last executing test programs: 33.302845819s ago: executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 33.121455925s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4}, 0x48) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002e00)={&(0x7f00000017c0)={0x1630, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1614, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "db3c2cdb4698"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1604, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0xff, 0x0, "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"}, {0xee, 0x0, "360a81216732d76be96754e3cc7e2b3d894f602413c071fdf327ba69d8465d037c98ea72a06cec4f8e06abe2f1be71066d4f068dc85ca696b4fdcb20aef2feb3d5dcf19892b73114a08a77c0d8a56c5304ff4043591ed98b796339d7c22fcef52d77d30686fd31a5210003870ae3a81a58a71dfb0e8bdda6b0594385b01d18160da7717610528973d66dac8a670d065eb009f43c9e22d5e105d5dec789e3ef74e916e922ed67647190d990ec398357590e728abf6ce1ca66115abf286db4a0e9d1d2b54c947b791bae40ff4401112767b2e316e6e2cd4b5e9a43288f6fbc3e560d163e3ae4f83ea7928c"}, {0xc4, 0x0, "dfa5f9939dd8dfa43df682e3ba4eeadd85a9c23258ea69549dc2bda66e6a50ae8ae1fe191eb52106d4c5d071d50a703e03ebb94aff62ff1ee3fefbb6b502303d3a271ce872f1aae1d2e64f937eb8fb21fe5c4822ca7f0ce7eb198f0103a11d41ab59bc081e988e12419d73c9382beda06ef5ea9526db774453cc79987a337601a3efbc8cbe7e8b5b8748cb26c04bafb51155c82ca127f52eb7581e264319dad72855560519e5c3111d153440759dd38fc543cd3d05a9c203027f55b0c9b73b46"}, {0xd5, 0x0, "706e65e20aac8f485373f3e5152e12c43ea58ea2db95d780c1426456b8974a78b200754e1b4fe2b73ca1112bb367774bc4c1aa16a95d91c117456c5a2c15c81c30cd231ba3a0c6a4d889247e9aafd35bc843ac8a85994868207de58982d8643ce730b898ced322d06f208fb4318b41502e4f0abb347ad97d813071ac97f05813e2b3f86d2a32f5ef88e6a91a4ac53142ce29d54033891021a80576b497d385fb2ce1db528900d42042a40877b5dadd6f5170f9fba9f25695b6572b2abd550ea8e74d75387b87e270c090797d3cd92f2d2b"}, {0xf8, 0x0, "ad187fbdb622605b56f5fdcd8be2b5233ed536178ead0446ee97d016d7b2a88df5191a092794c584119623824d7d66b82d73f88631730252c880cea11387e30d339a2cfb8d4b8c332a21501b4b3ffb1f1b879dda5971fd290e5bca3c744cbbc7d94ac543ffc134a8a3166e99a3b0eb87251ba407ba56711538b683953eb4f4338c002830e233f1256e3f3c92aabee444c2b51dc166b75c3825f8b8604b66d8ce1724e2978742974772241d79ada5fe5c0a493ac0877ec2d52a3d0b215b8af939d9a82d48c64e13de620a217366ccc217435f0c858b2076c92c7065817e9e102f6e3f70f02ee975cff992915744becb1bc76106f5"}, {0x59, 0x0, "70a806307434313de4a1fecaa19a244c20d70c3ec13821726613a0bb136b8325d501e4b9a572b726e0f377c2e7690d658725e358752571c52006bb781c7f5baaec0e68d61af6fe3360e9fa2920308f10460b2a295c"}, {0x4d, 0x0, "e10ce214b9d451167ed3a35d226334617502afc70243f31edc5a8a80fc3d761e5508438f72ad4cd8729c22059b51dc57eb9339176be7a824e8784960837cdf731b15f86104e9ace5ca"}, {0xc9, 0x0, "83f881171e4ea7b0d8f92daf67b6bb8653c5f3c23ba90f9337e6c7905703901d228ea61ab3948bf15a0a2f3cfe2ac0ddb13151c660fee7392a4ecefdec660a8064dcf10e0df8db0513a01d194c713200de5f00a55f75b71f27e29c127839a598499278a1f2073b1c3724a0735ba62920c5cb4a181566cb661a4aad4c714a49421a6b8a5553e7f17e51b6dd3742a647d76984fbef78c2467db7f81fde02677c077b7831e536728d04913a84a151a1d96ff3f1627766fa5fbd3bb1e613b75000214d3b00046d"}]}]}]}, 0x1630}}, 0xc000) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004e80)={'lo\x00', {0x2, 0x4e24, @remote}}) 32.886709337s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x68060200) socket$inet6_sctp(0xa, 0x0, 0x84) socket$netlink(0x10, 0x3, 0x14) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'netdevsim0\x00', 0x4}, 0x18) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000de220000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000df251000000008002c00030000000500300000000000050033000100050037000000000005003800"/62], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 32.272673637s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670200e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670200e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 32.060696243s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000040), 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x20}}], 0x48}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 32.025241671s ago: executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4080) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x6001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x5f, 0x0]}}, 0x0, 0x1d}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}, 0x9}) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c00000001040102000000000000000000000000050001000100000034d2c485ed132421fc5bf32a1aeaffa3c9ce80856bff928ea6c71e877f24ba67b6ab4341ac1a1c6c5218fd8024e203792043a884a6ed3b71a6"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a000200000000000a000000"], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x1) sendmsg$inet(r3, &(0x7f00000030c0)={&(0x7f0000000880)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x8881) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x21, 0x6, 0x1, 0x20, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, 0x38) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000042008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) 31.812200484s ago: executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 31.723600376s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x23, "5e9cd4552372d90eeef690afd8e58d77671405dfda67bf8a2d1ad6d03479fc97fbd27b"}, &(0x7f0000000100)=0x2b) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)="b7e4beaed65f8fe1c5637dde8f69cfe980e7a306412915e780ffc71fd638b3f90864c23359c3f9761da280741935969696111ac4adb81b886a915c2f8d857b376a3f9bedb9171a2e2831a985", 0x4c}, {&(0x7f0000001a40)="5d645b621b3df9832ef948269b0c42fed99cb5c76d7a2c3542d3864f3a20d4efd53d529529f8", 0x26}, {&(0x7f0000001ac0)="dbf518c8df2bab21c743a413818a1b695f18c7ab7c305b0bb0bfa2b2fae3d8808fc3845c8ea35a7ba60d6bc24ef1292f646a516b15a5a8e3e749d944f25f0489f9c2c699ae9ad726c592645a245bb6e8a729ace3d1ee0623f73cc9c0699bdb325258577e88716d6dc4799e94e12b9016cc794c77b710f7f9404fc4a661469ffe068c10da1e10742d87dc3592cc6aa3", 0x8f}, {&(0x7f0000001b80)="261da59eb4ad27b5ec672f90a6e88ccee949372709f2d90284bbaf305a012b8a275f6b1f76e7", 0x26}, {&(0x7f0000001c00)="0104384ad1b1ac607715ade904b615048886134ff628f911c304f8b0e23c58fdbef0a30652d7a70b9da6f3feb3dcbd5c9cca0b31188950a9ae9e9939a5e3f40db5837641e18700db1bf4a3cf5076", 0x4e}], 0x5}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={r2, 0x78}, &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000008500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000240003801c0000800800034000000002100002800c000280080001800000000004000080140000001000010000000000000000000084000aa1f76a"], 0xe4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40841}, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b680000000000000000a45b4e00", "0000ff00", "dfa27021fe106750"}, 0x38) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 31.693604737s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400b53edcbbe87814ed00140000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0008800800010000000000"], 0x34}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000000)="a7"}], 0x1, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}], 0x20}, 0x10000844) 31.688662281s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x1000000) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc00000000000000}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x4}, 0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_DEL_RULE(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x420, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfb, {0x4, 0x1, 0x19, [0x7, 0x1443, 0x1000, 0x1, 0x7, 0x7fffffff, 0x6, 0x0, 0x7fffffff, 0x0, 0x3, 0x44, 0x9, 0x6, 0x3, 0x3, 0x1, 0xc7, 0x8001, 0x3f, 0x8001, 0x4, 0x1ff, 0xb4, 0x0, 0x7, 0x80000000, 0x3ff, 0x8, 0x1, 0x2, 0x2, 0x3, 0x400, 0x80, 0x1, 0x10000, 0x1, 0x5, 0x81, 0x5, 0x2, 0x200000, 0xdc97, 0xd0000000, 0x80000000, 0x4, 0x200, 0xfff, 0x5, 0x4, 0x5, 0x4, 0x80000001, 0x1, 0x8000, 0x6, 0x82, 0x8, 0x2, 0x6, 0x8, 0x105, 0xffff8000], [0x4, 0x6, 0x3d3, 0x4a, 0x8, 0x6, 0x6, 0x7, 0xff, 0x5, 0x4, 0x80000000, 0x6, 0x7, 0x2, 0xff, 0x95a4, 0x4, 0x8001, 0x20004, 0x6, 0xdc3, 0x5, 0xffffffb3, 0x6, 0x40, 0x0, 0x28, 0x400, 0xd72e, 0x8, 0x0, 0x6, 0x3, 0x2, 0xd342, 0xffffff80, 0x6c6, 0x25d7b41a, 0x0, 0x9, 0x401, 0x76, 0x9, 0x0, 0xffff8e4e, 0x10001, 0x81, 0x4, 0xf5ff, 0xfffffff9, 0x4, 0x0, 0x4000000, 0x1, 0x20, 0x5, 0x2d, 0x9, 0x2, 0x3, 0x2, 0x7, 0x3], [0xfffffff9, 0xffffffff, 0x5, 0x7, 0x1, 0xfff, 0x8, 0x4, 0xff, 0x1, 0x2, 0x4, 0xe, 0x86cf, 0x7, 0x400, 0x8ef, 0x4, 0x1, 0x40009, 0xffffffff, 0x7, 0x0, 0x5, 0xffff, 0x800, 0x4, 0x42e, 0x4, 0x3, 0xd400, 0x0, 0x8, 0x9, 0x0, 0x3f, 0x5, 0x7, 0x100, 0x3, 0x5, 0x3, 0x0, 0x5, 0xa61, 0x6, 0x3009, 0x5, 0x5, 0x7fff, 0x800, 0xfffffffc, 0x9, 0x4, 0x401, 0x6, 0x0, 0x2, 0x9, 0x20, 0x2, 0x2fb, 0x9, 0xff], [0xffffffff, 0x9, 0x0, 0x8, 0x1, 0x5, 0xfffffffb, 0x10001, 0x85, 0x2b9, 0x5, 0x4, 0xb5, 0x100, 0xfffffc00, 0x5, 0x5, 0x3f, 0x81, 0x7, 0x8c, 0x2, 0x81, 0x0, 0x401, 0x0, 0x10001, 0x7fff, 0x3, 0x7, 0x3, 0x4, 0xe62, 0x5, 0xfffeffff, 0x815a, 0x80000001, 0xff, 0xc71, 0x3, 0x1ff, 0x9576, 0x80000000, 0x10000, 0x10001, 0x7ff, 0x401, 0x8, 0x8, 0x1, 0x10001, 0x0, 0x20000, 0x10000003, 0x4, 0x8, 0x1ff, 0x452f, 0x7f, 0x3ed1, 0x8, 0x1f, 0x1, 0x2]}, [""]}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0xffffffff, 0x401, 0x229, r0, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 31.538259478s ago: executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8001) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf257a000046e5629de92d3130d5000008000300", @ANYRES32=0x0, @ANYBLOB="0c002a000106b69884160904"], 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x4040090) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000100)={0x7, 'nr0\x00', {0x1}, 0x5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x656, 0x44, @mcast2, @mcast2={0xff, 0x5}, 0x40, 0x80, 0x0, 0x10000000}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0xfff, 0x8004, 0xffffffff, 0x8, r5}, 0x10) connect$l2tp6(r2, &(0x7f0000000280)={0xa, 0x0, 0x4, @private0, 0x9}, 0x20) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x5, 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r10 = socket(0x29, 0x80805, 0x1) sendmmsg$inet(r10, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001400)=[{&(0x7f00000000c0)="fe", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x10, &(0x7f00000077c0)={r9, 0x0, 0xfffe}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000003c0)={r9, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000400)={r9, @in6={{0xa, 0x4e23, 0x2, @mcast1, 0x79ea}}}, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, &(0x7f0000000380)={r5, 0x4}, 0x8) 31.496644497s ago: executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @empty, @val={@val={0x88a8, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x0]}}}}}}}, 0x0) 31.481604329s ago: executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4080) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x6001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x5f, 0x0]}}, 0x0, 0x1d}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}, 0x9}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c00000001040102000000000000000000000000050001000100000034d2c485ed132421fc5bf32a1aeaffa3c9ce80856bff928ea6c71e877f24ba67b6ab4341ac1a1c6c5218fd8024e203792043a884a6ed3b71a6"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a000200000000000a000000"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$inet(r3, &(0x7f00000030c0)={&(0x7f0000000880)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x8881) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x21, 0x6, 0x1, 0x20, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, 0x38) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000042008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) 31.352320992s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)={0x38, r5, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x8, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x4}]}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x108, r11, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x13}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x18}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa930006}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x898300}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x44104}, 0x20000000) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x0, 0x0, 0x0, "aeb8675e04e5bdf2247481041a5b9cddbc936e0e8bbeea534d7e49c1347298858582893a922a73ff572ef69992eca68a406182d70f36040034b8349435f28d628d62a3b45bb9880000000000008d0f00"}, 0xd8) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) 31.219771337s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x0, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f46f5d2ec8d8763e24a5658aec9bee398a30eb827977aa36f449c0160f17f510779e62ac1a1dce144b3d11b4a84a5484d16860c3494aa84ea554a2a7", 0x3c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000"], 0x0}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r2, 0x501, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) unshare(0x20040600) pwrite64(r8, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c8054000b80080009"], 0x16c}}, 0x0) 31.042642962s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x68060200) socket$inet6_sctp(0xa, 0x0, 0x84) socket$netlink(0x10, 0x3, 0x14) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'netdevsim0\x00', 0x4}, 0x18) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000de220000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000df251000000008002c00030000000500300000000000050033000100050037000000000005003800"/62], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 30.972008853s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000040), 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x20}}], 0x48}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x18}}, 0x0) 30.961909369s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/421], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000000005080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffb4621aa90000000000850000007b00000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) listen(r1, 0xfff) getpeername(r1, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000e90000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x1, 0xee, "00fa00"}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) r3 = socket(0x23, 0x80805, 0x2) connect$inet(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000001f0aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af020200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000001f0b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000000200fc00000000000000000000ff0bc0fe00000000008879e6648520050015ca83747357a02745000400000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786dfae45f57d9a82040779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000440}, 0x40800) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x10c, 0x2f0, 0x10c, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast1}}}, {{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@random="fbd84403178a"}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'geneve1\x00'}, 0xbc, 0xe0}, @unspec=@CONNSECMARK={0x24}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="47e620140c10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg1\x00', 'bridge0\x00'}, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0xff11) 30.921914616s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r2, @ANYBLOB="00002abd7000fddbdf251300000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x24000044) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) socketpair$unix(0x1, 0x5, 0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1, 0x15d}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/122, 0x7a}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}, 0x10000000}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000300)={0x1f, @none}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000300)={0x1f, @none}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 