last executing test programs: 1m46.281415774s ago: executing program 0 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040005) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r2, 0x1ad72f7) accept4(r2, 0x0, 0x0, 0x80000) r4 = accept4$netrom(r2, 0x0, 0x0, 0x80000) writev(r4, &(0x7f00000001c0), 0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000680)={0x6, 0x200000}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r5, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="de20", 0x2}], 0x1}, 0x20000805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x72, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/486], 0x23c}, 0x1, 0x0, 0x0, 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000020008"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff27bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a00140000000000000000000800090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0xffffffffffffff00, 0x1, 0x3, 0x401, 0x9], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) 1m45.336586533s ago: executing program 0 (id=1925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, 0x0, 0x41d, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c04}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0xfffffffe, 0x25dfdbfc, {}, [@RTA_GATEWAY={0x14, 0x5, @private1}]}, 0x30}, 0x1, 0x11}, 0x14) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c8, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x67af8fcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb60d}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x90}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x853}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe588}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x841) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1m44.617718463s ago: executing program 0 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540001000301f8ffffffffffffff000007000000080008400000ffff240001800c00028027263a8f2805000100210000000c000280050001008800000006000340000300001400188008000340000024000800024000000005"], 0x54}}, 0x10) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x2, @private1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001640)}}], 0x1, 0x20000881) socket$inet6(0xa, 0x2, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1803000040000000000000000014000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0xd, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="2f66de83fe29c25e", 0x8}], 0x1}, 0x4040081) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x8000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a080006"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1m44.09696537s ago: executing program 0 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1m43.77694603s ago: executing program 0 (id=1937): unshare(0x24020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x2, 0x8000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x30, "a6ea2102cf75ee650100d2f548e21d14e90052c7e056f5aba23db8378e39b3ee334b7d68c342b2c788a99c5f11558e3f"}, &(0x7f0000000100)=0x38) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe, 0x9, 0x9ef5, 0x400, 0x120, 0x8, 0x5}, 0x9c) accept4$ax25(r3, 0x0, &(0x7f0000000000), 0x80000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x78, 0x10, 0x403, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xc}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x78}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) accept$inet(r0, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f00000002c0)=0x10) socket$unix(0x1, 0x2, 0x0) 1m43.517686543s ago: executing program 0 (id=1941): r0 = socket$netlink(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000fcdbdf252d000000080004000000000114000100fc0100000000000000000000000000010800020006000000"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) shutdown(r1, 0x2000000) r3 = socket(0x22, 0x2, 0x4) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0)=0x4, 0x4) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 1m43.183871284s ago: executing program 4 (id=1944): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r1, 0x0, 0x0, 0x80000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001900010000000000fedbdf251c"], 0x1c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x324) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001900010000000000fedbdf251c"], 0x1c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x2}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x324) (async) 1m43.163435439s ago: executing program 2 (id=1945): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x30, 0x0, 0x30, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/124, 0x2d, 0x7c, 0x0, 0x7fff}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@ptr={0xf, 0x0, 0x0, 0x2, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0xc351}}]}, {0x0, [0x30]}}, &(0x7f0000000840)=""/4096, 0x4b, 0x1000, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, r1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f0000000340)="eb07eb331cab84d6600b4e401f0d6ce86d91c6238b6b05bd093c6b571848333da848ff9b5d7d7f8c9b811100d8d21ebb59c28262ebc4cae543fcb8bc762c5b80003a6100469c85eddca072dd8629b56d63e71d1476cb961e5c87a09bb5400a6b16a3d6ec2d98bc6bf03df47c57e7e69843239d2daa6cc3fa65168a5f816aaa351f0551fc296d589d5d10ef7f7edb0782dac392ecbb5a4a279133a334bd3bdad46405189a5b58c422d875ac60a0f82213e1c05a25e47d048a8ccf3fc7", &(0x7f0000000400)=""/132, &(0x7f00000004c0)="51ff5fe8b9649b349ffa0a4c3df2bece9a94206bb45494a9780b70e5c2ca4a40dc5bb108d65eae4381c883ec113972ba3753fa6845d066ef53fa9a5f06b7ae61f120a4cf4af2d3c637608c33dd18d8896a17514876a39321b2297378e976f7e3b38f22f41402d1070fb1346738910ed0e809823459c056f3b4f46e0f070d70f3d4de6935f9ad0f0145edf4bf4534c62003163268966d10a88b00c00e01d4525274793129", &(0x7f0000000580)="1c46e3600aed714ded3045b1c26c2b5cbe9b98f3c3d058ad3a894540c70e43f38675f82118616c6baa236af1b561835e96de7d986ec559fdaf7784e9e36c026de7dc4d054ca3634088b9806db40779b89c8daefe4c587a0146cad36da521ccc593ee29b4ae3fc0b37f3c3cfd5b225da9b1613a5c1311b87c5a50dca58b91d5c081610eb5", 0x5, r2, 0x4}, 0x38) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x301081, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000780)={'vxcan1\x00', 0x1000}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000280)={0x80}) 1m42.956910278s ago: executing program 2 (id=1946): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x27) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 1m42.95661128s ago: executing program 4 (id=1947): r0 = socket$inet(0x2, 0x6, 0xf) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2c, 0x0, r2, 0x26}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802e"], 0x20}], 0x1}, 0x300) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x10000, 0x4) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0xe, 0x0, 0x0, @remote}, 0x10) (async) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/151, 0x97}, {&(0x7f0000001580)=""/123, 0x7b}, {&(0x7f0000001380)=""/147, 0x93}], 0x4, &(0x7f0000001440)=""/207, 0xcf}, 0x40000000) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@remote, @loopback, r2}, 0xc) 1m42.475786353s ago: executing program 2 (id=1948): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff033}]}, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r2) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="2f0000040000000000fff900", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001400000004"], 0x20) unshare(0x24020400) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) accept(r0, 0x0, 0x0) 1m42.305214251s ago: executing program 4 (id=1949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000002010400000000f070996646b1dadabf000000000a00000004000380440002802c00018014000300fc00000000000000000000000000002014000400ff0200000000000000000000000000010c0002800500010000000900060003"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "002b228078c8"}]}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x480, 0xffffffff, 0x208, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'veth1_vlan\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xff000000], [], 'wg2\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x380, 0x10001, 0xf6e, 0x2}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x5, 0x1, 0xfff, 0x5, 0x6, 0x0, 0x81, 0x8, 0xe0, 0xfffc, 0x10, 0x3, 0x1, 0x0, 0x4, 0x6]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, @private1, [0x0, 0x0, 0xff000000], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1420}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3789b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a0500200f314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263e44f59fae487c62c98a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae01bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449ac59110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc030000009443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a36d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd58023fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b152a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e222dbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c4d2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff830000"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002300)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r6, 0xde6bcce13c096341}, 0x14}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x80800) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000440)=0x9, 0x4) (async) r9 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x800) setsockopt$inet6_tcp_buf(r9, 0x6, 0xd, &(0x7f0000000140)="de136fc61a1bd5b7b12d9912724af1be8affe1445f30d8aed6948dc1fef8443f45390db1d737eeab98ef97d42382fbb518d0a9beefd74a199e7e118c96ef6b76a8ecd3fe72a2a78ec4fc12013a30f7a2bb1cf8e85410e32ef892a06872a628a1b01372502378d7600e018deb1ef2c5f31b3ba476ddc604e8baa6094f344e21461ee2910fa771cbe4c0d662883659c63a8f02cca7e68a2a136acf39c2239dc1228c3ad48e637a906490c9a127ed2716be1dab", 0xb2) 1m42.048823343s ago: executing program 4 (id=1951): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x401, 0x8000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0xe2, 0xfffffffeffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="d800000018008106bc65f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400100004c230000fab94dcf5c04e04bcb726f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdfd809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97010000000000000000", 0xd8}], 0x1}, 0x4004010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', r3, 0x20, 0x40, 0x1, 0x100, {{0x3b, 0x4, 0x2, 0x7, 0xec, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x48, 0x3, [{0x2, 0xb, "a07a033b4a31a66485"}, {0x2, 0x12, "6ad771bab25a3995730f1e7e3ca965c4"}, {0x0, 0x11, "c75ec7cafe47257f26f8a62478c9be"}, {0x7, 0xb, "44733a3ad0830317fe"}, {0x1, 0x9, "6251eb9a111317"}]}, @cipso={0x86, 0x49, 0x3, [{0x2, 0xe, "f643bc107b028e8cb5e2ea9d"}, {0x6, 0x6, "e4fab05d"}, {0x7, 0x3, '\"'}, {0x6, 0x8, "52519eb0a702"}, {0x6, 0xe, "1a904d17cf69722dc44912ba"}, {0x6, 0x10, "31d79b3411d102e69e8fbeaa72ba"}, {0x1, 0x6, "bdac877a"}]}, @timestamp_prespec={0x44, 0x1c, 0x68, 0x3, 0x1, [{@multicast1, 0x7f}, {@multicast1, 0x7}, {@remote, 0x9}]}, @cipso={0x86, 0x2a, 0x3, [{0x0, 0xc, "667785dbc83e193e710d"}, {0x5, 0x5, "85a9e3"}, {0x2, 0x3, "c1"}, {0x7, 0xd, "32f6754ae07b5dcb0c8618"}, {0x0, 0x3, "12"}]}, @noop]}}}}}) 1m41.884826094s ago: executing program 3 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6fb", 0x2}], 0x1}}], 0x5, 0x4040000) (async) bind$netlink(r1, 0x0, 0x0) (async) read(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1d, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0], 0x30}, {&(0x7f0000000340)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000580)}, {&(0x7f00000006c0)="f5d03e61672b1ca21f231cb74484e54b9a82b4454788184deea38ad2d9d9a2b049f9e9fadacd3e917b774143c56059096c494c9e53106a33d4c5d19c6c8a09f807749d4d1e47ce5ea68d022989e871b2adc0978776f6025b2ea24d03aeb759e365657793349e41d77ef63d74e02570c88fff4884f9575b8ee25b9cac259c23220d5d8ed9044831e730bb784a2f00408a5d0bc0269401587e198c79c54117f976cb1d98f8ce358a997564d8e7ba94a8986666812de06646e9bb121980cc35883fe949a1f13902b18606f42a", 0xcb}], 0x3, &(0x7f0000000000), 0x0, 0x20000001}], 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x4040) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000140)={0x2, 0x7fffffffffffffff, 0x80000000, 0x4, 0x4000000, 0xb0, 0x80000000, 0x8}, &(0x7f0000000e80)={0x9, 0xce, 0x80000001, 0x7, 0x7, 0xf8, 0x970, 0x1ff}, &(0x7f0000000d00)={0xffffffffffffffff, 0x1000000, 0xfffffffffffffffd, 0x1, 0x319, 0x4, 0xa3, 0x9}, &(0x7f0000000d40)={0x0}, &(0x7f0000000dc0)={&(0x7f0000000d80)={[0xffffffffffff6b31]}, 0x8}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES8=r10, @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) (async) socket$kcm(0x2d, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYBLOB="500000001000030400005a000000000000f20000", @ANYRESOCT, @ANYRESDEC=r3, @ANYRES64=r11], 0x50}, 0x1, 0xba01, 0x0, 0x24008041}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r12) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000e40)={'some', 0x20, 0x100000000000, 0x20, 0x7}, 0x2f) 1m41.585146801s ago: executing program 3 (id=1953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000240)="d677911d0444386b3d", 0x9, 0x8004091}, 0x40080c0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x1c, "d385a9177fb6234d98ab88a14482e01dddd99646ce3d3c62ad2e34ca"}, &(0x7f0000000400)=0x24) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008000105060003008000050062a88a5c00603a01fc010000000000000010000000000001fe80000000000000000000000000002601059078060000006431ef2d00020001fc000000000000000000000000000000ff0100000000000000000000000000011104000000000000040105a80251e2040102c20400000003071000000001020000000100000000000000000000000000d0dbc74a1271c03e1045c3b5c05174b1dad5f69d11b38695081c5865aad0c984876a1dafef4f11a564dc424322"], 0x96) 1m41.539398629s ago: executing program 4 (id=1955): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001", 0x21) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c0017800800018004"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x3) 1m41.50921974s ago: executing program 2 (id=1956): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='\t s'], 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r3) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r3, @ANYRES8=r5, @ANYRESHEX=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000) 1m41.341053323s ago: executing program 3 (id=1958): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7001027}]}}]}, 0x48}}, 0x0) r4 = accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) sendmsg(r4, &(0x7f0000000280)={&(0x7f00000004c0)=@llc={0x1a, 0x338, 0x2, 0x4, 0x5, 0xd9, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000180)="566f1a2ce03ab639ca701d8bea877e", 0xf}, {&(0x7f00000005c0)="3812ff7b40a1581de9bf66df5a48ab814600611ead2832ee61cd15b1dad6fae7fb32221830aac3faa3162d7b6fd5ba95e141dfe4c22e4d1fec41d63ff68716dfbf1357a922ef84bd6b8e6f22c38addbea1fff4886c80cbe2758525bf7ca33ec4940ee704fd74f907e27ccff252f7f71d186329a9f29aa058830fb0eb06713c6aab55c488e3fd6c03df1093b815f24834cf8908eaa068f54242efe67ab8b0e0073ee258ada028fec03914230ed2b36de60e10aba578", 0xb5}, {&(0x7f0000000680)="f9fc3d57d6fe049a138d66ee066ce6a0f0ddc408200391b550e38000bbc28bd00cbd87864b032f168aba4dbfb0ff8d4de0592242ad45abcce7c72cd1b44986195dde12c2ef7f265a0c03b2a97fa399bdcdb88fa4054ea677c880891b72fc5474216b86ba98d4fb8c4fa9e1f2e800934b42bfc0db9f28bb57ad74fc667a4492ab1180eddd1eac2b7c5b9ca7751b693b7add503ef57a29c56ea9", 0x99}, {&(0x7f0000000740)="60cf8cf032bb53c91a1c034b2de03afa16c3e98ae4076a860b7c62509d8ac78c994dc0b12b99dfffd99b5aaf199b2e0ec1905b34e7fcfb7d12fab031361e42f471d693ee7d2c1492c071205918eec11338080da2a5f6f21569b273bde6a4e05cb106f7232d4540a2de50211e065de86e2adede2f93ab08dadacae733b1ff586f1bdf418eb8cd323c7932de22aaa91af36b43e15ab512c48fa43e7cba89a01a4cdc5e67546c0d3609", 0xa8}, {&(0x7f0000000800)="675cf86f74141a896ccc5577c485fb5c28af93f230fbd5219dd4f02fbd990dde07bc3dc66f441b9d30db201aa6f911a7737d7cd8685df2d502714d50f258fdfc35ad7a6865aaefed450f60b0c1ed751b46a83cd65dafe5da5906c7d7bcdfc5defe81a9675049b8ed75b0989aae11c69d4a4b8f", 0x73}], 0x5}, 0xc0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000003000000000000000000000061100800000000007b0ae0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018140000", @ANYRES32=r0, @ANYBLOB="0000000000ac290d05830000bc0000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x9, 0x35, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7d4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x107}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @printk={@s}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @ldst={0x2, 0x1, 0xe3e563c0fda0bc41, 0x9, 0x7, 0xfffffffffffffff0, 0x1}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @generic={0x0, 0x9, 0x7, 0xe, 0xe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x36, &(0x7f0000000540)=""/54, 0x41100, 0x70, '\x00', r3, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x0, 0x3ff, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000f40)=[{0x5, 0x3, 0xe, 0xb}, {0x3, 0x5, 0x8, 0x8}, {0x4, 0x5, 0xb, 0x1}, {0x5, 0x2, 0x4, 0xc}, {0x3, 0x4, 0x1, 0x1}, {0x3, 0x5, 0x0, 0x3}, {0x0, 0x4, 0xe, 0x1}, {0x0, 0x5, 0xc, 0x3}], 0x10, 0x598d}, 0x94) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000380)={'ipvlan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 1m41.340548557s ago: executing program 4 (id=1959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x1, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) write(r4, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, r7, 0xf4c0e000) (rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) (rerun: 32) sendmmsg$inet_sctp(r7, &(0x7f0000001b80)=[{&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0x5, @mcast2, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000005c0)="2ddf636fe6603db6cde7b2c7598c099c1b2591f1ba35464f6059c162df3855c2f070bc3179df46d350df5184fc45b56000c33a51304bbc0fe591b78029e2cd17fb", 0x41}, {&(0x7f0000000780)="fad9372871260eda667e351f5c91be50606522526442e3d5677cc2ded78901e0c0baca8e3da4f0160532dcbfc06ad48f8fc0dce9d3ae4df4a0f25005ca9c90461dfe82a1e421ac829dd90a9c86b5cb4a7acd668dae99cd38aab17d58bb3edccfdf1c15b7fc79bdd6d7a14e0bb3758f2a1d87f985dad8217e04388215152d8346f520fd2a0472800fa3e0f55da2b98a82b0f86f1dbb046fd13565b0d4eaa02e8283d806ce1164520538ca7141e2fec762e6a618be34b7b60de1c8c47f06c720", 0xbf}, {&(0x7f0000000840)="110bc9c78e02c72f78d33b430479e7bd42dcdfd3720f0405cfa426a52b2ad5e6da9357480fc6fb8cff2677024b894d0abadddd5d85cc2e6b04f0d359484f656161a80e0ed063db313f5681a2652ebc541b75701f9acb8f47392d84e1", 0x5c}, {&(0x7f00000008c0)="067a19d4c6a86fd7535f384f714201d7d07f22876bf9bdebaba47e5a19d384168e5d6974cf85c83b702df1c98decf6cf14b962a339e44d57eb404640478c8bf355ed7133d549c709067530d9590eeb19ffc088a553a0149ccfb6958e012bf931c72c677e3808a4cb6207d82c368b35f0794dc11323db3aeb951ee3", 0x7b}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000840000000000000000000800ff010500300000000000000084000000010000001200000002000000070000007d0e000005e400000000008002000000", @ANYRES32=0x0], 