28110] syzkaller1: entered promiscuous mode [ 1140.440188][T28110] syzkaller1: entered allmulticast mode [ 1140.575660][T28114] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 1140.855344][T28119] netlink: 'syz.2.6590': attribute type 1 has an invalid length. [ 1140.855414][T28119] netlink: 1368 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1140.857327][T28118] netlink: 'syz.2.6590': attribute type 1 has an invalid length. [ 1140.857339][T28118] netlink: 1368 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1140.975351][T28118] ip_tables: iptables: counters copy to user failed while replacing table [ 1143.417027][T28144] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6595'. [ 1144.264999][T27541] IPVS: ip_vs_send_async error -101 [ 1145.878076][T28181] netlink: 'syz.0.6606': attribute type 7 has an invalid length. [ 1146.238612][T28188] syz_tun: entered allmulticast mode [ 1146.248740][T28184] tipc: Enabling of bearer rejected, already enabled [ 1146.540899][T28185] syz_tun: left allmulticast mode [ 1147.679366][T28194] netlink: 'syz.3.6612': attribute type 1 has an invalid length. [ 1148.604530][T28207] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1148.668136][T28208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1149.493603][T28212] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6616'. [ 1149.779472][T28216] netlink: 'syz.0.6617': attribute type 1 has an invalid length. [ 1149.862225][T28216] bond7: entered promiscuous mode [ 1149.877084][T28216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1149.930966][T28217] macvtap1: entered allmulticast mode [ 1150.060665][T28216] bond7: (slave bridge3): making interface the new active one [ 1150.060678][T28216] bridge3: entered promiscuous mode [ 1150.128140][T28216] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1150.604743][T28227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1151.002392][T28233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1151.634614][T28240] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1153.565853][T28249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6629'. [ 1153.659602][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1153.713907][T28264] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1154.259644][T28272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6636'. [ 1154.459798][T28277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6637'. [ 1154.479853][T28277] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6637'. [ 1154.653615][T28281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6639'. [ 1154.866410][T28287] netlink: 'syz.0.6641': attribute type 4 has an invalid length. [ 1156.056004][T28298] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1156.566187][T28306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6651'. [ 1156.742184][T27541] IPVS: ip_vs_send_async error -101 [ 1157.715259][T28332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1157.787730][T28332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1157.787748][T28332] netlink: 'syz.0.6657': attribute type 1 has an invalid length. [ 1157.800909][T28332] geneve2: entered promiscuous mode [ 1157.871491][T28333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1159.859566][T28363] netlink: 'syz.0.6667': attribute type 1 has an invalid length. [ 1160.368795][T28363] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1160.606800][T28375] xt_hashlimit: invalid rate [ 1160.745574][T28366] bond8: (slave gretap2): making interface the new active one [ 1160.781225][T28366] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1161.197631][T28382] __nla_validate_parse: 1 callbacks suppressed [ 1161.197693][T28382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1161.250384][T28384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6670'. [ 1161.426612][T28382] gre1: entered promiscuous mode [ 1161.427243][T28382] gre1: entered allmulticast mode [ 1161.603701][T28387] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6671'. [ 1162.315299][T28405] netlink: 'syz.0.6676': attribute type 1 has an invalid length. [ 1162.706814][T28419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1164.609934][T28434] ip_tables: iptables: counters copy to user failed while replacing table [ 1167.017659][T28444] rdma_op ffff8880132e0238 conn xmit_rdma 0000000000000000 [ 1167.150180][T28444] rdma_op ffff88810e38e238 conn xmit_rdma 0000000000000000 [ 1168.010949][T28453] batman_adv: batadv0: Adding interface: syzkaller0 [ 1168.026552][T28453] batman_adv: batadv0: Interface activated: syzkaller0 [ 1168.117675][T28453] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1169.843494][T28480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6700'. [ 1170.698330][T28491] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1171.314959][T26124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.315022][T26124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.399497][T28501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.470537][T28500] vlan2: entered promiscuous mode [ 1171.470633][T28500] bridge0: entered promiscuous mode [ 1171.870686][T28505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1171.870752][T28505] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1171.870811][T28505] netlink: 'syz.0.6711': attribute type 6 has an invalid length. [ 1171.870818][T28505] netlink: 'syz.0.6711': attribute type 5 has an invalid length. [ 1171.870823][T28505] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1172.607923][T28512] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 1172.643511][T28512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6714'. [ 1172.734929][T28513] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 1172.753117][T28513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6714'. [ 1172.944330][T28519] netlink: 'syz.0.6715': attribute type 1 has an invalid length. [ 1172.946660][T28521] netlink: 'syz.0.6715': attribute type 1 has an invalid length. [ 1173.141097][T28527] openvswitch: netlink: IP tunnel TTL not specified. [ 1173.155780][T28519] bond9: option mode: invalid value (9) [ 1173.423409][T28519] bond9 (unregistering): Released all slaves [ 1173.605676][T28533] netlink: 'syz.2.6719': attribute type 8 has an invalid length. [ 1173.605839][T28533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6719'. [ 1173.627163][T28521] bond9: option mode: invalid value (9) [ 1173.726365][T28521] bond9 (unregistering): Released all slaves [ 1174.038260][T28536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1174.493843][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6723'. [ 1174.793515][T28551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6727'. [ 1175.847948][T28572] netlink: 'syz.0.6734': attribute type 4 has an invalid length. [ 1175.848744][T28572] netlink: 'syz.0.6734': attribute type 4 has an invalid length. [ 1175.984675][T28574] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6735'. [ 1176.061636][T28577] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6735'. [ 1176.372428][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6736'. [ 1176.527224][T28583] ipvlan2: entered allmulticast mode [ 1176.527320][T28583] macvlan1: entered allmulticast mode [ 1176.527327][T28583] veth1_vlan: entered allmulticast mode [ 1176.551366][T28583] batman_adv: batadv0: Adding interface: ipvlan2 [ 1176.551379][T28583] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.551400][T28583] batman_adv: batadv0: Interface activated: ipvlan2 [ 1176.914714][T28588] netlink: 'syz.3.6739': attribute type 1 has an invalid length. [ 1177.315219][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.804292][T28598] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6742'. [ 1178.006702][T28602] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1178.011108][T28602] ip_tables: iptables: counters copy to user failed while replacing table [ 1178.596359][T27541] IPVS: ip_vs_send_async error -101 [ 1179.801414][T28624] netlink: 'syz.2.6752': attribute type 10 has an invalid length. [ 1180.361255][T28628] syzkaller0: entered promiscuous mode [ 1180.364618][T28628] syzkaller0: entered allmulticast mode [ 1181.314842][T28647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1181.979946][T28659] syzkaller1: entered promiscuous mode [ 1181.980547][T28659] syzkaller1: entered allmulticast mode [ 1184.953619][T28706] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1184.953642][T28706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1185.477322][T28697] virtio_blk virtio2: 1/0/0 default/read/poll queues [ 1185.492306][T28697] virtio_blk virtio2: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1187.469222][T28723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6784'. [ 1187.889034][T28729] netlink: 'syz.3.6787': attribute type 3 has an invalid length. [ 1187.889052][T28729] netlink: 'syz.3.6787': attribute type 1 has an invalid length. [ 1187.889061][T28729] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6787'. [ 1187.889075][T28729] NCSI netlink: No device for ifindex 0 [ 1188.283982][T28731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6786'. [ 1188.598633][T28735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6789'. [ 1188.601492][T28735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6789'. [ 1188.736692][T28741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6790'. [ 1189.731074][T28747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6792'. [ 1189.802367][T28744] netlink: 'syz.0.6791': attribute type 21 has an invalid length. [ 1189.802385][T28744] netlink: 'syz.0.6791': attribute type 22 has an invalid length. [ 1189.802394][T28744] netlink: 'syz.0.6791': attribute type 23 has an invalid length. [ 1189.802401][T28744] netlink: 'syz.0.6791': attribute type 25 has an invalid length. [ 1189.802410][T28744] netlink: 'syz.0.6791': attribute type 26 has an invalid length. [ 1189.802418][T28744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6791'. [ 1190.146741][T28750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1190.146754][T28750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1190.538927][T28752] netlink: 