30.725774999s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x1e, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r1, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.722123948s ago: executing program 4: r0 = socket(0xa, 0x0, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {0x2}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38, 0x0, 0xb}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x82, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip_vti0\x00'}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xd, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) 30.704376249s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x23c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1b0, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_connmark={0xf4, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x89, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806"}, {0xc}, {0xc}}}]}]}}]}, 0x23c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 30.535572812s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x23, "5e9cd4552372d90eeef690afd8e58d77671405dfda67bf8a2d1ad6d03479fc97fbd27b"}, &(0x7f0000000100)=0x2b) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)="b7e4beaed65f8fe1c5637dde8f69cfe980e7a306412915e780ffc71fd638b3f90864c23359c3f9761da280741935969696111ac4adb81b886a915c2f8d857b376a3f9bedb9171a2e2831a985", 0x4c}, {&(0x7f0000001a40)="5d645b621b3df9832ef948269b0c42fed99cb5c76d7a2c3542d3864f3a20d4efd53d529529f8", 0x26}, {&(0x7f0000001ac0)="dbf518c8df2bab21c743a413818a1b695f18c7ab7c305b0bb0bfa2b2fae3d8808fc3845c8ea35a7ba60d6bc24ef1292f646a516b15a5a8e3e749d944f25f0489f9c2c699ae9ad726c592645a245bb6e8a729ace3d1ee0623f73cc9c0699bdb325258577e88716d6dc4799e94e12b9016cc794c77b710f7f9404fc4a661469ffe068c10da1e10742d87dc3592cc6aa3", 0x8f}, {&(0x7f0000001b80)="261da59eb4ad27b5ec672f90a6e88ccee949372709f2d90284bbaf305a012b8a275f6b1f76e7", 0x26}, {&(0x7f0000001c00)="0104384ad1b1ac607715ade904b615048886134ff628f911c304f8b0e23c58fdbef0a30652d7a70b9da6f3feb3dcbd5c9cca0b31188950a9ae9e9939a5e3f40db5837641e18700db1bf4a3cf5076", 0x4e}], 0x5}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={r2, 0x78}, &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000008500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000240003801c0000800800034000000002100002800c000280080001800000000004000080140000001000010000000000000000000084000aa1f76a"], 0xe4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40841}, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b680000000000000000a45b4e00", "0000ff00", "dfa27021fe106750"}, 0x38) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 30.364940214s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x2b0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x230, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1b0, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_connmark={0xf4, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x89, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806"}, {0xc}, {0xc}}}]}]}}]}, 0x2b0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 30.028398321s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x29, 0x0, 0x1000000) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc00000000000000}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x4}, 0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_DEL_RULE(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x420, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfb, {0x4, 0x1, 0x19, [0x7, 0x1443, 0x1000, 0x1, 0x7, 0x7fffffff, 0x6, 0x0, 0x7fffffff, 0x0, 0x3, 0x44, 0x9, 0x6, 0x3, 0x3, 0x1, 0xc7, 0x8001, 0x3f, 0x8001, 0x4, 0x1ff, 0xb4, 0x0, 0x7, 0x80000000, 0x3ff, 0x8, 0x1, 0x2, 0x2, 0x3, 0x400, 0x80, 0x1, 0x10000, 0x1, 0x5, 0x81, 0x5, 0x2, 0x200000, 0xdc97, 0xd0000000, 0x80000000, 0x4, 0x200, 0xfff, 0x5, 0x4, 0x5, 0x4, 0x80000001, 0x1, 0x8000, 0x6, 0x82, 0x8, 0x2, 0x6, 0x8, 0x105, 0xffff8000], [0x4, 0x6, 0x3d3, 0x4a, 0x8, 0x6, 0x6, 0x7, 0xff, 0x5, 0x4, 0x80000000, 0x6, 0x7, 0x2, 0xff, 0x95a4, 0x4, 0x8001, 0x20004, 0x6, 0xdc3, 0x5, 0xffffffb3, 0x6, 0x40, 0x0, 0x28, 0x400, 0xd72e, 0x8, 0x0, 0x6, 0x3, 0x2, 0xd342, 0xffffff80, 0x6c6, 0x25d7b41a, 0x0, 0x9, 0x401, 0x76, 0x9, 0x0, 0xffff8e4e, 0x10001, 0x81, 0x4, 0xf5ff, 0xfffffff9, 0x4, 0x0, 0x4000000, 0x1, 0x20, 0x5, 0x2d, 0x9, 0x2, 0x3, 0x2, 0x7, 0x3], [0xfffffff9, 0xffffffff, 0x5, 0x7, 0x1, 0xfff, 0x8, 0x4, 0xff, 0x1, 0x2, 0x4, 0xe, 0x86cf, 0x7, 0x400, 0x8ef, 0x4, 0x1, 0x40009, 0xffffffff, 0x7, 0x0, 0x5, 0xffff, 0x800, 0x4, 0x42e, 0x4, 0x3, 0xd400, 0x0, 0x8, 0x9, 0x0, 0x3f, 0x5, 0x7, 0x100, 0x3, 0x5, 0x3, 0x0, 0x5, 0xa61, 0x6, 0x3009, 0x5, 0x5, 0x7fff, 0x800, 0xfffffffc, 0x9, 0x4, 0x401, 0x6, 0x0, 0x2, 0x9, 0x20, 0x2, 0x2fb, 0x9, 0xff], [0xffffffff, 0x9, 0x0, 0x8, 0x1, 0x5, 0xfffffffb, 0x10001, 0x85, 0x2b9, 0x5, 0x4, 0xb5, 0x100, 0xfffffc00, 0x5, 0x5, 0x3f, 0x81, 0x7, 0x8c, 0x2, 0x81, 0x0, 0x401, 0x0, 0x10001, 0x7fff, 0x3, 0x7, 0x3, 0x4, 0xe62, 0x5, 0xfffeffff, 0x815a, 0x80000001, 0xff, 0xc71, 0x3, 0x1ff, 0x9576, 0x80000000, 0x10000, 0x10001, 0x7ff, 0x401, 0x8, 0x8, 0x1, 0x10001, 0x0, 0x20000, 0x10000003, 0x4, 0x8, 0x1ff, 0x452f, 0x7f, 0x3ed1, 0x8, 0x1f, 0x1, 0x2]}, [""]}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0xffffffff, 0x401, 0x229, r0, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x48) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 1.01234237s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4}, 0x48) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004e80)={'lo\x00', {0x2, 0x4e24, @remote}}) 708.790786ms ago: executing program 0: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000056000100000000000000000007000000e4a3bd77c3fcbfb3e48020929c414aaffa1b31c1d8fe7685e05d50244f521ac40e8160e601026da8866bb7e164b8c23ffe9d8222a665a365753c5c04b89a7e2ab057a122fb463e4128bd8637a106425aa16d518d363962b5da38339506219feaee28ffa78f43271b1a063fa1e38208b057e391ea201af4074510561abb7b5403ed826b20", @ANYRES32=0x0], 0x18}}, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000180)) 689.017258ms ago: executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4080) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x6001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x5f, 0x0]}}, 0x0, 0x1d}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}, 0x9}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c00000001040102000000000000000000000000050001000100000034d2c485ed132421fc5bf32a1aeaffa3c9ce80856bff928ea6c71e877f24ba67b6ab4341ac1a1c6c5218fd8024e203792043a884a6ed3b71a6"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a000200000000000a000000"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$inet(r3, &(0x7f00000030c0)={&(0x7f0000000880)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x8881) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x21, 0x6, 0x1, 0x20, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, 0x38) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000042008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) 336.308392ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=@framed={{}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @tail_call, @ldst, @jmp, @cb_func, @alu, @generic, @jmp, @initr0, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x0, 0x3}, {}, {0x30}, {0x6}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8) 0s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x68060200) socket$inet6_sctp(0xa, 0x0, 0x84) socket$netlink(0x10, 0x3, 0x14) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'netdevsim0\x00', 0x4}, 0x18) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000de220000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000df251000000008002c00030000000500300000000000050033000100050037000000000005003800"/62], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) kernel console output (not intermixed with test programs): t is strongly recommended to keep mac addresses unique to avoid problems! [ 230.783266][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.795146][T10003] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.814572][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.833731][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.853793][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.873784][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.890583][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.900811][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.912341][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.922699][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.933958][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.947459][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.006939][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.030914][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.046735][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.058619][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.081287][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.096629][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.107101][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.122199][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.133498][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.148277][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.158404][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.169023][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.180285][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.205255][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.223444][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.243743][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.266254][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.299063][T10013] ip6tnl1: entered promiscuous mode [ 231.313956][T10013] ip6tnl1: entered allmulticast mode [ 231.354079][ T9807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.362879][ T9807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.372987][ T9807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.382157][ T9807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.575231][T10018] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 231.784285][ T5132] Bluetooth: hci6: command tx timeout [ 231.866390][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.897426][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.997144][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.022760][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.044783][T10030] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.179427][T10033] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 232.243667][T10037] xt_TCPMSS: Only works on TCP SYN packets [ 232.253974][T10037] rdma_op ffff8880650769f0 conn xmit_rdma 0000000000000000 [ 232.473826][T10049] ip6tnl1: entered promiscuous mode [ 232.479201][T10049] ip6tnl1: entered allmulticast mode [ 232.667176][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 232.713071][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.781157][T10058] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 233.232377][T10070] bridge0: entered promiscuous mode [ 233.247376][T10070] bridge0: entered allmulticast mode [ 233.417931][T10077] xt_TCPMSS: Only works on TCP SYN packets [ 233.423310][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.425924][T10077] rdma_op ffff88802ee271f0 conn xmit_rdma 0000000000000000 [ 233.932939][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.218158][T10093] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 234.265703][T10095] bridge0: entered promiscuous mode [ 234.293721][T10095] bridge0: entered allmulticast mode [ 234.393388][T10099] xt_TCPMSS: Only works on TCP SYN packets [ 234.414407][T10099] rdma_op ffff8880599139f0 conn xmit_rdma 0000000000000000 [ 234.792021][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.015005][T10124] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 235.144275][T10124] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.425530][T10130] xt_TCPMSS: Only works on TCP SYN packets [ 235.445815][T10130] rdma_op ffff888020e671f0 conn xmit_rdma 0000000000000000 [ 235.910464][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.459019][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.630660][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.806367][T10165] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 238.150788][T10196] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 238.414413][T10200] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 238.538310][T10205] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 238.706994][T10210] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.389437][T10226] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.397489][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.400329][T10225] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.473421][T10226] bridge0: left promiscuous mode [ 239.483116][T10226] bridge0: left allmulticast mode [ 239.564459][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.571773][T10231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.579514][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.586801][T10231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.645490][T10231] bridge0: entered promiscuous mode [ 239.653723][T10231] bridge0: entered allmulticast mode [ 239.832419][T10239] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.930591][T10243] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.186132][T10251] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 240.213366][T10251] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 240.222125][ T29] audit: type=1804 audit(1718798960.327:29): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2564631006/syzkaller.i9EqSm/22/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 240.319998][T10256] smc: net device wg0 applied user defined pnetid SYZ0 [ 240.538116][T10259] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 240.566087][ T29] audit: type=1804 audit(1718798960.687:30): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/407/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 240.593423][T10259] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 240.814340][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.846361][T10273] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 241.224971][T10282] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.273840][T10285] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 241.280625][T10286] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.761610][T10303] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 241.779635][ T29] audit: type=1804 audit(1718798961.897:31): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/412/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 [ 241.809115][T10303] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 242.099936][T10318] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.131831][T10320] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 242.461446][T10333] syzkaller0: entered promiscuous mode [ 242.467631][T10333] syzkaller0: entered allmulticast mode [ 242.495179][T10335] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 242.580025][T10339] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.622778][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.796249][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.890060][T10346] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 242.928189][T10346] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.981439][T10352] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.160524][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.194858][T10360] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.324856][T10364] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 243.508571][ T5169] IPVS: starting estimator thread 0... [ 243.613730][T10374] IPVS: using max 21 ests per chain, 50400 per kthread [ 