0x48}, {&(0x7f0000000bc0)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c00)="71bd271f08b251681fd1a137027311e848cda971de9d852606afb03a5ef80ad0d6eabdcf32eaf9273d09fa7f40a75f7a55ad23815c2414a8538c52f495f1c59cfb822c87a51e610791e0fd8ae4d165317bac51cb8e2be0e95f09cb74c50a3cec7cad49247da39205ba8f7e966a13f36b2e7c195d878204a40434befcdc119f2606146926545651ebf7e890d3e7a749", 0x8f}, {&(0x7f0000000cc0)="cf9c94681ac50e305f62b44cbdedd5be6bc70efc64543c71ed257bd7d9901bb933f1ddee4a", 0x25}, {&(0x7f0000000d00)="0a52b1880f0a4ec55f3fcb607cffa5996f8e80fa56d709bd6964a5f234f40e2ce607aa642fb2b2358b599582e51cd0faa2b65707d8149dd619c505154bdfc4672885058817b4b2f005532dd21294da23b3b2c58ee035125065f5d4bd9ceab710ff627df66a75f42255568ed414ec19fef1e0a57e6abbf905a01455419398dce75e254bc6d0679388b9fd91d70e46eb2d10932c0ca34e0c637dfe0f49be2de1a808ed3ebb0d6a135e8726213d5e545695edddc0530446d6d9d03017d63c755a0ea551100bd44a46a11142e530b01af3ae4061b8bd2f43f507ed5a1c56f75d90397dfbd8b67be75a72501f4a3e71a2ee1d", 0xf0}, {&(0x7f0000000e00)="8453fa185f707f12da896ff2147185126cec81e2cfd1dea222ba2fdbf7cb4420586b9c097b5ccae412d90a76a6fc0149390807d71f89960d3d0f9cc684e963b0dfd74be495f531d2a9", 0x49}, {&(0x7f0000000e80)="69ea863bfab15e7344ecfe091f22638f082d97954f4e37c051a7c90077e21d023daa7c42702f1f666e518cc8c1f39b9934867318e2e88bdd727deda68cc1e9f5c581b5c0090ef82825a227a04000102131c035d4ef53c77f100eca106bc43a5a2ccff7ba0b9c140b348286b060b2defe83e00a604fa35537bcd066c3a764650306cf4bd6ca24db3193a8021a11fe7a7f558de6f9708529f86a226d67f9d803a746a2d5527e5a2ac6228f93797d5d893e8ec462cd3ee7f693ab3ddf4a2b28d0abba91", 0xc2}], 0x5, 0x0, 0x0, 0x4}, {&(0x7f0000001000)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001040)="fdfb2c5861a7c6bf6499f4a855c07e71b072a1b02136fdd1f3067a", 0x1b}, {&(0x7f0000001080)="507f2ca7bb1dfe27021dcc26e69eb06eccad09505c032d37feb588af8f665d158acd18a635caed54af5f54995bdf1fa55a9cfd209073297d7688b672cc2a77984839dcd0d2f77ffdb601c8803c31d748949bc069cc12708ca991e4977cd8bc991eabcf41eba83deb1fc57749b6c5bdeca306b785633c9d22ff9e5d0ddf95859a40ae65702a56434c4b6aeefde55d01cbc59777", 0x93}, {&(0x7f0000001140)="3bd8947d64f5e675ca40861de0d1a7fe43aea9da62dd7bd9adc9d719b2b167b445763fc331b7d9cfe2f6cc678d43209fdd38aa3f31467b031ddaa8fa551bd25f1ca9807e66999852e0bbcc47a878919bc4601b3a52a5c2bbe66c501ebd0f3d", 0x5f}, {&(0x7f00000011c0)="c2ba6da4fbad66840474799ecdbe071893", 0x11}], 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="20000000000000008400000002000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac14143c00000000180000000000000084000000000000000e00ffff06000200"], 0x50, 0x20000000}, {&(0x7f00000013c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001400)="d1ff9016a9c21251dc53c130dfb725819606810f848535e56e1c0596feda517bacacc2da9a90df8bbb2b6c964888df7da40b61156900107a4e2bc0aeca970932473c65a1d11bcfd3d090811a0d562e5c1232834175accb218ab694d211469068f215bdfaa76174d5cca8ab659467c941e780b367e8244cc8323cb6fcf2d6b90a0bab83d57bf4a8951ca9b4ffccc71383660837ac66a36c50935bdc5c9dc98dbac8d6ba9e2b1b8a357bcd5d3b103826862d4977bfa2482a8400f270a82184e8d278e22a08f674a93202", 0xc9}], 0x1, 0x0, 0x0, 0x4008008}, {&(0x7f0000001540)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001580)="2c36335e0a3614c2e8d13c6d0648dc8dfd189a1ea90ea8cf95342f1b2d7049c5670c1e4bfa05a7a76f53a71858a7", 0x2e}], 0x1, &(0x7f0000001680)=[@sndrcv={0x30, 0x84, 0x1, {0x654d, 0x8, 0x20b, 0x8, 0x8, 0x9, 0xf08, 0x8}}], 0x30, 0x80}, {&(0x7f00000016c0)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001700)="498e1aded6d229e6fa779c7396c4c1691799fc987e7eaa68254f2b08c563cad8f9bdff72d5cd0217c225a6bc8b33d4c07b6f5d577c6a1737a9e7bf9781596f47fddfcfe40c884abe6349c9b6f8da4db6cea776c4d4e80188743f7791d5392e75c33023f496820dd9dbf50ffddd60d15ea72bf1b098da21851632f09be9e9c34a2847b87f420731997a18a5af3dfebb639ce68470b93024415823142988e75166fbc8c98e031920a85f8b5b81391559af0a7568b3cdcbe51547cf6ebadb50d1c34dd789a89f959066e56a7326b2da173394aabf95facb3687dcf4b23a07dd81b6cb0585d7ef2dca882bd8df5b28d04152", 0xf0}, {&(0x7f0000001800)="e72c0eab6ee4076f25ef660bc27fc3ebb477c6112cb0c0c78bb05a31b61fa6a14c621748d5b21b02530769d508fa808b115678250cddfb1cd4b42af831a23ba57f253cb627638b58e273", 0x4a}, {&(0x7f0000001880)="7a867b08da51e60be03e03694b8026375a8045d71bb8eeee2ab3dc24935577174388704d7e73141c12aaba44ee1049669b495e6d6c562556035ff5016d8582554679a3d4dba1d1952f4934aaead8813c39d7c4a84d7bb896752061eb84c217c83aa4d1c90547d64501168a55c60cef419527fffded0e4f346a475d98ee405d363c088e03d276da8de4dc049dd609c11a89b4e3a8f39a9b380e55bd1a3e0a8284fe19682d2ff93eaff387", 0xaa}], 0x3, &(0x7f0000001a80)=[@init={0x18, 0x84, 0x0, {0x7, 0x0, 0x2, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x800c, 0x86c, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0x2, 0x81, 0x8000, 0x8, 0xa, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x2, 0x2, 0x4af}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @init={0x18, 0x84, 0x0, {0x101, 0x9, 0x0, 0xffff}}, @init={0x18, 0x84, 0x0, {0x103, 0xed4, 0x0, 0x5}}], 0x100, 0x4000000}], 0x6, 0x4000001) 1m34.171362615s ago: executing program 3 (id=1960): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xeb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x79, 0x0, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x79, 0x0, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @generic={0x9, 0x8, 0x4, 0x2, 0xf53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000180)='GPL\x00', 0x7fffffff, 0x4d, &(0x7f0000000340)=""/77, 0x41100, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x9, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r0, r0, r4, r0], &(0x7f0000000540)=[{0x0, 0x5, 0xf, 0xd}, {0x0, 0x1, 0x3, 0x2}]}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1m32.912090162s ago: executing program 2 (id=1961): socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r0 = socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket(0x2, 0x80805, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) accept$ax25(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000000c80)={0x3bc, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x8, 0x1}}, @chsw_timing={0x68, 0x4, {0x1, 0xcd5}}, @channel_switch={0x25, 0x3, {0x1, 0xb, 0xa4}}, @peer_mgmt={0x75, 0x6, {0x0, 0x91b9, @val=0x101, @void, @void}}, @preq={0x82, 0x3b, {{0x0, 0x1}, 0x4, 0x2, 0x2b, @device_b, 0x8, @void, 0xffffffff, 0xc, 0x3, [{{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xd7e}, {{0x0, 0x0, 0x1}, @device_b, 0xffffffff}]}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x0, 0x0, {0x3, 0xff, 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x6}}, @mic={0x8c, 0x10, {0xbbd, "0c6d8b0750cb", @short="6f18f61ee6db93fa"}}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xe}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xff, 0x0, 0x8, 0x49}}, @mesh_chsw={0x76, 0x6, {0x8, 0x3, 0x15, 0x1}}, @measure_req={0x26, 0xf, {0x7, 0x4, 0x3, "0912c248890d96c6a73983ef"}}, @tim={0x5, 0x57, {0xfd, 0x9a, 0x8, "34329a916d25894849dc9c6adfc59e4cfd3b3ba5a54fbc0b446523eada45068d7decb44f90bf0839466ade01af59f6c7f610a7d397e1e40caf8d6d4801a5403d27b1d85209b7edca879eb327a9ece90dce9a594e"}}, @challenge={0x10, 0x1, 0x9d}, @tim={0x5, 0x92, {0x6, 0x3b, 0x1, "7c89e89499f7e706c92c20be73d7d20f44a23fb207f83ecf854a35266ac341a9f6bfa3f1a4d24411b306e84aa8db391f0fee8fcd607b1fa39ef8ee082a4e2a3d32ea004edcf58f9b6ccd1cb4401f4e5ab52220f875da50efdd1173e87c454f9652b873539872ea69c4207dda7e3a041b666d879cbb22e624fa71fda03e1873885e6493c994a1fa111727ee2deb86f6"}}]}, @NL80211_ATTR_IE={0xaa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x0, 0x9b}}, @tim={0x5, 0x9e, {0x3, 0x94, 0x0, "03450e6f2ac279b4dc00518dbdb05afeaaafc1560baedacaf90fbd3e9d15bcb4f6fe436ca40e11b5aee0908c04962699c2620b95c83ae1d235a6c7241587ac8727f4e39d7a56e4c84a4a0b2292b0251316e95b218b7518f15cb845882b9f360ac70613638100c71881f98911eb20ada967091aba322ddb9cf7e40d58e8a7aa173f5ad13415a913b6ef0cee06e12420301cf48fe9143315526d9465"}}]}, @NL80211_ATTR_IE={0x14c, 0x2a, [@measure_req={0x26, 0xa8, {0x3, 0x0, 0xd, "93f8573bd5a830e7987ef68bea0e9bffc601fb82093c9e046ee6dc992109aaf38a766f450673bbfba3ff81326d8a212dea7609f5c195d287c528a7b44763ac170f6be515e20b50e183678735ad583e848a27480e1d88c0f7e8328143ce065c10dbd4166445682d9350bc8f3bd3455e0c8922c837bc259314b8b9bfd14856466324ccb5edebad208ea62fd801d2623e67b1c7a10d9f05bc10ebceb2937461d7b7b3ecd6c0c0"}}, @random={0x5, 0x9c, "cde6aeca402d3a0386395e5d85c652500e5cd0be012d099f7b402ae6721fb9bb06f8b50db96cbf4664e265f7a510dbd7c37eba9cc2f3e87a7f461e12be015ead08c4b5eb76efde603611e06b38a743c290bb12887e7d5785a9f182c125e67d5871334d77d70a0b42bef2d9c3d29d057a79dcfc7be5a59a7bf744c95298230e83225787e91a11db132227fc1af25936558e8397073a65e607357e4fcc"}]}]}, 0x3bc}}, 0x40) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m26.92024155s ago: executing program 32 (id=1941): r0 = socket$netlink(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000fcdbdf252d000000080004000000000114000100fc0100000000000000000000000000010800020006000000"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) shutdown(r1, 0x2000000) r3 = socket(0x22, 0x2, 0x4) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0)=0x4, 0x4) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 1m26.45178763s ago: executing program 3 (id=1964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) (async) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) (async) sendmsg$802154_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='devlink_health_recover_aborted\x00', r3}, 0x18) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvmmsg(r7, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1}, 0xd}], 0x1, 0x40000100, 0x0) (async) shutdown(r7, 0x2) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) 1m23.950927969s ago: executing program 33 (id=1959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x1, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) write(r4, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, r7, 0xf4c0e000) (rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) (rerun: 32) sendmmsg$inet_sctp(r7, &(0x7f0000001b80)=[{&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0x5, @mcast2, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000005c0)="2ddf636fe6603db6cde7b2c7598c099c1b2591f1ba35464f6059c162df3855c2f070bc3179df46d350df5184fc45b56000c33a51304bbc0fe591b78029e2cd17fb", 0x41}, {&(0x7f0000000780)="fad9372871260eda667e351f5c91be50606522526442e3d5677cc2ded78901e0c0baca8e3da4f0160532dcbfc06ad48f8fc0dce9d3ae4df4a0f25005ca9c90461dfe82a1e421ac829dd90a9c86b5cb4a7acd668dae99cd38aab17d58bb3edccfdf1c15b7fc79bdd6d7a14e0bb3758f2a1d87f985dad8217e04388215152d8346f520fd2a0472800fa3e0f55da2b98a82b0f86f1dbb046fd13565b0d4eaa02e8283d806ce1164520538ca7141e2fec762e6a618be34b7b60de1c8c47f06c720", 0xbf}, {&(0x7f0000000840)="110bc9c78e02c72f78d33b430479e7bd42dcdfd3720f0405cfa426a52b2ad5e6da9357480fc6fb8cff2677024b894d0abadddd5d85cc2e6b04f0d359484f656161a80e0ed063db313f5681a2652ebc541b75701f9acb8f47392d84e1", 0x5c}, {&(0x7f00000008c0)="067a19d4c6a86fd7535f384f714201d7d07f22876bf9bdebaba47e5a19d384168e5d6974cf85c83b702df1c98decf6cf14b962a339e44d57eb404640478c8bf355ed7133d549c709067530d9590eeb19ffc088a553a0149ccfb6958e012bf931c72c677e3808a4cb6207d82c368b35f0794dc11323db3aeb951ee3", 0x7b}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000840000000000000000000800ff010500300000000000000084000000010000001200000002000000070000007d0e000005e400000000008002000000", @ANYRES32=0x0], 0x48}, {&(0x7f0000000bc0)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000c00)="71bd271f08b251681fd1a137027311e848cda971de9d852606afb03a5ef80ad0d6eabdcf32eaf9273d09fa7f40a75f7a55ad23815c2414a8538c52f495f1c59cfb822c87a51e610791e0fd8ae4d165317bac51cb8e2be0e95f09cb74c50a3cec7cad49247da39205ba8f7e966a13f36b2e7c195d878204a40434befcdc119f2606146926545651ebf7e890d3e7a749", 0x8f}, {&(0x7f0000000cc0)="cf9c94681ac50e305f62b44cbdedd5be6bc70efc64543c71ed257bd7d9901bb933f1ddee4a", 0x25}, {&(0x7f0000000d00)="0a52b1880f0a4ec55f3fcb607cffa5996f8e80fa56d709bd6964a5f234f40e2ce607aa642fb2b2358b599582e51cd0faa2b65707d8149dd619c505154bdfc4672885058817b4b2f005532dd21294da23b3b2c58ee035125065f5d4bd9ceab710ff627df66a75f42255568ed414ec19fef1e0a57e6abbf905a01455419398dce75e254bc6d0679388b9fd91d70e46eb2d10932c0ca34e0c637dfe0f49be2de1a808ed3ebb0d6a135e8726213d5e545695edddc0530446d6d9d03017d63c755a0ea551100bd44a46a11142e530b01af3ae4061b8bd2f43f507ed5a1c56f75d90397dfbd8b67be75a72501f4a3e71a2ee1d", 0xf0}, {&(0x7f0000000e00)="8453fa185f707f12da896ff2147185126cec81e2cfd1dea222ba2fdbf7cb4420586b9c097b5ccae412d90a76a6fc0149390807d71f89960d3d0f9cc684e963b0dfd74be495f531d2a9", 0x49}, {&(0x7f0000000e80)="69ea863bfab15e7344ecfe091f22638f082d97954f4e37c051a7c90077e21d023daa7c42702f1f666e518cc8c1f39b9934867318e2e88bdd727deda68cc1e9f5c581b5c0090ef82825a227a04000102131c035d4ef53c77f100eca106bc43a5a2ccff7ba0b9c140b348286b060b2defe83e00a604fa35537bcd066c3a764650306cf4bd6ca24db3193a8021a11fe7a7f558de6f9708529f86a226d67f9d803a746a2d5527e5a2ac6228f93797d5d893e8ec462cd3ee7f693ab3ddf4a2b28d0abba91", 0xc2}], 0x5, 0x0, 0x0, 0x4}, {&(0x7f0000001000)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001040)="fdfb2c5861a7c6bf6499f4a855c07e71b072a1b02136fdd1f3067a", 0x1b}, {&(0x7f0000001080)="507f2ca7bb1dfe27021dcc26e69eb06eccad09505c032d37feb588af8f665d158acd18a635caed54af5f54995bdf1fa55a9cfd209073297d7688b672cc2a77984839dcd0d2f77ffdb601c8803c31d748949bc069cc12708ca991e4977cd8bc991eabcf41eba83deb1fc57749b6c5bdeca306b785633c9d22ff9e5d0ddf95859a40ae65702a56434c4b6aeefde55d01cbc59777", 0x93}, {&(0x7f0000001140)="3bd8947d64f5e675ca40861de0d1a7fe43aea9da62dd7bd9adc9d719b2b167b445763fc331b7d9cfe2f6cc678d43209fdd38aa3f31467b031ddaa8fa551bd25f1ca9807e66999852e0bbcc47a878919bc4601b3a52a5c2bbe66c501ebd0f3d", 0x5f}, {&(0x7f00000011c0)="c2ba6da4fbad66840474799ecdbe071893", 0x11}], 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="20000000000000008400000002000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac14143c00000000180000000000000084000000000000000e00ffff06000200"], 0x50, 0x20000000}, {&(0x7f00000013c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001400)="d1ff9016a9c21251dc53c130dfb725819606810f848535e56e1c0596feda517bacacc2da9a90df8bbb2b6c964888df7da40b61156900107a4e2bc0aeca970932473c65a1d11bcfd3d090811a0d562e5c1232834175accb218ab694d211469068f215bdfaa76174d5cca8ab659467c941e780b367e8244cc8323cb6fcf2d6b90a0bab83d57bf4a8951ca9b4ffccc71383660837ac66a36c50935bdc5c9dc98dbac8d6ba9e2b1b8a357bcd5d3b103826862d4977bfa2482a8400f270a82184e8d278e22a08f674a93202", 0xc9}], 0x1, 0x0, 0x0, 0x4008008}, {&(0x7f0000001540)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001580)="2c36335e0a3614c2e8d13c6d0648dc8dfd189a1ea90ea8cf95342f1b2d7049c5670c1e4bfa05a7a76f53a71858a7", 0x2e}], 0x1, &(0x7f0000001680)=[@sndrcv={0x30, 0x84, 0x1, {0x654d, 0x8, 0x20b, 0x8, 0x8, 0x9, 0xf08, 0x8}}], 0x30, 0x80}, {&(0x7f00000016c0)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001700)="498e1aded6d229e6fa779c7396c4c1691799fc987e7eaa68254f2b08c563cad8f9bdff72d5cd0217c225a6bc8b33d4c07b6f5d577c6a1737a9e7bf9781596f47fddfcfe40c884abe6349c9b6f8da4db6cea776c4d4e80188743f7791d5392e75c33023f496820dd9dbf50ffddd60d15ea72bf1b098da21851632f09be9e9c34a2847b87f420731997a18a5af3dfebb639ce68470b93024415823142988e75166fbc8c98e031920a85f8b5b81391559af0a7568b3cdcbe51547cf6ebadb50d1c34dd789a89f959066e56a7326b2da173394aabf95facb3687dcf4b23a07dd81b6cb0585d7ef2dca882bd8df5b28d04152", 0xf0}, {&(0x7f0000001800)="e72c0eab6ee4076f25ef660bc27fc3ebb477c6112cb0c0c78bb05a31b61fa6a14c621748d5b21b02530769d508fa808b115678250cddfb1cd4b42af831a23ba57f253cb627638b58e273", 0x4a}, {&(0x7f0000001880)="7a867b08da51e60be03e03694b8026375a8045d71bb8eeee2ab3dc24935577174388704d7e73141c12aaba44ee1049669b495e6d6c562556035ff5016d8582554679a3d4dba1d1952f4934aaead8813c39d7c4a84d7bb896752061eb84c217c83aa4d1c90547d64501168a55c60cef419527fffded0e4f346a475d98ee405d363c088e03d276da8de4dc049dd609c11a89b4e3a8f39a9b380e55bd1a3e0a8284fe19682d2ff93eaff387", 0xaa}], 0x3, &(0x7f0000001a80)=[@init={0x18, 0x84, 0x0, {0x7, 0x0, 0x2, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x800c, 0x86c, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0x2, 0x81, 0x8000, 0x8, 0xa, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x2, 0x2, 0x4af}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @init={0x18, 0x84, 0x0, {0x101, 0x9, 0x0, 0xffff}}, @init={0x18, 0x84, 0x0, {0x103, 0xed4, 0x0, 0x5}}], 0x100, 0x4000000}], 0x6, 0x4000001) 1m23.2544741s ago: executing program 2 (id=1966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfbfc, 0x0, 0x0, 0x90ef}, 0x8) sendto$inet6(r1, &(0x7f0000000300)="81", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x0, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f00000021c0)=0x2, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) 1m21.515920853s ago: executing program 3 (id=1968): r0 = socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x50001) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) unshare(0x22020400) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) 1m7.342555522s ago: executing program 34 (id=1966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfbfc, 0x0, 0x0, 0x90ef}, 0x8) sendto$inet6(r1, &(0x7f0000000300)="81", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x0, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f00000021c0)=0x2, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) 1m6.20120616s ago: executing program 35 (id=1968): r0 = socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x50001) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) unshare(0x22020400) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x4) 1m0.601483464s ago: executing program 1 (id=1973): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffda7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}]}, 0x9b}}, 0x0) socket$inet(0x2, 0x7, 0x8001) 50.871900201s ago: executing program 1 (id=1974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, r1, 0x41d, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c04}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0xfffffffe, 0x25dfdbfc, {}, [@RTA_GATEWAY={0x14, 0x5, @private1}]}, 0x30}, 0x1, 0x11}, 0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c8, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x67af8fcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb60d}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x90}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x853}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe588}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x841) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 41.98004481s ago: executing program 1 (id=1975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r4, 0x0, 0x4804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000070000000000000000010c00028005000100000000000800074000000000440010800800024000000fff0800024000000007080001"], 0xe0}}, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78) write(r4, &(0x7f0000000000)='\"', 0x1) recvmmsg(r4, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 33.522329649s ago: executing program 1 (id=1976): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0xcc14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) close(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107800765a6d"], 0x0, 0x1d89e, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe9}, 