'syz.3.6793': attribute type 3 has an invalid length. [ 1191.602429][T28770] netlink: 'syz.3.6799': attribute type 6 has an invalid length. [ 1191.808847][T28771] netlink: 'syz.0.6798': attribute type 4 has an invalid length. [ 1191.944682][ T5643] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.944838][ T5643] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.944915][ T5643] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.983645][T22475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.977628][T28773] validate_nla: 1 callbacks suppressed [ 1192.977691][T28773] netlink: 'syz.2.6800': attribute type 1 has an invalid length. [ 1193.248123][T28773] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1193.344257][T28782] __nla_validate_parse: 9 callbacks suppressed [ 1193.344272][T28782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6802'. [ 1194.242503][ T54] Bluetooth: hci3: link tx timeout [ 1194.242570][ T54] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1194.276692][T28802] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1194.456453][T28806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1194.456781][T28806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1194.698779][T28808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1194.699044][T28808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1194.747387][T28806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1194.747431][T28806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1194.939611][T28808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1194.939837][T28808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1196.265634][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 1196.437532][T28831] netlink: 'syz.3.6811': attribute type 1 has an invalid length. [ 1196.437551][T28831] netlink: 'syz.3.6811': attribute type 2 has an invalid length. [ 1197.827960][T28847] netlink: 'syz.3.6816': attribute type 1 has an invalid length. [ 1199.004690][T28855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6819'. [ 1199.308066][T28857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6818'. [ 1199.489509][T28871] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6820'. [ 1203.166911][T28889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6824'. [ 1203.167044][T28889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6824'. [ 1204.809761][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6831'. [ 1205.245718][T28917] team0: Port device team_slave_0 removed [ 1205.321638][T28924] syzkaller1: entered promiscuous mode [ 1205.322252][T28924] syzkaller1: entered allmulticast mode [ 1205.583808][T28933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1206.745503][T28952] ip_tables: iptables: counters copy to user failed while replacing table [ 1207.209764][T28957] netlink: 'syz.3.6839': attribute type 2 has an invalid length. [ 1207.209827][T28957] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1207.245143][T28957] tipc: Started in network mode [ 1207.245240][T28957] tipc: Node identity ac1414aa, cluster identity 4711 [ 1207.250413][T28957] tipc: New replicast peer: 172.20.20.187 [ 1207.269108][T28957] tipc: Enabled bearer , priority 5 [ 1207.271118][T28961] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6840'. [ 1207.275572][T28961] gretap0: entered promiscuous mode [ 1207.772434][T28968] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6841'. [ 1207.784128][T27541] IPVS: ip_vs_send_async error -101 [ 1207.823193][T28970] tipc: Enabled bearer , priority 25 [ 1208.363329][T27790] tipc: Node number set to 2886997162 [ 1208.689542][T28987] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6845'. [ 1209.389076][T28998] syzkaller1: entered promiscuous mode [ 1209.389562][T28998] syzkaller1: entered allmulticast mode [ 1209.689436][T28998] syzkaller0: entered promiscuous mode [ 1209.689952][T28998] syzkaller0: entered allmulticast mode [ 1210.548713][T29010] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6851'. [ 1211.300506][T29010] syzkaller1: entered promiscuous mode [ 1211.306342][T29010] syzkaller1: entered allmulticast mode [ 1212.251086][T29037] netlink: 'syz.2.6857': attribute type 1 has an invalid length. [ 1214.610184][T29063] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1215.269848][T29069] nftables ruleset with unbound set [ 1215.421373][T29071] syzkaller0: entered promiscuous mode [ 1215.421631][T29071] syzkaller0: entered allmulticast mode [ 1216.676453][T29091] netlink: 'syz.2.6874': attribute type 5 has an invalid length. [ 1216.839275][T29091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1216.839288][T29091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1216.839294][T29091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1216.843000][T29091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1217.528489][T29097] gre0: left allmulticast mode [ 1217.758271][T29101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6876'. [ 1217.758366][T29101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6876'. [ 1218.235240][T29101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6876'. [ 1219.454476][T29097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.520086][T29097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.597833][T29097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.027087][T29097] veth1_vlan: left allmulticast mode [ 1224.719679][T29097] gretap1: left allmulticast mode [ 1225.291825][T29097] vlan2: left promiscuous mode [ 1225.291844][T29097] bridge0: left promiscuous mode [ 1225.347333][T29097] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1225.350881][T29097] ipvlan2: left allmulticast mode [ 1225.351013][T29097] macvlan1: left allmulticast mode [ 1225.592679][T22475] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.592774][T22475] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.593233][T22475] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.593501][T22475] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.593732][T22475] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.593859][T22475] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.594189][T22475] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.594315][T22475] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.733096][T29137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6880'. [ 1226.781875][T29140] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1227.192352][T29150] syzkaller0: left promiscuous mode [ 1227.192364][T29150] syzkaller0: left allmulticast mode [ 1231.623115][T29209] syzkaller1: entered promiscuous mode [ 1231.623612][T29209] syzkaller1: entered allmulticast mode [ 1232.494735][T29232] ip_tables: iptables: counters copy to user failed while replacing table [ 1232.512051][T29233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1232.554581][T29233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1233.213499][T29240] netlink: 'syz.2.6907': attribute type 1 has an invalid length. [ 1233.357548][T29243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6907'. [ 1233.420956][T29240] bond30: entered promiscuous mode [ 1233.423707][T29240] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1233.488821][T29242] bond30: (slave bridge14): making interface the new active one [ 1233.488918][T29242] bridge14: entered promiscuous mode [ 1233.498488][T29242] bond30: (slave bridge14): Enslaving as an active interface with an up link [ 1233.523565][T29246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6908'. [ 1234.018020][T29253] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6911'. [ 1234.073253][T29253] syzkaller1: entered promiscuous mode [ 1234.073265][T29253] syzkaller1: entered allmulticast mode [ 1234.159239][T29256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6910'. [ 1234.940993][T29270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6915'. [ 1235.010495][T29267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6915'. [ 1235.251114][T29273] netlink: 'syz.3.6916': attribute type 4 has an invalid length. [ 1237.208034][T29290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6921'. [ 1238.044923][T29302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6924'. [ 1238.374495][T29309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1238.489273][T29316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1238.758534][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.925152][T29343] netlink: 'syz.0.6938': attribute type 1 has an invalid length. [ 1242.000166][T29343] bond9: entered promiscuous mode [ 1242.006831][T29343] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1242.033500][T29343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6938'. [ 1242.033513][T29343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6938'. [ 1242.881962][T29356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6941'. [ 1244.096031][T29368] ieee802154 phy1 wpan1: encryption failed: -90 [ 1245.010672][T29378] netlink: 'syz.3.6950': attribute type 1 has an invalid length. [ 1245.293069][T29380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6949'. [ 1246.318278][T29382] veth9: entered allmulticast mode [ 1246.361977][T29382] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1246.615938][T29401] netlink: Unknown nat attribute (0) [ 1246.615955][T29401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.343324][T29407] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6958'. [ 1247.758321][T29410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1248.044159][T29410] syzkaller1: entered promiscuous mode [ 1248.044289][T29410] syzkaller1: entered allmulticast mode [ 1249.598776][T29420] tipc: Enabled bearer , priority 0 [ 1249.733003][T29420] tipc: Resetting bearer [ 1249.882012][T29423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6961'. [ 1249.935214][T29419] tipc: Disabling bearer [ 1250.053989][T29427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6963'. [ 1250.101458][T29427] ip6gre1: entered promiscuous mode [ 1250.101526][T29427] ip6gre1: entered allmulticast mode [ 1250.426034][T27541] IPVS: ip_vs_send_async error -101 [ 