243.623281][T10378] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 243.654225][T10378] xt_TCPMSS: Only works on TCP SYN packets [ 243.667726][T10378] rdma_op ffff88805dae31f0 conn xmit_rdma 0000000000000000 [ 243.958764][T10394] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 244.000375][ T29] audit: type=1804 audit(1718798964.117:32): pid=10394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2564631006/syzkaller.i9EqSm/33/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 244.000407][T10394] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 244.562668][T10418] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 245.049938][ T29] audit: type=1804 audit(1718798965.167:33): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2564631006/syzkaller.i9EqSm/37/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 245.250150][T10436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.349210][T10443] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 245.510787][T10448] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 245.542402][T10448] xt_TCPMSS: Only works on TCP SYN packets [ 246.084925][T10462] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 246.266641][T10466] __nla_validate_parse: 11 callbacks suppressed [ 246.266664][T10466] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.481008][T10479] IPVS: Unknown mcast interface: netdevsim0 [ 247.372135][T10489] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.380046][T10489] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.414089][T10489] bridge0: left promiscuous mode [ 247.427447][T10489] bridge0: left allmulticast mode [ 247.514546][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.521858][T10495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.529531][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.536800][T10495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.571899][T10495] bridge0: entered promiscuous mode [ 247.590903][T10495] bridge0: entered allmulticast mode [ 247.905996][T10508] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 247.950829][T10512] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.971373][ T29] audit: type=1804 audit(1718798968.087:34): pid=10508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2564631006/syzkaller.i9EqSm/41/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 247.971462][T10508] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 248.013861][T10512] 0ªX¹¦D: renamed from gretap0 (while UP) [ 248.060554][T10512] 0ªX¹¦D: entered allmulticast mode [ 248.096813][T10512] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 248.352616][T10522] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 248.414385][T10522] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 248.773648][ T29] audit: type=1804 audit(1718798968.877:35): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2666662718/syzkaller.mXhDhC/429/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 248.880354][T10540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.533966][T10546] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 249.666788][T10550] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 249.738183][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.516082][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.012744][T10588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.260263][T10593] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.345408][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.414395][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.682644][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.707588][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.759531][T10611] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 251.817311][T10611] rdma_op ffff888025c231f0 conn xmit_rdma 0000000000000000 [ 251.956535][T10620] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 252.234284][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.370230][T10637] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.444082][T10639] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.944846][T10654] sctp: [Deprecated]: syz-executor.4 (pid 10654) Use of int in maxseg socket option. [ 252.944846][T10654] Use struct sctp_assoc_value instead [ 253.029992][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.161078][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.172743][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.182712][T10663] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 253.208991][T10663] xt_TCPMSS: Only works on TCP SYN packets [ 253.529013][T10675] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 253.550576][T10675] xt_TCPMSS: Only works on TCP SYN packets [ 253.664591][T10677] IPVS: length: 149 != 24 [ 253.777856][T10679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.815904][T10681] IPVS: length: 149 != 24 [ 254.223411][T10694] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 256.191776][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.464589][T10770] __nla_validate_parse: 11 callbacks suppressed [ 256.464617][T10770] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.740823][T10776] sctp: [Deprecated]: syz-executor.3 (pid 10776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.740823][T10776] Use struct sctp_sack_info instead [ 256.879213][T10779] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.486055][T10795] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 258.033309][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.055899][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.066467][T10822] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 258.077037][T10822] xt_TCPMSS: Only works on TCP SYN packets [ 258.526618][T10845] syz-executor.2[10845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.527003][T10845] syz-executor.2[10845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.748272][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.808750][T10852] bond1: entered promiscuous mode [ 258.834219][T10856] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 258.899141][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.972900][T10858] bond_slave_0: entered promiscuous mode [ 258.978706][T10858] bond_slave_1: entered promiscuous mode [ 258.995652][T10862] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 259.002766][T10858] macvtap1: entered promiscuous mode [ 259.011739][T10858] bond0: entered promiscuous mode [ 259.017694][T10858] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 259.030127][T10858] macvtap1: entered allmulticast mode [ 259.037627][T10865] xt_TCPMSS: Only works on TCP SYN packets [ 259.053737][T10858] bond0: entered allmulticast mode [ 259.058963][T10858] bond_slave_0: entered allmulticast mode [ 259.085166][T10858] bond_slave_1: entered allmulticast mode [ 259.091159][T10858] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 259.106242][T10858] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 259.126058][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.163908][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.182156][T10860] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 259.216203][T10870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.235409][T10871] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.121022][T10908] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 260.454372][T10923] IPVS: Unknown mcast interface: netdevsim0 [ 260.714582][T10934] macvtap2: entered promiscuous mode [ 260.722357][T10934] macvtap2: entered allmulticast mode [ 260.741645][T10936] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 260.761332][T10934] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 261.764830][T10968] __nla_validate_parse: 7 callbacks suppressed [ 261.764853][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.848960][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.894785][T10975] xt_TCPMSS: Only works on TCP SYN packets [ 261.926974][T10968] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 262.058013][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.393318][T10996] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.450911][T10996] openvswitch: netlink: Multiple metadata blocks provided [ 262.569894][T11003] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 262.606890][T11003] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 262.641693][T11003] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 263.234245][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.245466][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.254884][T11020] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 263.269061][T11020] xt_TCPMSS: Only works on TCP SYN packets [ 263.598064][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.629625][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.640707][T11034] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 263.655938][T11034] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 263.679143][T11034] rdma_op ffff8880608741f0 conn xmit_rdma 0000000000000000 [ 263.821231][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.833701][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.843447][T11048] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 263.854844][T11049] openvswitch: netlink: Multiple metadata blocks provided [ 263.909105][T11048] xt_TCPMSS: Only works on TCP SYN packets [ 264.223062][T11069] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 264.346774][T11073] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 264.372362][T11073] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 264.459284][T11073] rdma_op ffff88802e5819f0 conn xmit_rdma 0000000000000000 [ 264.632441][T11085] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 264.642836][T11085] xt_TCPMSS: Only works on TCP SYN packets [ 264.757853][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.765298][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.801994][T11093] bridge0: left promiscuous mode [ 264.820595][T11093] bridge0: left allmulticast mode [ 264.855981][T11087] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 264.900142][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.907460][T11098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.915124][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.922348][T11098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.968179][T11098] bridge0: entered promiscuous mode [ 265.000625][T11098] bridge0: entered allmulticast mode [ 265.058122][T11111] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 265.103740][T11110] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 265.205044][T11118] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 265.414236][T11127] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 265.458495][T11127] xt_TCPMSS: Only works on TCP SYN packets [ 266.002653][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.010724][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.085347][T11149] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.092584][T11149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.100308][T11149] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.107598][T11149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.146337][T11149] bridge0: entered promiscuous mode [ 266.151627][T11149] bridge0: entered allmulticast mode [ 266.340142][T11158] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 266.434617][T11161] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 266.470398][T11161] xt_TCPMSS: Only works on TCP SYN packets [ 266.505341][T11161] rdma_op ffff88804f12c1f0 conn xmit_rdma 0000000000000000 [ 267.078934][T11181] __nla_validate_parse: 13 callbacks suppressed [ 267.081444][T11181] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.118718][T11181] openvswitch: netlink: Multiple metadata blocks provided [ 267.414037][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.422290][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.473315][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.480687][T11186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.488385][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.495663][T11186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.590384][T11186] bridge0: entered promiscuous mode [ 267.599881][T11189] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.603833][T11186] bridge0: entered allmulticast mode [ 267.885577][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.917602][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.950699][T11196] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 267.977918][T11205] xt_TCPMSS: Only works on TCP SYN packets [ 268.010302][T11196] rdma_op ffff8880607ca9f0 conn xmit_rdma 0000000000000000 [ 270.250941][T11228] netlink: 856 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.315132][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.433714][T11239] IPVS: Unknown mcast interface: netdevsim0 [ 270.484279][T11238] macsec0: entered promiscuous mode [ 270.525898][T11238] veth1_macvtap: left promiscuous mode [ 270.605466][T11238] macsec0 (unregistering): left promiscuous mode [ 270.612383][T11250] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.640097][T11250] openvswitch: netlink: Multiple metadata blocks provided [ 272.114683][ T5132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.130936][ T5132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.141091][ T5132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.153464][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.175276][ T5132] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.192714][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.359856][T11285] xt_TCPMSS: Only works on TCP SYN packets [ 272.380052][T11285] rdma_op ffff88801dd621f0 conn xmit_rdma 0000000000000000 [ 273.933657][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.942943][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.959396][T11281] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 273.994734][T11293] IPVS: Unknown mcast interface: netdevsim0 [ 274.002205][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.264142][ T5129] Bluetooth: hci6: command tx timeout [ 274.310199][ T1052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.354663][T11310] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 274.454388][ T1052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.668124][ T1052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.075811][ T1052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.694219][ T1052] bridge_slave_1: left allmulticast mode [ 275.699944][ T1052] bridge_slave_1: left promiscuous mode [ 275.733636][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.825230][ T1052] bridge_slave_0: left allmulticast mode [ 275.830982][ T1052] bridge_slave_0: left promiscuous mode [ 275.839955][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.344107][ T5129] Bluetooth: hci6: command tx timeout [ 276.481085][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.493817][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.511025][ T1052] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 276.525253][ T1052] bond0 (unregistering): Released all slaves [ 276.634285][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.675475][T11338] xt_TCPMSS: Only works on TCP SYN packets [ 276.677321][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.703745][T11336] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 276.763803][T11338] rdma_op ffff88807f8fd9f0 conn xmit_rdma 0000000000000000 [ 277.016841][T11344] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 277.041403][T11350] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 277.050671][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.070026][T11350] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 277.078895][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.128251][T11275] chnl_net:caif_netlink_parms(): no params data found [ 277.612144][ T1052] hsr_slave_0: left promiscuous mode [ 277.622455][ T1052] hsr_slave_1: left promiscuous mode [ 277.632558][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.642821][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.654934][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.664249][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.700510][ T1052] veth0_macvtap: left promiscuous mode [ 277.708213][ T1052] veth1_vlan: left promiscuous mode [ 277.714138][ T1052] veth0_vlan: left promiscuous mode [ 278.423792][ T5129] Bluetooth: hci6: command tx timeout [ 278.546773][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 278.638810][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 278.925837][ T1052] smc: removing net device wg0 with user defined pnetid SYZ0 [ 279.765725][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.773354][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.821074][T11275] bridge_slave_0: entered allmulticast mode [ 279.839892][T11275] bridge_slave_0: entered promiscuous mode [ 279.852355][T11397] IPVS: Unknown mcast interface: netdevsim0 [ 279.879510][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.902978][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.920965][T11275] bridge_slave_1: entered allmulticast mode [ 279.935471][T11275] bridge_slave_1: entered promiscuous mode [ 279.961316][T11409] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 280.082253][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.124354][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.349580][T11275] team0: Port device team_slave_0 added [ 280.392903][T11275] team0: Port device team_slave_1 added [ 280.505445][ T5129] Bluetooth: hci6: command tx timeout [ 280.535994][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.543012][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.596104][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.630488][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.631316][ T1052] IPVS: stop unused estimator thread 0... [ 280.653899][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.717105][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.924852][T11275] hsr_slave_0: entered promiscuous mode [ 280.933156][T11275] hsr_slave_1: entered promiscuous mode [ 280.939743][T11275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.947511][T11275] Cannot create hsr debugfs directory [ 281.914576][T11448] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 282.100241][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.107812][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.137502][T11452] bridge0: left promiscuous mode [ 282.146593][T11452] bridge0: left allmulticast mode [ 282.173958][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.181177][T11453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.188777][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.196059][T11453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.214377][T11453] bridge0: entered promiscuous mode [ 282.232492][T11453] bridge0: entered allmulticast mode [ 282.626533][T11275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.655396][T11275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.674560][T11275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.704803][T11275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.777351][T11483] IPVS: Unknown mcast interface: netdevsim0 [ 282.967326][T11490] tipc: Started in network mode [ 282.994766][T11490] tipc: Node identity aad96168004f, cluster identity 4711 [ 283.023357][T11490] tipc: Enabled bearer , priority 10 [ 283.130466][T11275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.198082][T11495] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 283.227016][T11275] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.378877][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.386205][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.411652][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.435025][T11498] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 283.521429][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.528858][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.145981][ T5169] tipc: Node number set to 2861982056 [ 284.393989][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.417621][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.440159][T11518] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 284.470678][T11519] xt_TCPMSS: Only works on TCP SYN packets [ 284.536476][T11275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.755092][T11275] veth0_vlan: entered promiscuous mode [ 284.795384][T11275] veth1_vlan: entered promiscuous mode [ 284.930104][T11275] veth0_macvtap: entered promiscuous mode [ 284.980229][T11275] veth1_macvtap: entered promiscuous mode [ 285.040616][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.090804][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.123042][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.143625][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.164345][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.185389][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.205916][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.219382][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.233218][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.244058][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.255615][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.267663][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.277843][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.288712][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.302173][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.313125][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.328675][T11275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.358683][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.372366][T11534] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 285.397293][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.424822][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.453097][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.479417][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.500867][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.511941][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.525218][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.536392][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.547161][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.595582][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.619311][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.631610][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.651998][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.686604][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.707310][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.718753][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.732652][T11275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.837487][T11275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.849664][T11275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.861543][T11275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.882453][T11275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.901516][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.922072][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.933469][T11550] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 285.951203][T11552] xt_TCPMSS: Only works on TCP SYN packets [ 286.084506][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.116588][T11556] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 286.217717][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.225888][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.297927][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.313121][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.372729][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.385279][T11564] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 286.521478][T11567] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.545441][T11567] nbd: must specify at least one socket [ 286.669401][T11576] ÿÿÿ: renamed from vlan1 (while UP) [ 286.765034][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.096835][T11589] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 287.124297][T11589] xt_TCPMSS: Only works on TCP SYN packets [ 287.222248][ T5169] IPVS: starting estimator thread 0... [ 287.343686][T11595] IPVS: using max 19 ests per chain, 45600 per kthread [ 287.488712][T11602] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 288.466488][T11636] __nla_validate_parse: 3 callbacks suppressed [ 288.466510][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.545907][T11636] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 290.054978][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.164716][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.209039][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.225938][T11695] xt_TCPMSS: Only works on TCP SYN packets [ 290.256577][T11690] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 291.667838][T11721] Bluetooth: MGMT ver 1.22 [ 291.672377][T11721] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 291.831582][T11726] macvlan2: entered allmulticast mode [ 291.904883][T11726] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 291.963687][T11726] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 292.034493][T11726] team0: Port device macvlan2 added [ 292.576222][T11746] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.584015][T11746] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.668225][T11746] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.675534][T11746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.683095][T11746] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.690487][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.731522][T11746] bridge0: entered promiscuous mode [ 292.748747][T11746] bridge0: entered allmulticast mode [ 293.230562][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.243240][T11768] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 293.385952][T11776] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.403486][T11776] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 293.599525][T11781] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.842299][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.054564][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.093797][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.135904][T11805] xt_TCPMSS: Only works on TCP SYN packets [ 294.162325][T11802] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 294.716133][T11811] team0 (unregistering): Port device team_slave_0 removed [ 294.753104][T11811] team0 (unregistering): Port device team_slave_1 removed [ 294.785270][T11811] team0 (unregistering): Port device virt_wifi0 removed [ 294.805268][T11811] team0 (unregistering): Port device ÿÿÿÿ removed [ 294.857320][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.867652][T11812] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 294.967523][T11820] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 295.010937][T11824] x_tables: ip_tables: osf match: only valid for protocol 6 [ 295.067037][T11820] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.134209][T11828] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 295.166835][T11828] netlink: 3657 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.219557][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.231119][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.241795][T11833] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 295.257604][T11833] xt_TCPMSS: Only works on TCP SYN packets [ 295.367100][T11841] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.471658][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.482560][T11842] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 295.537574][ T29] audit: type=1804 audit(1718799015.657:36): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2666662718/syzkaller.mXhDhC/536/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 295.564755][T11842] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 295.954752][T11870] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 295.957087][T11871] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 296.126984][T11871] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 296.410057][T11884] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 296.768356][T11876] team0 (unregistering): Port device team_slave_0 removed [ 297.036460][T11876] team0 (unregistering): Port device team_slave_1 removed [ 297.110404][T11876] team0 (unregistering): Port device virt_wifi0 removed [ 297.149909][T11876] team0 (unregistering): Port device ÿÿÿÿ removed [ 297.231582][T11903] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 297.272910][ T29] audit: type=1804 audit(1718799017.387:37): pid=11903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2666662718/syzkaller.mXhDhC/539/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 297.300989][T11903] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 297.678955][T11929] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 298.383036][T11968] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 298.393855][ T29] audit: type=1804 audit(1718799018.497:38): pid=11968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3294287868/syzkaller.oqzBDn/530/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 298.450087][T11960] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 298.685226][T11976] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 298.968534][T11990] __nla_validate_parse: 1 callbacks suppressed [ 298.968556][T11990] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.082067][T11993] syzkaller0: entered promiscuous mode [ 299.100635][T11993] syzkaller0: entered allmulticast mode [ 299.230921][ T5132] Bluetooth: hci5: command 0x0406 tx timeout [ 299.830089][T12036] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.838145][T12036] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.863328][T12036] bridge0: left promiscuous mode [ 299.874022][T12036] bridge0: left allmulticast mode [ 299.890455][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.897819][T12038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.905482][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.912694][T12038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.936703][T12038] bridge0: entered promiscuous mode [ 299.980577][T12038] bridge0: entered allmulticast mode [ 300.053439][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 300.083501][T12040] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 300.379434][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 300.490300][T12054] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.075496][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.097222][T12082] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 301.379290][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.502412][T12105] syzkaller0: entered promiscuous mode [ 301.530351][T12105] syzkaller0: entered allmulticast mode [ 301.715748][T12115] syzkaller0: entered promiscuous mode [ 301.727792][T12115] syzkaller0: entered allmulticast mode [ 301.862500][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.878638][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.888725][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.947505][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.970761][T12120] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 302.013190][T12124] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.067732][T12134] ip6tnl1: entered promiscuous mode [ 302.073016][T12134] ip6tnl1: entered allmulticast mode [ 302.440244][T12157] syzkaller0: entered promiscuous mode [ 302.451512][T12157] syzkaller0: entered