0x94) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffed9fff, 0x1000, 0xffffffff}, 0x20) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000094820065f2ffffff6370000000800000", @ANYRES32, @ANYBLOB="0200441c000001b9e50000000000d29500000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000200"/14, @ANYRES8=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000500], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000007efbffffffffffff000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r5 = socket$inet6(0xa, 0x800000000000002, 0x4) setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a40), 0x0, 0x10103, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b00171b3f00"], 0x58}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) sendfile(r9, r8, 0x0, 0x10000) 24.1124885s ago: executing program 1 (id=1977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1021) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r5}, &(0x7f0000002480), &(0x7f00000024c0)=r4}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x188c8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008894}, 0x4000840) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000180), &(0x7f0000000040)=@udp=r6}, 0x20) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014003000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x24008048) 15.876755861s ago: executing program 1 (id=1978): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0xfff}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff088a81fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 0s ago: executing program 36 (id=1978): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0xfff}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff088a81fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) kernel console output (not intermixed with test programs): `syz.2.308'. [ 145.303564][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 145.391856][ T7282] lo speed is unknown, defaulting to 1000 [ 145.678557][ T7320] netlink: 52 bytes leftover after parsing attributes in process `syz.4.312'. [ 145.969856][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.315'. [ 146.478464][ T7335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.485154][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 146.485192][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'. [ 146.511451][ T7335] bridge0: port 1(bond2) entered blocking state [ 146.517840][ T7335] bridge0: port 1(bond2) entered disabled state [ 146.534595][ T7335] bond2: entered allmulticast mode [ 146.591034][ T7335] bond2: entered promiscuous mode [ 146.608363][ T7335] bridge0: port 1(bond2) entered blocking state [ 146.615164][ T7335] bridge0: port 1(bond2) entered forwarding state [ 146.650309][ T3512] bridge0: port 1(bond2) entered disabled state [ 146.791292][ T7338] dummy0: entered promiscuous mode [ 146.814318][ T7338] team0: entered promiscuous mode [ 146.865330][ T7338] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 146.879806][ T7338] Cannot create hsr debugfs directory [ 146.889551][ T7338] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 146.923232][ T7338] bridge0: port 2(hsr1) entered blocking state [ 146.933402][ T7338] bridge0: port 2(hsr1) entered disabled state [ 146.947138][ T7338] hsr1: entered allmulticast mode [ 146.957538][ T7338] dummy0: entered allmulticast mode [ 146.964540][ T7338] team0: entered allmulticast mode [ 147.000850][ T7338] hsr1: entered promiscuous mode [ 147.017374][ T7338] bridge0: port 2(hsr1) entered blocking state [ 147.023936][ T7338] bridge0: port 2(hsr1) entered forwarding state [ 147.274780][ T7348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.320'. [ 147.359947][ T7348] dvmrp0: entered allmulticast mode [ 147.565918][ T7358] x_tables: duplicate underflow at hook 1 [ 147.730660][ T7358] syzkaller0: entered promiscuous mode [ 147.748956][ T7358] syzkaller0: entered allmulticast mode [ 147.805218][ T7365] netlink: 'syz.0.325': attribute type 1 has an invalid length. [ 148.071236][ T7367] bond1: (slave geneve2): making interface the new active one [ 148.088316][ T7367] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 148.109610][ T7369] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.127918][ T7365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.139154][ T56] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.153141][ T56] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.246018][ T56] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.274708][ T56] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.387653][ T7380] sctp: [Deprecated]: syz.2.330 (pid 7380) Use of int in maxseg socket option. [ 148.387653][ T7380] Use struct sctp_assoc_value instead [ 149.509136][ T7422] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.562253][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.570764][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.817774][ T7437] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 150.249861][ T7424] lo speed is unknown, defaulting to 1000 [ 150.349396][ T7449] __nla_validate_parse: 5 callbacks suppressed [ 150.349417][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 150.387820][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 150.448219][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 150.464714][ T7455] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 150.473124][ T7455] netlink: 184 bytes leftover after parsing attributes in process `syz.1.348'. [ 150.482376][ T7455] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 150.502986][ T7452] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 150.562773][ T7452] netlink: 184 bytes leftover after parsing attributes in process `syz.1.348'. [ 150.573286][ T7452] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 151.175806][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 151.491053][ T7476] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 151.819343][ T7483] net_ratelimit: 8 callbacks suppressed [ 151.819364][ T7483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.847827][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 151.862865][ T7490] netlink: 48 bytes leftover after parsing attributes in process `syz.4.359'. [ 151.897713][ T7462] lo speed is unknown, defaulting to 1000 [ 152.019591][ T7494] No such timeout policy "syz0" [ 152.419744][ T30] audit: type=1800 audit(1753031406.054:2): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.365" name="memory.events" dev="tmpfs" ino=417 res=0 errno=0 [ 152.491462][ T30] audit: type=1804 audit(1753031406.084:3): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.365" name="/newroot/78/memory.events" dev="tmpfs" ino=417 res=1 errno=0 [ 152.799047][ T7483] siw: device registration error -23 [ 153.122049][ T7526] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 153.133946][ T7526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.370'. [ 153.144868][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 153.221954][ T7530] netlink: 'syz.3.370': attribute type 15 has an invalid length. [ 153.435834][ T7526] bond2: entered promiscuous mode [ 153.939532][ T7543] tipc: Enabled bearer , priority 0 [ 153.988609][ T7543] syzkaller0: entered promiscuous mode [ 154.014973][ T7543] syzkaller0: entered allmulticast mode [ 154.111692][ T7543] tipc: Resetting bearer [ 154.136720][ T7552] tipc: Started in network mode [ 154.151610][ T7552] tipc: Node identity 4, cluster identity 4711 [ 154.157814][ T7552] tipc: Node number set to 4 [ 154.235573][ T7541] tipc: Resetting bearer [ 154.292525][ T7541] tipc: Disabling bearer [ 154.389827][ T7520] lo speed is unknown, defaulting to 1000 [ 154.860200][ T7564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.931052][ T7564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.022766][ T7564] bond0 (unregistering): Released all slaves [ 155.066225][ T7579] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 155.107861][ T7570] veth1_macvtap: left promiscuous mode [ 155.117029][ T7570] macsec0: entered promiscuous mode [ 155.136193][ T7579] bridge0: port 3(dummy0) entered disabled state [ 155.170794][ T7579] batman_adv: batadv0: Adding interface: dummy0 [ 155.188013][ T7579] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.261424][ T7579] batman_adv: batadv0: Interface activated: dummy0 [ 155.306775][ T7583] batadv0: mtu less than device minimum [ 155.319160][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.331632][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.343866][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.356220][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.368485][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.380653][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.392717][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.404928][ T7583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.438540][ T7585] __nla_validate_parse: 5 callbacks suppressed [ 155.438563][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 155.518434][ T7586] batman_adv: batadv0: Adding interface: gretap1 [ 155.525034][ T7586] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.573276][ T7586] batman_adv: batadv0: Interface activated: gretap1 [ 155.737215][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 155.831006][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 156.391691][ T7612] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 156.392483][ T7614] x_tables: duplicate underflow at hook 1 [ 156.404737][ T7612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.393'. [ 156.426624][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 156.686088][ T7624] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.396'. [ 156.696467][ T7626] netlink: 'syz.1.398': attribute type 5 has an invalid length. [ 157.041606][ T7639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.806887][ T7656] tap0: tun_chr_ioctl cmd 1074025676 [ 157.815394][ T7656] tap0: owner set to 0 [ 158.668136][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 158.719676][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.410'. [ 158.769891][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 159.251922][ T7679] lo speed is unknown, defaulting to 1000 [ 159.968891][ T5217] udevd[5217]: worker [6632] terminated by signal 33 (Unknown signal 33) [ 160.115236][ T7712] netlink: 68 bytes leftover after parsing attributes in process `syz.1.419'. [ 160.168744][ T7714] Cannot find map_set index 0 as target [ 160.270198][ T7714] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 160.404783][ T7720] net_ratelimit: 32 callbacks suppressed [ 160.404805][ T7720] openvswitch: netlink: IPv6 tunnel dst address is zero [ 160.750269][ T7727] tipc: Started in network mode [ 160.800643][ T7727] tipc: Node identity f29c6e3a806d, cluster identity 4711 [ 160.868542][ T7727] tipc: Enabled bearer , priority 0 [ 160.915228][ T7721] syzkaller0: entered promiscuous mode [ 160.979670][ T7721] syzkaller0: entered allmulticast mode [ 161.083482][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 161.110152][ T7731] tipc: Resetting bearer [ 161.496957][ T7715] tipc: Resetting bearer [ 161.522462][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 161.560683][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 161.665258][ T7715] tipc: Disabling bearer [ 161.857280][ T7721] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 162.511572][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 163.231333][ T7778] team0: left allmulticast mode [ 163.264099][ T7778] team_slave_0: left allmulticast mode [ 163.270678][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 163.303642][ T7778] team_slave_1: left allmulticast mode [ 163.339231][ T7778] bridge0: port 3(team0) entered disabled state [ 163.649673][ T7778] bridge_slave_1: left allmulticast mode [ 163.684062][ T7778] bridge_slave_1: left promiscuous mode [ 163.690072][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.785726][ T7778] bridge_slave_0: left allmulticast mode [ 163.813020][ T7778] bridge_slave_0: left promiscuous mode [ 163.818872][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.316279][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 164.341944][ T7790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.364365][ T7798] netlink: 'syz.3.438': attribute type 12 has an invalid length. [ 164.375338][ T7750] lo speed is unknown, defaulting to 1000 [ 164.682887][ T7829] dummy0: left promiscuous mode [ 164.708350][ T7829] dummy0: left allmulticast mode [ 164.790661][ T7829] batman_adv: batadv0: Interface deactivated: dummy0 [ 164.830953][ T7829] batman_adv: batadv0: Removing interface: dummy0 [ 164.857530][ T7855] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:19999 [ 164.949480][ T7829] bridge_slave_0: left allmulticast mode [ 164.955464][ T7829] bridge_slave_0: left promiscuous mode [ 164.962119][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.106610][ T7829] bridge_slave_1: left allmulticast mode [ 165.112675][ T7829] bridge_slave_1: left promiscuous mode [ 165.119889][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.258526][ T7829] bond0: (slave bond_slave_0): Releasing backup interface [ 165.316417][ T7829] bond0: (slave bond_slave_1): Releasing backup interface [ 165.388639][ T7829] team0: Port device team_slave_0 removed [ 165.439417][ T7829] team0: Port device team_slave_1 removed [ 165.492871][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.528847][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.592505][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.623129][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.806219][ T7829] team0: Port device netdevsim0 removed [ 165.836807][ T7829] bridge1: left promiscuous mode [ 165.863013][ T7829] bridge1: left allmulticast mode [ 165.891898][ T7829] team0: Port device bridge1 removed [ 165.910794][ T7829] bond1: left promiscuous mode [ 165.915626][ T7829] bond1: left allmulticast mode [ 165.928763][ T7829] bond2: left promiscuous mode [ 165.945086][ T7829] batman_adv: batadv0: Interface deactivated: gretap1 [ 165.958099][ T7829] batman_adv: batadv0: Removing interface: gretap1 [ 166.144713][ T7767] lo speed is unknown, defaulting to 1000 [ 166.351748][ T7881] bridge0: port 1(syz_tun) entered blocking state [ 166.362535][ T7881] bridge0: port 1(syz_tun) entered disabled state [ 166.401565][ T7881] syz_tun: entered allmulticast mode [ 166.408953][ T7881] syz_tun: entered promiscuous mode [ 166.461224][ T7881] bridge0: port 1(syz_tun) entered blocking state [ 166.468547][ T7881] bridge0: port 1(syz_tun) entered forwarding state [ 167.019956][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 167.039714][ T7888] netlink: 76 bytes leftover after parsing attributes in process `syz.2.448'. [ 167.097711][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 167.344064][ T7905] netlink: 'syz.4.453': attribute type 10 has an invalid length. [ 167.374538][ T7906] netlink: 'syz.4.453': attribute type 10 has an invalid length. [ 167.501176][ T7905] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.047157][ T7920] syzkaller0: entered promiscuous mode [ 168.068823][ T7920] syzkaller0: entered allmulticast mode [ 169.306485][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.467'. [ 169.318153][ T7963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.307256][ T7965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.345104][ T7969] erspan0: entered promiscuous mode [ 170.372636][ T7969] batman_adv: batadv0: Adding interface: macvlan2 [ 170.390623][ T7969] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 170.456726][ T7969] batman_adv: batadv0: Interface activated: macvlan2 [ 170.551667][ T7934] lo speed is unknown, defaulting to 1000 [ 170.926529][ T7983] netlink: 'syz.2.472': attribute type 13 has an invalid length. [ 170.934594][ T7983] netlink: 'syz.2.472': attribute type 17 has an invalid length. [ 171.045421][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.105266][ T7983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.023088][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 172.554225][ T8000] veth1_vlan (unregistering): left allmulticast mode [ 173.265450][ T8017] netlink: 'syz.1.480': attribute type 17 has an invalid length. [ 173.288734][ T8017] netlink: 2 bytes leftover after parsing attributes in process `syz.1.480'. [ 173.331774][ T8017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.376413][ T6001] lo speed is unknown, defaulting to 1000 [ 173.910100][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 173.966059][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 174.071444][ T8039] gretap0: entered promiscuous mode [ 174.097950][ T8039] gretap0: left promiscuous mode [ 174.144644][ T8046] netlink: 104 bytes leftover after parsing attributes in process `syz.0.487'. [ 174.369623][ T8056] netlink: 'syz.1.488': attribute type 13 has an invalid length. [ 174.410528][ T8056] netlink: 'syz.1.488': attribute type 17 has an invalid length. [ 174.620285][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.627625][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.635355][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.642610][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.693365][ T8056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.921160][ T8080] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 174.922142][ T8067] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 175.206377][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 175.555747][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 175.693836][ T8112] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.826243][ T8115] netlink: 108 bytes leftover after parsing attributes in process `syz.3.503'. [ 176.281738][ T8126] 8021q: VLANs not supported on wg1 [ 176.319464][ T8131] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 176.328634][ T8130] syzkaller1: entered promiscuous mode [ 176.338571][ T8130] syzkaller1: entered allmulticast mode [ 176.344693][ T8131] netlink: 184 bytes leftover after parsing attributes in process `syz.2.506'. [ 176.356899][ T8131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'. [ 176.552197][ T8134] veth0: entered promiscuous mode [ 177.063959][ T6001] IPVS: starting estimator thread 0... [ 177.170555][ T8165] IPVS: using max 26 ests per chain, 62400 per kthread [ 177.779804][ T8189] netlink: 'syz.0.521': attribute type 64 has an invalid length. [ 177.862196][ T8195] __nla_validate_parse: 1 callbacks suppressed [ 177.862216][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 178.056617][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 178.270691][ T8209] netlink: 'syz.0.525': attribute type 5 has an invalid length. [ 178.651278][ T8226] netlink: 1 bytes leftover after parsing attributes in process `syz.0.529'. [ 178.840858][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.531'. [ 179.182674][ T56] wlan0: Trigger new scan to find an IBSS to join [ 179.400793][ T8253] netlink: 184 bytes leftover after parsing attributes in process `syz.0.535'. [ 179.431941][ T8197] lo speed is unknown, defaulting to 1000 [ 179.637036][ T8258] netlink: 'syz.0.537': attribute type 28 has