last executing test programs: 6.361442244s ago: executing program 1 (id=2017): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x40000020) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0xc, 0x5}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x6, 0x0, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xc8, 0x25, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x3, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9e, 0x2, 0x0, 0x1, [@generic="27377ce482792ed829136386fc4027d87c55", @nested={0x4, 0x1}, @generic="8c983e39e505904036294dc35515eeafd4a224fe17165293d15277fba43285eb40530bf6e760c9d17a457c98e5cdfaa4c967ce07d1bd98c8508a7146b25f2be642cb7bacc74ae38567c4dfa7149e5c420f1da60b9e6879bca70d5c6aa00c7926dcd1c6551137d50d2b380fabf145f46c125eefda5ef18186371288fa", @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x80000000}]}, @nested={0x4, 0x97}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.06783215s ago: executing program 1 (id=2035): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) unshare(0x600) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES16=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0004000000028008001c"], 0x3c}}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r5, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='xprtrdma_prepsend_failed\x00', r2, 0x0, 0x8}, 0x18) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) listen(r4, 0x39e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.827102902s ago: executing program 2 (id=2054): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r7, 0x3e}, 0x80, &(0x7f0000000700)}, 0x40084) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r3}) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x63d6, @remote, 0x2}, {0xa, 0x4e21, 0x7, @mcast1, 0x3}, 0x0, {[0xde, 0x8, 0x8d, 0x6, 0x2, 0x5, 0x5, 0x3]}}, 0x5c) 3.75330533s ago: executing program 4 (id=2055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ccc707}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eb2871d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x396ec38a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cd16c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55365c61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e462ebd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7459039d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb749193}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x584480e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20924c58}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a60b4b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2afbaf68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a5102e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71f511e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3537e05c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e741218}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20c1e1fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13c0a730}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf13998b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x285f6466}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea2777e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4d895}, 0x24000040) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x20}}, 0x44000) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9006}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa473}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7501fd89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43ffff46}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1894}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16b3}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r3, 0xd0746b06f86133ea, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x83, 0x45}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x38}}, 0x20004800) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x1c}}, 0x4) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000780)='io.stat\x00', 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x8000) (async) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000900)={0x33, 0x10, '\x00', [@generic={0xf2, 0x43, "07b5ff6a5b948dc72657d03fef55a3a411245e82961db819188d6ea49fdf938b911523d9a2ecb0ac77040211fdcec72b666df68cc797f70407fda500e4e636a90c2450"}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfa, 0x9210, [0xd, 0x57e, 0x7fff, 0x9, 0x1]}}, @enc_lim={0x4, 0x1, 0x9}]}, 0x88) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000009c0)={0x0, 0xb8, "e2570f1b5a7f6fea528ab9259922f223e1300f008b924597dea3e4d6f63c9c281aaa4ecb57b1b5e44353649300ad9a3c2745e8020aa162c954e1ac52761135d3366350f9f1de4b632361055675651cc77ff87e0c6369bd976f251848157ee6af70f180f5384f4d8b4df5e929229e9d30a2558d9282466cd68dfb6b3cfb7435f42857c477e7dee81ef7c5d714a0b17e99c6cc75537d28f9663f9f2b8a253962ebfe4c78729841efe7a402a5f2fe032e7e9d848968231d8160"}, &(0x7f0000000a80)=0xc0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={r8, 0x77, 0x7}, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r5, r9, &(0x7f0000000b00)=0x7, 0x27) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000b40)={r8, 0x6e, "35ba70823459e76f0048897d0ae26fa8bd5cc1636f46553351f8aa0cdb9c2c4173a61557d7693bb2066de81ecc77663d7554aa207d4321681ffd3ca530403090b645701f292f15339f7d4d178641917a3e64d3f207b9991d342da2e7364ae0e8a65ea9080a534c60da6d67b3458d"}, &(0x7f0000000bc0)=0x76) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000c00)={r10, 0x89, "ab1fa6a00f04ae53493b97f1222528dee873f957bfbbdfae0944544c3b34a4d181720ddc6186e850446c5f3b1bcb84bb794d415a4238906c1855d36e6ef3282e7a477c03f78ae1273d7b11a4eafa91ffd8c627f4fb7452e6d612b817b96e8a083c2274034ff41428d1386dea2bd07c7ed2c81363e4d11b63e78f0900daa0dcf05012e7ac74ba0b98aa"}, &(0x7f0000000cc0)=0x91) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r6, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$xdp(r6, &(0x7f0000000dc0)={0x2c, 0x4, r11, 0x31, r6}, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e40), r0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r12, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18004}, 0x8040) (async) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xac, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x6, 0x4e, 0x2, 0x6}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_KEK={0x30, 0xf2, "a1e1d277f49a3640263b9bc2ad6d050630eb13ca23f600b1d45c058c2c1a184512fe87785a860b797b9af684"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0xd93, 0x9, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x1, 0x5}}, @NL80211_ATTR_SSID={0x5, 0x34, @random='+'}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1, 0xff, 0x0, 0xff, 0x3, 0xf2a5, 0x2, 0x8, 0x5, 0x3, 0xed, 0x4, 0x9, 0x1, 0x5, 0x6]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x802) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f00000010c0)=0x52e, 0x4) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x23, &(0x7f0000001100)={r8, 0xfff9}, 0x8) 3.585075571s ago: executing program 4 (id=2058): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3.533349421s ago: executing program 1 (id=2060): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000428bd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)={0x3f0, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6c}}}}, [@NL80211_ATTR_TX_RATES={0x188, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xb, 0x99d8, 0x6, 0x8, 0x0, 0x6, 0x3]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf3, 0x7fff, 0x8, 0x3, 0x4, 0xfff9, 0x7, 0xc]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x60, 0x5, 0x60, 0x12, 0x4, 0x1, 0x12, 0x2, 0x1, 0x36, 0x7e, 0x4, 0x9, 0x4, 0x2, 0x12, 0x6c, 0x30, 0x6c, 0x32, 0x18, 0x18, 0x6c, 0x4]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x1, 0x5, 0xe351, 0x3, 0x1, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x0, 0x0, 0xb, 0x0, 0xffc0, 0x47, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0xffff, 0x3, 0x1ff, 0x4, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x4}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x4}, {0x2, 0x6}, {0x4, 0x8}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x8}, {0x1}, {0x4, 0x9}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0xa}, {0x3}, {0x6, 0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x5}, {}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0xa}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0xc, 0x6, 0x48, 0x6, 0x48, 0x18, 0x30, 0x36, 0x18, 0x6, 0x16, 0x1, 0x2, 0x6, 0x36, 0x3, 0x24, 0x18, 0x3, 0xc, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x248, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x6}, {0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x7, 0x9}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x3}, {0x5, 0x1}, {0x0, 0x8}, {}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x6}, {0x5, 0x6}, {0x6, 0x3}, {0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x6}, {0x4}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x8}]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x101, 0x0, 0x4, 0x1000, 0xf51, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x24, 0x2, 0x9, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x24, 0xc, 0x9, 0x2, 0x1, 0x24, 0x78, 0x13, 0x2, 0x36, 0x3, 0x18, 0x5, 0x30, 0x6, 0x30, 0x6, 0x36, 0x18, 0xc, 0x1, 0x48, 0x48, 0x3, 0x9, 0x12, 0x9, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20d4, 0x80, 0xfff0, 0x400, 0x3, 0x5, 0x81]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x9, 0xc, 0x2, 0x2, 0x48, 0x30, 0x30, 0xc, 0x0, 0x5, 0x9, 0x18, 0x6, 0x6, 0x5, 0x60, 0x5, 0x6c, 0x3, 0x3, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x1, 0x3, 0xc, 0x5, 0x18, 0xb, 0x6c, 0xb, 0x3, 0x3, 0x2, 0x2, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x7, 0x9, 0x7f, 0xfff8, 0x5, 0xf037, 0xe16d]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3a7f, 0xb, 0xf0, 0x3ff, 0x8, 0xfffa, 0x6, 0x1]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbce, 0x0, 0x9, 0x7, 0x1, 0xb5, 0xf61f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x4, 0x4, 0xfffb, 0x7, 0x438, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x9, 0x2, 0xfffc, 0x7fff, 0xfff9, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x47dd2e9f789966b6, 0x6, 0x1, 0x0, 0xb55da1c09bb31a20, 0xc, 0x9, 0x9, 0x30]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x24, 0xc, 0x1d, 0x5, 0xc, 0xb, 0x16, 0x48, 0x12, 0x24, 0x30, 0x6c, 0x0, 0xb, 0x1b, 0xb, 0x1, 0x6, 0x2, 0x48, 0x1, 0x16, 0x12]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x60, 0x6c, 0x6c, 0xb, 0xb, 0x6c, 0x24, 0xb, 0x48, 0x2, 0x6, 0x1b, 0x12, 0x18, 0x24, 0x48, 0x16, 0x12, 0x24, 0x6, 0xb]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x9}, {0x4, 0x2}, {0x5, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x24, 0x12, 0x2, 0x4, 0x1b, 0x16, 0x0, 0x3, 0x1b, 0x4, 0x0, 0x3, 0x9, 0x36, 0x7e, 0x9, 0x60, 0x12, 0x24, 0x24, 0x48, 0xf, 0x18, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0x40, 0x5, 0x5, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x6}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x7, 0xa}, {}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0x1}, {0x1}, {0x0, 0x9}, {0x1, 0xf}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x8}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x4}, {0x2, 0xb}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0xa}, {0x3, 0x9}]}]}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 3.296576368s ago: executing program 1 (id=2062): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27}, 0x6e) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x62, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) close(0x4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r8, 0x0, 0xb) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 2.729968439s ago: executing program 4 (id=2065): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x3}, 0xa1) socketpair(0x22, 0x5, 0x1, &(0x7f0000000280)) 2.696095581s ago: executing program 4 (id=2066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x8}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x100, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x3620}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000100)=0x82) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a40)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}}, 0x0) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r11, @ANYBLOB="004100000000000014002b80080001000503153536a58a57b39dab959368cdf031a6450594223d5cbb96a9cedff07ca8a659b96d958898fa37e3fd04888a2f6b9f9a89f9ad21a7c0a22cb97b617e89da91dccdf714a6f168f7422c85088b27ff68f2db615172c688798874d6a0223ff2ccf245578130cff243e92859a01b90e9d5", @ANYRES32=r14, @ANYBLOB="0800030008000000"], 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x7fffffff, 0x3, 0xa3a1, 0x0, r1, 0x8, '\x00', r9, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r2, r15}, 0xc) 2.456639559s ago: executing program 0 (id=2071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) unshare(0x24060400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000280)='|', 0x1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="9b0bacd901850000000000c93ec2c7c6027aaf000f71a70ca7bf4f95fc9ed672cfe45dad518a2784fad3c370f839b1897e222ecd965b3820d031db35fdb0192deb2a073eba049527e388bd5b6aad74b06e04b9c17e506d6f00c989b3b0216e364a2c16a622afb9cac90b8afd9baa64671709bb15"], 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) socket$inet(0x2, 0x3, 0x6) 2.361352876s ago: executing program 4 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xffffeffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {0xc, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$ax25(r9, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$ax25(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x33) socket$packet(0x11, 0x2, 0x300) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r12, 0x0, 0xf3a, 0x6) bind$alg(r12, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-mb\x00'}, 0x58) r13 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r13, &(0x7f0000000640)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x6}, 0x2}, 0x18) sendmsg$inet(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r14, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000280)=0x4) 2.232753929s ago: executing program 0 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x70bd29, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x10001}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 2.163923277s ago: executing program 0 (id=2074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}}, 0x2000000) socket$inet(0x2, 0x4, 0xab5) 2.120773708s ago: executing program 1 (id=2075): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x16, 0x8, 0x8}}, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01005189a94a9b4d0b", @ANYRES32, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) 1.91162592s ago: executing program 4 (id=2077): bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYRESHEX=0x0], 0x16) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0xffffffffffffff0a) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(0x0, r5) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071105f0000000000c60000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32=r4], &(0x7f00000001c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r8, 0x8, &(0x7f0000000040)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8b50}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) 1.905158156s ago: executing program 0 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='macvtap0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300}, 0x14}}, 0x40000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x9, 0x42, 0x8}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r6}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r6}, 0xc) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r7, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.904648572s ago: executing program 0 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2000, 0xfffffffd}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) read(r2, &(0x7f0000000280)=""/164, 0xa4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0xa0, 0x73, &(0x7f0000000340)="eca2c4eb39cc3c77ef163314ef4081748ec173f0e11ee5599dcdbed48d6105203efe8542c88b2f04b2842a83d59965d0568523c4bae68e3797854ba0341bb476ec0f8651f417a825240848898903dde3769676a8e249856acfff0eda92471630f5a01121bee093bd98e2f2e271d56654c78bd7a212b7fbb1db77696ded62893417a207422cef00458e1544b60ecd83c27a2022bc882cca7ddf8d3b8c51bc02aa", &(0x7f0000000400)=""/115, 0x3ff, 0x0, 0x4b, 0x6a, &(0x7f0000000500)="f85c8d2d28ecbe709ea6ba720c0ec30a946990df13d402fc21ef03bb6d2cd46e32e8d9cbffa9b5a2a9df6ee63dc21ac5f624a72e7c6d5cdc98d613b6cfc45de78505b2bb7a26a738760a2f", &(0x7f0000000800)="34159f58df82b2402048abb28e1c350f7ced9bf6e2944270ae37ad06ebd0a5c38b44e190d5625ff25e48c05277f1d196157e6f94aa9b2d2458d5d7e249cd0b916fda51649447765619a0361552586e8b4d1a1c468b552ec118fffe416a9ca56b5d83880fb2ac9d28dfe8", 0x0, 0x0, 0x7f}, 0x50) write$tun(r1, &(0x7f0000000000)=ANY=[], 0xc2) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) 1.904332657s ago: executing program 1 (id=2080): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008009239", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) socket(0x840000000002, 0x3, 0xff) (async) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1.799963303s ago: executing program 2 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000041c0)=@base={0xa, 0x4, 0x9, 0x9}, 0x50) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="73bd080000000000002062184876711b0c67eab2d884e2d9ea44bc13f81adb1942efef91ddb9e42c832eae9c1eadbf97e1d25eb4024b3581"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYRES64=r6, @ANYRES16=r3, @ANYBLOB="8cb6a13fef1c47e90fdb95e25b9d2240da12fe5d0c591ae240394323187c1a9bac771659ce9fd37a130811f332616ada2c1b2b83f63089d981369eeb0f374cfdffc34177b07e89ab00bb089bfa09c2ee7d781e59af2f7b0ae418e9f11bd8b4096e8f0603c87106019692bb875ba1807a9f859d55f34104988b21e27809ca61882b65122bbb991d97ca3eeba5fc4f1751ef0abac6c1c3fc4eb9a1b3a76ffda9441ed1cb2a", @ANYRESHEX=r6, @ANYRESHEX], 0x100}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000027bd7000fbdbdf2512000000080003e6", @ANYRES32=r7, @ANYBLOB="0c00990000000010060000000500740002000000060010002c0600000500e400000000000a000600080211000001000004001300"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = accept$alg(r5, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=r9, @ANYBLOB="0025000000000000240012800b000100697036746e6c00001400028008000700fbffffff06000f005e"], 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r11, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmmsg$alg(r8, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17b}, {&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575260400877ef8644bccc1353c6da6123e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9d0800823bc89a7cc268e91fff7160c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7", 