1251.100577][T29443] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6969'. [ 1251.103431][T29443] syzkaller1: entered promiscuous mode [ 1251.103910][T29443] syzkaller1: entered allmulticast mode [ 1251.374184][T29448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6970'. [ 1251.546922][T29451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6971'. [ 1251.954553][T29458] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1252.864134][T29481] tipc: Resetting bearer [ 1252.864676][T29481] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1253.443472][T29491] batadv1: entered promiscuous mode [ 1253.443953][T29491] batadv1: entered allmulticast mode [ 1253.968627][T29500] pimreg: entered allmulticast mode [ 1254.331647][T29497] pimreg: left allmulticast mode [ 1254.856055][T29509] openvswitch: netlink: Unknown key attributes 2 [ 1255.631033][T29517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1255.631101][T29517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1256.137736][T29535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6994'. [ 1256.500222][T29546] macsec1: entered promiscuous mode [ 1256.500236][T29546] bridge0: entered promiscuous mode [ 1257.774821][T23545] Bluetooth: hci1: SCO packet too small [ 1258.455860][T29558] batman_adv: batadv0: Interface activated: syzkaller0 [ 1259.174765][T29560] netlink: 'syz.2.7004': attribute type 2 has an invalid length. [ 1259.174784][T29560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1259.319015][T29560] IPVS: set_ctl: invalid protocol: 29 172.30.1.3:20003 [ 1259.782137][T27541] IPVS: ip_vs_send_async error -101 [ 1260.040695][T29575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7008'. [ 1260.206928][T29577] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7009'. [ 1260.355442][T29581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1260.440145][T29581] syzkaller1: entered promiscuous mode [ 1260.440240][T29581] syzkaller1: entered allmulticast mode [ 1261.283002][T29588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7012'. [ 1261.698698][T29594] syzkaller0: entered promiscuous mode [ 1261.698711][T29594] syzkaller0: entered allmulticast mode [ 1261.718857][T29598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7015'. [ 1261.976449][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7017'. [ 1263.727140][T29634] batadv1: entered promiscuous mode [ 1263.727734][T29634] batadv1: entered allmulticast mode [ 1267.088588][T29670] xt_TCPMSS: Only works on TCP SYN packets [ 1267.349115][T29670] netlink: 'syz.3.7036': attribute type 5 has an invalid length. [ 1267.396018][T29670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7036'. [ 1268.096138][T29682] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7041'. [ 1268.149060][T29685] netlink: 'syz.3.7042': attribute type 46 has an invalid length. [ 1268.323390][T29685] tipc: Enabling of bearer rejected, already enabled [ 1268.610358][T29688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1268.711691][T29691] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1269.015500][T29697] netlink: 'syz.2.7045': attribute type 16 has an invalid length. [ 1269.015630][T29697] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.7045'. [ 1269.721550][T29703] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.237221][T27541] IPVS: ip_vs_send_async error -101 [ 1271.733402][T29722] syzkaller0: entered promiscuous mode [ 1271.733528][T29722] syzkaller0: entered allmulticast mode [ 1271.857529][T29722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7055'. [ 1272.714590][T29726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1272.788887][T29725] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1273.249100][T29732] tipc: Enabling of bearer rejected, failed to enable media [ 1273.368467][T29735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7057'. [ 1274.193402][T29744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1274.656329][T29751] netlink: 'syz.2.7062': attribute type 1 has an invalid length. [ 1274.728676][T29751] bond33: entered promiscuous mode [ 1274.729828][T29751] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1275.075407][T29755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1275.451852][T29751] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1275.455653][T29751] bond33: (slave wireguard3): The slave device specified does not support setting the MAC address [ 1275.455664][T29751] bond33: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 1275.493549][T29751] bond33: (slave wireguard3): making interface the new active one [ 1275.493561][T29751] wireguard3: entered promiscuous mode [ 1275.505346][T29751] bond33: (slave wireguard3): Enslaving as an active interface with an up link [ 1276.641078][T29785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7070'. [ 1277.826533][T29817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7083'. [ 1277.857868][T29817] vlan3: entered allmulticast mode [ 1277.857884][T29817] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1277.865389][T29817] bridge0: port 3(vlan3) entered blocking state [ 1277.867313][T29817] bridge0: port 3(vlan3) entered disabled state [ 1277.873970][T29817] vlan3: entered promiscuous mode [ 1277.873987][T29817] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1279.370928][T29832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7087'. [ 1279.482151][T29833] netlink: 'syz.0.7087': attribute type 83 has an invalid length. [ 1279.547880][T29832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7087'. [ 1279.552177][T29836] bond2: option mode: unable to set because the bond device has slaves [ 1279.938525][T29840] SET target dimension over the limit! [ 1279.953026][T29843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7091'. [ 1280.095583][T29851] netlink: 'syz.3.7092': attribute type 1 has an invalid length. [ 1280.196013][T29851] bond5: entered promiscuous mode [ 1280.200672][T29851] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1280.368408][T29851] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1280.371994][T29851] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1280.372006][T29851] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1280.393093][T29851] bond5: (slave ip6gre1): making interface the new active one [ 1280.393104][T29851] ip6gre1: entered promiscuous mode [ 1280.410132][T29851] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 1280.519867][T29855] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1282.385650][T29871] syzkaller1: entered promiscuous mode [ 1282.386133][T29871] syzkaller1: entered allmulticast mode [ 1282.755465][T29882] ip6t_hbh: unknown flags AD [ 1282.898556][T29885] netlink: 'syz.0.7103': attribute type 10 has an invalid length. [ 1282.898587][T29885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7103'. [ 1283.970994][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7108'. [ 1284.005266][T29910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.112846][T29935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1286.701642][T29947] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1286.854975][T29946] netlink: 'syz.0.7120': attribute type 10 has an invalid length. [ 1287.010494][T29946] team0 (unregistering): Port device team_slave_0 removed [ 1287.199058][T29946] team0 (unregistering): Port device team_slave_1 removed [ 1288.447397][T29976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1288.447415][T29976] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1288.459752][T29976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1290.998526][T30003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7135'. [ 1292.338808][T30021] ip6t_srh: unknown srh invflags BA61 [ 1292.959084][T30026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7138'. [ 1292.997368][T30026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7138'. [ 1293.446198][T30033] openvswitch: netlink: IP tunnel dst address not specified [ 1294.432911][T30041] netlink: 'syz.2.7144': attribute type 1 has an invalid length. [ 1294.570766][T30053] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 1294.807045][T30041] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1295.177690][T30062] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1295.771503][T30073] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7150'. [ 1296.427306][T30079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7152'. [ 1296.427804][T30079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7152'. [ 1296.654648][T30081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7153'. [ 1297.178313][T30086] tipc: Resetting bearer [ 1297.182164][T30086] tipc: Resetting bearer [ 1297.231190][T27541] IPVS: ip_vs_send_async error -101 [ 1297.336310][T30088] netlink: 'syz.2.7156': attribute type 16 has an invalid length. [ 1297.336406][T30088] netlink: 'syz.2.7156': attribute type 17 has an invalid length. [ 1298.366842][T30088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.077848][T30088] tipc: Resetting bearer [ 1299.283186][T30088] veth1_vlan: left promiscuous mode [ 1299.290251][T30088] veth0_vlan: left promiscuous mode [ 1299.328257][T30088] veth0_vlan: entered promiscuous mode [ 1299.364505][T30088] veth1_vlan: entered promiscuous mode [ 1299.409176][T30088] veth1_macvtap: left promiscuous mode [ 1299.425491][T30088] veth0_macvtap: left promiscuous mode [ 1299.439031][T30088] veth0_macvtap: entered promiscuous mode [ 1299.454029][T30088] veth1_macvtap: entered promiscuous mode [ 1299.856039][T30088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1299.872106][T30088] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1300.188518][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.263941][T19085] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.272646][T29119] macsec0 speed is unknown, defaulting to 1000 [ 1300.272772][T29119] syz2: Port: 1 Link ACTIVE [ 1300.283159][T22475] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.284021][T19085] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.284056][T19085] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.732656][T30115] sctp: [Deprecated]: syz.2.7158 (pid 30115) Use of int in max_burst