an invalid length. [ 180.337960][ T8273] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 180.671447][ T8214] lo speed is unknown, defaulting to 1000 [ 181.061036][ T8295] tun0: tun_chr_ioctl cmd 1074025675 [ 181.066650][ T8295] tun0: persist enabled [ 181.080476][ T8296] tun0: tun_chr_ioctl cmd 1074025675 [ 181.087324][ T8296] tun0: persist disabled [ 181.235391][ T8304] netlink: 'syz.4.546': attribute type 13 has an invalid length. [ 181.252498][ T8304] netlink: 'syz.4.546': attribute type 17 has an invalid length. [ 181.391033][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 181.518959][ T8304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.542126][ T8316] netlink: 156 bytes leftover after parsing attributes in process `syz.0.550'. [ 181.591097][ T30] audit: type=1800 audit(1753031435.224:4): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.550" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=710 res=0 errno=0 [ 181.830660][ T8322] netlink: 76 bytes leftover after parsing attributes in process `syz.0.551'. [ 182.103393][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 182.140637][ T60] wlan0: Trigger new scan to find an IBSS to join [ 182.426209][ T8335] gtp0: entered promiscuous mode [ 182.460292][ T8335] gtp0: entered allmulticast mode [ 182.718166][ T8337] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.965036][ T8337] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.144291][ T5851] IPVS: starting estimator thread 0... [ 183.206376][ T8337] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.254204][ T8373] IPVS: using max 22 ests per chain, 52800 per kthread [ 183.402190][ T8337] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.647627][ T5996] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.671560][ T8388] x_tables: duplicate underflow at hook 1 [ 183.726774][ T5996] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.746263][ T5996] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.819267][ T3512] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.963564][ T8395] x_tables: duplicate underflow at hook 2 [ 184.037557][ T8407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.571'. [ 184.311446][ T8417] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.573'. [ 184.586459][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 184.614288][ T8431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.662966][ T8435] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.768924][ T8437] netlink: 248 bytes leftover after parsing attributes in process `syz.3.581'. [ 184.935780][ T8439] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 185.180695][ T5996] wlan0: Trigger new scan to find an IBSS to join [ 185.329707][ T8464] netlink: 56 bytes leftover after parsing attributes in process `syz.1.590'. [ 185.683055][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 186.084468][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.168680][ T8511] syzkaller1: entered promiscuous mode [ 186.179069][ T8511] syzkaller1: entered allmulticast mode [ 186.207159][ T8517] netlink: 52 bytes leftover after parsing attributes in process `syz.3.601'. [ 186.224907][ T8517] netlink: 52 bytes leftover after parsing attributes in process `syz.3.601'. [ 186.235553][ T8517] netlink: 52 bytes leftover after parsing attributes in process `syz.3.601'. [ 186.255621][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'. [ 186.847596][ T8530] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 186.871089][ T8531] bridge0: entered promiscuous mode [ 186.876496][ T8530] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 187.190754][ T8544] netlink: 'syz.3.609': attribute type 282 has an invalid length. [ 187.459142][ T8548] xt_hashlimit: size too large, truncated to 1048576 [ 187.531430][ T8552] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 187.600029][ T8557] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 188.011452][ T8566] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 188.299552][ T8533] lo speed is unknown, defaulting to 1000 [ 188.381749][ T8596] netlink: 'syz.0.620': attribute type 64 has an invalid length. [ 188.843839][ T8606] veth1_to_bond: entered allmulticast mode [ 188.983846][ T8606] veth1_to_bond (unregistering): left allmulticast mode [ 189.635224][ T8645] __nla_validate_parse: 3 callbacks suppressed [ 189.635245][ T8645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.633'. [ 189.709500][ T8644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.790497][ T8645] netlink: 236 bytes leftover after parsing attributes in process `syz.2.633'. [ 190.629565][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'. [ 190.685172][ T8685] netlink: 27 bytes leftover after parsing attributes in process `syz.4.641'. [ 190.727534][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'. [ 190.761782][ T8689] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 190.781191][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'. [ 190.847991][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'. [ 190.879322][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'. [ 190.908387][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'. [ 190.952316][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.641'. [ 192.083618][ T8744] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 192.137741][ T8744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.172133][ T8751] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 192.218405][ T8751] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 192.271038][ T8751] netlink: 'syz.3.653': attribute type 2 has an invalid length. [ 192.434669][ T8666] lo speed is unknown, defaulting to 1000 [ 192.833471][ T8764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.625985][ T8788] ipvlan2: entered promiscuous mode [ 193.758757][ T8765] lo speed is unknown, defaulting to 1000 [ 194.545949][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.556830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.006392][ T8823] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 195.104512][ T8824] __nla_validate_parse: 64 callbacks suppressed [ 195.104532][ T8824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.669'. [ 195.140829][ T8824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.669'. [ 195.149936][ T8824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.669'. [ 195.373497][ T8823] bond0: entered promiscuous mode [ 195.404297][ T8823] bond0: entered allmulticast mode [ 195.615969][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 196.113898][ T8868] x_tables: duplicate underflow at hook 2 [ 196.416818][ T8883] tipc: Enabled bearer , priority 0 [ 196.447969][ T8883] syzkaller0: entered promiscuous mode [ 196.472109][ T8883] syzkaller0: entered allmulticast mode [ 196.561507][ T8883] tipc: Resetting bearer [ 196.610628][ T8882] tipc: Resetting bearer [ 196.685698][ T8882] tipc: Disabling bearer [ 196.733565][ T8899] !: renamed from dummy0 (while UP) [ 197.510932][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.683'. [ 197.573074][ T8917] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.683'. [ 197.613031][ T8918] syz_tun: entered allmulticast mode [ 197.624293][ T8918] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 197.768387][ T8877] lo speed is unknown, defaulting to 1000 [ 197.815138][ T8925] xt_l2tp: wrong L2TP version: 0 [ 198.368489][ T8940] bond0: option use_carrier: invalid value (3) [ 198.410017][ T8941] netlink: 'syz.3.700': attribute type 10 has an invalid length. [ 198.499412][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 198.655749][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 198.860725][ T8952] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 198.898199][ T8952] netlink: 2 bytes leftover after parsing attributes in process `syz.4.703'. [ 199.099095][ T8952] gtp0: entered promiscuous mode [ 199.140576][ T8952] gtp0: entered allmulticast mode [ 199.720640][ T8881] lo speed is unknown, defaulting to 1000 [ 199.928040][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 200.047482][ T8988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.235870][ T8991] netlink: 68 bytes leftover after parsing attributes in process `syz.0.715'. [ 200.542227][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 200.578417][ T8995] batadv0: entered promiscuous mode [ 200.594684][ T8995] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 200.629329][ T8995] batadv0: left promiscuous mode [ 200.839606][ T9002] IPv6: addrconf: prefix option has invalid lifetime [ 200.849271][ T8964] lo speed is unknown, defaulting to 1000 [ 200.888671][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.718'. [ 200.922391][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 200.953874][ T9006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.720'. [ 201.267234][ T9017] pimreg3: entered allmulticast mode [ 202.144682][ T9016] pimreg3: left allmulticast mode [ 202.324065][ T9036] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 202.526435][ T9036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.554577][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.729'. [ 202.571607][ T9051] xt_TCPMSS: Only works on TCP SYN packets [ 202.727737][ T9039] bond3: (slave ip6gretap1): making interface the new active one [ 202.742368][ T9058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 202.769760][ T9039] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 202.924798][ T9041] veth5: entered promiscuous mode [ 202.959217][ T9041] bond3: (slave veth5): Enslaving as an active interface with a down link [ 203.046826][ T9036] erspan0: entered allmulticast mode [ 203.164492][ T9036] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 204.388418][ T9105] netlink: 'syz.2.742': attribute type 64 has an invalid length. [ 204.406582][ T9097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.439324][ T9097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.453403][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 205.001108][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.742'. [ 205.016824][ T9079] lo speed is unknown, defaulting to 1000 [ 205.084392][ T9097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.099963][ T9097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.226842][ T9097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.248314][ T9097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.367327][ T9133] geneve2: entered promiscuous mode [ 205.406491][ T9143] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 205.481040][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 205.494777][ T9097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.512448][ T9097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.550698][ T9133] sctp: [Deprecated]: syz.2.748 (pid 9133) Use of int in max_burst socket option. [ 205.550698][ T9133] Use struct sctp_assoc_value instead [ 206.082668][ T9161] bridge0: port 3(ipvlan3) entered blocking state [ 206.090181][ T9161] bridge0: port 3(ipvlan3) entered disabled state [ 206.115085][ T9161] ipvlan3: entered allmulticast mode [ 206.132933][ T9161] bridge0: entered allmulticast mode [ 206.167738][ T9161] ipvlan3: left allmulticast mode [ 206.173788][ T9161] bridge0: left allmulticast mode [ 206.268190][ T9163] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 206.320469][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 206.372671][ T9170] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 206.516872][ T9178] pim6reg: entered allmulticast mode [ 206.544366][ T9180] pim6reg: left allmulticast mode [ 206.679821][ T9171] syzkaller1: entered promiscuous mode [ 206.723137][ T9171] syzkaller1: entered allmulticast mode [ 207.082172][ T9197] netlink: 'syz.1.762': attribute type 11 has an invalid length. [ 208.491421][ T9167] lo speed is unknown, defaulting to 1000 [ 208.539174][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 208.576648][ T9200] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 209.102037][ T9224] netlink: 'syz.4.769': attribute type 16 has an invalid length. [ 209.109944][ T9224] netlink: 'syz.4.769': attribute type 17 has an invalid length. [ 209.174207][ T9224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.317616][ T9231] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.539047][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 209.584796][ T9236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.580280][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 210.611778][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.772437][ T9252] bridge_slave_1 (unregistering): left allmulticast mode [ 210.779540][ T9252] bridge_slave_1 (unregistering): left promiscuous mode [ 210.789909][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.074068][ T9271] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 211.094357][ T9271] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 211.309823][ T9287] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 211.600057][ T9262] lo speed is unknown, defaulting to 1000 [ 211.981013][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 211.982322][ T5167] Bluetooth: hci2: command 0x0406 tx timeout [ 211.987375][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 212.306808][ T9278] lo speed is unknown, defaulting to 1000 [ 212.447713][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 212.576268][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 212.786651][ T9333] netlink: 'syz.2.801': attribute type 25 has an invalid length. [ 212.791747][ T9332] netlink: 'syz.2.801': attribute type 25 has an invalid length. [ 212.849506][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 212.874969][ T9330] team0: left promiscuous mode [ 212.880090][ T9330] team_slave_0: left promiscuous mode [ 212.888335][ T9330] team_slave_1: left promiscuous mode [ 212.898468][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.048133][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.111391][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.147922][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.227558][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.256962][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.411345][ T9346] netlink: 'syz.2.804': attribute type 12 has an invalid length. [ 213.456091][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.857241][ T9372] netlink: 44 bytes leftover after parsing attributes in process `syz.3.809'. [ 214.891611][ T9369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.809'. [ 215.361484][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 215.447855][ T9406] bridge0: entered promiscuous mode [ 215.682070][ T9412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.689412][ T9412] IPv6: NLM_F_CREATE should be set when creating new route [ 216.118427][ T9441] batadv_slave_1: entered promiscuous mode [ 216.163440][ T9441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'. [ 216.204747][ T9439] batadv_slave_1: left promiscuous mode [ 216.368123][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 216.515622][ T9459] syz.0.836 uses old SIOCAX25GETINFO [ 216.671620][ T9461] Cannot find del_set index 286 as target [ 216.703184][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 216.811326][ T9470] bridge2: port 1(veth0_to_bond) entered blocking state [ 216.832046][ T9461] can: request_module (can-proto-0) failed. [ 216.865509][ T9470] bridge2: port 1(veth0_to_bond) entered disabled state [ 216.875682][ T9470] veth0_to_bond: entered allmulticast mode [ 216.891960][ T9470] veth0_to_bond: entered promiscuous mode [ 216.916368][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 216.984328][ T9481] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 217.785103][ T9481] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 218.004068][ T9507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.849'. [ 218.222222][ T7854] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.500785][ T9524] team0 (unregistering): Port device team_slave_0 removed [ 218.521852][ T9524] team0 (unregistering): Port device team_slave_1 removed [ 218.768601][ T9543] wg2: entered promiscuous mode [ 218.775059][ T9543] wg2: entered allmulticast mode [ 218.787458][ T9539] netlink: 'syz.4.857': attribute type 11 has an invalid length. [ 218.816154][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 219.136592][ T9564] netlink: 248 bytes leftover after parsing attributes in process `syz.3.865'. [ 220.606186][ T9570] bridge_slave_0: left allmulticast mode [ 220.632868][ T9570] bridge_slave_0: left promiscuous mode [ 220.643179][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 220.664313][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.104423][ T9570] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 221.160218][ T9570] team0: Port device team_slave_0 removed [ 221.223748][ T9570] team0: Failed to send options change via netlink (err -105) [ 221.265797][ T9570] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 221.317667][ T9570] team0: Port device team_slave_1 removed [ 221.371578][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.446793][ T9570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.569860][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.607679][ T9570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.879923][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'. [ 222.220184][ T9592] syzkaller1: entered promiscuous mode [ 222.277282][ T9592] syzkaller1: entered allmulticast mode [ 222.957193][ T9617] netlink: 'syz.3.878': attribute type 2 has an invalid length. [ 223.025828][ T9617] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 223.083107][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 223.124578][ T9617] netlink: 152 bytes leftover after parsing attributes in process `syz.3.878'. [ 223.158855][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 223.169390][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 223.214095][ T9627] netlink: 'syz.4.880': attribute type 18 has an invalid length. [ 223.923868][ T9633] tipc: Enabling of bearer rejected, failed to enable media [ 223.956425][ T9612] lo speed is unknown, defaulting to 1000 [ 223.988303][ T9633] netlink: 'syz.0.881': attribute type 3 has an invalid length. [ 224.054087][ T9633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.881'. [ 224.115518][ T9638] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 224.190553][ T9638] netlink: 224 bytes leftover after parsing attributes in process `syz.3.884'. [ 224.349942][ T9642] sctp: [Deprecated]: syz.4.885 (pid 9642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.349942][ T9642] Use struct sctp_sack_info instead [ 224.610857][ T9641] xt_CT: No such helper "snmp" [ 225.835374][ T9592] lo speed is unknown, defaulting to 1000 [ 226.231273][ T9662] netlink: 48 bytes leftover after parsing attributes in process `syz.3.891'. [ 226.290846][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 226.668815][ T9665] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 226.702514][ T9665] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 226.712395][ T9665] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 226.795319][ T30] audit: type=1800 audit(1753031480.304:5): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.891" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 227.517008][ T9687] netlink: 136 bytes leftover after parsing attributes in process `syz.4.895'. [ 229.009319][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 229.590899][ T9706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 229.839860][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 230.282954][ T9721] sctp: [Deprecated]: syz.4.906 (pid 9721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.282954][ T9721] Use struct sctp_sack_info instead [ 230.459873][ T9727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.907'. [ 230.518193][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 231.500246][ T9745] netlink: 'syz.4.910': attribute type 2 has an invalid length. [ 231.520639][ T9745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.910'. [ 232.918823][ T9714] lo speed is unknown, defaulting to 1000 [ 233.672686][ T9789] netlink: 'syz.4.922': attribute type 2 has an invalid length. [ 234.711912][ T9750] lo speed is unknown, defaulting to 1000 [ 236.099902][ T9818] xt_socket: unknown flags 0xd0 [ 237.187156][ T9834] x_tables: duplicate underflow at hook 2 [ 237.340124][ T9844] xt_hashlimit: size too large, truncated to 1048576 [ 237.407306][ T9839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.671274][ T9841] netlink: 272 bytes leftover after parsing attributes in process `syz.1.934'. [ 237.871301][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'. [ 238.063742][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 240.988504][ T9849] lo speed is unknown, defaulting to 1000 [ 241.460571][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.947'. [ 241.541048][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.947'. [ 243.735439][ T9917] dvmrp8: entered allmulticast mode [ 243.925369][ T9917] dvmrp8: left allmulticast mode [ 244.227812][ T9925] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 244.466250][ T9927] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 244.499247][ T9928] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 245.247930][ T9941] netlink: 52 bytes leftover after parsing attributes in process `syz.1.958'. [ 245.317694][ T9941] netlink: 52 bytes leftover after parsing attributes in process `syz.1.958'. [ 245.367439][ T9941] netlink: 52 bytes leftover after parsing attributes in process `syz.1.958'. [ 245.467384][ T9946] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.727836][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.960'. [ 246.047931][ T9946] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.567253][ T9964] tipc: Enabled bearer , priority 0 [ 246.616878][ T9957] syzkaller0: entered promiscuous mode [ 246.675689][ T9957] syzkaller0: entered allmulticast mode [ 246.737233][ T9946] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.086856][ T9956] tipc: Resetting bearer [ 247.238008][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'. [ 247.472394][ T9956] tipc: Disabling bearer [ 247.644119][ T9946] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.955002][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'. [ 248.055024][ T7854] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.177080][ T1088] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.320878][ T7854] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.429119][ T7854] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.777747][ T9988] netlink: 'syz.4.969': attribute type 21 has an invalid length. [ 248.834022][ T9988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.969'. [ 248.914853][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 248.961529][ C1] Unknown status report in ack skb [ 248.985234][ T9999] netlink: 108 bytes leftover after parsing attributes in process `syz.2.971'. [ 249.317661][ T9999] vlan0: entered allmulticast mode [ 249.347690][ T9999] veth1: entered allmulticast mode [ 249.588893][ T60] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.800322][ C0] sched: DL replenish lagged too much [ 249.836626][T10018] netlink: 'syz.3.974': attribute type 9 has an invalid length. [ 249.876749][T10018] netlink: 'syz.3.974': attribute type 7 has an invalid length. [ 249.896583][T10018] netlink: 'syz.3.974': attribute type 8 has an invalid length. [ 250.027849][T10023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.976'. [ 250.133688][T10017] bridge0: left promiscuous mode [ 250.153080][T10027] dvmrp0: left allmulticast mode [ 250.241568][T10020] rdma_rxe: rxe_newlink: failed to add lo [ 250.448897][T10031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.989272][T10020] bridge0: left promiscuous mode [ 251.068006][T10020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.148454][T10034] bridge0: port 2(hsr1) entered disabled state [ 251.669650][T10050] sctp: [Deprecated]: syz.4.983 (pid 10050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.669650][T10050] Use struct sctp_sack_info instead [ 251.894882][T10055] __nla_validate_parse: 2 callbacks suppressed [ 251.894913][T10055] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.984'. [ 251.973523][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 252.311069][T10064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.988'. [ 252.328727][T10064] netlink: 3 bytes leftover after parsing attributes in process `syz.1.988'. [ 252.515899][T10071] netlink: 'syz.4.989': attribute type 83 has an invalid length. [ 252.544611][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 252.590895][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'. [ 252.606739][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 252.627418][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 252.690659][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'. [ 252.762511][T10063] netlink: 21 bytes leftover after parsing attributes in process `syz.1.988'. [ 253.930145][T10085] lo speed is unknown, defaulting to 1000 [ 254.428496][T10111] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 254.730953][T10111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.134935][T10115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.235301][T10115] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.314648][T10129] IPv6: Can't replace route, no match found [ 255.376990][T10115] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 255.596504][T10116] batadv_slave_1: entered promiscuous mode [ 256.020639][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 256.201304][T10136] netlink: 'syz.0.1004': attribute type 2 has an invalid length. [ 257.264051][T10156] veth0_to_bond: left allmulticast mode [ 257.328262][T10156] veth0_to_bond: left promiscuous mode [ 257.392466][T10156] bridge2: port 1(veth0_to_bond) entered disabled state [ 257.412389][T10172] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 257.656336][T10156] bond2: left allmulticast mode [ 257.679851][T10156] bond2: left promiscuous mode [ 257.699669][T10156] bridge0: port 1(bond2) entered disabled state [ 257.753714][T10156] hsr1: left allmulticast mode [ 257.768886][T10156] dummy0: left allmulticast mode [ 257.804159][T10156] team0: left allmulticast mode [ 257.835879][T10156] hsr1: left promiscuous mode [ 257.872829][T10156] bridge0: port 2(hsr1) entered disabled state [ 257.975036][T10156] batman_adv: batadv0: Interface deactivated: macvlan2 [ 257.988454][T10179] __nla_validate_parse: 5 callbacks suppressed [ 257.988476][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'. [ 258.025085][T10156] batman_adv: batadv0: Removing interface: macvlan2 [ 258.219867][T10179] xfrm1: entered promiscuous mode [ 258.245917][T10179] xfrm1: entered allmulticast mode [ 258.325470][T10180] bond0: entered promiscuous mode [ 258.343876][T10180] bond_slave_0: entered promiscuous mode [ 258.359628][T10180] bond_slave_1: entered promiscuous mode [ 258.383780][T10180] !: entered promiscuous mode [ 258.581267][T10148] lo speed is unknown, defaulting to 1000 [ 258.926835][T10187] ip6tnl0: entered promiscuous mode [ 259.069539][T10187] ip6tnl0: entered allmulticast mode [ 259.163111][T10196] netlink: 'syz.1.1017': attribute type 4 has an invalid length. [ 260.268280][T10206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 263.657739][T10255] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1021'. [ 264.058038][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 264.107286][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 264.239903][T10267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1033'. [ 264.344298][T10270] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 264.422976][T10270] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1033'. [ 264.478712][T10270] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 265.044103][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 265.758464][T10214] lo speed is unknown, defaulting to 1000 [ 266.356963][T10302] netlink: 'syz.3.1040': attribute type 10 has an invalid length. [ 266.576168][T10301] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 266.661069][T10302] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 266.849485][T10302] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 267.449062][T10315] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1044'. [ 267.553929][T10313] netlink: 'syz.3.1043': attribute type 13 has an invalid length. [ 267.592578][T10313] netlink: 'syz.3.1043': attribute type 17 has an invalid length. [ 267.774826][T10313] erspan0: left allmulticast mode [ 268.012262][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1047'. [ 268.143451][T10313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.521472][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1046'. [ 270.041607][T10319] lo speed is unknown, defaulting to 1000 [ 271.565595][T10361] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1058'. [ 273.105255][T10361] bond0 (unregistering): Released all slaves [ 273.177798][T10375] netlink: 'syz.1.1059': attribute type 29 has an invalid length. [ 275.007732][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 275.212600][T10457] tipc: Enabled bearer , priority 0 [ 275.281222][T10454] syzkaller0: entered promiscuous mode [ 275.286758][T10454] syzkaller0: entered allmulticast mode [ 275.673910][T10455] tipc: Resetting bearer [ 275.883865][T10451] tipc: Resetting bearer [ 276.066051][T10451] tipc: Disabling bearer [ 276.564931][T10480] tipc: Enabling of bearer rejected, failed to enable media [ 277.671396][T10512] netlink: 'syz.2.1085': attribute type 23 has an invalid length. [ 277.687166][T10510] netlink: 'syz.3.1084': attribute type 30 has an invalid length. [ 278.157908][T10518] netlink: 'syz.1.1088': attribute type 3 has an invalid length. [ 278.191707][T10518] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1088'. [ 278.414700][T10529] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1090'. [ 278.792026][T10507] lo speed is unknown, defaulting to 1000 [ 281.135954][T10577] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 281.224978][T10593] unsupported nla_type 52263 [ 281.498848][T10579] lo speed is unknown, defaulting to 1000 [ 281.587231][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.006892][T10601] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1105'. [ 282.482963][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1107'. [ 283.545426][T10618] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 283.704098][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 283.741687][T10618] syz_tun: entered allmulticast mode [ 283.855544][T10618] dvmrp8: entered allmulticast mode [ 283.934989][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1113'. [ 284.394214][T10614] syz_tun: left allmulticast mode [ 285.411876][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 286.611879][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 286.635100][T10665] @ÿ: renamed from veth0_vlan (while UP) [ 287.097528][T10669] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1124'. [ 287.285260][T10678] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1126'. [ 287.478536][T10683] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 287.499976][T10683] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 287.526772][T10683] team0: Failed to send options change via netlink (err -105) [ 287.545048][T10683] team0: Port device batadv2 added [ 287.572503][T10685] tipc: Enabled bearer , priority 0 [ 287.582366][T10685] syzkaller0: entered promiscuous mode [ 287.588497][T10685] syzkaller0: entered allmulticast mode [ 287.632385][T10685] tipc: Enabling of bearer rejected, already enabled [ 287.687098][T10684] tipc: Resetting bearer [ 288.250032][T10684] tipc: Disabling bearer [ 288.297913][T10700] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 288.352384][T10702] netlink: 'syz.3.1134': attribute type 50 has an invalid length. [ 288.459443][T10695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.514159][T10699] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1134'. [ 288.855378][T10710] tipc: Enabled bearer , priority 0 [ 288.919021][T10710] syzkaller0: entered promiscuous mode [ 288.946131][T10710] syzkaller0: entered allmulticast mode [ 288.984451][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 288.994033][T10714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1138'. [ 289.502639][T10732] tipc: Resetting bearer [ 289.830846][T10738] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1141'. [ 290.092647][T10747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 290.499900][T10757] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 290.590133][T10708] tipc: Resetting bearer [ 290.659142][T10708] tipc: Disabling bearer [ 291.496313][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'. [ 291.857336][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1157'. [ 292.104676][T10792] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1156'. [ 292.164066][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 292.286275][T10797] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 292.533383][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 292.653738][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 292.772034][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 292.881676][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 292.949687][T10811] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 292.964950][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 293.012144][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 293.098877][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 293.210677][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 293.704096][T10828] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 294.002127][T10797] lo speed is unknown, defaulting to 1000 [ 294.034669][T10831] FAULT_INJECTION: forcing a failure. [ 294.034669][T10831] name failslab, interval 1, probability 0, space 0, times 1 [ 294.218989][T10831] CPU: 1 UID: 0 PID: 10831 Comm: syz.1.1167 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 294.219022][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.219033][T10831] Call Trace: [ 294.219042][T10831] [ 294.219051][T10831] dump_stack_lvl+0x189/0x250 [ 294.219084][T10831] ? __pfx____ratelimit+0x10/0x10 [ 294.219114][T10831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.219138][T10831] ? __pfx__printk+0x10/0x10 [ 294.219172][T10831] ? __pfx___might_resched+0x10/0x10 [ 294.219201][T10831] should_fail_ex+0x414/0x560 [ 294.219229][T10831] should_failslab+0xa8/0x100 [ 294.219259][T10831] __kmalloc_noprof+0xcb/0x4f0 [ 294.219285][T10831] ? sk_prot_alloc+0xe7/0x220 [ 294.219314][T10831] sk_prot_alloc+0xe7/0x220 [ 294.219333][T10831] ? sk_alloc+0x24/0x370 [ 294.219357][T10831] sk_alloc+0x3a/0x370 [ 294.219376][T10831] ? bpf_ctx_init+0x167/0x1d0 [ 294.219409][T10831] bpf_prog_test_run_skb+0x2ed/0x1560 [ 294.219438][T10831] ? __fget_files+0x2a/0x420 [ 294.219474][T10831] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 294.219513][T10831] bpf_prog_test_run+0x2c4/0x340 [ 294.219539][T10831] __sys_bpf+0x4a4/0x860 [ 294.219572][T10831] ? __pfx___sys_bpf+0x10/0x10 [ 294.219617][T10831] ? ksys_write+0x22a/0x250 [ 294.219647][T10831] ? __pfx_ksys_write+0x10/0x10 [ 294.219670][T10831] ? rcu_is_watching+0x15/0xb0 [ 294.219703][T10831] __x64_sys_bpf+0x7c/0x90 [ 294.219731][T10831] do_syscall_64+0xfa/0x3b0 [ 294.219750][T10831] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.219777][T10831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.219796][T10831] ? clear_bhb_loop+0x60/0xb0 [ 294.219821][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.219840][T10831] RIP: 0033:0x7f9140f8e9a9 [ 294.219861][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.219879][T10831] RSP: 002b:00007f9141e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.219901][T10831] RAX: ffffffffffffffda RBX: 00007f91411b5fa0 RCX: 00007f9140f8e9a9 [ 294.219923][T10831] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 294.219936][T10831] RBP: 00007f9141e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 294.219949][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.219961][T10831] R13: 0000000000000000 R14: 00007f91411b5fa0 R15: 00007ffc1bc9b748 [ 294.219996][T10831] [ 294.536333][T10836] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 294.544951][T10836] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 294.646112][T10838] netlink: 'syz.3.1169': attribute type 30 has an invalid length. [ 296.132530][T10877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.263801][T10877] team0: Device is already in use. [ 296.276054][T10883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.507954][T10882] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.668091][T10886] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 298.595907][T10930] __nla_validate_parse: 37 callbacks suppressed [ 298.595929][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1192'. [ 298.983348][T10937] netlink: 'syz.2.1194': attribute type 1 has an invalid length. [ 299.057291][T10944] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 299.263584][T10945] bond0: (slave gretap1): making interface the new active one [ 299.317064][T10945] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 299.464824][T10937] vlan1: entered allmulticast mode [ 299.492269][T10937] bond0: entered allmulticast mode [ 299.519954][T10937] gretap1: entered allmulticast mode [ 299.553010][T10958] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 299.563710][T10937] bond0: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 300.439164][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1202'. [ 300.918011][T10997] xt_policy: output policy not valid in PREROUTING and INPUT [ 301.349573][T11002] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1207'. [ 301.522855][T10968] lo speed is unknown, defaulting to 1000 [ 302.289187][T11019] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 302.798301][T10982] lo speed is unknown, defaulting to 1000 [ 302.838494][T10982] lo speed is unknown, defaulting to 1000 [ 302.894130][T10982] lo speed is unknown, defaulting to 1000 [ 302.962110][T10982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 