allmulticast mode [ 302.638407][T12166] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 303.725285][T12202] syzkaller0: entered promiscuous mode [ 303.745843][T12202] syzkaller0: entered allmulticast mode [ 303.779228][T12204] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 304.139088][T12217] __nla_validate_parse: 8 callbacks suppressed [ 304.139110][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.274053][T12217] macvtap1: entered promiscuous mode [ 304.295306][T12217] batadv0: entered promiscuous mode [ 304.311946][T12217] macvtap1: entered allmulticast mode [ 304.332065][T12217] batadv0: entered allmulticast mode [ 304.345294][T12217] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 304.414133][T12219] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 304.481227][T12219] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 304.834380][T12234] Unsupported ieee802154 address type: 0 [ 304.891997][T12236] syzkaller0: entered promiscuous mode [ 304.933930][T12236] syzkaller0: entered allmulticast mode [ 305.034830][T12246] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.366775][T12259] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.393367][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.605219][T12272] syzkaller0: entered promiscuous mode [ 305.610762][T12272] syzkaller0: entered allmulticast mode [ 305.649675][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.677720][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.712225][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.375953][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.395138][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.407356][T12305] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 306.425914][T12310] xt_TCPMSS: Only works on TCP SYN packets [ 306.464416][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.486775][T12305] rdma_op ffff8880626b39f0 conn xmit_rdma 0000000000000000 [ 306.587983][T12316] syzkaller0: entered promiscuous mode [ 306.602984][T12316] syzkaller0: entered allmulticast mode [ 307.816285][T12354] syzkaller0: entered promiscuous mode [ 307.841098][T12354] syzkaller0: entered allmulticast mode [ 308.139021][T12369] Cannot find map_set index 0 as target [ 309.298738][T12420] __nla_validate_parse: 8 callbacks suppressed [ 309.298763][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.068633][T12510] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.127378][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.167645][T12517] IPVS: Unknown mcast interface: netdevsim0 [ 312.990455][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.307737][T12566] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.380820][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.736461][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.401702][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.532787][T12619] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 314.534139][ T29] audit: type=1804 audit(1718799034.647:39): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir353553262/syzkaller.NCnzH1/78/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 314.700063][T12610] smc: net device wg0 applied user defined pnetid SYZ0 [ 314.962680][T12613] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 315.495077][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 315.632973][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 316.695423][T12663] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 316.726348][T12659] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 316.741806][ T29] audit: type=1804 audit(1718799036.847:40): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir353553262/syzkaller.NCnzH1/82/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 317.024143][T12674] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 317.276905][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 317.633237][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.805214][T12697] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.038697][T12705] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 318.221211][T12708] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 318.359538][T12714] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 318.437319][T12712] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 318.441139][ T29] audit: type=1804 audit(1718799038.557:41): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/538/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 318.504164][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.635191][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.695372][T12751] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 320.638391][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 320.894890][T12765] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 320.927471][T12765] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 320.927719][ T29] audit: type=1804 audit(1718799041.047:42): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/545/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 322.134307][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.199307][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.213762][T12770] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 322.248592][T12782] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 322.281943][T12784] rdma_op ffff88802abde1f0 conn xmit_rdma 0000000000000000 [ 322.283924][T12781] xt_TCPMSS: Only works on TCP SYN packets [ 322.308723][T12782] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 322.313768][ T29] audit: type=1804 audit(1718799042.427:43): pid=12782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/546/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 322.578044][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.645965][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 322.705760][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.819257][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.250579][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.263839][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.275646][T12821] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 323.300410][T12821] xt_TCPMSS: Only works on TCP SYN packets [ 323.313840][T12821] rdma_op ffff8880607e21f0 conn xmit_rdma 0000000000000000 [ 323.375152][T12827] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 323.415351][T12827] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 323.426281][ T29] audit: type=1804 audit(1718799043.537:44): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/548/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 323.732681][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.743885][T12844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.791709][T12848] IPVS: Unknown mcast interface: netdevsim0 [ 324.108149][T12861] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 324.131026][T12861] xt_TCPMSS: Only works on TCP SYN packets [ 324.151974][T12861] rdma_op ffff88804f1b01f0 conn xmit_rdma 0000000000000000 [ 324.411428][T12872] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 324.434063][ T29] audit: type=1804 audit(1718799044.547:45): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3294287868/syzkaller.oqzBDn/592/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 324.434475][T12872] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 325.317140][T12902] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 325.353635][T12902] xt_TCPMSS: Only works on TCP SYN packets [ 325.385558][T12902] rdma_op ffff88801dd639f0 conn xmit_rdma 0000000000000000 [ 325.480181][T12908] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 325.740917][T12920] IPVS: Unknown mcast interface: netdevsim0 [ 325.827376][ T29] audit: type=1804 audit(1718799045.947:46): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2666662718/syzkaller.mXhDhC/594/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 325.855192][T12923] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 325.865633][ T5129] Bluetooth: hci6: command tx timeout [ 326.162506][T12919] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 326.671673][T12951] xt_TCPMSS: Only works on TCP SYN packets [ 326.692390][T12951] rdma_op ffff88802d2349f0 conn xmit_rdma 0000000000000000 [ 326.714795][T12950] __nla_validate_parse: 6 callbacks suppressed [ 326.714819][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.768011][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.786287][T12950] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 326.940216][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 327.627625][ T29] audit: type=1804 audit(1718799047.747:47): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/554/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 327.629364][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 327.666903][T12989] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 327.884804][T12996] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.155427][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.186250][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.214971][T13005] xt_TCPMSS: Only works on TCP SYN packets [ 328.231561][T13002] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 328.254080][T13005] rdma_op ffff88805eb049f0 conn xmit_rdma 0000000000000000 [ 328.459130][T12983] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 328.815598][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 329.128322][T13031] sctp: [Deprecated]: syz-executor.2 (pid 13031) Use of int in max_burst socket option deprecated. [ 329.128322][T13031] Use struct sctp_assoc_value instead [ 329.944326][T13049] xt_TCPMSS: Only works on TCP SYN packets [ 329.960860][T13049] rdma_op ffff88804f6b71f0 conn xmit_rdma 0000000000000000 [ 329.988408][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.021811][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.042266][T13046] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 330.225991][T13057] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 330.263004][T13057] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 330.277076][ T29] audit: type=1804 audit(1718799050.377:48): pid=13057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/559/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 330.343231][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.533551][T13060] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.628782][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.636556][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.680667][T13072] bridge0: left promiscuous mode [ 330.693674][T13072] bridge0: left allmulticast mode [ 330.718339][T13074] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 330.738850][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.759799][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.767157][T13072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.774811][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.782025][T13072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.851535][T13072] bridge0: entered promiscuous mode [ 330.867831][T13072] bridge0: entered allmulticast mode [ 331.261027][T13089] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 331.314786][T13102] xt_TCPMSS: Only works on TCP SYN packets [ 331.381336][T13089] rdma_op ffff88805d9e49f0 conn xmit_rdma 0000000000000000 [ 331.416753][T13104] IPVS: Unknown mcast interface: netdevsim0 [ 331.461202][ T29] audit: type=1804 audit(1718799051.577:49): pid=13103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir353553262/syzkaller.NCnzH1/115/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 331.461586][T13103] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 332.487994][T13106] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 332.630265][T13141] __nla_validate_parse: 2 callbacks suppressed [ 332.630288][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 332.658508][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 332.664746][T13144] xt_TCPMSS: Only works on TCP SYN packets [ 332.699830][T13141] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 332.705062][T13144] rdma_op ffff88802ca431f0 conn xmit_rdma 0000000000000000 [ 333.516145][T13162] syzkaller0: entered promiscuous mode [ 333.603623][T13162] syzkaller0: entered allmulticast mode [ 333.786028][T13186] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 333.824529][ T29] audit: type=1804 audit(1718799053.947:50): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/567/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 333.824858][T13186] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 334.423964][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.443035][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.459942][T13208] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 334.500551][T13215] xt_TCPMSS: Only works on TCP SYN packets [ 334.526645][T13208] rdma_op ffff88802f77c9f0 conn xmit_rdma 0000000000000000 [ 334.617233][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.647127][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.668874][T13220] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 334.677713][T13226] xt_TCPMSS: Only works on TCP SYN packets [ 334.904742][T13234] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 334.929947][ T29] audit: type=1804 audit(1718799055.047:51): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3294287868/syzkaller.oqzBDn/617/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 334.957488][T13234] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 335.412691][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 335.764521][T13269] xt_TCPMSS: Only works on TCP SYN packets [ 335.797040][T13269] rdma_op ffff88802d87d1f0 conn xmit_rdma 0000000000000000 [ 335.827271][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.846542][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.856346][T13266] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 335.867147][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.877328][T13273] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 335.903771][T13274] xt_TCPMSS: Only works on TCP SYN packets [ 336.078186][T13279] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 336.542035][T13299] IPVS: Unknown mcast interface: netdevsim0 [ 336.706852][T13308] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 336.725830][T13308] xt_TCPMSS: Only works on TCP SYN packets [ 336.745934][T13308] rdma_op ffff88807f65e1f0 conn xmit_rdma 0000000000000000 [ 336.875859][T13311] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 336.895730][T13311] xt_TCPMSS: Only works on TCP SYN packets [ 337.163620][T13327] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 337.589799][T13348] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 337.614960][T13348] xt_TCPMSS: Only works on TCP SYN packets [ 337.634764][T13348] rdma_op ffff8880117709f0 conn xmit_rdma 0000000000000000 [ 337.707498][T13352] __nla_validate_parse: 9 callbacks suppressed [ 337.707524][T13352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.780004][T13358] xt_TCPMSS: Only works on TCP SYN packets [ 337.805845][T13358] rdma_op ffff8880237fa1f0 conn xmit_rdma 0000000000000000 [ 337.941448][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.951769][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.963639][T13354] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 338.494360][T13378] IPVS: Unknown mcast interface: netdevsim0 [ 338.761491][T13390] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.781361][T13389] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.897141][T13397] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 338.909350][ T29] audit: type=1804 audit(1718799059.017:52): pid=13397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3294287868/syzkaller.oqzBDn/628/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 338.985122][T13402] xt_TCPMSS: Only works on TCP SYN packets [ 