socket option. [ 1300.732656][T30115] Use struct sctp_assoc_value instead [ 1301.750352][T30120] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7160'. [ 1302.806598][T30130] netlink: 'syz.0.7163': attribute type 4 has an invalid length. [ 1303.013627][T30131] netlink: 'syz.0.7163': attribute type 4 has an invalid length. [ 1303.411239][T30137] netlink: 'syz.2.7165': attribute type 12 has an invalid length. [ 1303.890993][T30143] netlink: 'syz.3.7167': attribute type 4 has an invalid length. [ 1303.909539][T30143] netlink: 'syz.3.7167': attribute type 4 has an invalid length. [ 1305.324693][T30156] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1306.623388][T30170] netlink: 279 bytes leftover after parsing attributes in process `syz.0.7171'. [ 1306.670357][T30170] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7171'. [ 1306.674425][T30170] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7171'. [ 1306.677754][T30170] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7171'. [ 1307.675312][T30190] netlink: 'syz.3.7175': attribute type 1 has an invalid length. [ 1307.675382][T30190] netlink: 'syz.3.7175': attribute type 4 has an invalid length. [ 1307.675458][T30190] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7175'. [ 1307.716928][T30190] netlink: 'syz.3.7175': attribute type 1 has an invalid length. [ 1307.716940][T30190] netlink: 'syz.3.7175': attribute type 4 has an invalid length. [ 1307.716946][T30190] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7175'. [ 1308.733751][T30204] netlink: 'syz.3.7178': attribute type 22 has an invalid length. [ 1308.733763][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7178'. [ 1308.771830][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.771852][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.771865][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.771877][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.772087][T30204] netlink: 'syz.3.7178': attribute type 22 has an invalid length. [ 1308.772096][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7178'. [ 1308.960880][T30210] netlink: 10352 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1308.965276][T30210] openvswitch: netlink: Flow key attr not present in new flow. [ 1310.743377][T27541] IPVS: ip_vs_send_async error -101 [ 1310.826412][T30229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7187'. [ 1311.805858][T30228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1312.090578][T30239] syzkaller1: entered promiscuous mode [ 1312.090712][T30239] syzkaller1: entered allmulticast mode [ 1313.123821][T30253] openvswitch: netlink: IP tunnel dst address not specified [ 1314.100726][T30270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7199'. [ 1314.306494][T30272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7201'. [ 1314.306591][T30272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7201'. [ 1314.438651][T30274] ip_tables: iptables: counters copy to user failed while replacing table [ 1316.760684][T30298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7207'. [ 1316.857918][T30298] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7207'. [ 1316.857933][T30298] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7207'. [ 1316.861626][T30298] syz_tun: entered allmulticast mode [ 1317.035605][T30308] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7209'. [ 1317.041640][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7209'. [ 1317.047506][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7209'. [ 1317.048126][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7209'. [ 1318.282486][T30324] bridge_slave_0: left allmulticast mode [ 1318.282576][T30324] bridge_slave_0: left promiscuous mode [ 1318.283897][T30324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.419003][T30330] vlan3: left promiscuous mode [ 1319.419177][T30330] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1319.451652][T30330] bridge0: port 3(vlan3) entered disabled state [ 1319.525894][T30330] bridge_slave_1: left allmulticast mode [ 1319.526161][T30330] bridge_slave_1: left promiscuous mode [ 1319.526956][T30330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.576660][T30330] bridge0 (unregistering): left promiscuous mode [ 1320.165061][T30341] sit0: entered promiscuous mode [ 1320.165788][T30341] netlink: 'syz.3.7218': attribute type 1 has an invalid length. [ 1320.166232][T30341] __nla_validate_parse: 8 callbacks suppressed [ 1320.166242][T30341] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7218'. [ 1321.283231][T30353] syzkaller0: entered promiscuous mode [ 1321.287892][T30353] syzkaller0: entered allmulticast mode [ 1322.568516][T30381] veth1: entered promiscuous mode [ 1322.569109][T30381] veth1: entered allmulticast mode [ 1322.605560][T30381] x_tables: duplicate underflow at hook 4 [ 1322.628713][T30381] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:197 [ 1322.755487][T30386] Bluetooth: MGMT ver 1.23 [ 1326.205590][T30407] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7237'. [ 1326.938446][T30416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7238'. [ 1327.878912][T30421] sit0: entered promiscuous mode [ 1327.880426][T30421] netlink: 'syz.0.7241': attribute type 1 has an invalid length. [ 1327.880436][T30421] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7241'. [ 1327.911285][T30421] netlink: 'syz.0.7241': attribute type 11 has an invalid length. [ 1329.707389][T30449] syzkaller0: entered promiscuous mode [ 1329.707895][T30449] syzkaller0: entered allmulticast mode [ 1329.711632][T30449] tipc: Resetting bearer [ 1329.787729][T30447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7245'. [ 1330.170094][T30453] syzkaller0: left promiscuous mode [ 1330.170227][T30453] syzkaller0: left allmulticast mode [ 1330.177824][T30453] tipc: Resetting bearer [ 1331.499763][T30467] syzkaller0: entered promiscuous mode [ 1331.499827][T30467] syzkaller0: entered allmulticast mode [ 1331.658161][T30462] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7250'. [ 1331.658224][T30462] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7250'. [ 1332.499500][ T5623] tipc: Subscription rejected, illegal request [ 1332.935249][T30502] netlink: 'syz.0.7260': attribute type 1 has an invalid length. [ 1332.968107][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1332.968782][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1332.969382][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1332.986523][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1332.987267][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1332.987728][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1332.988065][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1332.988423][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1333.275511][T30502] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1333.275541][T30502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1333.494771][T30515] netlink: 'syz.2.7263': attribute type 1 has an invalid length. [ 1333.623481][T27541] IPVS: ip_vs_send_async error -101 [ 1333.670576][T30515] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1334.268309][T30526] netlink: 'syz.3.7266': attribute type 12 has an invalid length. [ 1335.138354][T20795] IPVS: starting estimator thread 0... [ 1335.213669][T30542] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20004 [ 1335.256981][T30543] IPVS: using max 41 ests per chain, 98400 per kthread [ 1335.645137][T30557] netlink: 'syz.2.7272': attribute type 2 has an invalid length. [ 1335.839267][T30554] syzkaller1: entered allmulticast mode [ 1338.029049][T30584] __nla_validate_parse: 41 callbacks suppressed [ 1338.029113][T30584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1338.136067][T30584] netlink: 'syz.3.7278': attribute type 2 has an invalid length. [ 1338.482569][T30594] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1339.185235][T30606] syzkaller1: entered promiscuous mode [ 1339.185298][T30606] syzkaller1: entered allmulticast mode [ 1340.299843][T30625] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1340.300225][T30625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.427982][T30630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7293'. [ 1341.970830][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7299'. [ 1341.970891][T30644] tipc: Resetting bearer [ 1341.971383][T30644] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1342.399154][T30644] tipc: Disabling bearer [ 1342.421015][T30644] batman_adv: batadv0: Removing interface: syzkaller0 [ 1342.808320][T30656] netlink: 'syz.0.7304': attribute type 1 has an invalid length. [ 1342.884029][T30662] netlink: 'syz.2.7305': attribute type 2 has an invalid length. [ 1342.884042][T30662] netlink: 'syz.2.7305': attribute type 2 has an invalid length. [ 1343.185963][T30658] syzkaller1: entered promiscuous mode [ 1343.186030][T30658] syzkaller1: entered allmulticast mode [ 1344.022923][T27541] IPVS: ip_vs_send_async error -101 [ 1346.584984][T30695] macsec0 speed is unknown, defaulting to 1000 [ 1348.233414][T30708] sctp: [Deprecated]: syz.2.7320 (pid 30708) Use of int in max_burst socket option. [ 1348.233414][T30708] Use struct sctp_assoc_value instead [ 1348.418159][T30713] netlink: 'syz.0.7323': attribute type 8 has an invalid length. [ 1349.068403][T30716] netlink: 'syz.2.7324': attribute type 1 has an invalid length. [ 1349.138298][T30717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1349.223093][T27541] IPVS: ip_vs_send_async error -101 [ 1349.745792][T30716] bond36: entered promiscuous mode [ 1349.746105][T30716] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1349.786659][T30725] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1349.952154][T30719] bond36: (slave bridge16): making interface the new active one [ 1349.952173][T30719] bridge16: entered promiscuous mode [ 1349.967411][T30719] bond36: (slave bridge16): Enslaving as an active interface with an up link [ 1350.304413][T30731] netlink: 'syz.2.7327': attribute type 1 has an invalid length. [ 1350.304738][T30731] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7327'. [ 