last executing test programs: 6m41.936589549s ago: executing program 3 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async, rerun: 32) r2 = socket(0x8, 0x3, 0x0) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x31, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 32) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8b34, 0x0) (async, rerun: 32) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bind$bt_rfcomm(r2, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x27c, 0x10, 0x300, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x4f26c, 0x4d3b897f6247ab3f}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x240, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x95, 0x36d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x10000}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff7, 0x28f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffff9, @local}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xe, 0x7, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10001, 0x535c}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0xffff, 0x3}}]}, {0xa8, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffa, 0x800}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x9bef}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0xe}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @multicast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x40}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x7ed, 0xfffff00e}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x515, 0x6}}]}, {0xe0, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfff, 0x7fff, 0x67a}}, @IFLA_VF_TX_RATE={0xc}, @IFLA_VF_TRUST={0xc, 0x9, {0xfea, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x8}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x8d9, 0x2, 0x8100}}, {0x14, 0x1, {0x4, 0xd6c, 0x7f, 0x8100}}, {0x14, 0x1, {0x8, 0xcaa, 0xc1e8, 0x88a8}}, {0x14, 0x1, {0x2, 0xeba, 0x3}}, {0x14, 0x1, {0x4, 0x4b6, 0x1, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x27c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m41.714322648s ago: executing program 3 (id=145): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000100), 0x4) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r10], 0x38}}, 0x20044804) 6m40.828780244s ago: executing program 3 (id=150): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000500)={0x0, 0x7}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000800)={r3, 0x5c, &(0x7f0000000780)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000840)=0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000006c0)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @local}, 0x4, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000680)='dummy0\x00', 0x8, 0x8000000000000000, 0xdc3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0xfffffffffffffe1a, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xf, 0x0, 0x695, 0xda0, 0x220, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r1, @ANYBLOB="000400005a6dfaf43497c09d7800000200"/29, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="010000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m40.075188832s ago: executing program 3 (id=156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000002063112f0000000000851004000200000085000000b40000009500000089ce44cdf306430000950000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000100)='memory.events\x00', 0x2, &(0x7f0000000180)={@align=0x3, {0x4, 0x0, 0x1, 0x81}}, 0xc, &(0x7f00000001c0), &(0x7f00000002c0)=0x3}) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000d97248ad6b366171a54ca0f60735bf88618d910db29ed7707d4fa8620ee24deccfd34c7b22627afadfb85d3899eec6855fddaeaeec440300c25cd83b0f3681e79b3506fa2e00e6f18a47da04bcb8cb57de8b14c1a7aa51663f53e00520d9c7ed8e48cd229b21bf61b9fe8110c1788e5cd590c2c61c3d246285983952e816b70600e91bbea3808363284187e157200812bed058cb48349f8d790f0a3a905676206458455ad7acb3afe47a481aaa20a909e688f5e53dab5eb10ae0168f75ce129c47e9", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$xdp(r3, &(0x7f0000000600)={0x2c, 0x1, r4, 0x33, r2}, 0x10) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c00168088000880840001"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x6, 0x1, 0x7014, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x10, "5b7265010c5f3156f2a00d0000000000"}}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) close(0x3) 6m39.425425865s ago: executing program 3 (id=162): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=[@ip_ttl={{0x14}}], 0x18}, 0x20004010) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x81) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0xffffffffffffffff, 0x707a, 0x8000}, @multicast1, @broadcast, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x9804) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="1fa95a72b4a4d759ec2de83b64d0917e5af1982ff20617ad0d965f893356bf70a575a2de80f6519b7db8bcb631688ef981e8f12c53d813894da20cf1faae352a6fcec1addb747951acdfaf2a77fd1ee413dfbfb654558a32efc4ed56f76883a36cf9c661f232189326645693c66508570f3e227ccdaa6804006807fe"], 0x50) pread64(r8, &(0x7f0000000000)=""/57, 0x39, 0xa72) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m38.484159681s ago: executing program 3 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x4, @void}, 0x10) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001840)="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", 0x68c}], 0x1}}], 0x1, 0x41) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x4f0c, 0x6}}) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x5) (rerun: 32) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) sendto$inet6(r2, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x1) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6cff0000100001042000"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000000000202000000030000000000000c000000000061002e00"], 0x0, 0x35}, 0x28) (async, rerun: 64) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08a33}, 0x48800) (async) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) 6m23.418952764s ago: executing program 32 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x4, @void}, 0x10) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001840)="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", 0x68c}], 0x1}}], 0x1, 0x41) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x4f0c, 0x6}}) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x5) (rerun: 32) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) sendto$inet6(r2, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x1) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6cff0000100001042000"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000000000202000000030000000000000c000000000061002e00"], 0x0, 0x35}, 0x28) (async, rerun: 64) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08a33}, 0x48800) (async) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) 15.310758429s ago: executing program 0 (id=3981): socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) 14.991166082s ago: executing program 0 (id=3984): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f2, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_ACT={0x4c, 0x3, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x22}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0x300, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xff, 0x2, 0x9, 0xc, 0xc, 0x5, 0xf, 0xd, 0x2, 0x6, 0xc, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x2, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000045}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000400001"], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r5, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)={0x7c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @generic="8ae1c08150b2c083278a161534de62658df06412a8a8c144966ec82cdd081607d86c9726a40ac641c0ea95a676f86dd9ebfb894842eca3026dbe8037c100af2d8885c14218d00f30e453695d64baf61eef68a5d9ce7c051f08fe516babdc8ef4"]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = socket$nl_crypto(0x10, 0x3, 0x15) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002600)={&(0x7f00000024c0)=@delqdisc={0x120, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffe0, 0xc}, {0x8, 0xe}, {0xd, 0xd}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x81, 0x4, 0x3, 0x2, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0xb9c7]}}, {{0x1c, 0x1, {0x0, 0x7, 0x7, 0x2, 0x2, 0xff, 0x3ff, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x1, 0x4, 0x2, 0x3000, 0x2, 0xc84c, 0x8001, 0xa}}, {0x18, 0x2, [0x2, 0x3, 0xd, 0x0, 0x31, 0x1ff, 0xec, 0x401, 0x81, 0x0]}}, {{0x1c, 0x1, {0x7, 0xa, 0x1, 0x8, 0x1, 0x5, 0x800, 0x3}}, {0xa, 0x2, [0x8, 0x2, 0xa30]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x101, 0x2, 0x7, 0x1, 0x7}}, {0x12, 0x2, [0x2, 0x7, 0x4, 0x401, 0x4, 0x6, 0x17]}}]}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x40, '\x00', 0x8000, 0x9, 0xe, 0xfffffffc}}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x54) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000301010200f9ffffffffffff01000006"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002680)={r10}, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000170a0000000000000000000000000007"], 0x14}}, 0x4004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) 13.697037007s ago: executing program 0 (id=4001): r0 = socket(0x2, 0x80805, 0x8000000) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa0100ff}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001280)={'ip6gre0\x00', &(0x7f0000001200)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x81, 0x0, 0x1b, @mcast1, @private2, 0x8, 0x10, 0x4, 0x188}}) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1, 0x8ec6, 0x10}, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) (async, rerun: 64) r3 = socket(0x20, 0x1, 0xb) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x26) (async, rerun: 64) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={0x0, 0xe0}}, 0x0) (rerun: 64) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x6}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10060000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x11c, 0x14, 0x300, 0x70bd26, 0x25dfdbfb, {0x4}, [@generic="a7c3d01a931ba4c73bc974336052be4cfffa2477474fd50db7563f2055aca0491fc7dbbffdb7eafa71f065748468a0eaf0d8f2be8c4156a0942876f9675e0d", @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x21d}, @typed={0x14, 0x121, 0x0, 0x0, @ipv6=@empty}, @generic="3e7b9afe3961d5afe826ba0a240d4d613857b05d3add17acf30f26de484cfac9d58379125c20f63ede467fbcc2c1e0a10c3d327edf22e8cfb8bd92a6fbc1a6577063306262b5e01c494e0ac3a2e27957164e6c9a80ea4c591160ac25b08aa436c94ba224c487c75c5d1681bc02d0c768b7b9986a9bb9dccbba82a00c5a204faf502533b508258433eb70ef0e44a6d3b8c1322792cba96a474b6cad33d7f0e97187a83d058080f54e90791a40f5"]}, 0x11c}, 0x1, 0x0, 0x0, 0x4005}, 0xc095) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040)=0x9, 0x4) 13.381332798s ago: executing program 0 (id=4004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="3c00238005000500"], 0x6c}, 0x1, 0x0, 0x0, 0x85}, 0x2004c850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a020400) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369040014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r8, 0x5, 0x18}, 0xc) recvmmsg(r3, 0x0, 0x0, 0x11102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) socket(0x400000000010, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={&(0x7f0000000380)="4f2a78d1acc37ebd87b578920109202276d79d861d5c09fff400de8f6bec72282dc29ef072d21f96c4194b06d865c26737eb4a0adcc9cf961f6d44e98fe16c1f2ca87b9374e65f81fbbc8d7c4143c4806bdad46fda28bf3cfe6df57f40cb52740dda32eda9f9b610d9bbf2f38edc9443ba4c5e5a07b76d4a3fa53bd7515d684597e0bb4c86faf7a0a454ddcedb91cba11a4290aa77ebf63d170165bf8721f35eb9afc61b2993f4b1ccbb9e6dc85367f3d6980a519ad8a24d455faad753db50d20f2a8529cbd171b22f656a6f9e1f4f8fadfe893d8e3154a20676cb9220fccb0c33", &(0x7f0000000480)=""/119, &(0x7f0000000500)="9d457dd397bbf82d06f84f6d25bd3056f82a9594a30ba1f961a442d1d56226e717f0a132c50f77f6f801ef846e1d709351a2b59cb39f003db13049ca127bfbf5bf17d4d8558ba751c170616313dfac2bdcacdc42a4bc3640993a36544e7de5b747b29c6b4395236cb2d9ef10bbb0a0d07894641721c533a9b6527b3e75b46236d1eeefc727b457df5f939d940972e3f8cd947dafac751501cbb3b962fcd82da1", &(0x7f0000000640)="e5ad57882353b455d1cec4a1e0a65bdcee0d13f9e6a4c44a34837f6f76b857dc5b9b4a2ffa8265b090bcbf8db9d820f191bbc4ddb970ef558a5e14bf7e58886f620dd80baa714517b652cdc7af54c8f9d935e35cf17c44aa1806e8ca77deac9c77bc802bdd792bdea81b3bd09cc030f0c633780b125f531536fb8fae4b6a897d13c156f9231ba9723a6f809578ad4c3a3c", 0xff, r9}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r12, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r12, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) 5.496426438s ago: executing program 2 (id=4071): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="24002d8005000400000000f407000200000004000500010009000000080003000800000008000300", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 5.049376613s ago: executing program 2 (id=4077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="3c00238005000500"], 0x6c}, 0x1, 0x0, 0x0, 0x85}, 0x2004c850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a020400) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r8, 0x5, 0x10}, 0xc) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000001c40)={&(0x7f0000000380)=@isdn={0x22, 0xd, 0x8, 0x5, 0xd}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000400)="08b3a21b968d667c9cd80083d059e0f860f5a26126e6548fe8fab3fb5548422785d8a86dd6de06d7830844a500b6c14cd6de9df0868c51ab864018914cc918ffa7121e2370af6d430d6de1ebf820927ed9bc77f9b52d781b3de21eff86b702fab9ff7fc17ae20d5011f0380703e5a09b6617ef221931a0d8e93a09bfbe6e8f1f00bb8347554b5ead76a8d89518d77ddd99cbfaaf2df27f76935a2aaa76a964174a80b1fb989a295891bce880dd", 0xad}, {&(0x7f00000004c0)="01eeef9c3369405dd24eaecde8160e63cf7416641def6fa543649db1f56dc38f877d8c30d46991f364728e42d5ef344a7f02201f0d4b7a525c4f528981274740fd5d515df18e87fc347e61e7e7964c1819e793172e83f5fe1886e9bb8c732800823b9545dfe8f9c38d54aa943e79894ae6b9116a70730372f034b07dc2cdb140fe377641dfd78941c929ffab3fb0a610ba51a463daa0", 0x96}, {&(0x7f0000000640)="5c4686901dc7e85af68378e0e8e718e8eb2b323b1623d8c1787c9e4ba9668889305648bf076b9163ec2c952c8bce0da7c3b9b2916e250aef86efc979f4f65de1568f038ffe470fa063b229ed742c56009e460e9aa1d86eeaf8ac407f49c39c8c6dc4fb1a0e26f9cdad3eba928bed80a772e78701c1a03f82ca6f1a31ebd9d7ea0ddf5db3d37d00b90dfb325c5b41f625e79f31dc34c2c7b445743d39399a500c03aeb0a57ec916ca7d7bc333d35a2f28ba677629", 0xb4}, {&(0x7f0000000700)="b38d78298f4b3f5b13c961a13cbc1ee09683b1bff525780156151a383eb67aea0fb3efb3ea7a5a64093118643a1a77d516cd444ca442f3ac9fd7528bc72e105f3d", 0x41}, {&(0x7f0000000780)="27f506e65b508ddf7b935519e47e93227e4fc1e130f7685bc9d6cbcf9bfc111905476483f0e86efc", 0x28}, {&(0x7f00000007c0)="83ce64d9a3859f394e823c2bab90", 0xe}, {&(0x7f0000000800)="690c5a027333635116ec69ba6952bbfce98c777555caa07d9ef9e8dccda8fdee22be8723d85bb73ac3e1893f2e2c20b12b61f2616df865007eaa6c4bb21d09e0f84c6fb89da0dcfe71e07aea6da15c075672ed884cd1c3c312f3cd9ecc43f27ebb3d54507ebb08b79efd7cb7095a125b92aef5a130b9af2dab36ae255a0a9614967b78135d5d2becec113a4448b22e6a30a32aab92cfa812a9c19649b84a1fee54ade8ceaf64cabc65f4c70fa6024602679ce3c41d7c6ebfd79773ee536f64f7d836ec51981e944ffbf261d3b20e6f0dbd8e49b3b6aff23a64bd387475c8ac6e017796c1a6734eda6719b2f4cef1d64e0a", 0xf1}, {&(0x7f0000000900)="02ff0af2d89b7dad761566f43de0cf491788122a8333b9ed7941422d28df4d39dafd742d7b1697a86a1063764d8def52156acf55d9e48079fa949057e5a536670bbf739f25ef14c5555205e129a8003d0bd380ee31d4f32c531eae6dcc25e29b446bad83c22b920b5992ac4c8e453b667d422fa419a1f75c9c135393e16e6642c4ab110856e50b1759e2c9fc543eef75ebf4553c9b7031c834800363c2d5350a9f4bddd35fd3993b06e9f1b1359fbd5b966ca7921f891f4a1d364bd9fb4fe04529f05befa30526a34468c9fb47dcd91dfdb7cc7ac28648196c1d852f7454fa1f25f34ebd0a62688a6b1c50229a35b8d9fe", 0xf1}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="35d5509cf5f9927395fd14591dbcd7e8ad82f138c77075c0e9a1ed465afe8c817df2a6b5c867674a9b838dbd3f0b6f7593a5770a913af9bbed29207c153d350b80f337c3b2101ef8e8cdc9ae829969828995bbd01992c152899abe41239027d0ee4188f7562e0e330a0376d529a7b2", 0x6f}], 0xa, &(0x7f0000001b80)=[{0x98, 0xff, 0x0, "e646c6c317e8a4af5c46415fbac9ce3c89aed990b6e7d7c7ddbd46f9b148f4315ef5cc2ce1976d10d8324ef2b66d7ba669a36564521749bf30f643f48c80bc028b0ef7becc39a964de7a49cd86030a50d3c534750be9ba403edd6604487afc2d1156aa763d798f4c6a5f4d89da079780547779c815190db05acb8e5b092e80cb4ffd92810076d5a3"}], 0x98}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) socket(0x400000000010, 0x3, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x90) getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x911f, 0x100000001]}, &(0x7f0000000080)=0x78) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x2, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x41) 4.841664131s ago: executing program 0 (id=4078): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r0, 0x5, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x5, 0x51}}}}}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf250100000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1.474206354s ago: executing program 4 (id=4091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x404e844) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001"], 0x50}}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000002380), 0x0, 0x0, 0x0, 0x840}], 0x1, 0x40) read(r6, &(0x7f00000006c0)=""/32, 0x20) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24030000", @ANYRESHEX=r1, @ANYBLOB="0800308004000180", @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)="a5", 0x1}], 0x1, 0x80007ffd, 0x80) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000001840)=ANY=[@ANYRES32=r6, @ANYRESDEC, @ANYBLOB="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"], 0x164}}, 0x41) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) 1.462265246s ago: executing program 1 (id=4092): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010b00000000010000000e00000008000300", @ANYRES8=r6], 0x1c}}, 0x2000c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4], &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1.395213453s ago: executing program 4 (id=4093): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000ec0)="61df712bc884fed5722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000180)={&(0x7f0000000940)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) 1.230011324s ago: executing program 4 (id=4095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000b0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2}, &(0x7f0000000180)=0x10) close(0x3) r4 = socket(0x2, 0x80805, 0x0) unshare(0x2c020400) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONE(r5, 0x40049409, r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x8004, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000080)={0xff}, 0x1) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x400000, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 1.1290832s ago: executing program 4 (id=4097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) (async) 