0xb5}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b5dffa0d41dea9381328cacda24d9a3abd058062ad7ad510b02816e20128a7dedd60e86cb5e679599faad3d09e770721f2d5db2e56b1e0972c331f365076d7bdeff03a3ca3f9926227c5a8cd0a43538d37240503464cea7ad56fcdd32a12249d89d50685ff6742a95f669b780b80cfb70e90dee859d9ba7cf3485464ec7c3caefd5c605e66a3d78b6009a7ff6a92ae0fb552ea843c28f734ffa9d9c09cf3880d8c2fb2d69c43a2f226b8254", 0x131}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 1.616591286s ago: executing program 2 (id=2085): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000002800)={0x2, 0x0, @initdev}, &(0x7f0000002840)=0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000003c0)="26b374048a5b591f4cdddf93befddeb7aec00751c764b87df19c90b220546f0c8129a746b78bda4daacf103fabcb5be1d5408673c406d1272ebd644f0844e1413df0a557a069568a28ba069b077caf73c95fd475cd972eac6ed731dfbbc05d9b50d65584beb0632239b386cb88ed4245ec28e0316f62ed725949f7d87d2a1ac865a42e986502d647b233b6ae1946e3ed29cf52c3ad7165f3b2e87a46d7e6b33bd0b2", 0xa2}, {&(0x7f0000000500)="571c6fa6772e2b5a479fc115cc7463e1c686e176c3940622d2b9b54ff5c580b3e5b05d85e184933526f789774a3019fd154905e17cddd8d12af60b5fc1e6196735d34f1ff9f6e7289047653d6ed40bce04b9b1ed054abea5ec73ac", 0x5b}, {&(0x7f0000000640)="c0c869594d9b4f265ae22b1d23d164639d194a8559107ca3d9a8953e14a474cbe779cb4d4380bb465b76471a2e9391c57fc2fa989ac814c8013430ef9b4871c89d8ad1fb1bfadee99718e51c7a9e92fb7ea8e1cb5c85526a9c65a29129ed43e36bc6f3bce30a9e260c3e539b96a4befaaab2934609c73c8b5a4e80fab42c7957c4cadd7bf2bb03ffe72c5c4f2302c2ade9a5fff51cd9c4d7dfa651", 0x9b}], 0x3, &(0x7f0000001e40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x138, 0x20040820}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000002000)="5f6c5377c8d28be2c033be6dee68df26bb13c67b08006f58bffe53eef8c84f39e5db5a1da1148d6b314431f84b8ed8a50e", 0x31}], 0x1, &(0x7f0000002080), 0x0, 0x40}}], 0x2, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002e00)={0x0, 0x0, 0x0}, &(0x7f0000002e40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003340)={0x0}, &(0x7f0000003380)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000033c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000034c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003500)={0x0, 0x0, 0x0}, &(0x7f0000003540)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r12 = gettid() sendmmsg$unix(r8, &(0x7f0000001380)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38, 0x4000}}], 0x1, 0x840) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003580)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000003680)=0xe8) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) r15 = socket$l2tp(0x2, 0x2, 0x73) r16 = getpid() r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r18, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r16}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003a80)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000003b80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003bc0)={0x0, 0x0, 0x0}, &(0x7f0000003c00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000300)="d40d05756aceb0e2d9c01e599129461e345fb90ff974cc99abf9c24cd2521f3ba88ebc863018c9852a492f6540b06a439ec6b19127aa6c9e03f1a78e3b27095066cdeb85a52b68d8ca1a0a3f7878f1b1766f033cfbeade10ceddb566ec3b468463dcf12259034780593ee9d84f55f8f7558d27e17abd09a1fd0dff5a204e1c9a710612e5a276512cc7bc9cb5f7f58e9e1b665614df647766b2ae41bb1717114c425460d20e1f", 0xa6}, {&(0x7f00000003c0)="2936b1d21019d26e686985106c10e20d93cad498aa0508a6a695efc9ce2e9b8f4f4dd45ea50f8618d79f8b6f44b4cad52f60321fb58c65cf51880f4f435d0d378fc5b455298df3377e8b1fb09d3fe0cb8cfe87a26ba30f5a76bbf003daf8717a59a696d5349a611e2af9429753a082cd83dc6702f246fb4fe80dd7d6ca25766e7ed9e5f21614b96bd5a65819c3e04f3e4dd3024740fc74c6cebe81d95cdb29e6bb93d55dd401d203677420e3046d973b172db7b2a9ae38e9d08cbbed1727be33f8a7", 0xc2}, {&(0x7f00000004c0)="f91648f3aeb2571054f754701a393d14b0f8052eb49590fff37698b9cec38afb87dbbc921c1aafa81cf4ccf5722423d861106348eb083b14260b633b7b7d7df8793a5f2f004d2bbcf00f9c821776dda10d042d499d402ef12a6176de90763824308360029fba39f4350e3db427c23094512e56c2df1116f4bef67b73f8d1bfb43f002eae78eb9607ec34339a105eecec4a4d9b17b210ecba0c", 0x99}, {&(0x7f0000000280)="22b41658e6b0e50c116f7521b4c839fd0c13ff52bd27b963b0fcb9dee75a7268", 0x20}, {&(0x7f0000000580)="76193cd3dd28eecab4226d6463878c121048447d4d325615c553607a6f85f91d1027048c75c941ae2820ac04bc9ac776e57bd5e009dcdeee94e646575a71bfe1f8c8e398a3df8630b9b1d3b8f5457ac0afd5a2a5057adeca20967e4084d65b", 0x5f}], 0x5, 0x0, 0x0, 0x22048884}}, {{&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000700)="f21a25f4e918a268b8c47ddc1751515a50733c4a4e865a67ccd6996391542b17fe3792286e7638b1c455bfa28a73e842308a20fccada6a1fb8bf336c94acd7be768e5a71a4bc2e0fe8d00181548f81860bfd28af5e6a4be36f06beb9b5059cc27cfd9c1a7642f4bb5e1b618c577afcda3ea4bc441887d26ab80ed8d5ff58ef1f406da8bc8ad29b0f7aecdbe98d5ced773228c259fd2a17ddb5a00380c2096ce3f355a61eed78f72765c020827b4866cc1ba69a9a05ab536ffb10479900da4b74318f16b4ca33c274b227f417cca57ab65055301f5192da3890d46841774b5e93a2ab70d4cb1387", 0xe7}, {&(0x7f0000000800)="1c1d1d7e3899381b2784b2fb16a4ddec674f541cc8fac6b3aebcff3c8ee7944b4d73a70c2272ff19d958ed91853201b2dbc6d0c504a96aa46a90ba68bf987b7ccf9e9246eabc16f2ae2be13d39c3ac4c317c34a68e97ea4d7eedf23dfe8ef719cf96b580b513d39c9abead203aac08610b61b154dcac42fc0dc53175e128847c0aeb025246cab4a75e12f807b82de08f9fc28ff73436cf73b3faf8404903ff0a3d2f98de6a0513ff64242f82a45ac4b9ec0a970548847f1e5df5f30d8904c9ffed9f977519599d00381e3f102c0d804b71058f8db7dceed06fd49812be52c1b93700fdb0d604", 0xe6}], 0x2, 0x0, 0x0, 0x4d7959ea3438c415}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)="1eec48d918e58eaaa17359f50bea44510da52ec2eba892e6bfe6c159c82c404dc28c8a59c1475830fbb68facf9061670fb6fe05c2fe5168792532bb0ed914d330b46e2d75580cc4aa4ceca0022aa1590c3a93fd2cb8e5452232ab9b4e9156b28462457f839d9244c68d3ae6b348dc428279ba381f04ffd3a67a82df89083d65088f270863e23b203ae2c1f7f465b4c8bdcadfe1de09c402d6a440246cfcd8831b87d839f312935773965c0f0707dd4635f01c23277d1dc709de0936e7008e15e918c2ac53b4099188c5382a8cdbb603ff1f80a87b9a2a53437", 0xd9}, {&(0x7f0000000b00)="1aaf6033cb8b29e2d8c9808b67f581ab14875b6b7d77619a8f3759ecd01772fad5745cb7ca720ec5b5f124e36cc66e2ccdc0bf9bb6d48d4b59", 0x39}, {&(0x7f0000000b40)="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", 0xfb}, {&(0x7f0000000c40)="f76c67ece4cb22c1ce489f7fd47aebf15008542a95001e53098f4afabed754d4f3a8d5a1acfc308ce096e67e77d4d2f073f8a8f745302f7d7e32face79fa9d6af01fd6a8566cf153184314b3", 0x4c}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="d205936f78988b8a29f9ad3e20fc03d69e65d7dd9a56cd2d36921e9e221627a2c7a5fbfcdc2e138377bfeddae44a8c2f8e5efd2d2286e0dd91d59e2848bb7c30a7473a7b7949a13b50e4e2524c9ddc564bb937f5db794c26fa335c03b614d5482bf34510ec7783e7f0ae1bedfaa0d2431e662e330f57b841bcf7432859181426910fd66646a0dae6021df470ba37f8e9419e46c703dc1562b560501b2cba28a5ad0d4231dc17b59f9a2ddf57e7127aed7656080e056a4d6f0884f52fa9f383be34762812cec7d2e5124da9e6e077ea939e940fa089de8c86e29c1e40d08ddd6e", 0xe0}, {&(0x7f0000001e00)="40be12ab5bc342d5fcc0375327aa4ec5c698952c7c7bda3400ae015f7cdca71c679b11aa4381965b33ca97434cac39f077c46641fb9769b731d7b1c6a02aa223437784f638310534d53618586d28701baef2df6154cd6d5738035e43b50136eb5a4ae8eaa9994cdf2d7c3cd9b1b77e578c254bd6d96a02676ca647ca5e227d7b1a4606220160d9242edfc95991ca727c999f51e970e8f2729ddabb9b2a91d89b8369ca4e5041f2dbd76940cad1b4b3541f8a4a", 0xb3}], 0x9, &(0x7f0000001f80)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0x50, 0x4000}}, {{&(0x7f0000002000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002080)="2896672079fc317c98fa7c4f6fd327e8da6d7828d42e1be5b6fcf896528d86840ffb9a161fe1d8027ffd3aa1afacd500e3d2474b06b4d89ad22b99d94baf179be263c6de63b8d811f63588bbe1b6b88d014b91cc64", 0x55}, {&(0x7f0000002100)="5e9f273033b22d68c4884e7535c8fc0263473b54d4fbe0ebc7bd8fc56482916da46faf80cfc95f7a91a8b66270dcade0a499396ee712feb6dc1cacb64aedd025b1d500d217418768a91e68c3f95b1671133358937f784745076c2036c66f58c7b3d4602fd5cc56e767ea29888f06bd0a4aa7e026e01b2392e6717118ef2ecd682c85c20d65be6cb728e7814eaa3ccf7572d29a4977e4bcb9864ce20e980deef9304681c49a2a44fd8cba716e41343cdab8819f55085ed112694e2876", 0xbc}, {&(0x7f00000021c0)="d2577efd9944df8e5fe1c4af176f9c31f8fa19b259e66dba41acb5a9a85850beefb71f9768800793e77bd0489e5414b943e741341dcf7b590a1fa1983c0676879fe4", 0x42}, {&(0x7f0000002240)="65c797307794e926db05a26949e482c34e7483ba46320dcb2875860eadbe0b7d29d1bb173fef67de8b2a1b279920eb8ab4d07861d90d845d7ed877bf8ae81acfca1bdd96f928c9e5a7c2b23766ac6c698a4918382f4a480be73dd39a674b655dc855ae609d749490527461382907a2ce870ed0b52b1deb6073e951a6f4f3412d050d98606b9728f0707b54183f05f0c574d265b4828609fecac583d5977333746ea6c486131817548a31ac3fe2a12f73363705ff99b64c4909c59e072909c29230e0c812dc3b03dcca156a8d44800269b95f2b1e9576", 0xd6}, {&(0x7f0000002340)="6bc3dd981134925e8b1f", 0xa}, {&(0x7f0000002380)="08a5aadafe1d80ce9ed5b2dec20a3984e348cbd714f82645066a96c9d081a186c1113938f31f9a602cb8aa8cb0719df0bdbe54f7ea5866417ad451d4f892b6e1482cac0177050ce860bb2afed29eea863a6e9264c5ee5332fa373acc6b5ac5a0ebe81557e96df513a3fb8582a8dfe18af42efd327e10d68edca01cb7b2ddc07ebf7ed3e33f36e2a29f3a59a840761d2d3af913e4e206a7d8887198e788615de17f5c3c21caf53f2d62293f03c4747d184e73de40a005ed3fd80806fc3b0fd2ea49035ae0379609", 0xc7}, {&(0x7f0000002480)="ecb6eccbf2334eddc4e3f85f1443d005408d1f6deac23edb50c7d0e8af0a2fa3ad5473af834e53f20a977d9613078d68282617530616c5e233dae136af325bac771a45a60ad9d5a0b398d32e6402933900f7db4ec5abf2257d07b2cd79c69b0fc968db3ad0cafdb7f17c0b4a9e97fa709838ec92354c072c5b85ef89c89edaa72bdd98a4475f89a17c6bf02f24a351e0c3bde64e6e32258f824ba7ac2f8750cab293d78afb5edcf25e9df7ce4a3dea09c31d", 0xb2}], 0x7}}, {{&(0x7f00000025c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000002640)="0fcd49e8f359f2edf4ed20c90c15c08065850bc5232e0b7c2793633d411049626fe23efe34b3e055dd59fd2c441d99be9c47fdf535907807b25aa962511f346a591bf631402d7a9ee16f4dcf079b178a3f86c4a152261b2167b611581311424a8ad623b2c5a16dc4dcf03734b145b5df46ab3ec36d5fb0bd9c04cc023a8edb99d910158fa7b7b078a9e2a6ca523ba059bf222e60d25fd8b6cf9476ca7106f7740512f5fceb1b0fdcd73c58ccf0927ab875d3a6c7cc5c094fcaa001b4d0c35781086d4312971e6287f7a6abf9ed62c90d6b5005337b7a8970fec37903be85c820d2527bf0669744cef136f1e69382157811bd6f152b52bc91", 0xf8}, {&(0x7f0000002740)="9595748e4f11318905c71ef90209702da3ff0d3228d958faf6e96b5ffed554a84ac8deb3aa07a0f39d29e81d5eaf22ca9d09ac6b0f025bca54551e21d569805583afecfc7b499175fb27b4a14e958efac51a04fcf5e81899ca1580645d4181a9a678481234b77a7fd785342cc3faef27a93f9c72a02c0a325fd49096acf23f1a773875b932f7941f1c040e659dfc740cd2fe759dae8423137070de4db968b19593803f06938c0dfff344cabfedf9a099b6589073e13744ed45c4bb04bee606df06206341fd06c8c6b05f4af21d5658092adbe7165d98ce4f77ed785512ba525222143309d4e741f0b9cc4fa9ee7291fc79fb9ad48ecb", 0xf6}], 0x2, &(0x7f0000002a80)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x88, 0x40091}}, {{&(0x7f0000002b40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002bc0)="649da67e6a9afdedde5aea16bba9b3", 0xf}, {&(0x7f0000002c00)="c7193f1ac9089da2de11589978f0175ffeda959630111259278923032db55b79abb6a04f04fca2155d985337fed405121895a85254783762c55bc1906a1c0e", 0x3f}], 0x2, &(0x7f0000002e80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0xb8, 0x24000855}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002f40)="8b1c814442f394d11170ffdd1501bfb604df27c71cd0119368ac333dca4f31281beb8239cb27ed87bd493dfa09a8e76e20ae74460dbc159c2d871a28e8b05bcb24b386f441c7854cfe0ee90a1afe965c8d5dd34f71d699a5c666834c3300696c085d2de7a142f45d752649058279ec59f0176d9f3c24d1c39498128f0e90fa0040157a", 0x83}, {&(0x7f0000003000)="6b55a86ba3d5885c2344fdffc6342012f761084224b1fc2b619d98996769961f944749ebfb8d848e81a414ae1377ddcf0fdd0fe597", 0x35}, {&(0x7f0000003040)="4ce3d7fc9cb3b1bc687c9a2d778248ad4e8a8b1367459a4b512c7b6f842521744402e912d1bb9492cafc0170ad7c2c90bc88b1a061bdf1591bfab5", 0x3b}, {&(0x7f0000003080)="7de0f9d0716d64b4ba415e161785e3894d221354d7f2d0619c40c56d8ee8ac979f4eb9e429ed64198dfaf07888c3d2c4d38c572dda93e51b0abd10777deee5e438a436826bbbcb1debd3e115d87adc8d6f8128c8b947c27e3fc298cd806c69f67f2aff84f3f38b9208b03cf1492b8033dca93ff41dde289e4f2f73bec74d700608b4eeb3ed59da9166453d19470657c14e9309597759a59b574b1f3752c5d1ab039c52927ee4f238fefcfd30887e36bfa62b980227d97e", 0xb7}, {&(0x7f0000003140)="d10c374c7ef602def20515cf490b88df6b8723160d3d", 0x16}, {&(0x7f0000002940)="092839d7d44730b6dd573c3ca5d1114ed369dabf3642233df7592310938910a769f758d70c204c0b4a0f8dbd6c307d6dc324a679bd372a056595b80dddd1e91b39d64000ec0b941fdcb1afaf33b52f254db44fbd3653679d3fc39b29fb4aa95d1c138fc6b8294533c81e1bdffbefbe47adaf1cd008c7779e8efc6e8f9403869b5a78ec788dbb4757e31922bda9307804b3e43a8c0471d394", 0x98}, {&(0x7f0000003240)="4a7ef83fe104641bbaa7621944a49d7d684a830ed15be09f17f3c53db63108044779aef0230e61629fe74d7be26ba1612f3f72a95e2d0dfd4de662dd971e463cd0eca99af9dff05234630f98a1c3970cca69bf1097a15f54c020971774473380520070ee37e31c826f86305aa2ff2035a61bcef98bd91fa21b0c0ab2855e49", 0x7f}], 0x7, &(0x7f00000036c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee00}}}], 0x60, 0x4000080}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003740)="0cb273ad3b7c64d6c2396ef5be418ce79aa0d081f60a26d20539978f117734da77d23c82e279c17be3404a3c1cec9f7581b8067d3012244e108ef89ff06c870fe7fa3d6749019797b08a60d1b200d9648b8be6829192d45134bab77f4b0ef4bf677c7857e02b15710d57ff9d47a8e4b358ea19cd1875f6f52a937033b587bbc38951549639bfdbcb8ceac69977780ec3d3789058dc9f35255fc3fc94a46f16bb60fd812cf913ca2a287c281eca0432c511c24d0c82afae1ca3a3eb8855c7568be7de03de48f34fadda9b9214d0e93e", 0xcf}, {&(0x7f0000003840)="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", 0xfa}, {&(0x7f0000003940)="6cdc9ad505b14fcdf728e2108026f99e1eaa287729b803876b50f4028b4213a1876f0c469a8b283c264b5f99864283c5b07f61c13358d31614b21d55353027af4a79b3fcfd46f6610bba2e0d3a3813530cdf056d24f0b276abdafd15aa2635bd92caf5d8a89b28f30fe5ba3064c948cb0385aa10880805a92e606123ca8bfef5f259eec8338c7731499d6e3d358f07d89851b0170b1ea3104a37e379cfacd380f6f200d5ee73c4f42473241862bce3cf07d9516d64bc352e88665707bd33206cae40a3842fb344c3b647bde705b1c1237768387176fe97b9326360046c0aa1c078db177161944760680c484a8403b2a6", 0xf0}], 0x3, &(0x7f0000003c40)=[@rights={{0x2c, 0x1, 0x1, [r14, r0, r0, r0, r0, r15, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r19, r20}}}], 0x50, 0x40010}}], 0x8, 0x4000000) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000009c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9], 0x50, 0x4855}, 0x24000052) 1.501560654s ago: executing program 3 (id=2086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000, 0x1, &(0x7f0000000080)=""/58, 0x3a}, &(0x7f00000001c0)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.436510233s ago: executing program 3 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) (async) r2 = socket(0x15, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x6, 0x0) (async) socket(0x2, 0x6, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="0801000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e200000000000000000000000000000ee2b1922804082cc8ee17309e2c7c65c3a0397e3475f48d0c30568061cbe7bea64edbb45fc62ec537df121b2b8731c82ced581ed4f77fbae05b0d985db9c70a2c0ca58c1b93853b502fbc51b1de5737322b1f0511ddad40540a95e0345ab1013b078c6f6a689b7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000000000000005000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a0000000000000000000000050000000500000008000c001eca00000800240006000000"], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r6, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0xfd, 0x5, 0x4, 0x2, 0x4, 0x28, 0x1, 0x3, [0x1, 0x6, 0x2, 0x200, 0x81, 0x8001, 0x5]}}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="47ffffff", @ANYRES16=0x0, @ANYBLOB="21082cbd7000ffdbdf2d2e0000000c0005000202aaaaaaaaaaaa0a0001007f70fb31a59b0000bd8c226d37897ad245baeee8aa600b5c679c982f1674e9bc739cef77dd2d02917f3fe51042dec902ed0b46736bddf504c9ca74663f248d33107326b5f392ec0236ffb9c392f685ad0d1dcc0ff1af4a47f7164ab973181575d0e4dbeef70d3237059791b7d0571e46b11c26b53b9e1f85d5b001c03ec94f12b6316e841fd8833dd8b0d4455d620fee379580eaf3783d7d27d2fbf0de24ce269152fa45a273548001dfd1f203626fb9b76ba222fd770ed995b57c567fe5"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000580)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002efd7000fbdbdf253100000008000200", @ANYRES32=r13, @ANYBLOB="0e1682ac3e05e3e543b41ba235c00e297912ba9b1874fb44fb1d9fb443bff55eefb1cea6337477ba9b6cea9ba270973bff6efbc5d672da66069ab5cdfc4421b47530176f36be387575bdfc3d76f18fb216b4425ed35f92ec7ed21bb9627716f3c4ffd5"], 0x1c}}, 0x20000010) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r14, @ANYBLOB="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"], 0x13c}}, 0x4040004) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) 1.258431681s ago: executing program 3 (id=2088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000200)={r2, r3/1000+60000}, 0x10) socket$kcm(0x10, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) unshare(0x22020400) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) ppoll(&(0x7f0000000240)=[{r6, 0x4000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52, 0x0, 0xfffffffc}, 0x28) 1.111826417s ago: executing program 3 (id=2089): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)=ANY=[@ANYBLOB="1800", @ANYRES16=r1, @ANYBLOB="578d2cbd7000fddbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x400) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b80)=ANY=[@ANYBLOB="3c0000001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904000a00000008001b000000000014001680100001800c00090006d500fe"], 0x69}, 0x1, 0x0, 0x0, 0x4040805}, 0x4090) 290.651218ms ago: executing program 2 (id=2090): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r1, 0x2, 0x10}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x140b, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0xc080) 251.275295ms ago: executing program 3 (id=2091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r3, 0xe2dd266ab2404e65, 0x870bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 132.879134ms ago: executing program 2 (id=2092): r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfc}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 132.234771ms ago: executing program 3 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) pipe(&(0x7f00000001c0)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r7, 0x0, 0xa, &(0x7f0000000000)='syzkaller\x00'}, 0x30) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9693}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x30c4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 118.048496ms ago: executing program 0 (id=2094): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x18) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) getpeername$packet(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='thermal_power_allocator\x00', r3, 0x0, 0x2d}, 0x18) ppoll(&(0x7f0000000100)=[{r6, 0x4000}, {r0, 0x71a4}, {r7, 0x8}], 0x3, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x0, 0x3, {{0x9, 0x4, 0x1, 0x3a, 0x24, 0x66, 0x0, 0x69, 0x4, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0xc, [{@multicast1, 0xfeec}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000300)=0x1ff) bind$xdp(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x10, 