338.991427][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.998157][T13402] rdma_op ffff88807ef221f0 conn xmit_rdma 0000000000000000 [ 339.019991][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.108358][T13393] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 339.349912][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.507774][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.527648][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.547395][T13439] validate_nla: 5 callbacks suppressed [ 340.547418][T13439] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 340.569202][T13441] xt_TCPMSS: Only works on TCP SYN packets [ 340.615557][T13439] rdma_op ffff88805eb059f0 conn xmit_rdma 0000000000000000 [ 340.756649][T13448] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 340.767681][T13448] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 340.771320][ T29] audit: type=1804 audit(1718799060.887:53): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/581/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 340.900719][T13455] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 341.293768][T13469] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 341.342206][T13473] xt_TCPMSS: Only works on TCP SYN packets [ 341.365029][T13469] rdma_op ffff8880114e29f0 conn xmit_rdma 0000000000000000 [ 341.438640][T13477] IPVS: Unknown mcast interface: netdevsim0 [ 342.311746][T13498] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 342.835445][T13515] xt_TCPMSS: Only works on TCP SYN packets [ 342.853757][T13510] __nla_validate_parse: 5 callbacks suppressed [ 342.853780][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.916807][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.974055][T13510] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 342.975390][T13515] rdma_op ffff88807e1129f0 conn xmit_rdma 0000000000000000 [ 342.992195][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.026440][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.051391][T13521] xt_TCPMSS: Only works on TCP SYN packets [ 343.083743][T13520] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 343.133085][T13520] rdma_op ffff88807e68c1f0 conn xmit_rdma 0000000000000000 [ 343.474530][T13538] IPVS: Unknown mcast interface: netdevsim0 [ 344.581409][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.622963][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.668194][T13575] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 344.676195][T13576] xt_TCPMSS: Only works on TCP SYN packets [ 344.711451][T13576] rdma_op ffff88801dd679f0 conn xmit_rdma 0000000000000000 [ 344.771181][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.803887][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.813187][T13578] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 344.874650][T13578] xt_TCPMSS: Only works on TCP SYN packets [ 344.882298][T13578] rdma_op ffff88807f6599f0 conn xmit_rdma 0000000000000000 [ 345.303805][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 345.378392][T13594] IPVS: Unknown mcast interface: netdevsim0 [ 345.778862][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 345.809177][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 345.818899][T13609] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 345.831247][T13612] xt_TCPMSS: Only works on TCP SYN packets [ 345.843094][T13611] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 345.854479][T13609] rdma_op ffff88807b6319f0 conn xmit_rdma 0000000000000000 [ 345.871279][T13613] xt_TCPMSS: Only works on TCP SYN packets [ 345.891995][T13611] rdma_op ffff88807b3a19f0 conn xmit_rdma 0000000000000000 [ 346.075419][T13620] sctp: [Deprecated]: syz-executor.3 (pid 13620) Use of int in maxseg socket option. [ 346.075419][T13620] Use struct sctp_assoc_value instead [ 346.614435][T13646] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 346.625339][T13646] xt_TCPMSS: Only works on TCP SYN packets [ 346.645787][T13646] rdma_op ffff88807fff41f0 conn xmit_rdma 0000000000000000 [ 346.878133][T13653] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 346.887745][T13653] xt_TCPMSS: Only works on TCP SYN packets [ 346.895331][T13653] rdma_op ffff88806275f9f0 conn xmit_rdma 0000000000000000 [ 347.540161][T13683] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 347.589794][T13683] xt_TCPMSS: Only works on TCP SYN packets [ 347.626242][T13683] rdma_op ffff88807d7dd1f0 conn xmit_rdma 0000000000000000 [ 347.817111][T13693] xt_TCPMSS: Only works on TCP SYN packets [ 347.828402][T13693] rdma_op ffff88804d9fa9f0 conn xmit_rdma 0000000000000000 [ 348.482694][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 350.201930][T13691] __nla_validate_parse: 9 callbacks suppressed [ 350.201954][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.223939][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.242022][T13691] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 350.748044][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 350.757744][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 350.768708][T13733] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 350.778321][T13733] xt_TCPMSS: Only works on TCP SYN packets [ 350.796609][T13733] rdma_op ffff88804f17c9f0 conn xmit_rdma 0000000000000000 [ 351.052578][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.103061][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.275120][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.312674][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.334851][T13752] xt_TCPMSS: Only works on TCP SYN packets [ 351.352025][T13748] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 351.373451][T13752] rdma_op ffff88807dd3a9f0 conn xmit_rdma 0000000000000000 [ 351.585921][T13763] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 351.623209][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.638223][T13763] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 351.641080][ T29] audit: type=1804 audit(1718799071.757:54): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3294287868/syzkaller.oqzBDn/655/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 351.660741][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.746161][T13769] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 351.746304][T13773] xt_TCPMSS: Only works on TCP SYN packets [ 351.824690][T13769] rdma_op ffff8880524851f0 conn xmit_rdma 0000000000000000 [ 352.094132][T13785] IPVS: Unknown mcast interface: netdevsim0 [ 352.202205][ T29] audit: type=1804 audit(1718799072.317:55): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/603/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 352.208444][T13789] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 352.771697][T13784] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 353.181311][T13819] xt_TCPMSS: Only works on TCP SYN packets [ 353.196689][T13814] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 353.265866][T13814] rdma_op ffff88805d8ff9f0 conn xmit_rdma 0000000000000000 [ 354.064059][T13848] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 354.098231][T13848] xt_TCPMSS: Only works on TCP SYN packets [ 354.119372][T13848] rdma_op ffff88805d9e29f0 conn xmit_rdma 0000000000000000 [ 354.127759][T13850] xt_l2tp: v2 doesn't support IP mode [ 354.285981][T13852] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 354.308382][T13855] syzkaller0: entered promiscuous mode [ 354.314937][T13852] xt_TCPMSS: Only works on TCP SYN packets [ 354.333762][T13855] syzkaller0: entered allmulticast mode [ 354.344134][T13852] rdma_op ffff8880566499f0 conn xmit_rdma 0000000000000000 [ 354.464562][T13861] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 354.624013][T13868] dummy0: entered promiscuous mode [ 354.629830][T13868] macsec2: entered promiscuous mode [ 354.694528][T13868] dummy0: left promiscuous mode [ 355.382939][T13898] __nla_validate_parse: 7 callbacks suppressed [ 355.382966][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.419240][T13901] xt_TCPMSS: Only works on TCP SYN packets [ 355.422198][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.457406][T13898] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 355.466153][T13901] rdma_op ffff8880559189f0 conn xmit_rdma 0000000000000000 [ 355.482573][T13903] syzkaller0: entered promiscuous mode [ 355.488539][T13903] syzkaller0: entered allmulticast mode [ 355.815132][T13909] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 356.439347][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 356.449267][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 356.477473][T13931] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 356.501555][T13933] xt_TCPMSS: Only works on TCP SYN packets [ 356.530759][T13931] rdma_op ffff88801dd679f0 conn xmit_rdma 0000000000000000 [ 356.766459][T13947] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 359.284189][T14004] ip6tnl1: entered promiscuous mode [ 359.289816][T14004] ip6tnl1: entered allmulticast mode [ 359.674626][T14018] syzkaller0: entered promiscuous mode [ 359.680173][T14018] syzkaller0: entered allmulticast mode [ 359.830156][T14028] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 360.500455][T14054] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 360.527333][ T29] audit: type=1804 audit(1718799080.647:56): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir353553262/syzkaller.NCnzH1/170/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 360.534432][T14054] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 361.086077][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.120460][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.174258][T14090] syzkaller0: entered promiscuous mode [ 361.179855][T14090] syzkaller0: entered allmulticast mode [ 361.344629][T14095] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 361.819248][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.979594][T14126] syzkaller0: entered promiscuous mode [ 362.003338][T14126] syzkaller0: entered allmulticast mode [ 362.030944][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.073917][T14132] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 362.121832][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.617327][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.070626][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.101937][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.134473][T14163] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 363.161887][T14164] xt_TCPMSS: Only works on TCP SYN packets [ 363.191655][T14163] rdma_op ffff88802e9051f0 conn xmit_rdma 0000000000000000 [ 363.342150][T14166] syzkaller0: entered promiscuous mode [ 363.353620][T14166] syzkaller0: entered allmulticast mode [ 363.663695][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.673020][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.721500][T14178] xt_TCPMSS: Only works on TCP SYN packets [ 363.755319][T14175] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 363.757361][T14178] rdma_op ffff88802a5c21f0 conn xmit_rdma 0000000000000000 [ 364.415696][T14207] syzkaller0: entered promiscuous mode [ 364.421258][T14207] syzkaller0: entered allmulticast mode [ 364.553043][T14214] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 364.628377][T14214] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 364.643723][ T29] audit: type=1804 audit(1718799084.747:57): pid=14214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir353553262/syzkaller.NCnzH1/185/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 365.505897][T14247] syzkaller0: entered promiscuous mode [ 365.513663][T14247] syzkaller0: entered allmulticast mode [ 366.716456][T14272] __nla_validate_parse: 5 callbacks suppressed [ 366.716480][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.749396][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.773650][T14272] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 366.794406][T14272] xt_TCPMSS: Only works on TCP SYN packets [ 366.834985][T14272] rdma_op ffff88807c30c9f0 conn xmit_rdma 0000000000000000 [ 367.016878][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.043669][T14275] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 367.402052][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.856708][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.875229][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.884863][T14305] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 367.897531][T14305] xt_TCPMSS: Only works on TCP SYN packets [ 367.906464][T14305] rdma_op ffff888065c171f0 conn xmit_rdma 0000000000000000 [ 368.166453][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 368.187928][T14314] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 370.389281][T14382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.462646][T14385] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 370.969543][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.564717][T14419] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 371.624754][T14419] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 371.633700][ T29] audit: type=1804 audit(1718799091.737:58): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1860929698/syzkaller.exI3TH/266/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 371.724573][T14416] smc: net device wg0 applied user defined pnetid SYZ0 [ 372.035518][T14428] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 372.143920][T14436] IPVS: Unknown mcast interface: netdevsim0 [ 373.167503][T14467] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 373.884881][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.921890][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.957397][T14491] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 373.968693][T14497] xt_TCPMSS: Only works on TCP SYN packets [ 373.993771][T14491] rdma_op ffff88802ca339f0 conn xmit_rdma 0000000000000000 [ 374.012421][T14498] IPVS: Unknown mcast interface: netdevsim0 [ 374.249819][ T5170] IPVS: starting estimator thread 0... [ 374.373833][T14510] IPVS: using max 17 ests per chain, 40800 per kthread [ 375.340634][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.375943][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.415004][T14543] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 375.415354][T14548] xt_TCPMSS: Only works on TCP SYN packets [ 375.528831][T14543] rdma_op ffff88802cbe19f0 conn xmit_rdma 0000000000000000 [ 376.008429][T14563] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 376.055148][ T29] audit: type=1804 audit(1718799096.177:59): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir353553262/syzkaller.NCnzH1/212/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 376.097257][T14563] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 376.267092][T14572] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.625400][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.649140][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.672325][T14585] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 376.702779][T14590] xt_TCPMSS: Only works on TCP SYN packets [ 376.740071][T14585] rdma_op ffff88806126b9f0 conn xmit_rdma 0000000000000000 [ 377.660565][T14609] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 377.707257][ T29] audit: type=1804 audit(1718799097.827:60): pid=14609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3294287868/syzkaller.oqzBDn/714/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 377.737842][T14609] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 378.255480][T14636] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 378.320449][ T29] audit: type=1804 audit(1718799098.437:61): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3294287868/syzkaller.oqzBDn/716/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 378.321449][T14636] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 378.634489][T14647] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 