1.08427317s ago: executing program 5 (id=4098): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', r2, 0x4000, r3}, 0x18) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x1, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000380), 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6, 0x0, {0x0, 0xff}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x100, @loopback}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x9}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x2}]}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @private}, &(0x7f0000000300)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 845.395522ms ago: executing program 5 (id=4099): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4c804) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 721.562555ms ago: executing program 4 (id=4100): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) socket$kcm(0xa, 0x922000000003, 0x11) (async) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x922000000003, 0x11) (async) sendmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011020000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee01) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @private=0xa010102, r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x138, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x806) 703.655724ms ago: executing program 1 (id=4101): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000003600000085000000080000009500", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100270086dd600107000008110020010000000000000000000000000001ff02000000000000000000000000000100004e2200089078c25bd35b0672910f2a88d240a2e474481d240bd254b720898bb0c7182bc321ee288378c00fc0a3c119659aedbba1a0a872b9138db6589bf9a869d06186ad716782a9fd7e1794463eb950492bd2"], 0x0) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000400)={r2, &(0x7f0000000300)='syz_tun\x00', 0x0, &(0x7f0000000340)={@align=0x8000000000000001, {0x9, 0x400, 0xa, 0x7}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x5}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000040008002000128008000100736974001400028005000a0000000000060008000b000000"], 0x40}}, 0x4010) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20002, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/103, 0x67}], 0x3}, 0x400002e1) (async) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmmsg$inet6(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00', @ANYRES32=0x0, @ANYBLOB="5a038d18539d0cb1bd668b053eb8a7faf888a6040000ba4924c3cc562c55728d406c3b534b50ab6b4933890b90c16844919785dd502ec574bfdd9f162322567a00908f9874435743b7256600717cb136b87f48e52445efd38299b08fbe5d6f4bc25ba1bba36abc2482923170411a5768f137d84817b633c9e74b407ae6544c11d1d89735aa39906d6ee45ad691956763cedfb7f2e0b53b07184a20dec3df23fee1ee9592bc4279fda63d6f76b65d983a955e6cefb4ffb553d0f5e5663dca75f23d6ca9c3c0d284b1ab94a5fa63d0bb27a4a3f0c231d26a4931e0b7aa631dfdf3a5d7081b2a3b586c26a53e4bd94c0bde920449cab68af338d841ef836bcc"], 0x40}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000200)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r0, &(0x7f0000000140)={0x27, r11, 0x0, 0x1}, 0x10) r12 = socket$alg(0x26, 0x5, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) bind$alg(r12, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) recvmmsg$unix(r13, &(0x7f0000002300)=[{{&(0x7f0000003600), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/66, 0x42}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000004980)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000003540)}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/215, 0xd7}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000e80)=""/74, 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001100)}}], 0x5, 0x10002, 0x0) sendmsg$OSF_MSG_ADD(r14, &(0x7f0000003940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003900)={&(0x7f0000003680)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044010) 629.694709ms ago: executing program 0 (id=4102): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt(r2, 0x81, 0x3, &(0x7f0000000100)="9fe3f34b71fe983884163b3462a0460de5c2681727146da8de8bbc57ab7b6f9f1ae8420c9fbfdb1277a5626d3b7658d612a288b507ace6b4733ef04c670fff46127cae308264fedcb4a99c9f9a2e324e038114899076caae2a6924b57255d436e6657a009cb6aced8b5b4efd02876e87377819a4d47c0f2a4f942e91ed9f270f90e9c6f6f01aeb96fdd5805b2ce8834aeec8ddc43a90c28301a136", 0x9b) 629.249572ms ago: executing program 5 (id=4103): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x60, 0x8, "11eb782efe5fe7bdad19c7ffc7f7d1ea6c7226676b83265a8c8988741df3f440e84a2d3ec04e824f066ebe38703e6a8943178f807ac27951a2d3b5336f20a29a1689a39b13ce3f166550db4a09a5d84d07587f831319924e7d9cd48c"}, @NFTA_OBJ_USERDATA={0x28, 0x8, "a7450c46c4e6d617a80cdb011ba13c0292c72e5e2baf6dc930c75ff521cfeacfbc29e9f1"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x48, 0x1411, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x48}, 0x1, 0x0, 0x0, 0x2400c8e5}, 0x8054) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newlink={0x60, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x232df, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x1f, 0xf843}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'bond0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc1}, 0x44) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000200)) 494.419252ms ago: executing program 1 (id=4104): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r8, 0x3328}, {r7, 0xa236}, {r6, 0x3434}], 0x3, 0x0, 0x0, 0x0) close(r6) recvmmsg(r5, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000001e80)=""/76, 0x4c}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/225, 0xe1}], 0x9}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030402000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500766972745f776966693000000000000008000a00", @ANYRES32=r9], 0x3c}}, 0x8000) 481.101071ms ago: executing program 4 (id=4105): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000740)="b2", 0x1}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r3, 0x1fc}, &(0x7f00000000c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xc, 0x2, 0x80000001, 0x7, r3}, 0x10) (async) syz_emit_ethernet(0x3a6, &(0x7f0000000780)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, '_+o', 0x370, 0x11, 0xff, @remote, @mcast2, {[@srh={0x87, 0x2, 0x4, 0x1, 0xf8, 0x14, 0x10, [@mcast2]}, @routing={0x108, 0xa, 0x0, 0x1, 0x0, [@empty, @loopback, @private1, @remote, @private0]}, @fragment={0x2f, 0x0, 0x7, 0x0, 0x0, 0x17, 0x66}, @srh={0x6, 0x8, 0x4, 0x4, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x39}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @empty]}, @routing={0x33, 0xc, 0x2, 0xf, 0x0, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x0, 0x2b, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x1, 0xc, 0xfe, 0xd, [0x4, 0x8, 0x100000000, 0x9, 0x2, 0x7]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x7f}, @generic={0x9, 0xd8, "0d39ef280eb948910d806da6ddfe8f8951af2099de6548d6637342547f1fbad1a293cd869526bf6b80127a702a3e49ca3e1cd365ae56c6af52102d2cee93ab4ba0b6d30e5e6f50838504f7db8dabe1bc7280e17e43f642e3b80012f51b7237dfed42471a2c0b19c80a5876a5cf2fc2b824ddb92041371788d47cd3321a6f6fa26eedd37c2ac6cef911a22dc2761267d8dcd9ff95dae07bed52ae8f787f07a08eecb24e5fa764af13ad81d1a4f4afd27d1a63a2f9cfc30676ea663e38a0ca5cc8cce0f1c89c0aaa92f06034685e3e394bb3ac8ab941a2477c"}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x3a, 0xc, 0x4, 0x6, 0x9, 0x30, 0x9c4, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x2c, 0x4, 0x4, 0x2, 0x5, 0x58, 0x6, [@local, @mcast2]}, @fragment={0x4, 0x0, 0x2f, 0x0, 0x0, 0x1, 0x66}], {0x4e24, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "2b84550ab45d6c7bb0e65fcef54705d1c1496fa737ac4716", "78e7f4f73593b0ec321e9a57d06dacab48a1dca7eee9ff82ca5140de9b5fb152"}}}}}}}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080), 0x4) 345.980865ms ago: executing program 5 (id=4106): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000200)) (async) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000200)) close(r0) (async) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$rxrpc(0x21, 0x2, 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r0, 0x24, 0x0, 0x5, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r0, 0x24, 0x0, 0x5, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 345.314869ms ago: executing program 2 (id=4107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd632}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) 196.500495ms ago: executing program 2 (id=4108): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010000000001fedbdf250c000000080000000000000010009a800c000300a70000000000040004001a80cbbe0d36653b7ec6f3318bf4a53ec3"], 0x30}], 0x1, 0x0, 0x0, 0x4044801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000ffffffff18140000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000ffffffd7850000005a000000bca9000000000000350901000700000095000000000000003e980000000000002608000002000000850000008c000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec}, 0x94) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000340), 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x70, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352e2d955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ea3d328893918792a5cbdfb7946a222a63aa3a5ffe4000000000000"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) getsockopt(r2, 0x3, 0x8, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) accept$inet6(r5, 0x0, &(0x7f0000000180)) 195.486045ms ago: executing program 1 (id=4109): socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000faffffff8500000005000000bf09200000000000650901001c20692566000000ffffff80180100002020692500000000002020207b1a00fe00000000de9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000020000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x5}, @generic={0x79, 0x1, 0xa, 0xfff8}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 121.125654ms ago: executing program 2 (id=4110): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000061f1cf76fd66d8360161000000289b3d06c38ac4c984b35a0000004573bd6e07a9e539592727a00b622906fffe7b64abcf453f80a7c6011ae9a220b0197d765a30892abb8f69eb179bf1d73494ffe1b3f2f9a488d74d94cd00"/102, @ANYRES32=0x0, @ANYBLOB="d3ddd1de000000001800128008000100767469000c00028008000400c0000200"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 120.805357ms ago: executing program 5 (id=4111): syz_emit_ethernet(0xd3, &(0x7f0000000000)={@random="96ce655f2954", @remote, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@dccp={{0xb, 0x4, 0x0, 0x27, 0xc1, 0x54d2, 0x0, 0x5, 0x21, 0x0, @rand_addr=0x64010101, @broadcast, {[@generic={0x7, 0xb, "ee70b1f25d07fb2839"}, @noop, @generic={0x86, 0xc, "aff7e2652cdc61ee93b4"}]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x7, 0x4, "26b3b4", 0x0, "8579f1"}, "fee62511a479597822077af841df3049da2f8b24828bbb89c6b7015de1bda3a2967b1426568abd2fec5871797132e2324b861a0050dbc3cebb85546cf3adcae4cce6f68ae2976e32da7ff5051e0c3635e1b8a35567012d444e0ca65811291e597fe99dbc8838c57b0c47087263ba65554f4fdab70b530f56069146d567fd968b7c2d7d3001"}}}}}}, 0x0) 107.886374ms ago: executing program 1 (id=4112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 21.203032ms ago: executing program 5 (id=4113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @loopback, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x40000) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x39b3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) close(0x4) close(r8) recvmmsg(r6, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) bind$inet6(r5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r9, 0x0, 0x0}, 0x10) 8.313064ms ago: executing program 2 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000100), 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r2, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x81, 0x80000001, {{0xe, 0x4, 0x1, 0x36, 0x38, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x14, 0xdd, 0x3, 0x4, [{@multicast1, 0x1}, {@multicast2, 0x8}]}, @generic={0x86, 0xd, "866d00850e7cbdfce2f56c"}]}}}}}) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0xa, r3, 0x31, r2}, 0x10) recvmmsg(r2, &(0x7f0000009500), 0x0, 0x10000, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000240), &(0x7f0000000340)=r0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xffffc267, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r5, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xfff7, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0xa7c2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000500)='GPL\x00', 0x5, 0x8d, &(0x7f0000000540)=""/141, 0x40f00, 0x34, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xf, 0x8}, 0x10, 0x28733, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 0s ago: executing program 1 (id=4115): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200800, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7", 0x1}], 0x1, 0xa) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080012400002000305001500580000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r4}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req={0x5, 0xff, 0x7, 0x3376}, 0xfffffffffffffdfd) close(0x3) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00] netlink: 'syz.4.2467': attribute type 7 has an invalid length. [ 350.329271][T16000] netlink: 'syz.4.2467': attribute type 3 has an invalid length. [ 351.109511][T16040] bond12: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 351.154261][T16040] bond12 (unregistering): Released all slaves [ 351.397911][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.411134][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.423739][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.452278][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.464806][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.549859][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.558730][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.568132][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.580058][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.591214][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.282759][T16090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.380243][T16056] wg2 speed is unknown, defaulting to 1000 [ 352.418143][T16056] xfrm0 speed is unknown, defaulting to 1000 [ 353.208599][T16056] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.215970][T16056] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.224030][T16056] bridge_slave_0: entered allmulticast mode [ 353.232140][T16056] bridge_slave_0: entered promiscuous mode [ 353.241576][T16056] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.248947][T16056] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.257995][T16056] bridge_slave_1: entered allmulticast mode [ 353.267661][T16056] bridge_slave_1: entered promiscuous mode [ 353.329843][T16056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.343690][T16056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.479311][T16056] team0: Port device team_slave_0 added [ 353.489771][T16056] team0: Port device team_slave_1 added [ 353.504874][T16142] xt_hashlimit: size too large, truncated to 1048576 [ 353.578395][T16056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.617089][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.673685][ T5614] Bluetooth: hci2: command tx timeout [ 353.685036][T16056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.707170][T16056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.714917][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.741942][T16056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.817332][T16056] hsr_slave_0: entered promiscuous mode [ 353.825692][T16056] hsr_slave_1: entered promiscuous mode [ 353.833420][T16056] debugfs: 'hsr0' already exists in 'hsr' [ 353.839366][T16056] Cannot create hsr debugfs directory [ 353.855994][T16155] pim6reg99999999: entered allmulticast mode [ 354.022268][T16158] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 354.162962][T16159] __nla_validate_parse: 12 callbacks suppressed [ 354.162980][T16159] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2508'. [ 354.428182][T16056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.634482][T16056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.663082][T16183] vlan0: entered promiscuous mode [ 354.668292][T16183] bond0: entered promiscuous mode [ 354.735555][T16185] validate_nla: 1 callbacks suppressed [ 354.736763][T16185] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 354.798529][T16056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.946550][T16185] bond3: entered promiscuous mode [ 354.953071][T16185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.056634][T16205] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2520'. [ 355.157955][ T30] audit: type=1804 audit(1787213325.495:5): pid=16208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2522" name="/newroot/585/cgroup.controllers" dev="tmpfs" ino=3004 res=1 errno=0 [ 355.214049][ T30] audit: type=1800 audit(1787213325.495:6): pid=16208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2522" name="cgroup.controllers" dev="tmpfs" ino=3004 res=0 errno=0 [ 355.426287][T16056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.439222][T16056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.452982][T16056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.470344][T16056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.495461][T16056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.574643][T16056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.594420][T16056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.739525][T16056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.751723][ T5614] Bluetooth: hci2: command tx timeout [ 355.934532][T16056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.973139][T16235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2531'. [ 355.989816][T16056] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.027206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.034473][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.084240][T16246] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.094714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.101917][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.118095][T16246] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2533'. [ 356.240625][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2534'. [ 356.251030][T16249] netlink: 'syz.2.2534': attribute type 10 has an invalid length. [ 356.259003][T16249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2534'. [ 356.407574][T16257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2534'. [ 356.666433][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 356.676706][T16267] syzkaller1: entered promiscuous mode [ 356.689831][T16267] syzkaller1: entered allmulticast mode [ 356.706558][T16262] syzkaller1: left promiscuous mode [ 356.713546][T16262] syzkaller1: left allmulticast mode [ 357.219169][T16056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.350248][T16056] veth0_vlan: entered promiscuous mode [ 357.385361][T16056] veth1_vlan: entered promiscuous mode [ 357.468366][T16056] veth0_macvtap: entered promiscuous mode [ 357.480428][T16056] veth1_macvtap: entered promiscuous mode [ 357.508641][T16056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.545712][T16056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.688889][T16302] netlink: 'syz.4.2546': attribute type 2 has an invalid length. [ 357.717711][T16302] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 357.742861][T16302] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2546'. [ 357.761250][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.821499][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.835143][ T5614] Bluetooth: hci2: command tx timeout [ 357.872907][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.874733][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.885166][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.912753][T16309] ip_tables: iptables: counters copy to user failed while replacing table [ 357.939413][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.033203][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.048246][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.191628][T16319] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2551'. [ 358.449984][T16327] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 359.194088][T16356] tc_dump_action: action bad kind [ 359.329073][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.353643][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.362998][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.385904][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.395259][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.741660][T16365] __nla_validate_parse: 4 callbacks suppressed [ 359.741681][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2565'. [ 359.863516][ T5610] syz_tun (unregistering): left allmulticast mode [ 359.880221][ T5610] syz_tun (unregistering): left promiscuous mode [ 359.887690][ T5610] bridge0: port 3(syz_tun) entered disabled state [ 359.911375][ T5614] Bluetooth: hci2: command tx timeout [ 360.017398][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 360.090381][T16378] openvswitch: netlink: VLAN attribute unexpected. [ 360.596899][T16397] xt_hashlimit: size too large, truncated to 1048576 [ 360.647223][T16396] xt_hashlimit: size too large, truncated to 1048576 [ 360.697651][T16357] wg2 speed is unknown, defaulting to 1000 [ 360.765648][T16357] xfrm0 speed is unknown, defaulting to 1000 [ 361.134395][T16408] ip6gre3: entered promiscuous mode [ 361.147166][T16408] ip6gre3: entered allmulticast mode [ 361.168458][T16410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2572'. [ 361.183444][ T47] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.204085][ T36] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 361.221090][ T36] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 361.231649][T15154] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 361.441002][ T5614] Bluetooth: hci0: command tx timeout [ 361.540971][ T57] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.556870][ T57] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.611876][ T13] vlan5: left allmulticast mode [ 361.626428][ T13] dummy0: left allmulticast mode [ 361.669588][ T13] vlan5: left promiscuous mode [ 361.692187][ T13] bridge0: port 2(vlan5) entered disabled state [ 361.707141][ T13] bridge_slave_0: left allmulticast mode [ 361.715045][ T13] bridge_slave_0: left promiscuous mode [ 361.727998][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.742057][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 361.811415][T15154] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 361.888065][ T13] tipc: Disabling bearer [ 361.988891][T16448] netlink: 534 bytes leftover after parsing attributes in process `syz.1.2580'. [ 362.009119][T16446] netlink: 534 bytes leftover after parsing attributes in process `syz.1.2580'. [ 362.244283][T14360] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 362.255781][T16458] siw: device registration error -23 [ 362.337622][ T13] bond6 (unregistering): (slave gretap2): Releasing active interface [ 362.455128][ T13] bond5 (unregistering): (slave geneve2): Releasing active interface [ 362.495209][ T13] team0: Port device bridge0 removed [ 362.527025][ T13] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 362.590716][ T13] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 362.618793][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.636937][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.656273][ T13] .` (unregistering): Released all slaves [ 362.677159][ T13] bond1 (unregistering): Released all slaves [ 362.687533][ T36] smbdirect: ib_dev[syz1] removed [ 362.724267][ T13] bond2 (unregistering): Released all slaves [ 362.753373][ T13] bond3 (unregistering): Released all slaves [ 362.777756][ T13] bond4 (unregistering): (slave veth5): Releasing active interface [ 362.789321][ T13] batadv2: entered promiscuous mode [ 362.799521][ T13] bond4 (unregistering): (slave batadv2): Releasing active interface [ 362.813254][ T13] bond4 (unregistering): Released all slaves [ 362.846692][ T13] bond5 (unregistering): Released all slaves [ 362.881776][T16463] netlink: 'syz.1.2581': attribute type 10 has an invalid length. [ 362.894284][ T13] bond6 (unregistering): Released all slaves [ 362.910753][ T13] bond7 (unregistering): Released all slaves [ 362.929379][ T13] bond8 (unregistering): (slave batadv0): Releasing backup interface [ 362.939643][ T13] bond8 (unregistering): Released all slaves [ 362.969616][ T13] bond9 (unregistering): Released all slaves [ 362.986685][ T13] bond10 (unregistering): Released all slaves [ 363.004281][ T13] bond11 (unregistering): Released all slaves [ 363.050485][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 363.067937][T14377] infiniband syz1: ib_query_port failed (-19) [ 363.076568][T16463] team0: Device vxcan0 is of different type [ 363.151550][ T36] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.353513][ T13] ¿: left promiscuous mode [ 363.524867][ T5614] Bluetooth: hci0: command tx timeout [ 363.562007][T16488] netlink: 'syz.5.2586': attribute type 1 has an invalid length. [ 363.727637][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2586'. [ 363.839989][ T13] tipc: Disabling bearer [ 363.864681][ T13] tipc: Disabling bearer [ 363.883101][ T13] tipc: Left network mode [ 363.913551][T16488] bridge7: entered promiscuous mode [ 363.948490][T16488] bond12: (slave bridge7): making interface the new active one [ 363.972282][T16488] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 364.069542][T16501] syzkaller0: entered promiscuous mode [ 364.094891][T16501] syzkaller0: entered allmulticast mode [ 364.196735][T16504] tipc: Started in network mode [ 364.221441][T16504] tipc: Node identity 760a4ccf82e8, cluster identity 4711 [ 364.286166][T16504] tipc: Enabled bearer , priority 0 [ 364.380305][T16499] tipc: Resetting bearer [ 364.409040][T16499] tipc: Disabling bearer [ 364.458153][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 364.544053][T16357] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.552137][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.559449][T16357] bridge_slave_0: entered allmulticast mode [ 364.567442][T16357] bridge_slave_0: entered promiscuous mode [ 364.614205][T16357] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.621995][T16357] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.630430][T16357] bridge_slave_1: entered allmulticast mode [ 364.638586][T16357] bridge_slave_1: entered promiscuous mode [ 364.740173][T16357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.764957][T16357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.846202][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2592'. [ 364.878909][T16357] team0: Port device team_slave_0 added [ 364.928823][T16536] xt_connbytes: Forcing CT accounting to be enabled [ 364.947592][T16357] team0: Port device team_slave_1 added [ 364.989250][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2594'. [ 365.021725][T16357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.028912][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.056482][T16357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.078082][T16357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.094917][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.136472][T16357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.437369][T16357] hsr_slave_0: entered promiscuous mode [ 365.446666][T16357] hsr_slave_1: entered promiscuous mode [ 365.454772][T16357] debugfs: 'hsr0' already exists in 'hsr' [ 365.460551][T16357] Cannot create hsr debugfs directory [ 365.521302][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 365.595323][ T5614] Bluetooth: hci0: command tx timeout [ 365.611822][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 366.008714][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2603'. [ 366.123731][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2603'. [ 366.316301][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 366.373816][ T13] hsr_slave_0: left promiscuous mode [ 366.386918][ T13] hsr_slave_1: left promiscuous mode [ 366.412784][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.432431][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.473822][T16588] netlink: 'syz.0.2596': attribute type 21 has an invalid length. [ 366.860745][ T13] team0 (unregistering): Port device team_slave_1 removed [ 366.887003][ T13] team0 (unregistering): Port device team_slave_0 removed [ 367.052104][T16357] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.108860][T16596] bond8: Removing last ns target with arp_interval on [ 367.459836][T16612] xt_HMARK: proto mask must be zero with L3 mode [ 367.562793][T16357] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.580318][ T30] audit: type=1107 audit(1787213337.915:7): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 367.672907][ T5614] Bluetooth: hci0: command tx timeout [ 368.220372][T16357] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.477167][T16357] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.501039][ T57] tipc: Subscription rejected, illegal request [ 368.548865][T16650] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2617'. [ 368.590551][T16644] team0 (unregistering): Port device bridge2 removed [ 368.856999][T16665] batman_adv: batadv0: Adding interface: veth0 [ 368.865243][T16665] batman_adv: batadv0: The MTU of interface veth0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 368.895902][T16665] batman_adv: batadv0: Interface activated: veth0 [ 369.073443][T16651] syzkaller0: entered promiscuous mode [ 369.079255][T16651] syzkaller0: entered allmulticast mode [ 369.325460][T16670] team0: Port device wlan0 added [ 369.337027][T16682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 369.560132][T16702] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2625'. [ 369.618312][T16702] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 369.659051][T16679] bridge0: entered promiscuous mode [ 369.664786][T16679] bridge0: entered allmulticast mode [ 369.878293][T16357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.896166][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.926629][T16357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.960539][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.989160][T16357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.027876][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.052989][T16357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.076190][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.519120][T16357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.600588][T16357] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.648743][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.656013][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.000790][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.008057][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.217506][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2636'. [ 371.243813][T16770] netlink: 'syz.5.2636': attribute type 6 has an invalid length. [ 371.261911][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2636'. [ 371.847703][T16804] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2641'. [ 371.929777][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'. [ 372.358757][T16357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.498937][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2645'. [ 372.538584][T16832] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2645'. [ 372.949754][T16849] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2650'. [ 373.130636][T16357] veth0_vlan: entered promiscuous mode [ 373.152523][T16357] veth1_vlan: entered promiscuous mode [ 373.217707][T16357] veth0_macvtap: entered promiscuous mode [ 373.247064][T16357] veth1_macvtap: entered promiscuous mode [ 373.306868][T16357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.353392][T16357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.452790][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.487579][ T168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.502166][ T168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.519962][T16873] netlink: 'syz.5.2653': attribute type 32 has an invalid length. [ 373.571764][ T168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.715437][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.742933][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.796100][T13196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.807079][T13196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.119636][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2655'. [ 374.566582][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.584825][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.593549][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.605552][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.614406][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.711024][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 375.415733][T16946] siw: device registration error -23 [ 375.426077][T16941] netlink: 'syz.5.2666': attribute type 2 has an invalid length. [ 375.459909][T16941] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2666'. [ 375.479656][T16947] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2666'. [ 375.677880][T16946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 375.686793][T16946] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 375.762928][T16908] wg2 speed is unknown, defaulting to 1000 [ 375.774248][T16908] xfrm0 speed is unknown, defaulting to 1000 [ 376.503664][T16985] __nla_validate_parse: 1 callbacks suppressed [ 376.503684][T16985] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2677'. [ 376.529030][T16908] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.538311][T16908] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.545933][T16908] bridge_slave_0: entered allmulticast mode [ 376.554185][T16908] bridge_slave_0: entered promiscuous mode [ 376.568173][T16908] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.577140][T16908] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.584665][T16908] bridge_slave_1: entered allmulticast mode [ 376.592493][T16908] bridge_slave_1: entered promiscuous mode [ 376.625913][T16908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.641848][T16908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.675268][T16908] team0: Port device team_slave_0 added [ 376.684276][T16908] team0: Port device team_slave_1 added [ 376.711310][ T5611] Bluetooth: hci3: command tx timeout [ 376.722860][T16908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.729926][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.756196][T16908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.777743][T16908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.791654][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.821495][T16908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.953256][T16908] hsr_slave_0: entered promiscuous mode [ 376.960159][T16908] hsr_slave_1: entered promiscuous mode [ 376.961145][T16994] Cannot find del_set index 0 as target [ 376.970049][T16908] debugfs: 'hsr0' already exists in 'hsr' [ 376.979310][T16908] Cannot create hsr debugfs directory [ 376.986293][T16996] sctp: [Deprecated]: syz.5.2678 (pid 16996) Use of int in max_burst socket option deprecated. [ 376.986293][T16996] Use struct sctp_assoc_value instead [ 377.538004][T16908] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.637589][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 377.705857][T17028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2685'. [ 377.726450][T17029] netlink: 'syz.4.2686': attribute type 1 has an invalid length. [ 377.856544][T16908] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.858299][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 377.980450][ T6050] udevd[6050]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 377.999779][T17029] bridge1: entered promiscuous mode [ 378.029485][ T6050] udevd[6050]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 378.070172][T16908] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.179689][T16908] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.413822][T17041] x_tables: duplicate underflow at hook 2 [ 378.505547][T17047] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 378.566443][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.672024][T16908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.699033][T17050] netlink: Unknown conntrack attr (0) [ 378.710706][T17050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2690'. [ 378.791617][ T5611] Bluetooth: hci3: command tx timeout [ 378.814739][T16908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.837774][T16908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.853428][T16908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.880625][T16908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.893897][T16908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.902445][T16908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.925980][T16908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.104412][T16908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.195553][T16908] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.229045][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.236306][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.259923][T13196] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.267146][T13196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.362455][T17075] lo: entered allmulticast mode [ 379.376343][T16908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.512595][T17080] lo: left allmulticast mode [ 379.935854][T17106] netlink: 'syz.4.2698': attribute type 22 has an invalid length. [ 379.963774][T16908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.047601][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'. [ 380.066938][T17108] bond0: option lp_interval: invalid value (0) [ 380.075388][T17108] bond0: option lp_interval: allowed values 1 - 2147483647 [ 380.085582][T16908] veth0_vlan: entered promiscuous mode [ 380.113603][T16908] veth1_vlan: entered promiscuous mode [ 380.184802][T16908] veth0_macvtap: entered promiscuous mode [ 380.205838][T16908] veth1_macvtap: entered promiscuous mode [ 380.248358][T16908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.283528][T16908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.334548][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2702'. [ 380.382475][T13196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.422840][T13196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.461005][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.474384][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.565993][T17112] netlink: 'syz.1.2701': attribute type 2 has an invalid length. [ 380.628321][T13196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.658406][T13196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.727342][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.739362][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.747151][T17123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2704'. [ 380.768100][ T57] IPVS: starting estimator thread 0... [ 380.785121][T17125] IPVS: nq: FWM 3 0x00000003 - no destination available [ 380.864344][T17126] IPVS: using max 37 ests per chain, 88800 per kthread [ 380.873111][ T5611] Bluetooth: hci3: command tx timeout [ 381.237737][T17149] 8021q: VLANs not supported on vcan0 [ 381.274081][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 381.288899][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'. [ 381.378489][T17151] team0: Port device team_slave_0 removed [ 381.405984][T17152] syzkaller1: entered promiscuous mode [ 381.414306][T17152] syzkaller1: entered allmulticast mode [ 381.519671][T17160] __nla_validate_parse: 4 callbacks suppressed [ 381.519690][T17160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2713'. [ 381.759954][T17174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2718'. [ 381.786996][T17174] syzkaller1: entered promiscuous mode [ 381.793468][T17174] syzkaller1: entered allmulticast mode [ 381.873916][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2719'. [ 381.948513][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2719'. [ 382.077822][T17182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2720'. [ 382.098396][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 382.133085][T17182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2720'. [ 382.143847][T17182] netlink: 'syz.1.2720': attribute type 32 has an invalid length. [ 382.153943][T17182] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2720'. [ 382.740716][T17217] bond14: Unable to set up delay as MII monitoring is disabled [ 382.753889][T17217] bond14 (unregistering): Released all slaves [ 382.877899][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'. [ 382.953199][ T5611] Bluetooth: hci3: command tx timeout [ 383.004574][T17220] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2726'. [ 383.154041][T17245] netlink: 'syz.2.2739': attribute type 32 has an invalid length. [ 383.207922][T17245] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.215554][T17245] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.389349][T17245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.416549][T17245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.622268][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.633885][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.644540][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.655947][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.712500][T17258] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 383.720280][T17256] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 383.736825][T17256] netlink: 'syz.1.2742': attribute type 2 has an invalid length. [ 383.749514][T17258] sctp: [Deprecated]: syz.1.2742 (pid 17258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.749514][T17258] Use struct sctp_sack_info instead [ 383.956414][T17269] netlink: 'syz.5.2744': attribute type 1 has an invalid length. [ 384.127691][T17269] 8021q: adding VLAN 0 to HW filter on device bond14 [ 384.214477][T17282] bond14: (slave dummy0): making interface the new active one [ 384.241701][T17282] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 384.478124][T17301] netlink: 'syz.2.2753': attribute type 62 has an invalid length. [ 384.545052][T17303] vlan2: entered allmulticast mode [ 384.560785][T17303] gretap0: entered allmulticast mode [ 384.894908][T17331] netlink: 'syz.1.2762': attribute type 9 has an invalid length. [ 385.038359][T17339] bridge_slave_0: left allmulticast mode [ 385.046681][T17339] bridge_slave_0: left promiscuous mode [ 385.055265][T17339] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.067377][T17339] bridge_slave_1: left allmulticast mode [ 385.073731][T17339] bridge_slave_1: left promiscuous mode [ 385.079725][T17339] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.107691][T17339] bond0: (slave bond_slave_0): Releasing backup interface [ 385.138702][T17339] bond0: (slave bond_slave_1): Releasing backup interface [ 385.149508][T17339] team0: Port device team_slave_1 removed [ 385.158054][T17339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.167649][T17339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.183349][T17339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.506481][T17371] tun0: tun_chr_ioctl cmd 1074025675 [ 385.520380][T17371] tun0: persist enabled [ 385.526451][T17371] tun0: tun_chr_ioctl cmd 1074025675 [ 385.532203][T17371] tun0: persist enabled [ 385.599378][T17378] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 385.945293][T17400] netlink: 'syz.2.2778': attribute type 55 has an invalid length. [ 386.348696][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880344d5000: rx timeout, send abort [ 386.358305][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880344d5000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 386.529238][T17428] __nla_validate_parse: 11 callbacks suppressed [ 386.529258][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 386.547853][T17428] tipc: Invalid UDP bearer configuration [ 386.547908][T17428] tipc: Enabling of bearer rejected, failed to enable media [ 386.664257][T17437] bond1: Removing last arp target with arp_interval on [ 386.675634][T17440] lo: entered allmulticast mode [ 386.784053][T17444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2788'. [ 387.066985][T17460] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2793'. [ 387.277062][T17477] netlink: 'syz.1.2798': attribute type 1 has an invalid length. [ 387.311450][T17477] bond2: entered promiscuous mode [ 387.317246][T17477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.419855][T17429] lo: left allmulticast mode [ 387.457696][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2798'. [ 387.589639][T17483] ip6gre3: entered promiscuous mode [ 387.600340][T17483] ip6gre3: entered allmulticast mode [ 387.734964][T17489] netlink: 'syz.0.2797': attribute type 2 has an invalid length. [ 388.008365][T17494] netlink: 'syz.4.2803': attribute type 11 has an invalid length. [ 388.031047][T17494] netlink: 'syz.4.2803': attribute type 4 has an invalid length. [ 388.056141][T17494] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2803'. [ 388.082549][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 388.172417][T13196] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.188712][T13196] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.202270][T14370] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 388.222717][T17505] ovs-s!: entered promiscuous mode [ 388.473076][T17522] hsr0: entered allmulticast mode [ 388.482025][T17522] hsr_slave_0: entered allmulticast mode [ 388.494031][T17522] hsr_slave_1: entered allmulticast mode [ 388.515984][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 388.555928][T17527] netlink: 'syz.5.2815': attribute type 1 has an invalid length. [ 388.578545][T17522] hsr_slave_0: left promiscuous mode [ 388.592736][T17522] hsr_slave_1: left promiscuous mode [ 388.619678][T17522] hsr0 (unregistering): left allmulticast mode [ 388.663454][T17532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2816'. [ 388.688361][T17527] bond15: entered promiscuous mode [ 388.695770][T17527] 8021q: adding VLAN 0 to HW filter on device bond15 [ 388.772402][T17535] netlink: 'syz.4.2818': attribute type 40 has an invalid length. [ 388.782434][T17535] "syz.4.2818" (17535) uses obsolete ecb(arc4) skcipher [ 388.808757][T17532] hsr_slave_1 (unregistering): left promiscuous mode [ 388.817370][T17535] netlink: 'syz.4.2818': attribute type 2 has an invalid length. [ 388.854945][T17527] 8021q: adding VLAN 0 to HW filter on device bond15 [ 388.865453][T17527] bond15: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 388.878705][T17527] bond15: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 388.895108][T17527] bond15: (slave ip6gre4): making interface the new active one [ 388.902919][T17527] ip6gre4: entered promiscuous mode [ 388.909571][T17527] bond15: (slave ip6gre4): Enslaving as an active interface with an up link [ 389.010456][T17542] lo speed is unknown, defaulting to 1000 [ 389.017864][T17542] lo speed is unknown, defaulting to 1000 [ 389.026204][T17543] siw: device registration error -23 [ 389.040594][T17542] lo speed is unknown, defaulting to 1000 [ 389.048892][T17542] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 389.068342][T17542] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 389.090072][T17542] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 389.108357][T17542] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 389.139510][T17542] lo speed is unknown, defaulting to 1000 [ 389.147087][T17542] lo speed is unknown, defaulting to 1000 [ 389.154688][T17542] lo speed is unknown, defaulting to 1000 [ 389.162234][T17542] lo speed is unknown, defaulting to 1000 [ 389.169462][T17542] lo speed is unknown, defaulting to 1000 [ 389.178291][T17542] lo speed is unknown, defaulting to 1000 [ 389.185448][T17542] lo speed is unknown, defaulting to 1000 [ 389.192424][T14370] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 389.201243][T14370] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 389.295519][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2822'. [ 389.830523][T17577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2829'. [ 390.207813][T17597] bond0: invalid ARP target 0.0.0.0 specified for addition [ 390.216102][T17597] bond0: option arp_ip_target: invalid value (0) [ 390.637818][T17618] "syz.4.2842" (17618) uses obsolete ecb(arc4) skcipher [ 390.705623][T17622] "syz.4.2842" (17622) uses obsolete ecb(arc4) skcipher [ 390.723519][T17620] netlink: 'syz.5.2843': attribute type 1 has an invalid length. [ 391.077607][T17639] bond1: entered promiscuous mode [ 391.346606][T17664] Bluetooth: ISO socket layer initialized [ 391.347616][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.360133][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.890098][T17649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.940251][T17649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.321899][ T168] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.365236][ T168] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.391017][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.420943][ T155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.451232][ T155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.631111][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.837918][T17690] tc_dump_action: action bad kind [ 393.033217][T17710] __nla_validate_parse: 8 callbacks suppressed [ 393.033238][T17710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2861'. [ 393.103567][T17717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2864'. [ 393.210133][T17724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2866'. [ 393.221691][T17729] netlink: 'syz.1.2867': attribute type 1 has an invalid length. [ 393.243672][T17724] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2866'. [ 393.409901][T17729] bond3: entered promiscuous mode [ 393.447604][T17729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.493998][T17731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.503896][T17731] bond3: (slave bond4): making interface the new active one [ 393.512653][T17731] bond4: entered promiscuous mode [ 393.519372][T17731] bond3: (slave bond4): Enslaving as an active interface with an up link [ 393.612389][T17754] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2873'. [ 393.627705][T17754] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.635225][T17754] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.674503][T17756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2873'. [ 393.737210][T17757] bridge0: port 1(vlan1) entered blocking state [ 393.750229][T17757] bridge0: port 1(vlan1) entered disabled state [ 393.758314][T17757] vlan1: entered allmulticast mode [ 393.764996][T17757] geneve0: entered allmulticast mode [ 393.776513][T17757] vlan1: entered promiscuous mode [ 393.782446][T17757] geneve0: entered promiscuous mode [ 393.888661][T17757] netlink: 'syz.5.2875': attribute type 1 has an invalid length. [ 393.902303][T17757] netlink: 'syz.5.2875': attribute type 5 has an invalid length. [ 394.001056][T17769] netlink: 'syz.4.2878': attribute type 49 has an invalid length. [ 394.718250][T17799] netlink: 'syz.5.2884': attribute type 1 has an invalid length. [ 394.778079][T17804] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 394.793099][ T155] nci: nci_ntf_packet: unknown ntf opcode 0x12e [ 394.834598][T17799] 8021q: adding VLAN 0 to HW filter on device bond16 [ 394.848101][T17804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.387921][T17817] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2890'. [ 395.399519][T17817] netlink: 'syz.0.2890': attribute type 10 has an invalid length. [ 395.412717][T17817] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.440160][T17817] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 395.465149][T17796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.733355][T17835] netlink: 'syz.1.2893': attribute type 39 has an invalid length. [ 395.803960][T17835] ipvlan2: entered promiscuous mode [ 395.816714][T17835] batman_adv: batadv0: Adding interface: ipvlan2 [ 395.824453][T17835] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.852861][T17835] batman_adv: batadv0: Interface activated: ipvlan2 [ 395.904955][T17840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2895'. [ 396.003729][T17843] bond5: Removing last arp target with arp_interval on [ 396.449876][T17869] syzkaller1: entered promiscuous mode [ 396.464368][T17869] syzkaller1: entered allmulticast mode [ 397.518900][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 397.683151][T17907] vcan0: tx address claim with dlc 0 [ 397.779761][T17909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.895237][T17915] "syz.5.2919" (17915) uses obsolete ecb(arc4) skcipher [ 397.949017][T17917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2918'. [ 397.959969][T17918] netlink: 'syz.5.2919': attribute type 39 has an invalid length. [ 398.078190][T17920] wg2 speed is unknown, defaulting to 1000 [ 398.099524][T17920] xfrm0 speed is unknown, defaulting to 1000 [ 398.339717][T17928] __nla_validate_parse: 1 callbacks suppressed [ 398.339738][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'. [ 398.356450][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'. [ 398.377151][T17920] lo speed is unknown, defaulting to 1000 [ 398.913505][T17946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2924'. [ 398.979840][T17949] syzkaller1: entered promiscuous mode [ 399.015929][T17949] syzkaller1: entered allmulticast mode [ 399.230430][T17946] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2924'. [ 399.453425][T17968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2932'. [ 399.489883][ T168] IPVS: starting estimator thread 0... [ 399.507994][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 399.591152][T17969] IPVS: using max 25 ests per chain, 60000 per kthread [ 399.699202][T17976] netlink: 'syz.4.2931': attribute type 3 has an invalid length. [ 399.712480][T17971] wg2 speed is unknown, defaulting to 1000 [ 399.746701][T17971] xfrm0 speed is unknown, defaulting to 1000 [ 400.005986][T17983] xt_cgroup: invalid path, errno=-2 [ 400.214537][T17985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.229214][T17984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.457498][T17971] lo speed is unknown, defaulting to 1000 [ 400.951066][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 401.270597][T18015] team0: Port device syz_tun added [ 401.283951][T18020] IPv6: NLM_F_CREATE should be specified when creating new route [ 401.997168][T18051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2955'. [ 402.396800][T18060] wg2 speed is unknown, defaulting to 1000 [ 402.408939][T18060] xfrm0 speed is unknown, defaulting to 1000 [ 402.543962][T18076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2962'. [ 402.615169][T18081] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2963'. [ 402.629295][T18083] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2963'. [ 402.923025][T18093] veth0_to_hsr: entered promiscuous mode [ 402.931513][T18093] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 403.176780][T18101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.460321][T18121] netlink: 4166 bytes leftover after parsing attributes in process `syz.5.2975'. [ 403.543348][T18110] syzkaller0: entered promiscuous mode [ 403.561142][T18110] syzkaller0: entered allmulticast mode [ 405.746189][T18060] lo speed is unknown, defaulting to 1000 [ 405.974366][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2981'. [ 406.016271][T18140] netlink: 'syz.4.2978': attribute type 4 has an invalid length. [ 406.046875][T18136] netlink: 'syz.4.2978': attribute type 4 has an invalid length. [ 406.551232][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.568189][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.576344][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.585818][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.597072][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.814311][ T7117] team0: Port device syz_tun removed [ 407.003493][T18182] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 407.042176][T18184] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 407.068353][T18184] bond0 (unregistering): Released all