0x80000003}, 0x0, 0x0) 0s ago: executing program 2 (id=2095): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="8401000042000701feffffff00000000037c"], 0x184}, 0x1, 0x0, 0x0, 0xc000}, 0xc080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000440)=[@iv={0xb8, 0x117, 0x2, 0xa4, "16df8be643bbcfcd0c0361b95515ef696ce512dcea03d541e31291965aff4a88d0f956d9a360505ccaa44215c256008b46ddd92587cc0f9e2c5c6f13d42919901a21db4fa7ce0bb3f01191d2eee8e0037633f6fa1a31bb23d7e05c906b7d83882aa669dda032ac35aa7e98a9180a225a1176cfc80644ba4dc8c99ffcfb8e9bbe9873c839f39e5f909a6dbbeac557a7c438a2f7db44a40997592298160f01f2e86f7bf81b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x13, 0x117, 0x4, 0x40}], 0xe8}], 0x1, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x39}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x4004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000171900000c000680080004"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4040004) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000080)={0x9c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4bef}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9abb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1a}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000700)={0x0, 0x5}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000780)={r5, 0x1ab, 0x7}, &(0x7f00000007c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) kernel console output (not intermixed with test programs): cated]: syz.3.45 (pid 6119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.716575][ T6119] Use struct sctp_sack_info instead [ 81.252182][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'. [ 81.268767][ T6138] netlink: 68 bytes leftover after parsing attributes in process `syz.1.47'. [ 81.390515][ T6142] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 81.391703][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 81.530370][ T6149] Illegal XDP return value 98 on prog (id 24) dev N/A, expect packet loss! [ 82.118438][ T6160] netlink: 84 bytes leftover after parsing attributes in process `syz.3.53'. [ 82.188335][ T6162] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 82.356481][ T6137] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 82.358876][ T6141] hsr_slave_0: left promiscuous mode [ 82.359144][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'. [ 82.381409][ T6141] hsr_slave_1: left promiscuous mode [ 82.417427][ T6145] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 82.459851][ T6169] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 82.483945][ T6163] bond1 (unregistering): Released all slaves [ 82.496178][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 82.619739][ T6167] vlan2: entered promiscuous mode [ 82.625369][ T6167] team_slave_1: entered promiscuous mode [ 82.831115][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 83.191755][ T6194] xt_connbytes: Forcing CT accounting to be enabled [ 83.206451][ T6194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.258390][ T6190] syzkaller0: entered promiscuous mode [ 83.268018][ T6202] netlink: 76 bytes leftover after parsing attributes in process `syz.3.61'. [ 83.292282][ T6190] syzkaller0: entered allmulticast mode [ 83.512879][ T6213] netlink: 'syz.3.67': attribute type 10 has an invalid length. [ 83.630495][ T6213] veth0_vlan: left promiscuous mode [ 83.647023][ T6213] veth0_vlan: entered promiscuous mode [ 83.666974][ T6213] team0: Device veth0_vlan failed to register rx_handler [ 83.849664][ T6228] netlink: 'syz.0.71': attribute type 11 has an invalid length. [ 83.893440][ T6231] bond1: option arp_interval: invalid value (18446744073709551615) [ 83.904249][ T6231] bond1: option arp_interval: allowed values 0 - 2147483647 [ 83.915130][ T6231] bond1 (unregistering): Released all slaves [ 84.039092][ T6239] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 84.065730][ T6243] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 84.078371][ T6240] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 84.313531][ T6239] team0: Port device dummy0 added [ 84.335965][ T6240] team0: Port device dummy0 removed [ 84.355863][ T6240] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.584994][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 84.713810][ T6266] bond1: option ad_actor_sys_prio: invalid value (0) [ 84.720718][ T6266] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 84.751952][ T6266] bond1 (unregistering): Released all slaves [ 84.959984][ T6286] veth0_to_bridge: entered promiscuous mode [ 85.184552][ T6283] veth0_to_bridge: left promiscuous mode [ 85.255152][ T6296] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 85.271105][ T6296] bond1 (unregistering): Released all slaves [ 85.339084][ T6302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.90'. [ 85.364992][ T6302] block nbd0: not configured, cannot reconfigure [ 85.587389][ T6311] netlink: 136 bytes leftover after parsing attributes in process `syz.1.94'. [ 85.975227][ T6336] warning: `syz.1.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.283237][ T6356] syz.0.107 uses obsolete (PF_INET,SOCK_PACKET) [ 86.312207][ T6356] __nla_validate_parse: 7 callbacks suppressed [ 86.312223][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 86.389486][ T6360] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 86.467739][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 86.740731][ T9] cfg80211: failed to load regulatory.db [ 88.183099][ T6405] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 88.496669][ T6408] netlink: 68 bytes leftover after parsing attributes in process `syz.3.118'. [ 88.564353][ T6423] netlink: 68 bytes leftover after parsing attributes in process `syz.0.120'. [ 88.956241][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.126'. [ 89.006124][ T6438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.133251][ T6447] syzkaller0: entered promiscuous mode [ 89.139661][ T6447] syzkaller0: entered allmulticast mode [ 89.669382][ T6487] netlink: 52 bytes leftover after parsing attributes in process `syz.2.138'. [ 89.705388][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 89.749123][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 89.755027][ T6492] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 89.785731][ T6492] netlink: 'syz.3.141': attribute type 4 has an invalid length. [ 89.798585][ T6492] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.141'. [ 89.809197][ T6495] netlink: 5 bytes leftover after parsing attributes in process `syz.1.142'. [ 89.818509][ T6495] 0{X: renamed from gretap0 (while UP) [ 89.836266][ T6496] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 89.850329][ T6496] netlink: 'syz.3.141': attribute type 4 has an invalid length. [ 89.873476][ T6495] 0{X: entered allmulticast mode [ 89.883529][ T6495] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 89.924560][ T6495] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.038661][ T6507] netlink: 'syz.4.146': attribute type 10 has an invalid length. [ 90.171185][ T6518] netlink: 'syz.1.147': attribute type 8 has an invalid length. [ 90.179670][ T6518] sch_fq: defrate 0 ignored. [ 90.232976][ T6509] netlink: 'syz.2.145': attribute type 3 has an invalid length. [ 90.348035][ T6526] netlink: 'syz.0.149': attribute type 6 has an invalid length. [ 90.371142][ T6526] Bluetooth: MGMT ver 1.23 [ 90.628402][ T6542] bridge1: entered promiscuous mode [ 90.659690][ T6542] bridge1: entered allmulticast mode [ 91.599904][ T6604] __nla_validate_parse: 4 callbacks suppressed [ 91.599920][ T6604] netlink: 96 bytes leftover after parsing attributes in process `syz.3.168'. [ 91.672244][ T6607] netlink: 'syz.3.168': attribute type 11 has an invalid length. [ 92.178223][ T6636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'. [ 92.199066][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 92.208104][ T6633] netlink: 312 bytes leftover after parsing attributes in process `syz.1.177'. [ 92.217856][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 92.230562][ T6633] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 92.265646][ T6639] netlink: 14 bytes leftover after parsing attributes in process `syz.2.179'. [ 92.337207][ T6636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'. [ 92.405608][ T6636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'. [ 92.421314][ T6633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.450333][ T6641] veth3: entered promiscuous mode [ 92.461097][ T6641] bond1: (slave veth3): Enslaving as an active interface with a down link [ 92.471014][ T6636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'. [ 92.528903][ T6636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'. [ 92.797919][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.812317][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.842007][ T6639] bond0 (unregistering): Released all slaves [ 93.237407][ T6676] syzkaller1: entered promiscuous mode [ 93.246833][ T6676] syzkaller1: entered allmulticast mode [ 93.327575][ T6681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.460726][ T6681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.553310][ T6681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.634134][ T6681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.785933][ T3877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.807668][ T3877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.865115][ T3877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.965838][ T6699] netlink: ct family unspecified [ 93.984686][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.084944][ T1324] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.208073][ T2983] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 95.354281][ T6761] sctp: [Deprecated]: syz.1.203 (pid 6761) Use of int in max_burst socket option. [ 95.354281][ T6761] Use struct sctp_assoc_value instead [ 95.394806][ T6763] validate_nla: 1 callbacks suppressed [ 95.394824][ T6763] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 95.638314][ T6775] bond1 (unregistering): Released all slaves [ 95.695784][ T6783] syzkaller0: entered promiscuous mode [ 95.701277][ T6783] syzkaller0: entered allmulticast mode [ 95.823615][ T6783] tipc: Started in network mode [ 95.832333][ T6783] tipc: Node identity 4ae7965763c8, cluster identity 4711 [ 95.845649][ T6783] tipc: Enabled bearer , priority 0 [ 95.874373][ T6782] tipc: Resetting bearer [ 95.909296][ T6782] tipc: Disabling bearer [ 96.097465][ T6809] macsec0: entered promiscuous mode [ 96.109417][ T6809] macsec0: entered allmulticast mode [ 96.116668][ T6812] bond0: (slave dummy0): Releasing backup interface [ 96.140285][ T6812] batman_adv: batadv0: Adding interface: dummy0 [ 96.194936][ T6812] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.251691][ T6812] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 96.437389][ T6829] syzkaller1: entered promiscuous mode [ 96.460507][ T6829] syzkaller1: entered allmulticast mode [ 96.641204][ T6852] __nla_validate_parse: 25 callbacks suppressed [ 96.641221][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.226'. [ 96.793256][ T6859] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 97.004858][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 97.068593][ T6880] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 97.421066][ T6892] dvmrp0: entered allmulticast mode [ 97.461023][ T6892] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:8 [ 97.638480][ T6903] netlink: 148 bytes leftover after parsing attributes in process `syz.1.238'. [ 97.648821][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 97.857732][ T6911] netlink: 'syz.3.239': attribute type 3 has an invalid length. [ 97.887720][ T6911] netlink: 3 bytes leftover after parsing attributes in process `syz.3.239'. [ 98.197011][ T30] audit: type=1800 audit(1766463955.047:2): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.246" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=346 res=0 errno=0 [ 98.534456][ T5901] IPVS: starting estimator thread 0... [ 98.595042][ T6962] netlink: 'syz.4.255': attribute type 39 has an invalid length. [ 98.634535][ T6955] IPVS: using max 51 ests per chain, 122400 per kthread [ 98.662834][ T6964] Bluetooth: MGMT ver 1.23 [ 98.669653][ T6949] tipc: Enabled bearer , priority 0 [ 98.677079][ T6949] syzkaller0: entered promiscuous mode [ 98.682639][ T6949] syzkaller0: entered allmulticast mode [ 98.739227][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 98.748954][ T6968] netlink: 'syz.0.256': attribute type 5 has an invalid length. [ 98.761329][ T6968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.256'. [ 98.797278][ T6968] geneve2: entered promiscuous mode [ 98.802521][ T6968] geneve2: entered allmulticast mode [ 98.829887][ T6950] Bluetooth: MGMT ver 1.23 [ 98.844780][ T6949] tipc: Resetting bearer [ 98.850687][ T5952] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 98.862949][ T6963] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 98.902395][ T5952] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 98.988396][ T6949] bond0: (slave gretap1): making interface the new active one [ 99.001088][ T6949] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 99.010001][ T5952] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 99.035397][ T6946] tipc: Resetting bearer [ 99.084948][ T6946] tipc: Disabling bearer [ 99.117007][ T5952] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 99.255970][ T6994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.261'. [ 99.316763][ T6997] x_tables: duplicate underflow at hook 2 [ 99.329121][ T6994] block nbd0: not configured, cannot reconfigure [ 99.333784][ T7002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.262'. [ 99.370966][ T7004] x_tables: duplicate underflow at hook 2 [ 99.749414][ T7001] geneve2: entered promiscuous mode [ 99.863199][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 100.511640][ T7062] syzkaller0: entered promiscuous mode [ 100.519607][ T7062] syzkaller0: entered allmulticast mode [ 100.527111][ T7061] tipc: Enabled bearer , priority 0 [ 100.573348][ T7063] tipc: Resetting bearer [ 100.601528][ T7063] tipc: Disabling bearer [ 100.860986][ T7074] syzkaller0: entered promiscuous mode [ 100.866576][ T7074] syzkaller0: entered allmulticast mode [ 100.973817][ T7078] syzkaller0: entered promiscuous mode [ 100.980316][ T7078] syzkaller0: entered allmulticast mode [ 101.466468][ T7107] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 101.482332][ T7106] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 101.551500][ T7108] netlink: 'syz.0.290': attribute type 10 has an invalid length. [ 101.560384][ T7108] dummy0: entered promiscuous mode [ 101.566160][ T7108] batman_adv: batadv0: Interface activated: dummy0 [ 101.573285][ T7108] batadv0: mtu less than device minimum [ 101.580636][ T7108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.592708][ T7108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.604570][ T7108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.616389][ T7108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.628243][ T7108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.640096][ T7108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.652074][ T7108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.707457][ T7108] batman_adv: batadv0: Interface deactivated: dummy0 [ 101.720710][ T7108] batman_adv: batadv0: Removing interface: dummy0 [ 101.729424][ T7108] bridge0: port 3(dummy0) entered blocking state [ 101.736464][ T7108] bridge0: port 3(dummy0) entered disabled state [ 101.743117][ T7108] dummy0: entered allmulticast mode [ 101.751771][ T7108] bridge0: port 3(dummy0) entered blocking state [ 101.758472][ T7108] bridge0: port 3(dummy0) entered forwarding state [ 101.809820][ T7106] vlan3: entered promiscuous mode [ 101.815194][ T7106] bond0: entered promiscuous mode [ 101.820434][ T7106] bond_slave_0: entered promiscuous mode [ 101.826351][ T7106] bond_slave_1: entered promiscuous mode [ 101.966778][ T39] IPVS: starting estimator thread 0... [ 102.072080][ T7117] IPVS: using max 36 ests per chain, 86400 per kthread [ 102.276964][ T7132] syzkaller1: entered promiscuous mode [ 102.282594][ T7132] syzkaller1: entered allmulticast mode [ 102.401855][ T7137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.411255][ T7137] team0: Port device bond1 added [ 102.831128][ T7166] __nla_validate_parse: 4 callbacks suppressed [ 102.831146][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 102.845063][ T7169] xt_hashlimit: max too large, truncated to 1048576 [ 103.176636][ T7182] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 103.220713][ T7182] bond2: entered promiscuous mode [ 103.226368][ T7182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.254964][ T7189] netlink: 'syz.3.311': attribute type 12 has an invalid length. [ 103.340966][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 103.689862][ T7201] tipc: Started in network mode [ 103.695311][ T7201] tipc: Node identity 127dd9170c2c, cluster identity 4711 [ 103.702769][ T7201] tipc: Enabled bearer , priority 0 [ 103.716757][ T7201] tipc: Resetting bearer [ 103.732130][ T7200] tipc: Disabling bearer [ 104.427241][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 104.651199][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 105.094792][ T7261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'. [ 105.116998][ T7261] vlan2: entered allmulticast mode [ 105.759372][ T7300] dvmrp6: entered allmulticast mode [ 105.858181][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 105.878633][ T7308] netlink: 'syz.2.343': attribute type 32 has an invalid length. [ 105.888851][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.342'. [ 105.914265][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.343'. [ 105.949153][ T7310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.344'. [ 105.959409][ T7310] netlink: 43 bytes leftover after parsing attributes in process `syz.4.344'. [ 105.969931][ T7310] netlink: 'syz.4.344': attribute type 6 has an invalid length. [ 105.996739][ T7308] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5) [ 106.010457][ T7313] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 106.051793][ T7306] netlink: 'syz.0.342': attribute type 1 has an invalid length. [ 106.101193][ T7318] netlink: 'syz.4.344': attribute type 4 has an invalid length. [ 106.178470][ T7310] netlink: 'syz.4.344': attribute type 4 has an invalid length. [ 106.637491][ T7338] tipc: Started in network mode [ 106.642664][ T7338] tipc: Node identity f6e504231313, cluster identity 4711 [ 106.650579][ T7338] tipc: Enabled bearer , priority 0 [ 106.666688][ T7325] x_tables: duplicate underflow at hook 2 [ 106.667172][ T7338] syzkaller0: entered promiscuous mode [ 106.679674][ T7338] syzkaller0: entered allmulticast mode [ 106.720702][ T7338] tipc: Resetting bearer [ 106.823963][ T7345] IPVS: length: 153 != 24 [ 106.845422][ T7332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 