379.071299][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.394243][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.438015][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.477332][T14669] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 379.501446][T14673] xt_TCPMSS: Only works on TCP SYN packets [ 379.509295][T14671] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 379.548985][T14669] rdma_op ffff88802e5869f0 conn xmit_rdma 0000000000000000 [ 379.971018][T14693] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 380.008799][T14693] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 380.039544][T14693] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 380.074240][T14693] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 380.137786][T14698] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 380.723356][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 380.744128][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 380.753462][T14710] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 380.799771][T14710] xt_TCPMSS: Only works on TCP SYN packets [ 380.824164][T14710] rdma_op ffff88807b3049f0 conn xmit_rdma 0000000000000000 [ 380.994913][T14720] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 381.375181][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 381.402057][T14729] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 381.522328][T14735] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 381.541444][T14735] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 381.550198][ T29] audit: type=1804 audit(1718799101.657:62): pid=14735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2564178810/syzkaller.mCO4XO/633/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 381.874629][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.903764][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.933696][T14748] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 381.966274][T14748] xt_TCPMSS: Only works on TCP SYN packets [ 381.995170][T14748] rdma_op ffff888051c7b9f0 conn xmit_rdma 0000000000000000 [ 382.285809][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.310332][T14770] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.325893][T14768] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 382.559217][T14776] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 383.543431][T14819] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 384.535281][T14851] __nla_validate_parse: 8 callbacks suppressed [ 384.535306][T14851] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.561708][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.614299][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.036465][T14874] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 385.479203][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.884159][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.915611][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.092518][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.420387][T14923] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 386.894941][T14939] geneve0: mtu less than device minimum [ 387.030363][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.032336][T14945] bond0: entered promiscuous mode [ 387.054632][T14945] bond_slave_0: entered promiscuous mode [ 387.108007][T14945] bond_slave_1: entered promiscuous mode [ 387.117553][T14951] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.154047][T14945] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 387.184644][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 387.577649][T14968] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 388.145208][T14997] tipc: Can't bind to reserved service type 2 [ 388.716160][T15018] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 389.241925][T15044] IPVS: Unknown mcast interface: netdevsim0 [ 389.971805][ T29] audit: type=1800 audit(1718799110.087:63): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 390.190781][T15074] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 391.142578][T15096] __nla_validate_parse: 5 callbacks suppressed [ 391.142601][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.174652][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.261058][T15101] syzkaller0: entered promiscuous mode [ 391.267366][T15101] syzkaller0: entered allmulticast mode [ 391.311301][ T29] audit: type=1800 audit(1718799111.427:64): pid=15103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 392.280108][T15147] IPVS: Unknown mcast interface: netdevsim0 [ 392.474440][T15150] syzkaller0: entered promiscuous mode [ 392.498486][T15150] syzkaller0: entered allmulticast mode [ 393.459956][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 393.522483][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 393.734427][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 393.921261][T15200] syzkaller0: entered promiscuous mode [ 393.947795][T15200] syzkaller0: entered allmulticast mode [ 394.441776][T15229] IPVS: Unknown mcast interface: netdevsim0 [ 394.649033][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.690053][T15239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.866394][T15239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 395.088860][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 395.107301][T15250] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 395.658866][T15264] netlink: 704 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.422208][T15290] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 397.506530][T15294] syzkaller0: entered promiscuous mode [ 397.529928][T15294] syzkaller0: entered allmulticast mode [ 398.761293][T15336] __nla_validate_parse: 2 callbacks suppressed [ 398.761318][T15336] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.787836][T15333] syzkaller0: entered promiscuous mode [ 398.803610][T15333] syzkaller0: entered allmulticast mode [ 398.950512][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.889388][T15382] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 400.214027][T15394] syzkaller0: entered promiscuous mode [ 400.229950][T15394] syzkaller0: entered allmulticast mode [ 400.555104][T15405] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 400.620009][T15405] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.629412][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 400.666728][T15412] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 400.700502][T15418] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 401.790021][T15469] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.1'. [ 401.876703][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.924214][T15474] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 403.009714][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.092545][T15522] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 403.456631][T15542] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 403.500395][T15546] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 403.534977][T15546] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 403.622444][T15551] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.651492][T15553] tipc: Enabling of bearer rejected, failed to enable media [ 403.826367][T15558] syzkaller0: entered promiscuous mode [ 403.831963][T15558] syzkaller0: entered allmulticast mode [ 404.363906][T15588] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 404.388374][T15590] tipc: MTU too low for tipc bearer [ 404.784852][T15600] syzkaller0: entered promiscuous mode [ 404.790442][T15600] syzkaller0: entered allmulticast mode [ 404.983296][T15615] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'. [ 405.068161][T15615] syz_tun (unregistering): left allmulticast mode [ 405.117007][T15608] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 405.198873][T15608] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.473838][T15639] tipc: MTU too low for tipc bearer [ 405.515542][T15646] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 405.563729][T15647] IPVS: Unknown mcast interface: netdevsim0 [ 406.247503][T15667] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.782670][T15684] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 406.841803][T15686] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 406.871394][T15686] syz_tun: entered promiscuous mode [ 406.914022][T15686] syz_tun: entered allmulticast mode [ 406.920188][T15686] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 406.962682][T15688] tipc: Enabling of bearer rejected, failed to enable media [ 407.102200][T15690] vxcan4: entered allmulticast mode [ 407.164603][T15692] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 407.301068][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.345335][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.384857][T15698] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 407.403890][T15707] xt_TCPMSS: Only works on TCP SYN packets [ 407.424105][T15705] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 407.433328][T15698] rdma_op ffff888060a9f9f0 conn xmit_rdma 0000000000000000 [ 407.503818][T15705] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.511575][T15705] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.575970][T15705] bridge0: left promiscuous mode [ 407.597117][T15705] bridge0: left allmulticast mode [ 408.142512][T15705] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.150145][T15705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.157835][T15705] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.165111][T15705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.221868][T15705] bridge0: entered promiscuous mode [ 408.260661][T15705] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 408.550867][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.591669][T15730] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 409.024254][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.035427][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.045268][T15751] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 409.054509][T15751] xt_TCPMSS: Only works on TCP SYN packets [ 409.065175][T15751] rdma_op ffff88807c9959f0 conn xmit_rdma 0000000000000000 [ 409.246677][T15761] vlan2: entered promiscuous mode [ 409.251871][T15761] syz_tun: entered promiscuous mode [ 409.261038][T15761] syz_tun: left promiscuous mode [ 409.418705][T15766] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 409.447020][T15766] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.454751][T15766] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.499271][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.526786][T15769] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 409.898771][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 409.918936][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 409.938149][T15785] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 409.970458][T15788] xt_TCPMSS: Only works on TCP SYN packets [ 409.987085][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.001633][T15785] rdma_op ffff8880651251f0 conn xmit_rdma 0000000000000000 [ 410.016055][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.048122][T15789] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 410.072681][T15790] xt_TCPMSS: Only works on TCP SYN packets [ 410.100710][T15789] rdma_op ffff88802e9f19f0 conn xmit_rdma 0000000000000000 [ 410.677183][T15808] geneve0: entered allmulticast mode [ 410.916095][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 410.950573][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 410.982119][T15819] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 411.012939][T15823] xt_TCPMSS: Only works on TCP SYN packets [ 411.026095][T15825] xt_TCPMSS: Only works on TCP SYN packets [ 411.038823][T15819] rdma_op ffff888061b099f0 conn xmit_rdma 0000000000000000 [ 411.048374][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.070623][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.086814][T15825] rdma_op ffff888061b0d9f0 conn xmit_rdma 0000000000000000 [ 412.070863][ T5129] Bluetooth: hci6: link tx timeout [ 412.077609][ T5129] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 412.284088][T15859] geneve0: entered allmulticast mode [ 412.461960][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.505711][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.573726][T15862] validate_nla: 1 callbacks suppressed [ 412.573752][T15862] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 412.624723][T15869] rdma_op ffff8880116869f0 conn xmit_rdma 0000000000000000 [ 412.629245][T15867] xt_TCPMSS: Only works on TCP SYN packets [ 412.813841][T15866] bond0: entered promiscuous mode [ 412.823431][T15866] bond0: entered allmulticast mode [ 412.851757][T15866] bond_slave_0: entered allmulticast mode [ 412.868216][T15866] bond_slave_1: entered allmulticast mode [ 412.883617][T15866] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 412.912702][T15866] bridge0: entered allmulticast mode [ 413.802062][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 413.822037][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 413.856869][T15904] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 413.879561][T15908] xt_TCPMSS: Only works on TCP SYN packets [ 413.898418][T15904] rdma_op ffff88806173b1f0 conn xmit_rdma 0000000000000000 [ 414.104422][ T5132] Bluetooth: hci6: command 0x0406 tx timeout [ 415.222640][T15946] __nla_validate_parse: 2 callbacks suppressed [ 415.222663][T15946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.260322][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 415.298024][T15950] xt_TCPMSS: Only works on TCP SYN packets [ 415.298752][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 415.325695][T15950] rdma_op ffff88801cf789f0 conn xmit_rdma 0000000000000000 [ 415.362786][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 415.418377][T15947] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 416.219233][T15980] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.336711][T15985] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.474224][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.500915][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.513858][T15988] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 416.562378][T15991] xt_TCPMSS: Only works on TCP SYN packets [ 416.594276][T15988] rdma_op ffff88802de911f0 conn xmit_rdma 0000000000000000 [ 416.639432][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.664665][T15993] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 417.339599][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 417.391915][T16024] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 417.421844][T16030] xt_TCPMSS: Only works on TCP SYN packets [ 417.444881][T16024] rdma_op ffff88802c02d1f0 conn xmit_rdma 0000000000000000 [ 417.885714][T16040] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 418.196363][T16053] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 418.304753][T16062] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 418.331315][T16062] xt_TCPMSS: Only works on TCP SYN packets [ 418.345409][T16062] rdma_op ffff88805d9e51f0 conn xmit_rdma 0000000000000000 [ 418.376986][T16053] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 418.596276][T16077] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 418.902227][T16086] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 419.202927][T16098] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 419.550496][T16109] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 419.603782][T16109] xt_TCPMSS: Only works on TCP SYN packets [ 419.635861][T16109] rdma_op ffff8880592d79f0 conn xmit_rdma 0000000000000000 [ 419.768219][T16119] tap0: tun_chr_ioctl cmd 2147767521 [ 419.876199][T16125] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 420.830458][T16154] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 421.129544][T16162] __nla_validate_parse: 12 callbacks suppressed [ 421.129569][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 