slaves [ 407.087236][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 407.306768][T18200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2993'. [ 407.422427][T18167] wg2 speed is unknown, defaulting to 1000 [ 407.432530][T18167] xfrm0 speed is unknown, defaulting to 1000 [ 407.575984][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 407.802728][T18225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3001'. [ 407.940014][T18167] lo speed is unknown, defaulting to 1000 [ 407.976208][ T30] audit: type=1804 audit(1787213378.305:8): pid=18233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3003" name="/newroot/121/cgroup.controllers" dev="tmpfs" ino=640 res=1 errno=0 [ 408.007650][ T30] audit: type=1800 audit(1787213378.305:9): pid=18233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3003" name="cgroup.controllers" dev="tmpfs" ino=640 res=0 errno=0 [ 408.385525][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.398064][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.405465][T18167] bridge_slave_0: entered allmulticast mode [ 408.413392][T18167] bridge_slave_0: entered promiscuous mode [ 408.422621][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.429861][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.437726][T18167] bridge_slave_1: entered allmulticast mode [ 408.453654][T18167] bridge_slave_1: entered promiscuous mode [ 408.505789][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.520120][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.593906][T18167] team0: Port device team_slave_0 added [ 408.619051][T18167] team0: Port device team_slave_1 added [ 408.694883][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.702280][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.730621][ T5614] Bluetooth: hci1: command tx timeout [ 408.737221][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.749903][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.756977][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.783195][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.953773][T18167] hsr_slave_0: entered promiscuous mode [ 408.970191][T18167] hsr_slave_1: entered promiscuous mode [ 408.977834][T18167] debugfs: 'hsr0' already exists in 'hsr' [ 408.983920][T18167] Cannot create hsr debugfs directory [ 409.039224][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 409.092421][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'. [ 409.104736][T18264] netlink: 'syz.4.3011': attribute type 11 has an invalid length. [ 409.136229][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3011'. [ 409.828026][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'. [ 409.874424][T18289] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 409.894663][T18289] bond0 (unregistering): Released all slaves [ 409.910701][T18294] netlink: 'syz.4.3019': attribute type 10 has an invalid length. [ 410.483022][T18294] team0: Port device dummy0 added [ 410.791445][ T5614] Bluetooth: hci1: command tx timeout [ 410.962921][T18311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3023'. [ 411.125604][T18317] syzkaller1: entered promiscuous mode [ 411.153991][T18317] syzkaller1: entered allmulticast mode [ 411.318910][T18167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.341500][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.362068][T18167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.394429][T18335] netlink: 'syz.1.3027': attribute type 1 has an invalid length. [ 411.394464][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.410340][T18167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.437391][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.452504][T18167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.477621][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.564589][T18335] 8021q: adding VLAN 0 to HW filter on device bond6 [ 411.725282][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.781500][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.829338][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.836613][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.898748][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.906002][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.200094][T18365] tipc: Started in network mode [ 412.241162][T18365] tipc: Node identity 7f000001, cluster identity 4711 [ 412.249723][T18365] tipc: Enabling of bearer rejected, failed to enable media [ 412.426038][T18383] wg2 speed is unknown, defaulting to 1000 [ 412.447354][T18383] xfrm0 speed is unknown, defaulting to 1000 [ 412.871078][ T5614] Bluetooth: hci1: command tx timeout [ 413.007122][T18383] lo speed is unknown, defaulting to 1000 [ 413.017589][T18397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3036'. [ 413.020246][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.233574][T18404] netlink: 'syz.1.3037': attribute type 6 has an invalid length. [ 413.694278][T18433] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3044'. [ 413.825236][T18167] veth0_vlan: entered promiscuous mode [ 413.851683][T18167] veth1_vlan: entered promiscuous mode [ 413.907915][T18167] veth0_macvtap: entered promiscuous mode [ 413.920459][T18167] veth1_macvtap: entered promiscuous mode [ 413.956544][T18167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.991140][T18167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.122458][T13196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.165829][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.175809][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.213556][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.388784][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.423245][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.466531][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.483762][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.507163][T18447] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3048'. [ 414.545110][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3048'. [ 414.608622][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'. [ 414.619317][T18448] netlink: 'syz.2.3049': attribute type 1 has an invalid length. [ 414.675087][T18448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.700774][T18451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3047'. [ 414.717565][T18452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3049'. [ 414.726971][T18452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3049'. [ 414.820062][T18459] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2983'. [ 414.951564][ T5614] Bluetooth: hci1: command tx timeout [ 415.153129][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'. [ 415.234374][T18471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3052'. [ 415.268375][T18450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3047'. [ 415.412403][T18479] syzkaller0: entered promiscuous mode [ 415.422307][T18479] syzkaller0: entered allmulticast mode [ 415.758212][T18493] syzkaller0: entered promiscuous mode [ 415.781194][T18493] syzkaller0: entered allmulticast mode [ 417.106578][T18567] ip6gre1: entered promiscuous mode [ 417.118041][T18567] ip6gre1: entered allmulticast mode [ 417.146139][T18572] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.214228][T18574] netlink: 'syz.2.3079': attribute type 1 has an invalid length. [ 417.323160][T18574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.416280][T18577] bond2: (slave veth3): Enslaving as an active interface with a down link [ 417.528068][T18578] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.545139][T18578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.608029][T18578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.618926][T18578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.635289][T18578] veth1_vlan: left promiscuous mode [ 417.643028][T18578] veth0_vlan: left promiscuous mode [ 417.650020][T18578] veth0_vlan: entered promiscuous mode [ 417.659765][T18578] veth1_vlan: entered promiscuous mode [ 417.675797][T18578] veth1_macvtap: left promiscuous mode [ 417.685504][T18578] veth0_macvtap: left promiscuous mode [ 417.692818][T18578] veth0_macvtap: entered promiscuous mode [ 417.700132][T18578] veth1_macvtap: entered promiscuous mode [ 417.721089][T18578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.729822][T18578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.740140][T18578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.752674][T18578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.819748][T18578] bond1: left promiscuous mode [ 417.826485][T18578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.886207][T18578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.933821][T18579] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 417.952917][T18579] bond2: (slave batadv1): making interface the new active one [ 417.968985][T18579] batadv1: entered promiscuous mode [ 417.982141][T18579] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 418.027005][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.049717][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.061479][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.231023][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 418.261209][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.275096][T18606] netlink: 'syz.2.3084': attribute type 4 has an invalid length. [ 418.297527][ T13] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 418.351359][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.369625][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.388811][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.607281][T18616] geneve2: entered promiscuous mode [ 418.792461][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.931536][T18628] wg2 speed is unknown, defaulting to 1000 [ 418.939347][T18628] xfrm0 speed is unknown, defaulting to 1000 [ 419.082862][T18640] netlink: 'syz.5.3097': attribute type 2 has an invalid length. [ 419.111853][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.324457][T18628] lo speed is unknown, defaulting to 1000 [ 419.486847][T18628] wg2 speed is unknown, defaulting to 1000 [ 419.496549][T18628] xfrm0 speed is unknown, defaulting to 1000 [ 419.747522][T18628] lo speed is unknown, defaulting to 1000 [ 420.374099][T18660] __nla_validate_parse: 10 callbacks suppressed [ 420.374117][T18660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3100'. [ 420.506654][T18656] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3090'. [ 420.737449][T18691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.744767][T18691] IPv6: NLM_F_CREATE should be set when creating new route [ 420.881601][T18655] wg2 speed is unknown, defaulting to 1000 [ 420.913935][T18655] xfrm0 speed is unknown, defaulting to 1000 [ 421.029567][T18701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3110'. [ 421.046653][T18701] netlink: 660 bytes leftover after parsing attributes in process `syz.2.3110'. [ 421.056760][T18701] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3110'. [ 421.526634][T18712] bond3: invalid ARP target 0.0.0.0 specified for addition [ 421.551017][T18712] bond3: option arp_ip_target: invalid value (0) [ 421.574670][T18712] bond3 (unregistering): Released all slaves [ 421.662276][T18655] lo speed is unknown, defaulting to 1000 [ 422.151373][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.287166][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'. [ 422.341885][T18733] bridge3: port 1(veth0_to_bond) entered blocking state [ 422.370615][T18733] bridge3: port 1(veth0_to_bond) entered disabled state [ 422.394187][T18733] veth0_to_bond: entered allmulticast mode [ 422.403506][T18734] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3119'. [ 422.414683][T18733] veth0_to_bond: entered promiscuous mode [ 422.420503][T18734] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3119'. [ 422.462696][T18732] bridge3: port 2(veth5) entered blocking state [ 422.470019][T18732] bridge3: port 2(veth5) entered disabled state [ 422.487187][T18732] veth5: entered allmulticast mode [ 422.499802][T18732] veth5: entered promiscuous mode [ 422.527206][T18738] bridge_slave_0: left allmulticast mode [ 422.535070][T18738] bridge_slave_0: left promiscuous mode [ 422.551732][T18738] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.578950][T18738] bridge_slave_1: left allmulticast mode [ 422.587573][T18738] bridge_slave_1: left promiscuous mode [ 422.594539][T18738] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.613258][T18738] bond0: (slave bond_slave_0): Releasing backup interface [ 422.643691][T18738] bond0: (slave bond_slave_1): Releasing backup interface [ 422.679755][T18738] team0: Port device team_slave_0 removed [ 422.696508][T18738] team0: Port device team_slave_1 removed [ 422.713087][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.720533][T18738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.736393][T18738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.745348][T18738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.754958][T18738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.853859][T18743] netlink: 'syz.1.3119': attribute type 11 has an invalid length. [ 422.874176][T18743] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3119'. [ 423.006355][T18755] netlink: 'syz.5.3122': attribute type 39 has an invalid length. [ 423.492011][T18769] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3125'. [ 423.864904][T18784] netlink: 'syz.4.3130': attribute type 10 has an invalid length. [ 423.894016][T18784] syz_tun: entered promiscuous mode [ 423.913943][T18784] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 424.004024][T18795] netlink: 'syz.5.3132': attribute type 6 has an invalid length. [ 424.013479][T18800] Bluetooth: MGMT ver 1.23 [ 424.027177][T18799] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 424.134071][T18803] netlink: 'syz.2.3136': attribute type 83 has an invalid length. [ 424.153072][T18807] sctp: [Deprecated]: syz.5.3135 (pid 18807) Use of int in max_burst socket option. [ 424.153072][T18807] Use struct sctp_assoc_value instead [ 425.255652][T18874] pim6reg: entered allmulticast mode [ 425.372444][T18882] syzkaller0: entered promiscuous mode [ 425.382037][T18882] syzkaller0: entered allmulticast mode [ 425.390350][T18883] tipc: Started in network mode [ 425.396157][T18883] tipc: Node identity 0230f9694eb, cluster identity 4711 [ 425.406495][T18883] tipc: Enabled bearer , priority 0 [ 425.494165][T18882] tipc: Resetting bearer [ 425.529289][T18892] netlink: 'syz.4.3160': attribute type 1 has an invalid length. [ 425.538075][T18892] __nla_validate_parse: 4 callbacks suppressed [ 425.538094][T18892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3160'. [ 425.555413][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 425.577356][T18882] tipc: Disabling bearer [ 425.737341][T18903] sctp: [Deprecated]: syz.1.3164 (pid 18903) Use of int in max_burst socket option. [ 425.737341][T18903] Use struct sctp_assoc_value instead [ 425.857937][T18907] syzkaller0: entered promiscuous mode [ 425.869278][T18907] syzkaller0: entered allmulticast mode [ 426.076700][T18922] openvswitch: netlink: Duplicate or invalid key (type 0). [ 426.087640][T18925] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3171'. [ 426.169018][T18923] netlink: 'syz.0.3159': attribute type 23 has an invalid length. [ 426.235619][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 426.293198][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3174'. [ 426.452472][T18945] xt_hashlimit: size too large, truncated to 1048576 [ 426.482577][T18947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3178'. [ 426.596284][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 426.653040][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 426.868840][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 426.912569][T18968] tipc: Enabled bearer , priority 0 [ 426.936196][T18970] netlink: 'syz.4.3184': attribute type 6 has an invalid length. [ 426.944307][T18970] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.017441][T18968] tipc: Disabling bearer [ 427.248609][ T30] audit: type=1800 audit(1787213397.585:10): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3189" name="blkio.bfq.time_recursive" dev="tmpfs" ino=601 res=0 errno=0 [ 427.277936][T18981] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3189'. [ 427.467322][T18993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.479348][T18993] openvswitch: netlink: Flow actions attr not present in new flow. [ 427.738581][T19009] wg2 speed is unknown, defaulting to 1000 [ 427.746884][T19009] xfrm0 speed is unknown, defaulting to 1000 [ 428.159095][T19009] lo speed is unknown, defaulting to 1000 [ 428.255677][T19028] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 428.297137][T19002] x_tables: duplicate underflow at hook 1 [ 428.480267][T19045] IPVS: set_ctl: invalid protocol: 50 172.20.20.51:20003 [ 428.490053][T19034] ip_tables: iptables: counters copy to user failed while replacing table [ 428.559075][T19035] syzkaller1: entered promiscuous mode [ 428.583535][T19035] syzkaller1: entered allmulticast mode [ 429.000362][T19065] netlink: 'syz.5.3209': attribute type 1 has an invalid length. [ 429.328300][T19080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.338705][T19080] team0: Port device bond2 added [ 429.402591][ T47] batadv1: left promiscuous mode [ 429.691960][T19094] netlink: 'syz.4.3215': attribute type 9 has an invalid length. [ 429.751240][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 429.820604][T19095] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 429.963703][T19112] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 430.077156][T19112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.131914][T19112] dummy0: entered allmulticast mode [ 430.209986][T19112] bond3: (slave dummy0): making interface the new active one [ 430.246087][T19123] netlink: zone id is out of range [ 430.252964][T19112] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 430.262502][T19123] netlink: zone id is out of range [ 430.269779][T19123] netlink: get zone limit has 4 unknown bytes [ 430.303535][T19118] netlink: ct family unspecified [ 430.316775][T19118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.382432][T19128] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 430.401566][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.678770][T19152] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 430.878974][T19158] __nla_validate_parse: 11 callbacks suppressed [ 430.878993][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3235'. [ 431.063537][T19162] tc_dump_action: action bad kind [ 431.073245][T19162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3237'. [ 431.317043][T19169] netlink: Failed to add filter helper -22 [ 431.323870][T19169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.572451][T19176] netlink: 'syz.0.3240': attribute type 7 has an invalid length. [ 431.835204][T19183] tipc: Can't bind to reserved service type 1 [ 431.869824][T19176] netlink: 'syz.0.3240': attribute type 7 has an invalid length. [ 432.277884][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3249'. [ 432.340200][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'. [ 432.356656][T19203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.488119][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3253'. [ 432.504877][T19214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3253'. [ 432.617047][T19219] netlink: 'syz.1.3254': attribute type 4 has an invalid length. [ 432.666412][T19219] netlink: 'syz.1.3254': attribute type 4 has an invalid length. [ 432.983754][T19234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3248'. [ 433.252805][T19264] block nbd2: server does not support multiple connections per device. [ 433.279943][T19264] block nbd2: shutting down sockets [ 433.328160][T19269] netlink: 'syz.0.3267': attribute type 1 has an invalid length. [ 433.656887][T19269] vxcan3: entered promiscuous mode [ 433.827183][T19300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3274'. [ 433.849676][T19264] tipc: Resetting bearer [ 434.029489][T19264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.059052][T19264] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 434.259166][T19264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.272591][T19264] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 434.309595][T19264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.319274][T19264] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 434.592562][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3280'. [ 434.624569][T19333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3280'. [ 435.175432][T19360] Unknown options in mask 6 [ 436.559655][T19417] __nla_validate_parse: 2 callbacks suppressed [ 436.559674][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3298'. [ 436.652509][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3298'. [ 436.699477][T19417] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 437.009344][T19428] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3302'. [ 437.035289][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 437.045008][T19426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3301'. [ 437.135990][T19426] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 437.455894][T19426] bond4 (unregistering): Released all slaves [ 437.765514][T19458] bond0: option arp_validate: invalid value (55553) [ 437.789399][ T13] bond0: (slave bond_slave_0): interface is now down [ 437.826679][ T13] bond0: (slave bond_slave_1): interface is now down [ 437.883016][ T13] bond0: now running without any active interface! [ 438.258289][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3316'. [ 438.274437][T19477] block nbd2: server does not support multiple connections per device. [ 438.284118][T19477] block nbd2: shutting down sockets [ 438.558110][T19497] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 438.581830][T19497] bond3 (unregistering): Released all slaves [ 438.716502][T19506] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3321'. [ 439.138294][T19529] Bluetooth: hci0: unsupported parameter 5135 [ 439.151968][T19531] IPVS: set_ctl: invalid protocol: 0 172.30.0.6:20002 [ 439.160322][T19529] Bluetooth: hci0: unsupported parameter 8192 [ 439.177643][T19529] Bluetooth: hci0: unsupported parameter 5135 [ 439.197582][T19529] Bluetooth: hci0: unsupported parameter 8192 [ 439.209917][T19538] macvlan0: entered promiscuous mode [ 439.223902][T19539] x_tables: duplicate underflow at hook 2 [ 439.634279][T19562] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3338'. [ 439.646039][T19562] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3338'. [ 439.675607][T19562] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3338'. [ 439.829609][T19564] IPVS: Scheduler module ip_vs_sip not found [ 439.923447][T19570] --map-set only usable from mangle table [ 439.995016][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.019475][T19572] tc_dump_action: action bad kind [ 440.177125][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3342'. [ 440.230411][T19579] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 440.253703][T19579] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 440.273747][T19579] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 440.627001][T19599] xt_hl: Unknown Hop Limit match mode: 4 [ 440.635877][T19598] xt_hl: Unknown Hop Limit match mode: 4 [ 441.067964][T19617] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 441.204300][T19621] netlink: 'syz.5.3354': attribute type 12 has an invalid length. [ 441.404454][T19633] ip6t_srh: unknown srh match flags 4000 [ 441.732274][T19648] __nla_validate_parse: 4 callbacks suppressed [ 441.732295][T19648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3361'. [ 442.074989][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3368'. [ 442.157691][T19666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3365'. [ 442.172952][T19684] netlink: 'syz.1.3369': attribute type 83 has an invalid length. [ 442.274526][T19691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3372'. [ 442.664843][T19708] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.746799][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3379'. [ 443.047091][T19725] tipc: Started in network mode [ 443.053829][T19725] tipc: Node identity 02cbc550db68, cluster identity 4711 [ 443.070651][T19725] tipc: Enabled bearer , priority 0 [ 443.080088][T19723] syzkaller0: entered promiscuous mode [ 443.086944][T19723] syzkaller0: entered allmulticast mode [ 443.096777][T19723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3384'. [ 443.118958][T19722] tipc: Resetting bearer [ 443.170547][T19722] tipc: Disabling bearer [ 443.248762][T19729] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 443.287262][T19729] tipc: Enabling of bearer rejected, failed to enable media [ 443.306597][T19729] netlink: 'syz.5.3386': attribute type 10 has an invalid length. [ 443.344344][T19729] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.391622][T19729] bond0: (slave team0): Enslaving as an active interface with an up link [ 443.421870][T19739] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 443.436896][T19738] netlink: 'syz.4.3389': attribute type 2 has an invalid length. [ 443.784672][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3397'. [ 443.829359][T19769] netlink: 'syz.2.3399': attribute type 3 has an invalid length. [ 443.846264][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3399'. [ 443.863744][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3399'. [ 443.879423][T19767] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3398'. [ 444.226900][T19791] 0: reclassify loop, rule prio 0, protocol 03 [ 444.635012][T19810] netlink: 'syz.2.3410': attribute type 1 has an invalid length. [ 444.749455][T19818] Cannot find del_set index 3 as target [ 444.793873][T19816] bond4: (slave bridge5): making interface the new active one [ 444.818194][T19816] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 445.023228][T19837] netlink: 'syz.2.3416': attribute type 9 has an invalid length. [ 445.128207][T19832] x_tables: duplicate underflow at hook 2 [ 445.204737][T19852] netlink: 'syz.4.3421': attribute type 2 has an invalid length. [ 445.315339][T19846] netlink: 'syz.2.3419': attribute type 1 has an invalid length. [ 445.343682][T19847] netlink: 'syz.2.3419': attribute type 1 has an invalid length. [ 445.396942][T19846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.628820][T19868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.392244][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.494312][T19884] validate_nla: 1 callbacks suppressed [ 446.494332][T19884] netlink: 'syz.2.3430': attribute type 2 has an invalid length. [ 446.543061][T19884] netlink: 'syz.2.3430': attribute type 32 has an invalid length. [ 446.672791][T19888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.755449][T19895] syzkaller0: entered promiscuous mode [ 446.780743][T19895] syzkaller0: entered allmulticast mode [ 446.866132][T19902] netlink: 'syz.5.3435': attribute type 7 has an invalid length. [ 446.906178][T19902] __nla_validate_parse: 8 callbacks suppressed [ 446.906197][T19902] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3435'. [ 446.923111][T19902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3435'. [ 446.934966][T19902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3435'. [ 447.014898][T19905] openvswitch: netlink: IP tunnel dst address not specified [ 447.178965][T19915] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3440'. [ 447.189399][T19915] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3440'. [ 447.207349][T19916] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3439'. [ 447.377951][T19928] netlink: NAT attribute has 5 unknown bytes [ 447.384699][T19928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.401979][T19928] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3441'. [ 447.476788][T19930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3445'. [ 447.489620][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'. [ 447.503080][T19930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3445'. [ 449.082277][T19990] syzkaller0: entered promiscuous mode [ 449.096883][T19990] syzkaller0: entered allmulticast mode [ 449.177637][T20010] IPVS: Scheduler module ip_vs_sip not found [ 450.144596][T20049] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 452.100147][T20079] __nla_validate_parse: 8 callbacks suppressed [ 452.100166][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3472'. [ 452.116435][T20081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 452.126639][T20081] block nbd2: Unsupported socket: should be TCP or UNIX. [ 452.140339][T20081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.254789][T20084] netlink: 'syz.1.3474': attribute type 11 has an invalid length. [ 452.315424][T20084] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.322695][T20084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.330503][T20084] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.337765][T20084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.443616][T20084] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 452.791068][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 453.004548][T20119] smc: adding net device wg2 with user defined pnetid SYZ0 [ 453.139119][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.146559][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.152760][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.158886][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.165042][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.171186][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.177303][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.183453][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.189593][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.195745][T20134] tc action pedit 'at' offset 5 out of bounds [ 453.201915][T20134] 0: reclassify loop, rule prio 0, protocol 800 [ 453.359873][T20107] netlink: 'syz.0.3477': attribute type 1 has an invalid length. [ 453.671502][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3490'. [ 453.709382][T20153] vlan2: entered allmulticast mode [ 453.719692][T20153] bridge6: entered allmulticast mode [ 453.778980][T20153] bridge6: port 1(erspan0) entered blocking state [ 453.819481][T20153] bridge6: port 1(erspan0) entered disabled state [ 453.831951][T20153] erspan0: entered allmulticast mode [ 453.839907][T20153] erspan0: entered promiscuous mode [ 453.847439][T20153] bridge6: port 1(erspan0) entered blocking state [ 453.854079][T20153] bridge6: port 1(erspan0) entered forwarding state [ 453.880167][T20161] bridge6: port 1(erspan0) entered disabled state [ 454.256543][T20183] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3498'. [ 454.837761][T20214] bond0: (slave team0): Releasing backup interface [ 454.904097][T20214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.944129][T20221] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 454.959208][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 454.969958][T20221] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3508'. [ 454.977469][T20221] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3508'. [ 455.180009][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 455.235730][T20234] ip_tables: iptables: counters copy to user failed while replacing table [ 455.378844][T20234] syzkaller0: entered promiscuous mode [ 455.414558][T20234] syzkaller0: entered allmulticast mode [ 455.649246][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3513'. [ 455.782854][T20261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3521'. [ 456.276825][T20271] dvmrp0: entered allmulticast mode [ 456.292687][T20271] dvmrp1: entered allmulticast mode [ 456.299295][T20271] dvmrp0: left allmulticast mode [ 456.304737][T20271] dvmrp1: left allmulticast mode [ 456.365362][T20270] wireguard0: entered promiscuous mode [ 456.372116][T20270] wireguard0: entered allmulticast mode [ 456.456459][ T30] audit: type=1804 audit(1787213426.795:11): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3527" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=978 res=1 errno=0 [ 456.538262][T20276] netlink: 'syz.0.3523': attribute type 2 has an invalid length. [ 456.550672][ T30] audit: type=1800 audit(1787213426.795:12): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3527" name="cgroup.controllers" dev="tmpfs" ino=978 res=0 errno=0 [ 456.721911][T20276] : entered promiscuous mode [ 456.855504][T20302] netlink: 'syz.1.3529': attribute type 10 has an invalid length. [ 456.968068][T20302] dummy0: entered promiscuous mode [ 457.010040][T20307] netlink: 'syz.5.3534': attribute type 1 has an invalid length. [ 457.018126][T20307] netlink: 'syz.5.3534': attribute type 1 has an invalid length. [ 457.072553][ T5614] block nbd2: Receive control failed (result -107) [ 457.137859][T20309] tipc: New replicast peer: 127.0.0.1 [ 457.147785][T20309] tipc: Enabled bearer , priority 10 [ 457.180355][T20315] __nla_validate_parse: 6 callbacks suppressed [ 457.180376][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 457.289141][T20319] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 457.327885][ T5614] block nbd3: Receive control failed (result -107) [ 457.377727][T20329] netlink: 'syz.1.3541': attribute type 4 has an invalid length. [ 457.514529][T20330] wg2 speed is unknown, defaulting to 1000 [ 457.564505][T20330] xfrm0 speed is unknown, defaulting to 1000 [ 457.636977][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3547'. [ 457.672991][T20351] netlink: 'syz.1.3546': attribute type 10 has an invalid length. [ 458.114185][T20330] lo speed is unknown, defaulting to 1000 [ 458.697075][T20376] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3553'. [ 458.735937][T20376] netlink: 'syz.5.3553': attribute type 1 has an invalid length. [ 458.837515][T20374] netlink: 'syz.1.3550': attribute type 12 has an invalid length. [ 458.948760][T20376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.977461][T20376] netlink: 'syz.5.3553': attribute type 10 has an invalid length. [ 458.985666][T20376] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3553'. [ 459.011466][T20379] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 459.022759][T20378] syz_tun: left promiscuous mode [ 459.078626][T20378] macvlan0: left promiscuous mode [ 459.119271][T20378] ip6gre1: left promiscuous mode [ 459.128190][T20378] ip6gre1: left allmulticast mode [ 459.212138][T20381] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 459.282806][ T1142] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 459.340462][T20376] dummy0: entered promiscuous mode [ 459.349828][T20376] bond2: (slave dummy0): Removing an active aggregator [ 459.368420][T20376] bond2: (slave dummy0): Releasing backup interface [ 459.395615][T20384] syzkaller1: entered promiscuous mode [ 459.411566][T20384] syzkaller1: entered allmulticast mode [ 459.753889][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 460.237117][T20418] bond3: ARP target 9.0.0.0 is already present [ 460.243761][T20418] bond3: option arp_ip_target: invalid value (9) [ 460.247498][T20428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3564'. [ 460.263305][T20418] bond3 (unregistering): Released all slaves [ 460.426270][T20432] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 460.583891][T20443] netlink: 'syz.1.3569': attribute type 178 has an invalid length. [ 460.699654][T20445] netlink: 'syz.4.3570': attribute type 12 has an invalid length. [ 460.872388][T20452] wg2 speed is unknown, defaulting to 1000 [ 460.894892][T20452] xfrm0 speed is unknown, defaulting to 1000 [ 460.983032][T20464] netlink: 'syz.2.3574': attribute type 2 has an invalid length. [ 461.001664][T20464] netlink: 'syz.2.3574': attribute type 2 has an invalid length. [ 461.280272][T20452] lo speed is unknown, defaulting to 1000 [ 462.243845][T20504] batadv_slave_1: entered promiscuous mode [ 462.432394][T20512] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3588'. [ 462.450301][T20512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3588'. [ 462.630192][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3589'. [ 462.705072][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 462.754597][T20521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3591'. [ 462.827897][T20521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.855405][T20521] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.904852][T20521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.966647][T20521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.979252][T20521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.007582][T20521] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 463.046364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.053605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.066986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.074336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.320621][T20533] wg2 speed is unknown, defaulting to 1000 [ 463.329658][T20505] batadv_slave_1: left promiscuous mode [ 463.372831][T20533] xfrm0 speed is unknown, defaulting to 1000 [ 463.509776][T20539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3597'. [ 463.549684][T20540] syz_tun: entered allmulticast mode [ 463.567303][T20541] syz_tun: left allmulticast mode [ 463.754241][ T30] audit: type=1800 audit(1787213434.085:13): pid=20544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3598" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=1041 res=0 errno=0 [ 463.879623][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3599'. [ 463.915373][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3599'. [ 463.944941][T20547] netlink: 'syz.5.3599': attribute type 3 has an invalid length. [ 464.012557][T20547] netlink: 'syz.5.3599': attribute