106.986011][ T7337] tipc: Resetting bearer [ 107.156974][ T7337] tipc: Disabling bearer [ 107.567561][ T7375] syzkaller0: entered promiscuous mode [ 107.573175][ T7375] syzkaller0: entered allmulticast mode [ 107.642584][ T7376] net_ratelimit: 13 callbacks suppressed [ 107.642601][ T7376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.665001][ T7380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.879813][ T7396] netlink: 'syz.3.365': attribute type 10 has an invalid length. [ 107.916509][ T7400] __nla_validate_parse: 5 callbacks suppressed [ 107.916528][ T7400] netlink: 220 bytes leftover after parsing attributes in process `syz.0.366'. [ 107.919707][ T7396] team0: Port device team_slave_0 removed [ 107.922865][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'. [ 108.200891][ T7406] team0 (unregistering): Port device team_slave_0 removed [ 108.214930][ T7406] team0 (unregistering): Port device team_slave_1 removed [ 108.226517][ T7406] team0 (unregistering): Port device bond1 removed [ 108.515757][ T7419] netlink: 'syz.2.370': attribute type 3 has an invalid length. [ 108.534906][ T7419] netlink: 'syz.2.370': attribute type 3 has an invalid length. [ 108.551600][ T7423] netlink: 'syz.0.371': attribute type 7 has an invalid length. [ 108.560813][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.370'. [ 109.001342][ T7438] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 109.027881][ T7438] bond3 (unregistering): Released all slaves [ 109.088880][ T7448] syz.4.376 (7448) used obsolete PPPIOCDETACH ioctl [ 109.313713][ T7451] netlink: 232 bytes leftover after parsing attributes in process `syz.2.380'. [ 109.313733][ T7453] netlink: 232 bytes leftover after parsing attributes in process `syz.2.380'. [ 109.730670][ T7471] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 109.758472][ T7471] bond0: (slave wlan1): Opening slave failed [ 110.031136][ T7490] syzkaller0: entered promiscuous mode [ 110.043488][ T7490] syzkaller0: entered allmulticast mode [ 110.317963][ T7507] syzkaller0: entered promiscuous mode [ 110.332528][ T7507] syzkaller0: entered allmulticast mode [ 110.510920][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 110.548148][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 110.652533][ T7528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.826456][ T7540] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.403'. [ 110.866323][ T7536] netlink: 'syz.0.402': attribute type 13 has an invalid length. [ 110.866347][ T7541] netlink: 'syz.0.402': attribute type 13 has an invalid length. [ 110.874681][ T7536] netlink: 'syz.0.402': attribute type 17 has an invalid length. [ 110.897380][ T7541] netlink: 'syz.0.402': attribute type 17 has an invalid length. [ 111.002218][ T7536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.054432][ T7549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.406'. [ 111.079410][ T7541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.218632][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 111.392317][ T7565] netlink: 'syz.0.412': attribute type 2 has an invalid length. [ 111.490757][ T7565] !9: entered promiscuous mode [ 112.789324][ T7611] bond1 (unregistering): Released all slaves [ 112.840245][ T7617] syzkaller0: entered promiscuous mode [ 112.846137][ T7617] syzkaller0: entered allmulticast mode [ 112.990869][ T7627] __nla_validate_parse: 2 callbacks suppressed [ 112.990886][ T7627] netlink: 2 bytes leftover after parsing attributes in process `syz.0.427'. [ 113.131626][ T7635] pimreg: entered allmulticast mode [ 113.931942][ T7670] validate_nla: 1 callbacks suppressed [ 113.931959][ T7670] netlink: 'syz.2.438': attribute type 3 has an invalid length. [ 113.979471][ T7670] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.005953][ T7670] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.132403][ T7675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.178889][ T7678] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 114.278567][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.286800][ T7678] batadv_slave_0: entered promiscuous mode [ 114.310360][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 114.383462][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 114.405674][ T7687] netlink: 'syz.1.442': attribute type 7 has an invalid length. [ 114.603472][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 114.612943][ T7687] netlink: 'syz.1.442': attribute type 7 has an invalid length. [ 114.654538][ T2983] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.676910][ T7696] netlink: 'syz.3.447': attribute type 39 has an invalid length. [ 114.695152][ T2983] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.705744][ T34] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.735937][ T34] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.882103][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 115.206460][ T7717] bond3: option arp_interval: invalid value (18446744073709551615) [ 115.217195][ T7717] bond3: option arp_interval: allowed values 0 - 2147483647 [ 115.234331][ T7717] bond3 (unregistering): Released all slaves [ 115.261671][ T7718] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 115.395491][ T7729] netlink: 300 bytes leftover after parsing attributes in process `syz.4.456'. [ 115.419498][ T7729] netlink: 'syz.4.456': attribute type 39 has an invalid length. [ 115.596576][ T7737] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 115.708351][ T7740] netlink: 'syz.2.461': attribute type 4 has an invalid length. [ 115.995444][ T7756] netlink: 48 bytes leftover after parsing attributes in process `syz.0.467'. [ 116.974546][ T52] Bluetooth: hci0: command tx timeout [ 117.821948][ T7828] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 117.930761][ T7828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.980570][ T7835] veth3: entered promiscuous mode [ 117.990792][ T7835] bond1: (slave veth3): Enslaving as an active interface with a down link [ 118.026220][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 118.058970][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.087660][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.237010][ T7848] netlink: 'syz.4.491': attribute type 13 has an invalid length. [ 118.245770][ T7848] netlink: 'syz.4.491': attribute type 17 has an invalid length. [ 118.358756][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.491'. [ 118.504717][ T7856] netlink: 104 bytes leftover after parsing attributes in process `syz.0.488'. [ 118.591708][ T7858] xt_l2tp: missing protocol rule (udp|l2tpip) [ 118.946724][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.954921][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.195254][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.553429][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 120.621838][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 120.631481][ T2983] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.653223][ T2983] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.713541][ T2983] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.737565][ T2983] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.973797][ T7923] netlink: 'syz.2.508': attribute type 3 has an invalid length. [ 120.992341][ T7923] netlink: 104 bytes leftover after parsing attributes in process `syz.2.508'. [ 121.117672][ T7928] netlink: 72 bytes leftover after parsing attributes in process `syz.0.510'. [ 121.440936][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 121.602650][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.520'. [ 121.691914][ T7963] x_tables: duplicate underflow at hook 1 [ 121.716878][ T7968] trusted_key: syz.0.523 sent an empty control message without MSG_MORE. [ 121.731814][ T7963] No such timeout policy "syz1" [ 121.824311][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.526'. [ 121.948170][ T7981] tipc: Enabled bearer , priority 0 [ 121.979155][ T7981] syzkaller0: entered promiscuous mode [ 121.986008][ T7981] syzkaller0: entered allmulticast mode [ 122.043454][ T7981] tipc: Resetting bearer [ 122.705732][ T7971] tipc: Resetting bearer [ 122.795644][ T7971] tipc: Disabling bearer [ 124.929081][ T7989] __nla_validate_parse: 1 callbacks suppressed [ 124.929099][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 125.125605][ T8004] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 125.378899][ T8021] netlink: 120 bytes leftover after parsing attributes in process `syz.3.534'. [ 125.389791][ T8021] netlink: 120 bytes leftover after parsing attributes in process `syz.3.534'. [ 125.448985][ T8029] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 125.530227][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.539769][ T8031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.649286][ T8036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.541'. [ 125.679237][ T8036] block nbd0: not configured, cannot reconfigure [ 125.724881][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 126.227555][ T8066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.318194][ T8076] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 126.326547][ T8075] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 126.395102][ T8050] netlink: 'syz.4.546': attribute type 6 has an invalid length. [ 126.488955][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 126.505506][ T8083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.553'. [ 126.523461][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 126.556635][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 126.574298][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 126.585093][ T8083] vlan4: entered allmulticast mode [ 126.591681][ T8088] netlink: 'syz.3.554': attribute type 13 has an invalid length. [ 126.715891][ T8095] --map-set only usable from mangle table [ 126.723169][ T8076] team0: Port device dummy0 added [ 126.736065][ T8076] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 126.744151][ T8077] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 126.755821][ T8090] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 126.793546][ T8076] team0: Port device dummy0 removed [ 126.799832][ T8082] syz.3.554 (8082) used greatest stack depth: 16712 bytes left [ 126.870791][ T8076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.336454][ T8115] tipc: Enabled bearer , priority 0 [ 127.367999][ T8115] syzkaller0: entered promiscuous mode [ 127.373988][ T8115] syzkaller0: entered allmulticast mode [ 127.406582][ T8115] tipc: Resetting bearer [ 127.424619][ T8114] tipc: Resetting bearer [ 127.460998][ T8114] tipc: Disabling bearer [ 127.736919][ T8124] bond3: entered allmulticast mode [ 127.742562][ T8124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.161032][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 128.736931][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.745154][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.912087][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.955131][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.125456][ T8151] bridge0: port 1(bridge_slave_0) entered learning state [ 129.159969][ T5953] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.173966][ T5953] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.194656][ T5953] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.213314][ T5953] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.409160][ T8174] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 129.444857][ T8172] block nbd0: server does not support multiple connections per device. [ 129.472206][ T8172] block nbd0: shutting down sockets [ 129.472529][ T8174] bond1: entered promiscuous mode [ 129.483392][ T8174] bond1: entered allmulticast mode [ 129.492110][ T8174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.670382][ T8213] rdma_op ffff88807becc1f0 conn xmit_rdma 0000000000000000 [ 130.678706][ T8204] __nla_validate_parse: 4 callbacks suppressed [ 130.678719][ T8204] netlink: 72 bytes leftover after parsing attributes in process `syz.1.573'. [ 130.695693][ T8204] netlink: 72 bytes leftover after parsing attributes in process `syz.1.573'. [ 130.710019][ T8219] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 130.759286][ T8219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.767896][ T8220] netlink: 72 bytes leftover after parsing attributes in process `syz.1.573'. [ 130.777339][ T8220] netlink: 72 bytes leftover after parsing attributes in process `syz.1.573'. [ 130.803573][ T8219] team0: entered promiscuous mode [ 130.824212][ T8219] team_slave_0: entered promiscuous mode [ 130.841960][ T8219] team_slave_1: entered promiscuous mode [ 130.848438][ T8219] team0: entered allmulticast mode [ 130.853564][ T8219] team_slave_0: entered allmulticast mode [ 130.874151][ T8219] team_slave_1: entered allmulticast mode [ 130.894504][ T8219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.924218][ T8224] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 130.954720][ T8219] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 130.979777][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 131.114132][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.146627][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 131.207686][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.584'. [ 131.294133][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.315585][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 131.382529][ T8246] No such timeout policy "syz1" [ 131.442872][ T8243] xt_CT: No such helper "snmp_trap" [ 131.448826][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.479048][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 131.492384][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'. [ 131.604549][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.624167][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 131.839614][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'. [ 131.852153][ T8268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.595'. [ 131.876544][ T8258] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.592'. [ 131.929520][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 132.494532][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 132.779573][ T8329] can: request_module (can-proto-4) failed. [ 133.345189][ T8373] netlink: 'syz.4.618': attribute type 4 has an invalid length. [ 133.357506][ T8373] netlink: 'syz.4.618': attribute type 4 has an invalid length. [ 134.467432][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.480808][ T8434] xt_TCPMSS: Only works on TCP SYN packets [ 134.680724][ T8448] netlink: 'syz.2.641': attribute type 4 has an invalid length. [ 134.698815][ T30] audit: type=1800 audit(1766463991.557:3): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.640" name=CB dev="tmpfs" ino=702 res=0 errno=0 [ 135.066843][ T8487] netlink: 'syz.3.647': attribute type 6 has an invalid length. [ 135.353482][ T8500] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 135.563680][ T8512] netlink: 'syz.0.655': attribute type 29 has an invalid length. [ 135.587664][ T8512] netlink: 'syz.0.655': attribute type 29 has an invalid length. [ 135.810221][ T8527] __nla_validate_parse: 22 callbacks suppressed [ 135.810237][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 135.912485][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 135.922571][ T132] net_ratelimit: 99 callbacks suppressed [ 135.922587][ T132] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.944398][ T8527] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 135.953621][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 135.966716][ T8535] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 135.986037][ T5953] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 135.988742][ T8517] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 136.020061][ T5953] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.045068][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.064182][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.068165][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.656'. [ 136.084132][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.118764][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 136.134435][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.136093][ T8517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.154206][ T5952] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.180369][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.210138][ T8543] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 136.210934][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 136.253493][ T8528] bond3: entered promiscuous mode [ 136.259370][ T8528] bond3: entered allmulticast mode [ 136.382719][ T8551] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.400076][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 136.474852][ T8551] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 136.518055][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 136.749568][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 136.802990][ T8573] bond0: (slave wlan1): Opening slave failed [ 136.917917][ T8582] tipc: Enabling of bearer rejected, failed to enable media [ 136.973892][ T8580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.027480][ T8586] bond2: (slave veth5): Enslaving as an active interface with a down link [ 137.071953][ T8580] bond2: entered allmulticast mode [ 137.221757][ T8594] can: request_module (can-proto-3) failed. [ 137.288361][ T8603] netlink: 96 bytes leftover after parsing attributes in process `syz.3.676'. [ 137.336878][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.670'. [ 137.344496][ T8604] syzkaller0: entered promiscuous mode [ 137.351209][ T8604] syzkaller0: entered allmulticast mode [ 138.172712][ T8635] veth0: entered promiscuous mode [ 138.178632][ T8634] veth0: left promiscuous mode [ 138.371685][ T8651] validate_nla: 3 callbacks suppressed [ 138.371701][ T8651] netlink: 'syz.2.689': attribute type 12 has an invalid length. [ 138.705110][ T8670] netlink: 'syz.1.696': attribute type 6 has an invalid length. [ 138.733513][ T8670] team0: Device ip6tnl1 is of different type [ 139.202210][ T8688] bridge0: entered promiscuous mode [ 139.235992][ T8688] bridge0: port 3(macvtap1) entered blocking state [ 139.246242][ T8688] bridge0: port 3(macvtap1) entered disabled state [ 139.252965][ T8688] macvtap1: entered allmulticast mode [ 139.258516][ T8688] bridge0: entered allmulticast mode [ 139.270759][ T8688] macvtap1: left allmulticast mode [ 139.300596][ T8688] bridge0: left allmulticast mode [ 139.312142][ T8688] bridge0: left promiscuous mode [ 139.405376][ T8695] tipc: Enabling of bearer rejected, failed to enable media [ 139.457232][ T8704] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 139.576464][ T8710] netlink: 'syz.2.704': attribute type 3 has an invalid length. [ 139.813058][ T8715] netlink: 'syz.3.705': attribute type 11 has an invalid length. [ 139.855907][ T8717] tipc: Enabled bearer , priority 0 [ 139.876479][ T8717] syzkaller0: entered promiscuous mode [ 139.890830][ T8717] syzkaller0: entered allmulticast mode [ 139.921902][ T8717] tipc: Resetting bearer [ 139.929972][ T8718] bond0: ARP target 170.170.170.170 is already present [ 139.937232][ T8718] bond0: option arp_ip_target: invalid value (2863311530) [ 139.968017][ T8716] tipc: Resetting bearer [ 140.018210][ T8716] tipc: Disabling bearer [ 140.475230][ T8750] ip6tnl2: entered allmulticast mode [ 140.964219][ T3495] net_ratelimit: 138 callbacks suppressed [ 140.964236][ T3495] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 140.989669][ T3495] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 141.046566][ T8776] __nla_validate_parse: 13 callbacks suppressed [ 141.046587][ T8776] netlink: 36 bytes leftover after parsing attributes in process `syz.2.724'. [ 141.104495][ T3972] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.136622][ T3972] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.148016][ T8776] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 141.161634][ T3972] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 141.188736][ T8776] bond0: entered promiscuous mode [ 141.202173][ T8776] gretap1: entered promiscuous mode [ 141.219633][ T8776] batadv0: entered promiscuous mode [ 141.228400][ T8776] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 141.239133][ T8776] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 141.251297][ T8776] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 141.275445][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.294399][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 141.327018][ T8802] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 141.418612][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.476445][ T132] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.528862][ T8818] netlink: 108 bytes leftover after parsing attributes in process `syz.4.733'. [ 141.646873][ T8826] netlink: 76 bytes leftover after parsing attributes in process `syz.4.734'. [ 141.808168][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.817160][ T8835] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 141.840639][ T8831] bond0: (slave rose0): Enslaving as an active interface with an up link [ 142.017993][ T8851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.739'. [ 142.242427][ T8871] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 142.370427][ T8879] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.748'. [ 142.460878][ T8857] netlink: 'syz.1.742': attribute type 8 has an invalid length. [ 142.542293][ T8891] IPVS: length: 48 != 24 [ 142.785109][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 142.794835][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 142.843233][ T8909] veth3: entered allmulticast mode [ 143.538078][ T8943] bond0: (slave sit0): Error: Device type is different from other slaves [ 143.578895][ T8946] syzkaller0: entered promiscuous mode [ 143.592089][ T8946] syzkaller0: entered allmulticast mode [ 143.938601][ T8975] netlink: 272 bytes leftover after parsing attributes in process `syz.3.770'. [ 143.951494][ T8974] netlink: 'syz.2.771': attribute type 12 has an invalid length. [ 143.967390][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 143.974532][ T8977] netlink: 'syz.2.771': attribute type 12 has an invalid length. [ 143.983020][ T8974] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.771'. [ 144.000280][ T8977] syzkaller0: entered promiscuous mode [ 144.032722][ T8977] syzkaller0: entered allmulticast mode [ 144.055450][ T8981] 0{X: renamed from gretap0 (while UP) [ 144.065542][ T8981] 0{X: entered allmulticast mode [ 146.036834][ T60] net_ratelimit: 115 callbacks suppressed [ 146.036853][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.075030][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.086592][ T9046] infiniband syz1: set active [ 146.091833][ T9070] __nla_validate_parse: 8 callbacks suppressed [ 146.091848][ T9070] netlink: 68 bytes leftover after parsing attributes in process `syz.2.795'. [ 146.112568][ T9046] infiniband syz1: added bond0 [ 146.117466][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.134665][ T5952] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.148208][ T5952] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 146.209330][ T9046] RDS/IB: syz1: added [ 146.233970][ T9046] smc: adding ib device syz1 with port count 1 [ 146.248384][ T9046] smc: ib device syz1 port 1 has no pnetid [ 146.282920][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 146.307020][ T9076] netlink: 'syz.3.796': attribute type 8 has an invalid length. [ 146.317646][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.344560][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 146.455690][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.463572][ T1324] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 146.577424][ T5953] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.652633][ T9093] netlink: 68 bytes leftover after parsing attributes in process `syz.4.799'. [ 146.733339][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 146.954190][ T9093] hsr_slave_0: left promiscuous mode [ 146.962605][ T9093] hsr_slave_1: left promiscuous mode [ 147.115432][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 147.287065][ T9110] netlink: 76 bytes leftover after parsing attributes in process `syz.2.805'. [ 148.167381][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 148.192598][ T9154] netlink: 72 bytes leftover after parsing attributes in process `syz.2.810'. [ 148.633405][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.814'. [ 148.676600][ T10] IPVS: starting estimator thread 0... [ 148.806326][ T9190] IPVS: using max 30 ests per chain, 72000 per kthread [ 148.887919][ T9203] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 149.053208][ T9210] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20003 [ 149.089766][ T9213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.820'. [ 150.050586][ T9233] netlink: 'syz.0.825': attribute type 27 has an invalid length. [ 150.741943][ T9264] pim6reg: entered allmulticast mode [ 150.772029][ T9260] pim6reg: left allmulticast mode [ 150.934636][ T9271] netlink: 'syz.4.836': attribute type 10 has an invalid length. [ 151.036635][ T9276] bridge0: port 3(dummy0) entered disabled state [ 151.043148][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.044174][ T5950] net_ratelimit: 179 callbacks suppressed [ 151.044189][ T5950] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.050763][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.078517][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.129645][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.154321][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.186066][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.215779][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.231725][ T9276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.244142][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.257498][ T9276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.265067][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.284580][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.325945][ T1324] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.482592][ T9271] team0: Device veth1_macvtap failed to register rx_handler [ 151.519926][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.545391][ T9292] __nla_validate_parse: 4 callbacks suppressed [ 151.545408][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.841'. [ 151.560559][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 151.593001][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.602662][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 151.623543][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.636549][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 151.666593][ T9297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.842'. [ 151.684692][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.696198][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 151.718299][ T30] audit: type=1107 audit(1766464008.577:4): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.741467][ T30] audit: type=1107 audit(1766464008.597:5): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.775496][ T9304] netlink: 'syz.2.844': attribute type 21 has an invalid length. [ 151.783278][ T9304] netlink: 128 bytes leftover after parsing attributes in process `syz.2.844'. [ 151.793919][ T30] audit: type=1107 audit(1766464008.597:6): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.809756][ T9304] netlink: 'syz.2.844': attribute type 5 has an invalid length. [ 151.818515][ T30] audit: type=1107 audit(1766464008.597:7): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.832524][ T9304] netlink: 'syz.2.844': attribute type 6 has an invalid length. [ 151.842916][ T30] audit: type=1107 audit(1766464008.597:8): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.857662][ T9305] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 151.867231][ T30] audit: type=1107 audit(1766464008.597:9): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.871815][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 151.880233][ T9304] netlink: 3 bytes leftover after parsing attributes in process `syz.2.844'. [ 151.899910][ T30] audit: type=1107 audit(1766464008.597:10): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.912666][ T30] audit: type=1107 audit(1766464008.597:11): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.926781][ T9294] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 151.926859][ T30] audit: type=1107 audit(1766464008.597:12): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.950175][ T9307] bridge_slave_1: left allmulticast mode [ 151.955530][ T30] audit: type=1107 audit(1766464008.597:13): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 151.970168][ T9307] bridge_slave_1: left promiscuous mode [ 151.978889][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.997749][ T9307] bridge_slave_0: left promiscuous mode [ 152.004781][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.067340][ T9304] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 152.167425][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 152.207620][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.215380][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.351192][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 152.367071][ T9297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.387267][ T9297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.538640][ T5950] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.547872][ T5950] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.559914][ T5950] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.569058][ T5950] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.799169][ T9336] bond0: (slave wg0): Error: Device type is different from other slaves [ 152.807857][ T9334] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 152.817023][ T9336] syzkaller1: entered promiscuous mode [ 152.826544][ T9336] syzkaller1: entered allmulticast mode [ 152.904607][ T9334] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 153.114588][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'. [ 153.313296][ T9362] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 153.451500][ T9363] wireguard0: entered promiscuous mode [ 153.467720][ T9363] wireguard0: entered allmulticast mode [ 153.480076][ T9362] bridge0: port 4(macsec0) entered blocking state [ 153.487194][ T9362] bridge0: port 4(macsec0) entered disabled state [ 153.506238][ T9362] macsec0: entered allmulticast mode [ 153.516769][ T9362] veth1_macvtap: entered allmulticast mode [ 153.545990][ T9362] macsec0: entered promiscuous mode [ 153.654854][ T9374] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 154.945618][ T9405] pim6reg: entered allmulticast mode [ 154.980894][ T9405] pim6reg: left allmulticast mode [ 154.985318][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.871'. [ 155.051562][ T9413] pim6reg: entered allmulticast mode [ 155.106957][ T9418] nftables ruleset with unbound chain [ 155.295309][ T9423] tipc: Enabled bearer , priority 0 [ 155.302667][ T9424] tipc: Enabling of bearer rejected, already enabled [ 155.825439][ T9445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 156.252094][ T9469] batadv1: entered promiscuous mode [ 156.427852][ T5901] tipc: Node number set to 3858105379 [ 156.560167][ T9478] __nla_validate_parse: 2 callbacks suppressed [ 156.560184][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 156.607418][ T9478] netlink: 192 bytes leftover after parsing attributes in process `syz.2.888'. [ 156.722282][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 156.792284][ T9495] bond3: entered promiscuous mode [ 156.802550][ T9495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.820036][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 158.340038][ T9550] syzkaller0: entered promiscuous mode [ 158.350745][ T9550] syzkaller0: entered allmulticast mode [ 158.772466][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.783223][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.792314][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 158.906492][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 159.222139][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 159.222155][ T30] audit: type=1800 audit(1766464016.077:37): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.917" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1120 res=0 errno=0 [ 159.233511][ T9582] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 159.283604][ T9582] netlink: 224 bytes leftover after parsing attributes in process `syz.2.917'. [ 159.372182][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.403806][ T9591] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.413999][ T9591] bridge0: port 3(dummy0) entered blocking state [ 159.420697][ T9591] bridge0: port 3(dummy0) entered forwarding state [ 159.432906][ T9591] net_ratelimit: 55 callbacks suppressed [ 159.432917][ T9591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.508347][ T9596] IPVS: Error connecting to the multicast addr [ 159.587764][ T30] audit: type=1804 audit(1766464016.447:38): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.921" name="/newroot/181/cgroup.controllers" dev="tmpfs" ino=956 res=1 errno=0 [ 159.631726][ T9611] netlink: 64 bytes leftover after parsing attributes in process `syz.3.919'. [ 159.652301][ T30] audit: type=1800 audit(1766464016.477:39): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.921" name="cgroup.controllers" dev="tmpfs" ino=956 res=0 errno=0 [ 159.730833][ T30] audit: type=1800 audit(1766464016.477:40): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.921" name="cgroup.controllers" dev="tmpfs" ino=956 res=0 errno=0 [ 159.766545][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'. [ 159.777870][ T9615] bridge_slave_0: default FDB implementation only supports local addresses [ 159.928235][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'. [ 160.190991][ T9621] IPVS: Scheduler module ip_vs_sip not found [ 160.309862][ T9647] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 160.352897][ T9647] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 160.416038][ T9659] team_slave_0: left promiscuous mode [ 160.421552][ T9659] team_slave_0: left allmulticast mode [ 160.432209][ T9659] team0 (unregistering): Port device team_slave_0 removed [ 160.442074][ T9659] team_slave_1: left promiscuous mode [ 160.447645][ T9659] team_slave_1: left allmulticast mode [ 160.458920][ T9659] team0 (unregistering): Port device team_slave_1 removed [ 160.649760][ T9672] netlink: 'syz.0.942': attribute type 11 has an invalid length. [ 160.709515][ T9670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.543250][ T9723] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 161.556790][ T9723] netlink: 'syz.3.958': attribute type 298 has an invalid length. [ 161.886222][ T9734] __nla_validate_parse: 8 callbacks suppressed [ 161.886238][ T9734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.961'. [ 161.917360][ T9734] pim6reg1: entered promiscuous mode [ 161.922783][ T9734] pim6reg1: entered allmulticast mode [ 162.017900][ T9738] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 162.383512][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 162.401319][ T9756] netlink: 'syz.3.969': attribute type 39 has an invalid length. [ 162.411364][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 162.525423][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 162.673439][ T9774] batadv_slave_1: entered promiscuous mode [ 162.818196][ T1324] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 162.893044][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 163.149453][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 163.519336][ T9772] batadv_slave_1: left promiscuous mode [ 163.695492][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.982'. [ 163.803329][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.984'. [ 163.844297][ T9820] netlink: 64 bytes leftover after parsing attributes in process `syz.0.983'. [ 163.953157][ T9828] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 164.024282][ T9828] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 164.032363][ T9828] tipc: Resetting bearer [ 164.075354][ T1324] tipc: Resetting bearer [ 164.103369][ T9839] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 164.136296][ T9831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.986'. [ 196.254843][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 196.265799][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 196.265833][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 196.271819][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 225.867485][ T9936] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 225.977812][ T9949] __nla_validate_parse: 25 callbacks suppressed [ 225.977828][ T9949] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1017'. [ 226.002156][ T9949] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1017'. [ 226.109846][ T9963] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 226.116042][ T9963] syzkaller1: linktype set to 825 [ 226.809575][ T9978] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 226.976771][ T9980] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 227.030820][ T9982] ipvlan0: entered promiscuous mode [ 227.040199][ T9982] ipvlan0: entered allmulticast mode [ 227.055502][ T9982] geneve1: entered allmulticast mode [ 227.061452][ T9983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.344832][T10031] xt_connbytes: Forcing CT accounting to be enabled [ 228.968602][T10069] IPVS: length: 35 != 26904 [ 229.087604][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 229.127921][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 