421.190883][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 421.217061][T16170] xt_TCPMSS: Only works on TCP SYN packets [ 421.227720][T16162] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 421.238064][T16170] rdma_op ffff88802b8fc1f0 conn xmit_rdma 0000000000000000 [ 421.253642][T16165] IPVS: Unknown mcast interface: netdevsim0 [ 421.269275][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.280752][T16166] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 421.664931][T16189] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 421.782668][T16192] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 421.874754][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 421.947365][T16205] xt_TCPMSS: Only works on TCP SYN packets [ 421.995785][T16205] rdma_op ffff88804f3d09f0 conn xmit_rdma 0000000000000000 [ 422.118117][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 422.156567][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.077375][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.104055][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.113335][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.174475][T16239] xt_TCPMSS: Only works on TCP SYN packets [ 423.185202][T16239] rdma_op ffff88807f5329f0 conn xmit_rdma 0000000000000000 [ 423.544456][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.618678][T16267] validate_nla: 4 callbacks suppressed [ 423.618701][T16267] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 423.649543][T16267] xt_TCPMSS: Only works on TCP SYN packets [ 423.691878][T16267] rdma_op ffff8880115489f0 conn xmit_rdma 0000000000000000 [ 424.060610][T16285] team0: Port device macvlan1 added [ 424.130312][T16287] team_slave_0: entered promiscuous mode [ 424.136414][T16287] team_slave_1: entered promiscuous mode [ 424.209886][T16287] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 424.664278][T16322] xt_TCPMSS: Only works on TCP SYN packets [ 424.688444][T16322] rdma_op ffff88807ec4d9f0 conn xmit_rdma 0000000000000000 [ 424.721561][T16316] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 425.275856][T16348] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 425.322803][T16350] xt_TCPMSS: Only works on TCP SYN packets [ 425.356995][T16348] rdma_op ffff8880784959f0 conn xmit_rdma 0000000000000000 [ 425.419617][T16355] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 425.422231][T16357] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 425.468505][T16357] xt_TCPMSS: Only works on TCP SYN packets [ 425.476333][T16361] IPVS: Unknown mcast interface: netdevsim0 [ 425.504149][T16357] rdma_op ffff88802e9009f0 conn xmit_rdma 0000000000000000 [ 425.511800][T16353] netem: change failed [ 425.833975][T16372] vlan2: entered promiscuous mode [ 425.860273][T16372] dummy0: entered promiscuous mode [ 425.906306][T16372] team0: Port device vlan2 added [ 426.175616][T16389] __nla_validate_parse: 17 callbacks suppressed [ 426.175638][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 426.195779][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 426.207557][T16389] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 426.216583][T16389] xt_TCPMSS: Only works on TCP SYN packets [ 426.218383][T16387] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 426.227017][T16389] rdma_op ffff88805647c1f0 conn xmit_rdma 0000000000000000 [ 426.439434][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.473783][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.483080][T16399] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 426.526799][T16404] xt_TCPMSS: Only works on TCP SYN packets [ 426.545345][T16404] rdma_op ffff88805da661f0 conn xmit_rdma 0000000000000000 [ 426.555764][T16402] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 426.716756][T16409] bridge0: port 3(bond0) entered blocking state [ 426.732428][T16409] bridge0: port 3(bond0) entered disabled state [ 426.743786][T16409] bond0: entered allmulticast mode [ 426.749067][T16409] bond_slave_0: entered allmulticast mode [ 426.755386][T16409] bond_slave_1: entered allmulticast mode [ 426.761156][T16409] syz_tun: entered allmulticast mode [ 426.768381][T16409] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 426.802767][T16409] bond0: left allmulticast mode [ 426.818887][T16409] bond_slave_0: left allmulticast mode [ 426.825623][T16409] bond_slave_1: left allmulticast mode [ 426.831380][T16409] syz_tun: left allmulticast mode [ 426.838355][T16409] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 426.923901][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.267566][T16425] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.277063][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.277096][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.277117][T16436] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 427.278775][T16436] xt_TCPMSS: Only works on TCP SYN packets [ 427.317717][T16425] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.346384][T16443] IPVS: Unknown mcast interface: netdevsim0 [ 427.358646][T16436] rdma_op ffff8880234e31f0 conn xmit_rdma 0000000000000000 [ 428.224720][T16466] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 440.506827][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.648459][ T5132] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 457.658383][ T5132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 457.669282][ T5132] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 457.678014][ T5132] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 457.709199][ T5132] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 457.733898][ T5132] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 458.394631][ T5129] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 458.417464][ T5129] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 458.426586][ T5129] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 458.448220][ T4488] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 458.457140][ T5120] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 458.457640][ T4488] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 458.473321][ T5120] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 458.481395][ T5120] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 458.514686][ T5120] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 458.554007][ T5120] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 458.561983][ T5120] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 458.570631][ T5120] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 458.653064][ T5129] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 458.663135][ T5129] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 458.672106][ T5129] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 458.680808][ T5129] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 458.690006][ T5129] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 458.697862][ T5129] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 459.072670][ T5129] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 459.083928][ T5129] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 459.092628][ T5129] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 459.105593][ T5129] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 459.113976][ T5129] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 459.121564][ T5129] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 459.784255][ T5120] Bluetooth: hci7: command tx timeout [ 460.584486][ T5120] Bluetooth: hci8: command tx timeout [ 460.664299][ T5120] Bluetooth: hci9: command tx timeout [ 460.743963][ T5120] Bluetooth: hci10: command tx timeout [ 461.234171][ T5120] Bluetooth: hci11: command tx timeout [ 461.873581][ T5120] Bluetooth: hci7: command tx timeout [ 462.674114][ T5120] Bluetooth: hci8: command tx timeout [ 462.753659][ T5120] Bluetooth: hci9: command tx timeout [ 462.833650][ T5120] Bluetooth: hci10: command tx timeout [ 463.303807][ T5120] Bluetooth: hci11: command tx timeout [ 463.944893][ T5120] Bluetooth: hci7: command tx timeout [ 464.754209][ T5120] Bluetooth: hci8: command tx timeout [ 464.835091][ T5120] Bluetooth: hci9: command tx timeout [ 464.913620][ T5120] Bluetooth: hci10: command tx timeout [ 465.383878][ T5120] Bluetooth: hci11: command tx timeout [ 466.024008][ T5120] Bluetooth: hci7: command tx timeout [ 466.834195][ T5120] Bluetooth: hci8: command tx timeout [ 466.913669][ T5120] Bluetooth: hci9: command tx timeout [ 466.983732][ T5120] Bluetooth: hci10: command tx timeout [ 467.472234][ T5120] Bluetooth: hci11: command tx timeout [ 501.945982][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.681026][ T5129] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 522.714068][ T5129] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 522.743836][ T5129] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 522.755539][ T5129] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 522.765272][ T5129] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 522.773298][ T5129] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 523.074991][ T5120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 523.085885][ T5120] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 523.103866][ T5120] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 523.113404][ T5120] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 523.121529][ T5120] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 523.143825][ T5120] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 523.525651][ T5120] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 523.537334][ T5120] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 523.547327][ T5120] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 523.557506][T16501] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 523.558341][ T5120] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 523.577618][ T5120] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 523.578020][T16501] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 523.595885][ T5120] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 523.595994][T16501] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 523.611044][T16501] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 523.620653][T16501] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 523.642240][ T5129] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 523.792894][ T4488] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 523.803170][ T4488] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 523.812834][ T4488] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 523.824911][ T4488] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 523.834987][ T4488] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 523.843780][ T4488] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 524.823801][ T4488] Bluetooth: hci12: command tx timeout [ 525.223754][ T4488] Bluetooth: hci13: command tx timeout [ 525.623794][ T5129] Bluetooth: hci14: command tx timeout [ 525.704047][ T5129] Bluetooth: hci15: command tx timeout [ 525.943851][ T5129] Bluetooth: hci16: command tx timeout [ 526.913877][ T5129] Bluetooth: hci12: command tx timeout [ 527.303869][ T5129] Bluetooth: hci13: command tx timeout [ 527.713737][ T5129] Bluetooth: hci14: command tx timeout [ 527.793847][ T5129] Bluetooth: hci15: command tx timeout [ 528.023597][ T5129] Bluetooth: hci16: command tx timeout [ 528.992147][ T5129] Bluetooth: hci12: command tx timeout [ 529.383694][ T5129] Bluetooth: hci13: command tx timeout [ 529.783709][ T5129] Bluetooth: hci14: command tx timeout [ 529.864243][ T5129] Bluetooth: hci15: command tx timeout [ 530.113803][ T5129] Bluetooth: hci16: command tx timeout [ 531.063566][ T5129] Bluetooth: hci12: command tx timeout [ 531.463749][ T5129] Bluetooth: hci13: command tx timeout [ 531.864283][ T5129] Bluetooth: hci14: command tx timeout [ 531.943649][ T5129] Bluetooth: hci15: command tx timeout [ 532.183814][ T5129] Bluetooth: hci16: command tx timeout [ 539.863899][ T4488] Bluetooth: hci6: command 0x0406 tx timeout [ 563.390893][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.830265][ T5132] Bluetooth: hci10: command 0x0406 tx timeout [ 580.837410][T16506] Bluetooth: hci9: command 0x0406 tx timeout [ 580.843719][ T5132] Bluetooth: hci7: command 0x0406 tx timeout [ 580.847570][ T5129] Bluetooth: hci8: command 0x0406 tx timeout [ 581.943718][ T30] INFO: task kworker/u8:8:2827 blocked for more than 143 seconds. [ 581.951602][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 581.959377][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.968263][ T30] task:kworker/u8:8 state:D stack:21384 pid:2827 tgid:2827 ppid:2 flags:0x00004000 [ 581.978583][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 581.984973][ T30] Call Trace: [ 581.988280][ T30] 2024/06/19 12:15:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 581.991238][ T30] __schedule+0x17e8/0x4a20 [ 581.995986][ T30] ? __pfx___schedule+0x10/0x10 [ 582.033582][ T30] ? __pfx_lock_release+0x10/0x10 [ 582.038705][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 582.059382][ T30] ? kthread_data+0x52/0xd0 [ 582.073585][ T30] ? schedule+0x90/0x320 [ 582.077902][ T30] ? wq_worker_sleeping+0x66/0x240 [ 582.083051][ T30] ? schedule+0x90/0x320 [ 582.100723][ T30] schedule+0x14b/0x320 [ 582.106294][ T30] schedule_preempt_disabled+0x13/0x30 [ 582.111817][ T30] __mutex_lock+0x6a4/0xd70 [ 582.133483][ T30] ? __mutex_lock+0x527/0xd70 [ 582.138258][ T30] ? addrconf_verify_work+0x19/0x30 [ 582.153767][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 582.158922][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.173446][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.179850][ T30] ? process_scheduled_works+0x945/0x1830 [ 582.198557][ T30] addrconf_verify_work+0x19/0x30 [ 582.211944][ T30] process_scheduled_works+0xa2c/0x1830 [ 582.233748][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 582.239831][ T30] ? assign_work+0x364/0x3d0 [ 582.258348][ T30] worker_thread+0x86d/0xd70 [ 582.263027][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 582.269518][ T30] ? __kthread_parkme+0x169/0x1d0 [ 582.283558][ T30] ? __pfx_worker_thread+0x10/0x10 [ 582.288751][ T30] kthread+0x2f0/0x390 [ 582.292859][ T30] ? __pfx_worker_thread+0x10/0x10 [ 582.312300][ T30] ? __pfx_kthread+0x10/0x10 [ 582.320215][ T30] ret_from_fork+0x4b/0x80 [ 582.333719][ T30] ? __pfx_kthread+0x10/0x10 [ 582.338474][ T30] ret_from_fork_asm+0x1a/0x30 [ 582.343293][ T30] [ 582.364861][ T30] INFO: task syz-executor.3:16432 blocked for more than 143 seconds. [ 582.373136][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 582.394175][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.402923][ T30] task:syz-executor.3 state:D stack:24528 pid:16432 tgid:16430 ppid:5124 flags:0x00004006 [ 582.428230][ T30] Call Trace: [ 582.431580][ T30] [ 582.443607][ T30] __schedule+0x17e8/0x4a20 [ 582.448221][ T30] ? __pfx___schedule+0x10/0x10 [ 582.453110][ T30] ? __pfx_lock_release+0x10/0x10 [ 582.473524][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 582.479096][ T30] ? schedule+0x90/0x320 [ 582.493449][ T30] schedule+0x14b/0x320 [ 582.497688][ T30] schedule_preempt_disabled+0x13/0x30 [ 582.503187][ T30] __mutex_lock+0x6a4/0xd70 [ 582.523630][ T30] ? __mutex_lock+0x527/0xd70 [ 582.529099][ T30] ? ip_tunnel_init_net+0x20e/0x710 [ 582.543554][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 582.548662][ T30] ? read_word_at_a_time+0xe/0x20 [ 582.567410][ T30] ? sized_strscpy+0x8d/0x220 [ 582.572164][ T30] ip_tunnel_init_net+0x20e/0x710 [ 582.592139][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 582.600371][ T30] ops_init+0x359/0x610 [ 582.604906][ T30] setup_net+0x515/0xca0 [ 582.609199][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 582.614867][ T30] ? __pfx_setup_net+0x10/0x10 [ 582.619684][ T30] copy_net_ns+0x4e2/0x7b0 [ 582.624265][ T30] create_new_namespaces+0x425/0x7b0 [ 582.631279][ T30] ? bpf_lsm_capable+0x9/0x10 [ 582.636168][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 582