1350.554925][T30736] digital: digital_start_poll: Unknown protocol [ 1351.187959][T30752] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 1353.738865][T30740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1354.198352][T30777] Unsupported ieee802154 address type: 0 [ 1355.206361][T30784] netlink: 'syz.3.7344': attribute type 5 has an invalid length. [ 1356.243657][T29512] Bluetooth: hci3: command 0x0405 tx timeout [ 1356.261393][T30791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7346'. [ 1358.709587][T30821] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 1358.867481][T30822] ip6gre3: entered promiscuous mode [ 1359.615824][T30834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7361'. [ 1359.715109][T30839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.762270][T30836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7360'. [ 1359.762618][T30835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7360'. [ 1360.042369][ T9505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.042381][ T9505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.614997][T30863] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1361.630202][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.646352][T30863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1363.148226][T30873] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7368'. [ 1364.788956][T30886] bond2: (slave macvlan2): Releasing backup interface [ 1364.788970][T30886] bond2: (slave macvlan2): the permanent HWaddr of slave - ee:25:eb:46:5a:79 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1364.821715][T30886] bond16: (slave geneve4): Releasing active interface [ 1364.873648][T30886] bond2: (slave gretap1): Releasing backup interface [ 1364.894451][T30886] bond0: (slave veth17): Releasing active interface [ 1364.894514][T30886] bond0: (slave veth17): the permanent HWaddr of slave - 9a:ae:2a:4c:1f:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1364.894578][T30886] batadv0: entered promiscuous mode [ 1364.924850][T30886] bond0: (slave batadv0): Releasing active interface [ 1364.924864][T30886] batadv0: left promiscuous mode [ 1364.961499][T30886] bond25: (slave xfrm1): Releasing backup interface [ 1364.994327][T30886] bond30: (slave bridge14): Releasing backup interface [ 1364.994456][T30886] bridge14: left promiscuous mode [ 1365.053863][T30886] bond33: (slave wireguard3): Releasing backup interface [ 1365.053884][T30886] wireguard3: left promiscuous mode [ 1365.110065][T30886] bond36: (slave bridge16): Releasing backup interface [ 1365.110162][T30886] bridge16: left promiscuous mode [ 1365.568748][T30899] syzkaller0: entered promiscuous mode [ 1365.569165][T30899] syzkaller0: entered allmulticast mode [ 1367.158608][T30921] ip_tables: iptables: counters copy to user failed while replacing table [ 1367.277676][T30922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7378'. [ 1367.419557][T30928] netlink: 'syz.0.7381': attribute type 1 has an invalid length. [ 1367.428767][T30926] ip_tables: iptables: counters copy to user failed while replacing table [ 1367.454582][T30929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1367.454599][T30929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1370.321124][T30948] sctp: [Deprecated]: syz.3.7388 (pid 30948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1370.321124][T30948] Use struct sctp_sack_info instead [ 1372.556987][T30973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1372.577903][T30974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1373.640555][T30990] IPVS: set_ctl: invalid protocol: 92 172.30.0.1:20001 [ 1374.450782][T30992] netlink: 'syz.2.7403': attribute type 21 has an invalid length. [ 1374.450877][T30992] IPv6: NLM_F_CREATE should be specified when creating new route [ 1374.451457][T30992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1374.451469][T30992] IPv6: NLM_F_CREATE should be set when creating new route [ 1374.454745][T30992] IPv6: NLM_F_CREATE should be set when creating new route [ 1374.454974][T30992] IPv6: NLM_F_CREATE should be set when creating new route [ 1374.705253][T30996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1374.782623][T30996] netlink: 'syz.0.7404': attribute type 1 has an invalid length. [ 1376.197821][T31012] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7409'. [ 1376.200410][T31012] netlink: 'syz.2.7409': attribute type 1 has an invalid length. [ 1376.248912][T31012] netlink: 'syz.2.7409': attribute type 10 has an invalid length. [ 1376.619809][T31015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1376.619828][T31015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1376.776060][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1376.784520][T31015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7410'. [ 1377.728787][T31037] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7412'. [ 1378.889010][T31059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.918572][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.932933][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.934433][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.935560][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.937063][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.938519][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.939960][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.941422][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.042472][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1380.398318][T31078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7424'. [ 1382.699756][T31106] tipc: Enabled bearer , priority 0 [ 1382.742307][T31109] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1382.762503][T31103] tipc: Resetting bearer [ 1382.764870][T31111] syzkaller0: entered promiscuous mode [ 1382.765463][T31111] syzkaller0: entered allmulticast mode [ 1382.964812][T31120] Bluetooth: MGMT ver 1.23 [ 1382.965402][T31119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7436'. [ 1383.069737][T31101] tipc: Resetting bearer [ 1383.208052][T31101] tipc: Disabling bearer [ 1383.919183][T31134] syzkaller0: entered promiscuous mode [ 1387.561848][T31154] net_ratelimit: 58 callbacks suppressed [ 1387.561909][T31154] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1389.429241][T31180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7454'. [ 1389.653257][T31183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7454'. [ 1389.653330][T31183] nbd: device at index 64 is going down [ 1389.784897][T31180] ip_tables: iptables: counters copy to user failed while replacing table [ 1392.137470][T31234] netlink: 'syz.3.7462': attribute type 1 has an invalid length. [ 1392.261166][T31234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1392.535269][T31238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1392.702586][T31234] bond6: entered promiscuous mode [ 1392.702818][T31234] bond6: entered allmulticast mode [ 1392.913660][T27541] IPVS: ip_vs_send_async error -101 [ 1393.050638][T31234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7462'. [ 1393.311428][T31243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7463'. [ 1396.534293][T31295] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7482'. [ 1397.807801][T31309] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7485'. [ 1398.190716][T23545] Bluetooth: hci2: ISO packet too small [ 1399.670380][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7490'. [ 1399.670477][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7490'. [ 1399.785378][T31330] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7490'. [ 1402.175340][T31324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1404.229825][T31370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7506'. [ 1404.229851][T31370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7506'. [ 1404.310611][T31374] netlink: 'syz.0.7505': attribute type 1 has an invalid length. [ 1404.968938][T31377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7507'. [ 1405.321993][T31377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1405.916880][T31387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1406.273375][T31389] pim6reg1: entered promiscuous mode [ 1406.273437][T31389] pim6reg1: entered allmulticast mode [ 1406.290274][T31393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7513'. [ 1407.103970][T31404] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7517'. [ 1408.414508][T31427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1408.862804][T31432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7528'. [ 1411.496386][T31462] ip_tables: iptables: counters copy to user failed while replacing table [ 1412.434924][T31478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7540'. [ 1412.954022][T31490] x_tables: duplicate underflow at hook 1 [ 1413.508128][T31498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1414.011664][T31508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7548'. [ 1416.139757][T31530] netlink: 'syz.2.7553': attribute type 21 has an invalid length. [ 1416.140279][T31530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1416.140285][T31530] IPv6: NLM_F_CREATE should be set when creating new route [ 1416.140384][T31530] IPv6: NLM_F_CREATE should be set when creating new route [ 1416.140448][T31530] IPv6: NLM_F_CREATE should be set when creating new route [ 1416.466471][T31529] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1418.854052][T31559] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1419.238201][T31564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7564'. [ 1419.502576][T31578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7566'. [ 1420.260440][T31583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 1420.260459][T31583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 1420.270781][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 1420.270840][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 1422.021299][T31612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7577'. [ 1423.081516][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.817023][T23545] Bluetooth: hci1: unexpected event 0x04 length: 0 < 10 [ 1424.954985][T31650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7588'. [ 1425.622304][T31661] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.7591'. [ 1427.450868][T31693] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7603'. [ 1427.614186][T31693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7603'. [ 1427.614545][T31693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7603'. [ 1428.457900][T31703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1428.905258][T31708] tipc: Resetting bearer [ 1429.584158][T31721] sctp: [Deprecated]: syz.3.7612 (pid 31721) Use of int in maxseg socket option. [ 1429.584158][T31721] Use struct sctp_assoc_value instead [ 1429.786039][T31727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7614'. [ 1430.599936][T31743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7616'. [ 1431.835782][T31756] veth1_macvtap: left promiscuous mode [ 1431.835849][T31756] macsec0: entered promiscuous mode [ 1431.886175][T21460] macsec0 speed is unknown, defaulting to 1000 [ 1431.886281][T21460] syz2: Port: 1 Link DOWN [ 1431.886478][T29121] macsec0 speed is unknown, defaulting to 1000 [ 1434.967160][T31760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1435.589269][T31783] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7626'. [ 1435.700519][T31784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7627'. [ 1435.700622][T31784] netlink: 'syz.3.7627': attribute type 22 has an invalid length. [ 1435.700712][T31784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7627'. [ 1435.726025][T31784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7627'. [ 1435.726248][T31784] netlink: 'syz.3.7627': attribute type 22 has an invalid length. [ 1435.726348][T31784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7627'. [ 1435.770810][T31785] syzkaller1: entered promiscuous mode [ 1435.770944][T31785] syzkaller1: entered allmulticast mode [ 1436.379246][T31789] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1437.641134][T31799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1438.537965][T31809] syzkaller1: entered promiscuous mode [ 1438.538092][T31809] syzkaller1: entered allmulticast mode [ 1441.235181][T31836] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7643'. [ 1441.589400][T31840] ip_tables: iptables: counters copy to user failed while replacing table [ 1442.736486][T31843] netlink: 'syz.3.7645': attribute type 4 has an invalid length. [ 1444.667654][T31854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7648'. [ 1446.390075][T31862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7649'. [ 1447.229223][T31868] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1447.362613][T31865] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 1447.380119][T31865] bond10 (unregistering): Released all slaves [ 1448.964333][T31877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7653'. [ 1448.971417][T31877] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7653'. [ 1449.424313][T31879] xt_hashlimit: size too large, truncated to 1048576 [ 1449.644544][T31880] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7654'. [ 1449.992151][T31884] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 1450.041039][T31884] x_tables: duplicate underflow at hook 1 [ 1450.341347][T31892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7657'. [ 1454.494529][T31918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7664'. [ 1454.510846][T31920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7664'. [ 1454.511179][T31920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7664'. [ 1457.728902][ C0] sched: DL replenish lagged too much [ 1470.412103][T29512] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1470.421136][T29512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1471.153424][T29512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1471.159595][T29512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1471.169647][T29512] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1473.824539][ T54] Bluetooth: hci0: command tx timeout [ 1475.983312][T31949] Bluetooth: hci0: command tx timeout [ 1478.031767][T31949] Bluetooth: hci0: command tx timeout [ 1478.573591][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1478.580507][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1479.257265][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1479.268858][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1479.271153][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1480.102481][ T54] Bluetooth: hci0: command tx timeout [ 1480.559510][T31949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1480.571761][T31949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1480.574721][T31949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1480.579261][T31949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1480.594286][T31949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1481.642335][ T54] Bluetooth: hci4: command tx timeout [ 1482.912092][ T54] Bluetooth: hci5: command tx timeout [ 1483.710153][ T54] Bluetooth: hci4: command tx timeout [ 1484.661118][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.984800][ T54] Bluetooth: hci5: command tx timeout [ 1485.781846][ T54] Bluetooth: hci4: command tx timeout [ 1487.176692][ T54] Bluetooth: hci5: command tx timeout [ 1488.026242][T31949] Bluetooth: hci4: command tx timeout [ 1489.478283][T31949] Bluetooth: hci5: command tx timeout [ 1509.765200][T31955] macsec0 speed is unknown, defaulting to 1000 [ 1511.259953][T31961] macsec0 speed is unknown, defaulting to 1000 [ 1511.295487][T31946] macsec0 speed is unknown, defaulting to 1000 [ 1543.891026][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1543.902320][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1543.903825][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1543.907086][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1543.909279][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1545.957985][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.262273][T31949] Bluetooth: hci6: command tx timeout [ 1546.431212][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1546.441700][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1546.443786][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1546.447093][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1546.449596][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1546.618460][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1546.626685][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1546.628759][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1546.651343][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1546.659482][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1548.377528][ T54] Bluetooth: hci6: command tx timeout [ 1548.922042][ T54] Bluetooth: hci7: command tx timeout [ 1548.922638][ T54] Bluetooth: hci8: command tx timeout [ 1550.421761][T31949] Bluetooth: hci6: command tx timeout [ 1550.992121][T31949] Bluetooth: hci8: command tx timeout [ 1550.992139][T31949] Bluetooth: hci7: command tx timeout [ 1552.501803][ T54] Bluetooth: hci6: command tx timeout [ 1552.601245][T31998] macsec0 speed is unknown, defaulting to 1000 [ 1552.810057][T32009] macsec0 speed is unknown, defaulting to 1000 [ 1552.880211][T32005] macsec0 speed is unknown, defaulting to 1000 [ 1553.062078][ T54] Bluetooth: hci7: command tx timeout [ 1553.062096][ T54] Bluetooth: hci8: command tx timeout [ 1555.141852][ T54] Bluetooth: hci7: command tx timeout [ 1555.141878][T31949] Bluetooth: hci8: command tx timeout [ 1586.809779][T31998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.811127][T31998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.817642][T31998] bridge_slave_0: entered allmulticast mode [ 1586.944734][T31998] bridge_slave_0: entered promiscuous mode [ 1589.630260][T31998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.631458][T31998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.631697][T31998] bridge_slave_1: entered allmulticast mode [ 1589.654300][T31998] bridge_slave_1: entered promiscuous mode [ 1598.131070][T32005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.355731][T32005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.356479][T32005] bridge_slave_0: entered allmulticast mode [ 1598.359261][T32005] bridge_slave_0: entered promiscuous mode [ 1599.634907][T32009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.635906][T32009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.636576][T32009] bridge_slave_0: entered allmulticast mode [ 1599.639254][T32009] bridge_slave_0: entered promiscuous mode [ 1600.188309][T32009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.189639][T32009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.190574][T32009] bridge_slave_1: entered allmulticast mode [ 1600.764837][T32009] bridge_slave_1: entered promiscuous mode [ 1604.212661][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1604.219947][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1604.227863][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1604.231349][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1604.239960][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1607.179114][ T54] Bluetooth: hci0: command tx timeout [ 1607.419805][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.426185][ T54] Bluetooth: hci0: command tx timeout [ 1611.932676][ T54] Bluetooth: hci0: command tx timeout [ 1612.967514][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1612.975715][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1612.978397][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1613.216357][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1613.218754][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1614.151662][ T54] Bluetooth: hci0: command tx timeout [ 1615.749541][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1615.774721][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1615.777607][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1615.781191][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1616.180971][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1617.068298][T31949] Bluetooth: hci2: command tx timeout [ 1619.235713][T31949] Bluetooth: hci3: command tx timeout [ 1619.236312][T31949] Bluetooth: hci2: command tx timeout [ 1621.622894][ T54] Bluetooth: hci2: command tx timeout [ 1621.622915][ T54] Bluetooth: hci3: command tx timeout [ 1623.702156][T31949] Bluetooth: hci3: command tx timeout [ 1623.702185][T31949] Bluetooth: hci2: command tx timeout [ 1625.792011][ T54] Bluetooth: hci3: command tx timeout [ 1634.992679][T32005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.993666][T32005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.994215][T32005] bridge_slave_1: entered allmulticast mode [ 1634.996809][T32005] bridge_slave_1: entered promiscuous mode [ 1663.047829][T31949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1663.394243][T31949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1663.397297][T31949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1663.401463][T31949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1663.410214][T31949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1666.764053][ T54] Bluetooth: hci4: command tx timeout [ 1668.835047][T31949] Bluetooth: hci4: command tx timeout [ 1668.842220][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.930819][ T54] Bluetooth: hci4: command tx timeout [ 1672.981850][T31949] Bluetooth: hci4: command tx timeout [ 1680.808585][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1681.212255][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1681.215122][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1681.219019][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1681.221470][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1683.381907][ T54] Bluetooth: hci5: command tx timeout [ 1684.149315][T31949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1684.676360][T31949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1684.678594][T31949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1684.686808][T31949] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1684.691200][T31949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1685.483296][ T54] Bluetooth: hci5: command tx timeout [ 1687.541883][T31949] Bluetooth: hci6: command tx timeout [ 1687.542446][T31949] Bluetooth: hci5: command tx timeout [ 1689.621818][ T54] Bluetooth: hci5: command tx timeout [ 1689.621839][ T54] Bluetooth: hci6: command tx timeout [ 1692.255831][T31949] Bluetooth: hci6: command tx timeout [ 1694.312008][T31949] Bluetooth: hci6: command tx timeout [ 1722.615395][ T35] INFO: task syz-executor:31961 blocked for more than 144 seconds. [ 1722.615411][ T35] Not tainted syzkaller #0 [ 1722.615415][ T35] Blocked by coredump. [ 1722.615418][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1722.615422][ T35] task:syz-executor state:D stack:26120 pid:31961 tgid:31961 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1722.615444][ T35] Call Trace: [ 1722.615448][ T35] [ 1722.615455][ T35] __schedule+0x17db/0x58f0 [ 1722.615479][ T35] ? __pfx___schedule+0x10/0x10 [ 1722.615491][ T35] ? schedule+0x90/0x2b0 [ 1722.615500][ T35] schedule+0x164/0x2b0 [ 1722.615509][ T35] schedule_preempt_disabled+0x13/0x30 [ 1722.615517][ T35] __mutex_lock+0x7c1/0x1550 [ 1722.615528][ T35] ? __mutex_lock+0x5d4/0x1550 [ 1722.615537][ T35] ? rcu_barrier+0x4c/0x530 [ 1722.615548][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 1722.615561][ T35] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1722.615572][ T35] rcu_barrier+0x4c/0x530 [ 1722.615585][ T35] netdev_run_todo+0x2fc/0x1060 [ 1722.615597][ T35] ? __pfx_netif_state_change+0x10/0x10 [ 1722.615606][ T35] ? __pfx_netdev_run_todo+0x10/0x10 [ 1722.615618][ T35] ? kasan_quarantine_put+0xbb/0x1f0 [ 1722.615627][ T35] ? lockdep_hardirqs_on+0x7b/0x110 [ 1722.615638][ T35] ? netdev_state_change+0x1bc/0x210 [ 1722.615649][ T35] tun_chr_close+0x13c/0x1c0 [ 1722.615658][ T35] ? __pfx_tun_chr_close+0x10/0x10 [ 1722.615666][ T35] __fput+0x418/0xa50 [ 1722.615678][ T35] task_work_run+0x1d9/0x270 [ 1722.615688][ T35] ? __pfx_task_work_run+0x10/0x10 [ 1722.615697][ T35] ? do_exit+0x735/0x2360 [ 1722.615704][ T35] ? kmem_cache_free+0x182/0x650 [ 1722.615711][ T35] ? put_net+0x191/0x260 [ 1722.615723][ T35] do_exit+0x73a/0x2360 [ 1722.615732][ T35] ? lock_acquire+0x115/0x350 [ 1722.615740][ T35] ? __pfx_do_exit+0x10/0x10 [ 1722.615749][ T35] ? do_raw_spin_lock+0x12b/0x2f0 [ 1722.615763][ T35] do_group_exit+0x22d/0x2f0 [ 1722.615770][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 1722.615779][ T35] get_signal+0x121b/0x12c0 [ 1722.615797][ T35] arch_do_signal_or_restart+0xbb/0x860 [ 1722.615809][ T35] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1722.615822][ T35] ? fput_close_sync+0x1f8/0x240 [ 1722.615834][ T35] exit_to_user_mode_loop+0x10e/0x770 [ 1722.615843][ T35] ? rcu_is_watching+0x16/0xb0 [ 1722.615853][ T35] do_syscall_64+0x328/0x520 [ 1722.615862][ T35] ? trace_irq_disable+0x3b/0x140 [ 1722.615870][ T35] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.615880][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.615888][ T35] RIP: 0033:0x7f4b2cf9ddeb [ 1722.615895][ T35] RSP: 002b:00007ffedfbd6b60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.615904][ T35] RAX: 0000000000000000 RBX: 00007ffedfbd6c10 RCX: 00007f4b2cf9ddeb [ 1722.615909][ T35] RDX: 00007ffedfbd6be0 RSI: 00000000400454ca RDI: 00000000000000c8 [ 1722.615914][ T35] RBP: 00007f4b2d0359ad R08: 0000000000000000 R09: 0000000000000000 [ 1722.615919][ T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1722.615924][ T35] R13: 0000000000000003 R14: 00007ffedfbd6f08 R15: 0000000000000000 [ 1722.615936][ T35] [ 1722.615946][ T35] [ 1722.615946][ T35] Showing all locks held in the system: [ 1722.615951][ T35] locks held by kworker/u8:1/13: 3, on CPU#1: [ 1722.615957][ T35] #0: ffff88817721b940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616015][ T35] #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616037][ T35] #2: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1722.616058][ T35] locks held by khungtaskd/35: 1, last CPU#1: [ 1722.616064][ T35] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1722.616099][ T35] locks held by getty/5419: 2, on CPU#1: [ 1722.616105][ T35] #0: ffff88817a7b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1722.616132][ T35] #1: ffffc900027682e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1722.616156][ T35] locks held by kworker/u8:4/9945: 2, last CPU#1: [ 1722.616162][ T35] #0: ffff888177d09940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616181][ T35] #1: ffffc90006db7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616205][ T35] locks held by kworker/u8:5/19085: 4, last CPU#1: [ 1722.616211][ T35] #0: ffff88817741f940 ((wq_completion)krds_cp_wq#12/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616230][ T35] #1: ffffc90003a0fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616250][ T35] #2: ffff888169e6a180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1722.616270][ T35] #3: ffff888192303660 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: rds_tcp_tune+0x220/0x920 [ 1722.616294][ T35] locks held by kworker/u10:0/25329: 3, on CPU#1: [ 1722.616299][ T35] #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616318][ T35] #1: ffffc9000418fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616337][ T35] #2: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1722.616360][ T35] locks held by kworker/0:1/27790: 7, last CPU#0: [ 1722.616366][ T35] #0: ffff88810006a940 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616385][ T35] #1: ffffc9000141fc40 ((work_completion)(&(&br->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616404][ T35] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 1722.616423][ T35] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1722.616442][ T35] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 1722.616459][ T35] #5: ffff888121028298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 1722.616480][ T35] #6: ffffffff9aa29748 (&____s->seqcount#2){----}-{0:0}, at: __ip_vs_conn_in_get+0x2db/0x10f0 [ 1722.616507][ T35] locks held by syz.0.7664/31917: 1, on CPU#1: [ 1722.616512][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1722.616530][ T35] locks held by syz.3.7666/31925: 1, on CPU#1: [ 1722.616535][ T35] #0: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1722.616556][ T35] locks held by syz.2.7668/31938: 1, on CPU#1: [ 1722.616561][ T35] #0: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1722.616580][ T35] locks held by syz-executor/31955: 1, on CPU#1: [ 1722.616586][ T35] #0: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1722.616604][ T35] locks held by syz-executor/31961: 1, on CPU#1: [ 1722.616610][ T35] #0: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1722.616632][ T35] locks held by kworker/u8:7/31997: 4, on CPU#1: [ 1722.616637][ T35] #0: ffff8881012d5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616657][ T35] #1: ffffc900079cfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1722.616676][ T35] #2: ffffffff90244da8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1722.616695][ T35] #3: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1722.616713][ T35] locks held by syz-executor/31998: 1, on CPU#1: [ 1722.616718][ T35] #0: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1722.616737][ T35] locks held by syz-executor/32005: 1, on CPU#1: [ 1722.616743][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1722.616760][ T35] locks held by syz-executor/32009: 1, last CPU#1: [ 1722.616765][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1722.616784][ T35] locks held by syz-executor/32074: 1, on CPU#1: [ 1722.616789][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1722.616808][ T35] locks held by syz-executor/32077: 1, on CPU#1: [ 1722.616813][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1722.616832][ T35] locks held by syz-executor/32095: 2, last CPU#1: [ 1722.616838][ T35] #0: ffff88816f5b1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1722.616858][ T35] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1722.616878][ T35] locks held by syz-executor/32096: 1, on CPU#1: [ 1722.616883][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1722.616904][ T35] locks held by syz-executor/32103: 1, on CPU#1: [ 1722.616909][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1722.616929][ T35] locks held by syz-executor/32108: 1, on CPU#1: [ 1722.616935][ T35] #0: ffffffff90253600 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1722.616955][ T35] locks held by syz-executor/32116: 2, last CPU#1: [ 1722.616960][ T35] #0: ffff88817a26d038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1722.617015][ T35] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1722.617035][ T35] [ 1722.617038][ T35] ============================================= [ 1722.617038][ T35] [ 1722.617042][ T35] NMI backtrace for cpu 1 [ 1722.617048][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1722.617057][ T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 1722.617061][ T35] Call Trace: [ 1722.617065][ T35] [ 1722.617068][ T35] dump_stack_lvl+0xe8/0x150 [ 1722.617079][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 1722.617090][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1722.617102][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1722.617119][ T35] sys_info+0x135/0x170 [ 1722.617128][ T35] watchdog+0xfd7/0x1030 [ 1722.617138][ T35] ? watchdog+0x1c7/0x1030 [ 1722.617148][ T35] kthread+0x38b/0x480 [ 1722.617155][ T35] ? __pfx_watchdog+0x10/0x10 [ 1722.617162][ T35] ? __pfx_kthread+0x10/0x10 [ 1722.617172][ T35] ret_from_fork+0x514/0xb70 [ 1722.617185][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 1722.617194][ T35] ? __switch_to+0xc89/0x1420 [ 1722.617209][ T35] ? __pfx_kthread+0x10/0x10 [ 1722.617220][ T35] ret_from_fork_asm+0x1a/0x30 [ 1722.617246][ T35] [ 1722.617250][ T35] Sending NMI from CPU 1 to CPUs 0: [ 1722.617301][ C0] NMI backtrace for cpu 0 [ 1722.617317][ C0] CPU: 0 UID: 0 PID: 27790 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1722.617331][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 1722.617341][ C0] Workqueue: events_long br_fdb_cleanup [ 1722.617361][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1722.617374][ C0] Code: ff ff ff e8 50 28 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 e3 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 2c 45 0a cc 48 8d 3d 67 4e da [ 1722.617386][ C0] RSP: 0018:ffffc90000006dc0 EFLAGS: 00000296 [ 1722.617398][ C0] RAX: 32f582729c8e9900 RBX: 0000000000000000 RCX: 8000000000000100 [ 1722.617407][ C0] RDX: 00000000071bee9f RSI: ffffffff8e69ca38 RDI: ffffffff8c6da580 [ 1722.617417][ C0] RBP: ffff888112a39e00 R08: ffffffff8177f1df R09: 0000000000000000 [ 1722.617427][ C0] R10: ffffc90000006ef8 R11: ffffffff81b28790 R12: ffffffff8ed5c8a0 [ 1722.617437][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1722.617446][ C0] FS: 0000000000000000(0000) GS:ffff88818d6cf000(0000) knlGS:0000000000000000 [ 1722.617457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1722.617466][ C0] CR2: 0000200000000040 CR3: 000000000eb48000 CR4: 00000000000006f0 [ 1722.617504][ C0] Call Trace: [ 1722.617511][ C0] [ 1722.617517][ C0] ? __alloc_skb+0x1db/0x7a0 [ 1722.617533][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1722.617546][ C0] unwind_next_frame+0xac/0x2550 [ 1722.617559][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1722.617575][ C0] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 1722.617594][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1722.617610][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1722.617624][ C0] arch_stack_walk+0x11b/0x150 [ 1722.617641][ C0] ? __alloc_skb+0x1db/0x7a0 [ 1722.617657][ C0] stack_trace_save+0xa9/0x100 [ 1722.617670][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1722.617683][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1722.617701][ C0] kasan_save_track+0x3e/0x80 [ 1722.617714][ C0] ? kasan_save_track+0x3e/0x80 [ 1722.617727][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1722.617740][ C0] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 1722.617759][ C0] ? __alloc_skb+0x1db/0x7a0 [ 1722.617791][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1722.617807][ C0] kmem_cache_alloc_node_noprof+0x354/0x610 [ 1722.617828][ C0] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1722.617846][ C0] ? __alloc_skb+0x1db/0x7a0 [ 1722.617860][ C0] ? __alloc_skb+0x1db/0x7a0 [ 1722.617878][ C0] __alloc_skb+0x1db/0x7a0 [ 1722.617893][ C0] synproxy_send_client_synack+0x175/0xde0 [ 1722.617909][ C0] ? lock_acquire+0x115/0x350 [ 1722.617921][ C0] ? synproxy_pernet+0x45/0x270 [ 1722.617936][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1722.617951][ C0] ? nft_log_eval+0x2f4/0x3b0 [ 1722.617961][ C0] ? synproxy_pernet+0x45/0x270 [ 1722.618015][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 1722.618032][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1722.618054][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1722.618072][ C0] nft_synproxy_do_eval+0x335/0x550 [ 1722.618087][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1722.618103][ C0] ? __lock_acquire+0x747/0x2de0 [ 1722.618119][ C0] nft_do_chain+0x132b/0x1b10 [ 1722.618140][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1722.618157][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1722.618174][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1722.618196][ C0] nft_do_chain_ipv4+0x195/0x290 [ 1722.618211][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1722.618220][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 1722.618229][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 1722.618239][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 1722.618248][ C0] nf_hook_slow+0xc5/0x220 [ 1722.618256][ C0] NF_HOOK+0x21f/0x3c0 [ 1722.618265][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1722.618274][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1722.618282][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1722.618290][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1722.618300][ C0] ? ip_local_deliver+0x113/0x190 [ 1722.618309][ C0] NF_HOOK+0x336/0x3c0 [ 1722.618317][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1722.618326][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1722.618334][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1722.618342][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1722.618351][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1722.618360][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1722.618368][ C0] process_backlog+0xa6b/0x18b0 [ 1722.618377][ C0] ? process_backlog+0x3de/0x18b0 [ 1722.618387][ C0] __napi_poll+0xaa/0x330 [ 1722.618394][ C0] net_rx_action+0x61d/0xf50 [ 1722.618404][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1722.618411][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1722.618425][ C0] ? net_tx_action+0xbff/0xc30 [ 1722.618433][ C0] handle_softirqs+0x226/0x860 [ 1722.618442][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1722.618452][ C0] __irq_exit_rcu+0xcb/0x220 [ 1722.618461][ C0] irq_exit_rcu+0x9/0x30 [ 1722.618469][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1722.618477][ C0] [ 1722.618479][ C0] [ 1722.618482][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1722.618490][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1722.618497][ C0] Code: ff ff ff e8 50 28 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 e3 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 2c 45 0a cc 48 8d 3d 67 4e da [ 1722.618503][ C0] RSP: 0018:ffffc9000141faa0 EFLAGS: 00000296 [ 1722.618510][ C0] RAX: 32f582729c8e9900 RBX: 0000000000000001 RCX: 0000000000000046 [ 1722.618515][ C0] RDX: 000000004abe915d RSI: ffffffff8e69ca38 RDI: ffffffff8c6da580 [ 1722.618520][ C0] RBP: ffff888112a39e00 R08: ffffffff818f9aba R09: 0000000000000000 [ 1722.618525][ C0] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: ffffc9000141fc40 [ 1722.618530][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 1722.618536][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1722.618550][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1722.618559][ C0] process_scheduled_works+0xc03/0x1630 [ 1722.618567][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1722.618581][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1722.618591][ C0] ? assign_work+0x3cf/0x5d0 [ 1722.618601][ C0] worker_thread+0xa47/0xfb0 [ 1722.618612][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1722.618623][ C0] kthread+0x38b/0x480 [ 1722.618630][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1722.618639][ C0] ? __pfx_kthread+0x10/0x10 [ 1722.618645][ C0] ret_from_fork+0x514/0xb70 [ 1722.618653][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1722.618659][ C0] ? __switch_to+0xc89/0x1420 [ 1722.618669][ C0] ? __pfx_kthread+0x10/0x10 [ 1722.618676][ C0] ret_from_fork_asm+0x1a/0x30 [ 1722.618689][ C0] [ 1722.619289][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 1723.215648][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1723.218984][ T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 1723.222496][ T35] Call Trace: [ 1723.223655][ T35] [ 1723.224834][ T35] vpanic+0x56d/0xa60 [ 1723.226439][ T35] ? __pfx_vpanic+0x10/0x10 [ 1723.228244][ T35] ? console_srcu_read_unlock+0x3a/0x60 [ 1723.230246][ T35] panic+0xc5/0xd0 [ 1723.231598][ T35] ? __pfx_panic+0x10/0x10 [ 1723.233317][ T35] ? wq_watchdog_touch+0xf9/0x160 [ 1723.235298][ T35] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1723.237325][ T35] watchdog+0x1030/0x1030 [ 1723.238658][ T35] ? watchdog+0x1c7/0x1030 [ 1723.240046][ T35] kthread+0x38b/0x480 [ 1723.241336][ T35] ? __pfx_watchdog+0x10/0x10 [ 1723.242812][ T35] ? __pfx_kthread+0x10/0x10 [ 1723.244282][ T35] ret_from_fork+0x514/0xb70 [ 1723.245742][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 1723.247349][ T35] ? __switch_to+0xc89/0x1420 [ 1723.248838][ T35] ? __pfx_kthread+0x10/0x10 [ 1723.250547][ T35] ret_from_fork_asm+0x1a/0x30 [ 1723.252462][ T35] [ 1723.254456][ T35] Kernel Offset: disabled [ 1723.256186][ T35] Rebooting in 86400 seconds..