229.154720][T10084] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1053'. [ 229.198143][T10091] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 229.233575][T10091] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1055'. [ 229.281039][T10063] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 229.508749][T10111] netlink: 'syz.4.1059': attribute type 8 has an invalid length. [ 229.773926][T10129] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 229.869207][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 229.877143][T10129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.055068][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 230.084311][T10141] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 230.327161][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 230.328165][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 230.678410][T10176] netlink: 'syz.3.1077': attribute type 11 has an invalid length. [ 231.172994][T10182] __nla_validate_parse: 6 callbacks suppressed [ 231.173011][T10182] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1079'. [ 231.243231][T10199] netlink: 'syz.3.1083': attribute type 2 has an invalid length. [ 231.360970][T10211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1085'. [ 231.424597][T10196] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1081'. [ 232.549859][T10247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 232.605531][T10245] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 232.773465][T10261] x_tables: duplicate underflow at hook 1 [ 232.914224][T10269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1102'. [ 232.916861][T10271] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 233.190757][T10292] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1108'. [ 233.224947][T10294] netlink: 'syz.3.1104': attribute type 12 has an invalid length. [ 233.826913][T10316] netlink: 'syz.1.1110': attribute type 298 has an invalid length. [ 234.053551][T10326] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 234.054145][ T3877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.070823][T10326] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1112'. [ 234.081181][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 234.095629][ T3877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.124447][ T3877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.132674][ T3877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.574424][ T5986] IPVS: starting estimator thread 0... [ 234.588400][T10337] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 234.664130][T10354] IPVS: using max 24 ests per chain, 57600 per kthread [ 234.665814][T10360] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 234.738818][T10360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.771078][T10357] bond4: (slave gretap1): making interface the new active one [ 234.780975][T10357] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 234.861050][T10363] syzkaller0: entered promiscuous mode [ 234.866728][T10363] syzkaller0: entered allmulticast mode [ 234.910406][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 235.340515][T10363] IPv6: addrconf: prefix option has invalid lifetime [ 235.525740][T10374] tipc: Resetting bearer [ 235.997581][T10381] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.101095][T10381] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.486317][T10381] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.615615][T10381] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.694003][T10402] delete_channel: no stack [ 236.813859][ T34] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.848709][T10410] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.1136'. [ 236.882418][ T34] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.921651][ T3877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.997075][T10417] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1138'. [ 237.007565][ T34] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.305537][T10431] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 237.419397][T10432] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 237.445864][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.461054][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.471758][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.493236][T10438] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 237.544369][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 237.589263][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.648062][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 237.679841][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.692701][T10445] netlink: 125 bytes leftover after parsing attributes in process `syz.4.1145'. [ 237.714569][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.724338][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 237.756123][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.776432][T10438] wg1 speed is unknown, defaulting to 1000 [ 237.789915][T10454] ip6gre1: entered promiscuous mode [ 237.812808][T10454] ip6gre1: entered allmulticast mode [ 237.829351][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.839929][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 237.855283][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.863376][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.900205][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 238.039454][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.130571][T10451] wg1 speed is unknown, defaulting to 1000 [ 238.357091][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 238.370213][T10471] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 238.597464][T10483] netlink: 'syz.4.1152': attribute type 3 has an invalid length. [ 238.634403][T10483] netlink: 'syz.4.1152': attribute type 1 has an invalid length. [ 238.644787][T10483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1152'. [ 238.654938][ T5986] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.663309][T10483] NCSI netlink: No device for ifindex 23016 [ 239.137871][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 239.254991][T10479] wg1 speed is unknown, defaulting to 1000 [ 239.322492][T10460] wg1 speed is unknown, defaulting to 1000 [ 239.623969][T10511] Bluetooth: MGMT ver 1.23 [ 240.062951][T10516] tipc: Enabling of bearer rejected, failed to enable media [ 240.072787][T10521] syzkaller0: entered promiscuous mode [ 240.078626][T10521] syzkaller0: entered allmulticast mode [ 240.926700][T10550] wg1 speed is unknown, defaulting to 1000 [ 241.170405][T10561] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 241.188890][T10563] netlink: 'syz.4.1172': attribute type 10 has an invalid length. [ 241.203663][T10563] bond0: (slave wlan1): Opening slave failed [ 241.349843][T10567] bridge0: entered promiscuous mode [ 241.415080][T10575] macsec0: left allmulticast mode [ 241.420152][T10575] veth1_macvtap: left allmulticast mode [ 241.434498][T10575] macsec0: left promiscuous mode [ 241.439905][T10575] bridge0: port 4(macsec0) entered disabled state [ 241.475892][T10575] dummy0: left promiscuous mode [ 241.480915][T10575] bridge0: port 3(dummy0) entered disabled state [ 241.511243][T10575] bridge_slave_1: left allmulticast mode [ 241.519028][T10575] bridge_slave_1: left promiscuous mode [ 241.525812][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.536011][T10575] bridge_slave_0: left allmulticast mode [ 241.541675][T10575] bridge_slave_0: left promiscuous mode [ 241.547723][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.875425][T10599] xt_cluster: node mask cannot exceed total number of nodes [ 241.901300][T10599] x_tables: duplicate underflow at hook 2 [ 242.079640][T10606] __nla_validate_parse: 5 callbacks suppressed [ 242.079657][T10606] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1183'. [ 242.175588][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 242.184631][T10610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.192647][T10610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.254217][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.316265][T10620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1187'. [ 242.441591][T10610] batadv0 (unregistering): left promiscuous mode [ 242.761101][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'. [ 243.105620][T10656] netlink: 'syz.0.1197': attribute type 14 has an invalid length. [ 243.246998][T10661] pim6reg1: entered promiscuous mode [ 243.262791][T10661] pim6reg1: entered allmulticast mode [ 243.432996][T10669] netlink: 'syz.1.1202': attribute type 12 has an invalid length. [ 243.441091][T10669] netlink: 'syz.1.1202': attribute type 29 has an invalid length. [ 243.444422][ T5837] Bluetooth: hci4: link tx timeout [ 243.457916][ T5837] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 243.466266][ T5837] Bluetooth: hci4: link tx timeout [ 243.471385][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 243.647963][T10669] netlink: 'syz.1.1202': attribute type 8 has an invalid length. [ 243.719511][T10669] netlink: 'syz.1.1202': attribute type 6 has an invalid length. [ 243.727495][T10669] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1202'. [ 243.745310][T10671] wg1 speed is unknown, defaulting to 1000 [ 243.750987][T10674] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 243.764467][T10674] netlink: 'syz.1.1202': attribute type 2 has an invalid length. [ 244.478432][T10721] netlink: 'syz.0.1213': attribute type 4 has an invalid length. [ 244.793688][T10736] netlink: 'syz.0.1218': attribute type 2 has an invalid length. [ 244.830684][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1220'. [ 244.857142][T10746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.046987][T10758] netlink: 'syz.1.1221': attribute type 11 has an invalid length. [ 245.058124][T10758] xt_l2tp: v2 tid > 0xffff: 37482740 [ 245.063874][T10760] netlink: 'syz.2.1223': attribute type 13 has an invalid length. [ 245.210299][T10773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1227'. [ 245.568151][T10792] netlink: 'syz.4.1230': attribute type 4 has an invalid length. [ 245.576585][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 245.624345][T10790] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 245.647022][T10771] tc_dump_action: action bad kind [ 245.767409][T10799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 245.806895][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1232'. [ 245.838774][T10805] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 245.875632][T10801] pimreg: entered allmulticast mode [ 245.909695][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 245.976259][T10811] macvtap1: entered promiscuous mode [ 245.981576][T10811] syz_tun: entered promiscuous mode [ 245.988734][T10811] macvtap1: entered allmulticast mode [ 245.998190][T10811] syz_tun: entered allmulticast mode [ 246.018734][T10811] syz_tun: left allmulticast mode [ 246.027654][T10811] syz_tun: left promiscuous mode [ 246.298901][T10815] wg1 speed is unknown, defaulting to 1000 [ 246.760755][T10843] delete_channel: no stack [ 247.232970][T10882] __nla_validate_parse: 3 callbacks suppressed [ 247.232987][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 247.614322][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 247.966935][T10808] wg1 speed is unknown, defaulting to 1000 [ 248.186627][T10860] wg1 speed is unknown, defaulting to 1000 [ 248.815076][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1263'. [ 248.957280][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'. [ 248.966564][T10919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'. [ 249.084452][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 249.140907][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1266'. [ 249.498262][T10939] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 249.542386][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 249.552000][T10939] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1272'. [ 249.562482][T10939] tipc: Enabling of bearer rejected, already enabled [ 249.657015][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 249.725160][T10936] wg1 speed is unknown, defaulting to 1000 [ 249.788797][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1275'. [ 250.034720][T10952] validate_nla: 1 callbacks suppressed [ 250.034736][T10952] netlink: 'syz.3.1277': attribute type 13 has an invalid length. [ 250.110349][T10952] macvtap0: entered promiscuous mode [ 250.134390][T10952] macvtap0: refused to change device tx_queue_len [ 251.042638][T10987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.134219][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.411322][T11024] x_tables: duplicate underflow at hook 3 [ 251.918209][ T3877] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 251.926251][ T3877] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 251.944452][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 252.098289][T11066] netlink: 'syz.0.1313': attribute type 7 has an invalid length. [ 252.115247][T11066] netlink: 'syz.0.1313': attribute type 7 has an invalid length. [ 252.115294][ T2983] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.175290][ T2983] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.201434][ T2983] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.218476][ T2983] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.324273][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 252.334317][T11081] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 252.354518][T11081] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 252.486732][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 252.645332][T11093] __nla_validate_parse: 18 callbacks suppressed [ 252.645349][T11093] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1322'. [ 252.739656][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 253.046207][ T34] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.155909][ T34] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.299325][ T34] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.380887][ T34] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.667686][ T34] dvmrp0 (unregistering): left allmulticast mode [ 253.680770][ T34] dvmrp6 (unregistering): left allmulticast mode [ 254.654006][ T3877] smc: removing ib device syz1 [ 254.666747][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.676050][ T34] bond_slave_0: left promiscuous mode [ 254.682609][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.691633][ T34] bond_slave_1: left promiscuous mode [ 254.697824][ T34] bond0 (unregistering): Released all slaves [ 254.709776][ T34] bond1 (unregistering): Released all slaves [ 255.276699][ T34] !9: left promiscuous mode [ 255.348574][ T34] tipc: Left network mode [ 255.555253][ T34] hsr_slave_0: left promiscuous mode [ 255.561070][ T34] hsr_slave_1: left promiscuous mode [ 255.566912][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.574713][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.601142][ T34] pimreg (unregistering): left allmulticast mode [ 255.786579][ T34] team0 (unregistering): Port device team_slave_1 removed [ 255.818713][ T34] team0 (unregistering): Port device team_slave_0 removed [ 269.694256][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.894247][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.426159][T11123] vxcan1: entered promiscuous mode [ 317.643875][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.653943][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.661739][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.671257][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.680025][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.690191][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.698961][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.708021][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.716543][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.723598][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.732820][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.741794][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.749297][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.758630][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.770713][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.817105][T11132] wg1 speed is unknown, defaulting to 1000 [ 317.912512][T11133] wg1 speed is unknown, defaulting to 1000 [ 317.930666][T11131] wg1 speed is unknown, defaulting to 1000 [ 318.085754][T11149] syzkaller0: entered promiscuous mode [ 318.091258][T11149] syzkaller0: entered allmulticast mode [ 318.144863][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 318.334934][T11161] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 319.237128][T11161] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 319.501361][T11132] chnl_net:caif_netlink_parms(): no params data found [ 319.659377][T11185] syz_tun: entered allmulticast mode [ 319.673061][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 319.702274][T11133] chnl_net:caif_netlink_parms(): no params data found [ 319.729467][T11185] syz_tun (unregistering): left allmulticast mode [ 319.774649][ T5848] Bluetooth: hci1: command tx timeout [ 319.797911][T11131] chnl_net:caif_netlink_parms(): no params data found [ 319.854274][ T5848] Bluetooth: hci0: command tx timeout [ 319.854581][ T5849] Bluetooth: hci2: command tx timeout [ 319.914872][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.922028][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.932346][T11132] bridge_slave_0: entered allmulticast mode [ 319.945435][T11132] bridge_slave_0: entered promiscuous mode [ 319.964932][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.972086][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.987165][T11132] bridge_slave_1: entered allmulticast mode [ 320.035913][T11132] bridge_slave_1: entered promiscuous mode [ 320.079453][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1365'. [ 320.143940][T11211] netlink: 'syz.4.1366': attribute type 29 has an invalid length. [ 320.165227][T11133] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.172392][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.185000][T11133] bridge_slave_0: entered allmulticast mode [ 320.195449][T11133] bridge_slave_0: entered promiscuous mode [ 320.426227][T11133] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.433384][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.447425][T11133] bridge_slave_1: entered allmulticast mode [ 320.465212][T11133] bridge_slave_1: entered promiscuous mode [ 320.476093][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.522335][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.608690][T11133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.668939][T11133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.681978][T11132] team0: Port device team_slave_0 added [ 