303.109024][T10982] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 303.767240][T10982] lo speed is unknown, defaulting to 1000 [ 303.808848][T10982] lo speed is unknown, defaulting to 1000 [ 303.848443][T10982] lo speed is unknown, defaulting to 1000 [ 303.875370][T11043] xt_hashlimit: invalid rate [ 303.895213][T11043] xt_hashlimit: max too large, truncated to 1048576 [ 303.907439][T10982] lo speed is unknown, defaulting to 1000 [ 303.966816][T10982] lo speed is unknown, defaulting to 1000 [ 303.987195][T11043] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 304.030053][T10982] lo speed is unknown, defaulting to 1000 [ 304.191461][T11054] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.683345][T11064] netlink: 'syz.3.1223': attribute type 27 has an invalid length. [ 305.299137][T11072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.435208][T11074] netlink: 'syz.4.1227': attribute type 49 has an invalid length. [ 305.464944][T11076] siw: device registration error -23 [ 306.450741][T11090] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1232'. [ 306.522964][T11098] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 307.021277][T11104] hsr0: entered promiscuous mode [ 307.608862][T11127] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 308.728624][T11134] tipc: Enabling of bearer rejected, failed to enable media [ 308.781694][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 308.849707][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 309.990746][T11166] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 310.030463][T11166] netlink: 'syz.2.1249': attribute type 3 has an invalid length. [ 310.081957][T11166] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 310.141474][T11166] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1249'. [ 310.208792][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 310.220659][T11166] NCSI netlink: No device for ifindex 0 [ 310.360074][T11176] geneve3: entered promiscuous mode [ 310.439230][T11176] geneve3: entered allmulticast mode [ 310.503351][ T7853] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 36873 - 0 [ 310.555350][ T7853] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 36873 - 0 [ 310.617708][ T7853] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 36873 - 0 [ 310.678305][ T7853] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 36873 - 0 [ 310.802219][T11167] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 310.936335][T11167] syzkaller0: entered promiscuous mode [ 310.998094][T11167] syzkaller0: entered allmulticast mode [ 311.569413][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 311.624032][T11201] netlink: 'syz.1.1256': attribute type 13 has an invalid length. [ 311.671299][T11201] netlink: 'syz.1.1256': attribute type 17 has an invalid length. [ 313.580609][ T7853] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.307721][T11201] syz_tun: left allmulticast mode [ 316.461103][T11201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.732170][T11224] netlink: 'syz.4.1262': attribute type 32 has an invalid length. [ 316.851703][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 316.937548][T11227] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 317.027777][T11227] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1264'. [ 317.076322][T11224] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 317.425677][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.925903][T11193] lo speed is unknown, defaulting to 1000 [ 318.006671][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 319.459090][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1270'. [ 319.544375][T11223] lo speed is unknown, defaulting to 1000 [ 319.572159][T11193] lo speed is unknown, defaulting to 1000 [ 321.335941][T11223] lo speed is unknown, defaulting to 1000 [ 321.342395][T11247] lo speed is unknown, defaulting to 1000 [ 322.717088][T11292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1277'. [ 322.836979][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 322.949077][T11247] lo speed is unknown, defaulting to 1000 [ 323.166912][T11274] lo speed is unknown, defaulting to 1000 [ 323.735689][T11304] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1280'. [ 324.901220][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1282'. [ 324.910230][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1282'. [ 325.161528][T11274] lo speed is unknown, defaulting to 1000 [ 326.265680][T11332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1286'. [ 326.620786][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1286'. [ 327.103962][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1286'. [ 327.323685][T11336] netdevsim0: mtu less than device minimum [ 328.087711][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 328.572681][T11352] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1291'. [ 328.766500][T11357] x_tables: duplicate underflow at hook 2 [ 328.837000][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 329.177621][T11367] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1294'. [ 329.649185][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 329.712432][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 330.154308][T11383] netlink: 'syz.3.1301': attribute type 21 has an invalid length. [ 330.225467][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 330.263887][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 330.341365][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1302'. [ 330.383975][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1302'. [ 330.466396][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 332.200482][T11435] netlink: 'syz.4.1314': attribute type 15 has an invalid length. [ 332.240879][T11437] netlink: 'syz.4.1314': attribute type 15 has an invalid length. [ 332.510578][T11424] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 332.667852][T11424] bond0 (unregistering): Released all slaves [ 332.763648][T11425] veth1_macvtap: left promiscuous mode [ 332.796331][T11425] macsec0: entered promiscuous mode [ 332.896302][T11433] vlan0: entered promiscuous mode [ 332.913733][T11433] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 334.012291][T11450] bridge2: entered promiscuous mode [ 334.033253][T11471] __nla_validate_parse: 5 callbacks suppressed [ 334.033273][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1321'. [ 334.063951][T11450] bridge2: entered allmulticast mode [ 334.129321][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 334.160645][T11474] Cannot find add_set index 2 as target [ 334.210690][T11468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1319'. [ 334.282725][T11474] Cannot find add_set index 2 as target [ 334.366766][T11474] Cannot find add_set index 2 as target [ 334.421101][T11474] Cannot find add_set index 2 as target [ 334.469555][T11474] Cannot find add_set index 2 as target [ 334.518991][T11474] Cannot find add_set index 2 as target [ 334.572191][T11474] Cannot find add_set index 2 as target [ 334.656847][T11474] Cannot find add_set index 2 as target [ 334.707332][T11474] Cannot find add_set index 2 as target [ 334.791214][T11474] Cannot find add_set index 2 as target [ 334.974166][T11487] tipc: Enabled bearer , priority 0 [ 335.376769][T11502] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 335.534047][T11483] tipc: Disabling bearer [ 335.720164][T11501] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 335.797135][T11501] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 335.962189][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1331'. [ 335.997111][T11458] lo speed is unknown, defaulting to 1000 [ 336.077218][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 336.228797][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1334'. [ 336.273652][T11517] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1334'. [ 336.323649][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1334'. [ 336.581121][T11524] openvswitch: netlink: Key type 251 is out of range max 32 [ 336.792057][T11530] xt_hashlimit: size too large, truncated to 1048576 [ 336.884166][T11528] netlink: 'syz.4.1338': attribute type 9 has an invalid length. [ 337.221808][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 337.627503][T11458] lo speed is unknown, defaulting to 1000 [ 337.953226][T11546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1342'. [ 339.916224][T11565] smc: net device vxcan1 applied user defined pnetid SYZ1 [ 342.082114][T11606] __nla_validate_parse: 1 callbacks suppressed [ 342.082136][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 342.982657][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 343.102640][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 343.171132][T11631] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1365'. [ 343.412540][T11632] syz_tun: entered allmulticast mode [ 343.648068][T11645] netlink: 'syz.1.1368': attribute type 5 has an invalid length. [ 343.656812][T11624] syz_tun: left allmulticast mode [ 344.496674][T11658] xt_TCPMSS: Only works on TCP SYN packets [ 344.718562][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 345.098615][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 345.234867][ T5969] IPVS: starting estimator thread 0... [ 345.360378][T11679] IPVS: using max 24 ests per chain, 57600 per kthread [ 345.580735][ T1113] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.706392][T11696] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 346.726568][T11696] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1383'. [ 346.745234][ T7854] smc: removing ib device syz1 [ 346.825906][T11697] xt_CT: No such helper "snmp" [ 346.961939][ T5969] syz1: Port: 1 Link DOWN [ 347.427544][T11703] sit1: entered promiscuous mode [ 348.562274][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 348.629655][T11729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 349.920944][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 350.661111][T11747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1397'. [ 350.670122][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1397'. [ 350.770508][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1397'. [ 350.802966][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 350.812198][T11745] netlink: 'syz.0.1394': attribute type 5 has an invalid length. [ 350.843733][T11750] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 350.861622][T11745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1394'. [ 351.165775][T11745] geneve3: entered promiscuous mode [ 351.220035][T11745] geneve3: entered allmulticast mode [ 351.470794][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 351.540913][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 352.310159][T11766] lo speed is unknown, defaulting to 1000 [ 352.730118][T11786] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 353.153477][T11793] IPVS: Error connecting to the multicast addr [ 353.482064][T11766] lo speed is unknown, defaulting to 1000 [ 354.091517][T11805] nbd: must specify at least one socket [ 354.284104][T11809] netlink: 'syz.0.1413': attribute type 7 has an invalid length. [ 354.318264][T11809] __nla_validate_parse: 2 callbacks suppressed [ 354.318287][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 354.363633][T11811] netlink: 'syz.4.1412': attribute type 12 has an invalid length. [ 355.001327][T11826] syzkaller0: entered promiscuous mode [ 355.006877][T11826] syzkaller0: entered allmulticast mode [ 355.514596][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'. [ 355.628875][T11844] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 358.313709][T11859] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1423'. [ 359.282563][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 359.351731][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1428'. [ 359.418942][T11882] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 359.513782][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 360.037392][T11882] bond4: entered promiscuous mode [ 360.115107][T11882] bond4: entered allmulticast mode [ 360.189452][T11881] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 360.455016][T11888] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.689178][T11888] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.919812][T11878] lo speed is unknown, defaulting to 1000 [ 361.002772][T11888] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.326846][T11888] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.969151][T10430] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.136002][T10425] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.182160][T10425] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.329191][T11923] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 362.431875][T11924] xt_CT: No such helper "snmp" [ 362.447883][T11928] netlink: 'syz.4.1434': attribute type 13 has an invalid length. [ 362.466842][T11878] lo speed is unknown, defaulting to 1000 [ 362.479510][T10430] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.983892][T11939] lo speed is unknown, defaulting to 1000 [ 363.174044][T11946] netlink: 'syz.0.1440': attribute type 32 has an invalid length. [ 363.213257][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 363.682965][T11946] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 363.919000][T10425] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 363.959186][T10425] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 363.997455][T10425] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 364.099802][T10425] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 364.144008][T10425] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.176027][T10425] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 364.240482][T10430] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 364.280983][T10430] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.289291][T10430] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 364.426557][T10425] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 364.761023][T11969] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.248141][T10425] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 365.262485][T10425] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 365.277828][T11965] tipc: Started in network mode [ 365.285110][T11965] tipc: Node identity ac1414aa, cluster identity 4711 [ 365.342224][T11965] tipc: Enabling of bearer rejected, failed to enable media [ 365.355502][T11939] lo speed is unknown, defaulting to 1000 [ 365.978017][T11976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.117476][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 366.235765][T11985] netlink: 'syz.0.1449': attribute type 16 has an invalid length. [ 366.269786][T11985] netlink: 'syz.0.1449': attribute type 17 has an invalid length. [ 366.305617][T11988] IPv6: NLM_F_REPLACE set, but no existing node found! [ 366.538692][T11985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.546025][T11998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 366.553916][T11985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.567622][T11998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 366.581355][T11985] hsr0: left promiscuous mode [ 366.594728][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 366.604818][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 366.616000][T11998] netlink: 'syz.1.1453': attribute type 7 has an invalid length. [ 366.691560][ T9142] lo speed is unknown, defaulting to 1000 [ 366.697552][ T9142] syz2: Port: 1 Link DOWN [ 366.709091][T10428] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 366.718439][T10428] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.740801][T10428] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 366.826254][T10428] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 366.866282][T10428] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.920832][T10428] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 366.999444][T10428] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 367.023087][T10428] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.070228][T10428] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 367.091990][T10428] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 367.139849][T10428] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.180504][T10428] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 367.260130][T12008] lo speed is unknown, defaulting to 1000 [ 367.397496][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 368.647300][T12018] lo speed is unknown, defaulting to 1000 [ 368.722144][T12008] lo speed is unknown, defaulting to 1000 [ 369.038556][T12059] netlink: 'syz.2.1471': attribute type 3 has an invalid length. [ 369.049137][T12059] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1471'. [ 369.406821][T12018] lo speed is unknown, defaulting to 1000 [ 369.406859][T12036] lo speed is unknown, defaulting to 1000 [ 369.745344][T12072] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 369.775283][T12072] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 369.787443][T12074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1476'. [ 369.798548][T12072] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 369.962231][T12035] lo speed is unknown, defaulting to 1000 [ 370.263336][T12012] lo speed is unknown, defaulting to 1000 [ 370.489870][T12088] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1480'. [ 370.732938][T12036] lo speed is unknown, defaulting to 1000 [ 370.918670][T12035] lo speed is unknown, defaulting to 1000 [ 370.942904][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 371.116835][T12012] lo speed is unknown, defaulting to 1000 [ 371.709455][T12108] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 372.083959][T12110] __nla_validate_parse: 1 callbacks suppressed [ 372.083974][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 372.642652][T12126] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 373.068315][T12126] bond3: entered promiscuous mode [ 373.076320][T12126] bond3: entered allmulticast mode [ 373.111088][T12120] lo speed is unknown, defaulting to 1000 [ 373.317708][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 373.792876][T12120] lo speed is unknown, defaulting to 1000 [ 374.248400][T12153] lo speed is unknown, defaulting to 1000 [ 374.289298][T12170] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 374.693290][T12153] lo speed is unknown, defaulting to 1000 [ 374.721379][T12175] lo speed is unknown, defaulting to 1000 [ 374.955938][T12191] netlink: 'syz.3.1502': attribute type 10 has an invalid length. [ 374.974325][T12191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1502'. [ 375.164435][T12191] team0: Port device geneve0 added [ 375.404183][T12203] netlink: 'syz.3.1505': attribute type 5 has an invalid length. [ 375.412243][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 375.556943][T12175] lo speed is unknown, defaulting to 1000 [ 375.569470][T12209] tipc: Enabled bearer , priority 0 [ 375.678014][T12206] tipc: Resetting bearer [ 377.580023][T12206] tipc: Disabling bearer [ 