type 1 has an invalid length. [ 464.061520][T20547] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3599'. [ 464.112958][T20547] NCSI netlink: No device for ifindex 0 [ 464.173923][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3599'. [ 464.177660][T20533] lo speed is unknown, defaulting to 1000 [ 464.539580][T20570] ip_tables: iptables: counters copy to user failed while replacing table [ 464.752206][ T1142] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.780928][ T1142] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.796880][T20586] IPv6: Can't replace route, no match found [ 464.806141][ T1142] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.818505][ T1142] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.352810][T20604] veth7: entered allmulticast mode [ 465.527069][T20608] netlink: 'syz.2.3612': attribute type 6 has an invalid length. [ 465.657886][T20613] netlink: 'syz.1.3613': attribute type 4 has an invalid length. [ 465.715224][T20608] netlink: 'syz.2.3612': attribute type 6 has an invalid length. [ 465.724148][T13196] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.812726][T13196] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.842074][T13196] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.877735][T13196] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.933822][T20629] netlink: 'syz.5.3617': attribute type 61 has an invalid length. [ 466.293457][T20638] vlan5: entered promiscuous mode [ 466.719637][T20658] netlink: Setting conntrack mark requires 'commit' flag. [ 466.728350][T20658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.828791][T20661] tipc: Enabling not permitted [ 466.841295][T20661] tipc: Enabling of bearer rejected, failed to enable media [ 466.930408][T20668] xt_hashlimit: size too large, truncated to 1048576 [ 466.932370][T20661] syzkaller0: entered promiscuous mode [ 466.943124][T20668] xt_hashlimit: max too large, truncated to 1048576 [ 466.943179][T20661] syzkaller0: entered allmulticast mode [ 467.138977][T20673] netlink: 'syz.5.3632': attribute type 9 has an invalid length. [ 467.147798][T20673] netlink: 'syz.5.3632': attribute type 6 has an invalid length. [ 467.210294][T20671] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.251962][T13196] bridge3: port 1(veth0_to_bond) entered blocking state [ 467.259120][T13196] bridge3: port 1(veth0_to_bond) entered forwarding state [ 467.303312][T20675] syzkaller1: entered promiscuous mode [ 467.321471][T20675] syzkaller1: entered allmulticast mode [ 467.508943][T20681] __nla_validate_parse: 12 callbacks suppressed [ 467.508961][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3634'. [ 467.647479][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 467.798287][T20701] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 467.832357][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3639'. [ 468.146610][T20717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3646'. [ 468.175595][T20716] xt_socket: unknown flags 0x8 [ 468.340552][T20727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3649'. [ 468.440485][T20733] syzkaller1: entered promiscuous mode [ 468.450634][T20733] syzkaller1: entered allmulticast mode [ 468.607411][T20741] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 468.712832][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'. [ 468.816337][T20741] bond7: entered promiscuous mode [ 468.822994][T20741] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.843458][T20745] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.856719][T20745] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 468.867879][T20745] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 468.954047][T20746] 8021q: adding VLAN 0 to HW filter on device bond8 [ 469.258609][T20771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3662'. [ 469.327784][T20773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3662'. [ 469.346988][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3663'. [ 469.365560][T20771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3662'. [ 469.379265][T20771] bridge_slave_1: left allmulticast mode [ 469.401040][T20771] bridge_slave_1: left promiscuous mode [ 469.411469][T20771] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.428452][T20771] bridge_slave_0: left allmulticast mode [ 469.437823][T20771] bridge_slave_0: left promiscuous mode [ 469.461229][T20771] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.607380][T20788] ip6gretap1: entered promiscuous mode [ 469.854320][T20804] netlink: 'syz.0.3672': attribute type 11 has an invalid length. [ 469.884075][T20798] 8021q: adding VLAN 0 to HW filter on device bond9 [ 470.175183][T20804] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.259982][T20804] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 470.317080][ T5621] xfrm0 speed is unknown, defaulting to 1000 [ 470.343344][T20814] syzkaller0: mtu less than device minimum [ 470.615837][T20836] siw: device registration error -23 [ 470.623828][T20836] netlink: 'syz.4.3681': attribute type 6 has an invalid length. [ 470.818963][T20844] netlink: 'syz.2.3685': attribute type 10 has an invalid length. [ 470.966143][T20853] netlink: 'syz.0.3683': attribute type 30 has an invalid length. [ 471.053903][T20853] ip6gretap0: entered promiscuous mode [ 471.074391][T20857] tipc: New replicast peer: 255.255.255.255 [ 471.099926][T20857] tipc: Enabled bearer , priority 10 [ 471.146999][T20863] xt_CT: No such helper "syz1" [ 471.154620][T20869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.161936][T20869] IPv6: NLM_F_CREATE should be set when creating new route [ 471.205489][T20871] xt_hashlimit: size too large, truncated to 1048576 [ 471.306179][T20871] xt_hashlimit: overflow, try lower: 3/0 [ 471.375880][T20871] xt_hashlimit: size too large, truncated to 1048576 [ 471.406056][T20871] xt_hashlimit: overflow, try lower: 3/0 [ 471.559108][T20871] xt_hashlimit: size too large, truncated to 1048576 [ 471.632964][T20871] xt_hashlimit: overflow, try lower: 3/0 [ 471.790732][T20871] xt_hashlimit: size too large, truncated to 1048576 [ 471.813162][T20897] syzkaller1: entered promiscuous mode [ 471.837563][T20897] syzkaller1: entered allmulticast mode [ 471.857323][T20871] xt_hashlimit: overflow, try lower: 3/0 [ 471.867091][T20902] syzkaller0: entered promiscuous mode [ 471.875278][T20902] syzkaller0: entered allmulticast mode [ 471.967636][T20871] xt_hashlimit: size too large, truncated to 1048576 [ 472.046833][T20871] xt_hashlimit: overflow, try lower: 3/0 [ 472.194306][ T5340] tipc: Node number set to 1283520873 [ 472.348900][T20921] netlink: 'syz.4.3703': attribute type 1 has an invalid length. [ 472.415034][T20923] bond0: entered allmulticast mode [ 472.764520][T20947] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 472.781378][T20948] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 472.831607][T20947] SET target dimension over the limit! [ 473.528359][T20979] __nla_validate_parse: 15 callbacks suppressed [ 473.528381][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3721'. [ 473.634347][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'. [ 474.065969][T21003] IPVS: set_ctl: invalid protocol: 41 172.30.1.5:20000 [ 474.139577][T21009] tipc: Trying to set illegal importance in message [ 474.172127][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 474.203939][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 474.228584][T21014] syzkaller0: entered promiscuous mode [ 474.245238][T21014] syzkaller0: entered allmulticast mode [ 474.516527][T21030] netlink: 'syz.0.3723': attribute type 21 has an invalid length. [ 474.525351][T21030] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.536021][T21030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.543353][T21030] IPv6: NLM_F_CREATE should be set when creating new route [ 474.550693][T21030] IPv6: NLM_F_CREATE should be set when creating new route [ 474.558008][T21030] IPv6: NLM_F_CREATE should be set when creating new route [ 474.740660][T21034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3736'. [ 474.764618][T21034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3736'. [ 474.948142][T21043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3738'. [ 475.100125][T21048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3739'. [ 475.117931][T21048] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 475.155318][T21048] team0 (unregistering): Port device team_slave_0 removed [ 475.206633][T21048] team0 (unregistering): Port device team_slave_1 removed [ 475.227957][T21048] team0 (unregistering): Port device wlan0 removed [ 475.257041][T21057] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3739'. [ 475.275315][T21050] netlink: 'syz.5.3740': attribute type 1 has an invalid length. [ 475.303783][T21048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 475.318327][T21059] netlink: 'syz.4.3743': attribute type 32 has an invalid length. [ 475.341938][T21059] netlink: 'syz.4.3743': attribute type 32 has an invalid length. [ 475.419187][T21068] bond0: left allmulticast mode [ 475.607936][T21079] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 475.920074][T21092] syz_tun: entered allmulticast mode [ 476.697546][T21119] syzkaller0: entered promiscuous mode [ 476.722510][T21119] syzkaller0: entered allmulticast mode [ 477.172699][T21132] netlink: 'syz.1.3762': attribute type 1 has an invalid length. [ 477.189715][T21134] dvmrp0: entered allmulticast mode [ 477.239427][T21132] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 477.260286][T21129] dvmrp1: entered allmulticast mode [ 477.436809][T21139] syzkaller0: entered promiscuous mode [ 477.461421][T21139] syzkaller0: entered allmulticast mode [ 477.870573][T21150] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 478.904381][T21181] __nla_validate_parse: 4 callbacks suppressed [ 478.904399][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3777'. [ 478.963616][T21183] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3778'. [ 478.973071][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 479.057815][T21186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3779'. [ 479.299338][T21193] netlink: 'syz.2.3783': attribute type 58 has an invalid length. [ 479.310408][T21193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3783'. [ 479.702284][T21196] tipc: Enabled bearer , priority 0 [ 479.719468][T21196] syzkaller0: entered promiscuous mode [ 479.738121][T21196] syzkaller0: entered allmulticast mode [ 479.827474][T21195] tipc: Resetting bearer [ 479.858379][T21195] tipc: Disabling bearer [ 479.895635][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3788'. [ 480.086892][T21225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3792'. [ 480.115283][T21232] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3792'. [ 480.150648][T21233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 480.364790][T21246] wg2 speed is unknown, defaulting to 1000 [ 480.388154][T21246] xfrm0 speed is unknown, defaulting to 1000 [ 480.557787][T21251] syzkaller0: entered promiscuous mode [ 480.585904][T21251] syzkaller0: entered allmulticast mode [ 480.616023][T21253] pimreg: entered allmulticast mode [ 480.631858][T21249] syz_tun: left allmulticast mode [ 480.914694][T21246] lo speed is unknown, defaulting to 1000 [ 480.965925][T21260] sctp: [Deprecated]: syz.4.3802 (pid 21260) Use of int in max_burst socket option. [ 480.965925][T21260] Use struct sctp_assoc_value instead [ 481.023269][T21248] pimreg: left allmulticast mode [ 481.034276][T21261] sctp: [Deprecated]: syz.4.3802 (pid 21261) Use of int in max_burst socket option. [ 481.034276][T21261] Use struct sctp_assoc_value instead [ 481.118877][T21247] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 481.242002][T21279] SET target dimension over the limit! [ 481.672549][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3806'. [ 482.397431][T21323] netdevsim netdevsim2 €Â: renamed from netdevsim0 [ 482.758626][T21345] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.902406][T21347] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 482.912432][T21347] netlink: 'syz.4.3824': attribute type 2 has an invalid length. [ 482.932388][T21349] tipc: Enabling of bearer rejected, already enabled [ 483.578831][T21388] xt_time: unknown flags 0x4 [ 483.993003][T21396] netlink: 'syz.0.3838': attribute type 32 has an invalid length. [ 484.006412][T21402] erspan0: entered promiscuous mode [ 484.017837][T21402] erspan0: entered allmulticast mode [ 484.076136][T21396] __nla_validate_parse: 6 callbacks suppressed [ 484.076156][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 484.105743][T21413] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3846'. [ 484.116183][T21413] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3846'. [ 484.158351][T21396] bond5: option coupled_control: invalid value (10) [ 484.186754][T21401] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3842'. [ 484.200552][T21396] bond5 (unregistering): Released all slaves [ 484.207260][T21417] x_tables: unsorted entry at hook 2 [ 484.369852][T21425] netlink: 644 bytes leftover after parsing attributes in process `syz.5.3848'. [ 484.386142][T21424] xt_TPROXY: Can be used only with -p tcp or -p udp [ 484.687903][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3851'. [ 484.697409][ T57] IPVS: starting estimator thread 0... [ 484.791506][T21435] IPVS: using max 27 ests per chain, 64800 per kthread [ 484.823740][T21444] netlink: 'syz.5.3853': attribute type 1 has an invalid length. [ 484.850154][T21444] netlink: 'syz.5.3853': attribute type 2 has an invalid length. [ 484.978292][T21453] bridge0: entered allmulticast mode [ 485.008429][T21452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3856'. [ 485.018816][T21452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3856'. [ 485.132742][T21458] netlink: 'syz.2.3857': attribute type 1 has an invalid length. [ 485.184939][T21458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 485.216407][T21458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3857'. [ 485.236947][T21468] sctp: [Deprecated]: syz.1.3858 (pid 21468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.236947][T21468] Use struct sctp_sack_info instead [ 485.267121][T21458] bond6: entered promiscuous mode [ 485.287601][T21467] dummy0: left allmulticast mode [ 485.298930][T21467] bond3: (slave dummy0): Releasing active interface [ 485.316488][T21467] bond6: (slave dummy0): making interface the new active one [ 485.324813][T21467] dummy0: entered promiscuous mode [ 485.332786][T21467] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 485.475044][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3862'. [ 486.712766][ C0] TC_ACT_REPEAT abuse ? [ 487.290059][T21529] openvswitch: netlink: Multiple metadata blocks provided [ 487.358033][T21501] wg2 speed is unknown, defaulting to 1000 [ 487.366856][T21501] xfrm0 speed is unknown, defaulting to 1000 [ 487.436723][T21534] ip6tnl4: entered allmulticast mode [ 487.470070][T13196] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 487.487304][T13196] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 487.497713][T14363] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 487.559926][T21539] netlink: 'syz.5.3876': attribute type 1 has an invalid length. [ 487.792803][T21541] veth9: entered allmulticast mode [ 487.822844][T21541] bond3: (slave veth9): Enslaving as an active interface with a down link [ 487.885037][T21539] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 487.912920][T21501] lo speed is unknown, defaulting to 1000 [ 488.171952][T21563] batadv_slave_1: entered promiscuous mode [ 488.216030][T21563] syzkaller1: entered promiscuous mode [ 488.222388][T21563] syzkaller1: entered allmulticast mode [ 488.231498][T14363] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 488.471255][T14363] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 488.676412][T21583] xt_TCPMSS: Only works on TCP SYN packets [ 488.795320][T21585] netlink: 'syz.5.3890': attribute type 1 has an invalid length. [ 488.890490][T21585] bond4: entered promiscuous mode [ 488.902868][T21585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.948615][T21592] bond4: (slave bridge0): making interface the new active one [ 488.957339][T21592] bridge0: entered promiscuous mode [ 488.965691][T21592] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 489.155195][T21605] netlink: 'syz.5.3896': attribute type 1 has an invalid length. [ 489.176387][T21605] netlink: 'syz.5.3896': attribute type 1 has an invalid length. [ 489.302752][T21617] __nla_validate_parse: 5 callbacks suppressed [ 489.302772][T21617] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3899'. [ 489.318932][T21619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3900'. [ 489.360042][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3900'. [ 489.386868][T21620] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3900'. [ 489.416429][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 489.425978][T21620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3900'. [ 489.907495][T21646] syzkaller0: entered promiscuous mode [ 489.920590][T21646] syzkaller0: entered allmulticast mode [ 491.197931][ C1] TC_ACT_REPEAT abuse ? [ 491.756381][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 492.738305][T21712] netlink: 'syz.5.3916': attribute type 2 has an invalid length. [ 493.071906][T21720] sctp: [Deprecated]: syz.2.3920 (pid 21720) Use of int in max_burst socket option deprecated. [ 493.071906][T21720] Use struct sctp_assoc_value instead [ 493.092748][T21727] netlink: 'syz.0.3918': attribute type 1 has an invalid length. [ 493.130748][T21720] netlink: 'syz.2.3920': attribute type 1 has an invalid length. [ 493.236901][T21727] bond5: entered promiscuous mode [ 493.259214][T21733] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 493.311992][T21727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 493.478509][T21720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 493.599791][T21729] bond7: (slave veth7): Enslaving as an active interface with a down link [ 493.800095][T21735] vlan5: entered allmulticast mode [ 493.807604][T21735] bond5: entered allmulticast mode [ 493.825375][T21739] bond6: (slave dummy0): Releasing active interface [ 493.833535][T21739] dummy0: left promiscuous mode [ 493.857498][T21739] bond7: (slave dummy0): making interface the new active one [ 493.867107][T21739] dummy0: entered promiscuous mode [ 493.873888][T21739] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 493.966505][T21746] bond5: (slave bridge6): making interface the new active one [ 493.976290][T21746] bridge6: entered promiscuous mode [ 494.030157][T21746] bridge6: entered allmulticast mode [ 494.044553][T21746] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 494.252564][T21770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3929'. [ 494.273378][T21770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3929'. [ 494.418271][T21788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3933'. [ 