320.688427][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.696189][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.703421][T11131] bridge_slave_0: entered allmulticast mode [ 320.715230][T11131] bridge_slave_0: entered promiscuous mode [ 320.757838][T11132] team0: Port device team_slave_1 added [ 320.763787][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.772055][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.783686][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 320.786751][T11131] bridge_slave_1: entered allmulticast mode [ 320.800913][T11131] bridge_slave_1: entered promiscuous mode [ 320.880423][T11133] team0: Port device team_slave_0 added [ 320.921847][T11133] team0: Port device team_slave_1 added [ 320.934527][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.941559][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.967587][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.982139][T11131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.040032][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.047550][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.074319][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.090870][T11131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.236844][T11133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.243968][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.270510][T11133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.301015][T11133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.309563][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.336022][T11133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.357512][T11131] team0: Port device team_slave_0 added [ 321.378984][T11131] team0: Port device team_slave_1 added [ 321.442309][T11132] hsr_slave_0: entered promiscuous mode [ 321.450451][T11132] hsr_slave_1: entered promiscuous mode [ 321.479157][T11131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.486462][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.512922][T11131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.526180][T11131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.533173][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.560390][T11131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.681440][T11133] hsr_slave_0: entered promiscuous mode [ 321.688346][T11133] hsr_slave_1: entered promiscuous mode [ 321.704993][T11133] debugfs: 'hsr0' already exists in 'hsr' [ 321.710742][T11133] Cannot create hsr debugfs directory [ 321.764268][T11265] netlink: 'syz.4.1390': attribute type 30 has an invalid length. [ 321.868185][ T5849] Bluetooth: hci1: command tx timeout [ 321.876031][T11131] hsr_slave_0: entered promiscuous mode [ 321.883113][T11131] hsr_slave_1: entered promiscuous mode [ 321.891114][T11131] debugfs: 'hsr0' already exists in 'hsr' [ 321.897063][T11131] Cannot create hsr debugfs directory [ 321.934393][ T5849] Bluetooth: hci0: command tx timeout [ 321.934400][ T5848] Bluetooth: hci2: command tx timeout [ 322.383413][T11281] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1397'. [ 322.521547][T11285] tipc: Started in network mode [ 322.527219][T11285] tipc: Node identity 5e7925c5c827, cluster identity 4711 [ 322.534626][T11285] tipc: Enabled bearer , priority 0 [ 322.542198][T11285] syzkaller0: entered promiscuous mode [ 322.549479][T11285] syzkaller0: entered allmulticast mode [ 322.573893][T11285] tipc: Resetting bearer [ 322.582203][T11284] tipc: Resetting bearer [ 322.596085][T11284] tipc: Disabling bearer [ 322.839228][T11131] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.893080][T11131] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.941126][T11131] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.960008][T11306] netlink: 'syz.4.1407': attribute type 11 has an invalid length. [ 322.968357][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1407'. [ 322.990958][T11131] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.126319][T11132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.136402][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'. [ 323.155407][T11132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.180255][T11132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.203264][T11132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.262981][T11133] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.299653][T11133] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.311157][T11133] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.325105][T11133] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.418669][T11131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.436832][T11131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.455343][T11131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.484385][T11131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.567035][T11132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.619694][T11132] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.650766][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.657961][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.681599][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.688787][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.811558][T11133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.872840][T11133] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.896485][T11131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.910699][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.917885][ T3877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.936115][ T5849] Bluetooth: hci1: command tx timeout [ 323.965454][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.972665][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.998743][T11131] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.014428][ T5849] Bluetooth: hci2: command tx timeout [ 324.014437][ T5848] Bluetooth: hci0: command tx timeout [ 324.059091][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.066264][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.107039][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.114224][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.185259][T11359] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 324.201005][T11133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.288951][T11131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.344906][T11132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.476637][T11132] veth0_vlan: entered promiscuous mode [ 324.515798][T11132] veth1_vlan: entered promiscuous mode [ 324.541010][T11133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.631368][T11132] veth0_macvtap: entered promiscuous mode [ 324.659217][T11132] veth1_macvtap: entered promiscuous mode [ 324.719294][T11131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.727373][T11133] veth0_vlan: entered promiscuous mode [ 324.748516][T11132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.789015][T11132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.826746][T11133] veth1_vlan: entered promiscuous mode [ 324.839268][ T2983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.857194][ T2983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.868358][ T2983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.905946][ T2983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.009911][T11131] veth0_vlan: entered promiscuous mode [ 325.072009][T11133] veth0_macvtap: entered promiscuous mode [ 325.103332][T11133] veth1_macvtap: entered promiscuous mode [ 325.112478][T11131] veth1_vlan: entered promiscuous mode [ 325.137158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.156767][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.166361][T11133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.221296][T11133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.238894][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.249734][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.269620][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.296854][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.319116][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.328478][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.358173][T11131] veth0_macvtap: entered promiscuous mode [ 325.397924][T11131] veth1_macvtap: entered promiscuous mode [ 325.519475][T11131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.552415][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.575696][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.599279][T11131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.680894][T11403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1437'. [ 325.691871][T11403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1437'. [ 325.724405][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.733369][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.760008][ T994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.769322][ T994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.796143][ T994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.805166][ T994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.887716][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 326.014777][ T5848] Bluetooth: hci1: command tx timeout [ 326.017634][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 326.030428][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 326.070442][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.094646][ T5849] Bluetooth: hci0: command tx timeout [ 326.099101][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.100075][ T5848] Bluetooth: hci2: command tx timeout [ 326.193691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.241672][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.772834][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 326.902124][T11461] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1457'. [ 327.007188][T11459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.186353][T11459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.500162][T11459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.776036][T11459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.863655][T11485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.875091][T11485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.940162][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1474'. [ 327.951426][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 327.960760][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1474'. [ 327.989566][T11510] netlink: 'syz.3.1474': attribute type 6 has an invalid length. [ 328.182693][ T5951] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.202094][ T5951] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.237373][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.278754][ T5951] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.308675][T11533] IPv6: Can't replace route, no match found [ 328.417681][T11541] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 328.602425][T11485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.613982][T11485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.910421][T11485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.921069][T11485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.967188][T11564] netlink: 'syz.0.1499': attribute type 30 has an invalid length. [ 328.993825][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.011253][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.020579][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.029963][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.389012][T11485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.400703][T11485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.677225][T11592] syzkaller0: entered promiscuous mode [ 329.685066][T11592] syzkaller0: entered allmulticast mode [ 329.937281][T11607] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 330.161394][ T1324] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.327537][ T1324] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.467253][ T34] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.483346][ T34] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.761223][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.769594][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.216268][ T34] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.225114][ T34] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.455774][T11648] IPv6: Can't replace route, no match found [ 331.834522][T11661] __nla_validate_parse: 11 callbacks suppressed [ 331.834540][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1544'. [ 331.873626][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 331.903041][T11661] IPVS: Error connecting to the multicast addr [ 332.011711][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.093805][T11667] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.103640][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.261516][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'. [ 332.967403][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 333.005046][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 333.013989][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 334.116863][T11712] syzkaller0: entered promiscuous mode [ 334.122451][T11712] syzkaller0: entered allmulticast mode [ 334.535789][T11718] lo speed is unknown, defaulting to 1000 [ 334.556113][T11718] lo speed is unknown, defaulting to 1000 [ 334.562749][T11718] lo speed is unknown, defaulting to 1000 [ 334.632377][T11718] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 334.716364][T11718] lo speed is unknown, defaulting to 1000 [ 334.746681][T11718] lo speed is unknown, defaulting to 1000 [ 334.764316][T11718] lo speed is unknown, defaulting to 1000 [ 334.771888][T11718] lo speed is unknown, defaulting to 1000 [ 334.791317][T11718] lo speed is unknown, defaulting to 1000 [ 334.841972][T11718] lo speed is unknown, defaulting to 1000 [ 334.849774][T11718] lo speed is unknown, defaulting to 1000 [ 335.093031][T11722] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.227954][T11728] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1572'. [ 336.000759][T11751] ksmbd: Unknown IPC event: 3, ignore. [ 336.877429][T11652] Set syz1 is full, maxelem 65536 reached [ 337.123308][T11800] syz_tun: refused to change device tx_queue_len [ 337.145921][T11799] __nla_validate_parse: 3 callbacks suppressed [ 337.145939][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 337.169907][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1607'. [ 337.335555][T11807] atomic_op ffff88807bdc2998 conn xmit_atomic 0000000000000000 [ 337.357343][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 337.391488][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 337.409985][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1614'. [ 337.594631][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 337.624907][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 337.649963][T11816] wg1 speed is unknown, defaulting to 1000 [ 337.726048][T11816] lo speed is unknown, defaulting to 1000 [ 337.822886][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 337.843139][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 338.038315][T11832] atomic_op ffff88801f2a8998 conn xmit_atomic 0000000000000000 [ 338.458998][T11854] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 338.747585][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 339.313842][T11884] geneve2: entered promiscuous mode [ 340.657004][T11952] ksmbd: Unknown IPC event: 8, ignore. [ 341.094799][T11970] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 341.505369][T11986] xt_connbytes: Forcing CT accounting to be enabled [ 341.527364][T11986] Cannot find set identified by id 0 to match [ 341.770652][T11995] netlink: 'syz.4.1696': attribute type 12 has an invalid length. [ 342.376996][T12011] IPVS: Unknown mcast interface: vcan0 [ 342.387476][T12015] IPv6: Can't replace route, no match found [ 342.544715][T12021] IPv6: Can't replace route, no match found [ 342.884768][T12042] __nla_validate_parse: 12 callbacks suppressed [ 342.884786][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 343.047539][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1720'. [ 343.056854][T12050] netem: change failed [ 343.498579][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 343.762826][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1744'. [ 343.954990][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 344.032386][T12118] team1: entered promiscuous mode [ 344.047724][T12118] team1: entered allmulticast mode [ 344.056697][T12118] 8021q: adding VLAN 0 to HW filter on device team1 [ 344.333237][T12142] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.439151][T12151] tipc: Enabling of bearer rejected, failed to enable media [ 344.473509][T12156] netlink: 'syz.4.1768': attribute type 3 has an invalid length. [ 344.569471][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 344.741327][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1772'. [ 345.306031][T12191] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 345.432364][T12196] netlink: 133536 bytes leftover after parsing attributes in process `syz.3.1786'. [ 345.855221][T12226] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 345.881235][T12229] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1801'. [ 345.975332][T12234] rdma_op ffff8880330691f0 conn xmit_rdma 0000000000000000 [ 346.132731][T12248] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1807'. [ 346.142693][T12248] ksmbd: Unknown IPC event: 3, ignore. [ 346.665993][T12283] 0X: renamed from caif0 [ 346.689879][T12283] 0X: entered allmulticast mode [ 346.702107][T12283] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 346.797735][T12289] team1: entered promiscuous mode [ 346.802796][T12289] team1: entered allmulticast mode [ 346.818511][T12289] 8021q: adding VLAN 0 to HW filter on device team1 [ 347.127003][T12314] bridge_slave_1: left allmulticast mode [ 347.132771][T12314] bridge_slave_1: left promiscuous mode [ 347.140130][T12314] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.169405][T12314] bridge_slave_0: left allmulticast mode [ 347.181323][T12314] bridge_slave_0: left promiscuous mode [ 347.188049][T12314] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.650419][T12340] netlink: 'syz.3.1851': attribute type 6 has an invalid length. [ 347.842796][T12348] smc: net device bond0 applied user defined pnetid SYZ0 [ 347.871734][T12348] smc: net device bond0 erased user defined pnetid SYZ0 [ 347.945607][T12350] __nla_validate_parse: 7 callbacks suppressed [ 347.945626][T12350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1855'. [ 348.011172][T12350] ip6gre1: entered promiscuous mode [ 348.034764][T12350] ip6gre1: entered allmulticast mode [ 348.081829][T12354] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.246691][T12359] macvtap0: refused to change device tx_queue_len [ 348.275045][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 348.294781][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 348.314409][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 348.654506][T12387] netlink: 133536 bytes leftover after parsing attributes in process `syz.3.1874'. [ 348.665806][T12389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1873'. [ 348.823299][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 348.874406][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 348.895481][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 348.907751][T12397] team0: Port device team_slave_1 removed [ 349.043345][T12405] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1875'. [ 349.062277][T12411] tipc: Enabled bearer , priority 0 [ 349.069811][T12411] syzkaller0: entered promiscuous mode [ 349.075350][T12411] syzkaller0: entered allmulticast mode [ 349.137824][T12411] tipc: Resetting bearer [ 349.175262][T12410] tipc: Resetting bearer [ 349.394866][T12410] tipc: Disabling bearer [ 349.849878][T12449] syzkaller1: entered promiscuous mode [ 349.864750][T12449] syzkaller1: entered allmulticast mode [ 349.883866][T12451] syzkaller0: entered promiscuous mode [ 349.890004][T12451] syzkaller0: entered allmulticast mode [ 350.026999][T12457] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 350.246347][T12465] netlink: 'syz.4.1909': attribute type 12 has an invalid length. [ 350.691598][T12471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.718920][T12471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.101280][T12486] syzkaller0: entered promiscuous mode [ 351.107341][T12486] syzkaller0: entered allmulticast mode [ 351.137035][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.167561][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.207172][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.233831][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.056902][T12523] siw: device registration error -23 [ 352.213874][T12525] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 352.703207][T12507] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 352.730601][T12529] batman_adv: batadv0: Adding interface: dummy0 [ 352.746697][T12529] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.772203][T12529] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 353.320467][T12573] __nla_validate_parse: 6 callbacks suppressed [ 353.320485][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1949'. [ 353.376181][T12576] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1945'. [ 353.416701][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.424151][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.533370][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.553647][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.584527][T12595] netlink: 'syz.4.1951': attribute type 7 has an invalid length. [ 353.605771][T12595] netlink: 'syz.4.1951': attribute type 8 has an invalid length. [ 353.634568][T12586] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 353.729742][T12586] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1953'. [ 353.779568][ T1324] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.794437][ T1324] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.846919][ T1324] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.860271][ T1324] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.895015][T12598] macvtap1: entered promiscuous mode [ 353.924385][T12598] macvtap1: entered allmulticast mode [ 353.929807][T12598] veth1_vlan: entered allmulticast mode [ 353.939458][ T1324] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.948754][ T1324] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.957697][ T1324] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.966281][ T1324] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.980242][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1954'. [ 354.020163][T12601] macvtap2: entered promiscuous mode [ 354.025646][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1954'. [ 354.035634][T12601] macvtap2: entered allmulticast mode [ 354.061418][T12598] syz_tun: entered promiscuous mode [ 354.075751][T12598] syz_tun: left promiscuous mode [ 354.211113][T12622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1963'. [ 354.221878][T12625] netlink: 'syz.2.1962': attribute type 9 has an invalid length. [ 354.230819][T12625] netlink: 'syz.2.1962': attribute type 7 has an invalid length. [ 354.238627][T12625] netlink: 'syz.2.1962': attribute type 8 has an invalid length. [ 354.399441][T12636] veth1_vlan: left allmulticast mode [ 354.634427][T12653] netlink: 'syz.4.1972': attribute type 3 has an invalid length. [ 354.753104][T12645] wg1 speed is unknown, defaulting to 1000 [ 354.801094][T12645] lo speed is unknown, defaulting to 1000 [ 354.864802][T12673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1976'. [ 355.227139][T12695] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 355.245237][T12695] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 355.245459][T12697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1985'. [ 355.275624][T12693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.317729][T12699] bond0: (slave rose0): Releasing backup interface [ 355.333169][T12700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1984'. [ 355.343749][T12700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.386107][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 355.411232][T12706] ip6tnl1: entered allmulticast mode [ 355.505149][T12708] wg1 speed is unknown, defaulting to 1000 [ 355.528805][T12708] lo speed is unknown, defaulting to 1000 [ 355.559920][T12716] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 356.790860][T12740] netlink: 'syz.4.1995': attribute type 3 has an invalid length. [ 356.968190][T12753] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 356.979520][T12753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.202802][T12757] wg1 speed is unknown, defaulting to 1000 [ 357.212292][T12761] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 357.216129][T12757] lo speed is unknown, defaulting to 1000 [ 357.497430][T12770] tipc: Started in network mode [ 357.502330][T12770] tipc: Node identity 4e11bc78c00b, cluster identity 4711 [ 357.531659][T12770] tipc: Enabled bearer , priority 0 [ 357.563983][T12776] syzkaller0: entered promiscuous mode [ 357.578289][T12776] syzkaller0: entered allmulticast mode [ 357.833622][T12790] tipc: Resetting bearer [ 357.856726][T12794] tipc: Started in network mode [ 357.861623][T12794] tipc: Node identity ac14140f, cluster identity 4711 [ 357.885656][T12794] tipc: New replicast peer: 255.255.255.255 [ 357.892423][T12794] tipc: Enabled bearer , priority 10 [ 357.900198][T12769] tipc: Resetting bearer [ 357.914569][T12794] netlink: 'syz.3.2007': attribute type 11 has an invalid length. [ 357.922483][T12794] netlink: 'syz.3.2007': attribute type 11 has an invalid length. [ 357.931369][T12769] tipc: Disabling bearer [ 358.205035][T12804] netlink: 'syz.0.2012': attribute type 10 has an invalid length. [ 358.212990][T12804] team0: Device dummy0 is up. Set it down before adding it as a team port [ 358.397584][T12810] __nla_validate_parse: 6 callbacks suppressed [ 358.397602][T12810] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2013'. [ 358.692106][T12816] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.699816][T12816] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.778529][T12836] netlink: 'syz.1.2017': attribute type 322 has an invalid length. [ 358.821136][T12816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.838327][T12816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.005395][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2019'. [ 359.020888][ T5961] lo speed is unknown, defaulting to 1000 [ 359.024251][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2019'. [ 359.027332][ T5961] syz2: Port: 1 Link DOWN [ 359.041666][ T5950] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.057220][ T5950] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.073915][ T2152] tipc: Node number set to 2886997007 [ 359.091189][ T5950] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.101147][ T5950] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.119892][ T5950] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.143154][ T5901] IPVS: starting estimator thread 0... [ 359.146045][ T5950] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.158892][ T5950] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.168167][ T5950] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.255026][T12842] IPVS: using max 30 ests per chain, 72000 per kthread [ 359.271741][T12847] tipc: Cannot configure node identity twice [ 359.317745][T12849] tipc: Can't bind to reserved service type 2 [ 359.383614][T12856] netlink: 'syz.4.2025': attribute type 9 has an invalid length. [ 359.411224][T12858] netlink: 'syz.0.2026': attribute type 30 has an invalid length. [ 359.606173][T12867] xt_TCPMSS: Only works on TCP SYN packets [ 359.669660][T12871] wg1 speed is unknown, defaulting to 1000 [ 359.678282][T12871] lo speed is unknown, defaulting to 1000 [ 359.725261][T12876] syzkaller0: entered promiscuous mode [ 359.730794][T12876] syzkaller0: entered allmulticast mode [ 360.030607][T12890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2038'. [ 360.133129][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2041'. [ 360.166333][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 360.266771][T12903] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 360.367639][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2035'. [ 360.468202][T12922] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2047'. [ 360.507479][T12915] Can't find ip_set type bitmap:fp [ 360.512875][T12917] Can't find ip_set type bitmap:fp [ 360.863606][T12930] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.871396][T12930] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.997392][T12930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.013740][T12930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.119229][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.156167][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.182420][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.208501][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.218381][T12951] syzkaller0: entered promiscuous mode [ 361.223860][T12951] syzkaller0: entered allmulticast mode [ 361.464362][T12226] IPVS: ip_vs_send_async error -101 [ 361.493464][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 361.615691][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 361.694594][T12974] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 361.721114][T12974] bond3: entered promiscuous mode [ 361.727624][T12974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.341315][ T5848] Bluetooth: hci0: command 0x080f tx timeout [ 362.351325][T12993] openvswitch: netlink: Flow actions attr not present in new flow. [ 362.362955][T12990] batadv_slave_0: entered promiscuous mode [ 362.668214][T13000] syzkaller0: entered promiscuous mode [ 362.673797][T13000] syzkaller0: entered allmulticast mode [ 362.762245][T13008] geneve2: entered promiscuous mode [ 362.770485][ T5950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.780532][ T5950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.789499][ T5950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.824232][ T5950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.924939][T13017] tipc: Enabled bearer , priority 0 [ 362.991834][T13016] tipc: Disabling bearer [ 363.249155][T13034] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 363.620196][T13065] __nla_validate_parse: 5 callbacks suppressed [ 363.620215][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2087'. [ 364.631709][T13074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.666403][T13025] wg1 speed is unknown, defaulting to 1000 [ 364.676701][T13025] lo speed is unknown, defaulting to 1000 [ 364.885947][T13085] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 364.889703][T13030] wg1 speed is unknown, defaulting to 1000 [ 364.908344][T13030] lo speed is unknown, defaulting to 1000 [ 364.996905][T13091] netlink: 364 bytes leftover after parsing attributes in process `syz.2.2095'. [ 370.248181][T12226] IPVS: ip_vs_send_async error -101 [ 379.873205][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.862803][T12226] IPVS: ip_vs_send_async error -101 [ 445.325049][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 448.616117][ T5844] Bluetooth: hci0: command 0x080f tx timeout [ 486.093381][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 488.123289][T12226] IPVS: ip_vs_send_async error -101 [ 530.467751][ T31] INFO: task syz.2.2095:13091 blocked for more than 150 seconds. [ 530.475536][ T31] Not tainted syzkaller #0 [ 530.480469][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.501086][ T31] task:syz.2.2095 state:D stack:25888 pid:13091 tgid:13089 ppid:11131 task_flags:0x400140 flags:0x00080002 [ 532.273228][ T31] Call Trace: [ 532.778974][ T31] [ 532.781951][ T31] __schedule+0x14bc/0x5000 [ 532.786528][ T31] ? __pfx___schedule+0x10/0x10 [ 532.791402][ T31] ? schedule+0x91/0x360 [ 532.795694][ T31] schedule+0x165/0x360 [ 532.799853][ T31] schedule_preempt_disabled+0x13/0x30 [ 532.805347][ T31] __mutex_lock+0x7e6/0x1350 [ 532.809948][ T31] ? __mutex_lock+0x5bb/0x1350 [ 532.814756][ T31] ? tipc_nl_node_set_key+0x88/0x9a0 [ 532.820047][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.327374][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 533.333162][ T31] tipc_nl_node_set_key+0x88/0x9a0 [ 533.338742][ T31] ? rcu_is_watching+0x15/0xb0 [ 533.343524][ T31] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 533.349273][ T31] ? __nla_parse+0x40/0x60 [ 533.353696][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 533.360116][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 533.371367][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 533.377604][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 533.382556][ T31] genl_rcv_msg+0x60e/0x790 [ 533.889461][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.894553][ T31] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 533.900287][ T31] netlink_rcv_skb+0x208/0x470 [ 533.905086][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.910117][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.915455][ T31] ? down_read+0x274/0x2e0 [ 533.919870][ T31] ? genl_rcv+0xd/0x40 [ 533.923936][ T31] genl_rcv+0x28/0x40 [ 533.927952][ T31] netlink_unicast+0x82f/0x9e0 [ 533.932728][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 533.938114][ T31] ? netlink_sendmsg+0x642/0xb30 [ 533.943057][ T31] ? skb_put+0x11b/0x210 [ 534.098194][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.455455][ T31] netlink_sendmsg+0x805/0xb30 [ 534.460266][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.465626][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.470572][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.476294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.481593][ T31] __sock_sendmsg+0x21c/0x270 [ 534.738361][ T31] ____sys_sendmsg+0x505/0x820 [ 534.743169][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.755073][ T31] ? import_iovec+0x74/0xa0 [ 535.759624][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 536.781809][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.787073][ T31] ? futex_wake+0x4b2/0x560 [ 536.791649][ T31] ? __fget_files+0x2a/0x420 [ 536.796266][ T31] ? __fget_files+0x3a0/0x420 [ 536.800956][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 536.805949][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.811431][ T31] ? do_syscall_64+0xbe/0xf80 [ 536.816175][ T31] do_syscall_64+0xfa/0xf80 [ 536.820683][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.826786][ T31] ? clear_bhb_loop+0x60/0xb0 [ 536.831465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.854370][ T31] RIP: 0033:0x7fdc50f8f749 [ 537.858824][ T31] RSP: 002b:00007fdc51dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.384054][ T31] RAX: ffffffffffffffda RBX: 00007fdc511e5fa0 RCX: 00007fdc50f8f749 [ 538.392068][ T31] RDX: 0000000004040004 RSI: 0000200000000440 RDI: 0000000000000007 [ 538.414060][ T31] RBP: 00007fdc51013f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.422045][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.444057][ T31] R13: 00007fdc511e6038 R14: 00007fdc511e5fa0 R15: 00007ffebf8e2b78 [ 538.452070][ T31] [ 538.464062][ T31] [ 538.464062][ T31] Showing all locks held in the system: [ 538.471783][ T31] 1 lock held by khungtaskd/31: [ 538.494069][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 538.503974][ T31] 3 locks held by kworker/1:1/39: [ 538.524061][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 538.544150][ T31] #1: ffffc90000af7b80 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 538.564047][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 538.584048][ T31] 3 locks held by aoe_tx0/1299: [ 538.588900][ T31] 2 locks held by kworker/u8:8/1324: [ 538.614100][ T31] #0: ffff88813ff29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 538.634055][ T31] #1: ffffc900042bfb80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 538.654053][ T31] 2 locks held by getty/5595: [ 538.658730][ T31] #0: ffff88814d9050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 538.684076][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 538.704041][ T31] 2 locks held by kworker/0:4/5901: [ 538.709237][ T31] 3 locks held by kworker/u8:17/5952: [ 538.734106][ T31] #0: ffff88802f371948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 538.754053][ T31] #1: ffffc90004edfb80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 538.784050][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 538.793567][ T31] 2 locks held by kworker/1:6/5961: [ 538.814105][ T31] 3 locks held by kworker/1:7/5986: [ 538.819308][ T31] #0: ffff88813ff16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 539.345549][ T31] #1: ffffc90005127b80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 539.624151][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf00 [ 539.633784][ T31] 2 locks held by kworker/u8:19/9150: [ 539.654064][ T31] 2 locks held by syz.4.2077/13025: [ 539.659269][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 539.924049][ T31] #1: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x6a/0x4a0 [ 539.933065][ T31] 2 locks held by syz.1.2080/13030: [ 539.954117][ T31] 1 lock held by syz.3.2093/13082: [ 539.959261][ T31] 1 lock held by syz.0.2094/13098: [ 539.974074][ T31] 3 locks held by syz.2.2095/13091: [ 539.979307][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 540.001920][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 540.010961][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_node_set_key+0x88/0x9a0 [ 540.272063][ T31]