377.586734][T10425] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.625510][T12217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1507'. [ 377.636578][T12219] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 377.813855][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 377.903322][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 377.918927][T12227] netlink: 'syz.1.1510': attribute type 5 has an invalid length. [ 377.946230][T12227] netlink: 'syz.1.1510': attribute type 6 has an invalid length. [ 377.958793][T12233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.262537][T12241] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 378.274438][T12239] lo speed is unknown, defaulting to 1000 [ 378.381046][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 378.384750][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 378.662055][T12239] lo speed is unknown, defaulting to 1000 [ 378.663146][T12242] lo speed is unknown, defaulting to 1000 [ 378.867625][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.186222][T12272] tipc: Enabled bearer , priority 0 [ 379.694232][T12275] syzkaller0: entered promiscuous mode [ 379.740456][T12275] syzkaller0: entered allmulticast mode [ 379.854066][T12293] tipc: Resetting bearer [ 380.096598][T12269] tipc: Resetting bearer [ 380.182880][T12269] tipc: Disabling bearer [ 380.199821][T12281] lo speed is unknown, defaulting to 1000 [ 380.206102][T12242] lo speed is unknown, defaulting to 1000 [ 380.268757][T12307] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1522'. [ 380.394647][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 380.707987][T12318] netlink: 'syz.4.1528': attribute type 12 has an invalid length. [ 381.087504][T12281] lo speed is unknown, defaulting to 1000 [ 381.777097][T12359] netlink: 'syz.3.1538': attribute type 3 has an invalid length. [ 381.789747][T12359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1538'. [ 381.829464][T12360] x_tables: duplicate underflow at hook 2 [ 381.856500][T12359] netlink: 'syz.3.1538': attribute type 3 has an invalid length. [ 381.877764][T12359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1538'. [ 382.361753][T12385] bond0: (slave bond_slave_0): Releasing backup interface [ 382.421608][T12385] bond0: (slave bond_slave_1): Releasing backup interface [ 382.449084][T12385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.472414][T12385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.488268][T12379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 382.531602][T12385] bond1: (slave geneve2): Releasing active interface [ 382.540049][T12385] bond1: (slave geneve2): the permanent HWaddr of slave - 22:ab:25:1c:d5:cb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 382.557379][T12385] bond1: (slave ip6gretap1): making interface the new active one [ 382.575680][T12385] bond1: (slave ip6gretap1): Releasing active interface [ 382.877929][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 383.389378][T12430] lo speed is unknown, defaulting to 1000 [ 383.427934][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1553'. [ 383.573682][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'. [ 383.599693][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1558'. [ 383.819753][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 383.868039][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1559'. [ 383.966958][T12457] netlink: 30 bytes leftover after parsing attributes in process `syz.4.1559'. [ 384.303051][T12430] lo speed is unknown, defaulting to 1000 [ 384.549373][T12479] netlink: 'syz.1.1563': attribute type 13 has an invalid length. [ 384.569204][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1563'. [ 384.982308][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1565'. [ 384.993295][T12491] IPVS: Scheduler module ip_vs_sip not found [ 385.293544][T12504] !: renamed from dummy0 [ 385.487712][T12507] lo speed is unknown, defaulting to 1000 [ 385.508681][T12511] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1570'. [ 385.599395][T12511] vlan0: entered promiscuous mode [ 385.627058][T12511] vlan0: entered allmulticast mode [ 385.656030][T12511] hsr_slave_1: entered allmulticast mode [ 386.335317][T12507] lo speed is unknown, defaulting to 1000 [ 386.700610][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 387.561589][T12575] lo speed is unknown, defaulting to 1000 [ 387.853495][T12595] netlink: 'syz.1.1587': attribute type 16 has an invalid length. [ 387.890399][T12595] netlink: 'syz.1.1587': attribute type 17 has an invalid length. [ 388.107211][T12601] IPv6: NLM_F_REPLACE set, but no existing node found! [ 389.048717][T12597] __nla_validate_parse: 6 callbacks suppressed [ 389.048740][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 389.072170][ T1218] lo speed is unknown, defaulting to 1000 [ 389.078651][ T1218] syz0: Port: 1 Link DOWN [ 389.169825][T10430] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.198582][T10430] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 36873 - 0 [ 389.235662][T12575] lo speed is unknown, defaulting to 1000 [ 389.249517][T12615] ip6gre1: entered promiscuous mode [ 389.280538][ T9146] lo speed is unknown, defaulting to 1000 [ 389.280610][T10430] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.315845][T10430] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 36873 - 0 [ 389.350565][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.364960][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 36873 - 0 [ 389.391428][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.416768][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 36873 - 0 [ 389.490014][T12625] tipc: Enabling not permitted [ 389.534211][T12625] tipc: Enabling of bearer rejected, failed to enable media [ 389.580784][T12620] tipc: Invalid UDP bearer configuration [ 389.580844][T12620] tipc: Enabling of bearer rejected, failed to enable media [ 390.178856][T12649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1600'. [ 391.158454][T12678] netlink: 'syz.3.1608': attribute type 11 has an invalid length. [ 391.205006][T12681] dvmrp0: entered allmulticast mode [ 391.371884][T12685] lo speed is unknown, defaulting to 1000 [ 391.650981][T12685] lo speed is unknown, defaulting to 1000 [ 391.892805][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 392.510633][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1618'. [ 392.815392][T12730] bridge_slave_0: entered promiscuous mode [ 392.916484][T12727] bridge_slave_0: left promiscuous mode [ 392.952552][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 393.032150][T12744] tipc: Enabled bearer , priority 0 [ 393.078457][T12741] lo speed is unknown, defaulting to 1000 [ 393.083649][T12748] syzkaller0: entered promiscuous mode [ 393.120425][T12748] syzkaller0: entered allmulticast mode [ 393.177844][T12744] tipc: Resetting bearer [ 393.214879][ T30] audit: type=1804 audit(1753031646.844:6): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1623" name="/newroot/312/cgroup.controllers" dev="tmpfs" ino=1633 res=1 errno=0 [ 393.291626][ T30] audit: type=1800 audit(1753031646.854:7): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1623" name="cgroup.controllers" dev="tmpfs" ino=1633 res=0 errno=0 [ 393.322569][T12753] tipc: Resetting bearer [ 393.371962][T12753] tipc: Disabling bearer [ 393.420579][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 393.948195][T12741] lo speed is unknown, defaulting to 1000 [ 394.380462][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 394.426334][T12787] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1636'. [ 394.459224][T12784] netlink: 'syz.4.1634': attribute type 4 has an invalid length. [ 394.635900][T12784] tipc: Enabled bearer , priority 0 [ 394.653778][T12784] syzkaller0: entered promiscuous mode [ 394.659314][T12784] syzkaller0: entered allmulticast mode [ 394.699729][T12796] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1638'. [ 394.911622][T12802] --map-set only usable from mangle table [ 394.939590][T12799] tipc: Resetting bearer [ 394.995213][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 395.186697][T12783] tipc: Resetting bearer [ 395.237849][T12783] tipc: Disabling bearer [ 395.759145][T12819] lo speed is unknown, defaulting to 1000 [ 395.797219][T12828] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1645'. [ 395.844188][T12828] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1645'. [ 396.155795][T12851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1649'. [ 396.195662][T12853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 396.289914][T12819] lo speed is unknown, defaulting to 1000 [ 396.834040][T12863] lo speed is unknown, defaulting to 1000 [ 397.097667][T12878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.145379][T12880] netlink: 'syz.3.1663': attribute type 1 has an invalid length. [ 397.460761][ T30] audit: type=1800 audit(1753031651.074:8): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1667" name="memory.events" dev="tmpfs" ino=1819 res=0 errno=0 [ 397.678722][T12908] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1670'. [ 397.918711][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 398.186208][T12863] lo speed is unknown, defaulting to 1000 [ 398.414432][T12935] netlink: 'syz.4.1679': attribute type 83 has an invalid length. [ 398.682466][T12947] sctp: [Deprecated]: syz.1.1682 (pid 12947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.682466][T12947] Use struct sctp_sack_info instead [ 398.773470][T12947] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 398.922473][T12957] bond3: (slave gretap1): making interface the new active one [ 398.952143][T12957] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 399.540481][T12988] __nla_validate_parse: 6 callbacks suppressed [ 399.540504][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 399.678582][T12988] geneve2: entered promiscuous mode [ 399.693486][T12988] geneve2: entered allmulticast mode [ 399.710783][T10428] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 56426 - 0 [ 399.726696][T12993] pimreg: entered allmulticast mode [ 399.751520][ T7853] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 56426 - 0 [ 399.765724][ T7853] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 56426 - 0 [ 399.775570][ T7853] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 56426 - 0 [ 399.810358][T12993] pimreg: left allmulticast mode [ 399.944490][T12995] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1694'. [ 399.958710][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'. [ 399.979885][T12991] openvswitch: netlink: Flow key attr not present in new flow. [ 400.140769][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 400.918236][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1702'. [ 400.935585][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1702'. [ 401.163698][T13036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1708'. [ 401.224079][T13040] IPv6: sit1: Disabled Multicast RS [ 401.477996][T13048] macsec1: entered allmulticast mode [ 401.512645][T13048] macsec0: entered allmulticast mode [ 401.541988][T13049] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 401.630670][T13053] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1713'. [ 401.985199][T13073] geneve1: entered promiscuous mode [ 401.998865][T13073] geneve1: entered allmulticast mode [ 402.021950][ T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.033665][ T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.052085][ T56] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.066765][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.423201][T13096] lo speed is unknown, defaulting to 1000 [ 402.528355][T13099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.309826][T13096] lo speed is unknown, defaulting to 1000 [ 403.744187][T13132] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.751953][T13132] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.938216][T13132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.955310][T13132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.173149][T10424] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.198006][T10424] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.243403][T10424] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.247276][T13160] IPv6: addrconf: prefix option has invalid lifetime [ 404.252586][T10424] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.567122][T13172] netlink: 'syz.4.1741': attribute type 13 has an invalid length. [ 404.571972][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 404.585147][T13171] netlink: 'syz.3.1745': attribute type 30 has an invalid length. [ 404.610765][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 404.633602][T13172] netlink: 'syz.4.1741': attribute type 17 has an invalid length. [ 404.837314][T13180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1741'. [ 404.878253][T13172] ip6tnl0: left promiscuous mode [ 404.897627][T13172] ip6tnl0: left allmulticast mode [ 405.011167][T13172] bond0: left promiscuous mode [ 405.025743][T13172] bond_slave_0: left promiscuous mode [ 405.031814][T13172] bond_slave_1: left promiscuous mode [ 405.038226][T13172] !: left promiscuous mode [ 405.148556][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.224387][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.271030][T13172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.345878][T13197] xt_connbytes: Forcing CT accounting to be enabled [ 405.349874][T13190] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1751'. [ 405.354230][T13197] xt_bpf: check failed: parse error [ 405.422470][T13175] lo speed is unknown, defaulting to 1000 [ 405.443855][T13194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1753'. [ 405.457495][T13194] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 405.473229][T13194] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1753'. [ 405.940815][T13203] lo speed is unknown, defaulting to 1000 [ 405.979122][T13175] lo speed is unknown, defaulting to 1000 [ 406.249573][T13203] lo speed is unknown, defaulting to 1000 [ 406.255875][T13200] lo speed is unknown, defaulting to 1000 [ 406.701047][T13218] tipc: Enabled bearer , priority 0 [ 406.754486][T13218] syzkaller0: entered promiscuous mode [ 406.775545][T13218] syzkaller0: entered allmulticast mode [ 406.806376][T13200] lo speed is unknown, defaulting to 1000 [ 406.907424][T13218] bridge0: port 1(macsec0) entered blocking state [ 406.920825][T13218] bridge0: port 1(macsec0) entered disabled state [ 406.936747][T13218] macsec0: entered allmulticast mode [ 407.158587][T13217] tipc: Resetting bearer [ 407.256895][T13217] tipc: Disabling bearer [ 407.539982][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 407.675950][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 407.756218][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 407.797829][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 408.561613][T13267] syzkaller0: entered promiscuous mode [ 408.567537][T13267] syzkaller0: entered allmulticast mode [ 409.580747][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 410.174638][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 411.290445][T13306] veth0: entered promiscuous mode [ 411.300867][T13311] netlink: 'syz.0.1783': attribute type 14 has an invalid length. [ 411.494344][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'. [ 411.698920][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1790'. [ 411.714485][T13332] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 411.813711][T13339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1791'. [ 411.838327][T13339] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1791'. [ 411.846226][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 411.848201][T13339] tipc: Invalid UDP bearer configuration [ 411.856353][T13339] tipc: Enabling of bearer rejected, failed to enable media [ 411.915133][T13339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1791'. [ 411.929052][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1794'. [ 411.938399][T13343] lo speed is unknown, defaulting to 1000 [ 412.147422][T13355] vxcan2: entered allmulticast mode [ 412.339992][T13365] x_tables: duplicate underflow at hook 3 [ 412.548814][T13380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1803'. [ 412.723020][T13387] tipc: New replicast peer: 255.255.255.83 [ 412.729513][T13387] tipc: Enabled bearer , priority 10 [ 412.778158][T13343] lo speed is unknown, defaulting to 1000 [ 412.803305][T13350] lo speed is unknown, defaulting to 1000 [ 413.238783][T13400] netlink: 'syz.4.1808': attribute type 7 has an invalid length. [ 413.246703][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1808'. [ 413.284449][T13404] Unsupported ieee802154 address type: 0 [ 413.439774][T13406] !: renamed from dummy0 (while UP) [ 413.841273][ T5927] tipc: Node number set to 12039283 [ 413.960414][T13350] lo speed is unknown, defaulting to 1000 [ 414.588073][T13451] netlink: 'syz.2.1822': attribute type 13 has an invalid length. [ 414.606387][T13451] netlink: 'syz.2.1822': attribute type 17 has an invalid length. [ 414.609164][T13447] syzkaller1: entered promiscuous mode [ 414.654548][T13447] syzkaller1: entered allmulticast mode [ 414.804825][T13451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.171937][T13447] lo speed is unknown, defaulting to 1000 [ 415.649459][T13447] lo speed is unknown, defaulting to 1000 [ 415.886667][T13472] lo speed is unknown, defaulting to 1000 [ 416.261852][T13491] __nla_validate_parse: 2 callbacks suppressed [ 416.261874][T13491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1833'. [ 416.292242][T13490] netlink: 'syz.0.1834': attribute type 1 has an invalid length. [ 416.352325][T13493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1833'. [ 416.947531][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 417.004509][T13515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1828'. [ 417.021276][T13518] sctp: [Deprecated]: syz.1.1841 (pid 13518) Use of int in maxseg socket option. [ 417.021276][T13518] Use struct sctp_assoc_value instead [ 417.092476][T13472] lo speed is unknown, defaulting to 1000 [ 417.750679][T13543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.974893][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1847'. [ 418.031649][T13552] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1846'. [ 418.352282][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 418.489592][T13565] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1850'. [ 418.527734][T13560] lo speed is unknown, defaulting to 1000 [ 418.595746][T13576] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1853'. [ 418.827031][T13579] xt_CT: No such helper "syz1" [ 418.925836][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 418.936661][T13578] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 419.513810][T13560] lo speed is unknown, defaulting to 1000 [ 419.842300][T13624] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 419.945581][T13624] netlink: 'syz.4.1865': attribute type 10 has an invalid length. [ 420.297888][T13633] lo speed is unknown, defaulting to 1000 [ 420.667443][T13645] netlink: 