494.526008][T21791] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3934'. [ 494.587691][T21794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3935'. [ 494.613577][T21793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3935'. [ 494.843947][T21803] netlink: 'syz.4.3939': attribute type 1 has an invalid length. [ 494.860562][T21803] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3939'. [ 494.894496][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3939'. [ 494.934178][T21803] nbd: must specify a device to reconfigure [ 495.071778][T21806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.225661][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 495.240344][T21816] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 495.253636][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3945'. [ 495.282174][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 495.546644][T21831] netlink: 'syz.5.3949': attribute type 1 has an invalid length. [ 495.584430][T21831] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.901983][ C0] TC_ACT_REPEAT abuse ? [ 495.992747][ T5340] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 496.005730][ C0] TC_ACT_REPEAT abuse ? [ 496.013150][T21857] netlink: 'syz.5.3955': attribute type 13 has an invalid length. [ 496.042096][ T5340] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 496.089065][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3954'. [ 496.238846][T21820] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 496.248159][T21860] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.292196][T21865] ip6gre1: entered promiscuous mode [ 496.297745][T21865] ip6gre1: entered allmulticast mode [ 496.303500][ C0] TC_ACT_REPEAT abuse ? [ 496.608882][T21885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.873164][ C0] TC_ACT_REPEAT abuse ? [ 496.940409][T21900] syzkaller0: entered promiscuous mode [ 496.946913][T21900] syzkaller0: entered allmulticast mode [ 497.108731][T21909] wg2 speed is unknown, defaulting to 1000 [ 497.116981][T21909] xfrm0 speed is unknown, defaulting to 1000 [ 497.146921][T21911] pim6reg: entered allmulticast mode [ 497.156089][T21911] pim6reg: left allmulticast mode [ 497.236073][T21914] macsec0: entered promiscuous mode [ 497.253172][T21914] veth1_macvtap: left promiscuous mode [ 497.433247][T21914] macsec0 (unregistering): left promiscuous mode [ 497.448592][T21909] lo speed is unknown, defaulting to 1000 [ 497.924401][T21939] netlink: 'syz.1.3980': attribute type 83 has an invalid length. [ 498.542739][T21952] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 498.929153][T21977] syzkaller0: entered promiscuous mode [ 498.943139][T21977] syzkaller0: entered allmulticast mode [ 499.024799][T21972] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 499.798331][T22029] netlink: 'syz.1.4003': attribute type 1 has an invalid length. [ 500.115861][T22043] __nla_validate_parse: 13 callbacks suppressed [ 500.115881][T22043] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4006'. [ 500.150960][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 500.218110][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4008'. [ 500.239546][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4007'. [ 500.352013][T22058] netlink: 'syz.1.4011': attribute type 1 has an invalid length. [ 500.508243][T22058] 8021q: adding VLAN 0 to HW filter on device bond10 [ 500.554223][T22059] dummy0: left promiscuous mode [ 500.589707][T22059] bond10: (slave dummy0): Enslaving as a backup interface with an up link [ 500.643960][ T57] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 500.703618][T22077] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4015'. [ 500.722526][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4014'. [ 500.734474][T22077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4015'. [ 500.756830][T22072] veth0_virt_wifi: mtu less than device minimum [ 500.812527][ T155] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 501.137945][T22041] wg2 speed is unknown, defaulting to 1000 [ 501.266016][T22041] xfrm0 speed is unknown, defaulting to 1000 [ 501.433240][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 501.451538][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.859857][T22144] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.947644][T22128] wg2 speed is unknown, defaulting to 1000 [ 502.418905][T22128] xfrm0 speed is unknown, defaulting to 1000 [ 502.429676][T22173] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 502.492712][T22041] lo speed is unknown, defaulting to 1000 [ 502.704868][T22128] lo speed is unknown, defaulting to 1000 [ 503.279731][T22202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4045'. [ 503.355054][T22204] netlink: 'syz.4.4046': attribute type 1 has an invalid length. [ 503.405225][T22204] bond5: option mode: invalid value (8) [ 503.416625][T22204] bond5 (unregistering): Released all slaves [ 503.447868][T22211] netlink: 'syz.2.4047': attribute type 7 has an invalid length. [ 503.595518][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'. [ 503.632308][T22210] netlink: 'syz.1.4048': attribute type 83 has an invalid length. [ 504.172569][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4055'. [ 504.193510][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4055'. [ 504.226535][T22234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.914168][T22259] tipc: Enabled bearer , priority 0 [ 506.925918][T22257] syzkaller0: entered promiscuous mode [ 506.936495][T22257] syzkaller0: entered allmulticast mode [ 507.041168][T22273] __nla_validate_parse: 1 callbacks suppressed [ 507.041189][T22273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4062'. [ 507.169135][T22267] tipc: Resetting bearer [ 507.237956][T22282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4063'. [ 507.238342][T22267] tipc: Disabling bearer [ 507.372203][ T155] dummy0: left promiscuous mode [ 507.379986][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4061'. [ 507.798590][T22314] IPVS: nq: FWM 3 0x00000003 - no destination available [ 507.872530][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4070'. [ 507.907611][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4070'. [ 507.922214][T22324] netlink: 'syz.2.4071': attribute type 2 has an invalid length. [ 507.946985][T22325] netlink: 'syz.4.4069': attribute type 8 has an invalid length. [ 508.130929][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.413298][T22345] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 508.454163][T22345] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 508.538333][T22345] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 508.617317][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'. [ 508.673950][T22345] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 508.836060][T22359] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4081'. [ 509.048472][T22341] wg2 speed is unknown, defaulting to 1000 [ 509.075397][T22341] xfrm0 speed is unknown, defaulting to 1000 [ 509.182768][T22363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4083'. [ 509.225278][T22363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4083'. [ 509.408280][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4085'. [ 509.635599][T22384] sctp: [Deprecated]: syz.1.4087 (pid 22384) Use of int in max_burst socket option deprecated. [ 509.635599][T22384] Use struct sctp_assoc_value instead [ 509.663907][T22380] netlink: 'syz.1.4087': attribute type 1 has an invalid length. [ 509.673458][T22365] netlink: 'syz.0.4078': attribute type 1 has an invalid length. [ 511.663297][T22341] lo speed is unknown, defaulting to 1000 [ 511.665225][T22380] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 512.715229][T22440] __nla_validate_parse: 2 callbacks suppressed [ 512.715249][T22440] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4103'. [ 512.749242][T22440] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 512.759209][T22440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 512.937642][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4104'. [ 512.990050][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4106'. [ 513.059908][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4108'. [ 513.071388][T22457] §: renamed from sit0 (while UP) [ 513.300435][T22471] 0: reclassify loop, rule prio 0, protocol 03 [ 513.321536][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.329480][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.372659][ T5340] ------------[ cut here ]------------ [ 513.379299][ T5340] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 513.389261][ T5340] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:3/5340 [ 513.400200][ T5340] Modules linked in: [ 513.405285][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 513.414738][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.424889][ T5340] Workqueue: mld mld_ifc_work [ 513.429794][ T5340] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 513.436142][ T5340] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 513.455819][ T5340] RSP: 0018:ffffc900035be738 EFLAGS: 00010246 [ 513.461982][ T5340] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 513.469990][ T5340] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906955d0 [ 513.478047][ T5340] RBP: ffff8880442f0f40 R08: 0000000000000000 R09: 0000000000000000 [ 513.486086][ T5340] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880753bc8e8 [ 513.494157][ T5340] R13: dffffc0000000000 R14: ffffffff906955d0 R15: ffff8880442f3258 [ 513.502196][ T5340] FS: 0000000000000000(0000) GS:ffff888124f4a000(0000) knlGS:0000000000000000 [ 513.511215][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.517841][ T5340] CR2: 000000110c38c1f2 CR3: 000000007f80e000 CR4: 00000000003526f0 [ 513.525994][ T5340] Call Trace: [ 513.529312][ T5340] [ 513.532346][ T5340] rate_control_send_low+0x1a7/0x7b0 [ 513.537683][ T5340] ? __lock_acquire+0x683/0x2cf0 [ 513.542819][ T5340] rate_control_get_rate+0x20b/0x5d0 [ 513.548168][ T5340] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 513.554011][ T5340] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 513.560138][ T5340] ? __asan_memcpy+0x40/0x70 [ 513.564907][ T5340] invoke_tx_handlers_late+0xb5/0x1830 [ 513.570427][ T5340] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 513.576436][ T5340] ieee80211_tx_dequeue+0x3fb6/0x55b0 [ 513.581965][ T5340] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 513.587748][ T5340] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 513.593231][ T5340] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.598316][ T5340] ? ieee80211_queue_skb+0x16dd/0x22e0 [ 513.603889][ T5340] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 513.609977][ T5340] ieee80211_queue_skb+0x1918/0x22e0 [ 513.615415][ T5340] ieee80211_tx+0x2c2/0x4b0 [ 513.619968][ T5340] ? __pfx_ieee80211_tx+0x10/0x10 [ 513.625123][ T5340] ? ieee80211_xmit+0x2e5/0x3c0 [ 513.630030][ T5340] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 513.636189][ T5340] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 513.642492][ T5340] ? worker_thread+0xa47/0xfb0 [ 513.647352][ T5340] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 513.653885][ T5340] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 513.660189][ T5340] ieee80211_subif_start_xmit+0xf1/0x570 [ 513.665970][ T5340] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 513.672351][ T5340] ? __pfx_netif_skb_features+0x10/0x10 [ 513.678044][ T5340] dev_hard_start_xmit+0x2cd/0x830 [ 513.683258][ T5340] __dev_queue_xmit+0x14c0/0x3820 [ 513.688330][ T5340] ? __lock_acquire+0x683/0x2cf0 [ 513.693392][ T5340] ? __dev_queue_xmit+0x29b/0x3820 [ 513.698546][ T5340] ? ___neigh_create+0x1cd2/0x22b0 [ 513.703801][ T5340] ? __pfx___dev_queue_xmit+0x10/0x10 [ 513.709246][ T5340] ? neigh_resolve_output+0x428/0x720 [ 513.714699][ T5340] ? eth_header+0x11b/0x200 [ 513.719326][ T5340] ? __asan_memcpy+0x40/0x70 [ 513.724029][ T5340] ? ip6_output+0x11e/0x540 [ 513.728654][ T5340] ip6_output+0x337/0x540 [ 513.733073][ T5340] ? __pfx_ip6_output+0x10/0x10 [ 513.737981][ T5340] NF_HOOK+0x177/0x4f0 [ 513.742137][ T5340] ? __pfx_NF_HOOK+0x10/0x10 [ 513.746796][ T5340] ? __pfx_dst_output+0x10/0x10 [ 513.751817][ T5340] ? __local_bh_enable_ip+0xd0/0x130 [ 513.757167][ T5340] ? icmp6_dst_alloc+0x39b/0x430 [ 513.762236][ T5340] ? icmp6_dst_alloc+0x39b/0x430 [ 513.767223][ T5340] mld_sendpack+0x890/0xe10 [ 513.771815][ T5340] ? mld_sendpack+0x206/0xe10 [ 513.776531][ T5340] ? __pfx_mld_sendpack+0x10/0x10 [ 513.781680][ T5340] mld_ifc_work+0x842/0xd60 [ 513.786266][ T5340] ? process_scheduled_works+0xa20/0x14e0 [ 513.792091][ T5340] process_scheduled_works+0xa8e/0x14e0 [ 513.797712][ T5340] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.803775][ T5340] ? assign_work+0x3cf/0x5d0 [ 513.808496][ T5340] worker_thread+0xa47/0xfb0 [ 513.813177][ T5340] ? __kthread_parkme+0x71/0x1f0 [ 513.818200][ T5340] kthread+0x388/0x470 [ 513.822377][ T5340] ? __pfx_worker_thread+0x10/0x10 [ 513.827544][ T5340] ? __pfx_kthread+0x10/0x10 [ 513.832234][ T5340] ret_from_fork+0x514/0xb70 [ 513.836923][ T5340] ? __pfx_ret_from_fork+0x10/0x10 [ 513.842115][ T5340] ? __switch_to+0xc89/0x1420 [ 513.846840][ T5340] ? __pfx_kthread+0x10/0x10 [ 513.851510][ T5340] ret_from_fork_asm+0x1a/0x30 [ 513.856509][ T5340] [ 513.859581][ T5340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.866902][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 513.876293][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.886369][ T5340] Workqueue: mld mld_ifc_work [ 513.891082][ T5340] Call Trace: [ 513.894377][ T5340] [ 513.897330][ T5340] vpanic+0x56c/0xa60 [ 513.901368][ T5340] ? __pfx__printk+0x10/0x10 [ 513.905980][ T5340] ? __pfx_vpanic+0x10/0x10 [ 513.910504][ T5340] ? is_bpf_text_address+0x292/0x2b0 [ 513.915843][ T5340] ? is_bpf_text_address+0x26/0x2b0 [ 513.921106][ T5340] panic+0xc5/0xd0 [ 513.924850][ T5340] ? __pfx_panic+0x10/0x10 [ 513.929297][ T5340] ? ret_from_fork_asm+0x1a/0x30 [ 513.934261][ T5340] __warn+0x315/0x4c0 [ 513.938270][ T5340] ? __rate_control_send_low+0x60c/0x8a0 [ 513.943931][ T5340] ? __rate_control_send_low+0x60c/0x8a0 [ 513.949587][ T5340] __report_bug+0x276/0x570 [ 513.954214][ T5340] ? __rate_control_send_low+0x60c/0x8a0 [ 513.959891][ T5340] ? __pfx___report_bug+0x10/0x10 [ 513.964948][ T5340] ? unwind_next_frame+0x8f/0x2550 [ 513.970111][ T5340] ? unwind_next_frame+0x1baf/0x2550 [ 513.975418][ T5340] report_bug_entry+0x19a/0x290 [ 513.980296][ T5340] ? __rate_control_send_low+0x638/0x8a0 [ 513.985951][ T5340] ? __rate_control_send_low+0x63d/0x8a0 [ 513.991691][ T5340] handle_bug+0xce/0x200 [ 513.996038][ T5340] exc_invalid_op+0x1a/0x50 [ 514.000561][ T5340] asm_exc_invalid_op+0x1a/0x20 [ 514.005450][ T5340] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 514.011719][ T5340] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 514.031350][ T5340] RSP: 0018:ffffc900035be738 EFLAGS: 00010246 [ 514.037443][ T5340] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 514.045431][ T5340] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906955d0 [ 514.053415][ T5340] RBP: ffff8880442f0f40 R08: 0000000000000000 R09: 0000000000000000 [ 514.061409][ T5340] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880753bc8e8 [ 514.069411][ T5340] R13: dffffc0000000000 R14: ffffffff906955d0 R15: ffff8880442f3258 [ 514.077425][ T5340] ? __rate_control_send_low+0x600/0x8a0 [ 514.083108][ T5340] rate_control_send_low+0x1a7/0x7b0 [ 514.088419][ T5340] ? __lock_acquire+0x683/0x2cf0 [ 514.093388][ T5340] rate_control_get_rate+0x20b/0x5d0 [ 514.098711][ T5340] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 514.104404][ T5340] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 514.110500][ T5340] ? __asan_memcpy+0x40/0x70 [ 514.115120][ T5340] invoke_tx_handlers_late+0xb5/0x1830 [ 514.120616][ T5340] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 514.126546][ T5340] ieee80211_tx_dequeue+0x3fb6/0x55b0 [ 514.131993][ T5340] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 514.137745][ T5340] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.143130][ T5340] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.148172][ T5340] ? ieee80211_queue_skb+0x16dd/0x22e0 [ 514.153652][ T5340] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 514.159577][ T5340] ieee80211_queue_skb+0x1918/0x22e0 [ 514.164919][ T5340] ieee80211_tx+0x2c2/0x4b0 [ 514.169458][ T5340] ? __pfx_ieee80211_tx+0x10/0x10 [ 514.174543][ T5340] ? ieee80211_xmit+0x2e5/0x3c0 [ 514.179452][ T5340] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 514.185480][ T5340] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 514.191661][ T5340] ? worker_thread+0xa47/0xfb0 [ 514.196462][ T5340] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 514.202914][ T5340] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 514.209182][ T5340] ieee80211_subif_start_xmit+0xf1/0x570 [ 514.214861][ T5340] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 514.221141][ T5340] ? __pfx_netif_skb_features+0x10/0x10 [ 514.226728][ T5340] dev_hard_start_xmit+0x2cd/0x830 [ 514.231890][ T5340] __dev_queue_xmit+0x14c0/0x3820 [ 514.236935][ T5340] ? __lock_acquire+0x683/0x2cf0 [ 514.241927][ T5340] ? __dev_queue_xmit+0x29b/0x3820 [ 514.247059][ T5340] ? ___neigh_create+0x1cd2/0x22b0 [ 514.252191][ T5340] ? __pfx___dev_queue_xmit+0x10/0x10 [ 514.257586][ T5340] ? neigh_resolve_output+0x428/0x720 [ 514.262978][ T5340] ? eth_header+0x11b/0x200 [ 514.267511][ T5340] ? __asan_memcpy+0x40/0x70 [ 514.272138][ T5340] ? ip6_output+0x11e/0x540 [ 514.276659][ T5340] ip6_output+0x337/0x540 [ 514.281008][ T5340] ? __pfx_ip6_output+0x10/0x10 [ 514.285907][ T5340] NF_HOOK+0x177/0x4f0 [ 514.289991][ T5340] ? __pfx_NF_HOOK+0x10/0x10 [ 514.294598][ T5340] ? __pfx_dst_output+0x10/0x10 [ 514.299469][ T5340] ? __local_bh_enable_ip+0xd0/0x130 [ 514.304773][ T5340] ? icmp6_dst_alloc+0x39b/0x430 [ 514.309725][ T5340] ? icmp6_dst_alloc+0x39b/0x430 [ 514.314679][ T5340] mld_sendpack+0x890/0xe10 [ 514.319216][ T5340] ? mld_sendpack+0x206/0xe10 [ 514.323904][ T5340] ? __pfx_mld_sendpack+0x10/0x10 [ 514.328960][ T5340] mld_ifc_work+0x842/0xd60 [ 514.333496][ T5340] ? process_scheduled_works+0xa20/0x14e0 [ 514.339230][ T5340] process_scheduled_works+0xa8e/0x14e0 [ 514.344814][ T5340] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.350816][ T5340] ? assign_work+0x3cf/0x5d0 [ 514.355426][ T5340] worker_thread+0xa47/0xfb0 [ 514.360045][ T5340] ? __kthread_parkme+0x71/0x1f0 [ 514.365011][ T5340] kthread+0x388/0x470 [ 514.369110][ T5340] ? __pfx_worker_thread+0x10/0x10 [ 514.374236][ T5340] ? __pfx_kthread+0x10/0x10 [ 514.378853][ T5340] ret_from_fork+0x514/0xb70 [ 514.383473][ T5340] ? __pfx_ret_from_fork+0x10/0x10 [ 514.388609][ T5340] ? __switch_to+0xc89/0x1420 [ 514.393316][ T5340] ? __pfx_kthread+0x10/0x10 [ 514.397920][ T5340] ret_from_fork_asm+0x1a/0x30 [ 514.402718][ T5340] [ 514.406352][ T5340] Kernel Offset: disabled [ 514.410688][ T5340] Rebooting in 86400 seconds..