'syz.4.1874': attribute type 3 has an invalid length. [ 421.227738][T13666] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 421.235069][T13667] netlink: 'syz.1.1880': attribute type 5 has an invalid length. [ 421.261736][T13633] lo speed is unknown, defaulting to 1000 [ 421.286377][T13669] __nla_validate_parse: 4 callbacks suppressed [ 421.286397][T13669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1882'. [ 421.455129][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'. [ 422.057138][T13700] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1890'. [ 422.081838][T13700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1890'. [ 422.097596][T13702] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1891'. [ 422.109466][T13702] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1891'. [ 422.113018][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 422.193082][T13704] bond_slave_1: tun_chr_ioctl cmd 1074025677 [ 422.204376][T13704] bond_slave_1: linktype set to 805 [ 422.507168][T13714] sctp: [Deprecated]: syz.0.1896 (pid 13714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.507168][T13714] Use struct sctp_sack_info instead [ 422.939220][T13730] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 422.991608][T13730] bond4: (slave gretap2): making interface the new active one [ 422.999947][T13730] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 423.105608][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 423.382514][T13746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1904'. [ 423.432427][T13746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1904'. [ 423.893525][T13780] netlink: 'syz.0.1913': attribute type 9 has an invalid length. [ 424.632940][T13801] vlan0: left promiscuous mode [ 424.655678][T13801] gtp0: left promiscuous mode [ 424.669630][T13801] gtp0: left allmulticast mode [ 424.676561][T13801] xfrm1: left promiscuous mode [ 424.683178][T13801] xfrm1: left allmulticast mode [ 424.690044][T13801] bond4: left promiscuous mode [ 424.697156][T13801] bond4: left allmulticast mode [ 424.704271][T13801] ip6gre1: left promiscuous mode [ 424.710692][T13801] vxcan2: left allmulticast mode [ 425.166944][T13821] netlink: 'syz.4.1928': attribute type 64 has an invalid length. [ 425.425040][T13829] dvmrp0: left allmulticast mode [ 425.468248][T13829] dvmrp8: left allmulticast mode [ 426.060117][T13845] lo speed is unknown, defaulting to 1000 [ 426.392692][T13858] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 426.562382][T13845] lo speed is unknown, defaulting to 1000 [ 426.597577][T13851] lo speed is unknown, defaulting to 1000 [ 426.872479][T13875] __nla_validate_parse: 8 callbacks suppressed [ 426.872498][T13875] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1944'. [ 427.031550][T13851] lo speed is unknown, defaulting to 1000 [ 427.101508][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1947'. [ 427.127813][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 427.771701][T13894] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1949'. [ 428.111708][T13903] netlink: 'syz.4.1951': attribute type 21 has an invalid length. [ 428.153431][T13903] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1951'. [ 428.193993][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 428.228649][T13867] infiniband syz!: set down [ 428.233990][T13905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1952'. [ 428.248656][T13867] infiniband syz!: added team_slave_0 [ 428.267038][T13867] syz!: rxe_create_cq: returned err = -12 [ 428.315418][T13867] infiniband syz!: Couldn't create ib_mad CQ [ 428.331746][T13867] infiniband syz!: Couldn't open port 1 [ 428.422776][T13867] RDS/IB: syz!: added [ 428.427466][T13867] smc: adding ib device syz! with port count 1 [ 428.457495][T13867] smc: ib device syz! port 1 has pnetid [ 428.510617][T13916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.808478][T13924] lo speed is unknown, defaulting to 1000 [ 440.319056][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 445.438558][T10430] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.109959][T13924] lo speed is unknown, defaulting to 1000 [ 462.439140][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.778439][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.867487][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.269131][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.679218][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.069541][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.179919][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.358733][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.889068][ T5860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 465.177306][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.967807][ T5860] Bluetooth: hci5: command tx timeout [ 467.748981][ T5860] Bluetooth: hci6: command tx timeout [ 469.029196][ T5860] Bluetooth: hci5: command tx timeout [ 469.847769][ T5860] Bluetooth: hci6: command tx timeout [ 471.117426][ T5860] Bluetooth: hci5: command tx timeout [ 471.908191][ T5860] Bluetooth: hci6: command tx timeout [ 473.218212][ T5860] Bluetooth: hci5: command tx timeout [ 473.507839][T13979] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1973'. [ 473.997270][ T5860] Bluetooth: hci6: command tx timeout [ 474.297608][T13980] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1973'. [ 474.487291][T13979] gretap0: entered promiscuous mode [ 475.156750][T13980] 0ªî{X¹¦: renamed from gretap0 [ 475.979740][T13980] 0ªî{X¹¦: left promiscuous mode [ 476.168999][T13980] 0ªî{X¹¦: entered allmulticast mode [ 476.650132][T13980] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 478.349653][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.579559][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.637582][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.767866][T10425] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 478.838683][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.027878][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.557178][ T5860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 480.709612][ T5860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 480.837764][ T5860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 481.198764][ T5860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 481.489276][ T5860] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 481.666578][ T5860] Bluetooth: hci2: command tx timeout [ 483.728182][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.797520][ T5860] Bluetooth: hci2: command tx timeout [ 483.856611][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56426 - 0 [ 484.317361][ T5848] Bluetooth: hci7: command tx timeout [ 485.907988][ T5848] Bluetooth: hci2: command tx timeout [ 486.387751][ T5848] Bluetooth: hci7: command tx timeout [ 487.987343][ T5848] Bluetooth: hci2: command tx timeout [ 488.489846][ T5848] Bluetooth: hci7: command tx timeout [ 490.558568][ T5848] Bluetooth: hci7: command tx timeout [ 501.759185][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 511.386684][T10430] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 517.327097][ T5855] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 517.508837][ T5855] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 517.687844][ T5855] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 518.028362][ T5855] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 518.219315][ T5855] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 519.188167][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 520.796774][ T5848] Bluetooth: hci8: command tx timeout [ 522.769914][ T5858] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 522.868672][ T5858] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 522.888683][ T5860] Bluetooth: hci8: command tx timeout [ 523.007977][ T5858] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 523.278668][ T5858] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 523.619780][ T5858] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 524.947858][ T5858] Bluetooth: hci8: command tx timeout [ 526.146745][ T5858] Bluetooth: hci9: command tx timeout [ 527.037864][ T5858] Bluetooth: hci8: command tx timeout [ 528.229295][ T5858] Bluetooth: hci9: command tx timeout [ 530.307493][ T5858] Bluetooth: hci9: command tx timeout [ 532.427413][ T5858] Bluetooth: hci9: command tx timeout [ 536.899130][ T5848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 537.077398][ T5848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 537.297339][ T5848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 537.478929][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 537.768330][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 538.188877][ T5855] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 538.397103][ T5858] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 538.516664][ T5858] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 539.008924][T14021] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 539.209472][T14021] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 540.637268][T14021] Bluetooth: hci10: command tx timeout [ 541.357892][ T5848] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 541.529520][ T5848] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 541.616820][ T5848] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 541.808876][ T5848] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 541.909697][ T5848] Bluetooth: hci11: command tx timeout [ 541.959194][ T5848] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 542.717387][ T5848] Bluetooth: hci10: command tx timeout [ 543.986649][ T5848] Bluetooth: hci11: command tx timeout [ 544.309378][ T5848] Bluetooth: hci12: command tx timeout [ 544.658497][ T7853] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.828512][ T5848] Bluetooth: hci10: command tx timeout [ 546.066463][ T5848] Bluetooth: hci11: command tx timeout [ 546.388606][ T5848] Bluetooth: hci12: command tx timeout [ 546.869313][ T5848] Bluetooth: hci10: command tx timeout [ 548.148554][ T5848] Bluetooth: hci11: command tx timeout [ 548.466393][ T5848] Bluetooth: hci12: command tx timeout [ 550.548936][ T5848] Bluetooth: hci12: command tx timeout [ 563.217457][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 576.638137][ T1113] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.778119][T14021] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 580.889853][T14021] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 581.007035][T14021] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 581.377450][T14021] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 581.619013][T14021] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 583.399025][ T5848] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 583.509626][ T5848] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 583.628968][ T5848] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 583.929441][ T5848] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 584.069060][ T5848] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 584.479477][T14021] Bluetooth: hci13: command tx timeout [ 586.547984][ T5848] Bluetooth: hci14: command tx timeout [ 586.558174][T14021] Bluetooth: hci13: command tx timeout [ 588.646932][T14021] Bluetooth: hci14: command tx timeout [ 588.659316][ T5848] Bluetooth: hci13: command tx timeout [ 590.718776][ T5860] Bluetooth: hci14: command tx timeout [ 590.738854][ T5858] Bluetooth: hci13: command tx timeout [ 590.889899][ T5860] Bluetooth: hci6: command 0x0406 tx timeout [ 590.910009][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 592.798884][T14021] Bluetooth: hci14: command tx timeout [ 599.687520][ T5848] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 599.769464][ T5848] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 599.947986][ T5848] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 600.257504][ T5848] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 600.389980][ T5848] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 601.419062][T14021] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 601.639170][T14021] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 601.789100][T14021] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 601.988285][ T5858] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 602.066830][ T5858] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 602.188080][ T5858] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 602.668614][ T5858] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 602.777620][ T5858] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 602.808041][ T5860] Bluetooth: hci15: command tx timeout [ 603.040104][ T5848] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 603.390035][ T5858] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 604.867563][T14021] Bluetooth: hci15: command tx timeout [ 605.268676][T14021] Bluetooth: hci16: command tx timeout [ 605.837155][T14021] Bluetooth: hci17: command tx timeout [ 606.229576][T14021] Bluetooth: hci7: command 0x0406 tx timeout [ 606.248911][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 606.958958][ T5858] Bluetooth: hci15: command tx timeout [ 607.348544][ T5848] Bluetooth: hci16: command tx timeout [ 607.907987][ T5848] Bluetooth: hci17: command tx timeout [ 609.026752][ T5848] Bluetooth: hci15: command tx timeout [ 609.270030][ T7853] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 609.437667][ T5848] Bluetooth: hci16: command tx timeout [ 609.987191][ T5848] Bluetooth: hci17: command tx timeout [ 611.508326][ T5848] Bluetooth: hci16: command tx timeout [ 612.068057][ T5848] Bluetooth: hci17: command tx timeout [ 613.166568][ T31] INFO: task syz.3.1968:13961 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 613.256495][ T31] Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 [ 613.477286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.578212][ T31] task:syz.3.1968 state:D stack:24256 pid:13961 tgid:13960 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 613.669548][ T31] Call Trace: [ 613.897192][ T31] [ 613.938329][ T31] __schedule+0x16f5/0x4d00 [ 614.028222][ T31] ? __lock_acquire+0xab9/0xd20 [ 614.159226][ T31] ? schedule+0x165/0x360 [ 614.227452][ T31] ? __pfx___schedule+0x10/0x10 [ 614.286756][ T31] ? schedule+0x91/0x360 [ 614.356893][ T31] schedule+0x165/0x360 [ 614.497930][ T31] schedule_preempt_disabled+0x13/0x30 [ 614.617105][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 614.739072][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 614.927544][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 615.068239][ T31] ? __lock_acquire+0xab9/0xd20 [ 615.177602][ T31] ? ib_register_device+0xb0/0x1380 [ 615.307046][ T31] down_write+0x1ab/0x1f0 [ 615.377491][ T31] ? __pfx_down_write+0x10/0x10 [ 615.619603][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 615.756742][ T31] ib_register_device+0xb0/0x1380 [ 615.887131][ T31] ? __pfx_ib_register_device+0x10/0x10 [ 615.997597][ T31] ? xa_load+0x60/0x210 [ 616.096920][ T31] ? xa_load+0x60/0x210 [ 616.296799][ T31] ? xa_load+0x60/0x210 [ 616.367091][ T31] ? xa_load+0x60/0x210 [ 616.418076][ T31] ? xa_load+0x1ea/0x210 [ 616.497311][ T31] ? ib_device_set_netdev+0x5c9/0x6d0 [ 616.586453][ T31] rxe_register_device+0x1ef/0x310 [ 616.697585][ T31] rxe_net_add+0x7a/0x100 [ 616.797163][ T31] rxe_newlink+0xdd/0x190 [ 616.899607][ T31] nldev_newlink+0x4a5/0x5a0 [ 616.967804][ T31] ? __pfx_nldev_newlink+0x10/0x10 [ 617.039670][ T31] ? aa_get_newest_label+0xf7/0x5d0 [ 617.117431][ T31] ? __pfx_aa_get_newest_label+0x10/0x10 [ 617.197311][ T31] ? __pfx_aa_get_newest_label+0x10/0x10 [ 617.389470][ T31] ? bpf_lsm_capable+0x9/0x20 [ 617.466838][ T31] ? security_capable+0x7e/0x2e0 [ 617.667058][ T31] ? __pfx_nldev_newlink+0x10/0x10 [ 617.768173][ T31] rdma_nl_rcv+0x6ae/0x980 [ 617.867304][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 617.937620][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.028005][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.108486][ T31] netlink_unicast+0x82c/0x9e0 [ 618.187931][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 618.387903][ T31] ? netlink_sendmsg+0x642/0xb30 [ 618.468201][ T31] ? skb_put+0x11b/0x210 [ 618.507358][ T31] netlink_sendmsg+0x805/0xb30 [ 618.576555][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.819345][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 618.908085][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.996685][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.056433][ T31] __sock_sendmsg+0x219/0x270 [ 619.127570][ T31] ____sys_sendmsg+0x505/0x830 [ 619.197433][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.256706][ T31] ? import_iovec+0x74/0xa0 [ 619.398552][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 619.526915][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.646874][ T31] ? __fget_files+0x2a/0x420 [ 619.717769][ T31] ? __fget_files+0x3a0/0x420 [ 619.808224][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 619.886702][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.969690][ T31] ? rcu_is_watching+0x15/0xb0 [ 620.047015][ T31] ? do_syscall_64+0xbe/0x3b0 [ 620.098312][ T31] do_syscall_64+0xfa/0x3b0 [ 620.187619][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.238390][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.317427][ T31] ? clear_bhb_loop+0x60/0xb0 [ 620.548600][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.629322][ T31] RIP: 0033:0x7faa1998e9a9 [ 620.718683][ T31] RSP: 002b:00007faa1a82b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.869530][ T31] RAX: ffffffffffffffda RBX: 00007faa19bb5fa0 RCX: 00007faa1998e9a9 [ 621.067948][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 621.197102][ T31] RBP: 00007faa19a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 621.267876][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.346847][ T31] R13: 0000000000000000 R14: 00007faa19bb5fa0 R15: 00007ffce297e468 [ 621.446679][ T31] [ 621.449776][ T31] INFO: task syz-executor:13969 blocked for more than 151 seconds. [ 621.597676][ T31] Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 [ 621.719989][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.857456][ T31] task:syz-executor state:D stack:22432 pid:13969 tgid:13969 ppid:1 task_flags:0x400140 flags:0x00004006 [ 622.027568][ T31] Call Trace: [ 622.087454][ T31] [ 622.159051][ T31] __schedule+0x16f5/0x4d00 [ 622.238101][ T31] ? __lock_acquire+0xab9/0xd20 [ 622.296263][ T31] ? schedule+0x165/0x360 [ 622.349952][ T31] ? __pfx___schedule+0x10/0x10 [ 622.428981][ T31] ? schedule+0x91/0x360 [ 622.519214][ T31] schedule+0x165/0x360 [ 622.587435][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 622.687364][ T31] schedule_preempt_disabled+0x13/0x30 [ 622.797711][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 622.866441][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 622.939150][ T31] ? rdma_dev_init_net+0x19a/0x270 [ 623.017212][ T31] down_read+0x98/0x2e0 [ 623.098000][ T31] rdma_dev_init_net+0x19a/0x270 [ 623.159284][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10